@code-yeongyu/senpi 2026.10.26-2 → 2026.10.27-1

package/dist/bundle/chunks/{chunk-TQ67PB7U.js → chunk-TWHF52G6.js}

@@ -1,7 +1,7 @@
 import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url); { const __piWorkerThreads = require("node:worker_threads"); if (typeof __piWorkerThreads.markAsUncloneable !== "function") { __piWorkerThreads.markAsUncloneable = () => {}; } }
-import{McpMrtrError,bindMcpFormPresented,enums,isRecord,privateMcpForms,queuedForm,validValue,validateMrtrForm}from"./chunk-JPGT64RV.js";import{redactResolvedReferenceValues}from"./chunk-DLAY7CIU.js";import{getAgentDir}from"./chunk-7YO7VQZW.js";var McpError=class extends Error{constructor(kind,name,message,options={}){super(message),this.name=name,this.kind=kind,this.phase=options.phase,this.retriable=options.retriable,this.serverName=options.serverName,options.cause!==void 0&&Object.defineProperty(this,"cause",{configurable:!0,value:options.cause,writable:!1}),Object.setPrototypeOf(this,new.target.prototype)}},ConnectError=class extends McpError{constructor(message,options={}){super("connect","ConnectError",message,options)}};var ToolExecError=class extends McpError{constructor(message,options={}){super("tool_exec","ToolExecError",message,options)}},AuthError=class extends McpError{constructor(message,options={}){super("auth","AuthError",message,options)}},TimeoutError=class extends McpError{constructor(message,options={}){super("timeout","TimeoutError",message,options)}},SessionExpiredError=class extends McpError{constructor(message,options={}){super("session_expired","SessionExpiredError",message,options)}},RETRIABLE_STATUS_CODES=new Set([404,502,503]),RETRIABLE_NUMERIC_CODES=new Set([-32001]),RETRIABLE_TEXT=["econnrefused","connection refused","transport closed"];function isRetriableMcpError(error){if(error instanceof McpError&&error.retriable===!0||isMcpSessionExpiredError(error)||hasRetriableNumericSignal(error,new Set))return!0;let text=collectText(error,new Set).join(" ").toLowerCase();return RETRIABLE_TEXT.some(needle=>text.includes(needle))?!0:/\b(?:404|502|503)\b/.test(text)}function isMcpSessionExpiredError(error){if(hasSessionExpiredNumericSignal(error,new Set))return!0;let text=collectText(error,new Set).join(" ").toLowerCase();return/\b404\b/.test(text)||text.includes("-32000")&&text.includes("session")||text.includes("session expired")||text.includes("session not found")||text.includes("mcp-session-id")}function hasRetriableNumericSignal(value,seen){if(typeof value!="object"||value===null||seen.has(value))return!1;seen.add(value);let code=numberFromUnknown(getProperty(value,"code"));if(code!==void 0&&RETRIABLE_NUMERIC_CODES.has(code))return!0;let status=numberFromUnknown(getProperty(value,"status"));if(status!==void 0&&RETRIABLE_STATUS_CODES.has(status))return!0;let statusCode=numberFromUnknown(getProperty(value,"statusCode"));return statusCode!==void 0&&RETRIABLE_STATUS_CODES.has(statusCode)?!0:hasRetriableNumericSignal(getProperty(value,"response"),seen)||hasRetriableNumericSignal(getProperty(value,"cause"),seen)}function hasSessionExpiredNumericSignal(value,seen){if(typeof value!="object"||value===null||seen.has(value))return!1;seen.add(value);let code=numberFromUnknown(getProperty(value,"code"));if(code===-32001)return!0;if(code===-32e3){let message=getProperty(value,"message");if(typeof message=="string"&&message.toLowerCase().includes("session"))return!0}return numberFromUnknown(getProperty(value,"status"))===404||numberFromUnknown(getProperty(value,"statusCode"))===404?!0:hasSessionExpiredNumericSignal(getProperty(value,"response"),seen)||hasSessionExpiredNumericSignal(getProperty(value,"cause"),seen)}function collectText(value,seen){if(typeof value=="string")return[value];if(typeof value=="number")return[String(value)];if(typeof value!="object"||value===null)return[];if(seen.has(value))return[];seen.add(value);let parts=[];value instanceof Error&&parts.push(value.message,value.name);for(let key of["message","code","status","statusCode"]){let property=getProperty(value,key);(typeof property=="string"||typeof property=="number")&&parts.push(String(property))}return parts.push(...collectText(getProperty(value,"response"),seen)),parts.push(...collectText(getProperty(value,"cause"),seen)),parts}function numberFromUnknown(value){if(typeof value=="number")return value;if(typeof value!="string"||value.trim()==="")return;let parsed=Number(value);return Number.isFinite(parsed)?parsed:void 0}function getProperty(value,key){if(!(typeof value!="object"||value===null))return value[key]}import{chmodSync,closeSync,openSync,renameSync,rmSync,statSync}from"node:fs";var LOG_SINK_RETRY_MS=5e3,ROTATION_LOCK_STALE_MS=1e4;function errorCode(error){return typeof error=="object"&&error!==null&&"code"in error&&typeof error.code=="string"?error.code:void 0}function exceedsCap(filePath,incomingBytes,maxBytes){try{return statSync(filePath).size+incomingBytes>maxBytes}catch(error){if(errorCode(error)==="ENOENT")return!1;throw error}}function clearStaleLock(lockPath){try{Date.now()-statSync(lockPath).mtimeMs>ROTATION_LOCK_STALE_MS&&rmSync(lockPath,{force:!0})}catch(error){if(errorCode(error)!=="ENOENT")throw error}}function rotateLogIfNeeded(filePath,incomingBytes,maxBytes){if(!exceedsCap(filePath,incomingBytes,maxBytes))return;let lockPath=`${filePath}.rotate-lock`,lock;try{lock=openSync(lockPath,"wx",384)}catch(error){if(errorCode(error)!=="EEXIST")throw error;clearStaleLock(lockPath);return}try{if(!exceedsCap(filePath,incomingBytes,maxBytes))return;try{renameSync(filePath,`${filePath}.1`)}catch(error){if(errorCode(error)==="ENOENT")return;throw error}chmodSync(`${filePath}.1`,384)}finally{closeSync(lock),rmSync(lockPath,{force:!0})}}import{closeSync as closeSync3,fchmodSync,mkdirSync as mkdirSync2,openSync as openSync3,writeSync as writeSync2}from"node:fs";import{dirname,join as join2}from"node:path";import{createHmac,randomBytes,randomUUID}from"node:crypto";import{closeSync as closeSync2,constants,fstatSync,fsyncSync,linkSync,mkdirSync,openSync as openSync2,readSync,rmSync as rmSync2,writeSync}from"node:fs";import{join}from"node:path";var KEY_FILE="config-identity.key",KEY_BYTES=32,EPHEMERAL_PREFIX="ephemeral:",processKey=randomBytes(KEY_BYTES),installationKeys=new Map,warnedPaths=new Set;function keyedIdentity(agentDir,payload){let key=installationKey(agentDir??getAgentDir());return key===void 0?`${EPHEMERAL_PREFIX}${hmac(processKey,payload)}`:hmac(key,payload)}function isEphemeralIdentity(identity){return identity?.startsWith(EPHEMERAL_PREFIX)===!0}function keyedFingerprint(value){return hmac(installationKey(getAgentDir())??processKey,value).slice(0,8)}function hmac(key,payload){return createHmac("sha256",key).update(payload).digest("hex")}function installationKey(agentDir){return installationKeys.has(agentDir)||installationKeys.set(agentDir,loadOrPublishKey(agentDir)),installationKeys.get(agentDir)}function loadOrPublishKey(agentDir){let path=join(agentDir,KEY_FILE),existing=readKey(path);return existing.kind==="valid"?existing.key:existing.kind==="missing"?publishKey(agentDir,path):void 0}function readKey(path){let fd;try{fd=openSync2(path,constants.O_RDONLY|(constants.O_NOFOLLOW??0))}catch(error){return isErrno(error,"ENOENT")?{kind:"missing"}:invalidKey(path,"cannot open safely","repair access and ensure it is a regular file, not a symlink")}try{let stat=fstatSync(fd);if(!stat.isFile())return invalidKey(path,"not a regular file","restore the original private key file");if(stat.size!==KEY_BYTES)return invalidKey(path,`wrong size (${stat.size} bytes)`,"restore the original 32-byte key from backup");if(process.platform!=="win32"){if(stat.uid!==process.getuid?.())return invalidKey(path,"wrong owner","chown the key file to your current user");if((stat.mode&511)!==384)return invalidKey(path,"wrong mode","chmod 600 the key file")}let key=Buffer.alloc(KEY_BYTES);return readSync(fd,key,0,KEY_BYTES,0)===KEY_BYTES?{kind:"valid",key}:invalidKey(path,"incomplete read","restore the original 32-byte key from backup")}finally{closeSync2(fd)}}function invalidKey(path,problem,repair){return warnedPaths.has(path)||(warnedPaths.add(path),console.warn(`MCP identity key ${path}: ${problem}; persistent catalog cache is disabled. To fix: ${repair}, then restart senpi. The file was left unchanged.`)),{kind:"invalid"}}function publishKey(agentDir,path){let temporary=`${path}.${process.pid}.${randomUUID()}.tmp`;try{mkdirSync(agentDir,{recursive:!0,mode:448});let key=randomBytes(KEY_BYTES),fd=openSync2(temporary,constants.O_CREAT|constants.O_EXCL|constants.O_WRONLY,384);try{writeSync(fd,key),fsyncSync(fd)}finally{closeSync2(fd)}return linkSync(temporary,path),syncDirectory(agentDir),key}catch(error){if(!isErrno(error,"EEXIST"))return;let published=readKey(path);return published.kind==="valid"?published.key:void 0}finally{rmSync2(temporary,{force:!0})}}function syncDirectory(directory){if(process.platform==="win32")return;let fd=openSync2(directory,constants.O_RDONLY);try{fsyncSync(fd)}finally{closeSync2(fd)}}function isErrno(error,code){return error instanceof Error&&"code"in error&&error.code===code}var DEFAULT_MAX_FILE_BYTES=1024*1024,MAX_RING_LINES=200,SENSITIVE_KEY_PATTERN=/(?:^|[_-])(?:api[_-]?key|key|token|secret|password|client_secret|auth|authorization)(?:$|[_-])/i,QUERY_SECRET_PATTERN=/([?&][^=\s&"'<>]*(?:key|token|secret|password|client_secret|auth)[^=\s&"'<>]*=)([^&\s"'<>]+)/gi,AUTHORIZATION_VALUE_PATTERN=/((?:"|')?\bAuthorization(?:"|')?\s*[:=]\s*(?:"|')?(?:[A-Za-z][A-Za-z0-9+.-]*\s+)?)(?!<redacted:)([^"',\s}\]&]+)/gi,BEARER_VALUE_PATTERN=/(\bBearer\s+)(?!<redacted:)([A-Za-z0-9._~+/=-]+)/gi,KEY_VALUE_PATTERN=/((?:"|')?[^"'\s:=,{}]*(?:api[_-]?key|key|token|secret|password|client_secret|auth)[^"'\s:=,{}]*(?:"|')?\s*[:=]\s*(?:"|')?)