@enactprotocol/mcp-server 1.2.0 → 1.2.1

package/dist/index.js

@@ -29,7 +29,7 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
-// ../../node_modules/uri-js/dist/es5/uri.all.js
+// node_modules/uri-js/dist/es5/uri.all.js
 var require_uri_all = __commonJS((exports, module) => {
   (function(global2, factory) {
     typeof exports === "object" && typeof module !== "undefined" ? factory(exports) : typeof define === "function" && define.amd ? define(["exports"], factory) : factory(global2.URI = global2.URI || {});
@@ -1033,7 +1033,7 @@ var require_uri_all = __commonJS((exports, module) => {
   });
 });
 
-// ../../node_modules/fast-deep-equal/index.js
+// node_modules/fast-deep-equal/index.js
 var require_fast_deep_equal = __commonJS((exports, module) => {
   module.exports = function equal(a, b) {
     if (a === b)
@@ -1075,7 +1075,7 @@ var require_fast_deep_equal = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/compile/ucs2length.js
+// node_modules/ajv/lib/compile/ucs2length.js
 var require_ucs2length = __commonJS((exports, module) => {
   module.exports = function ucs2length(str) {
     var length = 0, len = str.length, pos = 0, value;
@@ -1092,7 +1092,7 @@ var require_ucs2length = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/compile/util.js
+// node_modules/ajv/lib/compile/util.js
 var require_util = __commonJS((exports, module) => {
   module.exports = {
     copy,
@@ -1295,7 +1295,7 @@ var require_util = __commonJS((exports, module) => {
   }
 });
 
-// ../../node_modules/ajv/lib/compile/schema_obj.js
+// node_modules/ajv/lib/compile/schema_obj.js
 var require_schema_obj = __commonJS((exports, module) => {
   var util3 = require_util();
   module.exports = SchemaObject;
@@ -1304,7 +1304,7 @@ var require_schema_obj = __commonJS((exports, module) => {
   }
 });
 
-// ../../node_modules/json-schema-traverse/index.js
+// node_modules/json-schema-traverse/index.js
 var require_json_schema_traverse = __commonJS((exports, module) => {
   var traverse = module.exports = function(schema, opts, cb) {
     if (typeof opts == "function") {
@@ -1383,7 +1383,7 @@ var require_json_schema_traverse = __commonJS((exports, module) => {
   }
 });
 
-// ../../node_modules/ajv/lib/compile/resolve.js
+// node_modules/ajv/lib/compile/resolve.js
 var require_resolve = __commonJS((exports, module) => {
   var URI = require_uri_all();
   var equal = require_fast_deep_equal();
@@ -1624,7 +1624,7 @@ var require_resolve = __commonJS((exports, module) => {
   }
 });
 
-// ../../node_modules/ajv/lib/compile/error_classes.js
+// node_modules/ajv/lib/compile/error_classes.js
 var require_error_classes = __commonJS((exports, module) => {
   var resolve = require_resolve();
   module.exports = {
@@ -1651,7 +1651,7 @@ var require_error_classes = __commonJS((exports, module) => {
   }
 });
 
-// ../../node_modules/fast-json-stable-stringify/index.js
+// node_modules/fast-json-stable-stringify/index.js
 var require_fast_json_stable_stringify = __commonJS((exports, module) => {
   module.exports = function(data, opts) {
     if (!opts)
@@ -1714,7 +1714,7 @@ var require_fast_json_stable_stringify = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/validate.js
+// node_modules/ajv/lib/dotjs/validate.js
 var require_validate = __commonJS((exports, module) => {
   module.exports = function generate_validate(it, $keyword, $ruleType) {
     var out = "";
@@ -2182,7 +2182,7 @@ var require_validate = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/compile/index.js
+// node_modules/ajv/lib/compile/index.js
 var require_compile = __commonJS((exports, module) => {
   var resolve = require_resolve();
   var util3 = require_util();
@@ -2448,7 +2448,7 @@ var require_compile = __commonJS((exports, module) => {
   }
 });
 
-// ../../node_modules/ajv/lib/cache.js
+// node_modules/ajv/lib/cache.js
 var require_cache = __commonJS((exports, module) => {
   var Cache = module.exports = function Cache() {
     this._cache = {};
@@ -2467,7 +2467,7 @@ var require_cache = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/compile/formats.js
+// node_modules/ajv/lib/compile/formats.js
 var require_formats = __commonJS((exports, module) => {
   var util3 = require_util();
   var DATE = /^(\d\d\d\d)-(\d\d)-(\d\d)$/;
@@ -2567,7 +2567,7 @@ var require_formats = __commonJS((exports, module) => {
   }
 });
 
