@j0hanz/filesystem-mcp 2.0.0 → 2.1.1

package/dist/prompts.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE1F,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAe9F,kBAAkB;AAElB,SAAS,QAAQ,CACf,MAAyB,EACzB,WAAmB;IAEnB,OAAO,WAAW,CAChB,CAAC;SACE,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;SACrC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QAC9B,OAAO,EAAE,0CAA0C;KACpD,CAAC;SACD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC7C,OAAO,EAAE,yEAAyE;KACnF,CAAC;SACD,QAAQ,CAAC,WAAW,CAAC,EACxB,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IACzE,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,MAAM;QACZ,IAAI;QACJ,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;KACtD,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,QAAwB,EAAE,EAAwB;IAC9E,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC;YAAE,MAAM,KAAK,CAAC;QACvD,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,0BAA0B,OAAO,EAAE,EAAE;YAChD,UAAU,EAAE,QAAQ,CAAC,IAAI;YACzB,KAAK;SACN,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QACrE,aAAa,CAAC,KAAK,GAAG,KAAK,CAAC;QAC5B,MAAM,aAAa,CAAC;IACtB,CAAC;AACH,CAAC;AAED,yBAAyB;AAEzB,MAAM,QAAQ,GAAmB;IAC/B,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,UAAU;IACjB,WAAW,EAAE,oBAAoB;CAClC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAErC,IAAI,CAAC,MAAM,CAAC,cAAc,CACxB,QAAQ,CAAC,IAAI,EACb;QACE,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC;YACzB,KAAK,EAAE,QAAQ,CACb,MAAM,EACN,+CAA+C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,CACtG,CAAC,QAAQ,EAAE;SACb,CAAC;KACH,EACD,CAAC,EAAE,KAAK,EAAkC,EAA8C,EAAE,CACxF,WAAW,CAAC,QAAQ,EAAE,GAAG,EAAE;QACzB,MAAM,UAAU,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC;QACxC,MAAM,OAAO,GACX,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,IAAI,GACR,OAAO;YACP,CAAC,KAAK;gBACJ,CAAC,CAAC,YAAY,KAAK,2BAA2B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,YAAY,EAAE;gBACpF,CAAC,CAAC,YAAY,CAAC,CAAC;QACpB,OAAO;YACL,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SAC3B,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  GetPromptResult,\n  McpServer,\n  PromptMessage,\n  TextContent,\n} from '@modelcontextprotocol/server';\nimport { completable, getDisplayName, ProtocolError } from '@modelcontextprotocol/server';\n\nimport * as z from 'zod/v4';\n\nimport { formatUnknownErrorMessage, fsErrorCode, hasErrorShape } from './core/errors.js';\nimport { Logger } from './core/observability.js';\nimport { isBlank, SHELL_METACHAR_RE } from './core/schema.js';\nimport { buildSectionsRecord, INSTRUCTIONS_SUMMARY, renderSections } from './instructions.js';\n\n// --- Types ---\n\ninterface PromptContract {\n  readonly name: string;\n  readonly title: string;\n  readonly description: string;\n}\n\ninterface PromptRegistrarDeps {\n  readonly server: McpServer;\n  readonly readOnly?: boolean;\n}\n\n// --- Helpers ---\n\nfunction topicArg(\n  topics: readonly string[],\n  description: string,\n): ReturnType<typeof completable<z.ZodString>> {\n  return completable(\n    z\n      .string()\n      .min(1, { message: 'Topic required' })\n      .refine((val) => !isBlank(val), {\n        message: 'Topic cannot be empty or whitespace-only',\n      })\n      .refine((val) => !SHELL_METACHAR_RE.test(val), {\n        message: 'Topic contains prohibited characters (newlines or shell metacharacters)',\n      })\n      .describe(description),\n    (value) => {\n      const lower = value.toLowerCase();\n      return lower ? topics.filter((t) => t.startsWith(lower)) : [...topics];\n    },\n  );\n}\n\nfunction userText(text: string): PromptMessage {\n  const content: TextContent = {\n    type: 'text',\n    text,\n    annotations: { audience: ['assistant'], priority: 1 },\n  };\n  return { role: 'user', content };\n}\n\nasync function wrapHandler<T>(contract: PromptContract, fn: () => Promise<T> | T): Promise<T> {\n  const displayName = getDisplayName(contract);\n\n  try {\n    const result = await fn();\n    Logger.debug(`prompt resolved`, { name: contract.name, displayName });\n    return result;\n  } catch (error) {\n    if (hasErrorShape(error, 'ProtocolError')) throw error;\n    const message = formatUnknownErrorMessage(error);\n    Logger.error(`Prompt handler failed: ${message}`, {\n      promptName: contract.name,\n      error,\n    });\n    const protocolError = new ProtocolError(fsErrorCode(error), message);\n    protocolError.cause = error;\n    throw protocolError;\n  }\n}\n\n// --- Prompt entries ---\n\nconst GET_HELP: PromptContract = {\n  name: 'get-help',\n  title: 'Get Help',\n  description: INSTRUCTIONS_SUMMARY,\n};\n\nexport function registerPrompts(deps: PromptRegistrarDeps): void {\n  const sections = buildSectionsRecord(deps.readOnly ?? false);\n  const instructions = renderSections(sections);\n  const topics = Object.keys(sections);\n\n  deps.server.registerPrompt(\n    GET_HELP.name,\n    {\n      title: GET_HELP.title,\n      description: GET_HELP.description,\n      argsSchema: z.strictObject({\n        topic: topicArg(\n          topics,\n          `Section key to filter instructions (one of: ${topics.join(', ')}); omit to return all instructions.`,\n        ).optional(),\n      }),\n    },\n    ({ topic }: { topic?: string | undefined }): GetPromptResult | Promise<GetPromptResult> =>\n      wrapHandler(GET_HELP, () => {\n        const lowerTopic = topic?.toLowerCase();\n        const section =\n          lowerTopic && Object.hasOwn(sections, lowerTopic) ? sections[lowerTopic] : undefined;\n        if (topic && !section) {\n          Logger.debug('get-help: unknown topic requested', { topic });\n        }\n        const text =\n          section ??\n          (topic\n            ? `Section '${topic}' not found. Available: ${topics.join(', ')}\\n\\n${instructions}`\n            : instructions);\n        return {\n          description: GET_HELP.description,\n          messages: [userText(text)],\n        };\n      }),\n  );\n}\n"]}
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE1F,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAe9F,kBAAkB;AAElB,SAAS,QAAQ,CACf,MAAyB,EACzB,WAAmB;IAEnB,OAAO,WAAW;IAChB,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EACtE,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IACzE,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,MAAM;QACZ,IAAI;QACJ,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;KACtD,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,QAAwB,EAAE,EAAwB;IAC9E,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC;YAAE,MAAM,KAAK,CAAC;QACvD,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,0BAA0B,OAAO,EAAE,EAAE;YAChD,UAAU,EAAE,QAAQ,CAAC,IAAI;YACzB,KAAK;SACN,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QACrE,aAAa,CAAC,KAAK,GAAG,KAAK,CAAC;QAC5B,MAAM,aAAa,CAAC;IACtB,CAAC;AACH,CAAC;AAED,yBAAyB;AAEzB,MAAM,QAAQ,GAAmB;IAC/B,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,UAAU;IACjB,WAAW,EAAE,oBAAoB;CAClC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAErC,IAAI,CAAC,MAAM,CAAC,cAAc,CACxB,QAAQ,CAAC,IAAI,EACb;QACE,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC;YACzB,KAAK,EAAE,QAAQ,CACb,MAAM,EACN,+CAA+C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,CACtG,CAAC,QAAQ,EAAE;SACb,CAAC;KACH,EACD,CAAC,EAAE,KAAK,EAAkC,EAA8C,EAAE,CACxF,WAAW,CAAC,QAAQ,EAAE,GAAG,EAAE;QACzB,MAAM,UAAU,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC;QACxC,MAAM,OAAO,GACX,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,IAAI,GACR,OAAO;YACP,CAAC,KAAK;gBACJ,CAAC,CAAC,YAAY,KAAK,2BAA2B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,YAAY,EAAE;gBACpF,CAAC,CAAC,YAAY,CAAC,CAAC;QACpB,OAAO;YACL,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SAC3B,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  GetPromptResult,\n  McpServer,\n  PromptMessage,\n  TextContent,\n} from '@modelcontextprotocol/server';\nimport { completable, getDisplayName, ProtocolError } from '@modelcontextprotocol/server';\n\nimport * as z from 'zod/v4';\n\nimport { formatUnknownErrorMessage, fsErrorCode, hasErrorShape } from './core/errors.js';\nimport { Logger } from './core/observability.js';\nimport { buildSectionsRecord, INSTRUCTIONS_SUMMARY, renderSections } from './instructions.js';\n\n// --- Types ---\n\ninterface PromptContract {\n  readonly name: string;\n  readonly title: string;\n  readonly description: string;\n}\n\ninterface PromptRegistrarDeps {\n  readonly server: McpServer;\n  readonly readOnly?: boolean;\n}\n\n// --- Helpers ---\n\nfunction topicArg(\n  topics: readonly string[],\n  description: string,\n): ReturnType<typeof completable<z.ZodString>> {\n  return completable(\n    // No content validation beyond non-empty: the handler resolves a topic by\n    // `Object.hasOwn` against a frozen record, so anything unrecognized already\n    // falls through to the not-found reply without reaching an interpreter.\n    z.string().min(1, { message: 'Topic required' }).describe(description),\n    (value) => {\n      const lower = value.toLowerCase();\n      return lower ? topics.filter((t) => t.startsWith(lower)) : [...topics];\n    },\n  );\n}\n\nfunction userText(text: string): PromptMessage {\n  const content: TextContent = {\n    type: 'text',\n    text,\n    annotations: { audience: ['assistant'], priority: 1 },\n  };\n  return { role: 'user', content };\n}\n\nasync function wrapHandler<T>(contract: PromptContract, fn: () => Promise<T> | T): Promise<T> {\n  const displayName = getDisplayName(contract);\n\n  try {\n    const result = await fn();\n    Logger.debug(`prompt resolved`, { name: contract.name, displayName });\n    return result;\n  } catch (error) {\n    if (hasErrorShape(error, 'ProtocolError')) throw error;\n    const message = formatUnknownErrorMessage(error);\n    Logger.error(`Prompt handler failed: ${message}`, {\n      promptName: contract.name,\n      error,\n    });\n    const protocolError = new ProtocolError(fsErrorCode(error), message);\n    protocolError.cause = error;\n    throw protocolError;\n  }\n}\n\n// --- Prompt entries ---\n\nconst GET_HELP: PromptContract = {\n  name: 'get-help',\n  title: 'Get Help',\n  description: INSTRUCTIONS_SUMMARY,\n};\n\nexport function registerPrompts(deps: PromptRegistrarDeps): void {\n  const sections = buildSectionsRecord(deps.readOnly ?? false);\n  const instructions = renderSections(sections);\n  const topics = Object.keys(sections);\n\n  deps.server.registerPrompt(\n    GET_HELP.name,\n    {\n      title: GET_HELP.title,\n      description: GET_HELP.description,\n      argsSchema: z.strictObject({\n        topic: topicArg(\n          topics,\n          `Section key to filter instructions (one of: ${topics.join(', ')}); omit to return all instructions.`,\n        ).optional(),\n      }),\n    },\n    ({ topic }: { topic?: string | undefined }): GetPromptResult | Promise<GetPromptResult> =>\n      wrapHandler(GET_HELP, () => {\n        const lowerTopic = topic?.toLowerCase();\n        const section =\n          lowerTopic && Object.hasOwn(sections, lowerTopic) ? sections[lowerTopic] : undefined;\n        if (topic && !section) {\n          Logger.debug('get-help: unknown topic requested', { topic });\n        }\n        const text =\n          section ??\n          (topic\n            ? `Section '${topic}' not found. Available: ${topics.join(', ')}\\n\\n${instructions}`\n            : instructions);\n        return {\n          description: GET_HELP.description,\n          messages: [userText(text)],\n        };\n      }),\n  );\n}\n"]}

package/dist/tools/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/tools/create.ts"],"names":[],"mappings":"AAqFA,eAAO,MAAM,MAAM,mCA4FjB,CAAC"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/tools/create.ts"],"names":[],"mappings":"AAgEA,eAAO,MAAM,MAAM,mCA8FjB,CAAC"}

package/dist/tools/create.js

@@ -2,7 +2,6 @@ import { basename, dirname } from 'node:path';
 import * as z from 'zod/v4';
 import { ErrorCode } from '../core/errors.js';
 import { buildFileResourceLink, buildFileResourceUri } from '../core/file-uri.js';
-import { formatBytes, joinRoster } from '../core/fmt.js';
 import { detectMimeFromContent } from '../core/mime.js';
 import { countLines } from '../core/read.js';
 import { FileKind, IsoDateTime, NonNegInt, PathFailureSchema, RequiredPath, } from '../core/schema.js';
@@ -44,26 +43,6 @@ const CreateOutputSchema = z.strictObject({
         .optional()
         .describe('Files that failed to create with per-file error details'),
 });
-function buildSummary(results, failCount) {
-    if (results.length === 1 && failCount === 0) {
-        const result = results[0];
-        if (result) {
-            return [
-                `create: ${basename(result.path)}`,
-                formatBytes(result.size),
-                `${String(result.lineCount)} lines`,
-            ].join(' \u00b7 ');
-        }
-    }
-    // Name what was written. "create: 3 files" made the caller open
-    // structuredContent to learn which three \u2014 every other write tool answers
-    // with its roster.
