@creeperhost/modlens-mcp 1.6.18 → 1.6.20

package/dist/server.js

@@ -31,13 +31,14 @@ import { getModGradleFiles, searchGradleFiles, compareGradleDeps, } from "./tool
 import { generateReport } from "./tools/reports.js";
 import { findAssetConflicts, findVanillaOverrides, analyzeModSidedness, analyzePackSidedness, computeModComplexity, computePackChangelog, findDataConflicts, buildPackGraph, diffPackConfigs, packHealth } from "./tools/packtools.js";
 import { indexKubeJsScripts, searchKubeJsScripts, semanticSearchKubeJsScripts } from "./tools/kubejs.js";
-import { searchPacksAction, featuredPacksAction, packInfoAction, packManifestAction, syncPackModsAction, resolvePackAction, listRemotePackVersionsAction, ingestPackAction, searchFtbModsAction, ftbModInfoAction, downloadModAction, downloadOverridesAction, listPackVersionsAction, listPackFilesAction, findModInPacksAction } from "./tools/modpacks-ch.js";
+import { searchPacksAction, featuredPacksAction, packInfoAction, packManifestAction, syncPackModsAction, resolvePackAction, listRemotePackVersionsAction, ingestPackAction, searchModsAction, modInfoAction, downloadModAction, downloadOverridesAction, listPackVersionsAction, listPackFilesAction, findModInPacksAction } from "./tools/modpacks-ch.js";
 import { analyzeCrashLog, findMissingDeps } from "./tools/diagnostics.js";
 import { checkModCompat } from "./tools/compat-check.js";
 import { disconnect } from "./db.js";
 import { mcPaths } from "./minecraft.js";
 import { findModById, resolveModRefSlim } from "./repositories/mod.js";
 import { CACHE_ROOT } from "./cache.js";
+import { projectAction, projectToolSchema } from "./tools/project.js";
 // Load .env — try ~/.modlens/.env first (npx/installed users), then local .env (git-clone users)
 import { readFileSync, existsSync } from "fs";
 import { join, dirname } from "path";
@@ -72,7 +73,7 @@ const VERBOSE = process.env.MODLENS_VERBOSE
 /** Best-effort, bounded JSON for logging tool params (handles circular refs). */
 function previewArgs(value) {
     try {
-        const json = JSON.stringify(value);
+        const json = JSON.stringify(value, (key, item) => ["projectKey", "data"].includes(key) ? "[redacted]" : item);
         if (json == null)
             return String(value);
         return json.length > 2000 ? json.slice(0, 2000) + "…(truncated)" : json;
@@ -105,6 +106,12 @@ function resolveDbId(dbId, modId) {
     const n = typeof modId === "number" ? modId : Number(modId);
     return Number.isFinite(n) && n > 0 ? n : undefined;
 }
+function requireModRef(modId, dbId) {
+    const ref = dbId ?? modId;
+    if (ref === undefined || ref === "")
+        throw new Error("modId or dbId is required");
+    return ref;
+}
 /**
  * Like resolveDbId, but for actions that need a valid DB id — will look up
  * string modIds via the database so agents can pass e.g. modId:"polylib".