([^"',\s}\]&]+)/gi,MCP_LOG_LEVELS={emergency:{level:"emergency",severity:0},alert:{level:"alert",severity:1},critical:{level:"critical",severity:2},crit:{level:"critical",severity:2},error:{level:"error",severity:3},err:{level:"error",severity:3},warning:{level:"warning",severity:4},warn:{level:"warning",severity:4},notice:{level:"notice",severity:5},informational:{level:"info",severity:6},info:{level:"info",severity:6},debug:{level:"debug",severity:7}};function createMcpLogger(server,options={}){return new FileMcpLogger(server,options)}function getMcpLogDir(){return join2(getAgentDir(),"logs","mcp")}function fingerprintSecret(secret){return keyedFingerprint(secret)}function redactMcpLogText(text){return redactMcpLogTextWithContext(text,{seen:new WeakSet,secrets:new Set})}function redactMcpLogTextWithContext(text,context){return text.replace(AUTHORIZATION_VALUE_PATTERN,(_match,prefix,secret)=>`${prefix}${redactionForSecret(secret,context)}`).replace(BEARER_VALUE_PATTERN,(_match,prefix,secret)=>`${prefix}${redactionForSecret(secret,context)}`).replace(QUERY_SECRET_PATTERN,(_match,prefix,secret)=>`${prefix}${redactionForSecret(secret,context)}`).replace(KEY_VALUE_PATTERN,(match,prefix,secret)=>secret.startsWith("<redacted:")||/\bAuthorization\b/i.test(prefix)?match:`${prefix}${redactionForSecret(secret,context)}`)}function mapMcpLogLevel(level){return{...MCP_LOG_LEVELS[level]??MCP_LOG_LEVELS.info}}var FileMcpLogger=class{#server;#maxFileBytes;#ring=[];#fileSinkRetryAt=0;constructor(server,options){this.#server=server,this.#maxFileBytes=options.maxFileBytes??DEFAULT_MAX_FILE_BYTES,this.filePath=join2(options.logDir??getMcpLogDir(),`${sanitizeServerName(server)}.log`)}debug(message,data){this.log("debug",message,data)}info(message,data){this.log("info",message,data)}warn(message,data){this.log("warning",message,data)}error(message,data){this.log("error",message,data)}stderr(message,data){this.log("info",message,data,"stderr")}log(level,message,data,channel="server"){let line=this.#formatLine(level,message,data,channel);this.#pushRing(line),this.#writeFile(line)}getRingBuffer(){return[...this.#ring]}#formatLine(level,message,data,channel){let context={seen:new WeakSet,secrets:new Set},mapped=mapMcpLogLevel(level),redactedData=data===void 0?void 0:redactMcpLogData(data,context),entry={timestamp:new Date().toISOString(),server:this.#server,level:mapped.level,severity:mapped.severity,channel,message:redactMcpLogTextWithContext(message,context),data:redactedData};return redactResolvedReferenceValues(redactKnownSecrets(JSON.stringify(entry),context))}#pushRing(line){this.#ring.push(line),this.#ring.length>MAX_RING_LINES&&this.#ring.splice(0,this.#ring.length-MAX_RING_LINES)}#writeFile(line){if(!(Date.now()<this.#fileSinkRetryAt))try{mkdirSync2(dirname(this.filePath),{recursive:!0,mode:448});let bytes=Buffer.byteLength(`${line}
+import{McpMrtrError,bindMcpFormPresented,enums,isRecord,privateMcpForms,queuedForm,validValue,validateMrtrForm}from"./chunk-TV3UI63P.js";import{redactResolvedReferenceValues}from"./chunk-DLAY7CIU.js";import{getAgentDir}from"./chunk-7YO7VQZW.js";var McpError=class extends Error{constructor(kind,name,message,options={}){super(message),this.name=name,this.kind=kind,this.phase=options.phase,this.retriable=options.retriable,this.serverName=options.serverName,options.cause!==void 0&&Object.defineProperty(this,"cause",{configurable:!0,value:options.cause,writable:!1}),Object.setPrototypeOf(this,new.target.prototype)}},ConnectError=class extends McpError{constructor(message,options={}){super("connect","ConnectError",message,options)}};var ToolExecError=class extends McpError{constructor(message,options={}){super("tool_exec","ToolExecError",message,options)}},AuthError=class extends McpError{constructor(message,options={}){super("auth","AuthError",message,options)}},TimeoutError=class extends McpError{constructor(message,options={}){super("timeout","TimeoutError",message,options)}},SessionExpiredError=class extends McpError{constructor(message,options={}){super("session_expired","SessionExpiredError",message,options)}},RETRIABLE_STATUS_CODES=new Set([404,502,503]),RETRIABLE_NUMERIC_CODES=new Set([-32001]),RETRIABLE_TEXT=["econnrefused","connection refused","transport closed"];function isRetriableMcpError(error){if(error instanceof McpError&&error.retriable===!0||isMcpSessionExpiredError(error)||hasRetriableNumericSignal(error,new Set))return!0;let text=collectText(error,new Set).join(" ").toLowerCase();return RETRIABLE_TEXT.some(needle=>text.includes(needle))?!0:/\b(?:404|502|503)\b/.test(text)}function isMcpSessionExpiredError(error){if(hasSessionExpiredNumericSignal(error,new Set))return!0;let text=collectText(error,new Set).join(" ").toLowerCase();return/\b404\b/.test(text)||text.includes("-32000")&&text.includes("session")||text.includes("session expired")||text.includes("session not found")||text.includes("mcp-session-id")}function hasRetriableNumericSignal(value,seen){if(typeof value!="object"||value===null||seen.has(value))return!1;seen.add(value);let code=numberFromUnknown(getProperty(value,"code"));if(code!==void 0&&RETRIABLE_NUMERIC_CODES.has(code))return!0;let status=numberFromUnknown(getProperty(value,"status"));if(status!==void 0&&RETRIABLE_STATUS_CODES.has(status))return!0;let statusCode=numberFromUnknown(getProperty(value,"statusCode"));return statusCode!==void 0&&RETRIABLE_STATUS_CODES.has(statusCode)?!0:hasRetriableNumericSignal(getProperty(value,"response"),seen)||hasRetriableNumericSignal(getProperty(value,"cause"),seen)}function hasSessionExpiredNumericSignal(value,seen){if(typeof value!="object"||value===null||seen.has(value))return!1;seen.add(value);let code=numberFromUnknown(getProperty(value,"code"));if(code===-32001)return!0;if(code===-32e3){let message=getProperty(value,"message");if(typeof message=="string"&&message.toLowerCase().includes("session"))return!0}return numberFromUnknown(getProperty(value,"status"))===404||numberFromUnknown(getProperty(value,"statusCode"))===404?!0:hasSessionExpiredNumericSignal(getProperty(value,"response"),seen)||hasSessionExpiredNumericSignal(getProperty(value,"cause"),seen)}function collectText(value,seen){if(typeof value=="string")return[value];if(typeof value=="number")return[String(value)];if(typeof value!="object"||value===null)return[];if(seen.has(value))return[];seen.add(value);let parts=[];value instanceof Error&&parts.push(value.message,value.name);for(let key of["message","code","status","statusCode"]){let property=getProperty(value,key);(typeof property=="string"||typeof property=="number")&&parts.push(String(property))}return parts.push(...collectText(getProperty(value,"response"),seen)),parts.push(...collectText(getProperty(value,"cause"),seen)),parts}function numberFromUnknown(value){if(typeof value=="number")return value;if(typeof value!="string"||value.trim()==="")return;let parsed=Number(value);return Number.isFinite(parsed)?parsed:void 0}function getProperty(value,key){if(!(typeof value!="object"||value===null))return value[key]}import{chmodSync,closeSync,openSync,renameSync,rmSync,statSync}from"node:fs";var LOG_SINK_RETRY_MS=5e3,ROTATION_LOCK_STALE_MS=1e4;function errorCode(error){return typeof error=="object"&&error!==null&&"code"in error&&typeof error.code=="string"?error.code:void 0}function exceedsCap(filePath,incomingBytes,maxBytes){try{return statSync(filePath).size+incomingBytes>maxBytes}catch(error){if(errorCode(error)==="ENOENT")return!1;throw error}}function clearStaleLock(lockPath){try{Date.now()-statSync(lockPath).mtimeMs>ROTATION_LOCK_STALE_MS&&rmSync(lockPath,{force:!0})}catch(error){if(errorCode(error)!=="ENOENT")throw error}}function rotateLogIfNeeded(filePath,incomingBytes,maxBytes){if(!exceedsCap(filePath,incomingBytes,maxBytes))return;let lockPath=`${filePath}.rotate-lock`,lock;try{lock=openSync(lockPath,"wx",384)}catch(error){if(errorCode(error)!=="EEXIST")throw error;clearStaleLock(lockPath);return}try{if(!exceedsCap(filePath,incomingBytes,maxBytes))return;try{renameSync(filePath,`${filePath}.1`)}catch(error){if(errorCode(error)==="ENOENT")return;throw error}chmodSync(`${filePath}.1`,384)}finally{closeSync(lock),rmSync(lockPath,{force:!0})}}import{closeSync as closeSync3,fchmodSync,mkdirSync as mkdirSync2,openSync as openSync3,writeSync as writeSync2}from"node:fs";import{dirname,join as join2}from"node:path";import{createHmac,randomBytes,randomUUID}from"node:crypto";import{closeSync as closeSync2,constants,fstatSync,fsyncSync,linkSync,mkdirSync,openSync as openSync2,readSync,rmSync as rmSync2,writeSync}from"node:fs";import{join}from"node:path";var KEY_FILE="config-identity.key",KEY_BYTES=32,EPHEMERAL_PREFIX="ephemeral:",processKey=randomBytes(KEY_BYTES),installationKeys=new Map,warnedPaths=new Set;function keyedIdentity(agentDir,payload){let key=installationKey(agentDir??getAgentDir());return key===void 0?`${EPHEMERAL_PREFIX}${hmac(processKey,payload)}`:hmac(key,payload)}function isEphemeralIdentity(identity){return identity?.startsWith(EPHEMERAL_PREFIX)===!0}function keyedFingerprint(value){return hmac(installationKey(getAgentDir())??processKey,value).slice(0,8)}function hmac(key,payload){return createHmac("sha256",key).update(payload).digest("hex")}function installationKey(agentDir){return installationKeys.has(agentDir)||installationKeys.set(agentDir,loadOrPublishKey(agentDir)),installationKeys.get(agentDir)}function loadOrPublishKey(agentDir){let path=join(agentDir,KEY_FILE),existing=readKey(path);return existing.kind==="valid"?existing.key:existing.kind==="missing"?publishKey(agentDir,path):void 0}function readKey(path){let fd;try{fd=openSync2(path,constants.O_RDONLY|(constants.O_NOFOLLOW??0))}catch(error){return isErrno(error,"ENOENT")?{kind:"missing"}:invalidKey(path,"cannot open safely","repair access and ensure it is a regular file, not a symlink")}try{let stat=fstatSync(fd);if(!stat.isFile())return invalidKey(path,"not a regular file","restore the original private key file");if(stat.size!==KEY_BYTES)return invalidKey(path,`wrong size (${stat.size} bytes)`,"restore the original 32-byte key from backup");if(process.platform!=="win32"){if(stat.uid!==process.getuid?.())return invalidKey(path,"wrong owner","chown the key file to your current user");if((stat.mode&511)!==384)return invalidKey(path,"wrong mode","chmod 600 the key file")}let key=Buffer.alloc(KEY_BYTES);return readSync(fd,key,0,KEY_BYTES,0)===KEY_BYTES?{kind:"valid",key}:invalidKey(path,"incomplete read","restore the original 32-byte key from backup")}finally{closeSync2(fd)}}function invalidKey(path,problem,repair){return warnedPaths.has(path)||(warnedPaths.add(path),console.warn(`MCP identity key ${path}: ${problem}; persistent catalog cache is disabled. To fix: ${repair}, then restart senpi. The file was left unchanged.`)),{kind:"invalid"}}function publishKey(agentDir,path){let temporary=`${path}.${process.pid}.