-    const names = joinRoster(results.map((r) => basename(r.path)));
-    const parts = [`create: ${names || 'nothing'}`];
-    if (failCount > 0)
-        parts.push(`${String(failCount)} failed`);
-    return parts.join(' \u00b7 ');
-}
 export const CREATE = defineTool({
     name: 'create',
     title: 'Create Files',
@@ -125,11 +104,14 @@ export const CREATE = defineTool({
             files: results,
             ...(failures.length > 0 ? { failures } : {}),
         };
-        const summary = buildSummary(results, failures.length);
+        // No `text` on purpose. The one-line roster this used to build named the
+        // paths and dropped every per-file size, line count and error the caller
+        // asked `create` for. Supplying no text makes this a data tool, so
+        // `define.ts` renders the JSON and keeps it in `structuredContent`.
         if (links.length > 0) {
-            return { structured, text: summary, resources: links };
+            return { structured, resources: links };
         }
-        return { structured, text: summary };
+        return { structured };
     },
     progress: (args) => ({
         label: 'Create',

package/dist/tools/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../src/tools/create.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACL,QAAQ,EACR,WAAW,EACX,SAAS,EACT,iBAAiB,EACjB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,oBAAoB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1C,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC3E,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,kBAAkB,EAAE,EAAE;QACnD,OAAO,EAAE,gDAAgD;KAC1D,CAAC;SACD,QAAQ,CAAC,kCAAkC,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACvE,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC5D,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC/D,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IAC9E,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,CAAC,yEAAyE,CAAC;IACtF,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACvE,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CAClF,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,oBAAoB,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,CAAC,yEAAyE,CAAC;CACvF,CAAC,CAAC;AAIH,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC7E,QAAQ,EAAE,CAAC;SACR,KAAK,CAAC,iBAAiB,CAAC;SACxB,QAAQ,EAAE;SACV,QAAQ,CAAC,yDAAyD,CAAC;CACvE,CAAC,CAAC;AAIH,SAAS,YAAY,CAAC,OAAoC,EAAE,SAAiB;IAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,WAAW,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;gBAClC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;gBACxB,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ;aACpC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,gEAAgE;IAChE,+EAA+E;IAC/E,mBAAmB;IACnB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,CAAC,WAAW,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;IAChD,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC;IAC/B,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,gHAAgH;QAChH,kEAAkE;QAClE,2FAA2F;IAC7F,KAAK,EAAE,iBAAiB;IACxB,MAAM,EAAE,kBAAkB;IAC1B,WAAW,EAAE;QACX,YAAY,EAAE,KAAK;QACnB,cAAc,EAAE,KAAK;QACrB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,KAAK;KACrB;IACD,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,MAAM,YAAY,CAI9B,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EACrB,GAAG,EACH,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;YAExC,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEvD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE;gBAC1D,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC,CAAC;YAEH,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAE3D,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,IAAI,GAAqB;gBAC7B,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,YAAY;gBAClB,SAAS;gBACT,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW;gBACX,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC1C,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE;aACxC,CAAC;YAEF,OAAO,GAAG,CAAC,aAAa;gBACtB,CAAC,CAAC;oBACE,IAAI;oBACJ,YAAY,EAAE,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;iBAChF;gBACH,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACf,CAAC,EACD,EAAE,gBAAgB,EAAE,SAAS,CAAC,OAAO,EAAE,CACxC,CAAC;QAEF,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAwB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChD,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,UAAU,GAAG;YACjB,KAAK,EAAE,OAAO;YACd,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC;QACF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACzD,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnB,KAAK,EAAE,QAAQ;QACf,OAAO,EACL,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YACrC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ;KAC3C,CAAC;IACF,gBAAgB,EAAE,SAAS,CAAC,OAAO;CACpC,CAAC,CAAC","sourcesContent":["import type { ContentBlock } from '@modelcontextprotocol/server';\n\nimport { basename, dirname } from 'node:path';\n\nimport * as z from 'zod/v4';\n\nimport { ErrorCode } from '../core/errors.js';\nimport { buildFileResourceLink, buildFileResourceUri } from '../core/file-uri.js';\nimport { formatBytes, joinRoster } from '../core/fmt.js';\nimport { detectMimeFromContent } from '../core/mime.js';\nimport { countLines } from '../core/read.js';\nimport {\n  FileKind,\n  IsoDateTime,\n  NonNegInt,\n  PathFailureSchema,\n  RequiredPath,\n} from '../core/schema.js';\nimport { getMaxTextFileSize } from '../core/util.js';\nimport { runOverPaths } from './batch.js';\nimport { defineTool } from './define.js';\n\nconst CreateFileItemSchema = z.strictObject({\n  path: RequiredPath.describe('Absolute path where the file will be created'),\n  content: z\n    .string()\n    .refine((val) => val.length <= getMaxTextFileSize(), {\n      message: 'Content exceeds maximum allowed text file size',\n    })\n    .describe('Text content to write, verbatim.'),\n});\n\nconst CreateFileResultSchema = z.strictObject({\n  path: z.string().describe('Resolved absolute path of the created file'),\n  size: NonNegInt.describe('File size in bytes after writing'),\n  lineCount: NonNegInt.describe('Number of lines in the written file'),\n  mimeType: z.string().describe('Detected MIME type of the file'),\n  kind: FileKind.describe('Broad file kind: text, binary, image, audio, or pdf'),\n  resourceUri: z\n    .string()\n    .describe('Resource URI pointing to the created file content in the resource store'),\n  created: IsoDateTime.describe('File creation timestamp (ISO 8601 UTC)'),\n  modified: IsoDateTime.describe('File last-modification timestamp (ISO 8601 UTC)'),\n});\n\nconst CreateInputSchema = z.strictObject({\n  files: z\n    .array(CreateFileItemSchema)\n    .min(1)\n    .max(100)\n    .describe('List of files to create (max 100); each entry requires path and content'),\n});\n\ntype CreateFailureItem = z.infer<typeof PathFailureSchema>;\n\nconst CreateOutputSchema = z.strictObject({\n  files: z.array(CreateFileResultSchema).describe('Successfully created files'),\n  failures: z\n    .array(PathFailureSchema)\n    .optional()\n    .describe('Files that failed to create with per-file error details'),\n});\n\ntype CreateFileResult = z.infer<typeof CreateFileResultSchema>;\n\nfunction buildSummary(results: readonly CreateFileResult[], failCount: number): string {\n  if (results.length === 1 && failCount === 0) {\n    const result = results[0];\n    if (result) {\n      return [\n        `create: ${basename(result.path)}`,\n        formatBytes(result.size),\n        `${String(result.lineCount)} lines`,\n      ].join(' \\u00b7 ');\n    }\n  }\n  // Name what was written. \"create: 3 files\" made the caller open\n  // structuredContent to learn which three \\u2014 every other write tool answers\n  // with its roster.\n  const names = joinRoster(results.map((r) => basename(r.path)));\n  const parts = [`create: ${names || 'nothing'}`];\n  if (failCount > 0) parts.push(`${String(failCount)} failed`);\n  return parts.join(' \\u00b7 ');\n}\n\nexport const CREATE = defineTool({\n  name: 'create',\n  title: 'Create Files',\n  description:\n    'Create one or more files (max 100), writing or overwriting content and creating parent directories as needed. ' +\n    'Pass files: [{ path, content }] — there is no single-path form. ' +\n    'Silently overwrites existing files — read first if you need to preserve existing content.',\n  input: CreateInputSchema,\n  output: CreateOutputSchema,\n  annotations: {\n    readOnlyHint: false,\n    idempotentHint: false,\n    destructiveHint: true,\n    openWorldHint: false,\n  },\n  accessPaths: (args) => args.files.map((f) => f.path),\n  run: async (args, ctx) => {\n    const batch = await runOverPaths<\n      { content: string },\n      { file: CreateFileResult; resourceLink?: ContentBlock }\n    >(\n      { files: args.files },\n      ctx,\n      async ({ path, override }) => {\n        const content = override?.content ?? '';\n\n        await ctx.fs.mkdir(dirname(path), { recursive: true });\n\n        const { validPath } = await ctx.fs.writeFile(path, content, {\n          encoding: 'utf-8',\n          signal: ctx.signal,\n        });\n\n        const { stats: fileStats } = await ctx.fs.stat(path, { signal: ctx.signal });\n        const bytesWritten = Buffer.byteLength(content, 'utf-8');\n        const lineCount = countLines(content);\n        const mimeInfo = detectMimeFromContent(validPath, content);\n\n        const resourceUri = buildFileResourceUri(validPath);\n        const file: CreateFileResult = {\n          path: validPath,\n          size: bytesWritten,\n          lineCount,\n          mimeType: mimeInfo.mimeType,\n          kind: mimeInfo.kind,\n          resourceUri,\n          created: fileStats.birthtime.toISOString(),\n          modified: fileStats.mtime.toISOString(),\n        };\n\n        return ctx.resourceStore\n          ? {\n              file,\n              resourceLink: buildFileResourceLink(validPath, mimeInfo.mimeType, bytesWritten),\n            }\n          : { file };\n      },\n      { defaultErrorCode: ErrorCode.UNKNOWN },\n    );\n\n    const results: CreateFileResult[] = [];\n    const failures: CreateFailureItem[] = [];\n    const links: ContentBlock[] = [];\n    for (const r of batch.results) {\n      if ('error' in r) {\n        failures.push({ path: r.path, error: r.error });\n        continue;\n      }\n      results.push(r.value.file);\n      if (r.value.resourceLink) links.push(r.value.resourceLink);\n    }\n\n    const structured = {\n      files: results,\n      ...