@@ -149,10 +156,12 @@ function safe(fn) {
 }
 class JsonBodyParseError extends Error {
 }
+class HttpBodyTooLargeError extends Error {
+}
 function createMcpServer() {
     const server = new McpServer({ name: "modlens", version: pkg.version });
     // ── 1. mod ────────────────────────────────────────────────────────────────────
-    server.tool("mod", "Mod database, decompile, and source browser. action=ingest|list|get|search|stats|dependencies|dep_graph|version_conflicts|source_urls|decompile|decompile_status|decompile_class|source|search_source|reindex|batch_ingest|batch_decompile|refresh_metadata|index_fts|search_indexed|index_semantic|search_semantic|get_paths|delete|graph_build|graph_status|graph_query|graph_report|graph_enrich_next|graph_enrich_submit|graph_download|graph_export|graph_submit|embed_export|embed_download|embed_download_all|embed_status|embed_submit. index_fts/search_indexed: BM25-ranked FTS over source code. index_semantic/search_semantic: vector search (requires Ollama). refresh_metadata: re-parse all mods with degraded metadata (filename/@Mod annotation) and upgrade if a higher-quality manifest is found. graph_enrich_next: get next un-enriched chunk for chat enrichment. graph_enrich_submit: submit enriched nodes/edges (chunkIndex, nodes, edges). graph_download: download pre-built graph from registry (targetType=mod|vanilla|modloader with targetId/targetVersion). graph_export: export a mod's local graph as a shareable gzipped bundle. graph_submit: (stub) community graph submission — not yet functional. embed_export/embed_download/embed_status: targetType-aware embeddings actions for mod/vanilla/modloader. embed_download: downloads registry embeddings; protects local embeddings by default (use force=true to overwrite). embed_download_all: download embeddings for all mods. embed_submit: (stub) community embedding submission — not yet functional. Auto-behaviors: decompile_status auto-queues embedding (MODLENS_AUTO_EMBED) and graph build (MODLENS_AUTO_GRAPH). Pass autoEmbed/autoGraph to override per-call.", {
+    server.tool("mod", "Mod database, decompile, and source browser. action=ingest|list|get|search|stats|dependencies|dep_graph|version_conflicts|source_urls|decompile|decompile_status|decompile_class|source|search_source|reindex|batch_ingest|batch_decompile|refresh_metadata|index_fts|search_indexed|index_semantic|search_semantic|get_paths|delete|graph_build|graph_status|graph_query|graph_report|graph_enrich_next|graph_enrich_submit|graph_download|graph_export|graph_submit|embed_export|embed_download|embed_download_all|embed_status|embed_submit. index_fts/search_indexed: BM25-ranked FTS over source code. index_semantic/search_semantic: vector search (requires Ollama). refresh_metadata: re-parse all mods with degraded metadata (filename/@Mod annotation) and upgrade if a higher-quality manifest is found. graph_enrich_next: get next un-enriched chunk for chat enrichment. graph_enrich_submit: submit enriched nodes/edges (chunkIndex, nodes, edges). graph_download: download pre-built graph from registry (targetType=mod|vanilla|modloader with targetId/targetVersion). graph_export: export a mod's local graph as a shareable gzipped bundle. graph_submit: validate an exported bundle and open a draft GitHub registry PR (bundlePath required). embed_export/embed_download/embed_status: targetType-aware embeddings actions for mod/vanilla/modloader. embed_download: downloads registry embeddings; protects local embeddings by default (use force=true to overwrite). embed_download_all: download embeddings for all mods. embed_submit: validate an exported bundle and open a draft GitHub registry PR (bundlePath required). Auto-behaviors: decompile_status auto-queues embedding (MODLENS_AUTO_EMBED) and graph build (MODLENS_AUTO_GRAPH). Pass autoEmbed/autoGraph to override per-call.", {
         action: z.enum([
             "ingest", "list", "get", "search", "stats", "dependencies", "dep_graph",
             "version_conflicts", "source_urls", "decompile", "decompile_status",
@@ -193,10 +202,13 @@ function createMcpServer() {
         targetLoader: z.string().optional().describe("Optional loader hint for registry matching"),
         targetMcVersion: z.string().optional().describe("Optional MC version hint for registry matching"),
