@fruggr/zendesk-mcp-server 3.7.0 → 3.9.0

package/dist/{http-D-Xy9BWD.js → http-DuRcQrOc.js}

@@ -1,16 +1,17 @@
 #!/usr/bin/env node
 import { i as __toESM, n as __exportAll, r as __require, t as __commonJSMin } from "./rolldown-runtime-BbXq-jo1.js";
-import { A as STARTUP_DOCS, C as WebStandardStreamableHTTPServerTransport, D as OAuthError, E as verifyBearerToken, M as errnoCode, O as OAuthErrorCode, S as DEFAULT_MAX_REQUEST_BODY_SIZE, T as isLegacyRequest, _ as zendeskGet, a as toolEnv, g as createAllTools, h as silentLogger, i as defaultServerFactory, j as createStartupError, k as compareCodeUnits, l as configDir, m as createRequestStateCodec, n as listenedUris, o as watchGrantAlerts, r as createServerCaches, s as startSlaRuntime, t as createListenFeed, v as REQUEST_TIMEOUT_MS, w as createMcpHandler, x as getOAuthUrls, y as deadlineSignal } from "./index.js";
+import { $ as _enum, A as ResourceTemplate, B as stampErrorBrands, D as createMcpHandler, E as WebStandardStreamableHTTPServerTransport, F as ProtocolErrorCode, G as ResultSchema, H as PaginatedRequestParamsSchema, I as ResourceNotFoundError, J as toStrictStandardSchema, K as buildInstructions, L as assertValidCacheHint, M as OAuthError, N as OAuthErrorCode, O as isLegacyRequest, P as ProtocolError, Q as errnoCode, R as brandedHasInstance, S as deadlineSignal, T as DEFAULT_MAX_REQUEST_BODY_SIZE, U as PaginatedResultSchema, V as BaseRequestParamsSchema, W as ResourceSchema, X as STARTUP_DOCS, Y as compareCodeUnits, Z as createStartupError, _ as createAllTools, a as toolEnv, at as object, b as zendeskGet, ct as union, et as array, g as silentLogger, h as readPackageInfo, i as defaultServerFactory, it as number, j as verifyBearerToken, k as McpServer, l as configDir, lt as unknown, m as createRequestStateCodec, n as listenedUris, nt as literal, o as watchGrantAlerts, ot as record, q as Namespace, r as createServerCaches, rt as looseObject, s as startSlaRuntime, st as string, t as createListenFeed, tt as boolean$1, v as createTopologyProvider, w as getOAuthUrls, x as REQUEST_TIMEOUT_MS, y as ZendeskApiError, z as isModernProtocolVersion } from "./index.js";
 import { a as supportedScopes, i as requestedScope, n as generateCodeVerifier, o as escapeHtml, t as generateCodeChallenge } from "./pkce-DE_v9NQy.js";
 import * as util from "node:util";
 import { format, inspect } from "node:util";
 import * as crypto$2 from "node:crypto";
 import { createHash, createPrivateKey, createSecretKey, hkdfSync, randomBytes, randomFillSync, randomUUID, timingSafeEqual } from "node:crypto";
-import { dirname, join, resolve } from "node:path";
+import { dirname, join, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { accessSync, chmodSync, constants, mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
 import { STATUS_CODES, createServer } from "node:http";
-import { Http2ServerRequest, constants as constants$1 } from "http2";
+import { Http2ServerRequest, constants as constants$2 } from "http2";
 import { Readable } from "stream";
 import crypto$1 from "crypto";
 import { strict } from "node:assert";
@@ -315,7 +316,7 @@ var drainIncoming = (incoming) => {
 	incomingWithDrainState[incomingDraining] = true;
 	if (incoming instanceof Http2ServerRequest) {
 		try {
-			incoming.stream?.close?.(constants$1.NGHTTP2_NO_ERROR);
+			incoming.stream?.close?.(constants$2.NGHTTP2_NO_ERROR);
 		} catch {}
 		return;
 	}
@@ -505,7 +506,7 @@ var getRequestListener = (fetchCallback, options = {}) => {
 	};
 };
 //#endregion
-//#region node_modules/.pnpm/@modelcontextprotocol+node@2.1.1_@modelcontextprotocol+server@2.3.1/node_modules/@modelcontextprotocol/node/dist/index.mjs
+//#region node_modules/.pnpm/@modelcontextprotocol+node@2.1.2_@modelcontextprotocol+server@2.4.0/node_modules/@modelcontextprotocol/node/dist/index.mjs
 /**
 * Server transport for Streamable HTTP: this implements the MCP Streamable HTTP transport specification.
 * It supports both SSE streaming and direct HTTP responses.
@@ -848,8 +849,8 @@ function internalServerErrorResponse(id) {
 	}, { status: 500 });
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/buffer_utils.js
-const encoder$1 = new TextEncoder();
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/buffer_utils.js
+const encoder$3 = new TextEncoder();
 const decoder$2 = new TextDecoder();
 const strictDecoder = new TextDecoder("utf-8", { fatal: !0 });
 const UINT32_RANGE = 2 ** 32;
@@ -880,7 +881,7 @@ const NON_ASCII = /[^\x00-\x7f]/;
 function encode$2(string) {
 	if (typeof string == "string" && string.length >= 128) {
 		if (NON_ASCII.test(string)) throw new TypeError("non-ASCII string encountered in encode()");
-		return encoder$1.encode(string);
+		return encoder$3.encode(string);
 	}
 	const bytes = new Uint8Array(string.length);
 	for (let i = 0; i < string.length; i++) {
@@ -890,7 +891,7 @@ function encode$2(string) {
 	}
 	return bytes;
 }
-function encodeBase64(input, url = !1) {
+function encodeBase64$1(input, url = !1) {
 	if (Uint8Array.prototype.toBase64) return input.toBase64({
 		alphabet: url ? "base64url" : "base64",
 		omitPadding: url
@@ -900,7 +901,7 @@ function encodeBase64(input, url = !1) {
 	const encoded = btoa(arr.join(""));
 	return url ? encoded.replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_") : encoded;
 }
-function decodeBase64(encoded, url = !1) {
+function decodeBase64$1(encoded, url = !1) {
 	if (Uint8Array.fromBase64) return Uint8Array.fromBase64(encoded, { alphabet: url ? "base64url" : "base64" });
 	if (url) {
 		if (encoded.includes("+") || encoded.includes("/")) throw new TypeError("Invalid base64url");
@@ -915,7 +916,7 @@ async function digest(algorithm, data) {
 	return new Uint8Array(await crypto.subtle.digest(subtleDigest, data));
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/util/errors.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/util/errors.js
 var errors_exports$1 = /* @__PURE__ */ __exportAll({
 	JOSEAlgNotAllowed: () => JOSEAlgNotAllowed,
 	JOSEError: () => JOSEError,
@@ -1033,20 +1034,20 @@ var JWSSignatureVerificationFailed$1 = class extends JOSEError {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/util/base64url.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/util/base64url.js
 const invalid$2 = "The input to be decoded is not correctly encoded.";
 function decode$2(input) {
 	try {
-		return decodeBase64(typeof input == "string" ? input : decoder$2.decode(input), !0);
+		return decodeBase64$1(typeof input == "string" ? input : decoder$2.decode(input), !0);
 	} catch (cause) {
 		throw new TypeError(invalid$2, { cause });
 	}
 }
 function encode$1(input) {
-	return encodeBase64(typeof input == "string" ? encoder$1.encode(input) : input, !0);
+	return encodeBase64$1(typeof input == "string" ? encoder$3.encode(input) : input, !0);
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/validate.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/validate.js
 function assertUint8Array(input, label) {
 	if (!(input instanceof Uint8Array)) throw new TypeError(`${label} must be an instance of Uint8Array`);
 }
@@ -1138,7 +1139,7 @@ function serializeJoseHeader(Err, header) {
 	return [parsed, serialized];
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/key.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/key.js
 const tag = (key) => key[Symbol.toStringTag];
 const jwkMatchesOp = (entry, key, usage) => {
 	const { alg } = entry;
@@ -1275,7 +1276,7 @@ async function rawKey(key, expected, usage, extractable = !1) {
 	return key instanceof Uint8Array && (key = await crypto.subtle.importKey("raw", key, expected, extractable, [usage])), checkCryptoKey(key, expected, usage), key;
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/content_encryption.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/content_encryption.js
 const generateCek = (enc) => crypto.getRandomValues(new Uint8Array(enc.cekBits >> 3));
 function checkCekLength(cek, expected) {
 	const actual = cek.byteLength << 3;
@@ -1362,7 +1363,7 @@ async function decrypt$1(enc, cek, ciphertext, iv, tag, aad) {
 	}
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/key_descriptor.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/key_descriptor.js
 function table(entries) {
 	const out = { __proto__: null };
 	for (const alg in entries) out[alg] = {
@@ -1372,7 +1373,7 @@ function table(entries) {
 	return out;
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jwe_algorithms.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/jwe_algorithms.js
 const wrap = [["encrypt", "wrapKey"], ["decrypt", "unwrapKey"]];
 const derive$1 = [[], ["deriveBits"]];
 const none = [[], []];
@@ -1492,7 +1493,7 @@ function jweEncryption(enc) {
 	return (typeof enc == "string" ? ENC[enc] : void 0) ?? unsupported$1("enc", "Encryption Algorithm");
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/key_management.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/key_management.js
 function checkEcdhCryptoKey(key, usage) {
 	if (key.algorithm.name !== "ECDH" && key.algorithm.name !== "X25519") throw new TypeError("CryptoKey does not support this operation, its algorithm.name must be ECDH or X25519");
 	checkUsage(key, usage);
@@ -1687,7 +1688,7 @@ async function encryptKeyManagement(entry, enc, inputKey, joseHeader, providedCe
 	];
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/deflate.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/deflate.js
 function validateZip(joseHeader, protectedHeader) {
 	if (joseHeader.zip !== void 0 && joseHeader.zip !== "DEF") throw new JOSENotSupported("Unsupported JWE \"zip\" (Compression Algorithm) Header Parameter value.");
 	if (joseHeader.zip !== void 0 && !protectedHeader?.zip) throw new JWEInvalid("JWE \"zip\" (Compression Algorithm) Header Parameter MUST be in a protected header.");
@@ -1715,7 +1716,7 @@ async function decompress(input, maxLength) {
 	return supported("DecompressionStream"), transform(new DecompressionStream("deflate-raw"), input, maxLength);
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jwe_decrypt.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/jwe_decrypt.js
 function shareJWE(jwe) {
 	const { protected: encodedProtected, ciphertext, iv, tag, aad } = jwe;
 	let protectedHeader;
@@ -1820,12 +1821,12 @@ async function decryptCompact(jwe, shared, key) {
 	}, shared, key);
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwe/compact/decrypt.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/jwe/compact/decrypt.js
 async function compactDecrypt(jwe, key, options) {
 	return decryptCompact(jwe, prepareDecrypt(options), key);
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jwe_encrypt.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/jwe_encrypt.js
 function checkDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader) {
 	if (!isDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader)) throw new JWEInvalid("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");
 }
@@ -1896,7 +1897,7 @@ function compactJWE(jwe) {
 	].join(".");
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jws_algorithms.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/jws_algorithms.js
 const sig = [["verify"], ["sign"]];
 function hmac(bits) {
 	const subtle = {
@@ -1986,7 +1987,7 @@ function jwsAlgorithm(alg) {
 	return entry;
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jws_verify.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/jws_verify.js
 function prepareVerify(options) {
 	return [options && validateAlgorithms("algorithms", options.algorithms), options?.crit];
 }
@@ -2041,13 +2042,13 @@ async function verifyCompact(jws, shared, key) {
 	}, shared, key, encodeCompactUnencodedPayload);
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jws/compact/verify.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/jws/compact/verify.js
 async function compactVerify(jws, key, options) {
 	const [result] = await verifyCompact(jws, prepareVerify(options), key);
 	return result;
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jwt_claims_set.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/jwt_claims_set.js
 const epoch = (date) => Math.floor(date.getTime() / 1e3);
 const multipliers = {
 	s: 1,
@@ -2144,7 +2145,7 @@ function jwtClaimsSetBytes(producer) {
 		const value = claimsSet[claim];
 		if (typeof value == "number" && !Number.isFinite(value)) throw new TypeError(`"${claim}" claim must be a finite number`);
 	}
-	return encoder$1.encode(JSON.stringify(claimsSet));
+	return encoder$3.encode(JSON.stringify(claimsSet));
 }
 var JWTClaimsBuilder = class {
 	constructor(claimsSet = {}) {
@@ -2175,7 +2176,7 @@ var JWTClaimsBuilder = class {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwt/verify.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/jwt/verify.js
 async function jwtVerify(jwt, key, options) {
 	const [verified, b64] = await verifyCompact(jwt, prepareVerify(options), key);
 	if (!b64) throw new JWTInvalid("JWTs MUST NOT use unencoded payload");
@@ -2186,7 +2187,7 @@ async function jwtVerify(jwt, key, options) {
 	};
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwe/compact/encrypt.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/jwe/compact/encrypt.js
 var CompactEncrypt = class {
 	#input;
 	constructor(plaintext) {
@@ -2209,7 +2210,7 @@ var CompactEncrypt = class {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jws_sign.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/jws_sign.js
 async function createSignature(input, key, rejectUnencoded) {
 	let [payload, protectedHeader, unprotectedHeader, crit] = input, encodedProtectedHeader = "";
 	if (protectedHeader !== void 0) {
@@ -2231,7 +2232,7 @@ async function createSignature(input, key, rejectUnencoded) {
 	let encodedPayload = "", signingPayload = payload, signingInput;
 	if (b64) {
 		const encodedPayloadCache = input[4];
-		encodedPayloadCache ? (encodedPayload = encodedPayloadCache[0] ??= encode$1(payload), signingPayload = encodedPayloadCache[1] ??= encode$2(encodedPayload)) : (encodedPayload = encode$1(payload), signingInput = encoder$1.encode(`${encodedProtectedHeader}.${encodedPayload}`));
+		encodedPayloadCache ? (encodedPayload = encodedPayloadCache[0] ??= encode$1(payload), signingPayload = encodedPayloadCache[1] ??= encode$2(encodedPayload)) : (encodedPayload = encode$1(payload), signingInput = encoder$3.encode(`${encodedProtectedHeader}.${encodedPayload}`));
 	}
 	signingInput ??= concat(encode$2(encodedProtectedHeader), encode$2("."), signingPayload);
 	const signingKey = await rawKey(await prepareKey(entry, key, "sign"), entry.subtle, "sign");
@@ -2252,7 +2253,7 @@ async function createCompactSignature(payload, protectedHeader, crit, key, rejec
 	return `${jws.protected}.${jws.payload}.${jws.signature}`;
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jws/compact/sign.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/jws/compact/sign.js
 var CompactSign = class {
 	#payload;
 	#protectedHeader;
@@ -2269,7 +2270,7 @@ var CompactSign = class {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/key_algorithm.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/lib/key_algorithm.js
 function unsupportedAlg(source = "JWK \"alg\" (Algorithm) Parameter") {
 	throw new JOSENotSupported(`Invalid or unsupported ${source} value`);
 }
@@ -2277,7 +2278,7 @@ function keyAlgorithm(alg, source) {
 	return (typeof alg == "string" ? JWS[alg] ?? JWE[alg] : void 0) ?? unsupportedAlg(source);
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/key/export.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/key/export.js
 async function exportJWK(key) {
 	if (isKeyObject(key)) if (key.type === "secret") key = key.export();
 	else return key.export({ format: "jwk" });
@@ -2293,7 +2294,7 @@ async function exportJWK(key) {
 	return jwk;
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwk/thumbprint.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/jwk/thumbprint.js
 const check$2 = (value, description) => {
 	if (typeof value != "string" || !value) throw new JWKInvalid(`${description} missing or invalid`);
 };
@@ -2348,7 +2349,7 @@ async function calculateJwkThumbprint(key, digestAlgorithm) {
 	return encode$1(await digest(digestAlgorithm, thumbprintInput));
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwk/embedded.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/jwk/embedded.js
 async function EmbeddedJWK(protectedHeader, token) {
 	const joseHeader = {
 		...protectedHeader,
@@ -2369,7 +2370,7 @@ async function EmbeddedJWK(protectedHeader, token) {
 	return key;
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwt/unsecured.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/jwt/unsecured.js
 const UnsecuredJWT_base = JWTClaimsBuilder;
 var UnsecuredJWT = class extends UnsecuredJWT_base {
 	encode() {
@@ -2396,7 +2397,7 @@ var UnsecuredJWT = class extends UnsecuredJWT_base {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/key/import.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/key/import.js
 async function importJWK(jwk, alg, options) {
 	if (!isObject(jwk)) throw new TypeError("JWK must be an object");
 	const normalized = normalizeJwk(jwk), extractable = validateExtractableOption(options?.extractable), { alg: jwkAlg } = normalized;
@@ -2416,7 +2417,7 @@ async function importJWK(jwk, alg, options) {
 	}
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/util/decode_protected_header.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/util/decode_protected_header.js
 function decodeProtectedHeader(token) {
 	let encodedProtectedHeader;
 	if (typeof token == "string") {
@@ -2429,7 +2430,7 @@ function decodeProtectedHeader(token) {
 	return parseJoseHeader(encodedProtectedHeader, TypeError, invalid);
 }
 //#endregion
-//#region node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/util/decode_jwt.js
+//#region node_modules/.pnpm/jose@6.2.14/node_modules/jose/dist/webapi/util/decode_jwt.js
 function decodeJwt(jwt) {
 	if (typeof jwt != "string") throw new JWTInvalid("JWTs must use Compact JWS serialization, JWT must be a string");
 	const { 1: encodedPayload, length } = jwt.split(".");
@@ -2715,308 +2716,6 @@ const renderConsentPage = (view) => {
 /** Plain error page for a failed sign-in. ASCII message, escaped. */
 const renderErrorPage = (title, detail) => `<!doctype html><html lang="en"><head><meta charset="utf-8"><title>Sign-in failed</title></head><body><h1>${escapeHtml(title)}</h1><p>${escapeHtml(detail)}</p></body></html>`;
 //#endregion
-//#region src/auth/server/upstream.ts
-/**
-* Zendesk as the upstream identity provider, through the same public PKCE client
-* the stdio flow uses. The server runs PKCE itself; no client secret exists.
-* Why: `docs/decisions/oauth-authorization-server.md` ("Upstream login").
-*/
-const ZENDESK_ACCESS_TOKEN_TTL_S = 172800;
-const ZENDESK_REFRESH_TOKEN_TTL_S = 7776e3;
-/** ASCII-only (auth paths end up in headers); never carries the Zendesk body. */
-const upstreamAuthError = (message, status, cause) => Object.assign(new Error(message, cause === void 0 ? void 0 : { cause }), {
-	name: "UpstreamAuthError",
-	...status === void 0 ? {} : { status }
-});
-const isUpstreamAuthError = (err) => err instanceof Error && err.name === "UpstreamAuthError";
-const buildZendeskAuthorizeUrl = (upstream, params) => {
-	const url = new URL(getOAuthUrls(upstream.subdomain).authorizeUrl);
-	url.searchParams.set("response_type", "code");
-	url.searchParams.set("client_id", upstream.clientId);
-	url.searchParams.set("redirect_uri", params.redirectUri);
-	url.searchParams.set("scope", params.scope);
-	url.searchParams.set("state", params.state);
-	url.searchParams.set("code_challenge", params.codeChallenge);
-	url.searchParams.set("code_challenge_method", "S256");
-	return url.toString();
-};
-const toTokenSet = (result, previousRefreshToken) => ({
-	accessToken: result.access_token,
-	refreshToken: result.refresh_token ?? previousRefreshToken,
-	expiresAt: result.expires_in === void 0 ? void 0 : Date.now() + result.expires_in * 1e3,
-	scope: result.scope
-});
-const requestTokens = async (upstream, grant, logger) => {
-	const body = new URLSearchParams({
-		client_id: upstream.clientId,
-		expires_in: String(ZENDESK_ACCESS_TOKEN_TTL_S),
-		refresh_token_expires_in: String(ZENDESK_REFRESH_TOKEN_TTL_S),
-		...grant
-	});
-	let response;
-	try {
-		response = await fetch(getOAuthUrls(upstream.subdomain).tokenUrl, {
-			method: "POST",
-			headers: { "Content-Type": "application/x-www-form-urlencoded" },
-			body: body.toString(),
-			signal: deadlineSignal(upstream.timeoutMs ?? 3e4)
-		});
-	} catch (err) {
-		throw upstreamAuthError("Zendesk token endpoint unreachable.", void 0, err);
-	}
-	logger.debug("oauth_upstream_token", {
-		grant: grant["grant_type"],
-		status: response.status
-	});
-	if (!response.ok) throw upstreamAuthError(`Zendesk refused the ${grant["grant_type"]} grant (${response.status}).`, response.status);
-	return await response.json();
-};
-const exchangeZendeskCode = async (upstream, params, logger = silentLogger) => toTokenSet(await requestTokens(upstream, {
-	grant_type: "authorization_code",
-	code: params.code,
-	redirect_uri: params.redirectUri,
-	code_verifier: params.codeVerifier
-}, logger));
-/** Zendesk rotates on refresh: the caller must persist the returned set. */
-const refreshZendeskTokens = async (upstream, refreshToken, logger = silentLogger) => toTokenSet(await requestTokens(upstream, {
-	grant_type: "refresh_token",
-	refresh_token: refreshToken
-}, logger), refreshToken);
-/** Zendesk is not OIDC: the account is whoever `/users/me` says the token belongs to. */
-const fetchZendeskIdentity = async (upstream, accessToken) => {
-	const failure = (cause) => upstreamAuthError("Could not resolve the Zendesk account of the signed-in user.", void 0, cause);
-	let user;
-	try {
-		({user} = await zendeskGet(upstream.subdomain, accessToken, "/users/me"));
-	} catch (err) {
-		throw failure(err);
-	}
-	if (typeof user?.id !== "number") throw failure();
-	return {
-		id: user.id,
-		name: user.name,
-		role: user.role
-	};
-};
-//#endregion
-//#region src/auth/server/interactions.ts
-const PENDING_TTL_MS = 6e5;
-const CONSENT_MEMORY_TTL_S = 7776e3;
-const sendHtml = (res, status, html) => {
-	res.writeHead(status, {
-		"Content-Type": "text/html; charset=utf-8",
-		"Cache-Control": "no-store"
-	});
-	res.end(html);
-};
-const redirect = (res, location) => {
-	res.writeHead(302, {
-		Location: location,
-		"Cache-Control": "no-store"
-	});
-	res.end();
-};
-const EXPIRED = "This sign-in has expired or was opened in another browser. Start the connection again from your MCP client.";
-const consentMemoryKey = (accountId, clientId, redirectUris) => createHash("sha256").update(JSON.stringify([
-	accountId,
-	clientId,
-	[...redirectUris].sort(compareCodeUnits)
-])).digest("base64url");
-const isExpiredLink = (err) => err instanceof Error && (err.name === "SessionNotFound" || err.name === "InvalidRequest");
-const UID = /^[\w-]{1,64}$/;
-/**
-* The login and consent steps oidc-provider hands off to us. Login is always a
-* round trip to Zendesk (fresh tokens for every grant); consent is skipped for
-* trusted CIMD clients and for a client this user already approved with the
-* same redirect URIs, and shown otherwise (ADR, Consent).