(failures.length > 0 ? { failures } : {}),\n    };\n    const summary = buildSummary(results, failures.length);\n\n    if (links.length > 0) {\n      return { structured, text: summary, resources: links };\n    }\n\n    return { structured, text: summary };\n  },\n  progress: (args) => ({\n    label: 'Create',\n    subject:\n      args.files.length === 1\n        ? basename(args.files[0]?.path ?? '')\n        : `${String(args.files.length)} files`,\n  }),\n  defaultErrorCode: ErrorCode.UNKNOWN,\n});\n"]}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../src/tools/create.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACL,QAAQ,EACR,WAAW,EACX,SAAS,EACT,iBAAiB,EACjB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,oBAAoB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1C,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC3E,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,kBAAkB,EAAE,EAAE;QACnD,OAAO,EAAE,gDAAgD;KAC1D,CAAC;SACD,QAAQ,CAAC,kCAAkC,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACvE,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC5D,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC/D,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IAC9E,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,CAAC,yEAAyE,CAAC;IACtF,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACvE,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CAClF,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,oBAAoB,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,CAAC,yEAAyE,CAAC;CACvF,CAAC,CAAC;AAIH,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC7E,QAAQ,EAAE,CAAC;SACR,KAAK,CAAC,iBAAiB,CAAC;SACxB,QAAQ,EAAE;SACV,QAAQ,CAAC,yDAAyD,CAAC;CACvE,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC;IAC/B,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,gHAAgH;QAChH,kEAAkE;QAClE,2FAA2F;IAC7F,KAAK,EAAE,iBAAiB;IACxB,MAAM,EAAE,kBAAkB;IAC1B,WAAW,EAAE;QACX,YAAY,EAAE,KAAK;QACnB,cAAc,EAAE,KAAK;QACrB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,KAAK;KACrB;IACD,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,MAAM,YAAY,CAI9B,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EACrB,GAAG,EACH,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;YAExC,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEvD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE;gBAC1D,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC,CAAC;YAEH,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAE3D,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,IAAI,GAAqB;gBAC7B,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,YAAY;gBAClB,SAAS;gBACT,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW;gBACX,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC1C,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE;aACxC,CAAC;YAEF,OAAO,GAAG,CAAC,aAAa;gBACtB,CAAC,CAAC;oBACE,IAAI;oBACJ,YAAY,EAAE,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;iBAChF;gBACH,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACf,CAAC,EACD,EAAE,gBAAgB,EAAE,SAAS,CAAC,OAAO,EAAE,CACxC,CAAC;QAEF,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAwB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChD,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,UAAU,GAAG;YACjB,KAAK,EAAE,OAAO;YACd,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC;QACF,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,oEAAoE;QACpE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC1C,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,CAAC;IACxB,CAAC;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnB,KAAK,EAAE,QAAQ;QACf,OAAO,EACL,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YACrC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ;KAC3C,CAAC;IACF,gBAAgB,EAAE,SAAS,CAAC,OAAO;CACpC,CAAC,CAAC","sourcesContent":["import type { ContentBlock } from '@modelcontextprotocol/server';\n\nimport { basename, dirname } from 'node:path';\n\nimport * as z from 'zod/v4';\n\nimport { ErrorCode } from '../core/errors.js';\nimport { buildFileResourceLink, buildFileResourceUri } from '../core/file-uri.js';\nimport { detectMimeFromContent } from '../core/mime.js';\nimport { countLines } from '../core/read.js';\nimport {\n  FileKind,\n  IsoDateTime,\n  NonNegInt,\n  PathFailureSchema,\n  RequiredPath,\n} from '../core/schema.js';\nimport { getMaxTextFileSize } from '../core/util.js';\nimport { runOverPaths } from './batch.js';\nimport { defineTool } from './define.js';\n\nconst CreateFileItemSchema = z.strictObject({\n  path: RequiredPath.describe('Absolute path where the file will be created'),\n  content: z\n    .string()\n    .refine((val) => val.length <= getMaxTextFileSize(), {\n      message: 'Content exceeds maximum allowed text file size',\n    })\n    .describe('Text content to write, verbatim.'),\n});\n\nconst CreateFileResultSchema = z.strictObject({\n  path: z.string().describe('Resolved absolute path of the created file'),\n  size: NonNegInt.describe('File size in bytes after writing'),\n  lineCount: NonNegInt.describe('Number of lines in the written file'),\n  mimeType: z.string().describe('Detected MIME type of the file'),\n  kind: FileKind.describe('Broad file kind: text, binary, image, audio, or pdf'),\n  resourceUri: z\n    .string()\n    .describe('Resource URI pointing to the created file content in the resource store'),\n  created: IsoDateTime.describe('File creation timestamp (ISO 8601 UTC)'),\n  modified: IsoDateTime.describe('File last-modification timestamp (ISO 8601 UTC)'),\n});\n\nconst CreateInputSchema = z.strictObject({\n  files: z\n    .array(CreateFileItemSchema)\n    .min(1)\n    .max(100)\n    .describe('List of files to create (max 100); each entry requires path and content'),\n});\n\ntype CreateFailureItem = z.infer<typeof PathFailureSchema>;\n\nconst CreateOutputSchema = z.strictObject({\n  files: z.array(CreateFileResultSchema).describe('Successfully created files'),\n  failures: z\n    .array(PathFailureSchema)\n    .optional()\n    .describe('Files that failed to create with per-file error details'),\n});\n\ntype CreateFileResult = z.infer<typeof CreateFileResultSchema>;\n\nexport const CREATE = defineTool({\n  name: 'create',\n  title: 'Create Files',\n  description:\n    'Create one or more files (max 100), writing or overwriting content and creating parent directories as needed. ' +\n    'Pass files: [{ path, content }] — there is no single-path form. ' +\n    'Silently overwrites existing files — read first if you need to preserve existing content.',\n  input: CreateInputSchema,\n  output: CreateOutputSchema,\n  annotations: {\n    readOnlyHint: false,\n    idempotentHint: false,\n    destructiveHint: true,\n    openWorldHint: false,\n  },\n  accessPaths: (args) => args.files.map((f) => f.path),\n  run: async (args, ctx) => {\n    const batch = await runOverPaths<\n      { content: string },\n      { file: CreateFileResult; resourceLink?: ContentBlock }\n    >(\n      { files: args.files },\n      ctx,\n      async ({ path, override }) => {\n        const content = override?.content ?? '';\n\n        await ctx.fs.mkdir(dirname(path), { recursive: true });\n\n        const { validPath } = await ctx.fs.writeFile(path, content, {\n          encoding: 'utf-8',\n          signal: ctx.signal,\n        });\n\n        const { stats: fileStats } = await ctx.fs.stat(path, { signal: ctx.signal });\n        const bytesWritten = Buffer.byteLength(content, 'utf-8');\n        const lineCount = countLines(content);\n        const mimeInfo = detectMimeFromContent(validPath, content);\n\n        const resourceUri = buildFileResourceUri(validPath);\n        const file: CreateFileResult = {\n          path: validPath,\n          size: bytesWritten,\n          lineCount,\n          mimeType: mimeInfo.mimeType,\n          kind: mimeInfo.kind,\n          resourceUri,\n          created: fileStats.birthtime.toISOString(),\n          modified: fileStats.mtime.toISOString(),\n        };\n\n        return ctx.resourceStore\n          ? {\n              file,\n              resourceLink: buildFileResourceLink(validPath, mimeInfo.mimeType, bytesWritten),\n            }\n          : { file };\n      },\n      { defaultErrorCode: ErrorCode.UNKNOWN },\n    );\n\n    const results: CreateFileResult[] = [];\n    const failures: CreateFailureItem[] = [];\n    const links: ContentBlock[] = [];\n    for (const r of batch.results) {\n      if ('error' in r) {\n        failures.push({ path: r.path, error: r.error });\n        continue;\n      }\n      results.push(r.value.file);\n      if (r.value.resourceLink) links.push(r.value.resourceLink);\n    }\n\n    const structured = {\n      files: results,\n      ...(failures.length > 0 ? { failures } : {}),\n    };\n    // No `text` on purpose. The one-line roster this used to build named the\n    // paths and dropped every per-file size, line count and error the caller\n    // asked `create` for. Supplying no text makes this a data tool, so\n    // `define.ts` renders the JSON and keeps it in `structuredContent`.\n    if (links.length > 0) {\n      return { structured, resources: links };\n    }\n\n    return { structured };\n  },\n  progress: (args) => ({\n    label: 'Create',\n    subject:\n      args.files.length === 1\n        ? basename(args.files[0]?.path ?? '')\n        : `${String(args.files.length)} files`,\n  }),\n  defaultErrorCode: ErrorCode.UNKNOWN,\n});\n"]}

package/dist/tools/define.d.ts

@@ -90,14 +90,6 @@ export interface ToolDef<I extends z.ZodType, O extends z.ZodType> {
      * caller-supplied filesystem paths.
