@gizmodata/hardcharger-mcp 0.0.0 → 2.0.0

package/dist/transports.d.ts

@@ -0,0 +1,29 @@
+import * as http from "node:http";
+import { type McpConfig } from "./connection.js";
+import { OAuthVerifier } from "./oauth.js";
+/** Runs the server on stdio (Claude Desktop / `claude mcp add`). */
+export declare function startStdio(config: McpConfig): Promise<void>;
+export interface HttpOptions {
+    host: string;
+    port: number;
+    /** Test hook: replaces the OAuth verifier built from the config. */
+    verifier?: OAuthVerifier;
+    /** Test hook: disables the SIGINT/SIGTERM handlers. */
+    installSignalHandlers?: boolean;
+}
+/**
+ * Runs the server as stateless Streamable HTTP on `/mcp`. Every request
+ * gets its own McpServer + transport (the SDK's stateless pattern). With
+ * OAuth, each authenticated user also gets their own connection registry
+ * (a SessionStore entry) so session state never crosses users; otherwise
+ * one registry is shared by every client.
+ *
+ * Authentication, one of:
+ *   - HARDCHARGER_MCP_OAUTH_ISSUER: the server is an OAuth 2.1 resource server.
+ *     Bearer tokens are verified against the provider's JWKS; RFC 9728
+ *     metadata is served under /.well-known/oauth-protected-resource so
+ *     clients discover the provider; 401 responses carry the challenge.
+ *   - HARDCHARGER_MCP_BEARER_TOKEN: a single static token compared in constant time.
+ *   - neither: unauthenticated (local use only).
+ */
+export declare function startHttp(config: McpConfig, options: HttpOptions): Promise<http.Server>;

package/dist/transports.js

@@ -0,0 +1,308 @@
+// stdio and Streamable HTTP transports over the shared server definition.
+import { timingSafeEqual } from "node:crypto";
+import * as http from "node:http";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { redactSecrets } from "./connection.js";
+import { OAuthError, OAuthVerifier, OFFLINE_ACCESS_SCOPE, protectedResourceMetadataPaths } from "./oauth.js";
+import { OAuthFacade, facadeMetadataPaths, facadeTokenPath } from "./oauth-facade.js";
+import { ConnectionRegistry } from "./registry.js";
+import { createServer } from "./server.js";
+import { SessionStore } from "./sessions.js";
+import { PACKAGE_NAME, PACKAGE_VERSION } from "./version.js";
+const log = (message) => console.error(message);
+/** "host:port" for one connection, or "name=host:port, ..." for several. */
+function describeTargets(config) {
+    if (config.connections.length === 1) {
+        const c = config.connections[0];
+        return c.uri;
+    }
+    return config.connections.map((c) => `${c.name}=${c.uri}`).join(", ");
+}
+function installShutdown(closeAll, extra) {
+    let closing = false;
+    const shutdown = async () => {
+        if (closing)
+            return;
+        closing = true;
+        try {
+            await extra?.();
+            await closeAll();
+        }
+        finally {
+            process.exit(0);
+        }
+    };
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+}
+/** Runs the server on stdio (Claude Desktop / `claude mcp add`). */
+export async function startStdio(config) {
+    const registry = new ConnectionRegistry(config, log);
+    const server = createServer({ registry, config, transport: "stdio" });
+    const transport = new StdioServerTransport();
+    installShutdown(() => registry.close(), () => server.close());
+    // When the client closes stdin the transport closes; exit cleanly.