${randomUUID()}.tmp`;try{mkdirSync(agentDir,{recursive:!0,mode:448});let key=randomBytes(KEY_BYTES),fd=openSync2(temporary,constants.O_CREAT|constants.O_EXCL|constants.O_WRONLY,384);try{writeSync(fd,key),fsyncSync(fd)}finally{closeSync2(fd)}return linkSync(temporary,path),syncDirectory(agentDir),key}catch(error){if(!isErrno(error,"EEXIST"))return;let published=readKey(path);return published.kind==="valid"?published.key:void 0}finally{rmSync2(temporary,{force:!0})}}function syncDirectory(directory){if(process.platform==="win32")return;let fd=openSync2(directory,constants.O_RDONLY);try{fsyncSync(fd)}finally{closeSync2(fd)}}function isErrno(error,code){return error instanceof Error&&"code"in error&&error.code===code}var DEFAULT_MAX_FILE_BYTES=1024*1024,MAX_RING_LINES=200,SENSITIVE_KEY_PATTERN=/(?:^|[_-])(?:api[_-]?key|key|token|secret|password|client_secret|auth|authorization)(?:$|[_-])/i,QUERY_SECRET_PATTERN=/([?&][^=\s&"'<>]*(?:key|token|secret|password|client_secret|auth)[^=\s&"'<>]*=)([^&\s"'<>]+)/gi,AUTHORIZATION_VALUE_PATTERN=/((?:"|')?\bAuthorization(?:"|')?\s*[:=]\s*(?:"|')?(?:[A-Za-z][A-Za-z0-9+.-]*\s+)?)(?!<redacted:)([^"',\s}\]&]+)/gi,BEARER_VALUE_PATTERN=/(\bBearer\s+)(?!<redacted:)([A-Za-z0-9._~+/=-]+)/gi,KEY_VALUE_PATTERN=/((?:"|')?[^"'\s:=,{}]*(?:api[_-]?key|key|token|secret|password|client_secret|auth)[^"'\s:=,{}]*(?:"|')?\s*[:=]\s*(?:"|')?)([^"',\s}\]&]+)/gi,MCP_LOG_LEVELS={emergency:{level:"emergency",severity:0},alert:{level:"alert",severity:1},critical:{level:"critical",severity:2},crit:{level:"critical",severity:2},error:{level:"error",severity:3},err:{level:"error",severity:3},warning:{level:"warning",severity:4},warn:{level:"warning",severity:4},notice:{level:"notice",severity:5},informational:{level:"info",severity:6},info:{level:"info",severity:6},debug:{level:"debug",severity:7}};function createMcpLogger(server,options={}){return new FileMcpLogger(server,options)}function getMcpLogDir(){return join2(getAgentDir(),"logs","mcp")}function fingerprintSecret(secret){return keyedFingerprint(secret)}function redactMcpLogText(text){return redactMcpLogTextWithContext(text,{seen:new WeakSet,secrets:new Set})}function redactMcpLogTextWithContext(text,context){return text.replace(AUTHORIZATION_VALUE_PATTERN,(_match,prefix,secret)=>`${prefix}${redactionForSecret(secret,context)}`).replace(BEARER_VALUE_PATTERN,(_match,prefix,secret)=>`${prefix}${redactionForSecret(secret,context)}`).replace(QUERY_SECRET_PATTERN,(_match,prefix,secret)=>`${prefix}${redactionForSecret(secret,context)}`).replace(KEY_VALUE_PATTERN,(match,prefix,secret)=>secret.startsWith("<redacted:")||/\bAuthorization\b/i.test(prefix)?match:`${prefix}${redactionForSecret(secret,context)}`)}function mapMcpLogLevel(level){return{...MCP_LOG_LEVELS[level]??MCP_LOG_LEVELS.info}}var FileMcpLogger=class{#server;#maxFileBytes;#ring=[];#fileSinkRetryAt=0;constructor(server,options){this.#server=server,this.#maxFileBytes=options.maxFileBytes??DEFAULT_MAX_FILE_BYTES,this.filePath=join2(options.logDir??getMcpLogDir(),`${sanitizeServerName(server)}.log`)}debug(message,data){this.log("debug",message,data)}info(message,data){this.log("info",message,data)}warn(message,data){this.log("warning",message,data)}error(message,data){this.log("error",message,data)}stderr(message,data){this.log("info",message,data,"stderr")}log(level,message,data,channel="server"){let line=this.#formatLine(level,message,data,channel);this.#pushRing(line),this.#writeFile(line)}getRingBuffer(){return[...this.#ring]}#formatLine(level,message,data,channel){let context={seen:new WeakSet,secrets:new Set},mapped=mapMcpLogLevel(level),redactedData=data===void 0?void 0:redactMcpLogData(data,context),entry={timestamp:new Date().toISOString(),server:this.#server,level:mapped.level,severity:mapped.severity,channel,message:redactMcpLogTextWithContext(message,context),data:redactedData};return redactResolvedReferenceValues(redactKnownSecrets(JSON.stringify(entry),context))}#pushRing(line){this.#ring.push(line),this.#ring.length>MAX_RING_LINES&&this.#ring.splice(0,this.#ring.length-MAX_RING_LINES)}#writeFile(line){if(!(Date.now()<this.#fileSinkRetryAt))try{mkdirSync2(dirname(this.filePath),{recursive:!0,mode:448});let bytes=Buffer.byteLength(`${line}
 `);this.#maxFileBytes>0&&rotateLogIfNeeded(this.filePath,bytes,this.#maxFileBytes);let fd=openSync3(this.filePath,"a",384);try{writeSync2(fd,`${line}
-`),fchmodSync(fd,384)}finally{closeSync3(fd)}}catch{this.#fileSinkRetryAt=Date.now()+LOG_SINK_RETRY_MS,this.#pushRing(this.#formatLine("warning","file sink disabled after write failure",void 0,"file"))}}};function redactMcpLogData(value,context){return typeof value=="string"?redactMcpLogTextWithContext(value,context):typeof value=="bigint"?value.toString():typeof value!="object"||value===null?value:context.seen.has(value)?"[Circular]":(context.seen.add(value),value instanceof Error?redactMcpLogError(value,context):Array.isArray(value)?value.map(item=>redactMcpLogData(item,context)):redactMcpLogEntries(value,context))}function redactMcpLogError(error,context){let redacted=redactMcpLogEntries(error,context);return redacted.name=redactMcpLogTextWithContext(error.name,context),redacted.message=redactKnownSecrets(redactMcpLogTextWithContext(error.message,context),context),error.stack!==void 0&&(redacted.stack=redactKnownSecrets(redactMcpLogTextWithContext(error.stack,context),context)),redacted}function redactMcpLogEntries(value,context){let redacted={};for(let[key,item]of Object.entries(value))SENSITIVE_KEY_PATTERN.test(key)?redacted[key]=redactionForSecret(stringifySecretValue(item),context):redacted[key]=redactMcpLogData(item,context);return redacted}function stringifySecretValue(value){if(typeof value=="string")return value;if(typeof value=="number"||typeof value=="boolean"||typeof value=="bigint")return String(value);let seen=new WeakSet;return JSON.stringify(value,(_key,item)=>typeof item=="bigint"?item.toString():typeof item!="object"||item===null?item:seen.has(item)?"[Circular]":(seen.add(item),item))??String(value)}function redactionForSecret(secret,context){return secret.length>0&&!secret.startsWith("<redacted:")&&context.secrets.add(secret),redactionFor(secret)}function redactKnownSecrets(text,context){for(let secret of[...context.secrets].sort((left,right)=>right.length-left.length))text=text.split(secret).join(redactionFor(secret));return text}function redactionFor(secret){return`<redacted:${fingerprintSecret(secret)}>`}function sanitizeServerName(server){return server.replace(/[^A-Za-z0-9._-]+/g,"_")||"server"}var mcpElapsedClock={now:()=>performance.now(),schedule:(callback,ms)=>setTimeout(callback,ms),cancel:timer=>clearTimeout(timer)};function wrapAsync(scope,fn,sink){return async(...args)=>{try{await fn(...args)}catch(error){let caughtError=error instanceof Error?error:normalizeCaughtError(error);await reportMcpAsyncError(scope,caughtError,sink)}}}function safeTimer(scope,delayMs,fn,sink){let wrapped=wrapAsync(scope,fn,sink),timer=setTimeout(()=>{wrapped()},delayMs);return timer.unref(),timer}function safeInterval(scope,delayMs,fn,sink){let wrapped=wrapAsync(scope,fn,sink),timer=setInterval(()=>{wrapped()},delayMs);return timer.unref(),timer}function safeDelay(delayMs){return new Promise(resolve=>{setTimeout(resolve,delayMs)})}function safeOn(emitter,eventName,scope,listener,sink){let wrapped=wrapAsync(scope,listener,sink);return emitter.on(eventName,wrapped),()=>{emitter.off(eventName,wrapped)}}function safeEventBusOn(bus,channel,handler){return bus.on(channel,handler)}async function reportMcpAsyncError(scope,error,sink){let normalized=normalizeError(error);if(logError(scope,normalized,sink.logger),!!sink.notify)try{await sink.notify(`MCP ${scope} failed: ${normalized.message}`,normalized)}catch(notifyError){let caughtNotifyError=notifyError instanceof Error?notifyError:normalizeCaughtError(notifyError);logError(`${scope}.notify`,caughtNotifyError,sink.logger)}}function logError(scope,error,logger){try{logger.error(scope,serializeError(error))}catch{let redactedScope=redactMcpLogText(scope);console.error(`MCP ${redactedScope} logger failed; suppressed async error details`)}}function serializeError(error){let serialized={name:error.name,message:error.message};return error.stack&&(serialized.stack=error.stack),serialized}function normalizeError(error){return error instanceof Error?error:normalizeCaughtError(error)}function normalizeCaughtError(error){return typeof error=="string"?new Error(error):new Error(safeStringify(error))}function safeStringify(value){try{return JSON.stringify(value)??String(value)}catch{return String(value)}}function memoizeLoader(load){let loaded,loading;return()=>loaded!==void 0?Promise.resolve(loaded):(loading??=load().then(module=>(loaded=module,module)).finally(()=>{loading=void 0}),loading)}var loadMcpSdkClient=memoizeLoader(()=>import("./client-LOS6GSEW.js")),loadMcpSdkZodCompat=memoizeLoader(()=>import("./zod-compat-RJDXCU7S.js")),loadMcpSdkStdioTransport=memoizeLoader(()=>import("./stdio-YXDKKKQZ.js")),loadMcpSdkTypes=memoizeLoader(()=>import("./types-BJUEQ4II.js")),authModule,loadMcpSdkAuth=memoizeLoader(async()=>{let module=await import("./auth-C77UQA55.js");return authModule=module,module}),loadMcpSdkStreamableHttpTransport=memoizeLoader(async()=>{let[module]=await Promise.all([import("./streamableHttp-DKIBUWVY.js"),loadMcpSdkAuth()]);return module});function isMcpSdkUnauthorizedError(error){return authModule!==void 0&&error instanceof authModule.UnauthorizedError}import{stripVTControlCharacters}from"node:util";var own=(value,key)=>Object.hasOwn(value,key),inert=value=>stripVTControlCharacters(value).replace(/[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g,"");async function collectMrtrForm(presentation,serverLabel,params,signal){if(!validateMrtrForm(params.requestedSchema))throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");let schema=params.requestedSchema,abort=new AbortController,combined=AbortSignal.any([signal,presentation.signal,abort.signal]),opts={signal:combined,ephemeral:!0};bindMcpFormPresented(opts,presentation.presented);let heading=`MCP server: ${inert(serverLabel)}