         model: z.string().optional().describe("Embedding model override for embed_download"),
+        bundlePath: z.string().optional().describe("Exported bundle file for graph_submit or embed_submit"),
+        contributor: z.string().optional().describe("Contributor alias for a registry submission"),
+        note: z.string().optional().describe("Note for the registry pull request"),
         autoEmbed: z.boolean().optional().describe("Override auto-embed on decompile completion (default: env MODLENS_AUTO_EMBED, true)"),
         autoGraph: z.boolean().optional().describe("Override auto-graph-build on decompile/source-download (default: env MODLENS_AUTO_GRAPH, true)"),
         provenance: z.enum(["local", "registry", "community"]).optional().describe("Filter search_semantic results by embedding source (default: all sources)"),
-    }, safe(async ({ action, jarPath, modId, dbId: rawDbId, query, path, className, loader, mcVersion, hasMixins, decompiled, recursive, skipSource, isRegex, force, limit, directory, indexClasses, replace, budget, backend, chunkIndex, nodes, edges, outputDir, modVersion, targetType, targetId, targetVersion, targetLoader, targetMcVersion, model, autoEmbed, autoGraph, provenance }) => {
+    }, safe(async ({ action, jarPath, modId, dbId: rawDbId, query, path, className, loader, mcVersion, hasMixins, decompiled, recursive, skipSource, isRegex, force, limit, directory, indexClasses, replace, budget, backend, chunkIndex, nodes, edges, outputDir, modVersion, targetType, targetId, targetVersion, targetLoader, targetMcVersion, model, autoEmbed, autoGraph, provenance, bundlePath, contributor, note }) => {
         const dbId = await resolveDbIdAsync(rawDbId, modId);
         const resolvedTargetType = targetType ?? "mod";
         const resolvedTargetId = targetId ?? (typeof modId === "string" ? modId : undefined) ?? (resolvedTargetType === "vanilla" ? "minecraft" : undefined);
@@ -210,7 +222,7 @@ function createMcpServer() {
                 result = await listMods({ loader: loader, mcVersion, hasMixins, decompiled, limit: limit ?? 50 });
                 break;
             case "get":
-                result = await getModDetails(modId);
+                result = await getModDetails(requireModRef(modId, rawDbId));
                 break;
             case "search":
                 result = await searchMods(query, { loader, mcVersion, limit: limit ?? 20 });
@@ -219,7 +231,7 @@ function createMcpServer() {
                 result = await getDbStats();
                 break;
             case "dependencies":
-                result = await getDependencies(modId, recursive ?? false);
+                result = await getDependencies(requireModRef(modId, rawDbId), recursive ?? false);
                 break;
             case "dep_graph":
                 result = await getDependencyGraph(mcVersion);
@@ -337,7 +349,7 @@ function createMcpServer() {
                 result = await exportGraph(dbId, outputDir);
                 break;
             case "graph_submit":
-                result = await submitGraph({ bundlePath: outputDir ?? "" });
+                result = await submitGraph({ bundlePath: bundlePath ?? outputDir ?? "", contributor, note });
                 break;
             case "embed_export":
                 result = await exportEmbeddings(resolvedTargetType, outputDir, { dbId, mcVersion: resolvedTargetVersion ?? mcVersion, targetId: resolvedTargetId });
@@ -363,7 +375,7 @@ function createMcpServer() {
                 });
                 break;
             case "embed_submit":
-                result = await submitEmbeddings({ bundlePath: outputDir ?? "" });
+                result = await submitEmbeddings({ bundlePath: bundlePath ?? outputDir ?? "", contributor, note });
                 break;
         }
         return out(result);
@@ -458,7 +470,7 @@ function createMcpServer() {
         let result;
         switch (action) {
             case "targets":
-                result = await getMixinTargets(modId);
+                result = await getMixinTargets(requireModRef(modId, rawDbId));
                 break;
             case "resolve":
                 result = await resolveMixinTargets(dbId);
@@ -483,7 +495,7 @@ function createMcpServer() {