      */
     readonly accessPaths?: (args: z.infer<I>) => readonly string[];
-    /**
-     * Publish `output` as the tool's wire `outputSchema`. Off by default: the
-     * spec makes the field optional and it costs more than every other part of
-     * a tool entry combined. Turn it on only where the shape is not inferable —
-     * a discriminated per-path union, or a field that appears under one flag and
-     * not another. The Zod object still validates every result either way.
-     */
-    readonly publishOutputSchema?: boolean;
     readonly run: (args: z.infer<I>, ctx: ToolCtx) => Promise<RunResult<z.infer<O>> | InputRequiredResult>;
 }
 export interface DefinedTool {

package/dist/tools/define.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../src/tools/define.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,QAAQ,EAER,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EAInB,SAAS,EACT,YAAY,EACZ,cAAc,EACd,WAAW,EACX,oBAAoB,EAEpB,eAAe,EAChB,MAAM,8BAA8B,CAAC;AAOtC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAsC,MAAM,mBAAmB,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AASlD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAItD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;IAClD,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC5E;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC9D;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACzD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;CAC7B;AAED,UAAU,QAAQ;IAChB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;CACnD;AAED,UAAU,SAAS,CAAC,CAAC;IACnB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;CACrC;AAED;;;;GAIG;AACH,KAAK,mBAAmB,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC;AAEhF,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;IACtD,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACvF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,MAAM,EAAE,CAAC;IAC/D;;;;;;OAMG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,GAAG,EAAE,CACZ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAChB,GAAG,EAAE,OAAO,KACT,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAE1C,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,cAAc,CAAC;CAC1C;AA4XD,wBAAgB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO,EACjE,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GACjB,WAAW,CAgDb"}
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../src/tools/define.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,QAAQ,EAER,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EAInB,SAAS,EACT,YAAY,EACZ,cAAc,EACd,WAAW,EACX,oBAAoB,EAEpB,eAAe,EAChB,MAAM,8BAA8B,CAAC;AAOtC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAsC,MAAM,mBAAmB,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AASlD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;IAClD,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC5E;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC9D;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACzD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;CAC7B;AAED,UAAU,QAAQ;IAChB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;CACnD;AAED,UAAU,SAAS,CAAC,CAAC;IACnB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;CACrC;AAED;;;;GAIG;AACH,KAAK,mBAAmB,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC;AAEhF,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;IACtD,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACvF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,MAAM,EAAE,CAAC;IAC/D,QAAQ,CAAC,GAAG,EAAE,CACZ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAChB,GAAG,EAAE,OAAO,KACT,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAE1C,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,cAAc,CAAC;CAC1C;AAsYD,wBAAgB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO,EACjE,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GACjB,WAAW,CA4Cb"}

package/dist/tools/define.js

@@ -94,17 +94,28 @@ function isTotalBatchFailure(structured) {
     return len(result.files) + len(result.moves) + len(result.skipped) === 0;
 }
 /**
- * The spec asks a structured result to *also* carry the JSON as a text block,
- * for clients that read only `content`. Where a tool supplies its own `text`
- * (list's ASCII tree, read's file) that serves such a client better, so it
- * wins; tools with no `text` still fall back to the JSON.
+ * Claude Code — and any client that treats `structuredContent` as the canonical
+ * model view — discards the `text` blocks when `structuredContent` is present,
+ * showing the model `JSON.stringify(structuredContent)` instead. A tool that
+ * authored a text result (list's ASCII tree, read's file) meant that text for
+ * the model, so it ships its metadata under `_meta`, which no client renders in
+ * place of the content. Tools with no `text` keep `structuredContent`: the JSON
+ * *is* their model-facing view.
  */
 function buildSuccessResponse(result) {
+    const hasText = result.text !== undefined;
     const text = result.text ?? JSON.stringify(result.structured);
     const content = [{ type: 'text', text }, ...(result.resources ?? [])];
     return {
         content,
-        structuredContent: result.structured,
+        ...(hasText
+            ? // Safe because every `ToolDef.output` is a Zod object schema, so
+                // `structured` is always a plain object. Constraining `O` to prove it
+                // is not worth the cost: the bound has to thread through five generic
+                // sites and still loses to `exactOptionalPropertyTypes` variance on
+                // `RunResult`'s optional fields.
+                { _meta: result.structured }
+            : { structuredContent: result.structured }),
         ...(isTotalBatchFailure(result.structured) ? { isError: true } : {}),
     };
 }
@@ -122,15 +133,14 @@ class ToolExecutor {
         this.parsedArgs = parsedArgs;
         this.signal = composeSignal(ctx.signal, def.timeoutMs);
         this.#progressCtx = resolveProgressCtx(def, parsedArgs);
-        const sinks = [];
-        if (ctx._meta?.progressToken !== undefined && ctx.sendNotification !== undefined) {
-            this.#mcpSink = new McpProgressSink(toolName, ctx._meta.progressToken, ctx.sendNotification);
-            sinks.push(this.#mcpSink);
+        const token = ctx._meta?.progressToken;
+        if (token !== undefined && ctx.sendNotification !== undefined) {
+            this.#mcpSink = new McpProgressSink(toolName, token, ctx.sendNotification);
         }
         const isTest = process.env['NODE_ENV'] === 'test' || process.execArgv.includes('--test');
         this.#progressSession = new ProgressSession({
             label: this.#progressCtx.label,
-            sinks,
+            ...(this.#mcpSink ? { sink: this.#mcpSink } : {}),
             ...(isTest ? { rateLimitMs: 0 } : {}),
         });
         this.toolCtx = {
@@ -352,7 +362,6 @@ function toDraft202012(schema, io) {
 }
 export function defineTool(def) {
     const inputJsonSchema = toDraft202012(def.input, 'input');
-    const outputJsonSchema = toDraft202012(def.output, 'output');
     // Nothing here depends on `deps`, so it is built once per tool definition
     // rather than once per `register` — the HTTP leg registers every tool afresh
     // on each request.
@@ -372,14 +381,14 @@ export function defineTool(def) {
         title: def.title,
         description: def.description,
         inputSchema: fromJsonSchema(inputJsonSchema, zodJsonSchemaValidator(def.input)),
-        // The validator is built either way — results are still checked against the
-        // Zod object — but the schema reaches the wire only where the shape is not
-        // inferable from the description plus the text content.
-        ...(def.publishOutputSchema
-            ? {
-                outputSchema: fromJsonSchema(outputJsonSchema, zodJsonSchemaValidator(def.output)),
-            }
-            : {}),
+        // No `outputSchema`, ever. Publishing one obliges the result to carry
+        // `structuredContent` (clients enforce it), and every tool that authors its
+        // own text ships its metadata under `_meta` instead — see
+        // `buildSuccessResponse`. The two cannot both hold, and the text is what
+        // the model reads. `TOOL-SURFACE-001` pins this for the whole surface.
+        //
+        // `def.output` stays: it types `RunResult<z.infer<O>>`, which is what makes
+        // a tool returning the wrong shape a compile error.
         annotations: publishedAnnotations,
     };
     const tool = {

package/dist/tools/define.js.map

@@ -1 +1 @@
-{"version":3,"file":"define.js","sourceRoot":"","sources":["../../src/tools/define.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,4BAA4B,EAC5B,cAAc,EACd,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAElF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAGlD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAInD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAyGjE,SAAS,SAAS,CAChB,GAA8B,EAC9B,IAA4E;IAE5E,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC;QAC5C,OAAO;YACL,MAAM;YACN,EAAE,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,4BAA4B;IAC5B,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,QAA+C,CAAC;IAC5E,MAAM,kBAAkB,GACrB,QAAQ,EAAE,CAAC,4BAA4B,CAAoC;QAC5E,wJAAwJ;QACxJ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;IAE7C,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QACzB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,EAAE,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QACzC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACzE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc;QACzC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY;QACrC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAkB,EAClB,IAAgB;IAEhB,IAAI,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,uBAAuB,GAAG,CAAC,IAAI,oBAAoB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAiB,EAAE,SAAkB;IAC1D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,mBAAmB,CAAC,UAAmB;IAC9C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,MAAM,GAAG,UAMd,CAAC;IAEF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,IAAI,OAAO,OAAO,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC;IAC/D,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,2EAA2E;IAC3E,sEAAsE;IACtE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAI,MAAoB;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/F,OAAO;QACL,OAAO;QACP,iBAAiB,EAAE,MAAM,CAAC,UAAU;QACpC,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,MAAM,YAAY;IACP,MAAM,CAAc;IACZ,GAAG,CAAgB;IACnB,UAAU,CAAa;IACvB,OAAO,CAAU;IAElC,eAAe,GAAG,KAAK,CAAC;IACf,YAAY,CAAc;IAC1B,QAAQ,CAAmB;IAC3B,gBAAgB,CAAkB;IAE3C,YAAY,QAAgB,EAAE,GAAY,EAAE,GAAkB,EAAE,UAAsB;QACpF,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,IAAI,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACjF,IAAI,CAAC,QAAQ,GAAG,IAAI,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC7F,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzF,IAAI,CAAC,gBAAgB,GAAG,IAAI,eAAe,CAAC;YAC1C