+`),fchmodSync(fd,384)}finally{closeSync3(fd)}}catch{this.#fileSinkRetryAt=Date.now()+LOG_SINK_RETRY_MS,this.#pushRing(this.#formatLine("warning","file sink disabled after write failure",void 0,"file"))}}};function redactMcpLogData(value,context){return typeof value=="string"?redactMcpLogTextWithContext(value,context):typeof value=="bigint"?value.toString():typeof value!="object"||value===null?value:context.seen.has(value)?"[Circular]":(context.seen.add(value),value instanceof Error?redactMcpLogError(value,context):Array.isArray(value)?value.map(item=>redactMcpLogData(item,context)):redactMcpLogEntries(value,context))}function redactMcpLogError(error,context){let redacted=redactMcpLogEntries(error,context);return redacted.name=redactMcpLogTextWithContext(error.name,context),redacted.message=redactKnownSecrets(redactMcpLogTextWithContext(error.message,context),context),error.stack!==void 0&&(redacted.stack=redactKnownSecrets(redactMcpLogTextWithContext(error.stack,context),context)),redacted}function redactMcpLogEntries(value,context){let redacted={};for(let[key,item]of Object.entries(value))SENSITIVE_KEY_PATTERN.test(key)?redacted[key]=redactionForSecret(stringifySecretValue(item),context):redacted[key]=redactMcpLogData(item,context);return redacted}function stringifySecretValue(value){if(typeof value=="string")return value;if(typeof value=="number"||typeof value=="boolean"||typeof value=="bigint")return String(value);let seen=new WeakSet;return JSON.stringify(value,(_key,item)=>typeof item=="bigint"?item.toString():typeof item!="object"||item===null?item:seen.has(item)?"[Circular]":(seen.add(item),item))??String(value)}function redactionForSecret(secret,context){return secret.length>0&&!secret.startsWith("<redacted:")&&context.secrets.add(secret),redactionFor(secret)}function redactKnownSecrets(text,context){for(let secret of[...context.secrets].sort((left,right)=>right.length-left.length))text=text.split(secret).join(redactionFor(secret));return text}function redactionFor(secret){return`<redacted:${fingerprintSecret(secret)}>`}function sanitizeServerName(server){return server.replace(/[^A-Za-z0-9._-]+/g,"_")||"server"}var mcpElapsedClock={now:()=>performance.now(),schedule:(callback,ms)=>setTimeout(callback,ms),cancel:timer=>clearTimeout(timer)};function wrapAsync(scope,fn,sink){return async(...args)=>{try{await fn(...args)}catch(error){let caughtError=error instanceof Error?error:normalizeCaughtError(error);await reportMcpAsyncError(scope,caughtError,sink)}}}function safeTimer(scope,delayMs,fn,sink){let wrapped=wrapAsync(scope,fn,sink),timer=setTimeout(()=>{wrapped()},delayMs);return timer.unref(),timer}function safeInterval(scope,delayMs,fn,sink){let wrapped=wrapAsync(scope,fn,sink),timer=setInterval(()=>{wrapped()},delayMs);return timer.unref(),timer}function safeDelay(delayMs){return new Promise(resolve=>{setTimeout(resolve,delayMs)})}function safeOn(emitter,eventName,scope,listener,sink){let wrapped=wrapAsync(scope,listener,sink);return emitter.on(eventName,wrapped),()=>{emitter.off(eventName,wrapped)}}function safeEventBusOn(bus,channel,handler){return bus.on(channel,handler)}async function reportMcpAsyncError(scope,error,sink){let normalized=normalizeError(error);if(logError(scope,normalized,sink.logger),!!sink.notify)try{await sink.notify(`MCP ${scope} failed: ${normalized.message}`,normalized)}catch(notifyError){let caughtNotifyError=notifyError instanceof Error?notifyError:normalizeCaughtError(notifyError);logError(`${scope}.notify`,caughtNotifyError,sink.logger)}}function logError(scope,error,logger){try{logger.error(scope,serializeError(error))}catch{let redactedScope=redactMcpLogText(scope);console.error(`MCP ${redactedScope} logger failed; suppressed async error details`)}}function serializeError(error){let serialized={name:error.name,message:error.message};return error.stack&&(serialized.stack=error.stack),serialized}function normalizeError(error){return error instanceof Error?error:normalizeCaughtError(error)}function normalizeCaughtError(error){return typeof error=="string"?new Error(error):new Error(safeStringify(error))}function safeStringify(value){try{return JSON.stringify(value)??String(value)}catch{return String(value)}}function memoizeLoader(load){let loaded,loading;return()=>loaded!==void 0?Promise.resolve(loaded):(loading??=load().then(module=>(loaded=module,module)).finally(()=>{loading=void 0}),loading)}var loadMcpSdkClient=memoizeLoader(()=>import("./client-CBDPMWZJ.js")),loadMcpSdkZodCompat=memoizeLoader(()=>import("./zod-compat-RJDXCU7S.js")),loadMcpSdkStdioTransport=memoizeLoader(()=>import("./stdio-YXDKKKQZ.js")),loadMcpSdkTypes=memoizeLoader(()=>import("./types-BJUEQ4II.js")),loadMcpSdkProtocol=memoizeLoader(()=>import("./protocol-GLNWYI5G.js")),authModule,loadMcpSdkAuth=memoizeLoader(async()=>{let module=await import("./auth-C77UQA55.js");return authModule=module,module}),loadMcpSdkStreamableHttpTransport=memoizeLoader(async()=>{let[module]=await Promise.all([import("./streamableHttp-DKIBUWVY.js"),loadMcpSdkAuth()]);return module});function isMcpSdkUnauthorizedError(error){return authModule!==void 0&&error instanceof authModule.UnauthorizedError}import{stripVTControlCharacters}from"node:util";var own=(value,key)=>Object.hasOwn(value,key),inert=value=>stripVTControlCharacters(value).replace(/[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g,"");async function collectMrtrForm(presentation,serverLabel,params,signal){if(!validateMrtrForm(params.requestedSchema))throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");let schema=params.requestedSchema,abort=new AbortController,combined=AbortSignal.any([signal,presentation.signal,abort.signal]),opts={signal:combined,ephemeral:!0};bindMcpFormPresented(opts,presentation.presented);let heading=`MCP server: ${inert(serverLabel)}
 ${inert(params.message)}`,select=async(title,choices)=>{if(combined.aborted)return;let result=await presentation.ui.select(title,choices,opts);return combined.aborted?void 0:result},content=Object.create(null),finish=result=>(combined.aborted||presentation.admit?.(),result),required=new Set(schema.required??[]),entries=Object.entries(schema.properties),field=async(name,property)=>{let title=`${heading}
 ${inert(String(property.title??name))}${typeof property.description=="string"?`
 ${inert(property.description)}`:""}`;for(;;){let actions=["Enter value"];required.has(name)||actions.push("Leave unset"),own(property,"default")&&actions.push("Use default");let action="Enter value";if(actions.length>1){let chosen=await select(title,actions);if(chosen===void 0)return!1;action=chosen}if(action==="Leave unset")return delete content[name],!0;if(action==="Use default")return content[name]=structuredClone(property.default),!0;let value;if(property.type==="boolean"){let chosen=await select(title,["true","false"]);if(chosen===void 0)return!1;value=chosen==="true"}else if(property.type==="array"||enums(property)){let choices=property.type==="array"&&isRecord(property.items)?enums(property.items):enums(property);if(choices===void 0)return!1;let values=[];for(;;){let labels=choices.map((choice2,index2)=>`${index2+1}. ${inert(choice2.label)}${values.includes(choice2.value)?" [selected]":""}`);property.type==="array"&&labels.push("Done");let chosen=await select(title,labels);if(chosen===void 0)return!1;if(chosen==="Done"){value=values;break}let index=labels.indexOf(chosen),choice=choices[index];if(!choice)continue;if(property.type!=="array"){value=choice.value;break}let existing=values.indexOf(choice.value);existing>=0?values.splice(existing,1):values.push(choice.value)}}else{if(combined.aborted)return!1;let text=await presentation.ui.input(title,void 0,opts);if(text===void 0||combined.aborted)return!1;value=property.type==="number"||property.type==="integer"?text.trim()===""?NaN:Number(text):text}if(validValue(property,value))return content[name]=value,!0;if(await select(`${title}
@@ -9,5 +9,5 @@ Value does not satisfy this field.`,["Try again","Cancel"])!=="Try again")return
 `),action=await select(`${heading}
 Review
 ${review}`,["Submit","Edit field","Decline","Cancel"]);if(action==="Submit"&&!combined.aborted)return finish({action:"accept",content:structuredClone(content)});if(action!=="Edit field")return finish({action:action==="Decline"?"decline":"cancel"});let labels=entries.map(([name],index)=>`${index+1}. ${inert(name)}`),chosen=await select(`${heading}
-Edit field`,labels),entry=chosen===void 0?void 0:entries[labels.indexOf(chosen)];if(!entry||!await field(...entry))return finish({action:"cancel"})}}finally{bindMcpFormPresented(opts,void 0),abort.abort();for(let key of Object.keys(content))delete content[key]}}import{Buffer as Buffer2}from"node:buffer";var isRecord2=value=>typeof value=="object"&&value!==null&&!Array.isArray(value);function encodeMcpHeaderValue(value){return/^[\x09\x20-\x7e]*$/.test(value)&&value.trim()===value&&!(value.startsWith("=?base64?")&&value.endsWith("?="))?value:`=?base64?${Buffer2.from(value,"utf8").toString("base64")}?=`}function clearMcpParameterHeaders(headers){for(let name of[...headers.keys()])name.toLowerCase().startsWith("mcp-param-")&&headers.delete(name)}function parseParameterHeaders(schema){let headers=[],names=new Set,reason="",visit=(node,path)=>{if(Array.isArray(node))return node.every(child=>visit(child,void 0));if(!isRecord2(node))return!0;if(Object.hasOwn(node,"x-mcp-header")){let name=node["x-mcp-header"],type=node.type;if(path?.length?typeof name!="string"||!/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/.test(name)?reason="x-mcp-header must be a nonempty HTTP field-name token":names.has(name.toLowerCase())?reason="x-mcp-header names must be case-insensitively unique":type!=="string"&&type!=="integer"&&type!=="boolean"?reason="x-mcp-header type must be string, integer, or boolean":(names.add(name.toLowerCase()),headers.push({name,path,type})):reason="x-mcp-header must be on a properties-only path",reason)return!1}for(let[keyword,value]of Object.entries(node))if(["properties","patternProperties","$defs","definitions","dependentSchemas","dependencies"].includes(keyword)){if(!isRecord2(value))continue;for(let[key,child]of Object.entries(value)){let childPath=keyword==="properties"&&path!==void 0?[...path,key]:void 0;if(!visit(child,childPath))return!1}}else if(!["examples","default","const","enum"].includes(keyword)&&!visit(value,void 0))return!1;return!0};return visit(schema,[])?headers:reason}var ParameterHeaderValidationError=class extends Error{},ModernParameterHeaders=class{#tools=new Map;filterTools(tools,firstPage,warn){return firstPage&&this.#tools.clear(),tools.filter(tool=>{if(!isRecord2(tool)||typeof tool.name!="string")return!0;let headers=parseParameterHeaders(tool.inputSchema);return typeof headers=="string"?(this.