     }));
     // ── 4. platform ───────────────────────────────────────────────────────────────
     server.tool("platform", "Modrinth/CurseForge platform sync and source download. action=sync_modrinth|sync_curseforge|check_updates|batch_sync|download_source|search|batch_check_updates. " +
-        "action=search: unified mod search across both Modrinth and CurseForge — deduplicated, sorted by downloads (query required, loader, mcVersion, limit). " +
+        "action=search: unified mod search across both Modrinth and CurseForge — deduplicated, sorted by downloads (query required, loader, mcVersion, limit). Missing modpacks.ch loader labels are recovered by inspecting cached/downloaded JARs. " +
         "action=batch_check_updates: check ALL linked mods for newer versions on Modrinth/CurseForge in one pass (mcVersion, loader, modIdFilter, limit). " +
         "download_source downloads GitHub source without decompilation — auto-queues graph build (override with autoGraph). Env: MODLENS_AUTO_GRAPH (default: 1).", {
         action: z.enum(["sync_modrinth", "sync_curseforge", "check_updates", "batch_sync", "download_source", "search", "batch_check_updates"]),
@@ -529,22 +541,22 @@ function createMcpServer() {
     }));
     // ── 5. modpacks_ch ───────────────────────────────────────────────────────────
     server.tool("modpacks_ch", "Search, resolve, list versions for, and ingest arbitrary modpacks so other ModLens tools can analyze the exact pack contents. General workflow: when the user names a modpack and possibly a fuzzy version like 7.1, call action=list_versions with packRef/versionRef, choose the best matching version, then call action=ingest_pack before using analyze_crash_log, reports, pack_tools, dependency checks, mixin scans, source search, or other pack-aware analysis. Crash triage is one common use, not the only use. " +
-        "Backends: modpacks.ch API (CreeperHost service) for FTB/CurseForge, Modrinth API/.mrpack for Modrinth, and the official Feed The Beast API when namespace=feedthebeast. CurseForge via modpacks.ch requires no CurseForge API key. Modrinth packRef may be a slug/project ID, a modrinth.com modpack/version URL, an api.modrinth.com project/version URL, a cdn.modrinth.com .mrpack URL, or any direct HTTPS .mrpack URL. " +
-        "action=search|featured|info|manifest|resolve_pack|list_versions|ingest_pack|sync_pack_mods|search_ftb_mods|ftb_mod_info|download_mod|download_overrides|list_pack_versions|list_pack_files|find_mod_in_packs. " +
-        "namespace=ftb|curseforge|modrinth|feedthebeast (default: ftb). Use feedthebeast for api.feed-the-beast.com packs; use ftb for the modpacks.ch FTB namespace. resolve_pack/list_versions/ingest_pack accept packRef=name/slug/id and versionRef=version id/name/number/partial text. list_versions returns matches for fuzzy refs; list_pack_versions is DB-backed synced-pack history. " +
+        "Metadata comes from modpacks.ch for all providers; downloads use the supplied URLs and Modrinth .mrpack archives. Loader-filtered mod queries automatically download and inspect unlabeled JARs; recovered labels report loaderSource=jar. No CurseForge API key is required. Modrinth packRef may be a slug/project ID, a modrinth.com modpack/version URL, an api.modrinth.com project/version URL, a cdn.modrinth.com .mrpack URL, or any direct HTTPS .mrpack URL. " +
+        "action=search|featured|info|manifest|resolve_pack|list_versions|ingest_pack|sync_pack_mods|search_mods|mod_info|download_mod|download_overrides|list_pack_versions|list_pack_files|find_mod_in_packs. mod_info returns up to limit versions (default 20). search_ftb_mods and ftb_mod_info remain compatibility aliases. " +
+        "namespace=ftb|curseforge|modrinth|feedthebeast (default: ftb). feedthebeast uses the modpacks.ch /ftb catalog; ftb uses /modpack. resolve_pack/list_versions/ingest_pack accept packRef=name/slug/id and versionRef=version id/name/number/partial text. list_versions returns matches for fuzzy refs; list_pack_versions is DB-backed synced-pack history. " +
         "User-Agent is set per modpacks.ch (CreeperHost) team request for usage tracking.", {