-*/
-const createInteractionRoutes = (deps) => {
-	const { provider, upstream, issuer } = deps;
-	const logger = deps.logger ?? silentLogger;
-	const callbackUrl = `${issuer}/oauth/callback`;
-	const verifiers = createExpiringMap();
-	const upstreamTokens = createExpiringMap();
-	const finish = (req, res, result) => provider.interactionFinished(req, res, result, { mergeWithLastSubmission: true });
-	const deny = (req, res, description) => finish(req, res, {
-		error: "access_denied",
-		error_description: description
-	});
-	const startUpstreamLogin = (res, uid) => {
-		const verifier = generateCodeVerifier();
-		verifiers.set(uid, verifier, PENDING_TTL_MS);
-		redirect(res, buildZendeskAuthorizeUrl(upstream, {
-			redirectUri: callbackUrl,
-			scope: requestedScope(deps.readOnly),
-			state: uid,
-			codeChallenge: generateCodeChallenge(verifier)
-		}));
-	};
-	const approve = async (req, res, details, { accountId, clientId }, tokens) => {
-		const grant = new provider.Grant({
-			accountId,
-			clientId
-		});
-		const missing = details.prompt.details;
-		if (missing.missingOIDCScope?.length) grant.addOIDCScope(missing.missingOIDCScope.join(" "));
-		for (const [indicator, scopes] of Object.entries(missing.missingResourceScopes ?? {})) grant.addResourceScope(indicator, scopes.join(" "));
-		const grantId = await grant.save();
-		await deps.zendeskGrants.save(grantId, tokens);
-		logger.info("oauth_grant_created", { clientId });
-		await finish(req, res, { consent: { grantId } });
-	};
-	const consentContext = async (details) => {
-		const accountId = String(details.session?.accountId);
-		const clientId = String(details.params["client_id"]);
-		const client = await provider.Client.find(clientId);
-		const redirectUris = client?.redirectUris ?? [];
-		return {
-			client,
-			accountId,
-			clientId,
-			pendingKey: `${accountId}|${clientId}`,
-			memoryKey: consentMemoryKey(accountId, clientId, redirectUris),
-			redirectUri: String(details.params["redirect_uri"]),
-			redirectUris
-		};
-	};
-	const showInteraction = async (req, res, uid) => {
-		const details = await provider.interactionDetails(req, res);
-		if (details.prompt.name === "login") {
-			startUpstreamLogin(res, uid);
-			return;
-		}
-		const context = await consentContext(details);
-		if (canSkipConsent({
-			clientId: context.clientId,
-			redirectUri: context.redirectUri,
-			registeredRedirectUris: context.redirectUris
-		}, deps.trustedClients) || await deps.consentMemory.get(context.memoryKey) === true) {
-			const tokens = upstreamTokens.take(context.pendingKey);
-			if (!tokens) return deny(req, res, "The Zendesk sign-in expired. Try again.");
-			return approve(req, res, details, context, tokens);
-		}
-		const missing = details.prompt.details;
-		const scopes = [...new Set(Object.values(missing.missingResourceScopes ?? {}).flat())];
-		sendHtml(res, 200, renderConsentPage({
-			uid,
-			clientName: context.client?.clientName,
-			clientId: context.clientId,
-			redirectUri: context.redirectUri,
-			scopes,
-			subdomain: upstream.subdomain
-		}));
-	};
-	const completeUpstreamLogin = async (req, res, uid, url) => {
-		const details = await provider.interactionDetails(req, res);
-		const verifier = verifiers.take(uid);
-		const code = url.searchParams.get("code");
-		if (!verifier || !code) return deny(req, res, "The Zendesk sign-in was cancelled or refused.");
-		try {
-			const tokens = await exchangeZendeskCode(upstream, {
-				code,
-				redirectUri: callbackUrl,
-				codeVerifier: verifier
-			}, logger);
-			const accountId = `zendesk:${(await fetchZendeskIdentity(upstream, tokens.accessToken)).id}`;
-			upstreamTokens.set(`${accountId}|${String(details.params["client_id"])}`, tokens, PENDING_TTL_MS);
-			await finish(req, res, { login: { accountId } });
-		} catch (err) {
-			if (!isUpstreamAuthError(err)) throw err;
-			logger.warn("oauth_upstream_login_failed", { error: err.message });
-			await deny(req, res, err.message);
-		}
-	};
-	const confirm = async (req, res) => {
-		const details = await provider.interactionDetails(req, res);
-		if (details.prompt.name !== "consent") return sendHtml(res, 400, renderErrorPage("Sign-in failed", EXPIRED));
-		const context = await consentContext(details);
-		const tokens = upstreamTokens.take(context.pendingKey);
-		if (!tokens) return deny(req, res, "The Zendesk sign-in expired. Try again.");
-		await deps.consentMemory.set(context.memoryKey, true, CONSENT_MEMORY_TTL_S);
-		return approve(req, res, details, context, tokens);
-	};
-	const routes = async (req, res, url) => {
-		const [, , uid = "", action] = url.pathname.split("/");
-		if (!UID.test(uid)) return sendHtml(res, 404, renderErrorPage("Not found", EXPIRED));
-		if (req.method === "GET" && action === void 0) return showInteraction(req, res, uid);
-		if (req.method === "GET" && action === "callback") return completeUpstreamLogin(req, res, uid, url);
-		if (req.method === "POST" && action === "confirm") return confirm(req, res);
-		if (req.method === "POST" && action === "abort") {
-			await provider.interactionDetails(req, res);
-			return deny(req, res, "The user declined access.");
-		}
-		return sendHtml(res, 404, renderErrorPage("Not found", EXPIRED));
-	};
-	return {
-		/** `/oauth/callback`: the one redirect URI registered at Zendesk. */
-		upstreamCallback: (res, url) => {
-			const uid = url.searchParams.get("state") ?? "";
-			if (!UID.test(uid)) {
-				sendHtml(res, 400, renderErrorPage("Sign-in failed", EXPIRED));
-				return;
-			}
-			const next = new URL(`/interaction/${uid}/callback`, issuer);
-			const code = url.searchParams.get("code");
-			if (code) next.searchParams.set("code", code);
-			redirect(res, `${next.pathname}${next.search}`);
-		},
-		/** `/interaction/<uid>[/callback|/confirm|/abort]`. */
-		handle: async (req, res, url) => {
-			try {
-				await routes(req, res, url);
-			} catch (err) {
-				if (!isExpiredLink(err)) throw err;
-				if (!res.headersSent) sendHtml(res, 400, renderErrorPage("Sign-in failed", EXPIRED));
-			}
-		}
-	};
-};
-//#endregion
-//#region src/auth/server/keys.ts
-const MIN_SECRET_BYTES = 32;
-const ED25519_PKCS8_PREFIX = Buffer.from("302e020100300506032b657004220420", "hex");
-const derive = (master, purpose, length = 32) => Buffer.from(hkdfSync("sha256", master, Buffer.alloc(0), `zendesk-mcp/${purpose}/v1`, length));
-const kidFor = (master, purpose) => createHash("sha256").update(derive(master, `kid/${purpose}`, 16)).digest("base64url").slice(0, 16);
-/**
-* Parse `OAUTH_MASTER_SECRET`: base64 entries, comma-separated, newest first.
-* Errors never echo the value.
-*/
-const parseSecretList = (raw) => {
-	const entries = raw.split(",").map((entry) => entry.trim()).filter((entry) => entry.length > 0).map((entry) => Buffer.from(entry, "base64"));
-	const [first, ...rest] = entries;
-	if (!first) throw new Error("OAuth master secret is empty.");
-	if (entries.some((secret) => secret.length < 32)) throw new Error(`OAuth master secret must decode to at least 32 bytes of base64 (generate one with: openssl rand -base64 32).`);
-	return [first, ...rest];
-};
-const deriveKeySet = (master) => {
-	return {
-		signingJwk: {
-			...createPrivateKey({
-				key: Buffer.concat([ED25519_PKCS8_PREFIX, derive(master, "signing")]),
-				format: "der",
-				type: "pkcs8"
-			}).export({ format: "jwk" }),
-			kid: kidFor(master, "signing"),
-			use: "sig",
-			alg: "EdDSA"
-		},
-		accessToken: {
-			kid: kidFor(master, "access-token"),
-			key: createSecretKey(derive(master, "access-token"))
-		},
-		atRest: {
-			kid: kidFor(master, "at-rest"),
-			key: createSecretKey(derive(master, "at-rest"))
-		},
-		cookieKey: derive(master, "cookie").toString("base64url"),
-		requestState: derive(master, "request-state")
-	};
-};
-const deriveKeyRing = (raw) => {
-	const [first, ...rest] = parseSecretList(raw);
-	return [deriveKeySet(first), ...rest.map(deriveKeySet)];
-};
-//#endregion
 //#region node_modules/.pnpm/oidc-provider@9.13.0_supports-color@7.2.0/node_modules/oidc-provider/lib/helpers/attention.js
 const SET_BOLD_YELLOW_TEXT = "\x1B[33;1m";
 const SET_BOLD_RED_TEXT = "\x1B[31;1m";
@@ -29313,7 +29012,7 @@ function input(action, csrfToken, code, charset) {
     ${code ? `value="${htmlSafe(code)}" ` : ""}${attributes}type="text" name="user_code" placeholder="Enter code" onfocus="this.select(); this.onfocus = undefined;" autofocus autocomplete="off"></input>
   </form>`;
 }
-function confirm$1(action, csrfToken, code) {
+function confirm$2(action, csrfToken, code) {
 	return `<form id="op.deviceConfirmForm" method="post" action="${action}">
 <input type="hidden" name="xsrf" value="${csrfToken}"/>
 <input type="hidden" name="user_code" value="${htmlSafe(code)}"/>
@@ -32480,7 +32179,7 @@ const init = [
 		});
 	}
 ];
-const confirm = [
+const confirm$1 = [
 	noCache,
 	sessionHandler,
 	urlencoded,
@@ -32597,7 +32296,7 @@ const post = [
 			const client = await ctx.oidc.provider.Client.find(code.clientId);
 			if (!client) throw new InvalidClient("client is invalid", "client not found");
 			ctx.oidc.entity("Client", client);
-			await userCodeConfirmSource(ctx, confirm$1(ctx.oidc.urlFor("code_verification"), ctx.oidc.session.state.secret, userCode), client, code.deviceInfo, denormalize(normalized, mask));
+			await userCodeConfirmSource(ctx, confirm$2(ctx.oidc.urlFor("code_verification"), ctx.oidc.session.state.secret, userCode), client, code.deviceInfo, denormalize(normalized, mask));
 			return;
 		}
 		code.inFlight = true;
@@ -33230,7 +32929,7 @@ function initializeApp() {
 		post$2("introspection", routes.introspection, getErrorHandler("introspection.error"), CORS.client, ...introspection_default);
 		options("cors.introspection", routes.introspection, CORS.client, CORS.respond);
 	}
-	post$2("end_session_confirm", `${routes.end_session}/confirm`, getErrorHandler("end_session_confirm.error"), ...confirm);
+	post$2("end_session_confirm", `${routes.end_session}/confirm`, getErrorHandler("end_session_confirm.error"), ...confirm$1);
 	if (features.rpInitiatedLogout.enabled) {
 		if (enableHttpPostMethods) post$2("end_session", routes.end_session, getErrorHandler("end_session.error"), ...init);
 		get$3("end_session", routes.end_session, getErrorHandler("end_session.error"), ...init);
@@ -36059,10 +35758,10 @@ const PERSISTENT_MODELS = /* @__PURE__ */ new Set([
 	"RefreshToken",
 	"ZendeskTokens"
 ]);
-const encoder = new TextEncoder();
+const encoder$2 = new TextEncoder();
 const decoder$1 = new TextDecoder();
 const hashId = (id) => createHash("sha256").update(id).digest("base64url");
-const seal = (ring, value, expiresAt) => new CompactEncrypt(encoder.encode(JSON.stringify(value))).setProtectedHeader({
+const seal = (ring, value, expiresAt) => new CompactEncrypt(encoder$2.encode(JSON.stringify(value))).setProtectedHeader({
 	alg: "dir",
 	enc: "A256GCM",
 	kid: ring[0].atRest.kid,
@@ -36079,7 +35778,7 @@ const unseal = async (ring, sealed) => {
 		expiresAt
 	};
 };
-const open = (ring, sealed) => unseal(ring, sealed).catch(() => void 0);
+const open$1 = (ring, sealed) => unseal(ring, sealed).catch(() => void 0);
 const secondsUntil = (exp) => exp === void 0 ? void 0 : Math.max(exp - Math.floor(Date.now() / 1e3), 1);
 /**
 * One named collection of whole-payload-encrypted records. A record read under
@@ -36092,7 +35791,7 @@ const createSealedCollection = (store, name, ring) => {
 		get: async (id) => {
 			const sealed = await store.get(key(id));
 			if (sealed === void 0) return void 0;
-			const record = await open(ring, sealed);
+			const record = await open$1(ring, sealed);
 			if (record && !record.current) {
 				const { expiresAt } = record;
 				const ttlMs = expiresAt === void 0 ? void 0 : expiresAt - Date.now();
@@ -36182,6 +35881,92 @@ const openStore = (uri) => {
 	throw new Error(`Unsupported OAuth store scheme "${protocol}". Use file:// or memory://.`);
 };
 //#endregion
+//#region src/auth/server/upstream.ts
+/**
+* Zendesk as the upstream identity provider, through the same public PKCE client
+* the stdio flow uses. The server runs PKCE itself; no client secret exists.
+* Why: `docs/decisions/oauth-authorization-server.md` ("Upstream login").
+*/
+const ZENDESK_ACCESS_TOKEN_TTL_S = 172800;
+const ZENDESK_REFRESH_TOKEN_TTL_S = 7776e3;
+/** The Zendesk role that opens the `/mcp/admin` back-office. */
+const ZENDESK_ADMIN_ROLE = "admin";
+/** ASCII-only (auth paths end up in headers); never carries the Zendesk body. */
+const upstreamAuthError = (message, status, cause) => Object.assign(new Error(message, cause === void 0 ? void 0 : { cause }), {
+	name: "UpstreamAuthError",
+	...status === void 0 ? {} : { status }
+});
+const isUpstreamAuthError = (err) => err instanceof Error && err.name === "UpstreamAuthError";
+const buildZendeskAuthorizeUrl = (upstream, params) => {
+	const url = new URL(getOAuthUrls(upstream.subdomain).authorizeUrl);
+	url.searchParams.set("response_type", "code");
+	url.searchParams.set("client_id", upstream.clientId);
+	url.searchParams.set("redirect_uri", params.redirectUri);
+	url.searchParams.set("scope", params.scope);
+	url.searchParams.set("state", params.state);
+	url.searchParams.set("code_challenge", params.codeChallenge);
+	url.searchParams.set("code_challenge_method", "S256");
+	return url.toString();
+};
+const toTokenSet = (result, previousRefreshToken) => ({
+	accessToken: result.access_token,
+	refreshToken: result.refresh_token ?? previousRefreshToken,
+	expiresAt: result.expires_in === void 0 ? void 0 : Date.now() + result.expires_in * 1e3,
+	scope: result.scope
+});
+const requestTokens = async (upstream, grant, logger) => {
+	const body = new URLSearchParams({
+		client_id: upstream.clientId,
+		expires_in: String(ZENDESK_ACCESS_TOKEN_TTL_S),
+		refresh_token_expires_in: String(ZENDESK_REFRESH_TOKEN_TTL_S),
+		...grant
+	});
+	let response;
+	try {
+		response = await fetch(getOAuthUrls(upstream.subdomain).tokenUrl, {
+			method: "POST",
+			headers: { "Content-Type": "application/x-www-form-urlencoded" },
+			body: body.toString(),
+			signal: deadlineSignal(upstream.timeoutMs ?? 3e4)
+		});
+	} catch (err) {
+		throw upstreamAuthError("Zendesk token endpoint unreachable.", void 0, err);
+	}
+	logger.debug("oauth_upstream_token", {
+		grant: grant["grant_type"],
+		status: response.status
+	});
+	if (!response.ok) throw upstreamAuthError(`Zendesk refused the ${grant["grant_type"]} grant (${response.status}).`, response.status);
+	return await response.json();
+};
+const exchangeZendeskCode = async (upstream, params, logger = silentLogger) => toTokenSet(await requestTokens(upstream, {
+	grant_type: "authorization_code",
+	code: params.code,
+	redirect_uri: params.redirectUri,
+	code_verifier: params.codeVerifier
+}, logger));
+/** Zendesk rotates on refresh: the caller must persist the returned set. */
+const refreshZendeskTokens = async (upstream, refreshToken, logger = silentLogger) => toTokenSet(await requestTokens(upstream, {
+	grant_type: "refresh_token",
+	refresh_token: refreshToken
+}, logger), refreshToken);
+/** Zendesk is not OIDC: the account is whoever `/users/me` says the token belongs to. */
+const fetchZendeskIdentity = async (upstream, accessToken) => {
+	const failure = (cause) => upstreamAuthError("Could not resolve the Zendesk account of the signed-in user.", void 0, cause);
+	let user;
+	try {
+		({user} = await zendeskGet(upstream.subdomain, accessToken, "/users/me"));
+	} catch (err) {
+		throw failure(err);
+	}
+	if (typeof user?.id !== "number") throw failure();
+	return {
+		id: user.id,
+		name: user.name,
+		role: user.role
+	};
+};
+//#endregion
 //#region src/auth/server/zendesk-grant.ts
 const ZENDESK_REFRESH_MARGIN_MS = 3e5;
 const grantUnavailableError = () => Object.assign(/* @__PURE__ */ new Error("The Zendesk authorization behind this grant is no longer valid."), { name: "ZendeskGrantUnavailable" });
@@ -36232,6 +36017,8 @@ const ACCESS_TOKEN_TTL_S = 3600;
 const GRANT_TTL_S = 7776e3;
 const SESSION_TTL_S = 43200;
 const INTERACTION_TTL_S = 600;
+/** ASCII only: it reaches the client in a token endpoint error. */
+const ADMIN_ONLY_MESSAGE = "This connector is reserved for Zendesk administrators, and your Zendesk role is not admin.";
 /** Scopes the server advertises and grants; `offline_access` is for clients (ChatGPT) that ask for it. */
 const RESOURCE_SCOPES = ["read", "write"];
 const policyWithUpstreamLogin = () => {
@@ -36297,10 +36084,10 @@ const buildProvider = (options) => {
 				defaultResource: () => resource,
 				useGrantedResource: () => true,
 				getResourceServerInfo: (_ctx, indicator) => {
-					if (indicator !== resource) throw new InvalidTarget();
+					if (indicator !== resource && indicator !== options.adminResource) throw new InvalidTarget();
 					return {
 						scope: scopes,
-						audience: resource,
+						audience: indicator,
 						accessTokenTTL: ACCESS_TOKEN_TTL_S,
 						accessTokenFormat: "jwt",
 						jwt: { encrypt: {
@@ -36316,8 +36103,10 @@ const buildProvider = (options) => {
 		extraTokenClaims: async (_ctx, token) => {
 			if (token.kind !== "AccessToken" || !token.grantId) return void 0;
 			try {
+				const zd = await options.zendeskGrants.accessToken(token.grantId);
+				if (token.resourceServer?.audience === options.adminResource && !await options.isZendeskAdmin(zd)) throw new AccessDenied(ADMIN_ONLY_MESSAGE);
 				return {
-					zd: await options.zendeskGrants.accessToken(token.grantId),
+					zd,
 					gid: token.grantId
 				};
 			} catch (err) {
@@ -36349,6 +36138,230 @@ const buildProvider = (options) => {
 	return provider;
 };
 //#endregion
+//#region src/auth/server/interactions.ts
+const PENDING_TTL_MS = 6e5;
+const CONSENT_MEMORY_TTL_S = 7776e3;
+const sendHtml = (res, status, html) => {
+	res.writeHead(status, {
+		"Content-Type": "text/html; charset=utf-8",
+		"Cache-Control": "no-store"
+	});
+	res.end(html);
+};
+const redirect = (res, location) => {
+	res.writeHead(302, {
+		Location: location,
+		"Cache-Control": "no-store"
+	});
+	res.end();
+};
+const EXPIRED = "This sign-in has expired or was opened in another browser. Start the connection again from your MCP client.";
+const consentMemoryKey = (accountId, clientId, redirectUris) => createHash("sha256").update(JSON.stringify([
+	accountId,
+	clientId,
+	[...redirectUris].sort(compareCodeUnits)
+])).digest("base64url");
+const isExpiredLink = (err) => err instanceof Error && (err.name === "SessionNotFound" || err.name === "InvalidRequest");
+const UID = /^[\w-]{1,64}$/;
+/**
+* The login and consent steps oidc-provider hands off to us. Login is always a
+* round trip to Zendesk (fresh tokens for every grant); consent is skipped for
+* trusted CIMD clients and for a client this user already approved with the
+* same redirect URIs, and shown otherwise (ADR, Consent).