#tools.delete(tool.name),warn(`Rejected MCP tool ${JSON.stringify(tool.name)}: ${headers}`),!1):(this.#tools.set(tool.name,headers),!0)})}append(headers,name,args){if(typeof name=="string")for(let parameter of this.#tools.get(name)??[]){let value=args;for(let key of parameter.path)value=isRecord2(value)&&Object.hasOwn(value,key)?value[key]:void 0;if(value===void 0)continue;if(!(parameter.type==="string"&&typeof value=="string"||parameter.type==="boolean"&&typeof value=="boolean"||parameter.type==="integer"&&typeof value=="number"&&Number.isSafeInteger(value)))throw new ParameterHeaderValidationError(`MCP tool ${JSON.stringify(name)} argument ${JSON.stringify(parameter.path)} must be ${parameter.type==="integer"?"a safe integer":`a ${parameter.type}`}`);headers.set(`Mcp-Param-${parameter.name}`,encodeMcpHeaderValue(String(value)))}}};var originOption=Symbol("mcp-request-origin"),origins=new WeakSet,aliases=new WeakMap,physicalMcpClient=client=>aliases.get(client)??client;function registerMcpClientAlias(alias,physical){aliases.set(alias,physical)}var legacyOperations=new WeakMap;function beginLegacyMcpOperation(client,origin,caller){let lifetime=new AbortController,operation={origin,signal:AbortSignal.any([origin.signal,lifetime.signal,...caller?[caller]:[]])},operations=legacyOperations.get(client);return operations||(operations=new Set,legacyOperations.set(client,operations)),operations.add(operation),()=>{operations.delete(operation),lifetime.abort(),operations.size===0&&legacyOperations.delete(client)}}function legacyMcpOperation(client){let operations=legacyOperations.get(client);if(operations&&operations.size>1)return"ambiguous";if(operations?.size!==1)return;let operation=operations.values().next().value;return operation&&!operation.signal.aborted&&operation.origin.isCurrent()?operation:void 0}function createMcpRequestOrigin(origin){return origins.add(origin),origin}function mcpRequestOptions(origin,options={}){return origin===void 0?options:{...options,[originOption]:origin}}function takeMcpRequestOrigin(options,client){let supplied=options,origin=supplied?.[originOption],{[originOption]:_origin,...sdkOptions}=supplied??{};if(origin!==void 0){if(!origins.has(origin)||!origin.isCurrent())throw new McpMrtrError("MCP_MRTR_CONTEXT_CHANGED");let candidate=origin.connection.client;if(physicalMcpClient(candidate)!==client)throw new McpMrtrError("MCP_MRTR_CONTEXT_CHANGED")}return{origin,sdkOptions}}var own2=(value,key)=>Object.hasOwn(value,key),byteSize=value=>Buffer.byteLength(JSON.stringify(value),"utf8");function parseInputs(result){if(!own2(result,"requestState")&&!own2(result,"inputRequests"))throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");if(own2(result,"requestState")&&typeof result.requestState!="string")throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");if(byteSize(result)>512*1024||typeof result.requestState=="string"&&Buffer.byteLength(result.requestState)>64*1024)throw new McpMrtrError("MCP_MRTR_INPUT_LIMIT");if(!own2(result,"inputRequests"))return;if(!isRecord(result.inputRequests))throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");let entries=Object.entries(result.inputRequests);if(entries.length>32)throw new McpMrtrError("MCP_MRTR_INPUT_LIMIT");for(let[,input]of entries)if(isRecord(input)&&["roots/list","sampling/createMessage"].includes(String(input.method)))throw new McpMrtrError("MCP_MRTR_UNSUPPORTED_INPUT");let inputs=new Map,checkStrings=value=>{if(typeof value=="string"&&Buffer.byteLength(value)>16*1024)throw new McpMrtrError("MCP_MRTR_INPUT_LIMIT");if(Array.isArray(value))for(let entry of value)checkStrings(entry);else if(isRecord(value))for(let[key,entry]of Object.entries(value))checkStrings(key),checkStrings(entry)};for(let[key,input]of entries){if(checkStrings(key),!isRecord(input)||input.method!=="elicitation/create"||!isRecord(input.params)||typeof input.params.message!="string")throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");let params=input.params;if(checkStrings(params),params.mode==="url")throw typeof params.url!="string"||typeof params.elicitationId!="string"?new McpMrtrError("MCP_MRTR_INVALID_INPUT"):new McpMrtrError("MCP_MRTR_UNSUPPORTED_INPUT");if(params.mode!==void 0&&params.mode!=="form")throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");if(isRecord(params.requestedSchema)&&isRecord(params.requestedSchema.properties)&&Object.keys(params.requestedSchema.properties).length>64)throw new McpMrtrError("MCP_MRTR_INPUT_LIMIT");if(!validateMrtrForm(params.requestedSchema))throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");inputs.set(key,input)}return inputs}var MAX_MCP_MRTR_ROUNDS=8,capableMethods=new Set(["tools/call","resources/read","prompts/get"]),capabilitiesKey="io.modelcontextprotocol/clientCapabilities",modernDispatchGuard=Symbol("mcp-modern-dispatch"),states=new WeakMap,isModernMcpClient=client=>states.get(physicalMcpClient(client))?.version!==void 0,legacyMcpFormsAdvertised=client=>states.get(physicalMcpClient(client))?.legacyFormEligible,own3=(value,key)=>Object.hasOwn(value,key),byteSize2=value=>Buffer.byteLength(JSON.stringify(value),"utf8");function getModernDispatchGuard(params){return isRecord(params)?params[modernDispatchGuard]:void 0}function installModernRequestAdapter(client,protocol,clock=mcpElapsedClock,readCredential=()=>{}){let sdkRequest=client.request.bind(client);states.set(client,protocol);let requestWithMrtr=async(request,schema,options)=>{if(request.method==="initialize")return sdkRequest(request,schema,options);let{origin,sdkOptions}=takeMcpRequestOrigin(options,client);if(protocol.version===void 0){let end=request.method==="tools/call"&&origin?beginLegacyMcpOperation(client,origin,sdkOptions.signal):void 0;try{return await sdkRequest(request,schema,sdkOptions)}finally{end?.()}}if(own3(request.params??{},"requestState")||own3(request.params??{},"inputResponses")||options?.task)throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");let params=structuredClone(request.params??{}),start=clock.now(),timeout=sdkOptions.timeout??6e4,duration=Math.min(sdkOptions.maxTotalTimeout??1/0,9*timeout+3e5),deadline=start+duration,operation=new AbortController,credential=readCredential(),authority,authorityCaptured=!1,controller=origin?.connection,generation=controller?.generation,presentationLost=origin?.presentation===void 0||origin.presentation.signal.aborted,consentSpent=0,continuation={},failure,stop=code=>{failure??=new McpMrtrError(code),operation.abort(failure)},onCallerAbort=()=>stop("MCP_MRTR_CANCELLED"),onOwnerAbort=()=>stop("MCP_MRTR_CONTEXT_CHANGED"),onPresentationLost=()=>{presentationLost=!0},check=()=>{if(clock.now()>=deadline&&stop("MCP_MRTR_TIMEOUT"),origin&&(!origin.isCurrent()||origin.signal.aborted||controller?.generation!==generation||controller?.state!=="connected")&&stop("MCP_MRTR_CONTEXT_CHANGED"),failure)throw failure},resolveAuthority=async()=>{if(check(),origin){await origin.privateForm?.synchronize?.();let snapshot=JSON.stringify(await interrupted(origin.resolveAuthority(operation.signal),operation.signal));authorityCaptured?authority!==snapshot&&stop("MCP_MRTR_CONTEXT_CHANGED"):(authority=snapshot,authorityCaptured=!0)}check()},off=controller?.onStateChange(()=>{try{check()}catch{}});sdkOptions.signal?.addEventListener("abort",onCallerAbort,{once:!0}),origin?.signal.addEventListener("abort",onOwnerAbort,{once:!0}),origin?.presentation?.signal.addEventListener("abort",onPresentationLost,{once:!0});let timer=clock.schedule(()=>stop("MCP_MRTR_TIMEOUT"),Math.max(0,duration));sdkOptions.signal?.aborted&&onCallerAbort(),origin?.signal.aborted&&onOwnerAbort();try{let{safeParse}=await interrupted(loadMcpSdkZodCompat(),operation.signal),{ResultSchema}=await interrupted(loadMcpSdkTypes(),operation.signal);for(let round=0;;round++){await resolveAuthority();let remaining=deadline-clock.now(),attempt=new AbortController,forward=()=>attempt.abort("MCP request canceled");operation.signal.addEventListener("abort",forward,{once:!0});let metadata=isRecord(params._meta)?params._meta:{},capabilities=origin?.privateFormsEnforced?origin.privateForm?.ready()?{elicitation:{}}:{}:!presentationLost&&origin?.presentation?{elicitation:{}}:{},outgoing={...params,...continuation,_meta:{...metadata,[capabilitiesKey]:capabilities},[modernDispatchGuard]:snapshot=>{if(check(),(snapshot??readCredential())!==credential)throw new McpMrtrError("MCP_MRTR_CONTEXT_CHANGED")}},result;try{check(),result=await sdkRequest({method:request.method,params:outgoing},ResultSchema,{...sdkOptions,signal:attempt.signal,timeout:Math.min(timeout,remaining),maxTotalTimeout:remaining,onprogress:sdkOptions.onprogress?progress=>{check(),!(!Number.isFinite(progress.progress)||progress.total!==void 0&&!Number.isFinite(progress.total))&&sdkOptions.onprogress?.({progress:progress.progress,...progress.total===void 0?{}:{total:progress.total}})}:void 0})}finally{operation.signal.removeEventListener("abort",forward)}check();let type=own3(result,"resultType")?result.resultType:"complete";if(type==="complete"){if(["requestState","inputRequests","inputResponses"].some(key=>own3(result,key)))throw new McpMrtrError("MCP_MRTR_INVALID_RESULT");let parsed=safeParse(schema,result);if(!parsed.success)throw new McpMrtrError("MCP_MRTR_INVALID_RESULT");return parsed.data}if(type!=="input_required"||!capableMethods.has(request.method))throw new McpMrtrError("MCP_MRTR_INVALID_RESULT");if(round>=MAX_MCP_MRTR_ROUNDS)throw new McpMrtrError("MCP_MRTR_ROUND_LIMIT");let inputs=parseInputs(result);if(continuation=own3(result,"requestState")?{requestState:result.requestState}:{},inputs){let responses=Object.create(null),cancelled=!1;for(let[key,input]of inputs){if(await resolveAuthority(),input.params.mode==="url")throw new McpMrtrError("MCP_MRTR_UNSUPPORTED_INPUT");if(cancelled)throw new McpMrtrError("MCP_MRTR_CANCELLED");if(consentSpent>=3e5)throw new McpMrtrError("MCP_MRTR_PROCESSING_UNAVAILABLE");if(origin?.privateFormsEnforced){let presenter=origin.privateForm,schema2=input.params.requestedSchema;if(!presenter?.ready()||!validateMrtrForm(schema2))throw new McpMrtrError("MCP_MRTR_PROCESSING_UNAVAILABLE");let began=clock.now(),outcome=await presenter.present({operationId:String(start),inputId:key,round,server:{label:origin.serverLabel,source:origin.serverSource??"user"},message:input.params.message,schema:schema2,operationSignal:operation.signal,presentationSignal:presenter.signal,deadlineMs:Math.max(0,3e5-consentSpent)});if(consentSpent+=clock.now()-began,check(),outcome.kind!