-// ../../node_modules/ajv/lib/dotjs/ref.js
+// node_modules/ajv/lib/dotjs/ref.js
 var require_ref = __commonJS((exports, module) => {
   module.exports = function generate_ref(it, $keyword, $ruleType) {
     var out = " ";
@@ -2693,7 +2693,7 @@ var require_ref = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/allOf.js
+// node_modules/ajv/lib/dotjs/allOf.js
 var require_allOf = __commonJS((exports, module) => {
   module.exports = function generate_allOf(it, $keyword, $ruleType) {
     var out = " ";
@@ -2736,7 +2736,7 @@ var require_allOf = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/anyOf.js
+// node_modules/ajv/lib/dotjs/anyOf.js
 var require_anyOf = __commonJS((exports, module) => {
   module.exports = function generate_anyOf(it, $keyword, $ruleType) {
     var out = " ";
@@ -2810,7 +2810,7 @@ var require_anyOf = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/comment.js
+// node_modules/ajv/lib/dotjs/comment.js
 var require_comment = __commonJS((exports, module) => {
   module.exports = function generate_comment(it, $keyword, $ruleType) {
     var out = " ";
@@ -2827,7 +2827,7 @@ var require_comment = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/const.js
+// node_modules/ajv/lib/dotjs/const.js
 var require_const = __commonJS((exports, module) => {
   module.exports = function generate_const(it, $keyword, $ruleType) {
     var out = " ";
@@ -2884,7 +2884,7 @@ var require_const = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/contains.js
+// node_modules/ajv/lib/dotjs/contains.js
 var require_contains = __commonJS((exports, module) => {
   module.exports = function generate_contains(it, $keyword, $ruleType) {
     var out = " ";
@@ -2963,7 +2963,7 @@ var require_contains = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/dependencies.js
+// node_modules/ajv/lib/dotjs/dependencies.js
 var require_dependencies = __commonJS((exports, module) => {
   module.exports = function generate_dependencies(it, $keyword, $ruleType) {
     var out = " ";
@@ -3126,7 +3126,7 @@ var require_dependencies = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/enum.js
+// node_modules/ajv/lib/dotjs/enum.js
 var require_enum = __commonJS((exports, module) => {
   module.exports = function generate_enum(it, $keyword, $ruleType) {
     var out = " ";
@@ -3192,7 +3192,7 @@ var require_enum = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/format.js
+// node_modules/ajv/lib/dotjs/format.js
 var require_format = __commonJS((exports, module) => {
   module.exports = function generate_format(it, $keyword, $ruleType) {
     var out = " ";
@@ -3342,7 +3342,7 @@ var require_format = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/if.js
+// node_modules/ajv/lib/dotjs/if.js
 var require_if = __commonJS((exports, module) => {
   module.exports = function generate_if(it, $keyword, $ruleType) {
     var out = " ";
@@ -3443,7 +3443,7 @@ var require_if = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/items.js
+// node_modules/ajv/lib/dotjs/items.js
 var require_items = __commonJS((exports, module) => {
   module.exports = function generate_items(it, $keyword, $ruleType) {
     var out = " ";
@@ -3581,7 +3581,7 @@ var require_items = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/_limit.js
+// node_modules/ajv/lib/dotjs/_limit.js
 var require__limit = __commonJS((exports, module) => {
   module.exports = function generate__limit(it, $keyword, $ruleType) {
     var out = " ";
@@ -3733,7 +3733,7 @@ var require__limit = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/_limitItems.js
+// node_modules/ajv/lib/dotjs/_limitItems.js
 var require__limitItems = __commonJS((exports, module) => {
   module.exports = function generate__limitItems(it, $keyword, $ruleType) {
     var out = " ";
@@ -3814,7 +3814,7 @@ var require__limitItems = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/_limitLength.js
+// node_modules/ajv/lib/dotjs/_limitLength.js
 var require__limitLength = __commonJS((exports, module) => {
   module.exports = function generate__limitLength(it, $keyword, $ruleType) {
     var out = " ";
@@ -3900,7 +3900,7 @@ var require__limitLength = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/_limitProperties.js
+// node_modules/ajv/lib/dotjs/_limitProperties.js
 var require__limitProperties = __commonJS((exports, module) => {
   module.exports = function generate__limitProperties(it, $keyword, $ruleType) {
     var out = " ";
@@ -3981,7 +3981,7 @@ var require__limitProperties = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/multipleOf.js
+// node_modules/ajv/lib/dotjs/multipleOf.js
 var require_multipleOf = __commonJS((exports, module) => {
   module.exports = function generate_multipleOf(it, $keyword, $ruleType) {
     var out = " ";
@@ -4062,7 +4062,7 @@ var require_multipleOf = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/not.js
+// node_modules/ajv/lib/dotjs/not.js
 var require_not = __commonJS((exports, module) => {
   module.exports = function generate_not(it, $keyword, $ruleType) {
     var out = " ";
@@ -4149,7 +4149,7 @@ var require_not = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/oneOf.js
+// node_modules/ajv/lib/dotjs/oneOf.js
 var require_oneOf = __commonJS((exports, module) => {
   module.exports = function generate_oneOf(it, $keyword, $ruleType) {
     var out = " ";
@@ -4221,7 +4221,7 @@ var require_oneOf = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/pattern.js
+// node_modules/ajv/lib/dotjs/pattern.js
 var require_pattern = __commonJS((exports, module) => {
   module.exports = function generate_pattern(it, $keyword, $ruleType) {
     var out = " ";
@@ -4297,7 +4297,7 @@ var require_pattern = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/properties.js
+// node_modules/ajv/lib/dotjs/properties.js
 var require_properties = __commonJS((exports, module) => {
   module.exports = function generate_properties(it, $keyword, $ruleType) {
     var out = " ";
@@ -4610,7 +4610,7 @@ var require_properties = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/propertyNames.js
+// node_modules/ajv/lib/dotjs/propertyNames.js
 var require_propertyNames = __commonJS((exports, module) => {
   module.exports = function generate_propertyNames(it, $keyword, $ruleType) {
     var out = " ";
@@ -4685,7 +4685,7 @@ var require_propertyNames = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/required.js
+// node_modules/ajv/lib/dotjs/required.js
 var require_required = __commonJS((exports, module) => {
   module.exports = function generate_required(it, $keyword, $ruleType) {
     var out = " ";
@@ -4942,7 +4942,7 @@ var require_required = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/uniqueItems.js
+// node_modules/ajv/lib/dotjs/uniqueItems.js
 var require_uniqueItems = __commonJS((exports, module) => {
   module.exports = function generate_uniqueItems(it, $keyword, $ruleType) {
     var out = " ";
@@ -5028,7 +5028,7 @@ var require_uniqueItems = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/dotjs/index.js
+// node_modules/ajv/lib/dotjs/index.js
 var require_dotjs = __commonJS((exports, module) => {
   module.exports = {
     $ref: require_ref(),
@@ -5062,7 +5062,7 @@ var require_dotjs = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/compile/rules.js
+// node_modules/ajv/lib/compile/rules.js
 var require_rules = __commonJS((exports, module) => {
   var ruleModules = require_dotjs();
   var toHash = require_util().toHash;
@@ -5154,7 +5154,7 @@ var require_rules = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/data.js
+// node_modules/ajv/lib/data.js
 var require_data = __commonJS((exports, module) => {
   var KEYWORDS = [
     "multipleOf",
@@ -5202,7 +5202,7 @@ var require_data = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/compile/async.js
+// node_modules/ajv/lib/compile/async.js
 var require_async = __commonJS((exports, module) => {
   var MissingRefError = require_error_classes().MissingRef;
   module.exports = compileAsync;
@@ -5266,7 +5266,7 @@ var require_async = __commonJS((exports, module) => {
   }
 });
 
-// ../../node_modules/ajv/lib/dotjs/custom.js
+// node_modules/ajv/lib/dotjs/custom.js
 var require_custom = __commonJS((exports, module) => {
   module.exports = function generate_custom(it, $keyword, $ruleType) {
     var out = " ";
@@ -5489,7 +5489,7 @@ var require_custom = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/refs/json-schema-draft-07.json
+// node_modules/ajv/lib/refs/json-schema-draft-07.json
 var require_json_schema_draft_07 = __commonJS((exports, module) => {
   module.exports = {
     $schema: "http://json-schema.org/draft-07/schema#",
@@ -5661,7 +5661,7 @@ var require_json_schema_draft_07 = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/definition_schema.js
+// node_modules/ajv/lib/definition_schema.js
 var require_definition_schema = __commonJS((exports, module) => {
   var metaSchema = require_json_schema_draft_07();
   module.exports = {
@@ -5699,7 +5699,7 @@ var require_definition_schema = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/keyword.js
+// node_modules/ajv/lib/keyword.js
 var require_keyword = __commonJS((exports, module) => {
   var IDENTIFIER = /^[a-z_$][a-z0-9_$-]*$/i;
   var customRuleCode = require_custom();
@@ -5797,7 +5797,7 @@ var require_keyword = __commonJS((exports, module) => {
   }
 });
 