+*/
+const createInteractionRoutes = (deps) => {
+	const { provider, upstream, issuer } = deps;
+	const logger = deps.logger ?? silentLogger;
+	const callbackUrl = `${issuer}/oauth/callback`;
+	const verifiers = createExpiringMap();
+	const upstreamTokens = createExpiringMap();
+	const requestsAdmin = (resource) => (Array.isArray(resource) ? resource : [resource]).includes(deps.adminResource);
+	const finish = (req, res, result) => provider.interactionFinished(req, res, result, { mergeWithLastSubmission: true });
+	const deny = (req, res, description) => finish(req, res, {
+		error: "access_denied",
+		error_description: description
+	});
+	const startUpstreamLogin = (res, uid) => {
+		const verifier = generateCodeVerifier();
+		verifiers.set(uid, verifier, PENDING_TTL_MS);
+		redirect(res, buildZendeskAuthorizeUrl(upstream, {
+			redirectUri: callbackUrl,
+			scope: requestedScope(deps.readOnly),
+			state: uid,
+			codeChallenge: generateCodeChallenge(verifier)
+		}));
+	};
+	const approve = async (req, res, details, { accountId, clientId }, tokens) => {
+		const grant = new provider.Grant({
+			accountId,
+			clientId
+		});
+		const missing = details.prompt.details;
+		if (missing.missingOIDCScope?.length) grant.addOIDCScope(missing.missingOIDCScope.join(" "));
+		for (const [indicator, scopes] of Object.entries(missing.missingResourceScopes ?? {})) grant.addResourceScope(indicator, scopes.join(" "));
+		const grantId = await grant.save();
+		await deps.zendeskGrants.save(grantId, tokens);
+		logger.info("oauth_grant_created", { clientId });
+		await finish(req, res, { consent: { grantId } });
+	};
+	const consentContext = async (details) => {
+		const accountId = String(details.session?.accountId);
+		const clientId = String(details.params["client_id"]);
+		const client = await provider.Client.find(clientId);
+		const redirectUris = client?.redirectUris ?? [];
+		return {
+			client,
+			accountId,
+			clientId,
+			pendingKey: `${accountId}|${clientId}`,
+			memoryKey: consentMemoryKey(accountId, clientId, redirectUris),
+			redirectUri: String(details.params["redirect_uri"]),
+			redirectUris
+		};
+	};
+	const showInteraction = async (req, res, uid) => {
+		const details = await provider.interactionDetails(req, res);
+		if (details.prompt.name === "login") {
+			startUpstreamLogin(res, uid);
+			return;
+		}
+		const context = await consentContext(details);
+		if (canSkipConsent({
+			clientId: context.clientId,
+			redirectUri: context.redirectUri,
+			registeredRedirectUris: context.redirectUris
+		}, deps.trustedClients) || await deps.consentMemory.get(context.memoryKey) === true) {
+			const tokens = upstreamTokens.take(context.pendingKey);
+			if (!tokens) return deny(req, res, "The Zendesk sign-in expired. Try again.");
+			return approve(req, res, details, context, tokens);
+		}
+		const missing = details.prompt.details;
+		const scopes = [...new Set(Object.values(missing.missingResourceScopes ?? {}).flat())];
+		sendHtml(res, 200, renderConsentPage({
+			uid,
+			clientName: context.client?.clientName,
+			clientId: context.clientId,
+			redirectUri: context.redirectUri,
+			scopes,
+			subdomain: upstream.subdomain
+		}));
+	};
+	const completeUpstreamLogin = async (req, res, uid, url) => {
+		const details = await provider.interactionDetails(req, res);
+		const verifier = verifiers.take(uid);
+		const code = url.searchParams.get("code");
+		if (!verifier || !code) return deny(req, res, "The Zendesk sign-in was cancelled or refused.");
+		try {
+			const tokens = await exchangeZendeskCode(upstream, {
+				code,
+				redirectUri: callbackUrl,
+				codeVerifier: verifier
+			}, logger);
+			const identity = await fetchZendeskIdentity(upstream, tokens.accessToken);
+			if (requestsAdmin(details.params["resource"]) && identity.role !== "admin") {
+				logger.info("oauth_admin_sign_in_refused", { role: identity.role ?? "unknown" });
+				return deny(req, res, ADMIN_ONLY_MESSAGE);
+			}
+			const accountId = `zendesk:${identity.id}`;
+			upstreamTokens.set(`${accountId}|${String(details.params["client_id"])}`, tokens, PENDING_TTL_MS);
+			await finish(req, res, { login: { accountId } });
+		} catch (err) {
+			if (!isUpstreamAuthError(err)) throw err;
+			logger.warn("oauth_upstream_login_failed", { error: err.message });
+			await deny(req, res, err.message);
+		}
+	};
+	const confirm = async (req, res) => {
+		const details = await provider.interactionDetails(req, res);
+		if (details.prompt.name !== "consent") return sendHtml(res, 400, renderErrorPage("Sign-in failed", EXPIRED));
+		const context = await consentContext(details);
+		const tokens = upstreamTokens.take(context.pendingKey);
+		if (!tokens) return deny(req, res, "The Zendesk sign-in expired. Try again.");
+		await deps.consentMemory.set(context.memoryKey, true, CONSENT_MEMORY_TTL_S);
+		return approve(req, res, details, context, tokens);
+	};
+	const routes = async (req, res, url) => {
+		const [, , uid = "", action] = url.pathname.split("/");
+		if (!UID.test(uid)) return sendHtml(res, 404, renderErrorPage("Not found", EXPIRED));
+		if (req.method === "GET" && action === void 0) return showInteraction(req, res, uid);
+		if (req.method === "GET" && action === "callback") return completeUpstreamLogin(req, res, uid, url);
+		if (req.method === "POST" && action === "confirm") return confirm(req, res);
+		if (req.method === "POST" && action === "abort") {
+			await provider.interactionDetails(req, res);
+			return deny(req, res, "The user declined access.");
+		}
+		return sendHtml(res, 404, renderErrorPage("Not found", EXPIRED));
+	};
+	return {
+		/** `/oauth/callback`: the one redirect URI registered at Zendesk. */
+		upstreamCallback: (res, url) => {
+			const uid = url.searchParams.get("state") ?? "";
+			if (!UID.test(uid)) {
+				sendHtml(res, 400, renderErrorPage("Sign-in failed", EXPIRED));
+				return;
+			}
+			const next = new URL(`/interaction/${uid}/callback`, issuer);
+			const code = url.searchParams.get("code");
+			if (code) next.searchParams.set("code", code);
+			redirect(res, `${next.pathname}${next.search}`);
+		},
+		/** `/interaction/<uid>[/callback|/confirm|/abort]`. */
+		handle: async (req, res, url) => {
+			try {
+				await routes(req, res, url);
+			} catch (err) {
+				if (!isExpiredLink(err)) throw err;
+				if (!res.headersSent) sendHtml(res, 400, renderErrorPage("Sign-in failed", EXPIRED));
+			}
+		}
+	};
+};
+//#endregion
+//#region src/auth/server/keys.ts
+const MIN_SECRET_BYTES = 32;
+const ED25519_PKCS8_PREFIX = Buffer.from("302e020100300506032b657004220420", "hex");
+const derive = (master, purpose, length = 32) => Buffer.from(hkdfSync("sha256", master, Buffer.alloc(0), `zendesk-mcp/${purpose}/v1`, length));
+const kidFor = (master, purpose) => createHash("sha256").update(derive(master, `kid/${purpose}`, 16)).digest("base64url").slice(0, 16);
+/**
+* Parse `OAUTH_MASTER_SECRET`: base64 entries, comma-separated, newest first.
+* Errors never echo the value.
+*/
+const parseSecretList = (raw) => {
+	const entries = raw.split(",").map((entry) => entry.trim()).filter((entry) => entry.length > 0).map((entry) => Buffer.from(entry, "base64"));
+	const [first, ...rest] = entries;
+	if (!first) throw new Error("OAuth master secret is empty.");
+	if (entries.some((secret) => secret.length < 32)) throw new Error(`OAuth master secret must decode to at least 32 bytes of base64 (generate one with: openssl rand -base64 32).`);
+	return [first, ...rest];
+};
+const deriveKeySet = (master) => {
+	return {
+		signingJwk: {
+			...createPrivateKey({
+				key: Buffer.concat([ED25519_PKCS8_PREFIX, derive(master, "signing")]),
+				format: "der",
+				type: "pkcs8"
+			}).export({ format: "jwk" }),
+			kid: kidFor(master, "signing"),
+			use: "sig",
+			alg: "EdDSA"
+		},
+		accessToken: {
+			kid: kidFor(master, "access-token"),
+			key: createSecretKey(derive(master, "access-token"))
+		},
+		atRest: {
+			kid: kidFor(master, "at-rest"),
+			key: createSecretKey(derive(master, "at-rest"))
+		},
+		cookieKey: derive(master, "cookie").toString("base64url"),
+		requestState: derive(master, "request-state")
+	};
+};
+const deriveKeyRing = (raw) => {
+	const [first, ...rest] = parseSecretList(raw);
+	return [deriveKeySet(first), ...rest.map(deriveKeySet)];
+};
+//#endregion
 //#region src/auth/server/secret.ts
 const MASTER_SECRET_FILE_NAME = "oauth-master-secret";
 const isWindows = process.platform === "win32";
@@ -36439,6 +36452,7 @@ const createAuthorizationServer = (options) => {
 	const { config, issuer, ring, persistent } = options;
 	const logger = options.logger ?? silentLogger;
 	const resource = `${issuer}/mcp`;
+	const adminResource = `${issuer}/mcp/admin`;
 	const upstream = {
 		subdomain: config.subdomain,
 		clientId: config.oauthClientId
@@ -36462,6 +36476,16 @@ const createAuthorizationServer = (options) => {
 	const provider = buildProvider({
 		issuer,
 		resource,
+		adminResource,
+		isZendeskAdmin: async (zendeskAccessToken) => {
+			try {
+				return (await fetchZendeskIdentity(upstream, zendeskAccessToken)).role === ZENDESK_ADMIN_ROLE;
+			} catch (err) {
+				const { cause } = err;
+				if (cause instanceof ZendeskApiError && cause.status === 401) throw grantUnavailableError();
+				throw err;
+			}
+		},
 		ring,
 		adapter: createAdapterFactory({ persistent }, ring),
 		zendeskGrants,
@@ -36485,6 +36509,7 @@ const createAuthorizationServer = (options) => {
 		provider,
 		upstream,
 		issuer,
+		adminResource,
 		readOnly: config.readOnly,
 		zendeskGrants,
 		consentMemory: createSealedCollection(persistent, "Consent", ring),
@@ -36499,16 +36524,19 @@ const createAuthorizationServer = (options) => {
 		const { plaintext } = await compactDecrypt(bearer, keySet.accessToken.key);
 		return asVerified(JSON.parse(decoder.decode(plaintext)), issuer);
 	};
+	const metadataOf = (of) => ({
+		resource: of,
+		authorization_servers: [issuer],
+		bearer_methods_supported: ["header"],
+		scopes_supported: supportedScopes(config.readOnly)
+	});
 	return {
 		issuer,
 		resource,
+		adminResource,
 		requestStateKey: ring[0].requestState,
-		protectedResourceMetadata: {
-			resource,
-			authorization_servers: [issuer],
-			bearer_methods_supported: ["header"],
-			scopes_supported: supportedScopes(config.readOnly)
-		},
+		protectedResourceMetadata: metadataOf(resource),
+		adminProtectedResourceMetadata: metadataOf(adminResource),
 		handle: async (req, res) => {
 			const url = new URL(req.url ?? "/", issuer);
 			if (url.pathname === "/oauth/callback" && req.method === "GET") {
@@ -36568,6 +36596,2359 @@ const prepareAuthorizationServer = async (config, logger = silentLogger) => {
 	});
 };
 //#endregion
+//#region node_modules/.pnpm/@modelcontextprotocol+core@2.4.0/node_modules/@modelcontextprotocol/core/dist/ext/skills/index.mjs
+/**
+* Wire constants for the MCP Skills extension (SEP-2640).
+*
+* Runtime-neutral: this module imports nothing.
+*/
+/** The identifier a server advertises in `ServerCapabilities.extensions`. */
+const SKILLS_EXTENSION_ID = "io.modelcontextprotocol/skills";
+/** Enumerates the skills a server serves. */
+const SKILLS_LIST_METHOD = "skills/list";
+/** Returns one skill's entry by its `SKILL.md` URI, listed or not. */
+const SKILLS_GET_METHOD = "skills/get";
+/** Lists the direct children of a directory resource (gated by `directoryRead`). */
+const RESOURCES_DIRECTORY_READ_METHOD = "resources/directory/read";
+/** The `mimeType` of a directory resource. */
+const DIRECTORY_MIME_TYPE = "inode/directory";
+/**
+* Per-skill interoperability limits. Hosts MUST accept skills up to these;
+* servers SHOULD NOT publish skills over them.
+*/
+const SKILL_LIMITS = Object.freeze({
+	files: 512,
+	bytes: 16777216
+});
+/** `sha256:` followed by 64 lowercase hexadecimal characters. */
+const SKILL_DIGEST_PATTERN = /^sha256:[\da-f]{64}$/;
+const SkillDigestSchema = string().regex(SKILL_DIGEST_PATTERN, "digest must be \"sha256:\" followed by 64 lowercase hexadecimal characters");
+const SkillResourceEntrySchema = looseObject({
+	uri: string(),
+	digest: SkillDigestSchema,
+	size: number().int().nonnegative()
+});
+const SkillFrontmatterSchema = looseObject({
+	name: string(),
+	description: string()
+}).refine((frontmatter) => Object.getPrototypeOf(frontmatter) === Object.prototype, "frontmatter must not have a \"__proto__\" field");
+const SkillResourcesSchema = union([array(SkillResourceEntrySchema), literal("dynamic")]);
+const SkillSchema = looseObject({
+	uri: string(),
+	frontmatter: SkillFrontmatterSchema,
+	resources: SkillResourcesSchema,
+	_meta: record(string(), unknown()).optional()
+});
+const SkillCacheScopeSchema = _enum(["public", "private"]);
+const cacheFields = {
+	ttlMs: number().int().nonnegative(),
+	cacheScope: SkillCacheScopeSchema
+};
+const ListSkillsResultSchema = looseObject({
+	...PaginatedResultSchema.shape,
+	skills: array(SkillSchema),
+	...cacheFields
+});
+const GetSkillRequestParamsSchema = BaseRequestParamsSchema.extend({ uri: string() });
+const GetSkillResultSchema = looseObject({
+	...ResultSchema.shape,
+	skill: SkillSchema,
+	...cacheFields
+});
+const DirectoryResourceSchema = looseObject(ResourceSchema.shape);
+const ReadResourceDirectoryRequestParamsSchema = PaginatedRequestParamsSchema.extend({ uri: string() });
+const ReadResourceDirectoryResultSchema = looseObject({
+	...PaginatedResultSchema.shape,
+	resources: array(DirectoryResourceSchema),
+	...cacheFields
+});
+const SkillsCapabilitySchema = looseObject({ directoryRead: boolean$1().optional() });
+//#endregion
+//#region node_modules/.pnpm/@modelcontextprotocol+server@2.4.0/node_modules/@modelcontextprotocol/server/dist/extension-Pm4HwRE6.mjs
+/**
+* Thrown when a skill catalog cannot be built: storage failures always, skill problems under `strict`.
+* Branded, so `instanceof` also matches an instance from another bundled copy of the SDK.
+*/
+var SkillCatalogError = class extends Error {
+	static {
+		Object.defineProperty(this, "mcpBrand", { value: "mcp.SkillCatalogError" });
+	}
+	static [Symbol.hasInstance](value) {
+		return brandedHasInstance(this, value);
+	}
+	/**
+	* Brand-based type guard: equivalent to `value instanceof this`, as an
+	* explicit static predicate (the axios/AWS-SDK `isInstance` style). Must be
+	* invoked on the class — in callback position write
+	* `v => SkillCatalogError.isInstance(v)`, not `.filter(SkillCatalogError.isInstance)`.
+	*/
+	static isInstance(value) {
+		if (typeof this !== "function") throw new TypeError("isInstance must be called on the class (e.g. `SkillCatalogError.isInstance(value)`); for callbacks use `v => SkillCatalogError.isInstance(v)`");
+		return brandedHasInstance(this, value);
+	}
+	problems;
+	constructor(problems) {
+		const lines = problems.map((problem) => `  ${problem.path}: ${problem.message}`).join("\n");
+		super(`${problems.length} skill problem${problems.length === 1 ? "" : "s"}:\n${lines}`);
+		this.name = "SkillCatalogError";
+		this.problems = problems;
+		stampErrorBrands(this, new.target);
+	}
+};
+function defaultWarn(warning) {
+	console.warn(`[mcp-sdk] skills: ${warning.path}: ${warning.message}`);
+}
+const encoder$1 = new TextEncoder();
+/** UTF-8 bytes of `text`. */
+function encodeUtf8(text) {
+	return encoder$1.encode(text);
+}
+/** Decodes UTF-8 only if decoding loses nothing (a BOM is kept); otherwise `undefined`. */
+function decodeUtf8Lossless(bytes) {
+	try {
+		return new TextDecoder("utf-8", {
+			fatal: true,
+			ignoreBOM: true
+		}).decode(bytes);
+	} catch {
+		return;
+	}
+}
+/** Standard base64 of `bytes`. */
+function encodeBase64(bytes) {
+	let binary = "";
+	const chunk = 32768;
+	for (let offset = 0; offset < bytes.length; offset += chunk) binary += String.fromCodePoint(...bytes.subarray(offset, offset + chunk));
+	return btoa(binary);
+}
+/** Bytes of a standard base64 string. */
+function decodeBase64(base64) {
+	const binary = atob(base64);
+	const bytes = new Uint8Array(binary.length);
+	for (let index = 0; index < binary.length; index++) bytes[index] = binary.codePointAt(index);
+	return bytes;
+}
+/** `sha256:` followed by the lowercase hex SHA-256 of `bytes` (WebCrypto, every runtime). */
+async function sha256Digest(bytes) {
+	const { buffer, byteOffset, byteLength } = bytes;
+	const view = buffer instanceof ArrayBuffer ? new Uint8Array(buffer, byteOffset, byteLength) : new Uint8Array(bytes);
+	const hash = new Uint8Array(await globalThis.crypto.subtle.digest("SHA-256", view));
+	let hex = "";
+	for (const byte of hash) hex += byte.toString(16).padStart(2, "0");
+	return `sha256:${hex}`;
+}
+/**
+* Frontmatter reader for `SKILL.md` (SEP-2640).
+*
+* Reads the YAML subset real skills use — block mappings and sequences;
+* plain, quoted and block scalars; one-line flow collections; comments — with
+* YAML 1.2 core-schema typing. Anything outside the subset throws a
+* {@linkcode FrontmatterError} instead of being read differently from a full
+* YAML parser. Server catalogs and client verification both call it; it is
+* kept behind this module so it can be swapped for a YAML library.