-        action: z.enum(["search", "featured", "info", "manifest", "resolve_pack", "list_versions", "ingest_pack", "sync_pack_mods", "search_ftb_mods", "ftb_mod_info", "download_mod", "download_overrides", "list_pack_versions", "list_pack_files", "find_mod_in_packs"]),
-        namespace: z.enum(["ftb", "curseforge", "modrinth", "feedthebeast"]).optional().describe("ftb, curseforge, modrinth, or feedthebeast (default: ftb). feedthebeast uses api.feed-the-beast.com; ftb uses modpacks.ch."),
+        action: z.enum(["search", "featured", "info", "manifest", "resolve_pack", "list_versions", "ingest_pack", "sync_pack_mods", "search_mods", "mod_info", "search_ftb_mods", "ftb_mod_info", "download_mod", "download_overrides", "list_pack_versions", "list_pack_files", "find_mod_in_packs"]),
+        namespace: z.enum(["ftb", "curseforge", "modrinth", "feedthebeast"]).optional().describe("Provider catalog on modpacks.ch (default: ftb). feedthebeast selects /ftb; ftb selects /modpack."),
         packId: z.number().optional().describe("Numeric FTB/CurseForge pack ID or internal Modrinth pack key returned by resolve/list actions"),
         versionId: z.number().optional().describe("Numeric FTB/CurseForge version ID or internal Modrinth version key returned by resolve/list actions"),
         packRef: z.union([z.number(), z.string()]).optional().describe("Pack name, slug, Modrinth project ID, CurseForge pack ID, FTB/feedthebeast pack ID, Modrinth web/API/CDN URL, or direct HTTPS .mrpack URL. Use for resolve_pack/list_versions/ingest_pack."),
         versionRef: z.union([z.number(), z.string()]).optional().describe("Version ID, full version name, version number, or fuzzy partial text such as 7.1. Use list_versions first if ambiguous."),
         packVersionDbId: z.number().optional().describe("Pack version DB id returned by sync_pack_mods (shortcut for list_pack_files)"),
-        query: z.string().optional().describe("Search query (required for search, search_ftb_mods)"),
-        modId: z.union([z.number(), z.string()]).optional().describe("FTB mod ID (required for ftb_mod_info, download_mod)"),
-        fileId: z.number().optional().describe("Exact CF file ID to download (download_mod; skips mcVersion/loader filter)"),
-        loader: z.string().optional().describe("Loader filter for ftb_mod_info/download_mod (e.g. neoforge, fabric)"),
-        mcVersionFilter: z.string().optional().describe("MC version filter for ftb_mod_info/download_mod (e.g. 26.1.2)"),
+        query: z.string().optional().describe("Search query (required for search, search_mods)"),
+        modId: z.union([z.number(), z.string()]).optional().describe("CurseForge project ID or Modrinth project ID/slug (required for mod_info, download_mod)"),
+        fileId: z.union([z.number(), z.string()]).optional().describe("Exact CurseForge file ID or Modrinth version ID to download (download_mod; skips mcVersion/loader filter)"),
+        loader: z.string().optional().describe("Loader filter for mod_info/download_mod (e.g. forge, fabric, neoforge)"),
+        mcVersionFilter: z.string().optional().describe("MC version filter for mod_info/download_mod (e.g. 1.7.10, 1.12.2, 1.21.1)"),
         force: z.boolean().optional().describe("Force re-download even if cached (download_mod)"),
         modDbId: z.number().optional().describe("ModLens DB mod id (for find_mod_in_packs)"),
         cfProject: z.number().optional().describe("CurseForge project id (for find_mod_in_packs)"),
@@ -597,15 +609,17 @@ function createMcpServer() {
                     throw new Error("Use action=ingest_pack for Modrinth packs");
                 result = await syncPackModsAction({ packId, versionId, namespace: ns, fileTypes, skipServer, skipOptional, concurrency, maxFiles });
                 break;
+            case "search_mods":
             case "search_ftb_mods":
                 if (!query)
-                    throw new Error("query is required for action=search_ftb_mods");
-                result = await searchFtbModsAction(query, limit ?? 20);
+                    throw new Error("query is required for action=search_mods");
+                result = await searchModsAction(query, limit ?? 20);
                 break;
+            case "mod_info":
             case "ftb_mod_info":
                 if (modId === undefined)
-                    throw new Error("modId is required for action=ftb_mod_info");