=="result")throw new McpMrtrError(outcome.kind==="operation_aborted"?"MCP_MRTR_CANCELLED":"MCP_MRTR_PROCESSING_UNAVAILABLE");responses[key]=outcome.result,cancelled=outcome.result.action!=="accept"}else{if(presentationLost||!origin?.presentation)throw new McpMrtrError("MCP_MRTR_PROCESSING_UNAVAILABLE");{let consent=new AbortController,began=clock.now(),consentTimer=clock.schedule(()=>consent.abort(),Math.max(0,3e5-consentSpent)),signal=AbortSignal.any([operation.signal,origin.presentation.signal,consent.signal]),presented=!1;try{let answer=await interrupted(queuedForm(origin.binding,signal,()=>(presented=!0,collectMrtrForm(origin.presentation,origin.serverLabel,{message:input.params.message,requestedSchema:input.params.requestedSchema},signal))),operation.signal);if(check(),!presented)throw new McpMrtrError("MCP_MRTR_PROCESSING_UNAVAILABLE");responses[key]=answer,cancelled=answer.action!=="accept"}finally{consentSpent+=clock.now()-began,clock.cancel(consentTimer),consent.abort()}}}}if(byteSize2(responses)>512*1024)throw new McpMrtrError("MCP_MRTR_INPUT_LIMIT");continuation.inputResponses=responses}}}catch(error){if(check(),error instanceof McpMrtrError||error instanceof AuthError||error instanceof ParameterHeaderValidationError)throw error;let remoteCode=isRecord(error)&&typeof error.code=="number"?error.code:void 0;throw new McpMrtrError("MCP_MRTR_TRANSPORT_FAILED",remoteCode)}finally{continuation={},clock.cancel(timer),off?.(),sdkOptions.signal?.removeEventListener("abort",onCallerAbort),origin?.signal.removeEventListener("abort",onOwnerAbort),origin?.presentation?.signal.removeEventListener("abort",onPresentationLost)}};protocol.activateRequests=()=>{client.request=requestWithMrtr},(protocol.privateForms||protocol.version!==void 0)&&protocol.activateRequests()}function interrupted(work,signal){return new Promise((resolve,reject)=>{let onabort=()=>reject(signal.reason);signal.addEventListener("abort",onabort,{once:!0}),signal.aborted&&onabort(),work.then(resolve,reject).finally(()=>signal.removeEventListener("abort",onabort))})}var OAuthFlowError=class extends AuthError{constructor(oauthKind,message,options={}){super(message,options),this.name="OAuthFlowError",this.oauthKind=oauthKind,this.terminal=TERMINAL_KINDS.has(oauthKind)}},TERMINAL_KINDS=new Set(["s256_unsupported","needs_auth","invalid_grant","state_mismatch","expired_code","no_verifier","headless","missing_env"]),TERMINAL_OAUTH_CODES=new Set(["invalid_grant","invalid_token","invalid_client","unauthorized_client"]),TRANSIENT_OAUTH_CODES=new Set(["temporarily_unavailable","server_error","slow_down"]);function isInvalidGrant(error){let code=oauthErrorCode(error);if(code!==void 0)return TERMINAL_OAUTH_CODES.has(code);let text=errorText(error).toLowerCase();return text.includes("invalid_grant")||text.includes("invalid_token")}function isTransientTokenError(error){if(isInvalidGrant(error))return!1;let code=oauthErrorCode(error);if(code!==void 0&&TRANSIENT_OAUTH_CODES.has(code))return!0;let text=errorText(error).toLowerCase();return/\b(?:500|502|503|504)\b/.test(text)||text.includes("econnrefused")||text.includes("network")}function oauthErrorCode(error){if(typeof error!="object"||error===null)return;let code=error.errorCode;return typeof code=="string"?code:void 0}function errorText(error){return error instanceof Error?`${error.name} ${error.message}`:String(error)}var MAX_CAUSE_DEPTH=5;function isMcpNeedsAuthError(error,depth=0){return isMcpSdkUnauthorizedError(error)?!0:error instanceof OAuthFlowError?error.terminal:depth<MAX_CAUSE_DEPTH&&error!==null&&typeof error=="object"&&"cause"in error?isMcpNeedsAuthError(error.cause,depth+1):!1}var MCP_CLIENT_ELICITATION_CAPABILITY={elicitation:{}};function mcpClientCapabilities(elicitationEnabled=!0){return elicitationEnabled?MCP_CLIENT_ELICITATION_CAPABILITY:{}}var MCP_ELICITATION_TIMEOUT_MS=300*1e3,legacyUiProvider;async function rejectElicitation(){let{ErrorCode,McpError:McpError2}=await loadMcpSdkTypes();throw new McpError2(ErrorCode.InternalError,"Elicitation cannot be processed")}function legacyMcpFormEligible(provider,enabled){if(!enabled)return!1;if(provider?.eligible)return provider.eligible();let ui=provider?.(),binding=ui===void 0?void 0:privateMcpForms(ui);return binding===void 0||binding.capture()?.ready()===!0}async function rejectPrivateElicitation(){let{ErrorCode,McpError:McpError2}=await loadMcpSdkTypes();throw new McpError2(ErrorCode.InternalError,"Elicitation processing unavailable")}async function privateElicitation(client,params,signal,requestId,timeoutMs){let operation=legacyMcpOperation(client);if(operation==="ambiguous")return rejectPrivateElicitation();let presenter=operation?.origin.privateForm;if(!isRecord(params)||typeof params.message!="string"||params.mode!==void 0&&params.mode!=="form"||!operation||!presenter?.ready()||!validateMrtrForm(params.requestedSchema))return rejectPrivateElicitation();let outcome=await presenter.present({operationId:String(requestId),inputId:String(requestId),round:0,server:{label:operation.origin.serverLabel,source:operation.origin.serverSource??"user"},message:params.message,schema:params.requestedSchema,operationSignal:AbortSignal.any([operation.signal,signal]),presentationSignal:presenter.signal,deadlineMs:timeoutMs});return outcome.kind!=="result"||operation.signal.aborted||!operation.origin.isCurrent()?rejectPrivateElicitation():outcome.result}async function configureMcpElicitation(client,owner=legacyUiProvider,timeoutMs=MCP_ELICITATION_TIMEOUT_MS,elicitationEnabled=!0){if(!elicitationEnabled){let{ErrorCode,McpError:McpError2}=await loadMcpSdkTypes();client.fallbackRequestHandler=async request=>{if(request.method==="elicitation/create")return typeof owner=="function"&&owner.enforced?.()?rejectPrivateElicitation():rejectElicitation();throw new McpError2(ErrorCode.MethodNotFound,"Method not found")};return}let{ElicitRequestSchema}=await loadMcpSdkTypes();if(typeof owner=="function"&&owner.enforced?.()){client.setRequestHandler(ElicitRequestSchema.omit({params:!0}).passthrough(),(request,extra)=>privateElicitation(client,request.params,extra.signal,extra.requestId,timeoutMs));return}client.setRequestHandler(ElicitRequestSchema,async(request,extra)=>{let params=request.params;if(!("requestedSchema"in params))return rejectElicitation();let ui=typeof owner=="function"?owner():owner?.getMcpElicitationUi();return typeof owner=="function"&&owner.enforced?.()||ui!==void 0&&privateMcpForms(ui)!==void 0?privateElicitation(client,params,extra.signal,extra.requestId,timeoutMs):ui===void 0?rejectElicitation():await runElicitationForm(ui,params.message,params.requestedSchema,timeoutMs)})}async function runElicitationForm(ui,message,requestedSchema,timeoutMs=MCP_ELICITATION_TIMEOUT_MS){let timer,timeout=new Promise(resolve=>{timer=safeTimer("mcp.elicitation.timeout",timeoutMs,()=>resolve({action:"cancel"}),{logger:createMcpLogger("elicitation")})});try{return await Promise.race([collectForm(ui,message,requestedSchema),timeout])}finally{timer!==void 0&&clearTimeout(timer)}}async function collectForm(ui,message,requestedSchema){let content={},required=new Set(requestedSchema.required??[]);for(let[name,property]of Object.entries(requestedSchema.properties??{})){let title=`${message} - ${property.title??name}`;if(property.type==="boolean"){let picked=await ui.select(property.description?`${title}
+Edit field`,labels),entry=chosen===void 0?void 0:entries[labels.indexOf(chosen)];if(!entry||!await field(...entry))return finish({action:"cancel"})}}finally{bindMcpFormPresented(opts,void 0),abort.abort();for(let key of Object.keys(content))delete content[key]}}import{Buffer as Buffer2}from"node:buffer";var isRecord2=value=>typeof value=="object"&&value!==null&&!Array.isArray(value);function encodeMcpHeaderValue(value){return/^[\x09\x20-\x7e]*$/.test(value)&&value.trim()===value&&!(value.startsWith("=?base64?")&&value.endsWith("?="))?value:`=?base64?${Buffer2.from(value,"utf8").toString("base64")}?=`}function clearMcpParameterHeaders(headers){for(let name of[...headers.keys()])name.toLowerCase().startsWith("mcp-param-")&&headers.delete(name)}function parseParameterHeaders(schema){let headers=[],names=new Set,reason="",visit=(node,path)=>{if(Array.isArray(node))return node.every(child=>visit(child,void 0));if(!isRecord2(node))return!0;if(Object.hasOwn(node,"x-mcp-header")){let name=node["x-mcp-header"],type=node.type;if(path?.length?typeof name!="string"||!/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/.test(name)?reason="x-mcp-header must be a nonempty HTTP field-name token":names.has(name.toLowerCase())?reason="x-mcp-header names must be case-insensitively unique":type!=="string"&&type!=="integer"&&type!=="boolean"?reason="x-mcp-header type must be string, integer, or boolean":(names.add(name.toLowerCase()),headers.push({name,path,type})):reason="x-mcp-header must be on a properties-only path",reason)return!1}for(let[keyword,value]of Object.entries(node))if(["properties","patternProperties","$defs","definitions","dependentSchemas","dependencies"].includes(keyword)){if(!isRecord2(value))continue;for(let[key,child]of Object.entries(value)){let childPath=keyword==="properties"&&path!==void 0?[...path,key]:void 0;if(!visit(child,childPath))return!1}}else if(!["examples","default","const","enum"].includes(keyword)&&!visit(value,void 0))return!1;return!0};return visit(schema,[])?headers:reason}var ParameterHeaderValidationError=class extends Error{},ModernParameterHeaders=class{#tools=new Map;filterTools(tools,firstPage,warn){return firstPage&&this.#tools.clear(),tools.filter(tool=>{if(!isRecord2(tool)||typeof tool.name!="string")return!0;let headers=parseParameterHeaders(tool.inputSchema);return typeof headers=="string"?(this.#tools.delete(tool.name),warn(`Rejected MCP tool ${JSON.stringify(tool.name)}: ${headers}`),!1):(this.#tools.set(tool.name,headers),!0)})}append(headers,name,args){if(typeof name=="string")for(let parameter of this.#tools.get(name)??[]){let value=args;for(let key of parameter.path)value=isRecord2(value)&&Object.hasOwn(value,key)?value[key]:void 0;if(value===void 0)continue;if(!