-// ../../node_modules/ajv/lib/refs/data.json
+// node_modules/ajv/lib/refs/data.json
 var require_data2 = __commonJS((exports, module) => {
   module.exports = {
     $schema: "http://json-schema.org/draft-07/schema#",
@@ -5818,7 +5818,7 @@ var require_data2 = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/ajv/lib/ajv.js
+// node_modules/ajv/lib/ajv.js
 var require_ajv = __commonJS((exports, module) => {
   var compileSchema = require_compile();
   var resolve = require_resolve();
@@ -218990,7 +218990,7 @@ var require_dist3 = __commonJS((exports) => {
   exports.visitAsync = visit.visitAsync;
 });
 
-// ../../node_modules/zod/v3/external.js
+// node_modules/zod/v3/external.js
 var exports_external = {};
 __export(exports_external, {
   void: () => voidType,
@@ -219102,7 +219102,7 @@ __export(exports_external, {
   BRAND: () => BRAND
 });
 
-// ../../node_modules/zod/v3/helpers/util.js
+// node_modules/zod/v3/helpers/util.js
 var util;
 (function(util2) {
   util2.assertEqual = (_) => {};
@@ -219233,7 +219233,7 @@ var getParsedType = (data) => {
   }
 };
 
-// ../../node_modules/zod/v3/ZodError.js
+// node_modules/zod/v3/ZodError.js
 var ZodIssueCode = util.arrayToEnum([
   "invalid_type",
   "invalid_literal",
@@ -219352,7 +219352,7 @@ ZodError.create = (issues) => {
   return error;
 };
 
-// ../../node_modules/zod/v3/locales/en.js
+// node_modules/zod/v3/locales/en.js
 var errorMap = (issue, _ctx) => {
   let message;
   switch (issue.code) {
@@ -219455,7 +219455,7 @@ var errorMap = (issue, _ctx) => {
 };
 var en_default = errorMap;
 
-// ../../node_modules/zod/v3/errors.js
+// node_modules/zod/v3/errors.js
 var overrideErrorMap = en_default;
 function setErrorMap(map) {
   overrideErrorMap = map;
@@ -219463,7 +219463,7 @@ function setErrorMap(map) {
 function getErrorMap() {
   return overrideErrorMap;
 }
-// ../../node_modules/zod/v3/helpers/parseUtil.js
+// node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
   const { data, path, errorMaps, issueData } = params;
   const fullPath = [...path, ...issueData.path || []];
@@ -219569,14 +219569,14 @@ var isAborted = (x) => x.status === "aborted";
 var isDirty = (x) => x.status === "dirty";
 var isValid = (x) => x.status === "valid";
 var isAsync = (x) => typeof Promise !== "undefined" && x instanceof Promise;
-// ../../node_modules/zod/v3/helpers/errorUtil.js
+// node_modules/zod/v3/helpers/errorUtil.js
 var errorUtil;
 (function(errorUtil2) {
   errorUtil2.errToObj = (message) => typeof message === "string" ? { message } : message || {};
   errorUtil2.toString = (message) => typeof message === "string" ? message : message?.message;
 })(errorUtil || (errorUtil = {}));
 
-// ../../node_modules/zod/v3/types.js
+// node_modules/zod/v3/types.js
 class ParseInputLazyPath {
   constructor(parent, value, path, key) {
     this._cachedPath = [];
@@ -222963,7 +222963,7 @@ var coerce = {
   date: (arg) => ZodDate.create({ ...arg, coerce: true })
 };
 var NEVER = INVALID;
-// ../../node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
+// node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
 var LATEST_PROTOCOL_VERSION = "2025-06-18";
 var SUPPORTED_PROTOCOL_VERSIONS = [
   LATEST_PROTOCOL_VERSION,
@@ -223505,7 +223505,7 @@ class McpError extends Error {
   }
 }
 
-// ../../node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
+// node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
 var DEFAULT_REQUEST_TIMEOUT_MSEC = 60000;
 
 class Protocol {
@@ -223518,6 +223518,7 @@ class Protocol {
     this._responseHandlers = new Map;
     this._progressHandlers = new Map;
     this._timeoutInfo = new Map;
+    this._pendingDebouncedNotifications = new Set;
     this.setNotificationHandler(CancelledNotificationSchema, (notification) => {
       const controller = this._requestHandlerAbortControllers.get(notification.params.requestId);
       controller === null || controller === undefined || controller.abort(notification.params.reason);
@@ -223590,6 +223591,7 @@ class Protocol {
     const responseHandlers = this._responseHandlers;
     this._responseHandlers = new Map;
     this._progressHandlers.clear();
+    this._pendingDebouncedNotifications.clear();
     this._transport = undefined;
     (_a = this.onclose) === null || _a === undefined || _a.call(this);
     const error = new McpError(ErrorCode.ConnectionClosed, "Connection closed");
@@ -223778,10 +223780,32 @@ class Protocol {
     });
   }
   async notification(notification, options) {
+    var _a, _b;
     if (!this._transport) {
       throw new Error("Not connected");
     }
     this.assertNotificationCapability(notification.method);
+    const debouncedMethods = (_b = (_a = this._options) === null || _a === undefined ? undefined : _a.debouncedNotificationMethods) !== null && _b !== undefined ? _b : [];
+    const canDebounce = debouncedMethods.includes(notification.method) && !notification.params && !(options === null || options === undefined ? undefined : options.relatedRequestId);
+    if (canDebounce) {
+      if (this._pendingDebouncedNotifications.has(notification.method)) {
+        return;
+      }
+      this._pendingDebouncedNotifications.add(notification.method);
+      Promise.resolve().then(() => {
+        var _a2;
+        this._pendingDebouncedNotifications.delete(notification.method);
+        if (!this._transport) {
+          return;
+        }
+        const jsonrpcNotification2 = {
+          ...notification,
+          jsonrpc: "2.0"
+        };
+        (_a2 = this._transport) === null || _a2 === undefined || _a2.send(jsonrpcNotification2, options).catch((error) => this._onerror(error));
+      });
+      return;
+    }
     const jsonrpcNotification = {
       ...notification,
       jsonrpc: "2.0"
@@ -223821,7 +223845,7 @@ function mergeCapabilities(base, additional) {
   }, { ...base });
 }
 