-                result = await ftbModInfoAction(modId, { mcVersion: mcVersionFilter, loader });
+                    throw new Error("modId is required for action=mod_info");
+                result = await modInfoAction(modId, { mcVersion: mcVersionFilter, loader, limit });
                 break;
             case "download_mod":
                 if (modId === undefined)
@@ -889,7 +903,7 @@ function createMcpServer() {
         return out(result);
     }));
     // ── 9. primers ────────────────────────────────────────────────────────────────
-    server.tool("primers", "Minecraft version migration primers and porting guides. action=ingest|seed|get|by_version|search|list|delete|semantic_search|backfill_embeddings. semantic_search requires Ollama running.", {
+    server.tool("primers", "Minecraft migration primers. by_version finds each migration step, including vanilla changes for the selected loader; includeContent=true bundles the Markdown with a shared maxChars budget. Continue with nextCursor until null, keeping the same range and loader. get reads one guide (follow nextStartLine). Missing content is fetched and cached unless fetchContent=false. seed populates the catalogue. Bundles report per-guide failures; retry failed IDs with get. Published guides may leave coverage gaps. semantic_search requires Ollama.", {
         action: z.enum(["ingest", "seed", "get", "by_version", "search", "list", "delete", "semantic_search", "backfill_embeddings"]),
         entries: z.array(z.object({
             fromVersion: z.string(),
@@ -902,27 +916,34 @@ function createMcpServer() {
             tags: z.array(z.string()).optional(),
             source: z.string().optional(),
             fetchContent: z.boolean().optional(),
-        })).optional().describe("Primer entries to ingest (ingest)"),
-        id: z.number().optional(),
+        })).min(1).optional().describe("Primer entries to ingest; set entries[].fetchContent=true to fetch before saving"),
+        id: z.number().int().positive().optional(),
         fromVersion: z.string().optional(),
         toVersion: z.string().optional(),
-        modloader: z.string().optional().describe("neoforge|forge|fabric|quilt"),
+        modloader: z.string().optional().describe("neoforge|forge|fabric|quilt|vanilla; discovery includes vanilla guides"),
         query: z.string().optional(),
-        limit: z.number().optional(),
-    }, safe(async ({ action, entries, id, fromVersion, toVersion, modloader, query, limit }) => {
+        limit: z.number().int().min(1).max(200).optional(),
+        fetchContent: z.boolean().optional().describe("get/seed/by_version: fetch missing content (default true); false permits cached/offline reads"),
+        includeContent: z.boolean().optional().describe("by_version: bundle guide bodies (default false); includes vanilla guides for the selected loader"),
+        maxChars: z.number().int().min(1000).max(200000).optional().describe("by_version with includeContent: combined text budget (default 60000); up to 20 guides per page"),
+        cursor: z.string().min(1).max(2048).optional().describe("by_version with includeContent: nextCursor from the previous page; retain the same range and loader"),
+        refresh: z.boolean().optional().describe("get: re-fetch even if cached; failed refresh preserves the cached guide"),
+        startLine: z.number().int().positive().optional().describe("get: first line, 1-based (default 1)"),
+        maxLines: z.number().int().min(1).max(2000).optional().describe("get: page size (default 400); follow nextStartLine until null"),
+    }, safe(async ({ action, entries, id, fromVersion, toVersion, modloader, query, limit, fetchContent, includeContent, maxChars, cursor, refresh, startLine, maxLines }) => {
         let result;
         switch (action) {
             case "ingest":
                 result = await ingestPrimer(entries);
                 break;
             case "seed":
-                result = await seedDefaultPrimers();
+                result = await seedDefaultPrimers(fetchContent);
                 break;
             case "get":
-                result = await getPrimer(id);
+                result = await getPrimer(id, { fetchContent, refresh, startLine, maxLines });
                 break;