+*/
+var FrontmatterError = class extends Error {
+	line;
+	constructor(message, line) {
+		super(line === void 0 ? message : `line ${line}: ${message}`);
+		this.name = "FrontmatterError";
+		this.line = line;
+	}
+};
+const MAX_DEPTH = 32;
+/** Splits `SKILL.md` into its frontmatter YAML and markdown body. */
+function splitFrontmatter(markdown) {
+	let text = markdown.replaceAll("\r\n", "\n");
+	if (text.codePointAt(0) === 65279) text = text.slice(1);
+	if (!text.startsWith("---\n")) throw new FrontmatterError("SKILL.md must begin with a \"---\" line", 1);
+	const rest = text.slice(4);
+	const close = /^---[\t ]*$/m.exec(rest);
+	if (close === null) throw new FrontmatterError("frontmatter has no closing \"---\" line");
+	let body = rest.slice(close.index + close[0].length);
+	if (body.startsWith("\n")) body = body.slice(1);
+	return {
+		yaml: rest.slice(0, close.index),
+		body
+	};
+}
+/** Splits and parses `SKILL.md`. Line numbers in errors count from the file's first line. */
+function parseSkillMarkdown(markdown) {
+	const { yaml, body } = splitFrontmatter(markdown);
+	return {
+		frontmatter: parseFrontmatterYaml(yaml, 2),
+		body
+	};
+}
+/** Parses frontmatter YAML into a JSON object. `firstLine` numbers the first YAML line in errors. */
+function parseFrontmatterYaml(yaml, firstLine = 1) {
+	return new Parser(toLines(yaml, firstLine)).parseDocument();
+}
+function toLines(yaml, firstLine) {
+	const raws = yaml.split("\n");
+	if (raws.at(-1) === "") raws.pop();
+	return raws.map((raw, index) => ({
+		no: firstLine + index,
+		indent: /^ */.exec(raw)?.[0].length ?? 0,
+		text: trimWhiteStart(raw),
+		raw
+	}));
+}
+const TAB_INDENT = "tabs cannot be used for indentation";
+const isSkippable = (line) => line.text === "" || line.text.startsWith("#");
+const isTabIndented = (line) => line.raw[line.indent] === "	";
+const isSequenceItem = (text) => /^-(?:[\t ]|$)/.test(text);
+var Parser = class {
+	index = 0;
+	constructor(lines) {
+		this.lines = lines;
+	}
+	parseDocument() {
+		const first = this.peek();
+		if (first === void 0) return {};
+		if (first.text.startsWith("")) throw new FrontmatterError("a byte order mark inside the frontmatter is not supported", first.no);
+		if (isSequenceItem(first.text) || matchKey(first.text, first.no) === void 0) throw new FrontmatterError("frontmatter must be a mapping of keys to values", first.no);
+		const map = this.parseMapping(first.indent, 0);
+		const extra = this.peek();
+		if (extra !== void 0) throw new FrontmatterError("unexpected content", extra.no);
+		return map;
+	}
+	peek() {
+		while (this.index < this.lines.length && isSkippable(this.lines[this.index])) this.index++;
+		const line = this.lines[this.index];
+		if (line !== void 0 && isTabIndented(line)) throw new FrontmatterError(TAB_INDENT, line.no);
+		return line;
+	}
+	parseMapping(indent, depth) {
+		assertDepth(depth, this.lines[this.index]?.no);
+		const map = {};
+		for (let line = this.peek(); line !== void 0 && line.indent >= indent; line = this.peek()) {
+			if (line.indent > indent) throw new FrontmatterError("unexpected indentation", line.no);
+			if (isSequenceItem(line.text)) break;
+			const match = matchKey(line.text, line.no);
+			if (match === void 0) throw new FrontmatterError("expected \"key: value\"", line.no);
+			if (Object.hasOwn(map, match.key)) throw new FrontmatterError(`duplicate key "${match.key}"`, line.no);
+			this.index++;
+			map[match.key] = this.parseValue(match.rest, line, indent, depth + 1, true);
+		}
+		return map;
+	}
+	parseSequence(indent, depth) {
+		assertDepth(depth, this.lines[this.index]?.no);
+		const items = [];
+		for (let line = this.peek(); line !== void 0 && line.indent >= indent; line = this.peek()) {
+			if (line.indent > indent) throw new FrontmatterError("unexpected indentation", line.no);
+			if (!isSequenceItem(line.text)) break;
+			const after = line.text.slice(1);
+			const rest = trimWhiteStart(after);
+			const column = line.indent + 1 + (after.length - rest.length);
+			if (rest !== "" && !rest.startsWith("#") && (isSequenceItem(rest) || matchKey(rest, line.no) !== void 0)) {
+				if (/^ *\t/.test(after)) throw new FrontmatterError(TAB_INDENT, line.no);
+				this.lines[this.index] = {
+					...line,
+					indent: column,
+					text: rest
+				};
+				items.push(isSequenceItem(rest) ? this.parseSequence(column, depth + 1) : this.parseMapping(column, depth + 1));
+				continue;
+			}
+			this.index++;
+			items.push(this.parseValue(rest, line, indent, depth + 1, false));
+		}
+		return items;
+	}
+	parseValue(rest, line, parentIndent, depth, allowCompactSequence) {
+		if (rest === "" || rest.startsWith("#")) {
+			const next = this.peek();
+			if (next !== void 0 && next.indent > parentIndent) return this.parseIndented(parentIndent, depth);
+			if (allowCompactSequence && next !== void 0 && next.indent === parentIndent && isSequenceItem(next.text)) return this.parseSequence(parentIndent, depth);
+			return null;
+		}
+		const first = rest[0];
+		if (first === "|" || first === ">") return this.parseBlockScalar(rest, line, parentIndent);
+		if (first === "\"" || first === "'") {
+			const { value, end } = readQuoted(rest, 0, line.no);
+			expectOnlyComment(rest.slice(end), line.no);
+			return value;
+		}
+		if (first === "[" || first === "{") {
+			const { value, end } = readFlow(rest, 0, line.no, depth);
+			expectOnlyComment(rest.slice(end), line.no);
+			return value;
+		}
+		if ("&*!".includes(first)) throw new FrontmatterError("anchors, aliases and tags are not supported", line.no);
+		if ("%@`,]}".includes(first)) throw new FrontmatterError(`"${first}" cannot start a plain value; quote it`, line.no);
+		if (isSequenceItem(rest) || /^\?(?:[\t ]|$)/.test(rest)) throw new FrontmatterError("a nested collection must start on its own line", line.no);
+		return this.parsePlain(rest, line, parentIndent);
+	}
+	parseIndented(parentIndent, depth) {
+		const line = this.peek();
+		if (isSequenceItem(line.text)) return this.parseSequence(line.indent, depth);
+		if (matchKey(line.text, line.no) !== void 0) return this.parseMapping(line.indent, depth);
+		this.index++;
+		return this.parseValue(line.text, line, parentIndent, depth, false);
+	}
+	parsePlain(first, line, parentIndent) {
+		let value = stripComment(first);
+		assertPlain(value, line.no);
+		let commented = COMMENT.test(first);
+		let blanks = 0;
+		while (this.index < this.lines.length) {
+			const next = this.lines[this.index];
+			if (next.text === "") {
+				blanks++;
+				this.index++;
+				continue;
+			}
+			if (next.indent <= parentIndent || next.text.startsWith("#")) break;
+			if (isTabIndented(next)) throw new FrontmatterError(TAB_INDENT, next.no);
+			if (commented) throw new FrontmatterError("a comment ends a plain value; quote a value that continues past it", next.no);
+			const part = stripComment(next.text);
+			assertPlain(part, next.no);
+			commented = COMMENT.test(next.text);
+			value += blanks > 0 ? "\n".repeat(blanks) : " ";
+			value += part;
+			blanks = 0;
+			this.index++;
+		}
+		return resolvePlain(value, line.no);
+	}
+	parseBlockScalar(header, line, parentIndent) {
+		const match = /^([>|])([+-]?)(?:[\t ]+#.*)?[\t ]*$/.exec(header);
+		if (match === null) throw new FrontmatterError(/^[>|][+-]?\d|^[>|]\d/.test(header) ? "block scalar indentation indicators are not supported" : "invalid block scalar header", line.no);
+		const contents = [];
+		let contentIndent = -1;
+		let leadingWidth = 0;
+		while (this.index < this.lines.length) {
+			const next = this.lines[this.index];
+			const spacesOnly = next.indent === next.raw.length;
+			if (contentIndent === -1 && !spacesOnly && next.indent > parentIndent) {
+				contentIndent = next.indent;
+				if (leadingWidth > contentIndent) throw new FrontmatterError("a leading blank line is indented more than the block scalar content", next.no);
+			}
+			if (contentIndent !== -1 && next.indent >= contentIndent) contents.push(next.raw.slice(contentIndent));
+			else if (spacesOnly) {
+				if (contentIndent === -1) leadingWidth = Math.max(leadingWidth, next.indent);
+				contents.push("");
+			} else if (isTabIndented(next)) throw new FrontmatterError(TAB_INDENT, next.no);
+			else break;
+			this.index++;
+		}
+		return foldBlock(contents, match[1] === ">", match[2] ?? "");
+	}
+};
+function assertDepth(depth, line) {
+	if (depth > MAX_DEPTH) throw new FrontmatterError(`nesting deeper than ${MAX_DEPTH} levels is not supported`, line);
+}
+function matchKey(text, no) {
+	const first = text[0];
+	if (first === "\"" || first === "'") {
+		const { value, end } = readQuoted(text, 0, no);
+		const after = text.slice(end);
+		if (after === ":" || /^:[\t ]/.test(after)) return {
+			key: checkKey(value, no),
+			rest: trimWhiteStart(after.slice(1))
+		};
+		return;
+	}
+	if (first === "?") throw new FrontmatterError("complex keys (\"?\") are not supported", no);
+	if (first === void 0 || "[]{}&*!|>%@`#,".includes(first)) return void 0;
+	for (let index = 0; index < text.length; index++) {
+		const char = text[index];
+		const previous = text[index - 1];
+		if (char === "#" && (previous === " " || previous === "	")) return void 0;
+		if (char === ":") {
+			const next = text[index + 1];
+			if (next === void 0 || next === " " || next === "	") {
+				const key = trimWhiteEnd(text.slice(0, index));
+				if (key === "") return void 0;
+				return {
+					key: resolveKey(key, no),
+					rest: trimWhiteStart(text.slice(index + 1))
+				};
+			}
+		}
+	}
+}
+function checkKey(key, no) {
+	if (key === "__proto__") throw new FrontmatterError("the key \"__proto__\" is not supported", no);
+	return key;
+}
+function resolveKey(raw, no) {
+	if (typeof resolvePlain(raw, no) !== "string") throw new FrontmatterError(`key "${raw}" must be a string; quote it`, no);
+	return checkKey(raw, no);
+}
+function assertPlain(text, no) {
+	if (/:(?:[\t ]|$)/.test(text)) throw new FrontmatterError("a plain value cannot contain \": \"; quote the value", no);
+}
+const COMMENT = /[\t ]#/;
+function stripComment(text) {
+	const match = COMMENT.exec(text);
+	return trimWhiteEnd(match === null ? text : text.slice(0, match.index));
+}
+function expectOnlyComment(after, no) {
+	if (trimWhiteStart(after) === "" || /^[\t ]+#/.test(after)) return;
+	throw new FrontmatterError("unexpected text after the value", no);
+}
+function trimWhiteStart(text) {
+	return text.slice(skipSpaces(text, 0));
+}
+function trimWhiteEnd(text) {
+	let end = text.length;
+	while (end > 0 && (text[end - 1] === " " || text[end - 1] === "	")) end--;
+	return text.slice(0, end);
+}
+const NULL = /^(?:~|null|Null|NULL)$/;
+const TRUE = /^(?:true|True|TRUE)$/;
+const FALSE = /^(?:false|False|FALSE)$/;
+const INTEGER = /^[+-]?\d+$/;
+const OCTAL = /^0o[0-7]+$/;
+const HEXADECIMAL = /^0x[\dA-Fa-f]+$/;
+const FLOAT = /^[+-]?(?:\.\d+|\d+(?:\.\d*)?)(?:[Ee][+-]?\d+)?$/;
+const SPECIAL_FLOAT = /^(?:[+-]?\.(?:inf|Inf|INF)|\.(?:nan|NaN|NAN))$/;
+function resolvePlain(text, no) {
+	if (text === "" || NULL.test(text)) return null;
+	if (TRUE.test(text)) return true;
+	if (FALSE.test(text)) return false;
+	let number;
+	if (INTEGER.test(text) || FLOAT.test(text)) number = Number(text);
+	else if (OCTAL.test(text)) number = Number.parseInt(text.slice(2), 8);
+	else if (HEXADECIMAL.test(text)) number = Number.parseInt(text.slice(2), 16);
+	else if (SPECIAL_FLOAT.test(text)) number = NaN;
+	if (number === void 0) return text;
+	if (!Number.isFinite(number)) throw new FrontmatterError(`"${text}" cannot be represented in JSON; quote it`, no);
+	return number;
+}
+const SIMPLE_ESCAPES = {
+	"0": "\0",
+	a: "\x07",
+	b: "\b",
+	t: "	",
+	"	": "	",
+	n: "\n",
+	v: "\v",
+	f: "\f",
+	r: "\r",
+	e: "\x1B",
+	" ": " ",
+	"\"": "\"",
+	"/": "/",
+	"\\": "\\",
+	N: "…",
+	_: "\xA0",
+	L: "\u2028",
+	P: "\u2029"
+};
+const HEX_ESCAPE_WIDTH = {
+	x: 2,
+	u: 4,
+	U: 8
+};
+const UNCLOSED_QUOTE = "a quoted value must close on the same line (multi-line quoted values are not supported)";
+function readQuoted(text, start, no) {
+	const quote = text[start];
+	let value = "";
+	let index = start + 1;
+	while (index < text.length) {
+		const char = text[index];
+		if (quote === "'") {
+			if (char === "'") {
+				if (text[index + 1] === "'") {
+					value += "'";
+					index += 2;
+					continue;
+				}
+				return {
+					value,
+					end: index + 1
+				};
+			}
+			value += char;
+			index++;
+			continue;
+		}
+		if (char === "\"") return {
+			value,
+			end: index + 1
+		};
+		if (char === "\\") {
+			const escape = decodeEscape(text, index, no);
+			value += escape.decoded;
+			index += escape.length;
+			continue;
+		}
+		value += char;
+		index++;
+	}
+	throw new FrontmatterError(UNCLOSED_QUOTE, no);
+}
+function decodeEscape(text, index, no) {
+	const code = text[index + 1];
+	if (code === void 0) throw new FrontmatterError(UNCLOSED_QUOTE, no);
+	const simple = SIMPLE_ESCAPES[code];
+	if (simple !== void 0) return {
+		decoded: simple,
+		length: 2
+	};
+	const width = HEX_ESCAPE_WIDTH[code];
+	if (width === void 0) throw new FrontmatterError(`unknown escape "\\${code}"`, no);
+	const hex = text.slice(index + 2, index + 2 + width);
+	if (hex.length !== width || !/^[\dA-Fa-f]+$/.test(hex) || Number.parseInt(hex, 16) > 1114111) throw new FrontmatterError(`invalid escape "\\${code}${hex}"`, no);
+	return {
+		decoded: String.fromCodePoint(Number.parseInt(hex, 16)),
+		length: 2 + width
+	};
+}
+function skipSpaces(text, index) {
+	let position = index;
+	while (text[position] === " " || text[position] === "	") position++;
+	return position;
+}
+const UNCLOSED_FLOW = "a flow collection must close on the same line";
+function readFlow(text, start, no, depth) {
+	assertDepth(depth, no);
+	const open = text[start];
+	const close = open === "[" ? "]" : "}";
+	const list = [];
+	const map = {};
+	let index = skipSpaces(text, start + 1);
+	if (text[index] === close) return {
+		value: open === "[" ? list : map,
+		end: index + 1
+	};
+	for (;;) {
+		if (open === "[") {
+			const item = readFlowValue(text, index, no, depth);
+			list.push(item.value);
+			index = skipSpaces(text, item.end);
+		} else {
+			const key = readFlowKey(text, index, no);
+			const item = readFlowValue(text, key.end + 1, no, depth);
+			if (Object.hasOwn(map, key.key)) throw new FrontmatterError(`duplicate key "${key.key}"`, no);
+			map[key.key] = item.value;
+			index = skipSpaces(text, item.end);
+		}
+		const char = text[index];
+		if (char === ",") {
+			index = skipSpaces(text, index + 1);
+			if (text[index] === close) return {
+				value: open === "[" ? list : map,
+				end: index + 1
+			};
+			continue;
+		}
+		if (char === close) return {
+			value: open === "[" ? list : map,
+			end: index + 1
+		};
+		if (char === void 0) throw new FrontmatterError(UNCLOSED_FLOW, no);
+		throw new FrontmatterError(`unexpected "${char}" in a flow collection`, no);
+	}
+}
+function readFlowKey(text, start, no) {
+	const index = skipSpaces(text, start);
+	const char = text[index];
+	if (char === void 0) throw new FrontmatterError(UNCLOSED_FLOW, no);
+	if (char === "\"" || char === "'") {
+		const quoted = readQuoted(text, index, no);
+		const colon = skipSpaces(text, quoted.end);
+		if (text[colon] !== ":") throw new FrontmatterError("expected \": \" after a key in a flow mapping", no);
+		return {
+			key: checkKey(quoted.value, no),
+			end: colon
+		};
+	}
+	if (char === "[" || char === "{") throw new FrontmatterError("complex keys (flow collections as keys) are not supported", no);
+	assertFlowPlainStart(text, index, no);
+	const end = scanFlowPlain(text, index);
+	const raw = trimWhiteEnd(text.slice(index, end));
+	const after = text[end + 1];
+	if (raw === "" || text[end] !== ":" || after !== " " && after !== "	") throw new FrontmatterError("expected \"key: value\" in a flow mapping", no);
+	return {
+		key: resolveKey(raw, no),
+		end
+	};
+}
+const FLOW_SEPARATORS = " 	,[]{}";
+function assertFlowPlainStart(text, index, no) {
+	const char = text[index];
+	if ("&*!".includes(char)) throw new FrontmatterError("anchors, aliases and tags are not supported", no);
+	if ("|>%@`#".includes(char) || "-?:".includes(char) && FLOW_SEPARATORS.includes(text[index + 1] ?? " ")) throw new FrontmatterError(`"${char}" cannot start a plain value in a flow collection; quote it`, no);
+}
+function scanFlowPlain(text, index) {
+	let end = index;
+	while (end < text.length) {
+		const char = text[end];
+		if (",[]{}".includes(char)) break;
+		if (char === "#" && (text[end - 1] === " " || text[end - 1] === "	")) break;
+		if (char === ":" && FLOW_SEPARATORS.includes(text[end + 1] ?? " ")) break;
+		end++;
+	}
+	return end;
+}
+function readFlowValue(text, start, no, depth) {
+	const index = skipSpaces(text, start);
+	const char = text[index];
+	if (char === void 0) throw new FrontmatterError(UNCLOSED_FLOW, no);
+	if (char === "[" || char === "{") return readFlow(text, index, no, depth + 1);
+	if (char === "\"" || char === "'") return readQuoted(text, index, no);
+	assertFlowPlainStart(text, index, no);
+	const end = scanFlowPlain(text, index);
+	if (text[end] === ":") throw new FrontmatterError("mappings inside flow collections are not supported; quote the value", no);
+	const raw = trimWhiteEnd(text.slice(index, end));
+	if (raw === "") throw new FrontmatterError("empty value in a flow collection", no);
+	return {
+		value: resolvePlain(raw, no),
+		end
+	};
+}
+function foldBlock(contents, folded, chomping) {
+	let result = "";
+	let emptyLines = 0;
+	let didReadContent = false;
+	let atMoreIndented = false;
+	for (const content of contents) {
+		if (content === "") {
+			emptyLines++;
+			continue;
+		}
+		if (folded) if (content.startsWith(" ") || content.startsWith("	")) {
+			atMoreIndented = true;
+			result += "\n".repeat(didReadContent ? 1 + emptyLines : emptyLines);
+		} else if (atMoreIndented) {
+			atMoreIndented = false;
+			result += "\n".repeat(emptyLines + 1);
+		} else if (emptyLines === 0) {
+			if (didReadContent) result += " ";
+		} else result += "\n".repeat(emptyLines);
+		else result += "\n".repeat(didReadContent ? 1 + emptyLines : emptyLines);
+		result += content;
+		didReadContent = true;
+		emptyLines = 0;
+	}
+	if (chomping === "+") result += "\n".repeat(didReadContent ? 1 + emptyLines : emptyLines);
+	else if (chomping === "" && didReadContent) result += "\n";
+	return result;
+}
+const ENCODED_IN_SEGMENT = /[^\w!$&'()*+,.:;=@[\]|~-]/gu;
+function encodePathText(text) {
+	return text.replaceAll(ENCODED_IN_SEGMENT, (char) => encodeURIComponent(char));
+}
+/** Percent-encodes one path segment as WHATWG URL does, plus `%`, `/`, `\` and the dots of `.` and `..`; throws `URIError` on a lone surrogate. */
+function encodeSegment(segment) {
+	if (segment === "." || segment === "..") return segment.replaceAll(".", "%2E");
+	return encodePathText(segment);
+}
+/** `text` without its trailing `/`s; a loop, since `/\/+$/` backtracks polynomially on a long run of `/`. */
+function trimTrailingSlashes(text) {
+	let end = text.length;
+	while (end > 0 && text.codePointAt(end - 1) === 47) end--;
+	return text.slice(0, end);
+}
+/** `base` (`scheme://`, or a URI without a trailing slash) + `/`-joined encoded segments; an authority is encoded strictly. */
+function joinUri(base, segments) {
+	if (!base.endsWith("://")) return `${trimTrailingSlashes(base)}/${segments.map((segment) => encodeSegment(segment)).join("/")}`;
+	const [authority, ...path] = segments;
+	if (authority === void 0) return base;
+	return [base + encodeURIComponent(authority), ...path.map((segment) => encodeSegment(segment))].join("/");
+}
+/** WHATWG-serialised form of `uri`, or `undefined` if it does not parse. */
+function canonicalUri(uri) {
+	try {
+		return new URL(uri).href;
+	} catch {
+		return;
+	}
+}
+/** True when `uri` is already in canonical form. */
+function isRoundTripUri(uri) {
+	return canonicalUri(uri) === uri;
+}
+const MANIFEST_SUFFIX = "/SKILL.md";
+/** The skill's root directory URI (no trailing slash), or `undefined` if `skillMdUri` is not a `…/SKILL.md` URI in a named directory. */
+function skillRootUri(skillMdUri) {
+	const canonical = canonicalUri(skillMdUri);
+	if (canonical === void 0 || !canonical.endsWith(MANIFEST_SUFFIX)) return void 0;
+	const root = canonical.slice(0, -9);
+	return root.endsWith("/") ? void 0 : root;
+}
+function safeDecode(segment) {
+	try {
+		return decodeURIComponent(segment);