+    transport.onclose = () => {
+        void registry.close().finally(() => process.exit(0));
+    };
+    await server.connect(transport);
+    log(`[hardcharger-mcp] ${PACKAGE_NAME} ${PACKAGE_VERSION} ready on stdio (${describeTargets(config)}, writes ${config.allowWrites ? "enabled" : "disabled"})`);
+}
+function bearerMatches(header, expected) {
+    if (!header)
+        return false;
+    const m = /^Bearer\s+(.+)$/iu.exec(header.trim());
+    if (!m)
+        return false;
+    const a = Buffer.from(m[1]);
+    const b = Buffer.from(expected);
+    return a.length === b.length && timingSafeEqual(a, b);
+}
+/** Largest JSON-RPC request body accepted on /mcp. */
+const MAX_BODY_BYTES = 8 * 1024 * 1024;
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        req.on("data", (chunk) => {
+            size += chunk.length;
+            if (size > MAX_BODY_BYTES) {
+                reject(new Error(`request body exceeds ${MAX_BODY_BYTES} bytes`));
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+        req.on("error", reject);
+    });
+}
+/** One audit line per JSON-RPC request: who called which method (and tool). */
+function describeRequest(body) {
+    const messages = Array.isArray(body) ? body : [body];
+    const out = [];
+    for (const m of messages) {
+        if (!m || typeof m !== "object")
+            continue;
+        const method = m.method;
+        const id = m.id;
+        if (typeof method !== "string" || id === undefined)
+            continue; // responses and notifications
+        if (method === "tools/call") {
+            const name = m.params?.name;
+            out.push(`tools/call ${typeof name === "string" ? name : "?"}`);
+        }
+        else if (method === "resources/read") {
+            const uri = m.params?.uri;
+            out.push(`resources/read ${typeof uri === "string" ? uri : "?"}`);
+        }
+        else {
+            out.push(method);
+        }
+    }
+    return out;
+}
+/** Session key: one session per subject at the issuer. */
+function sessionKey(issuer, user) {
+    return `${issuer}#${user.subject || user.name}`;
+}
+/**
+ * Runs the server as stateless Streamable HTTP on `/mcp`. Every request
+ * gets its own McpServer + transport (the SDK's stateless pattern). With
+ * OAuth, each authenticated user also gets their own connection registry
+ * (a SessionStore entry) so session state never crosses users; otherwise
+ * one registry is shared by every client.
+ *
+ * Authentication, one of:
+ *   - HARDCHARGER_MCP_OAUTH_ISSUER: the server is an OAuth 2.1 resource server.
+ *     Bearer tokens are verified against the provider's JWKS; RFC 9728
+ *     metadata is served under /.well-known/oauth-protected-resource so
+ *     clients discover the provider; 401 responses carry the challenge.
+ *   - HARDCHARGER_MCP_BEARER_TOKEN: a single static token compared in constant time.
+ *   - neither: unauthenticated (local use only).
+ */
+export async function startHttp(config, options) {
+    const bearer = config.mcpBearerToken;
+    const oauth = config.mcpOAuth;
+    const verifier = options.verifier ?? (oauth ? new OAuthVerifier(oauth, { log }) : undefined);
+    // Per-user sessions need an identity, so they exist only with OAuth.
+    const sessions = verifier
+        ? new SessionStore(config, { idleSeconds: config.mcpSessionIdleSeconds, maxSessions: config.mcpMaxSessions, log })
+        : undefined;
+    const sharedRegistry = sessions ? undefined : new ConnectionRegistry(config, log);
+    // Used only for redacting log lines; secrets are the same in every registry.
+    const redact = (t) => redactSecrets(t, sharedRegistry ? sharedRegistry.secrets() : config.connections.flatMap((c) => [c.password]));
+    const metadataPaths = new Set(oauth ? protectedResourceMetadataPaths(oauth.publicUrl) : []);
+    // Token-proxy facade: Claude is pointed at this server's copy of the
+    // provider metadata so refresh_token grants pass through handleToken.