             case "by_version":
-                result = await getPrimersByVersionRange(fromVersion, toVersion, modloader);
+                result = await getPrimersByVersionRange(fromVersion, toVersion, modloader, { includeContent, fetchContent, maxChars, cursor });
                 break;
             case "search":
                 result = await searchPrimers(query, modloader, fromVersion, toVersion, limit);
@@ -940,7 +961,7 @@ function createMcpServer() {
                 result = await backfillPrimerEmbeddings();
                 break;
         }
-        return out(result);
+        return { ...out(result), ...(result && typeof result === "object" && "failed" in result && Number(result.failed) > 0 ? { isError: true } : {}) };
     }));
     // ── 10. mc_registry ───────────────────────────────────────────────────────────
     server.tool("mc_registry", "Vanilla MC registry and meta data (blocks, commands, registries, sounds, item components). action=blocks|commands|registries|sounds|item_components|registry_entries|mcmeta_versions.", {
@@ -1305,6 +1326,12 @@ function createMcpServer() {
         return out(result);
     }));
     // ── 18. reports ───────────────────────────────────────────────────────────────
+    server.tool("project", "Import and query a private Gradle compile environment, including prepared ATs, mappings and loader patches. " +
+        "Use this instead of mc_source/mod source or member tools when answering about an imported project. " +
+        "Every query requires projectKey and immutable environmentId; no shared vanilla caches are modified. " +
+        "Export with scripts/gradle/modlens.init.gradle; use scripts/project-upload.mjs for remote imports. " +
+        "action=import_local|upload_begin|upload_chunk|upload_finish|upload_abort|list|info|classes|source|search|members|bytecode. " +
+        "list is restricted to the supplied private key. Search covers provided sources and cached decompiles, not all runtime transformations.", projectToolSchema, safe(async (params) => out(await projectAction(params))));
     server.tool("reports", "Generate Markdown reports. report=mixin_conflicts|tag_conflicts|version_conflicts|mod_overview|gradle_deps|pack_compat|dep_graph|sidedness|mod_complexity|pack_changelog. savePath to write to disk.", {
         report: z.enum(["mixin_conflicts", "tag_conflicts", "version_conflicts", "mod_overview", "gradle_deps", "pack_compat", "dep_graph", "sidedness", "mod_complexity", "pack_changelog"]),
         savePath: z.string().optional().describe("Absolute path to save the .md file, e.g. 'C:/reports/mixin_conflicts.md'"),
@@ -1469,8 +1496,23 @@ async function startHttpServer(port) {
     const transports = new Map();
     const readBody = (req) => new Promise((resolve, reject) => {
         const chunks = [];
-        req.on("data", (c) => chunks.push(c));
+        let size = 0;
+        let oversized = false;
+        req.on("data", (c) => {
+            size += c.length;
+            if (size > 8 * 1024 * 1024) {
+                if (!oversized) {
+                    oversized = true;
+                    chunks.length = 0;
+                    reject(new HttpBodyTooLargeError("Request body exceeds 8 MiB; use project upload chunks"));
+                }
+                return;
+            }
+            chunks.push(c);
+        });
         req.on("end", () => {
+            if (oversized)
+                return;
             const raw = Buffer.concat(chunks).toString("utf8");
             if (!raw)
                 return resolve(undefined);
@@ -1482,6 +1524,7 @@ async function startHttpServer(port) {
             }
         });
         req.on("error", reject);
+        req.on("aborted", () => reject(new Error("Request aborted")));
     });
     const sendJson = (res, status, body) => {
         const payload = JSON.stringify(body);
@@ -1551,6 +1594,8 @@ async function startHttpServer(port) {
         }
         catch (err) {
             if (!res.headersSent) {
+                if (err instanceof HttpBodyTooLargeError)
+                    return sendJson(res, 413, { error: err.message });
                 if (err instanceof JsonBodyParseError) {
                     return sendJson(res, 400, {
                         jsonrpc: "2.0",