+	} catch {
+		return segment;
+	}
+}
+/** The decoded last segment of a directory URI (the authority when the path is empty). */
+function lastSegmentOf(rootUri) {
+	const url = new URL(rootUri);
+	const path = url.pathname;
+	return safeDecode(path === "" || path === "/" ? url.host : path.slice(path.lastIndexOf("/") + 1));
+}
+/** True when `uri` is strictly inside `rootUri` and no segment below it decodes to empty, `.`, `..`, or a name holding `/` or NUL. */
+function isWithin(rootUri, uri) {
+	const canonical = canonicalUri(uri);
+	if (canonical === void 0 || !canonical.startsWith(`${rootUri}/`)) return false;
+	return canonical.slice(rootUri.length + 1).split("/").every((segment) => {
+		const decoded = safeDecode(segment);
+		return decoded !== "" && decoded !== "." && decoded !== ".." && !decoded.includes("/") && !decoded.includes("\0");
+	});
+}
+function decodeOrUndefined(escapes) {
+	try {
+		return decodeURIComponent(escapes);
+	} catch {
+		return;
+	}
+}
+function utf8Width(lead) {
+	if (lead >= 240) return 4;
+	if (lead >= 224) return 3;
+	if (lead >= 192) return 2;
+	return 1;
+}
+function keyOfEscapes(run) {
+	let key = "";
+	for (let at = 0; at < run.length;) {
+		const width = 3 * utf8Width(Number.parseInt(run.slice(at + 1, at + 3), 16));
+		const decoded = decodeOrUndefined(run.slice(at, at + width));
+		if (decoded === void 0) {
+			key += `%25${run.slice(at + 1, at + 3)}`;
+			at += 3;
+		} else {
+			key += encodePathText(decoded);
+			at += width;
+		}
+	}
+	return key;
+}
+const ESCAPE_RUN = /((?:%[\dA-Fa-f]{2})+)/;
+function keyOfSegment(segment) {
+	return segment.split(ESCAPE_RUN).map((part, index) => index % 2 === 0 ? encodePathText(part) : keyOfEscapes(part)).join("");
+}
+/** The one spelling all ways of writing a file's URI below `rootUri` share (`Q&A.md`, `Q%26A.md#x`); `undefined` if it does not parse. */
+function skillFileKey(rootUri, uri) {
+	let url;
+	try {
+		url = new URL(uri);
+	} catch {
+		return;
+	}
+	url.hash = "";
+	const canonical = url.href;
+	if (canonical.includes("?") || !canonical.startsWith(`${rootUri}/`)) return canonical;
+	return `${rootUri}/${canonical.slice(rootUri.length + 1).split("/").map((segment) => keyOfSegment(segment)).join("/")}`;
+}
+/** Code-unit order of two URIs: the one order for entries, directory children and cursors. */
+function compareUris(a, b) {
+	if (a < b) return -1;
+	if (a > b) return 1;
+	return 0;
+}
+/** Agent Skills name rule: lowercase letters, digits and single hyphens (length checked separately). */
+const SKILL_NAME_PATTERN = /^[\da-z]+(?:-[\da-z]+)*$/;
+const isStringMap = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && Object.values(value).every((item) => typeof item === "string");
+function countCharacters(text) {
+	let count = 0;
+	for (let index = 0; index < text.length; index += text.codePointAt(index) > 65535 ? 2 : 1) count++;
+	return count;
+}
+/** Structural rules of the stable spec and Agent Skills. Empty array = valid. */
+function validateSkillEntry(skill) {
+	const problems = [];
+	const root = skillRootUri(skill.uri);
+	if (root === void 0) return [`uri "${skill.uri}" must be a URI ending in /SKILL.md inside a named directory`];
+	const frontmatter = skill.frontmatter;
+	const { name, description } = skill.frontmatter;
+	if (name.length === 0 || name.length > 64 || !SKILL_NAME_PATTERN.test(name)) problems.push(`frontmatter name "${name}" must be 1-64 lowercase letters, digits and single hyphens`);
+	else if (lastSegmentOf(root) !== name) problems.push(`frontmatter name "${name}" must match the last path segment "${lastSegmentOf(root)}"`);
+	if (description === "" || countCharacters(description) > 1024) problems.push("frontmatter description must be 1-1024 characters");
+	const compatibility = frontmatter["compatibility"];
+	if (compatibility !== void 0 && (typeof compatibility !== "string" || compatibility === "" || countCharacters(compatibility) > 500)) problems.push("frontmatter compatibility must be a string of 1-500 characters");
+	if (frontmatter["metadata"] !== void 0 && !isStringMap(frontmatter["metadata"])) problems.push("frontmatter metadata must map strings to strings");
+	if (skill.resources !== "dynamic") {
+		const self = canonicalUri(skill.uri);
+		const seen = /* @__PURE__ */ new Set();
+		let hasSelf = false;
+		for (const resource of skill.resources) {
+			const canonical = canonicalUri(resource.uri);
+			if (canonical === void 0) {
+				problems.push(`resource "${resource.uri}" is not a valid URI`);
+				continue;
+			}
+			if (/[#?]/.test(canonical)) {
+				problems.push(`resource "${resource.uri}" must not have a query or fragment`);
+				continue;
+			}
+			const key = skillFileKey(root, canonical) ?? canonical;
+			if (seen.has(key)) problems.push(`resource "${resource.uri}" is listed more than once`);
+			seen.add(key);
+			if (canonical === self) hasSelf = true;
+			else if (!isWithin(root, resource.uri)) problems.push(`resource "${resource.uri}" is outside the skill directory ${root}`);
+		}
+		if (!hasSelf) problems.push(`resources must include ${skill.uri}`);
+	}
+	return problems;
+}
+/** Schema check plus {@linkcode validateSkillEntry}, for values received from elsewhere. */
+function skillEntryProblems(value) {
+	const parsed = SkillSchema.safeParse(value);
+	if (!parsed.success) return parsed.error.issues.map((issue) => `${issue.path.join(".") || "(entry)"}: ${issue.message}`);
+	return validateSkillEntry(parsed.data);
+}
+/** Builds an entry from a skill's files: parses `SKILL.md`, hashes every file, sorts by URI, validates. */
+async function buildSkillEntry(skillMdUri, files) {
+	const manifest = files.find((file) => file.uri === skillMdUri);
+	if (manifest === void 0) return { problems: ["SKILL.md is missing"] };
+	const text = decodeUtf8Lossless(manifest.bytes);
+	if (text === void 0) return { problems: ["SKILL.md is not valid UTF-8"] };
+	let frontmatter;
+	try {
+		frontmatter = parseSkillMarkdown(text).frontmatter;
+	} catch (error) {
+		if (error instanceof FrontmatterError) return { problems: [`SKILL.md frontmatter: ${error.message}`] };
+		throw error;
+	}
+	if (typeof frontmatter["name"] !== "string" || typeof frontmatter["description"] !== "string") return { problems: ["SKILL.md frontmatter must contain string \"name\" and \"description\""] };
+	const resources = await Promise.all(files.map(async (file) => ({
+		uri: file.uri,
+		digest: await sha256Digest(file.bytes),
+		size: file.bytes.byteLength
+	})));
+	resources.sort((a, b) => compareUris(a.uri, b.uri));
+	const skill = {
+		uri: skillMdUri,
+		frontmatter,
+		resources
+	};
+	return {
+		skill,
+		problems: validateSkillEntry(skill)
+	};
+}
+const BY_EXTENSION = {
+	md: "text/markdown",
+	markdown: "text/markdown",
+	txt: "text/plain",
+	json: "application/json",
+	yaml: "application/yaml",
+	yml: "application/yaml",
+	py: "text/x-python",
+	sh: "application/x-sh",
+	bash: "application/x-sh",
+	js: "text/javascript",
+	mjs: "text/javascript",
+	ts: "text/typescript",
+	html: "text/html",
+	css: "text/css",
+	csv: "text/csv",
+	xml: "application/xml",
+	svg: "image/svg+xml",
+	png: "image/png",
+	jpg: "image/jpeg",
+	jpeg: "image/jpeg",
+	gif: "image/gif",
+	webp: "image/webp",
+	pdf: "application/pdf"
+};
+/** MIME type from the file extension; `application/octet-stream` when unknown. */
+function mimeTypeFor(fileName) {
+	const dot = fileName.lastIndexOf(".");
+	if (dot <= 0) return "application/octet-stream";
+	const extension = fileName.slice(dot + 1).toLowerCase();
+	return Object.hasOwn(BY_EXTENSION, extension) ? BY_EXTENSION[extension] : "application/octet-stream";
+}
+const basename = (path) => path.slice(path.lastIndexOf("/") + 1);
+const dirname$1 = (path) => {
+	const slash = path.lastIndexOf("/");
+	return slash === -1 ? "" : path.slice(0, slash);
+};
+const errorText$1 = (error) => error instanceof Error ? error.message : String(error);
+const NOT_FOLLOWED = "symlinks and other special files are not followed; copy the file instead";
+const isManifest = (entry) => entry.kind !== "directory" && basename(entry.path) === "SKILL.md";
+function append(lists, key, value) {
+	const list = lists.get(key);
+	if (list === void 0) lists.set(key, [value]);
+	else list.push(value);
+}
+function representableUri(uriOf, path) {
+	let uri;
+	try {
+		uri = uriOf(path);
+	} catch (error) {
+		if (error instanceof URIError) return void 0;
+		throw error;
+	}
+	return isRoundTripUri(uri) ? uri : void 0;
+}
+async function walk(files) {
+	const tree = [];
+	const visit = async (dir) => {
+		let entries;
+		try {
+			entries = await files.list(dir);
+		} catch (error) {
+			throw new SkillCatalogError([{
+				path: dir === "" ? "." : dir,
+				message: `cannot be listed: ${errorText$1(error)}`
+			}]);
+		}
+		for (const entry of entries.toSorted((a, b) => compareUris(a.name, b.name))) {
+			if (entry.name.startsWith(".")) continue;
+			const path = dir === "" ? entry.name : `${dir}/${entry.name}`;
+			tree.push({
+				path,
+				kind: entry.kind
+			});
+			if (entry.kind === "directory") await visit(path);
+		}
+	};
+	await visit("");
+	return tree;
+}
+async function readFile$1(files, path) {
+	try {
+		return await files.read(path);
+	} catch (error) {
+		throw new SkillCatalogError([{
+			path,
+			message: `cannot be read: ${errorText$1(error)}`
+		}]);
+	}
+}
+async function buildCatalogSnapshot(files, options) {
+	const tree = await walk(files);
+	const problems = [];
+	const report = (warning) => {
+		if (options.strict) problems.push(warning);
+		else options.warn(warning);
+	};
+	const uriOf = (path) => joinUri("skill://", [...options.prefix, ...path.split("/")]);
+	for (const entry of tree) {
+		const name = basename(entry.path);
+		if (entry.kind === "file" && name !== "SKILL.md" && name.toLowerCase() === "skill.md") options.warn({
+			path: entry.path,
+			message: "did you mean SKILL.md? File names are case-sensitive"
+		});
+	}
+	const skillDirs = new Set(tree.filter((entry) => isManifest(entry)).map((entry) => dirname$1(entry.path)));
+	const insideOf = /* @__PURE__ */ new Map();
+	for (const entry of tree) {
+		let inSkill = false;
+		for (let dir = dirname$1(entry.path); dir !== ""; dir = dirname$1(dir)) {
+			if (!skillDirs.has(dir)) continue;
+			inSkill = true;
+			append(insideOf, dir, entry);
+		}
+		if (!inSkill && entry.kind === "unsupported" && !isManifest(entry)) report({
+			path: entry.path,
+			message: `${NOT_FOLLOWED} (skipped)`
+		});
+	}
+	const built = [];
+	const hashed = /* @__PURE__ */ new Map();
+	const manifests = tree.filter((entry) => isManifest(entry)).toSorted((a, b) => b.path.split("/").length - a.path.split("/").length);
+	for (const entry of manifests) {
+		const dir = dirname$1(entry.path);
+		if (dir === "") {
+			report({
+				path: entry.path,
+				message: "a SKILL.md at the root has no skill path; point loadSkills (or your adapter) at its parent folder (skipped)"
+			});
+			continue;
+		}
+		const skill = await buildOne(files, insideOf.get(dir) ?? [], dir, uriOf, options, report, hashed);
+		if (skill !== void 0) built.push(skill);
+	}
+	if (problems.length > 0) throw new SkillCatalogError(problems);
+	if (built.length === 0) options.warn({
+		path: ".",
+		message: "no skills found (a skill is a folder containing SKILL.md)"
+	});
+	return assemble(built, tree, uriOf);
+}
+async function buildOne(files, inside, dir, uriOf, options, report, hashed) {
+	const unsupported = inside.find((entry) => entry.kind === "unsupported");
+	if (unsupported !== void 0) {
+		report({
+			path: unsupported.path,
+			message: `${NOT_FOLLOWED} (skill skipped)`
+		});
+		return;
+	}
+	const manifestPath = `${dir}/SKILL.md`;
+	const manifest = [];
+	const catalogFiles = [];
+	for (const entry of inside) {
+		const uri = representableUri(uriOf, entry.path);
+		if (uri === void 0) {
+			report({
+				path: entry.path,
+				message: "this name cannot be represented in a URI (skill skipped)"
+			});
+			return;
+		}
+		if (entry.kind !== "file") continue;
+		const own = entry.path === manifestPath;
+		let file = own ? void 0 : hashed.get(entry.path);
+		if (file === void 0) {
+			const bytes = await readFile$1(files, entry.path);
+			if (own) manifest.push({
+				uri,
+				bytes
+			});
+			file = {
+				digest: await sha256Digest(bytes),
+				size: bytes.byteLength
+			};
+			hashed.set(entry.path, file);
+		}
+		catalogFiles.push({
+			path: entry.path,
+			uri,
+			...file,
+			mimeType: mimeTypeFor(basename(entry.path))
+		});
+	}
+	const parsed = await buildSkillEntry(uriOf(manifestPath), manifest);
+	const resources = catalogFiles.map(({ uri, digest, size }) => ({
+		uri,
+		digest,
+		size
+	})).toSorted((a, b) => compareUris(a.uri, b.uri));
+	const skill = parsed.skill === void 0 ? void 0 : {
+		...parsed.skill,
+		resources
+	};
+	const problems = skill === void 0 ? parsed.problems : validateSkillEntry(skill);
+	if (skill === void 0 || problems.length > 0) {
+		for (const message of problems) report({
+			path: manifestPath,
+			message: `${message} (skill skipped)`
+		});
+		return;
+	}
+	let totalBytes = 0;
+	for (const file of catalogFiles) totalBytes += file.size;
+	if (catalogFiles.length > options.limits.files || totalBytes > options.limits.bytes) {
+		const remedy = options.strict ? "Raise limits to allow it" : "Set strict: true to fail instead, or raise limits";
+		report({
+			path: dir,
+			message: `${catalogFiles.length} files / ${totalBytes} bytes exceeds the limit of ${options.limits.files} files / ${options.limits.bytes} bytes; some hosts may decline it. ${remedy}`
+		});
+	}
+	return {
+		dir,
+		skill,
+		files: catalogFiles,
+		manifestSize: catalogFiles.find((file) => file.path === manifestPath)?.size ?? 0,
+		inside
+	};
+}
+function deepFreeze(value) {
+	if (typeof value === "object" && value !== null && !Object.isFrozen(value)) {
+		Object.freeze(value);
+		for (const item of Object.values(value)) deepFreeze(item);
+	}
+	return value;
+}
+function assemble(built, tree, uriOf) {
+	const ordered = Object.freeze(built.map((item) => deepFreeze(item.skill)).toSorted((a, b) => compareUris(a.uri, b.uri)));
+	const files = /* @__PURE__ */ new Map();
+	const dirPaths = /* @__PURE__ */ new Set();
+	for (const item of built) {
+		for (const file of item.files) files.set(file.uri, file);
+		dirPaths.add(item.dir);
+		for (const entry of item.inside) if (entry.kind === "directory") dirPaths.add(entry.path);
+	}
+	const childrenOf = /* @__PURE__ */ new Map();
+	for (const entry of tree) append(childrenOf, dirname$1(entry.path), entry);
+	const dirs = /* @__PURE__ */ new Map();
+	for (const dirPath of dirPaths) {
+		const children = [];
+		for (const entry of childrenOf.get(dirPath) ?? []) {
+			if (entry.kind === "directory") {
+				children.push({
+					uri: uriOf(entry.path),
+					name: basename(entry.path),
+					mimeType: DIRECTORY_MIME_TYPE
+				});
+				continue;
+			}
+			const file = files.get(uriOf(entry.path));
+			if (entry.kind === "file" && file !== void 0) children.push({
+				uri: file.uri,
+				name: basename(entry.path),
+				mimeType: file.mimeType,
+				size: file.size
+			});
+		}
+		children.sort((a, b) => compareUris(a.uri, b.uri));
+		dirs.set(uriOf(dirPath), children);
+	}
+	const listed = built.map((item) => ({
+		uri: item.skill.uri,
+		name: item.skill.frontmatter.name,
+		description: item.skill.frontmatter.description,
+		mimeType: "text/markdown",
+		size: item.manifestSize
+	})).toSorted((a, b) => compareUris(a.uri, b.uri));
+	return {
+		ordered,
+		skills: new Map(ordered.map((skill) => [skill.uri, skill])),
+		files,
+		dirs,
+		listed
+	};
+}
+const trustedSources = /* @__PURE__ */ new WeakSet();
+const CURSOR_PREFIX = "after:";
+function encodeCursor(uri) {
+	return encodeBase64(encodeUtf8(CURSOR_PREFIX + uri)).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+}
+function decodeCursor(cursor) {
+	try {
+		const base64 = cursor.replaceAll("-", "+").replaceAll("_", "/");
+		const decoded = decodeUtf8Lossless(decodeBase64(base64 + "=".repeat((4 - base64.length % 4) % 4)));
+		return decoded?.startsWith(CURSOR_PREFIX) ? decoded.slice(6) : void 0;
+	} catch {
+		return;
+	}
+}
+function paginate(items, cursor, pageSize, key) {
+	let start = 0;
+	if (cursor !== void 0) {
+		const after = decodeCursor(cursor);
+		if (after === void 0) throw new ProtocolError(ProtocolErrorCode.InvalidParams, "Invalid cursor");
+		start = items.findIndex((item) => compareUris(key(item), after) > 0);
+		if (start === -1) start = items.length;
+	}
+	const end = Math.min(items.length, start + pageSize);
+	const page = items.slice(start, end);
+	const last = page.at(-1);
+	return end < items.length && last !== void 0 ? {
+		items: page,
+		nextCursor: encodeCursor(key(last))
+	} : { items: page };
+}
+function resolvePageSize(pageSize) {
+	if (pageSize === void 0) return 100;
+	if (pageSize === Number.POSITIVE_INFINITY || Number.isSafeInteger(pageSize) && pageSize > 0) return pageSize;
+	throw new RangeError(`pageSize must be a positive integer or Infinity (got ${pageSize})`);
+}
+const errorText = (error) => error instanceof Error ? error.message : String(error);
+function catalogSource(state, files, pageSize, warn) {
+	const source = {
+		async list({ cursor }) {
+			const page = paginate(state.current.ordered, cursor, pageSize, (skill) => skill.uri);
+			return page.nextCursor === void 0 ? { skills: page.items } : {
+				skills: page.items,
+				nextCursor: page.nextCursor
+			};
+		},
+		async get(uri) {
+			const canonical = canonicalUri(uri);
+			return canonical === void 0 ? void 0 : state.current.skills.get(canonical);
+		},
+		read: (uri) => readChecked(state.current, files, uri, warn),
+		async readDirectory(uri, { cursor }) {
+			const canonical = canonicalUri(uri);
+			const children = canonical === void 0 ? void 0 : state.current.dirs.get(canonical);
+			if (children === void 0) return;
+			const page = paginate(children, cursor, pageSize, (child) => child.uri);
+			return page.nextCursor === void 0 ? { resources: page.items } : {
+				resources: page.items,
+				nextCursor: page.nextCursor
+			};
+		},
+		async listResources() {
+			return [...state.current.listed];
+		}
+	};
+	trustedSources.add(source);
+	return source;
+}
+async function readChecked(snapshot, files, uri, warn) {
+	const canonical = canonicalUri(uri);
+	const file = canonical === void 0 ? void 0 : snapshot.files.get(canonical);
+	if (file === void 0) {
+		if (canonical !== void 0 && snapshot.dirs.has(canonical)) throw new ResourceNotFoundError(uri, `${uri} is a directory; use resources/directory/read`);
+		return;
+	}
+	let bytes;
+	try {
+		bytes = await files.read(file.path);
+	} catch (error) {
+		warn({
+			path: file.path,
+			message: `could not be read: ${errorText(error)}`
+		});
+		throw new ProtocolError(ProtocolErrorCode.InternalError, `${uri} could not be read`);
+	}
+	if (bytes.byteLength !== file.size || await sha256Digest(bytes) !== file.digest) {
+		warn({
+			path: file.path,
+			message: "changed since the catalog was loaded; call reload()"
+		});
+		throw new ProtocolError(ProtocolErrorCode.InternalError, `${uri} changed since the skills catalog was loaded`);
+	}
+	const text = decodeUtf8Lossless(bytes);
+	return text === void 0 ? {
+		bytes,
+		mimeType: file.mimeType
+	} : {
+		text,
+		mimeType: file.mimeType
+	};
+}
+function splitRelativePath(path, label) {
+	const segments = path.split("/").filter((segment) => segment !== "" && segment !== ".");
+	if (segments.length === 0 || segments.includes("..")) throw new TypeError(`${label} must be a relative path without ".." (got ${JSON.stringify(path)})`);
+	return segments;
+}
+function indexRecord(keys) {
+	const dirs = /* @__PURE__ */ new Map();
+	const files = /* @__PURE__ */ new Map();
+	for (const key of keys) {
+		const segments = splitRelativePath(key, "file path");
+		let dir = "";
+		for (const [depth, name] of segments.entries()) {
+			let children = dirs.get(dir);
+			if (children === void 0) {
+				children = /* @__PURE__ */ new Map();
+				dirs.set(dir, children);
+			}
+			children.set(name, {
+				name,
+				kind: depth < segments.length - 1 ? "directory" : "file"
+			});
+			dir = dir === "" ? name : `${dir}/${name}`;
+		}
+		files.set(dir, key);
+	}
+	return {
+		dirs,
+		files
+	};
+}
+/**
+* An in-memory adapter. The record is re-read whenever a walk starts — `list('')` — so `reload()` sees later changes.