+    const facade = oauth && verifier && oauth.tokenProxy
+        ? new OAuthFacade({ publicUrl: oauth.publicUrl, upstreamIssuer: oauth.issuer, scopes: oauth.scopes }, { log })
+        : undefined;
+    const facadePaths = new Set(facade ? facadeMetadataPaths() : []);
+    const authorize = async (req) => {
+        if (verifier) {
+            try {
+                return { ok: true, user: await verifier.verify(req.headers.authorization) };
+            }
+            catch (err) {
+                if (err instanceof OAuthError) {
+                    return {
+                        ok: false,
+                        status: err.status,
+                        error: err.code,
+                        description: err.message,
+                        challenge: err.code === "invalid_token" ? verifier.challenge(err.code, err.message) : "",
+                    };
+                }
+                throw err;
+            }
+        }
+        if (bearer && !bearerMatches(req.headers.authorization, bearer)) {
+            return { ok: false, status: 401, error: "invalid_token", description: "Bearer token required", challenge: "Bearer" };
+        }
+        return { ok: true };
+    };
+    const httpServer = http.createServer(async (req, res) => {
+        const url = new URL(req.url ?? "/", "http://localhost");
+        if (url.pathname === "/healthz") {
+            res.writeHead(200, { "content-type": "application/json" });
+            res.end(JSON.stringify({ ok: true, server: PACKAGE_NAME, version: PACKAGE_VERSION }));
+            return;
+        }
+        if (verifier && metadataPaths.has(url.pathname.replace(/\/+$/u, "") || "/")) {
+            if (req.method !== "GET" && req.method !== "HEAD") {
+                res.writeHead(405, { allow: "GET" });
+                res.end();
+                return;
+            }
+            res.writeHead(200, { "content-type": "application/json", "cache-control": "public, max-age=300" });
+            res.end(JSON.stringify(verifier.protectedResourceMetadata(facade?.issuer)));
+            return;
+        }
+        if (facade) {
+            const path = url.pathname.replace(/\/+$/u, "");
+            if (facadePaths.has(path)) {
+                await facade.handleMetadata(req, res);
+                return;
+            }
+            if (path === facadeTokenPath()) {
+                await facade.handleToken(req, res);
+                return;
+            }
+        }
+        if (url.pathname !== "/mcp") {
+            res.writeHead(404, { "content-type": "text/plain" });
+            res.end("Not found. The MCP endpoint is /mcp.");
+            return;
+        }
+        if (req.method !== "POST" && req.method !== "GET" && req.method !== "DELETE") {
+            res.writeHead(405, { allow: "GET, POST, DELETE" });
+            res.end();
+            return;
+        }
+        let auth;
+        try {
+            auth = await authorize(req);
+        }
+        catch (err) {
+            log(`[hardcharger-mcp] auth error: ${redact(err instanceof Error ? err.message : String(err))}`);
+            res.writeHead(500, { "content-type": "application/json" });
+            res.end(JSON.stringify({ error: "internal error" }));
+            return;
+        }
+        if (!auth.ok) {
+            const headers = { "content-type": "application/json" };
+            if (auth.challenge)
+                headers["www-authenticate"] = auth.challenge;
+            res.writeHead(auth.status, headers);
+            res.end(JSON.stringify({ error: auth.error, error_description: auth.description }));
+            // 401s are logged too: an expired token with no refresh token behind it
+            // looks, from the client, like the connector silently dying.