(parameter.type==="string"&&typeof value=="string"||parameter.type==="boolean"&&typeof value=="boolean"||parameter.type==="integer"&&typeof value=="number"&&Number.isSafeInteger(value)))throw new ParameterHeaderValidationError(`MCP tool ${JSON.stringify(name)} argument ${JSON.stringify(parameter.path)} must be ${parameter.type==="integer"?"a safe integer":`a ${parameter.type}`}`);headers.set(`Mcp-Param-${parameter.name}`,encodeMcpHeaderValue(String(value)))}}};var originOption=Symbol("mcp-request-origin"),origins=new WeakSet,aliases=new WeakMap,physicalMcpClient=client=>aliases.get(client)??client;function registerMcpClientAlias(alias,physical){aliases.set(alias,physical)}var legacyOperations=new WeakMap;function beginLegacyMcpOperation(client,origin,caller){let lifetime=new AbortController,operation={origin,signal:AbortSignal.any([origin.signal,lifetime.signal,...caller?[caller]:[]])},operations=legacyOperations.get(client);return operations||(operations=new Set,legacyOperations.set(client,operations)),operations.add(operation),()=>{operations.delete(operation),lifetime.abort(),operations.size===0&&legacyOperations.delete(client)}}function legacyMcpOperation(client){let operations=legacyOperations.get(client);if(operations&&operations.size>1)return"ambiguous";if(operations?.size!==1)return;let operation=operations.values().next().value;return operation&&!operation.signal.aborted&&operation.origin.isCurrent()?operation:void 0}function createMcpRequestOrigin(origin){return origins.add(origin),origin}function mcpRequestOptions(origin,options={}){return origin===void 0?options:{...options,[originOption]:origin}}function takeMcpRequestOrigin(options,client){let supplied=options,origin=supplied?.[originOption],{[originOption]:_origin,...sdkOptions}=supplied??{};if(origin!==void 0){if(!origins.has(origin)||!origin.isCurrent())throw new McpMrtrError("MCP_MRTR_CONTEXT_CHANGED");let candidate=origin.connection.client;if(physicalMcpClient(candidate)!==client)throw new McpMrtrError("MCP_MRTR_CONTEXT_CHANGED")}return{origin,sdkOptions}}var own2=(value,key)=>Object.hasOwn(value,key),byteSize=value=>Buffer.byteLength(JSON.stringify(value),"utf8");function parseInputs(result){if(!own2(result,"requestState")&&!own2(result,"inputRequests"))throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");if(own2(result,"requestState")&&typeof result.requestState!="string")throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");if(byteSize(result)>512*1024||typeof result.requestState=="string"&&Buffer.byteLength(result.requestState)>64*1024)throw new McpMrtrError("MCP_MRTR_INPUT_LIMIT");if(!own2(result,"inputRequests"))return;if(!isRecord(result.inputRequests))throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");let entries=Object.entries(result.inputRequests);if(entries.length>32)throw new McpMrtrError("MCP_MRTR_INPUT_LIMIT");for(let[,input]of entries)if(isRecord(input)&&["roots/list","sampling/createMessage"].includes(String(input.method)))throw new McpMrtrError("MCP_MRTR_UNSUPPORTED_INPUT");let inputs=new Map,checkStrings=value=>{if(typeof value=="string"&&Buffer.byteLength(value)>16*1024)throw new McpMrtrError("MCP_MRTR_INPUT_LIMIT");if(Array.isArray(value))for(let entry of value)checkStrings(entry);else if(isRecord(value))for(let[key,entry]of Object.entries(value))checkStrings(key),checkStrings(entry)};for(let[key,input]of entries){if(checkStrings(key),!isRecord(input)||input.method!=="elicitation/create"||!isRecord(input.params)||typeof input.params.message!="string")throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");let params=input.params;if(checkStrings(params),params.mode==="url")throw typeof params.url!="string"||typeof params.elicitationId!="string"?new McpMrtrError("MCP_MRTR_INVALID_INPUT"):new McpMrtrError("MCP_MRTR_UNSUPPORTED_INPUT");if(params.mode!==void 0&&params.mode!=="form")throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");if(isRecord(params.requestedSchema)&&isRecord(params.requestedSchema.properties)&&Object.keys(params.requestedSchema.properties).length>64)throw new McpMrtrError("MCP_MRTR_INPUT_LIMIT");if(!validateMrtrForm(params.requestedSchema))throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");inputs.set(key,input)}return inputs}var MAX_MCP_MRTR_ROUNDS=8,capableMethods=new Set(["tools/call","resources/read","prompts/get"]),capabilitiesKey="io.modelcontextprotocol/clientCapabilities",modernDispatchGuard=Symbol("mcp-modern-dispatch"),states=new WeakMap,isModernMcpClient=client=>states.get(physicalMcpClient(client))?.version!==void 0,legacyMcpFormsAdvertised=client=>states.get(physicalMcpClient(client))?.legacyFormEligible,own3=(value,key)=>Object.hasOwn(value,key),byteSize2=value=>Buffer.byteLength(JSON.stringify(value),"utf8");function getModernDispatchGuard(params){return isRecord(params)?params[modernDispatchGuard]:void 0}function installModernRequestAdapter(client,protocol,clock=mcpElapsedClock,readCredential=()=>{}){let sdkRequest=client.request.bind(client);states.set(client,protocol);let requestWithMrtr=async(request,schema,options)=>{if(request.method==="initialize")return sdkRequest(request,schema,options);let{origin,sdkOptions}=takeMcpRequestOrigin(options,client);if(protocol.version===void 0){let end=request.method==="tools/call"&&origin?beginLegacyMcpOperation(client,origin,sdkOptions.signal):void 0;try{return await sdkRequest(request,schema,sdkOptions)}finally{end?.()}}if(own3(request.params??{},"requestState")||own3(request.params??{},"inputResponses")||options?.task)throw new McpMrtrError("MCP_MRTR_INVALID_INPUT");let params=structuredClone(request.params??{}),{DEFAULT_REQUEST_TIMEOUT_MSEC}=await loadMcpSdkProtocol(),start=clock.now(),timeout=sdkOptions.timeout??DEFAULT_REQUEST_TIMEOUT_MSEC,duration=Math.min(sdkOptions.maxTotalTimeout??1/0,9*timeout+3e5),deadline=start+duration,operation=new AbortController,credential=readCredential(),authority,authorityCaptured=!1,controller=origin?.connection,generation=controller?.generation,presentationLost=origin?.presentation===void 0||origin.presentation.signal.aborted,consentSpent=0,continuation={},failure,stop=code=>{failure??=new McpMrtrError(code),operation.abort(failure)},onCallerAbort=()=>stop("MCP_MRTR_CANCELLED"),onOwnerAbort=()=>stop("MCP_MRTR_CONTEXT_CHANGED"),onPresentationLost=()=>{presentationLost=!0},check=()=>{if(clock.now()>=deadline&&stop("MCP_MRTR_TIMEOUT"),origin&&(!origin.isCurrent()||origin.signal.aborted||controller?.generation!==generation||controller?.state!=="connected")&&stop("MCP_MRTR_CONTEXT_CHANGED"),failure)throw failure},resolveAuthority=async()=>{if(check(),origin){await origin.privateForm?.synchronize?.();let snapshot=JSON.stringify(await interrupted(origin.resolveAuthority(operation.signal),operation.signal));authorityCaptured?authority!==snapshot&&stop("MCP_MRTR_CONTEXT_CHANGED"):(authority=snapshot,authorityCaptured=!0)}check()},off=controller?.onStateChange(()=>{try{check()}catch{}});sdkOptions.signal?.addEventListener("abort",onCallerAbort,{once:!0}),origin?.signal.addEventListener("abort",onOwnerAbort,{once:!0}),origin?.presentation?.signal.addEventListener("abort",onPresentationLost,{once:!0});let timer=clock.schedule(()=>stop("MCP_MRTR_TIMEOUT"),Math.max(0,duration));sdkOptions.signal?.aborted&&onCallerAbort(),origin?.signal.aborted&&onOwnerAbort();try{let{safeParse}=await interrupted(loadMcpSdkZodCompat(),operation.signal),{ResultSchema}=await interrupted(loadMcpSdkTypes(),operation.signal);for(let round=0;;round++){await resolveAuthority();let remaining=deadline-clock.now(),attempt=new AbortController,forward=()=>attempt.abort("MCP request canceled");operation.signal.addEventListener("abort",forward,{once:!0});let metadata=isRecord(params._meta)?params._meta:{},capabilities=origin?.privateFormsEnforced?origin.privateForm?.ready()?{elicitation:{}}:{}:!presentationLost&&origin?.presentation?{elicitation:{}}:{},outgoing={...params,...continuation,_meta:{...metadata,[capabilitiesKey]:capabilities},[modernDispatchGuard]:snapshot=>{if(check(),(snapshot??readCredential())!==credential)throw new McpMrtrError("MCP_MRTR_CONTEXT_CHANGED")}},result;try{check(),result=await sdkRequest({method:request.method,params:outgoing},ResultSchema,{...sdkOptions,signal:attempt.signal,timeout:Math.min(timeout,remaining),maxTotalTimeout:remaining,onprogress:sdkOptions.onprogress?progress=>{check(),!(!Number.isFinite(progress.progress)||progress.total!==void 0&&!Number.isFinite(progress.total))&&sdkOptions.onprogress?.({progress:progress.progress,...progress.total===void 0?{}:{total:progress.total}})}:void 0})}finally{operation.signal.removeEventListener("abort",forward)}check();let type=own3(result,"resultType")?result.resultType:"complete";if(type==="complete"){if(["requestState","inputRequests","inputResponses"].some(key=>own3(result,key)))throw new McpMrtrError("MCP_MRTR_INVALID_RESULT");let parsed=safeParse(schema,result);if(!parsed.success)throw new McpMrtrError("MCP_MRTR_INVALID_RESULT");return parsed.data}if(type!=="input_required"||!capableMethods.has(request.method))throw new McpMrtrError("MCP_MRTR_INVALID_RESULT");if(round>=MAX_MCP_MRTR_ROUNDS)throw new McpMrtrError("MCP_MRTR_ROUND_LIMIT");let inputs=parseInputs(result);if(continuation=own3(result,"requestState")?{requestState:result.requestState}:{},inputs){let responses=Object.create(null),cancelled=!1;for(let[key,input]of inputs){if(await resolveAuthority(),input.params.mode==="url")throw new McpMrtrError("MCP_MRTR_UNSUPPORTED_INPUT");if(cancelled)throw new McpMrtrError("MCP_MRTR_CANCELLED");if(consentSpent>=3e5)throw new McpMrtrError("MCP_MRTR_PROCESSING_UNAVAILABLE");if(origin?.privateFormsEnforced){let presenter=origin.privateForm,schema2=input.params.requestedSchema;if(!presenter?.ready()||!validateMrtrForm(schema2))throw new McpMrtrError("MCP_MRTR_PROCESSING_UNAVAILABLE");let began=clock.now(),outcome=await presenter.present({operationId:String(start),inputId:key,round,server:{label:origin.serverLabel,source:origin.serverSource??"user"},message:input.params.message,schema:schema2,operationSignal:operation.signal,presentationSignal:presenter.signal,deadlineMs:Math.max(0,3e5-consentSpent)});if(consentSpent+=clock.now()-began,check(),outcome.kind!=="result")throw new McpMrtrError(outcome.kind==="operation_aborted"?"MCP_MRTR_CANCELLED":"MCP_MRTR_PROCESSING_UNAVAILABLE");responses[key]=outcome.result,cancelled=outcome.result.action!