+* Other calls use the index from that read (built on first use if no walk has started), so their cost does not grow
+* with the record. File contents are always read live.
+*/
+function memorySkillFiles(files) {
+	let index;
+	const reindex = () => {
+		index = indexRecord(Object.keys(files));
+		return index;
+	};
+	return {
+		async list(dir) {
+			const children = (dir === "" ? reindex() : index ?? reindex()).dirs.get(dir);
+			if (children !== void 0) return Array.from(children.values(), (entry) => ({ ...entry }));
+			if (dir === "") return [];
+			throw new Error(`no such directory: ${dir}`);
+		},
+		async read(path) {
+			const key = Object.hasOwn(files, path) ? path : (index ?? reindex()).files.get(path);
+			const content = key === void 0 ? void 0 : files[key];
+			if (content === void 0) throw new Error(`no such file: ${path}`);
+			return typeof content === "string" ? encodeUtf8(content) : content;
+		}
+	};
+}
+const SCHEME_URI = /^[a-z][\d+.a-z-]*:\/\//i;
+function describeEntry(value) {
+	const uri = value?.uri;
+	return typeof uri === "string" ? uri : "(entry without a uri)";
+}
+function toContents(uri, result) {
+	const mimeType = result.mimeType === void 0 ? {} : { mimeType: result.mimeType };
+	return "text" in result ? {
+		uri,
+		...mimeType,
+		text: result.text
+	} : {
+		uri,
+		...mimeType,
+		blob: encodeBase64(result.bytes)
+	};
+}
+const skillsServers = /* @__PURE__ */ new WeakSet();
+const afterAttach = /* @__PURE__ */ new WeakMap();
+const ONE_PER_SERVER = "another skills extension is already attached to this server; attach one per server (to serve several folders or sources, combine them behind one SkillFiles adapter or SkillSource)";
+/**
+* The MCP Skills extension (SEP-2640) for one catalog of skills. One instance
+* serves any number of servers: call {@linkcode SkillsExtension.attach} on each
+* (before connecting). Build it from a {@linkcode SkillSource}, or with
+* `SkillsExtension.load(files)` from storage.
+*/
+var SkillsExtension = class {
+	id = SKILLS_EXTENSION_ID;
+	#source;
+	#trusted;
+	#baseRoot;
+	#cacheHint;
+	#cache;
+	#strict;
+	#warn;
+	#attached = /* @__PURE__ */ new WeakSet();
+	/**
+	* Builds a catalog from storage through a {@linkcode SkillFiles} adapter
+	* (`memorySkillFiles`, `nodeSkillFiles`, or your own).
+	*/
+	static load(files, options) {
+		return SkillCatalog.load(files, options);
+	}
+	constructor(options) {
+		if (options.cacheHint !== void 0) assertValidCacheHint(options.cacheHint, "skills cacheHint");
+		const baseUri = options.baseUri ?? "skill://";
+		const canonical = SCHEME_URI.test(baseUri) ? canonicalUri(baseUri) : void 0;
+		if (canonical === void 0) throw new TypeError(`baseUri must be a "scheme://…" URI (got ${JSON.stringify(baseUri)})`);
+		this.#baseRoot = canonical.endsWith("://") ? canonical : `${trimTrailingSlashes(canonical)}/`;
+		this.#source = options.source;
+		this.#trusted = trustedSources.has(options.source);
+		this.#cacheHint = options.cacheHint;
+		this.#cache = {
+			ttlMs: options.cacheHint?.ttlMs ?? 0,
+			cacheScope: options.cacheHint?.cacheScope ?? "private"
+		};
+		this.#strict = options.strict ?? false;
+		this.#warn = options.onWarning ?? defaultWarn;
+	}
+	/**
+	* Serves these skills on `mcp`: registers the skill resource template and
+	* the skills methods, then declares the capability. Must run before
+	* connecting. Calling it again for the same server does nothing. One
+	* skills extension per server: attaching another one throws and leaves the
+	* server as it was, as does attaching to a server that already handles one
+	* of the skills methods.
+	*
+	* @experimental How an extension is wired to a server may change in a minor release.
+	*/
+	attach(mcp) {
+		if (this.#attached.has(mcp)) return;
+		if (mcp.isConnected()) throw new Error("attach skills before connecting the server");
+		if (skillsServers.has(mcp)) throw new Error(ONE_PER_SERVER);
+		const server = mcp.server;
+		const directoryRead = this.#source.readDirectory !== void 0;
+		const list = this.#source.listResources === void 0 ? void 0 : (ctx) => this.#listResources(ctx);
+		server.assertCanSetRequestHandler(SKILLS_LIST_METHOD);
+		server.assertCanSetRequestHandler(SKILLS_GET_METHOD);
+		if (directoryRead) server.assertCanSetRequestHandler(RESOURCES_DIRECTORY_READ_METHOD);
+		mcp.registerResource(SKILLS_EXTENSION_ID, new ResourceTemplate(`${this.#baseRoot}{+path}`, { list }), this.#cacheHint === void 0 ? {} : { cacheHint: this.#cacheHint }, (uri, _variables, ctx) => this.#read(uri, ctx));
+		server.setRequestHandler(SKILLS_LIST_METHOD, { params: PaginatedRequestParamsSchema }, (params, ctx) => this.#list(server, params.cursor, ctx));
+		server.setRequestHandler(SKILLS_GET_METHOD, { params: GetSkillRequestParamsSchema }, (params, ctx) => this.#get(server, params.uri, ctx));
+		if (directoryRead) server.setRequestHandler(RESOURCES_DIRECTORY_READ_METHOD, { params: ReadResourceDirectoryRequestParamsSchema }, (params, ctx) => this.#readDirectory(server, params.uri, params.cursor, ctx));
+		server.registerCapabilities({ extensions: { [SKILLS_EXTENSION_ID]: directoryRead ? { directoryRead: true } : {} } });
+		this.#attached.add(mcp);
+		skillsServers.add(mcp);
+		afterAttach.get(this)?.(mcp);
+	}
+	#cacheFields(server) {
+		return isModernProtocolVersion(server.getNegotiatedProtocolVersion() ?? "") ? { ...this.#cache } : {};
+	}
+	#keepValid(skills) {
+		if (this.#trusted) return [...skills];
+		const kept = [];
+		for (const candidate of skills) {
+			const problems = skillEntryProblems(candidate);
+			if (problems.length === 0) {
+				kept.push(candidate);
+				continue;
+			}
+			const message = `invalid skill entry from the source: ${problems.join("; ")}`;
+			if (this.#strict) throw new ProtocolError(ProtocolErrorCode.InternalError, `${describeEntry(candidate)}: ${message}`);
+			this.#warn({
+				path: describeEntry(candidate),
+				message: `${message} (dropped from skills/list)`
+			});
+		}
+		return kept;
+	}
+	async #list(server, cursor, ctx) {
+		const page = await this.#source.list(cursor === void 0 ? {} : { cursor }, ctx);
+		return {
+			skills: this.#keepValid(page.skills),
+			...page.nextCursor === void 0 ? {} : { nextCursor: page.nextCursor },
+			...this.#cacheFields(server)
+		};
+	}
+	async #get(server, uri, ctx) {
+		const skill = await this.#source.get(uri, ctx);
+		if (skill === void 0) throw new ProtocolError(ProtocolErrorCode.InvalidParams, `No skill is served at ${uri}`);
+		if (!this.#trusted) {
+			const problems = skillEntryProblems(skill);
+			if (problems.length > 0) {
+				const message = `invalid skill entry from the source: ${problems.join("; ")}`;
+				this.#warn({
+					path: uri,
+					message
+				});
+				throw new ProtocolError(ProtocolErrorCode.InternalError, message);
+			}
+		}
+		if (canonicalUri(skill.uri) !== canonicalUri(uri)) throw new ProtocolError(ProtocolErrorCode.InternalError, `the skill source returned ${skill.uri} for ${uri}`);
+		return {
+			skill,
+			...this.#cacheFields(server)
+		};
+	}
+	async #read(uri, ctx) {
+		const result = await this.#source.read(uri.href, ctx);
+		if (result === void 0) throw new ResourceNotFoundError(uri.href);
+		return { contents: [toContents(uri.href, result)] };
+	}
+	async #readDirectory(server, uri, cursor, ctx) {
+		const page = await this.#source.readDirectory(uri, cursor === void 0 ? {} : { cursor }, ctx);
+		if (page === void 0) throw new ProtocolError(ProtocolErrorCode.InvalidParams, `${uri} is not a directory resource`);
+		return {
+			resources: page.resources,
+			...page.nextCursor === void 0 ? {} : { nextCursor: page.nextCursor },
+			...this.#cacheFields(server)
+		};
+	}
+	async #listResources(ctx) {
+		const resources = await this.#source.listResources(ctx);
+		const kept = [];
+		for (const resource of resources) if (canonicalUri(resource.uri)?.startsWith(this.#baseRoot)) kept.push(resource);
+		else this.#warn({
+			path: resource.uri,
+			message: `listResources returned a URI outside ${this.#baseRoot}; dropped from resources/list`
+		});
+		return { resources: kept };
+	}
+};
+const PRUNE_THRESHOLD = 1024;
+function resolveLimits(limits) {
+	const resolved = {
+		files: limits?.files ?? SKILL_LIMITS.files,
+		bytes: limits?.bytes ?? SKILL_LIMITS.bytes
+	};
+	for (const [name, value] of Object.entries(resolved)) if (value !== Number.POSITIVE_INFINITY && !(Number.isSafeInteger(value) && value > 0)) throw new RangeError(`limits.${name} must be a positive integer or Infinity (got ${value})`);
+	return resolved;
+}
+function listingKey(snapshot) {
+	return JSON.stringify(snapshot.listed.map((resource) => [
+		resource.uri,
+		resource.name,
+		resource.description
+	]));
+}
+function diffSnapshots(previous, next) {
+	const same = (uri) => JSON.stringify(previous.skills.get(uri)) === JSON.stringify(next.skills.get(uri));
+	return {
+		added: [...next.skills.keys()].filter((uri) => !previous.skills.has(uri)),
+		removed: [...previous.skills.keys()].filter((uri) => !next.skills.has(uri)),
+		changed: [...next.skills.keys()].filter((uri) => previous.skills.has(uri) && !same(uri))
+	};
+}
+/**
+* A catalog the SDK built from storage. It holds metadata only: every file
+* read goes through the adapter and is checked against the published entry.
+*/
+var SkillCatalog = class SkillCatalog extends SkillsExtension {
+	#state;
+	#files;
+	#build;
+	#servers = /* @__PURE__ */ new Set();
+	#pruneAt = PRUNE_THRESHOLD;
+	#queue = Promise.resolve();
+	constructor(init) {
+		super(init.sourceOptions);
+		this.#state = init.state;
+		this.#files = init.files;
+		this.#build = init.build;
+		afterAttach.set(this, (mcp) => this.#track(mcp));
+	}
+	static async load(files, options = {}) {
+		const pageSize = resolvePageSize(options.pageSize);
+		const build = {
+			prefix: options.prefix === void 0 ? [] : splitRelativePath(options.prefix, "prefix"),
+			limits: resolveLimits(options.limits),
+			strict: options.strict ?? false,
+			warn: options.onWarning ?? defaultWarn
+		};
+		const state = { current: await buildCatalogSnapshot(files, build) };
+		return new SkillCatalog({
+			state,
+			files,
+			build,
+			sourceOptions: {
+				source: catalogSource(state, files, pageSize, build.warn),
+				baseUri: build.prefix.length === 0 ? "skill://" : joinUri("skill://", build.prefix),
+				cacheHint: options.cacheHint,
+				strict: options.strict,
+				onWarning: build.warn
+			}
+		});
+	}
+	/** The skills this catalog serves, sorted by URI. Frozen (deeply): they are exactly what clients receive. */
+	get entries() {
+		return this.#state.current.ordered;
+	}
+	/**
+	* Scans the storage again and swaps the new catalog in at once. All or
+	* nothing: on failure the old catalog keeps serving. Overlapping calls run
+	* one after another.
+	*
+	* When skills are added or removed, or a `SKILL.md`'s name or description
+	* changes, the result has `listChanged: true` and `resources/list_changed`
+	* goes out through every attached server that is still connected (stdio,
+	* stateful 2025-11-25 HTTP sessions). Servers that `createMcpHandler` builds per
+	* request are closed by then, so publish the change on the handler:
+	* `if (changes.listChanged) handler.notify.resourcesChanged()`. Where the
+	* runtime has no `WeakRef` (Cloudflare Workers with a compatibility date
+	* before 2025-05-05), attached servers are not tracked and nothing is sent.
+	*/
+	reload() {
+		const run = this.#queue.then(() => this.#reloadNow());
+		this.#queue = run.then(() => {}, () => {});
+		return run;
+	}
+	#track(mcp) {
+		if (typeof WeakRef !== "function") return;
+		if (this.#servers.size >= this.#pruneAt) {
+			for (const reference of this.#servers) if (reference.deref() === void 0) this.#servers.delete(reference);
+			this.#pruneAt = Math.max(PRUNE_THRESHOLD, 2 * this.#servers.size);
+		}
+		this.#servers.add(new WeakRef(mcp));
+	}
+	async #reloadNow() {
+		const previous = this.#state.current;
+		const next = await buildCatalogSnapshot(this.#files, this.#build);
+		this.#state.current = next;
+		const listChanged = listingKey(previous) !== listingKey(next);
+		if (listChanged) this.#notify();
+		return {
+			...diffSnapshots(previous, next),
+			listChanged
+		};
+	}
+	#notify() {
+		for (const reference of this.#servers) {
+			const mcp = reference.deref();
+			if (mcp === void 0) {
+				this.#servers.delete(reference);
+				continue;
+			}
+			if (!mcp.isConnected()) continue;
+			const sessionId = mcp.server.transport?.sessionId;
+			try {
+				Promise.resolve(mcp.server.sendResourceListChanged()).catch((error) => this.#notifyFailed(sessionId, error));
+			} catch (error) {
+				this.#notifyFailed(sessionId, error);
+			}
+		}
+	}
+	#notifyFailed(sessionId, error) {
+		const to = sessionId === void 0 ? "" : ` to session ${sessionId}`;
+		const reason = error instanceof Error ? error.message : String(error);
+		try {
+			this.#build.warn({
+				path: "resources/list_changed",
+				message: `could not be sent${to}: ${reason}`
+			});
+		} catch {}
+	}
+};
+//#endregion
+//#region node_modules/.pnpm/@modelcontextprotocol+server@2.4.0/node_modules/@modelcontextprotocol/server/dist/ext/skills/index.mjs
+/**
+* Builds a valid entry — digests, sizes, frontmatter, rule checks — from one
+* skill's files. Keys are paths under the skill's folder (`SKILL.md`,
+* `references/GUIDE.md`). For `SkillSource` authors who publish digests.
+*/
+async function skillEntry(skillPath, files, options = {}) {
+	const segments = splitRelativePath(skillPath, "skillPath");
+	const baseUri = options.baseUri ?? "skill://";
+	const inputs = Object.entries(files).map(([path, content]) => ({
+		uri: joinUri(baseUri, [...segments, ...splitRelativePath(path, "file path")]),
+		bytes: typeof content === "string" ? encodeUtf8(content) : content
+	}));
+	const { skill, problems } = await buildSkillEntry(joinUri(baseUri, [...segments, "SKILL.md"]), inputs);
+	if (skill === void 0 || problems.length > 0) throw new SkillCatalogError(problems.map((message) => ({
+		path: skillPath,
+		message
+	})));
+	return skill;
+}
+//#endregion
+//#region src/customization/model.ts
+/** `global` reaches every session; a namespace's own reaches the sessions that expose it. */
+const INSTRUCTION_SCOPES = ["global", ...Namespace.options];
+/** Per scope, and for all scopes together: what one session can receive at most. */
+const INSTRUCTION_MAX_CHARS = 4e3;
+const INSTRUCTIONS_TOTAL_MAX_CHARS = 12e3;
+const PROMPT_MAX_CHARS = 32e3;
+const SKILL_FILE_MAX_CHARS = 64e3;
+const SKILL_MAX_FILES = 32;
+const SKILL_TOTAL_MAX_CHARS = 256e3;
+const NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const NAME_MAX = 64;
+const PATH_SEGMENT = /^[A-Za-z0-9_][A-Za-z0-9._-]*$/;
+const PATH_MAX_DEPTH = 4;
+const SKILL_ENTRY_FILE = "SKILL.md";
+const FRONTMATTER = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/;
+const SINGLE_QUOTED = /^'(.*)'$/;
+const LINE_BREAK = /\r?\n/;
+const unquote = (value) => {
+	if (value.startsWith("\"")) try {
+		return JSON.parse(value);
+	} catch {
+		return value;
+	}
+	const single = SINGLE_QUOTED.exec(value);
+	return single ? (single[1] ?? "").replaceAll("''", "'") : value;
+};
+/**
+* The `key: value` lines of a leading `---` block and the body after it. Only
+* single-line values: a YAML block scalar reads as its indicator, and a skill
+* using one is refused at write time rather than served half-parsed.