+            log(`[hardcharger-mcp] ${auth.status === 403 ? "forbidden" : "unauthorized"}: ${auth.description}`);
+            return;
+        }
+        let parsedBody;
+        if (req.method === "POST") {
+            try {
+                const raw = await readBody(req);
+                parsedBody = raw === "" ? undefined : JSON.parse(raw);
+            }
+            catch (err) {
+                res.writeHead(400, { "content-type": "application/json" });
+                res.end(JSON.stringify({ error: "invalid_request", error_description: err instanceof Error ? err.message : String(err) }));
+                return;
+            }
+            const who = auth.user ? auth.user.name : "anonymous";
+            for (const line of describeRequest(parsedBody))
+                log(`[hardcharger-mcp] ${who}: ${line}`);
+        }
+        let registry;
+        let session;
+        if (sessions && verifier && auth.user) {
+            const acquired = sessions.acquire(sessionKey(verifier.config.issuer, auth.user), auth.user.name);
+            registry = acquired.registry;
+            session = acquired.info;
+        }
+        else {
+            registry = sharedRegistry;
+        }
+        const server = createServer({
+            registry,
+            config,
+            transport: "http",
+            user: auth.user,
+            session,
+            acknowledgeSessionReset: session ? () => sessions?.acknowledgeReset(session.key) : undefined,
+        });
+        const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+        res.on("close", () => {
+            void transport.close();
+            void server.close();
+        });
+        try {
+            await server.connect(transport);
+            await transport.handleRequest(req, res, parsedBody);
+        }
+        catch (err) {
+            log(`[hardcharger-mcp] request error: ${redact(err instanceof Error ? err.message : String(err))}`);
+            if (!res.headersSent) {
+                res.writeHead(500, { "content-type": "application/json" });
+                res.end(JSON.stringify({ error: "internal error" }));
+            }
+        }
+    });
+    const closeAll = async () => {
+        await sessions?.close();
+        await sharedRegistry?.close();
+    };
+    if (options.installSignalHandlers !== false) {
+        installShutdown(closeAll, () => new Promise((resolve) => httpServer.close(() => resolve())));
+    }
+    httpServer.once("close", () => void closeAll());
+    await new Promise((resolve, reject) => {
+        httpServer.once("error", reject);
+        httpServer.listen(options.port, options.host, () => resolve());
+    });
+    const addr = httpServer.address();
+    const shown = typeof addr === "object" && addr ? `${addr.address}:${addr.port}` : `${options.host}:${options.port}`;
+    const authMode = verifier
+        ? `oauth ${verifier.config.issuer}${facade ? ` via token proxy ${facade.issuer}` : ""}, per-user sessions (idle ${config.mcpSessionIdleSeconds}s, max ${config.mcpMaxSessions})`
+        : bearer
+            ? "bearer"
+            : "none";
+    log(`[hardcharger-mcp] ${PACKAGE_NAME} ${PACKAGE_VERSION} listening on http://${shown}/mcp ` +
+        `(${describeTargets(config)}, writes ${config.allowWrites ? "enabled" : "disabled"}, ` +
+        `auth ${authMode})`);
+    if (verifier && !facade && /(^|\.)login\.microsoftonline\.com$/u.test(new URL(verifier.config.issuer).hostname)) {
+        log("[hardcharger-mcp] warning: Microsoft Entra ID rejects Claude's refresh_token requests unless the API scope is " +
+            "re-sent (AADSTS90009); set HARDCHARGER_MCP_OAUTH_TOKEN_PROXY=true or users must reconnect every hour");
+    }
+    if (verifier && !verifier.config.scopes.includes(OFFLINE_ACCESS_SCOPE)) {
+        log(`[hardcharger-mcp] warning: HARDCHARGER_MCP_OAUTH_SCOPES does not include ${OFFLINE_ACCESS_SCOPE}; ` +
+            "providers such as Microsoft Entra ID then issue no refresh token, and clients lose access " +
+            "when the access token expires (about an hour) until the user reconnects the connector");
+    }
+    return httpServer;
+}
+//# sourceMappingURL=transports.js.map

package/dist/transports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transports.js","sourceRoot":"","sources":["../src/transports.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,OAAO,EAAE,aAAa,EAAkB,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,oBAAoB,EAAE,8BAA8B,EAA0B,MAAM,YAAY,CAAC;AACrI,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAoB,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE7D,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAExD,4EAA4E;AAC5E,SAAS,eAAe,CAAC,MAAiB;IACxC,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC,GAAG,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,eAAe,CAAC,QAA6B,EAAE,KAA2B;IACjF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC;YACH,MAAM,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,QAAQ,EAAE,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAiB;IAChD,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,eAAe,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9D,mEAAmE;IACnE,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;QACvB,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,GAAG,CAAC,qBAAqB,YAAY,IAAI,eAAe,oBAAoB,eAAe,CAAC,MAAM,CAAC,YAAY,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;AACjK,CAAC;AAED,SAAS,aAAa,CAAC,MAA0B,EAAE,QAAgB;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAWD,sDAAsD;AACtD,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,SAAS,QAAQ,CAAC,GAAyB;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,cAAc,QAAQ,CAAC,CAAC,CAAC;gBAClE,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,SAAS,eAAe,CAAC,IAAa;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC1C,MAAM,MAAM,GAAI,CAA0B,CAAC,MAAM,CAAC;QAClD,MAAM,EAAE,GAAI,CAAsB,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,8BAA8B;QAC5F,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAI,CAAqC,CAAC,MAAM,EAAE,IAAI,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,cAAc,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACvC,MAAM,GAAG,GAAI,CAAoC,CAAC,MAAM,EAAE,GAAG,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,kBAAkB,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAID,0DAA0D;AAC1D,SAAS,UAAU,CAAC,MAAc,EAAE,IAAuB;IACzD,OAAO,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAiB,EAAE,OAAoB;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7F,qEAAqE;IACrE,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,qBAAqB,EAAE,WAAW,EAAE,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC;QAClH,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClF,6EAA6E;IAC7E,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5I,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,8BAA8B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5F,qEAAqE;IACrE,sEAAsE;IACtE,MAAM,MAAM,GACV,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC,UAAU;QACnC,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QAC9G,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEjE,MAAM,SAAS,GAAG,KAAK,EAAE,GAAyB,EAA0B,EAAE;QAC5E,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;oBAC9B,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,KAAK,EAAE,GAAG,CAAC,IAAI;wBACf,WAAW,EAAE,GAAG,CAAC,OAAO;wBACxB,SAAS,EAAE,GAAG,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;qBACzF,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;YAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,uBAAuB,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QACvH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YAChC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACrC,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACnG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,eAAe,EAAE,EAAE,CAAC;gBAC/B,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;QACH,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7E,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,IAAI,IAAmB,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,iCAAiC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACjG,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YAC/E,IAAI,IAAI,CAAC,SAAS;gBAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YACjE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACpF,wEAAwE;YACxE,6DAA6D;YAC7D,GAAG,CAAC,qBAAqB,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QAED,IAAI,UAAmB,CAAC;QACxB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAChC,UAAU,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3H,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;YACrD,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,UAAU,CAAC;gBAAE,GAAG,CAAC,qBAAqB,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,QAA4B,CAAC;QACjC,IAAI,OAAgC,CAAC;QACrC,IAAI,QAAQ,IAAI,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjG,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAC7B,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,cAAe,CAAC;QAC7B,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,MAAM;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO;YACP,uBAAuB,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7F,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;QACvF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,oCAAoC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACpG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxB,MAAM,cAAc,EAAE,KAAK,EAAE,CAAC;IAChC,CAAC,CAAC;IACF,IAAI,OAAO,CAAC,qBAAqB,KAAK,KAAK,EAAE,CAAC;QAC5C,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACrG,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAEhD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IACpH,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,6BAA6B,MAAM,CAAC,qBAAqB,UAAU,MAAM,CAAC,cAAc,GAAG;QAChL,CAAC,CAAC,MAAM;YACN,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,MAAM,CAAC;IACb,GAAG,CACD,qBAAqB,YAAY,IAAI,eAAe,wBAAwB,KAAK,OAAO;QACtF,IAAI,eAAe,CAAC,MAAM,CAAC,YAAY,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI;QACtF,QAAQ,QAAQ,GAAG,CACtB,CAAC;IACF,IAAI,QAAQ,IAAI,CAAC,MAAM,IAAI,qCAAqC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChH,GAAG,CACD,gHAAgH;YAC9G,sGAAsG,CACzG,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACvE,GAAG,CACD,4EAA4E,oBAAoB,IAAI;YAClG,4FAA4F;YAC5F,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const PACKAGE_NAME: string;
+export declare const PACKAGE_VERSION: string;

package/dist/version.js

@@ -0,0 +1,8 @@
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+// Works for both layouts: `dist/version.js` (npm package) and
+// `server/version.js` (MCPB bundle) — package.json sits one level up.