,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK;YAC9B,KAAK;YACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,GAAG;YACN,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,CAAC,KAAmB,EAAE,IAAa,EAAE,MAAe,EAAE,EAAE;gBAC3D,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAsC;QAC1C,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO;QACjC,MAAM,OAAO,GAAgB;YAC3B,GAAG,IAAI,CAAC,YAAY;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAc,EAAE,OAAe;QAClD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAkB;QAC/C,MAAM,OAAO,GAAgB,IAAI,CAAC,GAAG,CAAC,YAAY;YAChD,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE;YAC7E,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;QACtB,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAc;QACvC,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CACxC,KAAK,EACL,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS,CAAC,OAAO,CAC/C,CAAC;QACF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACrD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE7C,sEAAsE;QACtE,wEAAwE;QACxE,iEAAiE;QACjE,+DAA+D;QAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC;YACnC,EAAE,EAAE,OAAO;YACX,OAAO,EAAE,SAAS;YAClB,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB;YACnD,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CACpB,KAAK;gBACH,CAAC,CAAC;oBACE,gBAAgB,CACd,OAAO,EACP,yEAAyE,EACzE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAC1C;iBACF;gBACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAClB,YAAY,CAAC,WAAW,CAAC,EAAE,EAAE,+BAA+B,GAAG,IAAI,CAAC,CACrE;SACR,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,wEAAwE;QACxE,0EAA0E;QAC1E,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,mDAAmD;QACnD,MAAM,QAAQ,GAAG,KAAK;YACpB,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;YACvE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAC3B,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC,CACjE,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAAE,SAAS;YACzD,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,KAAK,IAAmD,EAAE;YACxE,IAAI,CAAC;gBACH,mEAAmE;gBACnE,iEAAiE;gBACjE,oEAAoE;gBACpE,mEAAmE;gBACnE,sCAAsC;gBACtC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;gBACjD,IAAI,aAAa,KAAK,SAAS;oBAAE,OAAO,aAAa,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjE,qEAAqE;gBACrE,gEAAgE;gBAChE,qEAAqE;gBACrE,yDAAyD;gBACzD,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC/C,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;QAEF,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;CACF;AAED,SAAS,uBAAuB,CAC9B,GAAkB,EAClB,IAAc;IAEd,OAAO,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CACzB,IAAI,YAAY,CAAO,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,MAAiB;IAC/C,OAAO;QACL,YAAY;YACV,OAAO,CAAC,KAAc,EAAE,EAAE;gBACxB,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACvC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO;wBACL,KAAK,EAAE,IAAa;wBACpB,IAAI,EAAE,MAAM,CAAC,IAAS;wBACtB,YAAY,EAAE,SAAS;qBACxB,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,KAAK,EAAE,KAAc;oBACrB,IAAI,EAAE,SAAS;oBACf,YAAY,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC5C,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,aAAa,CAAC,MAAiB,EAAE,EAAsB;IAC9D,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE;QACvC,MAAM,EAAE,eAAe;QACvB,EAAE;QACF,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,UAAqC,CAAC;YACnD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,gBAAgB;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC;KACF,CAA4B,CAAC;IAC9B,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;IAC5B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,GAAkB;IAElB,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE7D,0EAA0E;IAC1E,6EAA6E;IAC7E,mBAAmB;IACnB,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,oBAAoB,GAAoB;QAC5C,YAAY,EAAE,GAAG,CAAC,WAAW,CAAC,YAAY;QAC1C,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC,aAAa,IAAI,KAAK;QACrD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY;YAC9B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,WAAW,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;KAClE,CAAC;IAEF,MAAM,YAAY,GAAG;QACnB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,cAAc,CAAa,eAAe,EAAE,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3F,4EAA4E;QAC5E,2EAA2E;QAC3E,wDAAwD;QACxD,GAAG,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC;gBACE,YAAY,EAAE,cAAc,CAC1B,gBAAgB,EAChB,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CACnC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,oBAAoB;KAClC,CAAC;IAEF,MAAM,IAAI,GAAgB;QACxB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAE5B,QAAQ,CAAC,IAAc;YACrB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9F,CAAC;KACF,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type {\n  AuthInfo,\n  CallToolResult,\n  ClientCapabilities,\n  ContentBlock,\n  InputRequiredResult,\n  JsonSchemaType,\n  JsonSchemaValidator,\n  jsonSchemaValidator,\n  McpServer,\n  Notification,\n  RegisteredTool,\n  RequestMeta,\n  RequestStateAccessor,\n  ServerContext,\n  ToolAnnotations,\n} from '@modelcontextprotocol/server';\nimport {\n  CLIENT_CAPABILITIES_META_KEY,\n  fromJsonSchema,\n  isInputRequiredResult,\n} from '@modelcontextprotocol/server';\n\nimport * as z from 'zod/v4';\n\nimport { ErrorCode, formatUnknownErrorMessage, Problem } from '../core/errors.js';\nimport type { ProgressCtx } from '../core/fmt.js';\nimport { plainMessage } from '../core/fmt.js';\nimport { GuardedFileSystem } from '../core/fs.js';\nimport {\n  confirmInput,\n  multiSelectInput,\n  pendingRoundTrip,\n  readAcceptedConfirm,\n  readAcceptedMultiChoice,\n} from '../core/input-required.js';\nimport { Logger } from '../core/observability.js';\nimport type { LoggingLevel } from '../core/observability.js';\nimport type { PageSnapshotStore } from '../core/page-store.js';\nimport { isSamePath } from '../core/path-utils.js';\nimport type { PathGuard } from '../core/path.js';\nimport type { ResourceStore } from '../core/store.js';\nimport type { ProgressSink } from './progress.js';\nimport { McpProgressSink, ProgressSession } from './progress.js';\n\nexport interface ToolCtx {\n  readonly signal: AbortSignal;\n  readonly sessionId?: string;\n  readonly authInfo?: AuthInfo;\n  readonly _meta?: RequestMeta | undefined;\n  readonly fs: GuardedFileSystem;\n  readonly pageStore: PageSnapshotStore;\n  readonly resourceStore: ResourceStore | undefined;\n  /** Emits a log line to stderr via `Logger.emit`, gated by `LOG_LEVEL`. */\n  readonly log?: (level: LoggingLevel, data: unknown, logger?: string) => void;\n  readonly sendNotification?: (notification: Notification) => Promise<void>;\n  readonly onProgress?: (params: { current: number; total?: number }) => void;\n  /**\n   * Multi-round-trip `inputResponses` carried by a retried `tools/call`\n   * (protocol revision 2026-07-28); `undefined` on the first round. Bare,\n   * unvalidated client values — handlers read them through\n   * `readAcceptedConfirm`.\n   */\n  readonly inputResponses?: Record<string, unknown> | undefined;\n  /**\n   * Reads the verified multi-round-trip `requestState` for the current round:\n   * the decoded `PendingState` the `requestStateCodec` verified, or `undefined`\n   * when the round carried no state (the first round). `undefined` when no\n   * live request context is available.\n   */\n  readonly requestState?: RequestStateAccessor | undefined;\n  /**\n   * What the connected client declared it can do, or `undefined` when this\n   * connection cannot say. Read by the `input_required` flows: an embedded\n   * elicitation sent to a client that never declared `elicitation` is rejected\n   * by the SDK with `-32021` before it reaches the wire, so the handlers check\n   * first and answer with an actionable tool error instead.\n   *\n   * Two sources, because the eras differ: a legacy connection negotiated them\n   * at `initialize` (`Server.getClientCapabilities()`), a modern one carries\n   * them per request in the `_meta` envelope and never runs `initialize` at\n   * all. `undefined` means \"cannot tell\" — never \"no capabilities\".\n   */\n  readonly clientCapabilities?: ClientCapabilities | undefined;\n  readonly server?: McpServer;\n}\n\ninterface ToolDeps {\n  readonly server: McpServer;\n  readonly pathGuard: PathGuard;\n  readonly pageStore: PageSnapshotStore;\n  readonly resourceStore: ResourceStore | undefined;\n}\n\ninterface RunResult<T> {\n  readonly structured: T;\n  readonly text?: string;\n  readonly resources?: ContentBlock[];\n}\n\n/**\n * `ToolAnnotations` with `readOnlyHint` required. It is optional in the SDK, but\n * MUTATING_TOOL_NAMES derives the `--read-only` gate from it, so a tool that\n * forgets it must be a compile error rather than a silent reclassification.\n */\ntype DeclaredAnnotations = ToolAnnotations & { readonly readOnlyHint: boolean };\n\nexport interface ToolDef<I extends z.ZodType, O extends z.ZodType> {\n  readonly name: string;\n  readonly title: string;\n  readonly description: string;\n  readonly input: I;\n  readonly output: O;\n  readonly annotations: DeclaredAnnotations;\n  readonly timeoutMs?: number;\n  readonly progress?: (args: z.infer<I>) => ProgressCtx;\n  readonly progressDone?: (args: z.infer<I>, result: z.infer<O>) => Partial<ProgressCtx>;\n  readonly defaultErrorCode?: ErrorCode;\n  /**\n   * The filesystem paths this tool will operate on, extracted from its parsed\n   * args. The executor runs an access-grant pre-check over these BEFORE `run`\n   * (R7): any path outside the granted roots yields an `input_required`\n   * round-trip requesting a grant, and nothing is touched until the client\n   * retries with an accepted grant (R8). Omit for tools that do not operate on\n   * caller-supplied filesystem paths.\n   */\n  readonly accessPaths?: (args: z.infer<I>) => readonly string[];\n  /**\n   * Publish `output` as the tool's wire `outputSchema`. Off by default: the\n   * spec makes the field optional and it costs more than every other part of\n   * a tool entry combined. Turn it on only where the shape is not inferable —\n   * a discriminated per-path union, or a field that appears under one flag and\n   * not another. The Zod object still validates every result either way.\n   */\n  readonly publishOutputSchema?: boolean;\n  readonly run: (\n    args: z.infer<I>,\n    ctx: ToolCtx,\n  ) => Promise<RunResult<z.infer<O>> | InputRequiredResult>;\n}\n\nexport interface DefinedTool {\n  readonly name: string;\n  readonly annotations: DeclaredAnnotations;\n\n  register(deps: ToolDeps): RegisteredTool;\n}\n\nfunction toToolCtx(\n  ctx: ServerContext | undefined,\n  deps: Pick<ToolDeps, 'pathGuard' | 'pageStore' | 'resourceStore' | 'server'>,\n): ToolCtx {\n  if (!ctx) {\n    const signal = new AbortController().signal;\n    return {\n      signal,\n      fs: new GuardedFileSystem(deps.pathGuard),\n      pageStore: deps.pageStore,\n      resourceStore: deps.resourceStore,\n      server: deps.server,\n    };\n  }\n  // Envelope first, accessor second — the two eras carry this differently.