+*/
+const parseFrontmatter = (text) => {
+	const match = FRONTMATTER.exec(text);
+	if (!match) return {
+		fields: /* @__PURE__ */ new Map(),
+		body: text
+	};
+	const fields = /* @__PURE__ */ new Map();
+	for (const line of (match[1] ?? "").split(LINE_BREAK)) {
+		const colon = line.indexOf(":");
+		if (colon <= 0 || line.startsWith(" ")) continue;
+		const value = line.slice(colon + 1).trim();
+		fields.set(line.slice(0, colon).trim(), unquote(value));
+	}
+	return {
+		fields,
+		body: text.slice(match[0].length)
+	};
+};
+const yamlValue = (value) => JSON.stringify(value);
+const isScope = (value) => INSTRUCTION_SCOPES.includes(value);
+const MARKDOWN = ".md";
+/** The scope a top-level `instructions/<scope>.md` holds, if it is one. */
+const instructionScopeOf = (name) => {
+	const scope = name.endsWith(MARKDOWN) ? name.slice(0, -3) : "";
+	return isScope(scope) ? scope : void 0;
+};
+const parsePrompt = (name, text, author) => {
+	const promptName = name.endsWith(MARKDOWN) ? name.slice(0, -3) : "";
+	const { fields, body } = parseFrontmatter(text);
+	const description = fields.get("description");
+	if (!(NAME.test(promptName) && description)) return void 0;
+	return {
+		name: promptName,
+		title: fields.get("title"),
+		description,
+		text: body.trim(),
+		author
+	};
+};
+/** Turns the stored tree into entries; anything unexpected is listed, not served. */
+const parseCustomizations = (tree) => {
+	const instructions = /* @__PURE__ */ new Map();
+	const prompts = /* @__PURE__ */ new Map();
+	const skillFiles = /* @__PURE__ */ new Map();
+	const ignored = [];
+	const takers = {
+		instructions: (name, rest, text, author) => {
+			const scope = rest.length === 0 ? instructionScopeOf(name) : void 0;
+			if (!scope || text.trim() === "") return false;
+			instructions.set(scope, {
+				scope,
+				text: text.trim(),
+				author
+			});
+			return true;
+		},
+		prompts: (name, rest, text, author) => {
+			const prompt = rest.length === 0 ? parsePrompt(name, text, author) : void 0;
+			if (!prompt) return false;
+			prompts.set(prompt.name, prompt);
+			return true;
+		},
+		skills: (name, rest, text) => {
+			if (!NAME.test(name) || rest.length === 0) return false;
+			const files = skillFiles.get(name) ?? /* @__PURE__ */ new Map();
+			files.set(rest.join("/"), text);
+			skillFiles.set(name, files);
+			return true;
+		}
+	};
+	for (const [path, text] of tree.files) {
+		const [kind = "", name = "", ...rest] = path.split("/");
+		if (!(Object.hasOwn(takers, kind) && takers[kind]?.(name, rest, text, tree.authors.get(path)))) ignored.push(path);
+	}
+	const skills = /* @__PURE__ */ new Map();
+	for (const [name, files] of skillFiles) {
+		const entry = files.get(SKILL_ENTRY_FILE);
+		const description = entry ? parseFrontmatter(entry).fields.get("description") : void 0;
+		if (!description || prompts.has(name)) {
+			ignored.push(...[...files.keys()].map((file) => `skills/${name}/${file}`));
+			continue;
+		}
+		skills.set(name, {
+			name,
+			description,
+			files,
+			author: tree.authors.get(`skills/${name}/${SKILL_ENTRY_FILE}`)
+		});
+	}
+	return {
+		instructions,
+		prompts,
+		skills,
+		ignored
+	};
+};
+const isCustomizationError = (err) => err instanceof Error && err.name === "CustomizationError";
+/** A refused edit names the rule it breaks, so the model can fix the call. */
+const customizationError = (message) => Object.assign(new Error(message), { name: "CustomizationError" });
+const fail = (message) => {
+	throw customizationError(message);
+};
+const checkName = (name, what) => {
+	if (name.length > NAME_MAX || !NAME.test(name)) fail(`Invalid ${what} name "${name}": use lowercase letters, digits and single hyphens (e.g. draft-reply), at most ${NAME_MAX} characters.`);
+};
+const checkLength = (text, max, what) => {
+	if (text.length > max) fail(`${what} is ${text.length} characters long; the limit is ${max}.`);
+};
+const checkSkillPath = (path) => {
+	const segments = path.split("/");
+	if (segments.length > PATH_MAX_DEPTH || !segments.every((s) => PATH_SEGMENT.test(s))) fail(`Invalid skill file path "${path}": use relative, /-separated names of letters, digits, dots, hyphens and underscores (e.g. references/lexicon.md), at most ${PATH_MAX_DEPTH} levels deep.`);
+};
+const instructionsTotal = (current, scope, text) => [...current.instructions.values()].filter((entry) => entry.scope !== scope).reduce((sum, entry) => sum + entry.text.length, text.length);
+const planInstructions = (current, scope, text) => {
+	const path = `instructions/${scope}.md`;
+	if (text === null) {
+		if (!current.instructions.has(scope)) fail(`No instructions are set for "${scope}".`);
+		return [{
+			path,
+			content: null
+		}];
+	}
+	const trimmed = text.trim();
+	if (trimmed === "") fail("The instructions are empty; delete them instead.");
+	checkLength(trimmed, INSTRUCTION_MAX_CHARS, `The "${scope}" instructions`);
+	const total = instructionsTotal(current, scope, trimmed);
+	if (total > 12e3) fail(`All instructions together would be ${total} characters long; the limit is ${INSTRUCTIONS_TOTAL_MAX_CHARS}, since every session receives them. Shorten them, or move reference material into a skill.`);
+	return [{
+		path,
+		content: `${trimmed}\n`
+	}];
+};
+const planPrompt = (current, name, prompt) => {
+	checkName(name, "prompt");
+	const path = `prompts/${name}.md`;
+	if (prompt === null) {
+		if (!current.prompts.has(name)) fail(`No prompt is named "${name}".`);
+		return [{
+			path,
+			content: null
+		}];
+	}
+	if (current.skills.has(name)) fail(`A skill is already named "${name}", and every skill is served as a prompt of its name.`);
+	const description = prompt.description.trim();
+	const text = prompt.text.trim();
+	if (description === "" || description.includes("\n")) fail("A prompt needs a one-line description: it is what clients show in their prompt menu.");
+	if (text === "") fail("The prompt text is empty.");
+	checkLength(text, PROMPT_MAX_CHARS, "The prompt text");
+	const title = prompt.title?.trim();
+	return [{
+		path,
+		content: `---\n${[...title ? [`title: ${yamlValue(title)}`] : [], `description: ${yamlValue(description)}`].join("\n")}\n---\n\n${text}\n`
+	}];
+};
+const checkSkillEntry = (name, text) => {
+	const { fields, body } = parseFrontmatter(text);
+	if (fields.get("name") !== name) fail(`SKILL.md must start with a frontmatter block whose name is "${name}" (---, name: ${name}, description: ..., ---).`);
+	const description = fields.get("description") ?? "";
+	if (description === "" || [
+		">",
+		"|",
+		">-",
+		"|-"
+	].includes(description)) fail("SKILL.md needs a one-line description in its frontmatter: it decides when a client loads the skill.");
+	if (body.trim() === "") fail("SKILL.md has no instructions after its frontmatter.");
+};
+const planSkill = (current, name, path, text) => {
+	checkName(name, "skill");
+	const skill = current.skills.get(name);
+	const file = path ?? "SKILL.md";
+	checkSkillPath(file);
+	if (text === null) {
+		if (!skill) fail(`No skill is named "${name}".`);
+		if (file === "SKILL.md") return [...skill?.files.keys() ?? []].map((f) => ({
+			path: `skills/${name}/${f}`,
+			content: null
+		}));
+		if (!skill?.files.has(file)) fail(`The skill "${name}" has no file "${file}".`);
+		return [{
+			path: `skills/${name}/${file}`,
+			content: null
+		}];
+	}
+	if (current.prompts.has(name)) fail(`A prompt is already named "${name}", and every skill is also served as a prompt of its name.`);
+	if (file === "SKILL.md") checkSkillEntry(name, text);
+	else if (!skill) fail(`Create the skill's ${SKILL_ENTRY_FILE} first, then add "${file}".`);
+	checkLength(text, SKILL_FILE_MAX_CHARS, `The file "${file}"`);
+	const files = new Map(skill?.files ?? []);
+	files.set(file, text);
+	if (files.size > 32) fail(`A skill holds at most 32 files.`);
+	const total = [...files.values()].reduce((sum, f) => sum + f.length, 0);
+	if (total > 256e3) fail(`The skill would hold ${total} characters; the limit is ${SKILL_TOTAL_MAX_CHARS}.`);
+	return [{
+		path: `skills/${name}/${file}`,
+		content: text
+	}];
+};
+/** The file changes an edit makes, or a `CustomizationError` naming the rule it breaks. */
+const planEdit = (current, edit) => {
+	if (edit.kind === "instructions") return planInstructions(current, edit.scope, edit.text);
+	if (edit.kind === "prompt") return planPrompt(current, edit.name, edit.prompt);
+	return planSkill(current, edit.name, edit.path, edit.text);
+};
+//#endregion
+//#region src/customization/serve.ts
+/** How much of a skill a derived prompt carries; the rest stays readable as the skill. */
+const DERIVED_PROMPT_MAX_CHARS = 16e3;
+const SCOPE_HEADINGS = {
+	tickets: "For tickets",
+	help_center: "For the Help Center",
+	users: "For users and organizations",
+	requests: "For customers' requests",
+	preferences: "For connector preferences"
+};
+/**
+* The admins' instructions a session with `config`'s namespaces receives: the
+* global ones, then each active namespace's, or `undefined` when none apply.
+*/
+const buildCustomInstructions = (state, config) => {
+	const blocks = [];
+	const global = state.instructions.get("global");
+	if (global) blocks.push(global.text);
+	for (const namespace of config.namespaces) {
+		const entry = state.instructions.get(namespace);
+		if (entry) blocks.push(`${SCOPE_HEADINGS[namespace]}:\n${entry.text}`);
+	}
+	if (blocks.length === 0) return void 0;
+	return ["Your team's own instructions, set by its Zendesk admins:", ...blocks].join("\n\n");
+};
+/** Where a client supporting the Skills extension reads the skill. */
+const skillUri = (name, file = SKILL_ENTRY_FILE) => `skill://${name}/${file}`;
+/**
+* A skill as a prompt, for clients without the Skills extension. The header is
+* the server's, added on read: it sends a client that has the skill back to it,
+* and tells the others what the conversion dropped.
+*/
+const derivedPromptText = (skill) => {
+	const entry = skill.files.get("SKILL.md") ?? "";
+	const body = parseFrontmatter(entry).body.trim();
+	const truncated = body.length > DERIVED_PROMPT_MAX_CHARS;
+	const others = [...skill.files.keys()].filter((file) => file !== SKILL_ENTRY_FILE).sort(compareCodeUnits);
+	return [
+		`[Note from the MCP server] This prompt is the skill "${skill.name}" (${skillUri(skill.name)}) converted for clients that do not support MCP skills.`,
+		`If "${skill.name}" is among the skills available to you, stop reading this prompt: load that skill and follow it instead.`,
+		"Otherwise follow the instructions below, knowing the conversion is lossy: the skill's other files are not included and its scripts cannot run here. If something below does not work as it says, that is a limit of this conversion, not a mistake on your side.",
+		"",
+		"---",
+		"",
+		truncated ? `${body.slice(0, DERIVED_PROMPT_MAX_CHARS)}\n\n[Truncated by the MCP server: the full text is ${skillUri(skill.name)}.]` : body,
+		...others.length > 0 ? [
+			"",
+			"---",
+			"",
+			"Files of this skill not included here (MCP resources, if your client can read them):",
+			...others.map((file) => `- ${skillUri(skill.name, file)}`)
+		] : []
+	].join("\n");
+};
+const userMessage = (text) => ({ messages: [{
+	role: "user",
+	content: {
+		type: "text",
+		text
+	}
+}] });
+/** The prompts of `state`: the admins' own, then one per skill. Returns the removers. */
+const registerPrompts = (server, state) => {
+	return [...[...state.prompts.values()].map((prompt) => server.registerPrompt(prompt.name, {
+		...prompt.title ? { title: prompt.title } : {},
+		description: prompt.description
+	}, () => userMessage(prompt.text))), ...[...state.skills.values()].map((skill) => server.registerPrompt(skill.name, { description: `${skill.description} (The skill "${skill.name}" as a prompt: use the skill itself when your client supports MCP skills.)` }, () => userMessage(derivedPromptText(skill))))].map((handle) => () => handle.remove());
+};
+/**
+* Serves the customizations on one `/mcp` server: its prompts and the skills.
+* `live` for a server that outlives an edit (a 2025 session): its prompts are
+* swapped in place, which notifies the client; per-request servers are rebuilt.
+*/
+const serveCustomizations = (server, service, { live }) => {
+	if (service.current().skills.size > 0) service.skills.attach(server);
+	server.registerPrompt("customizations-placeholder", {}, () => userMessage("")).remove();
+	let removers = registerPrompts(server, service.current());
+	if (!live) return;
+	const unsubscribe = service.onChange(() => {
+		for (const remove of removers) remove();
+		removers = registerPrompts(server, service.current());
+	});
+	const previous = server.server.onclose;
+	server.server.onclose = () => {
+		unsubscribe();
+		previous?.();
+	};
+};
+//#endregion
+//#region src/customization/setup.ts
+/**
+* The `setup` guide served on `/mcp/admin`, as a prompt and as a skill. Its
+* main use is the first configuration; the same steps serve a later revision.
+*/
+const SETUP_NAME = "setup";
+const SETUP_DESCRIPTION = "Set up or revise what this Zendesk MCP server teaches every user's assistant: team instructions, prompts and skills. Use when a Zendesk admin wants to configure, review or change them.";
+const SETUP_BODY = `# Set up the assistant for your team
+
+You are helping a Zendesk administrator configure what this MCP server distributes to every user's AI assistant, with the manage_customizations tool.
+
+## 1. Start from what already exists
+
+Before proposing anything:
+
+1. Call manage_customizations with action "list". It shows the built-in context the server already sends on its own, and the customizations already configured.
+2. Read the built-in context: action "get", kind "built_in", name "instructions" (what every session already receives), then name "topology" (the Help Center structure: locales, categories and sections with ids, segments, permission groups).
+3. Summarize both for the admin in a few lines, then ask what they want their team's assistants to do differently.
+
+## 2. Pick the right kind for each need
+
+- Instructions: short, always-on rules every session receives (tone, vocabulary, what never to do). Every session pays for them in context, so keep them to a few lines per scope. Scope "global" reaches every session; a namespace scope (tickets, help_center, users, requests, preferences) reaches only the sessions that expose it.
+- Prompt: a workflow a user starts on purpose from their client's prompt menu (draft a reply in our style, triage a ticket). It costs nothing until used.
+- Skill: reference material or a procedure the assistant loads by itself when a task matches its description (style guide, lexicon, translation workflow). Write that description so it says when to use the skill.
+
+Ask the admin about their team's practices. Never invent rules on their behalf.
+
+## 3. Never duplicate what is built in
+
+Before each set, compare the text with the built-in context you read in step 1. The server already tells every assistant which Help Center it is connected to, its locales, its category and section tree with ids, its segments and permission groups, the user's role, and the SLA alert thresholds. If the admin asks to add any of these (the Help Center URL, the languages, the list of sections...), tell them it is already provided, say where it comes from, and do not write it.
+
+Also compare new content with the existing customizations, so that two entries never repeat or contradict each other.
+
+## 4. Mind the clients that do not support skills
+
+Many MCP clients do not support MCP skills yet. For them the server also serves every skill as a prompt of the same name, but the conversion is lossy: the prompt carries SKILL.md only, truncated when long; the skill's other files are listed but not included, and scripts cannot run. So:
+
+- put everything essential in SKILL.md itself;
+- avoid skills that depend on running code;
+- warn the admin when a skill they want relies on extra files or code.
+
+## 5. Write, then check
+
+- Show the admin the exact text before each set, and write it only once they agree.
+- After setting instructions, the tool returns everything a new session receives. Re-read it for repetitions and contradictions with the built-in part.
+- Instructions reach new sessions only. Prompts and skills reach open sessions on clients that refresh their lists.
+- Names use lowercase letters, digits and hyphens. A skill's SKILL.md starts with a frontmatter block holding its name and a one-line description.
+`;
+const SETUP_SKILL = `---
+name: ${SETUP_NAME}
+description: ${JSON.stringify(SETUP_DESCRIPTION)}
+---
+
+${SETUP_BODY}`;
+//#endregion
+//#region src/customization/admin.ts
+const ADMIN_ONLY = "This back-office is reserved for Zendesk administrators: your Zendesk role is not admin.";
+/**
+* The caller, re-read from Zendesk on every call: a token minted for an admin
+* stays valid up to an hour after a demotion, this check does not.
+*/
+const requireAdmin = async (subdomain, getToken) => {
+	const { user } = await zendeskGet(subdomain, await getToken(), "/users/me");
+	if (user.role !== "admin") throw new Error(ADMIN_ONLY);
+	return {
+		id: user.id,
+		name: user.name ?? `user ${user.id}`
+	};
+};
+const text = (value) => ({ content: [{
+	type: "text",
+	text: value
+}] });
+const describeAuthor = (author) => author ? `, last changed by ${author.name} on ${author.at.slice(0, 10)}` : "";
+/** What a new `/mcp` session receives as `instructions`, built-in part first. */
+const effectiveInstructions = (config, state) => [buildInstructions(config), buildCustomInstructions(state, config)].filter((block) => block !== void 0).join("\n\n") || "(none)";
+const listCustomizations = (env) => {
+	const state = env.service.current();
+	return [
+		"## Built in (read only, sent by the server on its own)",
+		"- instructions: what every session already receives. Read it with action \"get\", kind \"built_in\", name \"instructions\".",
+		"- topology: the Help Center structure (locales, categories and sections with ids, segments, permission groups, the caller's role), served to every session as a resource. Read it with kind \"built_in\", name \"topology\".",
+		"",
+		"## Instructions",
+		...state.instructions.size === 0 ? ["(none)"] : [...state.instructions.values()].map((entry) => `- ${entry.scope}: ${entry.text.length} characters${describeAuthor(entry.author)}`),
+		"",
+		"## Prompts",
+		...state.prompts.size === 0 ? ["(none)"] : [...state.prompts.values()].map((prompt) => `- ${prompt.name}: ${prompt.description}${describeAuthor(prompt.author)}`),
+		"",
+		"## Skills",
+		...state.skills.size === 0 ? ["(none)"] : [...state.skills.values()].map((skill) => `- ${skill.name}: ${skill.description} (files: ${sorted(skill.files)})${describeAuthor(skill.author)}`),
+		"",
+		`Limits: ${INSTRUCTION_MAX_CHARS} characters per instructions scope and ${INSTRUCTIONS_TOTAL_MAX_CHARS} for all of them; ${PROMPT_MAX_CHARS} per prompt; a skill's derived prompt carries the first ${DERIVED_PROMPT_MAX_CHARS} characters of its SKILL.md.`
+	].join("\n");
+};
+const ACTIONS = [
+	"list",
+	"get",
+	"set",
+	"delete"
+];
+const KINDS = [
+	"instructions",
+	"prompt",
+	"skill",
+	"built_in"
+];
+const BUILT_IN = ["instructions", "topology"];
+const inputSchema = object({
+	action: _enum(ACTIONS).describe("list: everything configured plus the built-in context; get: read one entry; set: create or replace one entry; delete: remove one entry."),
+	kind: _enum(KINDS).optional().describe("What the entry is: instructions (always-on text every matching session receives), prompt (a workflow users start from their prompt menu), skill (a SKILL.md, plus optional files, the assistant loads when a task matches), or built_in (what the server already sends, read only). Required except for list."),
+	name: string().optional().describe(`Which entry. For instructions, the scope: ${INSTRUCTION_SCOPES.join(", ")} (global reaches every session, a namespace only sessions exposing it). For prompts and skills, a lowercase-hyphenated name such as draft-reply, shared by both kinds. For built_in: instructions or topology. Required except for list.`),
+	path: string().optional().describe(`Skills only: the file inside the skill, such as references/lexicon.md. Defaults to ${SKILL_ENTRY_FILE}; deleting ${SKILL_ENTRY_FILE} (or giving no path) deletes the whole skill.`),
+	content: string().optional().describe(`For set: the full new text, replacing the old one. Instructions and prompts are plain Markdown; a skill's ${SKILL_ENTRY_FILE} starts with a YAML frontmatter block holding name (the skill name) and a one-line description (quoted if it contains ": ").`),
+	description: string().optional().describe("For set on a prompt: the one-line description clients show in their prompt menu. Required there."),
+	title: string().optional().describe("For set on a prompt: an optional human-readable title shown instead of the name.")