-// ../../node_modules/@modelcontextprotocol/sdk/dist/esm/server/index.js
+// node_modules/@modelcontextprotocol/sdk/dist/esm/server/index.js
 var import_ajv = __toESM(require_ajv(), 1);
 
 class Server extends Protocol {
@@ -224001,7 +224025,7 @@ class Server extends Protocol {
   }
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/Options.js
+// node_modules/zod-to-json-schema/dist/esm/Options.js
 var ignoreOverride = Symbol("Let zodToJsonSchema decide on which parser to use");
 var defaultOptions = {
   name: undefined,
@@ -224034,7 +224058,7 @@ var getDefaultOptions = (options) => typeof options === "string" ? {
   ...defaultOptions,
   ...options
 };
-// ../../node_modules/zod-to-json-schema/dist/esm/Refs.js
+// node_modules/zod-to-json-schema/dist/esm/Refs.js
 var getRefs = (options) => {
   const _options = getDefaultOptions(options);
   const currentPath = _options.name !== undefined ? [..._options.basePath, _options.definitionPath, _options.name] : _options.basePath;
@@ -224053,7 +224077,7 @@ var getRefs = (options) => {
     ]))
   };
 };
-// ../../node_modules/zod-to-json-schema/dist/esm/errorMessages.js
+// node_modules/zod-to-json-schema/dist/esm/errorMessages.js
 function addErrorMessage(res, key, errorMessage, refs) {
   if (!refs?.errorMessages)
     return;
@@ -224068,7 +224092,7 @@ function setResponseValueAndErrors(res, key, value, errorMessage, refs) {
   res[key] = value;
   addErrorMessage(res, key, errorMessage, refs);
 }
-// ../../node_modules/zod-to-json-schema/dist/esm/getRelativePath.js
+// node_modules/zod-to-json-schema/dist/esm/getRelativePath.js
 var getRelativePath = (pathA, pathB) => {
   let i = 0;
   for (;i < pathA.length && i < pathB.length; i++) {
@@ -224077,7 +224101,7 @@ var getRelativePath = (pathA, pathB) => {
   }
   return [(pathA.length - i).toString(), ...pathB.slice(i)].join("/");
 };
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/any.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/any.js
 function parseAnyDef(refs) {
   if (refs.target !== "openAi") {
     return {};
@@ -224093,7 +224117,7 @@ function parseAnyDef(refs) {
   };
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/array.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/array.js
 function parseArrayDef(def, refs) {
   const res = {
     type: "array"
@@ -224117,7 +224141,7 @@ function parseArrayDef(def, refs) {
   return res;
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/bigint.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/bigint.js
 function parseBigintDef(def, refs) {
   const res = {
     type: "integer",
@@ -224163,24 +224187,24 @@ function parseBigintDef(def, refs) {
   return res;
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/boolean.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/boolean.js
 function parseBooleanDef() {
   return {
     type: "boolean"
   };
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/branded.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/branded.js
 function parseBrandedDef(_def, refs) {
   return parseDef(_def.type._def, refs);
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/catch.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/catch.js
 var parseCatchDef = (def, refs) => {
   return parseDef(def.innerType._def, refs);
 };
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/date.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/date.js
 function parseDateDef(def, refs, overrideDateStrategy) {
   const strategy = overrideDateStrategy ?? refs.dateStrategy;
   if (Array.isArray(strategy)) {
@@ -224225,7 +224249,7 @@ var integerDateParser = (def, refs) => {
   return res;
 };
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/default.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/default.js
 function parseDefaultDef(_def, refs) {
   return {
     ...parseDef(_def.innerType._def, refs),
@@ -224233,12 +224257,12 @@ function parseDefaultDef(_def, refs) {
   };
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/effects.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/effects.js
 function parseEffectsDef(_def, refs) {
   return refs.effectStrategy === "input" ? parseDef(_def.schema._def, refs) : parseAnyDef(refs);
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/enum.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/enum.js
 function parseEnumDef(def) {
   return {
     type: "string",
@@ -224246,7 +224270,7 @@ function parseEnumDef(def) {
   };
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/intersection.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/intersection.js
 var isJsonSchema7AllOfType = (type) => {
   if ("type" in type && type.type === "string")
     return false;
@@ -224288,7 +224312,7 @@ function parseIntersectionDef(def, refs) {
   } : undefined;
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/literal.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/literal.js
 function parseLiteralDef(def, refs) {
   const parsedType = typeof def.value;
   if (parsedType !== "bigint" && parsedType !== "number" && parsedType !== "boolean" && parsedType !== "string") {
@@ -224308,7 +224332,7 @@ function parseLiteralDef(def, refs) {
   };
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/string.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/string.js
 var emojiRegex2 = undefined;
 var zodPatterns = {
   cuid: /^[cC][^\s-]{8,}$/,
@@ -224605,7 +224629,7 @@ function stringifyRegExpWithFlags(regex, refs) {
   return pattern;
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/record.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/record.js
 function parseRecordDef(def, refs) {
   if (refs.target === "openAi") {
     console.warn("Warning: OpenAI may not support records in schemas! Try an array of key-value pairs instead.");
@@ -224657,7 +224681,7 @@ function parseRecordDef(def, refs) {
   return schema;
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/map.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/map.js
 function parseMapDef(def, refs) {
   if (refs.mapStrategy === "record") {
     return parseRecordDef(def, refs);
@@ -224682,7 +224706,7 @@ function parseMapDef(def, refs) {
   };
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/nativeEnum.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/nativeEnum.js
 function parseNativeEnumDef(def) {
   const object = def.values;
   const actualKeys = Object.keys(def.values).filter((key) => {
@@ -224696,7 +224720,7 @@ function parseNativeEnumDef(def) {
   };
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/never.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/never.js
 function parseNeverDef(refs) {
   return refs.target === "openAi" ? undefined : {
     not: parseAnyDef({
@@ -224706,7 +224730,7 @@ function parseNeverDef(refs) {
   };
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/null.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/null.js
 function parseNullDef(refs) {
   return refs.target === "openApi3" ? {
     enum: ["null"],
@@ -224716,7 +224740,7 @@ function parseNullDef(refs) {
   };
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/union.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/union.js
 var primitiveMappings = {
   ZodString: "string",
   ZodNumber: "number",
@@ -224784,7 +224808,7 @@ var asAnyOf = (def, refs) => {
   return anyOf.length ? { anyOf } : undefined;
 };
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/nullable.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/nullable.js
 function parseNullableDef(def, refs) {
   if (["ZodString", "ZodNumber", "ZodBigInt", "ZodBoolean", "ZodNull"].includes(def.innerType._def.typeName) && (!def.innerType._def.checks || !def.innerType._def.checks.length)) {
     if (refs.target === "openApi3") {
@@ -224816,7 +224840,7 @@ function parseNullableDef(def, refs) {
   return base && { anyOf: [base, { type: "null" }] };
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/number.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/number.js
 function parseNumberDef(def, refs) {
   const res = {
     type: "number"
@@ -224865,7 +224889,7 @@ function parseNumberDef(def, refs) {
   return res;
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/object.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/object.js
 function parseObjectDef(def, refs) {
   const forceOptionalIntoNullable = refs.target === "openAi";
   const result = {
@@ -224935,7 +224959,7 @@ function safeIsOptional(schema) {
   }
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/optional.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/optional.js
 var parseOptionalDef = (def, refs) => {
   if (refs.currentPath.toString() === refs.propertyPath?.toString()) {
     return parseDef(def.innerType._def, refs);
@@ -224954,7 +224978,7 @@ var parseOptionalDef = (def, refs) => {
   } : parseAnyDef(refs);
 };
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/pipeline.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/pipeline.js
 var parsePipelineDef = (def, refs) => {
   if (refs.pipeStrategy === "input") {
     return parseDef(def.in._def, refs);
@@ -224974,12 +224998,12 @@ var parsePipelineDef = (def, refs) => {
   };
 };
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/promise.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/promise.js
 function parsePromiseDef(def, refs) {
   return parseDef(def.type._def, refs);
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/set.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/set.js
 function parseSetDef(def, refs) {
   const items = parseDef(def.valueType._def, {
     ...refs,
@@ -224999,7 +225023,7 @@ function parseSetDef(def, refs) {
   return schema;
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/tuple.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/tuple.js
 function parseTupleDef(def, refs) {
   if (def.rest) {
     return {
@@ -225027,24 +225051,24 @@ function parseTupleDef(def, refs) {
   }
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/undefined.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/undefined.js
 function parseUndefinedDef(refs) {
   return {
     not: parseAnyDef(refs)
   };
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/unknown.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/unknown.js
 function parseUnknownDef(refs) {
   return parseAnyDef(refs);
 }
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parsers/readonly.js
+// node_modules/zod-to-json-schema/dist/esm/parsers/readonly.js
 var parseReadonlyDef = (def, refs) => {
   return parseDef(def.innerType._def, refs);
 };
 