\n  // A modern request states the capabilities in its own `_meta` envelope; a\n  // legacy connection fixed them at `initialize` and has no envelope at all.\n  // The deprecated accessor still answers for both today (the SDK backfills it\n  // per request from the validated envelope on modern instances), but reading\n  // the envelope directly is the supported path, so it leads: when the accessor\n  // goes, legacy degrades to \"cannot tell\", which fails open to the behavior\n  // that predates this check.\n  //\n  // The cast is the SDK's shipped `RequestMetaEnvelope` declaration collapsing\n  // to `{}` — the reserved keys survive at runtime but not in the .d.ts, so the\n  // key constant cannot index the declared type.\n  const envelope = ctx.mcpReq.envelope as Record<string, unknown> | undefined;\n  const clientCapabilities =\n    (envelope?.[CLIENT_CAPABILITIES_META_KEY] as ClientCapabilities | undefined) ??\n    // eslint-disable-next-line @typescript-eslint/no-deprecated -- the only source of client capabilities on a legacy connection, where no envelope exists.\n    deps.server.server.getClientCapabilities();\n\n  return {\n    signal: ctx.mcpReq.signal,\n    ...(ctx.sessionId ? { sessionId: ctx.sessionId } : {}),\n    ...(ctx.http?.authInfo ? { authInfo: ctx.http.authInfo } : {}),\n    ...(ctx.mcpReq._meta ? { _meta: ctx.mcpReq._meta } : {}),\n    fs: new GuardedFileSystem(deps.pathGuard),\n    pageStore: deps.pageStore,\n    resourceStore: deps.resourceStore,\n    sendNotification: async (notification) => ctx.mcpReq.notify(notification),\n    inputResponses: ctx.mcpReq.inputResponses,\n    requestState: ctx.mcpReq.requestState,\n    ...(clientCapabilities ? { clientCapabilities } : {}),\n    server: deps.server,\n  };\n}\n\nfunction resolveProgressCtx<I extends z.ZodType, O extends z.ZodType>(\n  def: ToolDef<I, O>,\n  args: z.infer<I>,\n): ProgressCtx {\n  if (!def.progress) return { label: def.title };\n  try {\n    return def.progress(args);\n  } catch (err: unknown) {\n    Logger.warn(`resolveProgressCtx: ${def.name}.progress threw: ${String(err)}`);\n    return { label: def.title };\n  }\n}\n\nfunction composeSignal(base: AbortSignal, timeoutMs?: number): AbortSignal {\n  if (!timeoutMs) return base;\n  return AbortSignal.any([base, AbortSignal.timeout(timeoutMs)]);\n}\n\n/**\n * A batch result where every path failed. The call produced no work at all, so\n * it is a failed call — `isError` must say so. Partial failure is deliberately\n * NOT an error: the per-path entries carry which paths failed and the succeeded\n * ones really were done.\n *\n * Two result shapes reach here. Most batch tools carry a `summary`. `create` and\n * `move` do not: they publish `{files|moves, failures, skipped}` (see\n * create.ts's CreateOutputSchema and move.ts's MoveOutputSchema), so a\n * summary-only check reported a fully-denied write as a successful call. Both\n * shapes are handled here rather than by growing the two output schemas, which\n * are the client-facing contract.\n */\nfunction isTotalBatchFailure(structured: unknown): boolean {\n  if (typeof structured !== 'object' || structured === null) return false;\n  const result = structured as {\n    summary?: { total?: number; failed?: number };\n    failures?: unknown;\n    files?: unknown;\n    moves?: unknown;\n    skipped?: unknown;\n  };\n\n  const { summary } = result;\n  if (typeof summary?.total === 'number') {\n    return summary.total > 0 && summary.failed === summary.total;\n  }\n\n  const len = (value: unknown): number => (Array.isArray(value) ? value.length : 0);\n  if (len(result.failures) === 0) return false;\n  // A skipped entry is work the caller asked to skip, not work that failed —\n  // a self-move that was silently dropped means the call did something.\n  return len(result.files) + len(result.moves) + len(result.skipped) === 0;\n}\n\n/**\n * The spec asks a structured result to *also* carry the JSON as a text block,\n * for clients that read only `content`. Where a tool supplies its own `text`\n * (list's ASCII tree, read's file) that serves such a client better, so it\n * wins; tools with no `text` still fall back to the JSON.\n */\nfunction buildSuccessResponse<O>(result: RunResult<O>): CallToolResult {\n  const text = result.text ?? JSON.stringify(result.structured);\n  const content: ContentBlock[] = [{ type: 'text' as const, text }, ...(result.resources ?? [])];\n  return {\n    content,\n    structuredContent: result.structured,\n    ...(isTotalBatchFailure(result.structured) ? { isError: true } : {}),\n  };\n}\n\nclass ToolExecutor<I extends z.ZodType, O extends z.ZodType> {\n  readonly signal: AbortSignal;\n  private readonly def: ToolDef<I, O>;\n  private readonly parsedArgs: z.infer<I>;\n  private readonly toolCtx: ToolCtx;\n\n  #progressClosed = false;\n  readonly #progressCtx: ProgressCtx;\n  readonly #mcpSink?: McpProgressSink;\n  readonly #progressSession: ProgressSession;\n\n  constructor(toolName: string, ctx: ToolCtx, def: ToolDef<I, O>, parsedArgs: z.infer<I>) {\n    this.def = def;\n    this.parsedArgs = parsedArgs;\n    this.signal = composeSignal(ctx.signal, def.timeoutMs);\n    this.#progressCtx = resolveProgressCtx(def, parsedArgs);\n    const sinks: ProgressSink[] = [];\n    if (ctx._meta?.progressToken !== undefined && ctx.sendNotification !== undefined) {\n      this.#mcpSink = new McpProgressSink(toolName, ctx._meta.progressToken, ctx.sendNotification);\n      sinks.push(this.#mcpSink);\n    }\n    const isTest = process.env['NODE_ENV'] === 'test' || process.execArgv.includes('--test');\n    this.#progressSession = new ProgressSession({\n      label: this.#progressCtx.label,\n      sinks,\n      ...(isTest ? { rateLimitMs: 0 } : {}),\n    });\n    this.toolCtx = {\n      ...ctx,\n      signal: this.signal,\n      log: (level: LoggingLevel, data: unknown, logger?: string) => {\n        const msg = typeof data === 'string' ? data : String(data);\n        const prefix = logger ? `[${logger}] ` : '';\n        Logger.emit(level, `${prefix}${msg}`);\n      },\n      onProgress: (p) => {\n        this.#tick(p);\n      },\n    };\n  }\n\n  #tick(p: { current: number; total?: number }): void {\n    if (this.#progressClosed) return;\n    const tickCtx: ProgressCtx = {\n      ...this.#progressCtx,\n      current: p.current,\n      ...(p.total !== undefined ? { total: p.total } : {}),\n    };\n    this.#progressSession.set({ ...p, message: plainMessage('tick', tickCtx) });\n  }\n\n  async #closeWithDone(message: string): Promise<void> {\n    this.#progressClosed = true;\n    this.#progressSession.complete(message);\n    if (this.#mcpSink) await this.#mcpSink.flush();\n  }\n\n  async #closeWithFail(error: unknown, message: string): Promise<void> {\n    this.#progressClosed = true;\n    this.#progressSession.fail(error, message);\n    if (this.#mcpSink) await this.#mcpSink.flush();\n  }\n\n  async #flushProgress(): Promise<void> {\n    if (this.#mcpSink) await this.#mcpSink.flush();\n  }\n\n  private async completeProgress(result: z.infer<O>): Promise<void> {\n    const doneCtx: ProgressCtx = this.def.progressDone\n      ? { ...this.#progressCtx, ...this.def.progressDone(this.parsedArgs, result) }\n      : this.#progressCtx;\n    await this.#closeWithDone(plainMessage('done', doneCtx));\n  }\n\n  private async failProgress(error: unknown): Promise<{ isError: true; content: ContentBlock[] }> {\n    const errMsg = formatUnknownErrorMessage(error);\n    const message = plainMessage('fail', { ...this.#progressCtx, error: errMsg });\n    await this.#closeWithFail(error, message);\n    const { text: errorText } = Problem.toText(\n      error,\n      this.def.defaultErrorCode ?? ErrorCode.UNKNOWN,\n    );\n    return {\n      content: [{ type: 'text' as const, text: errorText }],\n      isError: true,\n    };\n  }\n\n  /**\n   * Access-grant pre-check (R7/R8/R9). Before `run` touches the filesystem,\n   * ask PathGuard which of the tool's declared paths are out-of-root and\n   * grantable. If any are and this round carries no verified `requestState`,\n   * return `input_required` (nothing is read or written — R7). On retry, the\n   * verified state must bind this grant set (R9); apply each accepted grant for\n   * the session (R8) and proceed. A declined or ungrantable path is left for\n   * `validateAccess` to fail closed during the operation. Returns `undefined`\n   * when no round-trip is needed and any applicable grants have been applied.\n   */\n  private async precheckGrant(): Promise<InputRequiredResult | undefined> {\n    const extract = this.def.accessPaths;\n    if (!extract) return undefined;\n    const paths = extract(this.parsedArgs);\n    if (paths.length === 0) return undefined;\n    const grantDirs = await this.toolCtx.fs.pathGuard.precheckAccess(paths);\n    if (grantDirs.length === 0) return undefined;\n\n    // One grant dir: a single boolean confirm. Multiple: one multi-select\n    // elicitation so the client picks the subset to allow in one round-trip\n    // (N dirs → 1 round-trip, not N). `pendingRoundTrip` still binds\n    // `paths: grantDirs` sorted, so R9 path-binding is unaffected.\n    const multi = grantDirs.length > 1;\n    const round = await pendingRoundTrip({\n      op: 'grant',\n      pending: grantDirs,\n      requestState: this.toolCtx.requestState,\n      clientCapabilities: this.toolCtx.clientCapabilities,\n      buildInputs: (dirs) =>\n        multi\n          ? [\n              multiSelectInput(\n                'grant',\n                'Grant filesystem access to these directories? Select the ones to allow.',\n                dirs.map((d) => ({ value: d, title: d })),\n              ),\n            ]\n          : dirs.map((dir, i) =>\n              confirmInput(`confirm_${i}`, `Grant filesystem access to \"${dir}\"?`),\n            ),\n    });\n    if (round !== undefined) return round;\n    // Apply accepted grants for the session (R8). Declined/missing dirs are\n    // skipped here; their paths fail with ACCESS_DENIED during the operation.\n    //\n    // No list-changed notification follows: a grant widens the allowed roots,\n    // and no resource list reads them. The instructions resource has a fixed\n    // URI, the result template lists the ResourceStore, and the file template\n    // lists nothing at all (see resources.ts). Notifying here only bought the\n    // client a round trip to re-fetch a list that could not have changed.\n    //\n    // `readAcceptedMultiChoice` does NOT validate against the offered choices\n    // (attacker-controlled inputResponses on re-entry). Only grant dirs that\n    // were actually offered by precheckAccess — a value outside grantDirs is\n    // ignored and fails closed in validateAccess. The single-select path reads\n    // `confirm_${i}` for `grantDirs[i]`, so the isSamePath filter is a no-op\n    // there; it only bites for the multi-select array.