+});
+const required = (value, what) => {
+	if (value === void 0 || value === "") throw customizationError(`${what} is required here.`);
+	return value;
+};
+const asScope = (name) => {
+	if (!INSTRUCTION_SCOPES.includes(name)) throw customizationError(`Unknown instructions scope "${name}": use one of ${INSTRUCTION_SCOPES.join(", ")}.`);
+	return name;
+};
+const sorted = (files) => [...files.keys()].sort(compareCodeUnits).join(", ");
+const READERS = {
+	built_in: (env, name, _params, topology) => {
+		if (name === "instructions") return buildInstructions(env.config) ?? "(none)";
+		if (name === "topology") return topology().read();
+		throw customizationError(`Unknown built-in "${name}": use ${BUILT_IN.join(" or ")}.`);
+	},
+	instructions: (env, name) => env.service.current().instructions.get(asScope(name))?.text ?? `No instructions are set for "${name}".`,
+	prompt: (env, name) => {
+		const prompt = env.service.current().prompts.get(name);
+		if (!prompt) return `No prompt is named "${name}".`;
+		return [
+			...prompt.title ? [`Title: ${prompt.title}`] : [],
+			`Description: ${prompt.description}`,
+			"",
+			prompt.text
+		].join("\n");
+	},
+	skill: (env, name, params) => {
+		const skill = env.service.current().skills.get(name);
+		if (!skill) return `No skill is named "${name}".`;
+		const path = params.path ?? "SKILL.md";
+		const file = skill.files.get(path);
+		if (file === void 0) return `The skill "${name}" has no file "${path}".`;
+		return `Files: ${sorted(skill.files)}\nURI: ${skillUri(name, path)}\n\n${file}`;
+	}
+};
+const getEntry = (env, params, topology) => READERS[required(params.kind, "kind")](env, required(params.name, "name"), params, topology);
+const EDITS = {
+	instructions: (name, content) => ({
+		kind: "instructions",
+		scope: asScope(name),
+		text: content
+	}),
+	prompt: (name, content, params) => ({
+		kind: "prompt",
+		name,
+		prompt: content === null ? null : {
+			description: required(params.description, "description"),
+			text: content,
+			...params.title === void 0 ? {} : { title: params.title }
+		}
+	}),
+	skill: (name, content, params) => ({
+		kind: "skill",
+		name,
+		...params.path === void 0 ? {} : { path: params.path },
+		text: content
+	}),
+	built_in: () => {
+		throw customizationError("The built-in context is read only: it comes from the server and Zendesk.");
+	}
+};
+const toEdit = (params, deleting) => EDITS[required(params.kind, "kind")](required(params.name, "name"), deleting ? null : required(params.content, "content"), params);
+const confirm = (env, params, deleting, state) => {
+	const done = deleting ? "Deleted" : "Saved";
+	const what = `${params.kind} "${params.name}"${params.path ? ` (${params.path})` : ""}`;
+	if (params.kind === "instructions") return `${done} ${what}. A new session on /mcp now receives these instructions (the built-in part first); check them for repetitions and contradictions:\n\n${effectiveInstructions(env.config, state)}`;
+	const name = params.name ?? "";
+	if (params.kind === "skill" && state.skills.has(name)) return `${done} ${what}. Clients supporting MCP skills get it as ${skillUri(name)}; the others get the prompt "${name}", carrying ${SKILL_ENTRY_FILE} only.`;
+	if (deleting) return `${done} ${what}. It leaves the prompt menu of clients that refresh their prompt list.`;
+	return `${done} ${what}. It appears in the prompt menu of clients that refresh their prompt list.`;
+};
+const createAdminTools = (env) => {
+	const topologyFor = (caller) => () => createTopologyProvider(caller.getToken, env.config.subdomain, void 0, env.config.brandIds);
+	return [{
+		name: "manage_customizations",
+		readOnly: false,
+		title: "Manage Team Customizations",
+		description: "Read and change what this MCP server teaches every user's assistant on /mcp: instructions (always-on text), prompts (workflows users start from their prompt menu) and skills (SKILL.md files the assistant loads when a task matches). list shows them all with who changed each, plus the built-in context the server already sends; get reads one entry, or the built-in instructions and Help Center topology; set creates or replaces an entry; delete removes one. Writes go to this server's store, never to Zendesk. Reserved for Zendesk admins, checked on every call. Before setting anything, read the built-in context and do not repeat it; the setup prompt walks through the whole configuration.",
+		inputSchema,
+		annotations: {
+			readOnlyHint: false,
+			destructiveHint: true,
+			idempotentHint: true,
+			openWorldHint: false
+		},
+		handler: async (raw, caller) => {
+			const params = raw;
+			const admin = await requireAdmin(env.config.subdomain, caller.getToken);
+			try {
+				if (params.action === "list") return text(listCustomizations(env));
+				if (params.action === "get") return text(await getEntry(env, params, topologyFor(caller)));
+				const deleting = params.action === "delete";
+				const state = await env.service.edit(toEdit(params, deleting), {
+					name: `${admin.name} (Zendesk user ${admin.id})`,
+					at: (/* @__PURE__ */ new Date()).toISOString()
+				});
+				return text(confirm(env, params, deleting, state));
+			} catch (err) {
+				if (isCustomizationError(err)) throw new Error(`${err.message} Nothing was changed.`, { cause: err });
+				throw err;
+			}
+		}
+	}];
+};
+const ADMIN_INSTRUCTIONS = `This is the back-office of the Zendesk MCP server, reserved for Zendesk admins. It configures what the server teaches every user's assistant on its main endpoint: instructions, prompts and skills. Start with the "${SETUP_NAME}" prompt, or the skill of the same name: it reads what already exists and guides each change.`;
+/** The `setup` guide as a skill, the same for every admin: built once per process. */
+let setupSkills;
+const loadSetupSkill = () => {
+	setupSkills ??= SkillCatalog.load(memorySkillFiles({ [`${SETUP_NAME}/${SKILL_ENTRY_FILE}`]: SETUP_SKILL }));
+	return setupSkills;
+};
+/** One `/mcp/admin` server: the admin tools, the `setup` prompt and skill, nothing of Zendesk's. */
+const createAdminServer = ({ readOnly, tools, setupSkill, caller, requestStateCodec, onUnauthorized }) => {
+	const pkg = readPackageInfo();
+	const server = new McpServer({
+		name: pkg.name,
+		version: pkg.version
+	}, {
+		instructions: ADMIN_INSTRUCTIONS,
+		requestState: { verify: (state, ctx) => requestStateCodec.verify(state, ctx) }
+	});
+	for (const tool of tools.filter((t) => t.readOnly || !readOnly)) server.registerTool(tool.name, {
+		title: tool.title,
+		description: tool.description,
+		inputSchema: toStrictStandardSchema(tool.inputSchema),
+		annotations: tool.annotations
+	}, async (params) => {
+		try {
+			return await tool.handler(params, caller);
+		} catch (err) {
+			if (err instanceof ZendeskApiError && err.status === 401) onUnauthorized?.();
+			throw err;
+		}
+	});
+	server.registerPrompt(SETUP_NAME, {
+		title: "Set up the team assistant",
+		description: SETUP_DESCRIPTION
+	}, () => ({ messages: [{
+		role: "user",
+		content: {
+			type: "text",
+			text: SETUP_BODY
+		}
+	}] }));
+	setupSkill.attach(server);
+	return server;
+};
+//#endregion
+//#region src/customization/backend.ts
+const AUTHORS_FILE = ".authors.json";
+const TEMP_FILE = /\.[0-9a-f-]{36}\.tmp$/;
+/** Nothing on disk: tests, and `memory://` deployments that accept losing it on restart. */
+const createMemoryBackend = (seed = {}) => {
+	const files = new Map(Object.entries(seed));
+	const authors = /* @__PURE__ */ new Map();
+	return {
+		load: async () => ({
+			files: new Map(files),
+			authors: new Map(authors)
+		}),
+		apply: async (changes, author) => {
+			for (const { path, content } of changes) if (content === null) {
+				files.delete(path);
+				authors.delete(path);
+			} else {
+				files.set(path, content);
+				authors.set(path, author);
+			}
+		}
+	};
+};
+const listFiles = async (root, dir = "") => {
+	const entries = await readdir(join(root, dir), { withFileTypes: true }).catch((err) => {
+		if (err.code === "ENOENT") return [];
+		throw err;
+	});
+	return (await Promise.all(entries.map(async (entry) => {
+		const path = dir === "" ? entry.name : `${dir}/${entry.name}`;
+		if (entry.isDirectory()) return listFiles(root, path);
+		return entry.isFile() && !TEMP_FILE.test(entry.name) && path !== AUTHORS_FILE ? [path] : [];
+	}))).flat();
+};
+const writeAtomic = async (path, text) => {
+	await mkdir(dirname(path), {
+		recursive: true,
+		mode: 448
+	});
+	const temp = `${path}.${randomUUID()}.tmp`;
+	await writeFile(temp, text, { mode: 384 });
+	await rename(temp, path);
+};
+/**
+* One Markdown file per entry under `root`, readable and versionable as is; the
+* authors live beside them in `.authors.json`. Each file is replaced by a
+* rename, so a reader never sees half of one.
+*/
+const createFileBackend = (dir) => {
+	const root = resolve(dir);
+	const authorsPath = join(root, AUTHORS_FILE);
+	const readAuthors = async () => {
+		try {
+			return JSON.parse(await readFile(authorsPath, "utf8"));
+		} catch {
+			return {};
+		}
+	};
+	const resolvePath = (path) => join(root, ...path.split("/"));
+	return {
+		load: async () => {
+			const paths = await listFiles(root);
+			return {
+				files: new Map(await Promise.all(paths.map(async (path) => [path, await readFile(resolvePath(path), "utf8")]))),
+				authors: new Map(Object.entries(await readAuthors()))
+			};
+		},
+		apply: async (changes, author) => {
+			const authors = await readAuthors();
+			for (const { path, content } of changes) {
+				const target = resolvePath(path);
+				if (!target.startsWith(`${root}${sep}`)) throw new Error(`Invalid path: ${path}`);
+				if (content === null) {
+					await rm(target, { force: true });
+					delete authors[path];
+				} else {
+					await writeAtomic(target, content);
+					authors[path] = author;
+				}
+			}
+			await writeAtomic(authorsPath, `${JSON.stringify(authors, null, 2)}\n`);
+		}
+	};
+};
+/** `file://<dir>` or `memory://`, as `CUSTOMIZATION_STORE` names it. */
+const openCustomizationBackend = (uri) => {
+	const url = new URL(uri);
+	if (url.protocol === "memory:") return createMemoryBackend();
+	if (url.protocol === "file:") return createFileBackend(fileURLToPath(url));
+	throw new Error(`Unsupported CUSTOMIZATION_STORE "${url.protocol}//": use file://<directory> or memory://.`);
+};
+//#endregion
+//#region src/customization/service.ts
+const encoder = new TextEncoder();
+/**
+* The skills of `state()` as the SDK's storage adapter sees them: one folder
+* per skill at the root. Read live, so `catalog.reload()` picks up an edit.
+*/
+const skillFiles = (state) => {
+	const paths = () => [...state().skills.values()].flatMap((skill) => [...skill.files.keys()].map((file) => `${skill.name}/${file}`));
+	return {
+		list: async (dir) => {
+			const prefix = dir === "" ? "" : `${dir}/`;
+			const children = /* @__PURE__ */ new Map();
+			for (const path of paths()) {
+				if (!path.startsWith(prefix)) continue;
+				const [name = "", ...rest] = path.slice(prefix.length).split("/");
+				children.set(name, rest.length > 0 ? "directory" : "file");
+			}
+			return [...children].map(([name, kind]) => ({
+				name,
+				kind
+			}));
+		},
+		read: async (path) => {
+			const [name = "", ...rest] = path.split("/");
+			const text = state().skills.get(name)?.files.get(rest.join("/"));
+			if (text === void 0) throw new Error(`No skill file at ${path}`);
+			return encoder.encode(text);
+		}
+	};
+};
+/**
+* The skill as it would be after `changes`, checked by the SDK the way the
+* catalog will read it (YAML frontmatter, name matching the folder): a skill
+* it would skip is refused now, with its reason, rather than silently dropped.
+*/
+const checkSkill = async (state, name, changes) => {
+	const files = new Map(state.skills.get(name)?.files ?? []);
+	for (const { path, content } of changes) {
+		const file = path.slice(`skills/${name}/`.length);
+		if (content === null) files.delete(file);
+		else files.set(file, content);
+	}
+	try {
+		await skillEntry(name, Object.fromEntries(files));
+	} catch (err) {
+		const reason = err instanceof Error ? err.message : String(err);
+		throw customizationError(`The skill would not be served: ${reason} (${SKILL_ENTRY_FILE} frontmatter is YAML: quote a value holding ": ").`);
+	}
+};
+const createCustomizationService = async (backend, logger = silentLogger) => {
+	const load = async () => {
+		const state = parseCustomizations(await backend.load());
+		if (state.ignored.length > 0) logger.warn("customizations_ignored", {
+			files: state.ignored,
+			hint: "Files the customization store holds but serves nothing for: a malformed entry, or a file placed by hand."
+		});
+		return state;
+	};
+	let state = await load();
+	const listeners = /* @__PURE__ */ new Set();
+	const skills = await SkillCatalog.load(skillFiles(() => state), { onWarning: (warning) => {
+		if (state.skills.size > 0) logger.warn("customization_skill_skipped", { ...warning });
+	} });
+	let queue = Promise.resolve();
+	const apply = async (edit, author) => {
+		const changes = planEdit(state, edit);
+		if (edit.kind === "skill" && edit.text !== null) await checkSkill(state, edit.name, changes);
+		let failure;
+		try {
+			await backend.apply(changes, author);
+		} catch (error) {
+			failure = { error };
+		}
+		state = await load();
+		await skills.reload();
+		for (const listener of listeners) listener();
+		if (failure) throw failure.error;
+		return state;
+	};
+	return {
+		current: () => state,
+		edit: (edit, author) => {
+			const run = queue.then(() => apply(edit, author));
+			queue = run.catch(() => void 0);
+			return run;
+		},
+		onChange: (listener) => {
+			listeners.add(listener);
+			return () => listeners.delete(listener);
+		},
+		skills
+	};
+};
+//#endregion
 //#region src/utils/grant-registry.ts
 const createGrantRegistry = ({ idleTimeoutMs, now = Date.now, onCloseError = () => void 0 }) => {
 	const slots = /* @__PURE__ */ new Map();
@@ -36708,7 +39089,7 @@ const SPACES = / +/;
 * resource (`expectedResource`) and the expiry; decrypting and every other
 * claim stay with the authorization server.
 */
-const authenticate = async (request, as) => {
+const authenticate = async (request, as, resource = as.resource) => {
 	const header = request.headers["authorization"];
 	const verifier = { verifyAccessToken: async (bearer) => {
 		const token = await as.verifyAccessToken(bearer);
@@ -36726,13 +39107,14 @@ const authenticate = async (request, as) => {
 		const normalized = typeof header === "string" ? header.replace(SPACES, " ") : void 0;
 		return (await verifyBearerToken(normalized, {
 			verifier,
-			expectedResource: new URL(as.resource)
+			expectedResource: new URL(resource)
 		})).extra?.["verified"];
 	} catch {
 		return;
 	}
 };
 const PROTECTED_RESOURCE_PATHS = ["/.well-known/oauth-protected-resource/mcp", "/.well-known/oauth-protected-resource"];
+const ADMIN_PROTECTED_RESOURCE_PATH = "/.well-known/oauth-protected-resource/mcp/admin";
 const sendJson = (res, status, body) => {
 	res.writeHead(status, { "Content-Type": "application/json" });
 	res.end(JSON.stringify(body));
@@ -36759,8 +39141,8 @@ const failRequest = (res, err) => {
 	}
 	if (!res.writableEnded) res.end();
 };
-const sendUnauthorized = (res, issuer) => {
-	const wwwAuthenticate = `Bearer resource_metadata="${issuer}${PROTECTED_RESOURCE_PATHS[0]}", error="invalid_token", error_description="${MISSING_BEARER_MESSAGE}"`;
+const sendUnauthorized = (res, issuer, surface) => {
+	const wwwAuthenticate = `Bearer resource_metadata="${issuer}${surface === "admin" ? ADMIN_PROTECTED_RESOURCE_PATH : PROTECTED_RESOURCE_PATHS[0]}", error="invalid_token", error_description="${MISSING_BEARER_MESSAGE}"`;
 	sendJsonRpcError(res, 401, -32e3, MISSING_BEARER_MESSAGE, { "WWW-Authenticate": wwwAuthenticate });
 };
 const asNodeRequest = (req) => req;
@@ -36830,6 +39212,12 @@ const SESSION_IDLE_TIMEOUT_MS = 18e5;
 const SESSION_SWEEP_INTERVAL_MS = 6e4;
 const startHttpTransport = async (config, logger = silentLogger, options = {}) => {
 	const buildAuthorizationServer = await prepareAuthorizationServer(config, logger);
+	const customizations = await createCustomizationService(openCustomizationBackend(config.customizationStore ?? pathToFileURL(join(configDir(), "customizations")).href), logger);
+	const setupSkill = await loadSetupSkill();
+	const adminTools = createAdminTools({
+		config,
+		service: customizations
+	});
 	let authorizationServer;
 	const sessions = /* @__PURE__ */ new Map();
 	const sla = startSlaRuntime(config);
@@ -36848,9 +39236,9 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 		...config,
 		readOnly: true
 	};
-	const dispatchToSession = async (req, res, sessionId, token, body) => {
+	const dispatchToSession = async (req, res, sessionId, token, body, surface) => {
 		const session = sessions.get(sessionId);
-		if (!session || session.subject !== token.subject) return false;
+		if (!session || session.subject !== token.subject || session.surface !== surface) return false;
 		if (session.canWrite && !token.canWrite) return false;
 		session.auth.zendeskToken = token.zendeskAccessToken;
 		session.auth.grantId = token.grantId;
@@ -36858,13 +39246,29 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 		await session.transport.handleRequest(req, res, body);
 		return true;
 	};
-	const openSession = async (req, res, body, token, as) => {
+	const buildServer = (surface, params, live) => surface === "admin" ? createAdminServer({
+		env: {
+			config,
+			service: customizations
+		},
+		readOnly: params.config.readOnly,
+		tools: adminTools,
+		setupSkill,
+		caller: { getToken: params.getToken },
+		requestStateCodec: params.requestStateCodec,
+		onUnauthorized: params.onUnauthorized
+	}) : serverFactory({
+		...params,
+		extraInstructions: buildCustomInstructions(customizations.current(), params.config),
+		decorate: (server) => serveCustomizations(server, customizations, { live })
+	});
+	const openSession = async (req, res, body, token, as, surface) => {
 		const auth = {
 			zendeskToken: token.zendeskAccessToken,
 			grantId: token.grantId
 		};
 		const sessionConfig = effectiveConfig(token);
-		const server = serverFactory({
+		const server = buildServer(surface, {
 			config: sessionConfig,
 			getToken: () => auth.zendeskToken,
 			logger,
@@ -36878,7 +39282,7 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 			notifyResourceUpdated: (uri) => {
 				server.server.sendResourceUpdated({ uri }).catch(() => void 0);
 			}
-		});
+		}, true);
 		const transport = new NodeStreamableHTTPServerTransport({
 			sessionIdGenerator: () => randomUUID(),
 			onsessioninitialized: (newId) => {
@@ -36886,6 +39290,7 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 					transport,
 					auth,
 					subject: token.subject,
+					surface,
 					canWrite: !sessionConfig.readOnly,
 					lastActivityAt: Date.now(),
 					close: async () => {
@@ -36900,8 +39305,9 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 		};
 		await server.connect(transport);
 		await transport.handleRequest(req, res, body);
+		if (transport.sessionId === void 0) await server.close();
 	};
-	const createGrantEntry = (token, as) => {
+	const createGrantEntry = (token, as, surface) => {
 		const { grantId } = token;
 		const auth = { zendeskToken: token.zendeskAccessToken };
 		const getToken = () => auth.zendeskToken;
@@ -36917,7 +39323,7 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 		const handler = createMcpHandler(({ authInfo }) => {
 			const verified = authInfo?.extra?.["verified"];
 			if (!verified) throw new Error("2026-07-28 request without a verified token");
-			return serverFactory({
+			return buildServer(surface, {
 				config: effectiveConfig(verified),
 				getToken,
 				logger,
@@ -36928,13 +39334,18 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 				slaRuntime: sla.runtime,
 				alertPolling: "grant",
 				notifyResourceUpdated: (uri) => handler.notify.resourceUpdated(uri)
-			});
+			}, false);
 		}, {
 			legacy: "reject",
 			onerror: (err) => logger.debug("mcp_request_rejected", { error: err.message })
 		});
 		const listens = createListenFeed();
-		const stopAlerts = watchGrantAlerts({
+		const main = surface === "main";
+		const stopCustomizations = main ? customizations.onChange(() => {
+			handler.notify.promptsChanged();
+			handler.notify.resourcesChanged();
+		}) : () => void 0;
+		const stopAlerts = main ? watchGrantAlerts({
 			config,
 			getToken,
 			caches,
@@ -36943,7 +39354,7 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 			listens,
 			notify: (uri) => handler.notify.resourceUpdated(uri),
 			onUnauthorized
-		});
+		}) : () => void 0;
 		const entry = {
 			auth,
 			revoked: false,
@@ -36951,6 +39362,7 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 			listens,
 			handle: toNodeHandler(handler),
 			close: () => {
+				stopCustomizations();
 				stopAlerts();
 				listens.closeAll();
 				return handler.close();
@@ -36958,10 +39370,11 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 		};
 		return entry;
 	};
-	const serveModern = async (req, res, body, token, as) => {
-		const entry = grants.acquire(token.grantId, token.subject, () => createGrantEntry(token, as));
+	const serveModern = async (req, res, body, token, as, surface) => {
+		const key = `${surface}:${token.grantId}`;
+		const entry = grants.acquire(key, token.subject, () => createGrantEntry(token, as, surface));
 		if (!entry) {
-			sendUnauthorized(res, as.issuer);
+			sendUnauthorized(res, as.issuer, surface);
 			return;
 		}
 		entry.auth.zendeskToken = token.zendeskAccessToken;
@@ -36985,22 +39398,22 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 			await entry.handle(request, res, body);
 		} finally {
 			if (counted) entry.inFlight -= 1;
-			if (entry.revoked && entry.inFlight === 0) await grants.close(token.grantId, entry);
+			if (entry.revoked && entry.inFlight === 0) await grants.close(key, entry);
 		}
 	};
-	const serveLegacy = async (req, res, body, token, as) => {
+	const serveLegacy = async (req, res, body, token, as, surface) => {
 		const sessionId = typeof req.headers["mcp-session-id"] === "string" ? req.headers["mcp-session-id"] : void 0;
-		if (sessionId && await dispatchToSession(req, res, sessionId, token, body)) return;
+		if (sessionId && await dispatchToSession(req, res, sessionId, token, body, surface)) return;
 		if (req.method !== "POST") {
 			sendJsonRpcError(res, 400, -32e3, "No active session; initialize via POST first.");
 			return;
 		}
-		await openSession(req, res, body, token, as);
+		await openSession(req, res, body, token, as, surface);
 	};
-	const handleMcpRequest = async (req, res, as) => {
-		const token = await authenticate(req, as);
+	const handleMcpRequest = async (req, res, as, surface) => {
+		const token = await authenticate(req, as, surface === "admin" ? as.adminResource : as.resource);
 		if (!token) {
-			sendUnauthorized(res, as.issuer);
+			sendUnauthorized(res, as.issuer, surface);
 			return;
 		}
 		let body;
@@ -37013,10 +39426,10 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 			body = read.value;
 		}
 		if (body !== void 0 && !await isLegacyRequest(await toWebRequest(asNodeRequest(req), body), body)) {
-			await serveModern(req, res, body, token, as);
+			await serveModern(req, res, body, token, as, surface);
 			return;
 		}
-		await serveLegacy(req, res, body, token, as);
+		await serveLegacy(req, res, body, token, as, surface);
 	};
 	const route = async (req, res, as) => {
 		const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
@@ -37024,6 +39437,10 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 			sendJson(res, 200, as.protectedResourceMetadata);
 			return;
 		}
+		if (req.method === "GET" && url.pathname === ADMIN_PROTECTED_RESOURCE_PATH) {
+			sendJson(res, 200, as.adminProtectedResourceMetadata);
+			return;
+		}
 		if (req.method === "GET" && url.pathname === "/healthz") {
 			sendJson(res, 200, {
 				status: "ok",
@@ -37032,7 +39449,11 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 			return;
 		}
 		if (url.pathname === "/mcp") {
-			await handleMcpRequest(req, res, as);
+			await handleMcpRequest(req, res, as, "main");
+			return;
+		}
+		if (url.pathname === "/mcp/admin") {
+			await handleMcpRequest(req, res, as, "admin");
 			return;
 		}
 		await as.handle(req, res);