-// ../../node_modules/zod-to-json-schema/dist/esm/selectParser.js
+// node_modules/zod-to-json-schema/dist/esm/selectParser.js
 var selectParser = (def, typeName, refs) => {
   switch (typeName) {
     case ZodFirstPartyTypeKind.ZodString:
@@ -225122,7 +225146,7 @@ var selectParser = (def, typeName, refs) => {
   }
 };
 
-// ../../node_modules/zod-to-json-schema/dist/esm/parseDef.js
+// node_modules/zod-to-json-schema/dist/esm/parseDef.js
 function parseDef(def, refs, forceResolution = false) {
   const seenItem = refs.seen.get(def);
   if (refs.override) {
@@ -225177,7 +225201,7 @@ var addMeta = (def, refs, jsonSchema) => {
   }
   return jsonSchema;
 };
-// ../../node_modules/zod-to-json-schema/dist/esm/zodToJsonSchema.js
+// node_modules/zod-to-json-schema/dist/esm/zodToJsonSchema.js
 var zodToJsonSchema = (schema, options) => {
   const refs = getRefs(options);
   let definitions = typeof options === "object" && options.definitions ? Object.entries(options.definitions).reduce((acc, [name2, schema2]) => ({
@@ -225237,7 +225261,7 @@ var zodToJsonSchema = (schema, options) => {
   }
   return combined;
 };
-// ../../node_modules/@modelcontextprotocol/sdk/dist/esm/server/completable.js
+// node_modules/@modelcontextprotocol/sdk/dist/esm/server/completable.js
 var McpZodTypeKind;
 (function(McpZodTypeKind2) {
   McpZodTypeKind2["Completable"] = "McpCompletable";
@@ -225290,7 +225314,7 @@ function processCreateParams2(params) {
   return { errorMap: customMap, description };
 }
 
-// ../../node_modules/@modelcontextprotocol/sdk/dist/esm/server/mcp.js
+// node_modules/@modelcontextprotocol/sdk/dist/esm/server/mcp.js
 class McpServer {
   constructor(serverInfo, options) {
     this._registeredResources = {};
@@ -225847,10 +225871,10 @@ var EMPTY_COMPLETION_RESULT = {
   }
 };
 
-// ../../node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
+// node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 import process2 from "node:process";
 
-// ../../node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
+// node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
 class ReadBuffer {
   append(chunk) {
     this._buffer = this._buffer ? Buffer.concat([this._buffer, chunk]) : chunk;
@@ -225880,7 +225904,7 @@ function serializeMessage(message) {
 `;
 }
 
-// ../../node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
+// node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 class StdioServerTransport {
   constructor(_stdin = process2.stdin, _stdout = process2.stdout) {
     this._stdin = _stdin;
@@ -225941,7 +225965,7 @@ class StdioServerTransport {
   }
 }
 
-// ../shared/dist/api/enact-api.js
+// node_modules/@enactprotocol/shared/dist/api/enact-api.js
 class EnactApiClient {
   constructor(baseUrl = "https://enact.tools", supabaseUrl = "https://xjnhhxwxovjifdxdwzih.supabase.co") {
     this.baseUrl = baseUrl.replace(/\/$/, "");
@@ -226239,7 +226263,7 @@ class EnactApiError extends Error {
   }
 }
 
-// ../shared/dist/exec/validate.js
+// node_modules/@enactprotocol/shared/dist/exec/validate.js
 function validateAgainstSchema(value, schema, fieldName) {
   const { type, format, enum: enumValues, minimum, maximum, pattern, required } = schema;
   if (type) {
@@ -226365,14 +226389,14 @@ function validateInputs(tool, inputs) {
   return validatedInputs;
 }
 
-// ../shared/dist/core/DirectExecutionProvider.js
+// node_modules/@enactprotocol/shared/dist/core/DirectExecutionProvider.js
 import { spawn } from "child_process";
 
-// ../shared/dist/types.js
+// node_modules/@enactprotocol/shared/dist/types.js
 class ExecutionProvider {
 }
 
-// ../shared/dist/exec/logger.js
+// node_modules/@enactprotocol/shared/dist/exec/logger.js
 var import_pino = __toESM(require_pino(), 1);
 var isSilentMode = () => process.env.CI === "true" || false || process.env.ENACT_SILENT === "true" || process.env.ENACT_SKIP_INTERACTIVE === "true";
 var logger = import_pino.default({
@@ -226420,7 +226444,7 @@ var wrappedLogger = {
 };
 var logger_default = wrappedLogger;
 
-// ../shared/dist/utils/timeout.js
+// node_modules/@enactprotocol/shared/dist/utils/timeout.js
 function parseTimeout(timeout) {
   const match = timeout.match(/^(\d+)([smh])$/);
   if (!match) {
@@ -226440,7 +226464,7 @@ function parseTimeout(timeout) {
   }
 }
 