\n    const accepted = multi\n      ? (readAcceptedMultiChoice(this.toolCtx.inputResponses, 'grant') ?? [])\n      : grantDirs.filter((_dir, i) =>\n          readAcceptedConfirm(this.toolCtx.inputResponses, `confirm_${i}`),\n        );\n    for (const dir of accepted) {\n      if (!grantDirs.some((g) => isSamePath(g, dir))) continue;\n      await this.toolCtx.fs.pathGuard.applyGrant(dir);\n    }\n    return undefined;\n  }\n\n  async execute(): Promise<CallToolResult | InputRequiredResult> {\n    const runTool = async (): Promise<CallToolResult | InputRequiredResult> => {\n      try {\n        // Access-grant pre-check before any filesystem touch (R7/R8/R9). A\n        // grant input_required short-circuits here (progress paused, not\n        // finished); an R9 mismatch throws, which this catch surfaces as an\n        // isError tool result like every other handler failure — not a raw\n        // JSON-RPC error (GRANT-1 impact #2).\n        const grantRequired = await this.precheckGrant();\n        if (grantRequired !== undefined) return grantRequired;\n        const result = await this.def.run(this.parsedArgs, this.toolCtx);\n        // input_required is a return value, not a completed call: the client\n        // retries the same tools/call carrying inputResponses, and this\n        // handler re-enters from the top. Skip the progress \"done\" close and\n        // return it verbatim — progress is paused, not finished.\n        if (isInputRequiredResult(result)) {\n          return result;\n        }\n        await this.completeProgress(result.structured);\n        return buildSuccessResponse(result);\n      } catch (error) {\n        return await this.failProgress(error);\n      } finally {\n        await this.#flushProgress();\n      }\n    };\n\n    return runTool();\n  }\n}\n\nfunction createServerToolHandler<I extends z.ZodType, O extends z.ZodType>(\n  def: ToolDef<I, O>,\n  deps: ToolDeps,\n): (args: z.infer<I>, ctx: ServerContext) => Promise<CallToolResult | InputRequiredResult> {\n  return async (args, ctx) =>\n    new ToolExecutor<I, O>(def.name, toToolCtx(ctx, deps), def, args).execute();\n}\n\n/**\n * Validate with Zod while publishing the precomputed JSON Schema: clients get\n * draft-2020-12, handlers get Zod's coercions, defaults and error messages.\n *\n * Each validator instance is built for exactly one schema and handed straight\n * to `fromJsonSchema(thatSchema, ...)`, which calls `getValidator` once with\n * the same schema — so the argument is redundant here and deliberately ignored.\n * Reusing one instance across schemas would silently validate against `schema`.\n */\nfunction zodJsonSchemaValidator(schema: z.ZodType): jsonSchemaValidator {\n  return {\n    getValidator<U>(): JsonSchemaValidator<U> {\n      return (input: unknown) => {\n        const result = schema.safeParse(input);\n        if (result.success) {\n          return {\n            valid: true as const,\n            data: result.data as U,\n            errorMessage: undefined,\n          };\n        }\n        return {\n          valid: false as const,\n          data: undefined,\n          errorMessage: z.prettifyError(result.error),\n        };\n      };\n    },\n  };\n}\n\n/**\n * Generate the wire copy of a schema for `tools/list`. The Zod schema keeps\n * every constraint for runtime validation; the `override` pass only trims what\n * the wire copy costs every client at session start:\n *\n * - `$schema` and `title` carry no information the host uses.\n * - `maximum: Number.MAX_SAFE_INTEGER` is zod's int() artifact, not a bound.\n * - `examples` is dropped in both directions: on output it describes a field the\n *   server itself fills in, and on input every description that carried one\n *   already spells the same example out inline, so the keyword paid twice.\n *\n * Output `description`s are NOT dropped. They were, and the result was a wire\n * contract the model had to guess at: `delete` returns `path` XOR `paths`,\n * `edit.diff` appears only under dryRun, `read.value` has no required field at\n * all. None of that is inferable from types alone.\n *\n * No shared subschema carries a `.meta({ id })`, so zod inlines every one of\n * them and the emitted document has no `$defs`/`$ref` to dereference.\n */\nfunction toDraft202012(schema: z.ZodType, io: 'input' | 'output'): JsonSchemaType {\n  const generated = z.toJSONSchema(schema, {\n    target: 'draft-2020-12',\n    io,\n    override: ({ jsonSchema }) => {\n      const node = jsonSchema as Record<string, unknown>;\n      delete node['title'];\n      if (node['maximum'] === Number.MAX_SAFE_INTEGER) delete node['maximum'];\n      delete node['examples'];\n    },\n  }) as Record<string, unknown>;\n  delete generated['$schema'];\n  return generated;\n}\n\nexport function defineTool<I extends z.ZodType, O extends z.ZodType>(\n  def: ToolDef<I, O>,\n): DefinedTool {\n  const inputJsonSchema = toDraft202012(def.input, 'input');\n  const outputJsonSchema = toDraft202012(def.output, 'output');\n\n  // Nothing here depends on `deps`, so it is built once per tool definition\n  // rather than once per `register` — the HTTP leg registers every tool afresh\n  // on each request.\n  // Published annotations are derived, not passed through. `readOnlyHint` is\n  // load-bearing (MUTATING_TOOL_NAMES derives the --read-only gate from it) and\n  // `openWorldHint: false` is a real claim for a filesystem server. The other\n  // two describe behavior a read-only tool cannot have, and restate the default\n  // for a mutating one — 29 tokens per tool for nothing a client acts on.\n  const publishedAnnotations: ToolAnnotations = {\n    readOnlyHint: def.annotations.readOnlyHint,\n    openWorldHint: def.annotations.openWorldHint ?? false,\n    ...(def.annotations.readOnlyHint\n      ? {}\n      : { destructiveHint: def.annotations.destructiveHint ?? true }),\n  };\n\n  const toolDefShape = {\n    title: def.title,\n    description: def.description,\n    inputSchema: fromJsonSchema<z.infer<I>>(inputJsonSchema, zodJsonSchemaValidator(def.input)),\n    // The validator is built either way — results are still checked against the\n    // Zod object — but the schema reaches the wire only where the shape is not\n    // inferable from the description plus the text content.\n    ...(def.publishOutputSchema\n      ? {\n          outputSchema: fromJsonSchema<z.infer<O>>(\n            outputJsonSchema,\n            zodJsonSchemaValidator(def.output),\n          ),\n        }\n      : {}),\n    annotations: publishedAnnotations,\n  };\n\n  const tool: DefinedTool = {\n    name: def.name,\n    annotations: def.annotations,\n\n    register(deps: ToolDeps): RegisteredTool {\n      return deps.server.registerTool(def.name, toolDefShape, createServerToolHandler(def, deps));\n    },\n  };\n\n  return tool;\n}\n"]}
+{"version":3,"file":"define.js","sourceRoot":"","sources":["../../src/tools/define.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,4BAA4B,EAC5B,cAAc,EACd,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAElF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAGlD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAiGjE,SAAS,SAAS,CAChB,GAA8B,EAC9B,IAA4E;IAE5E,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC;QAC5C,OAAO;YACL,MAAM;YACN,EAAE,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,4BAA4B;IAC5B,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,QAA+C,CAAC;IAC5E,MAAM,kBAAkB,GACrB,QAAQ,EAAE,CAAC,4BAA4B,CAAoC;QAC5E,wJAAwJ;QACxJ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;IAE7C,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QACzB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,EAAE,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QACzC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACzE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc;QACzC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY;QACrC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAkB,EAClB,IAAgB;IAEhB,IAAI,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,uBAAuB,GAAG,CAAC,IAAI,oBAAoB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAiB,EAAE,SAAkB;IAC1D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,mBAAmB,CAAC,UAAmB;IAC9C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,MAAM,GAAG,UAMd,CAAC;IAEF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,IAAI,OAAO,OAAO,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC;IAC/D,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,2EAA2E;IAC3E,sEAAsE;IACtE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAI,MAAoB;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/F,OAAO;QACL,OAAO;QACP,GAAG,CAAC,OAAO;YACT,CAAC,CAAC,iEAAiE;gBACjE,sEAAsE;gBACtE,sEAAsE;gBACtE,oEAAoE;gBACpE,iCAAiC;gBACjC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAqC,EAAE;YACzD,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAC7C,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,MAAM,YAAY;IACP,MAAM,CAAc;IACZ,GAAG,CAAgB;IACnB,UAAU,CAAa;IACvB,OAAO,CAAU;IAElC,eAAe,GAAG,KAAK,CAAC;IACf,YAAY,CAAc;IAC1B,QAAQ,CAAmB;IAC3B,gBAAgB,CAAkB;IAE3C,YAAY,QAAgB,EAAE,GAAY,EAAE,GAAkB,EAAE,UAAsB;QACpF,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC9D,IAAI,CAAC,QAAQ,GAAG,IAAI,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzF,IAAI,CAAC,gBAAgB,GAAG,IAAI,eAAe,CAAC;YAC1C,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK;YAC9B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,GAAG;YACN,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,CAAC,KAAmB,EAAE,IAAa,EAAE,MAAe,EAAE,EAAE;gBAC3D,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAsC;QAC1C,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO;QACjC,MAAM,OAAO,GAAgB;YAC3B,GAAG,IAAI,CAAC,YAAY;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAc,EAAE,OAAe;QAClD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAkB;QAC/C,MAAM,OAAO,GAAgB,IAAI,CAAC,GAAG,CAAC,YAAY;YAChD,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE;YAC7E,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;QACtB,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAc;QACvC,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CACxC,KAAK,EACL,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS,CAAC,OAAO,CAC/C,CAAC;QACF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACrD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE7C,sEAAsE;QACtE,wEAAwE;QACxE,iEAAiE;QACjE,+DAA+D;QAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC;YACnC,EAAE,EAAE,OAAO;YACX,OAAO,EAAE,SAAS;YAClB,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB;YACnD,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CACpB,KAAK;gBACH,CAAC,CAAC;oBACE,gBAAgB,CACd,OAAO,EACP,yEAAyE,EACzE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAC1C;iBACF;gBACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAClB,YAAY,CAAC,WAAW,CAAC,EAAE,EAAE,+BAA+B,GAAG,IAAI,CAAC,CACrE;SACR,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,wEAAwE;QACxE,0EAA0E;QAC1E,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,mDAAmD;QACnD,MAAM,QAAQ,GAAG,KAAK;YACpB,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;YACvE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAC3B,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC,CACjE,