+const pkg = require("../package.json");
+export const PACKAGE_NAME = pkg.name;
+export const PACKAGE_VERSION = pkg.version;
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,8DAA8D;AAC9D,sEAAsE;AACtE,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAsC,CAAC;AAE5E,MAAM,CAAC,MAAM,YAAY,GAAW,GAAG,CAAC,IAAI,CAAC;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAW,GAAG,CAAC,OAAO,CAAC"}

package/package.json

@@ -1,18 +1,74 @@
 {
   "name": "@gizmodata/hardcharger-mcp",
-  "version": "0.0.0",
-  "description": "Placeholder: Hardcharger MCP server: lets AI agents query a Hardcharger database. Coming soon.",
+  "version": "2.0.0",
+  "description": "Model Context Protocol (MCP) server and Claude Desktop extension for Hardcharger\u2122, GizmoData\u2122's DuckDB 2.0 server",
+  "author": "GizmoData LLC",
   "license": "Apache-2.0",
-  "author": "GizmoData LLC <info@gizmodata.com>",
-  "homepage": "https://gizmodata.com",
+  "type": "module",
+  "main": "./dist/server.js",
+  "types": "./dist/server.d.ts",
+  "bin": {
+    "hardcharger-mcp": "dist/cli.js"
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md",
+    "NOTICE"
+  ],
+  "engines": {
+    "node": ">=22.19.0"
+  },
   "repository": {
     "type": "git",
-    "url": "https://github.com/gizmodata/hardcharger-mcp.git"
+    "url": "git+https://github.com/gizmodata/hardcharger-mcp.git"
+  },
+  "homepage": "https://github.com/gizmodata/hardcharger-mcp#readme",
+  "bugs": {
+    "url": "https://github.com/gizmodata/hardcharger-mcp/issues"
   },
+  "keywords": [
+    "hardcharger",
+    "gizmodata",
+    "warp-sql",
+    "mcp",
+    "model-context-protocol",
+    "claude",
+    "arrow",
+    "duckdb",
+    "sql"
+  ],
   "publishConfig": {
     "access": "public"
   },
-  "files": [
-    "README.md"
-  ]
-}
+  "scripts": {
+    "clients": "scripts/install-clients.sh",
+    "clean": "rm -rf dist",
+    "build": "npm run clean && tsc -p tsconfig.json",
+    "typecheck": "npm run build && tsc -p tsconfig.test.json --noEmit",
+    "lint": "eslint src test scripts --fix",
+    "lint:ci": "eslint src test scripts && node scripts/check-lock.mjs",
+    "test": "npm run build && node --test \"test/unit/**/*.test.ts\"",
+    "test:live": "npm run build && node scripts/run-live.mjs",
+    "test:examples": "npm run build && node scripts/run-examples.mjs",
+    "build:mcpb": "bash scripts/build-mcpb.sh",
+    "prepublishOnly": "node scripts/guard-publish.mjs"
+  },
+  "dependencies": {
+    "@gizmodata/hardcharger": "^2.0.0",
+    "@modelcontextprotocol/sdk": "^1.32.1",
+    "apache-arrow": "^21.2.0",
+    "jose": "^6.2.12",
+    "zod": "^4.6.7"
+  },
+  "devDependencies": {
+    "@anthropic-ai/mcpb": "^2.1.2",
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^26.6.5",
+    "ajv": "^8.20.0",
+    "eslint": "^10.13.0",
+    "typescript": "~6.0.3",
+    "typescript-eslint": "^8.71.2"
+  }
+}