-// ../shared/dist/core/DirectExecutionProvider.js
+// node_modules/@enactprotocol/shared/dist/core/DirectExecutionProvider.js
 class DirectExecutionProvider extends ExecutionProvider {
   async resolveEnvironmentVariables(envConfig, namespace) {
     const resolved = {};
@@ -235013,7 +235037,7 @@ var import_typescript = __toESM(require_typescript(), 1);
 var __filename2 = fileURLToPath3(import.meta.url);
 var __dirname2 = path5.dirname(__filename2);
 var moduleSrcDirectory = `${__dirname2}/../../src/`;
-// ../shared/dist/core/DaggerExecutionProvider.js
+// node_modules/@enactprotocol/shared/dist/core/DaggerExecutionProvider.js
 import fs3 from "fs/promises";
 import path6 from "path";
 import crypto3 from "crypto";
@@ -235808,7 +235832,7 @@ class DaggerExecutionProvider extends ExecutionProvider {
   }
 }
 
-// ../shared/dist/utils/env-loader.js
+// node_modules/@enactprotocol/shared/dist/utils/env-loader.js
 var import_dotenv = __toESM(require_main(), 1);
 import { join as join2 } from "path";
 import { homedir as homedir2 } from "os";
@@ -235970,14 +235994,17 @@ function generateConfigLink(missingVars, toolName) {
   return `${webUrl}/?vars=${encodedVars}&package=${encodedPackage}`;
 }
 
-// ../shared/dist/core/EnactCore.js
+// node_modules/@enactprotocol/shared/dist/core/EnactCore.js
 var import_yaml = __toESM(require_dist3(), 1);
 
-// ../shared/node_modules/@enactprotocol/security/dist/index.js
+// ../../node_modules/@enactprotocol/security/dist/index.js
 import * as nc from "node:crypto";
 import fs4 from "fs";
 import path7 from "path";
 import os4 from "os";
+import fs22 from "fs";
+import path22 from "path";
+import os22 from "os";
 var crypto4 = nc && typeof nc === "object" && "webcrypto" in nc ? nc.webcrypto : nc && typeof nc === "object" && ("randomBytes" in nc) ? nc : undefined;
 /*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */
 function isBytes(a) {
@@ -238353,7 +238380,7 @@ class KeyManager {
   static getAllTrustedPublicKeys() {
     try {
       this.ensureDirectories();
-      return fs4.readdirSync(this.TRUSTED_KEYS_DIR).filter((file) => file.endsWith("-public.pem")).map((file) => {
+      return fs4.readdirSync(this.TRUSTED_KEYS_DIR).filter((file) => file.endsWith(".pem")).map((file) => {
         try {
           const publicKeyPem = fs4.readFileSync(path7.join(this.TRUSTED_KEYS_DIR, file), "utf8").trim();
           return CryptoUtils.pemToHex(publicKeyPem, "PUBLIC");
@@ -238420,6 +238447,165 @@ class KeyManager {
   }
 }
 
+class SecurityConfigManager {
+  static ENACT_DIR = path22.join(os22.homedir(), ".enact");
+  static SECURITY_DIR = path22.join(this.ENACT_DIR, "security");
+  static CONFIG_FILE = path22.join(this.SECURITY_DIR, "config.json");
+  static ensureDirectories() {
+    try {
+      if (!fs22.existsSync(this.ENACT_DIR)) {
+        fs22.mkdirSync(this.ENACT_DIR, { recursive: true, mode: 493 });
+        console.log(`Created .enact directory: ${this.ENACT_DIR}`);
+      }
+      if (!fs22.existsSync(this.SECURITY_DIR)) {
+        fs22.mkdirSync(this.SECURITY_DIR, { recursive: true, mode: 493 });
+        console.log(`Created security directory: ${this.SECURITY_DIR}`);
+      }
+    } catch (error) {
+      console.warn(`Failed to create directories: ${error instanceof Error ? error.message : String(error)}`);
+    }
+  }
+  static initializeConfig() {
+    this.ensureDirectories();
+    try {
+      if (fs22.existsSync(this.CONFIG_FILE)) {
+        console.log(`Security config already exists: ${this.CONFIG_FILE}`);
+        return this.loadConfig();
+      }
+      const defaultConfig = { ...DEFAULT_SECURITY_CONFIG };
+      const configContent = JSON.stringify(defaultConfig, null, 2);
+      fs22.writeFileSync(this.CONFIG_FILE, configContent, { mode: 420 });
+      console.log(`Initialized security config: ${this.CONFIG_FILE}`);
+      console.log("Default config:", defaultConfig);
+      return defaultConfig;
+    } catch (error) {
+      console.warn(`Failed to initialize security config: ${error instanceof Error ? error.message : String(error)}`);
+      console.log("Using in-memory default config");
+      return { ...DEFAULT_SECURITY_CONFIG };
+    }
+  }
+  static loadConfig() {
+    try {
+      if (!fs22.existsSync(this.CONFIG_FILE)) {
+        console.log("No security config file found, initializing...");
+        return this.initializeConfig();
+      }
+      const configContent = fs22.readFileSync(this.CONFIG_FILE, "utf8");
+      const config = JSON.parse(configContent);
+      const mergedConfig = { ...DEFAULT_SECURITY_CONFIG, ...config };
+      console.log(`Loaded security config from: ${this.CONFIG_FILE}`);
+      return mergedConfig;
+    } catch (error) {
+      console.warn(`Failed to load security config: ${error instanceof Error ? error.message : String(error)}`);
+      console.log("Using default config");
+      return { ...DEFAULT_SECURITY_CONFIG };
+    }
+  }
+  static saveConfig(config) {
+    this.ensureDirectories();
+    try {
+      const configToSave = { ...DEFAULT_SECURITY_CONFIG, ...config };
+      const configContent = JSON.stringify(configToSave, null, 2);
+      fs22.writeFileSync(this.CONFIG_FILE, configContent, { mode: 420 });
+      console.log(`Saved security config to: ${this.CONFIG_FILE}`);
+      return true;
+    } catch (error) {
+      console.error(`Failed to save security config: ${error instanceof Error ? error.message : String(error)}`);
+      return false;
+    }
+  }
+  static updateConfig(updates) {
+    const currentConfig = this.loadConfig();
+    const updatedConfig = { ...currentConfig, ...updates };
+    if (this.saveConfig(updatedConfig)) {
+      console.log("Security config updated:", updates);
+      return updatedConfig;
+    } else {
+      console.warn("Failed to save updated config, returning current config");
+      return currentConfig;
+    }
+  }
+  static resetToDefaults() {
+    const defaultConfig = { ...DEFAULT_SECURITY_CONFIG };
+    if (this.saveConfig(defaultConfig)) {
+      console.log("Security config reset to defaults");
+      return defaultConfig;
+    } else {
+      console.warn("Failed to reset config");
+      return this.loadConfig();
+    }
+  }
+  static getPaths() {
+    return {
+      enactDir: this.ENACT_DIR,
+      securityDir: this.SECURITY_DIR,
+      configFile: this.CONFIG_FILE
+    };
+  }
+  static configExists() {
+    return fs22.existsSync(this.CONFIG_FILE);
+  }
+  static getStatus() {
+    const paths = this.getPaths();
+    return {
+      enactDirExists: fs22.existsSync(paths.enactDir),
+      securityDirExists: fs22.existsSync(paths.securityDir),
+      configFileExists: fs22.existsSync(paths.configFile),
+      paths
+    };
+  }
+  static validateConfig(config) {
+    if (typeof config !== "object" || config === null) {
+      return false;
+    }
+    if ("allowLocalUnsigned" in config && typeof config.allowLocalUnsigned !== "boolean") {
+      return false;
+    }
+    if ("minimumSignatures" in config) {
+      if (typeof config.minimumSignatures !== "number" || config.minimumSignatures < 0 || !Number.isInteger(config.minimumSignatures)) {
+        return false;
+      }
+    }
+    return true;
+  }
+  static importConfig(filePath) {
+    try {
+      if (!fs22.existsSync(filePath)) {
+        console.error(`Config file does not exist: ${filePath}`);
+        return null;
+      }
+      const configContent = fs22.readFileSync(filePath, "utf8");
+      const config = JSON.parse(configContent);
+      if (!this.validateConfig(config)) {
+        console.error("Invalid config format");
+        return null;
+      }
+      if (this.saveConfig(config)) {
+        console.log(`Imported config from: ${filePath}`);
+        return config;
+      } else {
+        console.error("Failed to save imported config");
+        return null;
+      }
+    } catch (error) {
+      console.error(`Failed to import config: ${error instanceof Error ? error.message : String(error)}`);
+      return null;
+    }
+  }
+  static exportConfig(filePath) {
+    try {
+      const config = this.loadConfig();
+      const configContent = JSON.stringify(config, null, 2);
+      fs22.writeFileSync(filePath, configContent, { mode: 420 });
+      console.log(`Exported config to: ${filePath}`);
+      return true;
+    } catch (error) {
+      console.error(`Failed to export config: ${error instanceof Error ? error.message : String(error)}`);
+      return false;
+    }
+  }
+}
+
 class SigningService {
   static signDocument(document, privateKey, options = {}) {
     const {
@@ -238446,14 +238632,15 @@ class SigningService {
       timestamp: Date.now()
     };
   }
-  static verifyDocument(document, signature, options = {}, securityConfig = DEFAULT_SECURITY_CONFIG) {
+  static verifyDocument(document, signature, options = {}, securityConfig) {
     const {
       useEnactDefaults = false,
       includeFields,
       excludeFields,
       additionalCriticalFields
     } = options;
-    const config = { ...DEFAULT_SECURITY_CONFIG, ...securityConfig };
+    const loadedConfig = securityConfig ?? SecurityConfigManager.loadConfig();
+    const config = { ...DEFAULT_SECURITY_CONFIG, ...loadedConfig };
     const signatures = document.signatures || [signature];
     if (signatures.length < (config.minimumSignatures ?? 1)) {
       if (config.allowLocalUnsigned && signatures.length === 0) {
@@ -238522,7 +238709,7 @@ class SigningService {
   }
 }
 