=="accept"}else{if(presentationLost||!origin?.presentation)throw new McpMrtrError("MCP_MRTR_PROCESSING_UNAVAILABLE");{let consent=new AbortController,began=clock.now(),consentTimer=clock.schedule(()=>consent.abort(),Math.max(0,3e5-consentSpent)),signal=AbortSignal.any([operation.signal,origin.presentation.signal,consent.signal]),presented=!1;try{let answer=await interrupted(queuedForm(origin.binding,signal,()=>(presented=!0,collectMrtrForm(origin.presentation,origin.serverLabel,{message:input.params.message,requestedSchema:input.params.requestedSchema},signal))),operation.signal);if(check(),!presented)throw new McpMrtrError("MCP_MRTR_PROCESSING_UNAVAILABLE");responses[key]=answer,cancelled=answer.action!=="accept"}finally{consentSpent+=clock.now()-began,clock.cancel(consentTimer),consent.abort()}}}}if(byteSize2(responses)>512*1024)throw new McpMrtrError("MCP_MRTR_INPUT_LIMIT");continuation.inputResponses=responses}}}catch(error){if(check(),error instanceof McpMrtrError||error instanceof AuthError||error instanceof ParameterHeaderValidationError)throw error;let remoteCode=isRecord(error)&&typeof error.code=="number"?error.code:void 0;throw new McpMrtrError("MCP_MRTR_TRANSPORT_FAILED",remoteCode)}finally{continuation={},clock.cancel(timer),off?.(),sdkOptions.signal?.removeEventListener("abort",onCallerAbort),origin?.signal.removeEventListener("abort",onOwnerAbort),origin?.presentation?.signal.removeEventListener("abort",onPresentationLost)}};protocol.activateRequests=()=>{client.request=requestWithMrtr},(protocol.privateForms||protocol.version!==void 0)&&protocol.activateRequests()}function interrupted(work,signal){return new Promise((resolve,reject)=>{let onabort=()=>reject(signal.reason);signal.addEventListener("abort",onabort,{once:!0}),signal.aborted&&onabort(),work.then(resolve,reject).finally(()=>signal.removeEventListener("abort",onabort))})}var OAuthFlowError=class extends AuthError{constructor(oauthKind,message,options={}){super(message,options),this.name="OAuthFlowError",this.oauthKind=oauthKind,this.terminal=TERMINAL_KINDS.has(oauthKind)}},TERMINAL_KINDS=new Set(["s256_unsupported","needs_auth","invalid_grant","state_mismatch","expired_code","no_verifier","headless","missing_env"]),TERMINAL_OAUTH_CODES=new Set(["invalid_grant","invalid_token","invalid_client","unauthorized_client"]),TRANSIENT_OAUTH_CODES=new Set(["temporarily_unavailable","server_error","slow_down"]);function isInvalidGrant(error){let code=oauthErrorCode(error);if(code!==void 0)return TERMINAL_OAUTH_CODES.has(code);let text=errorText(error).toLowerCase();return text.includes("invalid_grant")||text.includes("invalid_token")}function isTransientTokenError(error){if(isInvalidGrant(error))return!1;let code=oauthErrorCode(error);if(code!==void 0&&TRANSIENT_OAUTH_CODES.has(code))return!0;let text=errorText(error).toLowerCase();return/\b(?:500|502|503|504)\b/.test(text)||text.includes("econnrefused")||text.includes("network")}function oauthErrorCode(error){if(typeof error!="object"||error===null)return;let code=error.errorCode;return typeof code=="string"?code:void 0}function errorText(error){return error instanceof Error?`${error.name} ${error.message}`:String(error)}var MAX_CAUSE_DEPTH=5;function isMcpNeedsAuthError(error,depth=0){return isMcpSdkUnauthorizedError(error)?!0:error instanceof OAuthFlowError?error.terminal:depth<MAX_CAUSE_DEPTH&&error!==null&&typeof error=="object"&&"cause"in error?isMcpNeedsAuthError(error.cause,depth+1):!1}var MCP_CLIENT_ELICITATION_CAPABILITY={elicitation:{}};function mcpClientCapabilities(elicitationEnabled=!0){return elicitationEnabled?MCP_CLIENT_ELICITATION_CAPABILITY:{}}var MCP_ELICITATION_TIMEOUT_MS=300*1e3,legacyUiProvider;async function rejectElicitation(){let{ErrorCode,McpError:McpError2}=await loadMcpSdkTypes();throw new McpError2(ErrorCode.InternalError,"Elicitation cannot be processed")}function legacyMcpFormEligible(provider,enabled){if(!enabled)return!1;if(provider?.eligible)return provider.eligible();let ui=provider?.(),binding=ui===void 0?void 0:privateMcpForms(ui);return binding===void 0||binding.capture()?.ready()===!0}async function rejectPrivateElicitation(){let{ErrorCode,McpError:McpError2}=await loadMcpSdkTypes();throw new McpError2(ErrorCode.InternalError,"Elicitation processing unavailable")}async function privateElicitation(client,params,signal,requestId,timeoutMs){let operation=legacyMcpOperation(client);if(operation==="ambiguous")return rejectPrivateElicitation();let presenter=operation?.origin.privateForm;if(!isRecord(params)||typeof params.message!="string"||params.mode!==void 0&&params.mode!=="form"||!operation||!presenter?.ready()||!validateMrtrForm(params.requestedSchema))return rejectPrivateElicitation();let outcome=await presenter.present({operationId:String(requestId),inputId:String(requestId),round:0,server:{label:operation.origin.serverLabel,source:operation.origin.serverSource??"user"},message:params.message,schema:params.requestedSchema,operationSignal:AbortSignal.any([operation.signal,signal]),presentationSignal:presenter.signal,deadlineMs:timeoutMs});return outcome.kind!=="result"||operation.signal.aborted||!operation.origin.isCurrent()?rejectPrivateElicitation():outcome.result}async function configureMcpElicitation(client,owner=legacyUiProvider,timeoutMs=MCP_ELICITATION_TIMEOUT_MS,elicitationEnabled=!0){if(!elicitationEnabled){let{ErrorCode,McpError:McpError2}=await loadMcpSdkTypes();client.fallbackRequestHandler=async request=>{if(request.method==="elicitation/create")return typeof owner=="function"&&owner.enforced?.()?rejectPrivateElicitation():rejectElicitation();throw new McpError2(ErrorCode.MethodNotFound,"Method not found")};return}let{ElicitRequestSchema}=await loadMcpSdkTypes();if(typeof owner=="function"&&owner.enforced?.()){client.setRequestHandler(ElicitRequestSchema.omit({params:!0}).passthrough(),(request,extra)=>privateElicitation(client,request.params,extra.signal,extra.requestId,timeoutMs));return}client.setRequestHandler(ElicitRequestSchema,async(request,extra)=>{let params=request.params;if(!("requestedSchema"in params))return rejectElicitation();let ui=typeof owner=="function"?owner():owner?.getMcpElicitationUi();return typeof owner=="function"&&owner.enforced?.()||ui!==void 0&&privateMcpForms(ui)!==void 0?privateElicitation(client,params,extra.signal,extra.requestId,timeoutMs):ui===void 0?rejectElicitation():await runElicitationForm(ui,params.message,params.requestedSchema,timeoutMs)})}async function runElicitationForm(ui,message,requestedSchema,timeoutMs=MCP_ELICITATION_TIMEOUT_MS){let timer,timeout=new Promise(resolve=>{timer=safeTimer("mcp.elicitation.timeout",timeoutMs,()=>resolve({action:"cancel"}),{logger:createMcpLogger("elicitation")})});try{return await Promise.race([collectForm(ui,message,requestedSchema),timeout])}finally{timer!==void 0&&clearTimeout(timer)}}async function collectForm(ui,message,requestedSchema){let content={},required=new Set(requestedSchema.required??[]);for(let[name,property]of Object.entries(requestedSchema.properties??{})){let title=`${message} - ${property.title??name}`;if(property.type==="boolean"){let picked=await ui.select(property.description?`${title}
 ${property.description}`:title,["Yes","No"]);if(picked===void 0)return{action:"cancel"};switch(picked.trim().toLowerCase()){case"yes":case"y":case"true":content[name]=!0;break;case"no":case"n":case"false":content[name]=!1;break;default:return rejectElicitation()}continue}if(Array.isArray(property.enum)&&property.enum.length>0){let picked=await ui.select(title,property.enum.map(String));if(picked===void 0)return{action:"cancel"};content[name]=picked;continue}let answer=await ui.input(title,property.description);if(answer===void 0)return{action:"cancel"};if(answer.length===0){if(required.has(name))return rejectElicitation();continue}if(property.type==="number"||property.type==="integer"){let parsed=Number(answer);if(!Number.isFinite(parsed))return rejectElicitation();content[name]=parsed;continue}content[name]=answer}return Object.keys(content).length===0&&await ui.select(message,["Submit"])!=="Submit"?{action:"cancel"}:{action:"accept",content}}import{execFile}from"node:child_process";import{promisify}from"node:util";var execFileAsync=promisify(execFile);async function collectProcessTree(rootPid){let seen=new Set,queue=[rootPid];for(let index=0;index<queue.length;index++){let pid=queue[index];if(!seen.has(pid)){seen.add(pid);for(let childPid of await childPids(pid))seen.has(childPid)||queue.push(childPid)}}return[...seen]}async function reapProcessTree(rootPid,options){let knownPids=new Set(await collectProcessTree(rootPid));if(someProcessAlive(knownPids)){killPids(knownPids,"SIGTERM"),await waitForDead(knownPids,options.termWaitMs);for(let pid of await collectProcessTree(rootPid))knownPids.add(pid);someProcessAlive(knownPids)&&(killPids(knownPids,"SIGKILL"),await waitForDead(knownPids,options.killWaitMs))}}function isProcessAlive(pid){try{return process.kill(pid,0),!0}catch(error){return!1}}function delay(ms){return safeDelay(ms)}async function childPids(parentPid){if(!["darwin","linux"].includes(process.platform))return[];try{let{stdout}=await execFileAsync("pgrep",["-P",String(parentPid),"."],{timeout:1e3});return stdout.split(/\s+/).map(Number).filter(pid=>Number.isInteger(pid)&&pid>0)}catch(error){return[]}}function killPids(pids,signal){for(let pid of[...pids].reverse())if(!(!Number.isInteger(pid)||pid<=1))try{process.kill(pid,signal)}catch(error){}}async function waitForDead(pids,timeoutMs){let deadline=Date.now()+timeoutMs;for(;Date.now()<deadline;){if(!someProcessAlive(pids))return;await delay(25)}}function someProcessAlive(pids){for(let pid of pids)if(isProcessAlive(pid))return!0;return!1}export{LOG_SINK_RETRY_MS,rotateLogIfNeeded,keyedIdentity,isEphemeralIdentity,createMcpLogger,fingerprintSecret,redactMcpLogText,mcpElapsedClock,wrapAsync,safeTimer,safeInterval,safeDelay,safeOn,safeEventBusOn,reportMcpAsyncError,ConnectError,ToolExecError,AuthError,TimeoutError,SessionExpiredError,isRetriableMcpError,isMcpSessionExpiredError,OAuthFlowError,isInvalidGrant,isTransientTokenError,loadMcpSdkClient,loadMcpSdkStdioTransport,loadMcpSdkTypes,loadMcpSdkAuth,loadMcpSdkStreamableHttpTransport,registerMcpClientAlias,createMcpRequestOrigin,mcpRequestOptions,collectMrtrForm,encodeMcpHeaderValue,clearMcpParameterHeaders,ParameterHeaderValidationError,ModernParameterHeaders,modernDispatchGuard,isModernMcpClient,legacyMcpFormsAdvertised,getModernDispatchGuard,installModernRequestAdapter,isMcpNeedsAuthError,mcpClientCapabilities,legacyMcpFormEligible,configureMcpElicitation,reapProcessTree,delay};