-// ../shared/dist/core/EnactCore.js
+// node_modules/@enactprotocol/shared/dist/core/EnactCore.js
 class EnactCore {
   constructor(options = {}) {
     this.options = {
@@ -238721,6 +238908,7 @@ class EnactCore {
     }
   }
   async verifyTool(tool, dangerouslySkipVerification = false) {
+    console.log("=== VERIFY TOOL CALLED ===", tool.name, "skipVerification:", dangerouslySkipVerification);
     if (dangerouslySkipVerification) {
       logger_default.warn(`Skipping signature verification for tool: ${tool.name}`);
       return;
@@ -238729,22 +238917,32 @@ class EnactCore {
       if (!tool.signatures || tool.signatures.length === 0) {
         throw new Error(`Tool ${tool.name} does not have any signatures`);
       }
+      console.log("=== TOOL SIGNATURE DATA ===");
+      console.log("Tool signatures from database:", JSON.stringify(tool.signatures, null, 2));
+      console.log("Tool command:", tool.command);
       const documentForVerification = {
         command: tool.command
       };
       const referenceSignature = {
         signature: tool.signatures[0].value,
-        publicKey: tool.signatures[0].signer,
+        publicKey: "",
         algorithm: tool.signatures[0].algorithm,
         timestamp: new Date(tool.signatures[0].created).getTime()
       };
       const canonicalDoc = SigningService.getCanonicalDocument(documentForVerification, { includeFields: ["command"] });
+      console.log("=== SIGNATURE VERIFICATION DEBUG ===");
+      console.log("Original document for verification:", JSON.stringify(documentForVerification, null, 2));
+      console.log("Canonical document:", JSON.stringify(canonicalDoc, null, 2));
       const docString = JSON.stringify(canonicalDoc);
       const messageHash = CryptoUtils.hash(docString);
+      console.log("Document string:", docString);
+      console.log("Message hash:", messageHash);
+      console.log("Reference signature object:", JSON.stringify(referenceSignature, null, 2));
       const directVerify = CryptoUtils.verify(referenceSignature.publicKey, messageHash, referenceSignature.signature);
-      console.log("Direct crypto verification result:", directVerify);
+      console.log("KEITH DEBUG - Direct crypto verification result:", directVerify, "publicKey:", referenceSignature.publicKey);
       const trustedKeys = KeyManager.getAllTrustedPublicKeys();
       console.log("Trusted keys:", trustedKeys);
+      console.log("Our referenceSignature.publicKey:", JSON.stringify(referenceSignature.publicKey));
       console.log("Is our public key trusted?", trustedKeys.includes(referenceSignature.publicKey));
       const isValid2 = SigningService.verifyDocument(documentForVerification, referenceSignature, { includeFields: ["command"] });
       console.log("Final verification result:", isValid2);
@@ -238763,7 +238961,15 @@ class EnactCore {
       logger_default.info(`Executing tool: ${tool.name}`);
       validateToolStructure(tool);
       const validatedInputs = validateInputs(tool, inputs);
-      await this.verifyTool(tool, options.dangerouslySkipVerification);
+      const config = SecurityConfigManager.loadConfig();
+      if (options.isLocalFile && config.allowLocalUnsigned) {
+        logger_default.warn(`Executing local file without signature verification: ${tool.name} (you can disallow in your security config)`);
+      }
+      if (options.dangerouslySkipVerification) {
+        logger_default.warn(`Skipping signature verification for tool: ${tool.name} because of dangerouslySkipVerification option`);
+      }
+      const skipVerification = options.isLocalFile && config.allowLocalUnsigned || Boolean(options.dangerouslySkipVerification);
+      await this.verifyTool(tool, skipVerification);
       const { resolved: envVars } = await resolveToolEnvironmentVariables(tool.name, tool.env || {});
       return await this.executionProvider.execute(tool, { ...validatedInputs, ...envVars }, {
         vars: { ...envVars, ...validatedInputs },
@@ -238925,14 +239131,14 @@ class EnactCore {
     return `exec_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;
   }
 }
-// ../shared/dist/utils/config.js
+// node_modules/@enactprotocol/shared/dist/utils/config.js
 import { homedir as homedir3 } from "os";
 import { join as join3 } from "path";
 var CONFIG_DIR2 = join3(homedir3(), ".enact");
 var CONFIG_FILE = join3(CONFIG_DIR2, "config.json");
-// ../shared/dist/utils/help.js
-var __dirname = "/Users/keithgroves/projects/enact/enact-cli/packages/shared/dist/utils";
-// ../shared/dist/utils/logger.js
+// node_modules/@enactprotocol/shared/dist/utils/help.js
+var __dirname = "/Users/keithgroves/projects/enact/enact-cli/packages/mcp-server/node_modules/@enactprotocol/shared/dist/utils";
+// node_modules/@enactprotocol/shared/dist/utils/logger.js
 var LogLevel;
 (function(LogLevel2) {
   LogLevel2[LogLevel2["DEBUG"] = 0] = "DEBUG";
@@ -238942,7 +239148,7 @@ var LogLevel;
   LogLevel2[LogLevel2["ERROR"] = 4] = "ERROR";
 })(LogLevel || (LogLevel = {}));
 var currentLogLevel = LogLevel.INFO;
-// ../shared/dist/utils/silent-monitor.js
+// node_modules/@enactprotocol/shared/dist/utils/silent-monitor.js
 class McpSilentOperationMonitor {
   getOriginalConsoleError() {
     return this.originalConsoleError;
@@ -239070,9 +239276,9 @@ function validateSilentEnvironment() {
     issues
   };
 }
-// ../shared/dist/utils/version.js
-var __filename = "/Users/keithgroves/projects/enact/enact-cli/packages/shared/dist/utils/version.js";
-// ../shared/dist/web/env-manager-server.js
+// node_modules/@enactprotocol/shared/dist/utils/version.js
+var __filename = "/Users/keithgroves/projects/enact/enact-cli/packages/mcp-server/node_modules/@enactprotocol/shared/dist/utils/version.js";
+// node_modules/@enactprotocol/shared/dist/web/env-manager-server.js
 import { createServer } from "http";
 import { parse as parse3 } from "url";
 import { readFile as readFile2, writeFile, mkdir, readdir, stat as stat2 } from "fs/promises";
@@ -239353,7 +239559,7 @@ function startEnvManagerServer(port = 5555) {
     });
   });
 }
-// ../shared/dist/LocalToolResolver.js
+// node_modules/@enactprotocol/shared/dist/LocalToolResolver.js
 var yaml2 = __toESM(require_dist3(), 1);
 import { promises as fs5, readFileSync as readFileSync3, writeFileSync } from "fs";
 import { join as join5, resolve, basename as basename2 } from "path";
@@ -239639,7 +239845,7 @@ Use the MCP tools to manage this directory programmatically.
   }
 }
 var LocalToolResolver_default = LocalToolResolver;
-// ../shared/dist/services/McpCoreService.js
+// node_modules/@enactprotocol/shared/dist/services/McpCoreService.js
 class McpCoreService {
   constructor(options) {
     this.core = new EnactCore({
@@ -239709,7 +239915,7 @@ class McpCoreService {
   }
 }
 var mcpCoreService = new McpCoreService;
-// ../shared/dist/lib/enact-direct.js
+// node_modules/@enactprotocol/shared/dist/lib/enact-direct.js
 class EnactDirect {
   constructor(options = {}) {
     this.core = new EnactCore({
@@ -240554,21 +240760,39 @@ Error: ${operation.error instanceof Error ? operation.error.message : String(ope
 });
 server2.registerTool("launch-env-manager-server", {
   title: "Launch Environment Manager",
-  description: "Start the web-based environment variable manager server",
+  description: "Start the web-based environment variable manager server. Supports URL parameters to pre-select package and variables for bulk configuration. Use 'package' to pre-select a namespace and 'vars' (string or array) to open bulk edit modal with specific variables.",
   inputSchema: {
-    port: exports_external.number().default(5555).describe("Port to run the server on"),
-    async: exports_external.boolean().default(true).describe("Run in background")
+    port: exports_external.number().default(5555).describe("Port to run the server on (default: 5555)"),
+    async: exports_external.boolean().default(true).describe("Run in background (default: true)"),
+    package: exports_external.string().optional().describe("Pre-select package namespace (e.g., 'demo/test'). Opens directly to this package's variables."),
+    vars: exports_external.union([exports_external.string(), exports_external.array(exports_external.string())]).optional().describe("Pre-select variables for bulk editing. Single variable: 'API_KEY' or multiple: ['API_KEY', 'DB_URL']. Opens bulk edit modal automatically.")
   }
-}, async ({ port = 5555, async = true }) => {
+}, async ({ port = 5555, async = true, package: packageName, vars }) => {
   try {
+    const buildUrl = (basePort) => {
+      const baseUrl = `http://localhost:${basePort}`;
+      const params = new URLSearchParams;
+      if (packageName) {
+        params.set("package", packageName);
+      }
+      if (vars) {
+        if (Array.isArray(vars)) {
+          params.set("vars", JSON.stringify(vars));
+        } else {
+          params.set("vars", vars);
+        }
+      }
+      return params.toString() ? `${baseUrl}/?${params.toString()}` : baseUrl;
+    };
     if (webServerInstance) {
+      const url = buildUrl(webServerPort);
       return {
         content: [
           {
             type: "text",
             text: `\uD83C\uDF10 Environment Manager already running on port ${webServerPort}
 
-URL: http://localhost:${webServerPort}
+URL: ${url}
 
 Use this interface to manage environment variables for your tools.`
           }
@@ -240599,6 +240823,7 @@ Use this interface to manage environment variables for your tools.`
         operation.status = "failed";
         operation.error = error;
       });
+      const futureUrl = buildUrl(port);
       return {
         content: [
           {
@@ -240609,7 +240834,7 @@ Operation ID: ${operationId}
 
 ⏳ Use "check-operation-status" with ID "${operationId}" to see when ready.
 
-Once running: http://localhost:${port}`
+Once running: ${futureUrl}`
           }
         ]
       };
@@ -240617,13 +240842,14 @@ Once running: http://localhost:${port}`
       const { server: webServer, port: actualPort } = await startEnvManagerServer(port);
       webServerInstance = webServer;
       webServerPort = actualPort;
+      const url = buildUrl(actualPort);
       return {
         content: [
           {
             type: "text",
             text: `✅ Environment Manager started!
 
-URL: http://localhost:${actualPort}
+URL: ${url}
 
 Manage environment variables for your Enact tools through the web interface.`
           }