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAAE,SAAS;YACzD,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,KAAK,IAAmD,EAAE;YACxE,IAAI,CAAC;gBACH,mEAAmE;gBACnE,iEAAiE;gBACjE,oEAAoE;gBACpE,mEAAmE;gBACnE,sCAAsC;gBACtC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;gBACjD,IAAI,aAAa,KAAK,SAAS;oBAAE,OAAO,aAAa,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjE,qEAAqE;gBACrE,gEAAgE;gBAChE,qEAAqE;gBACrE,yDAAyD;gBACzD,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC/C,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;QAEF,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;CACF;AAED,SAAS,uBAAuB,CAC9B,GAAkB,EAClB,IAAc;IAEd,OAAO,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CACzB,IAAI,YAAY,CAAO,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,MAAiB;IAC/C,OAAO;QACL,YAAY;YACV,OAAO,CAAC,KAAc,EAAE,EAAE;gBACxB,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACvC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO;wBACL,KAAK,EAAE,IAAa;wBACpB,IAAI,EAAE,MAAM,CAAC,IAAS;wBACtB,YAAY,EAAE,SAAS;qBACxB,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,KAAK,EAAE,KAAc;oBACrB,IAAI,EAAE,SAAS;oBACf,YAAY,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC5C,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,aAAa,CAAC,MAAiB,EAAE,EAAsB;IAC9D,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE;QACvC,MAAM,EAAE,eAAe;QACvB,EAAE;QACF,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,UAAqC,CAAC;YACnD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,gBAAgB;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC;KACF,CAA4B,CAAC;IAC9B,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;IAC5B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,GAAkB;IAElB,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAE1D,0EAA0E;IAC1E,6EAA6E;IAC7E,mBAAmB;IACnB,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,oBAAoB,GAAoB;QAC5C,YAAY,EAAE,GAAG,CAAC,WAAW,CAAC,YAAY;QAC1C,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC,aAAa,IAAI,KAAK;QACrD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY;YAC9B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,WAAW,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;KAClE,CAAC;IAEF,MAAM,YAAY,GAAG;QACnB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,cAAc,CAAa,eAAe,EAAE,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3F,sEAAsE;QACtE,4EAA4E;QAC5E,0DAA0D;QAC1D,yEAAyE;QACzE,uEAAuE;QACvE,EAAE;QACF,4EAA4E;QAC5E,oDAAoD;QACpD,WAAW,EAAE,oBAAoB;KAClC,CAAC;IAEF,MAAM,IAAI,GAAgB;QACxB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAE5B,QAAQ,CAAC,IAAc;YACrB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9F,CAAC;KACF,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type {\n  AuthInfo,\n  CallToolResult,\n  ClientCapabilities,\n  ContentBlock,\n  InputRequiredResult,\n  JsonSchemaType,\n  JsonSchemaValidator,\n  jsonSchemaValidator,\n  McpServer,\n  Notification,\n  RegisteredTool,\n  RequestMeta,\n  RequestStateAccessor,\n  ServerContext,\n  ToolAnnotations,\n} from '@modelcontextprotocol/server';\nimport {\n  CLIENT_CAPABILITIES_META_KEY,\n  fromJsonSchema,\n  isInputRequiredResult,\n} from '@modelcontextprotocol/server';\n\nimport * as z from 'zod/v4';\n\nimport { ErrorCode, formatUnknownErrorMessage, Problem } from '../core/errors.js';\nimport type { ProgressCtx } from '../core/fmt.js';\nimport { plainMessage } from '../core/fmt.js';\nimport { GuardedFileSystem } from '../core/fs.js';\nimport {\n  confirmInput,\n  multiSelectInput,\n  pendingRoundTrip,\n  readAcceptedConfirm,\n  readAcceptedMultiChoice,\n} from '../core/input-required.js';\nimport { Logger } from '../core/observability.js';\nimport type { LoggingLevel } from '../core/observability.js';\nimport type { PageSnapshotStore } from '../core/page-store.js';\nimport { isSamePath } from '../core/path-utils.js';\nimport type { PathGuard } from '../core/path.js';\nimport type { ResourceStore } from '../core/store.js';\nimport { McpProgressSink, ProgressSession } from './progress.js';\n\nexport interface ToolCtx {\n  readonly signal: AbortSignal;\n  readonly sessionId?: string;\n  readonly authInfo?: AuthInfo;\n  readonly _meta?: RequestMeta | undefined;\n  readonly fs: GuardedFileSystem;\n  readonly pageStore: PageSnapshotStore;\n  readonly resourceStore: ResourceStore | undefined;\n  /** Emits a log line to stderr via `Logger.emit`, gated by `LOG_LEVEL`. */\n  readonly log?: (level: LoggingLevel, data: unknown, logger?: string) => void;\n  readonly sendNotification?: (notification: Notification) => Promise<void>;\n  readonly onProgress?: (params: { current: number; total?: number }) => void;\n  /**\n   * Multi-round-trip `inputResponses` carried by a retried `tools/call`\n   * (protocol revision 2026-07-28); `undefined` on the first round. Bare,\n   * unvalidated client values — handlers read them through\n   * `readAcceptedConfirm`.\n   */\n  readonly inputResponses?: Record<string, unknown> | undefined;\n  /**\n   * Reads the verified multi-round-trip `requestState` for the current round:\n   * the decoded `PendingState` the `requestStateCodec` verified, or `undefined`\n   * when the round carried no state (the first round). `undefined` when no\n   * live request context is available.\n   */\n  readonly requestState?: RequestStateAccessor | undefined;\n  /**\n   * What the connected client declared it can do, or `undefined` when this\n   * connection cannot say. Read by the `input_required` flows: an embedded\n   * elicitation sent to a client that never declared `elicitation` is rejected\n   * by the SDK with `-32021` before it reaches the wire, so the handlers check\n   * first and answer with an actionable tool error instead.\n   *\n   * Two sources, because the eras differ: a legacy connection negotiated them\n   * at `initialize` (`Server.getClientCapabilities()`), a modern one carries\n   * them per request in the `_meta` envelope and never runs `initialize` at\n   * all. `undefined` means \"cannot tell\" — never \"no capabilities\".\n   */\n  readonly clientCapabilities?: ClientCapabilities | undefined;\n  readonly server?: McpServer;\n}\n\ninterface ToolDeps {\n  readonly server: McpServer;\n  readonly pathGuard: PathGuard;\n  readonly pageStore: PageSnapshotStore;\n  readonly resourceStore: ResourceStore | undefined;\n}\n\ninterface RunResult<T> {\n  readonly structured: T;\n  readonly text?: string;\n  readonly resources?: ContentBlock[];\n}\n\n/**\n * `ToolAnnotations` with `readOnlyHint` required. It is optional in the SDK, but\n * MUTATING_TOOL_NAMES derives the `--read-only` gate from it, so a tool that\n * forgets it must be a compile error rather than a silent reclassification.\n */\ntype DeclaredAnnotations = ToolAnnotations & { readonly readOnlyHint: boolean };\n\nexport interface ToolDef<I extends z.ZodType, O extends z.ZodType> {\n  readonly name: string;\n  readonly title: string;\n  readonly description: string;\n  readonly input: I;\n  readonly output: O;\n  readonly annotations: DeclaredAnnotations;\n  readonly timeoutMs?: number;\n  readonly progress?: (args: z.infer<I>) => ProgressCtx;\n  readonly progressDone?: (args: z.infer<I>, result: z.infer<O>) => Partial<ProgressCtx>;\n  readonly defaultErrorCode?: ErrorCode;\n  /**\n   * The filesystem paths this tool will operate on, extracted from its parsed\n   * args. The executor runs an access-grant pre-check over these BEFORE `run`\n   * (R7): any path outside the granted roots yields an `input_required`\n   * round-trip requesting a grant, and nothing is touched until the client\n   * retries with an accepted grant (R8). Omit for tools that do not operate on\n   * caller-supplied filesystem paths.\n   */\n  readonly accessPaths?: (args: z.infer<I>) => readonly string[];\n  readonly run: (\n    args: z.infer<I>,\n    ctx: ToolCtx,\n  ) => Promise<RunResult<z.infer<O>> | InputRequiredResult>;\n}\n\nexport interface DefinedTool {\n  readonly name: string;\n  readonly annotations: DeclaredAnnotations;\n\n  register(deps: ToolDeps): RegisteredTool;\n}\n\nfunction toToolCtx(\n  ctx: ServerContext | undefined,\n  deps: Pick<ToolDeps, 'pathGuard' | 'pageStore' | 'resourceStore' | 'server'>,\n): ToolCtx {\n  if (!ctx) {\n    const signal = new AbortController().signal;\n    return {\n      signal,\n      fs: new GuardedFileSystem(deps.pathGuard),\n      pageStore: deps.pageStore,\n      resourceStore: deps.resourceStore,\n      server: deps.server,\n    };\n  }\n  // Envelope first, accessor second — the two eras carry this differently.\n  // A modern request states the capabilities in its own `_meta` envelope; a\n  // legacy connection fixed them at `initialize` and has no envelope at all.\n  // The deprecated accessor still answers for both today (the SDK backfills it\n  // per request from the validated envelope on modern instances), but reading\n  // the envelope directly is the supported path, so it leads: when the accessor\n  // goes, legacy degrades to \"cannot tell\", which fails open to the behavior\n  // that predates this check.\n  //\n  // The cast is the SDK's shipped `RequestMetaEnvelope` declaration collapsing\n  // to `{}` — the reserved keys survive at runtime but not in the .d.ts, so the\n  // key constant cannot index the declared type.\n  const envelope = ctx.mcpReq.envelope as Record<string, unknown> | undefined;\n  const clientCapabilities =\n    (envelope?.[CLIENT_CAPABILITIES_META_KEY] as ClientCapabilities | undefined) ??\n    // eslint-disable-next-line @typescript-eslint/no-deprecated -- the only source of client capabilities on a legacy connection, where no envelope exists.\n    deps.server.server.getClientCapabilities();\n\n  return {\n    signal: ctx.mcpReq.signal,\n    ...(ctx.sessionId ? { sessionId: ctx.sessionId } : {}),\n    ...(ctx.http?.authInfo ? { authInfo: ctx.http.authInfo } : {}),\n    ...(ctx.mcpReq._meta ? { _meta: ctx.mcpReq._meta } : {}),\n    fs: new GuardedFileSystem(deps.pathGuard),\n    pageStore: deps.pageStore,\n    resourceStore: deps.resourceStore,\n    sendNotification: async (notification) => ctx.mcpReq.notify(notification),\n    inputResponses: ctx.mcpReq.inputResponses,\n    requestState: ctx.mcpReq.requestState,\n    ...(clientCapabilities ? { clientCapabilities } : {}),\n    server: deps.server,\n  };\n}\n\nfunction resolveProgressCtx<I extends z.ZodType, O extends z.ZodType>(\n  def: ToolDef<I, O>,\n  args: z.infer<I>,\n): ProgressCtx {\n  if (!def.progress) return { label: def.title };\n  try {\n    return def.progress(args);\n  } catch (err: unknown) {\n    Logger.warn(`resolveProgressCtx: ${def.name}.progress threw: ${String(err)}`);\n    return { label: def.title };\n  }\n}\n\nfunction composeSignal(base: AbortSignal, timeoutMs?: number): AbortSignal {\n  if (!timeoutMs) return base;\n  return AbortSignal.any([base, AbortSignal.timeout(timeoutMs)]);\n}\n\n/**\n * A batch result where every path failed. The call produced no work at all, so\n * it is a failed call — `isError` must say so. Partial failure is deliberately\n * NOT an error: the per-path entries carry which paths failed and the succeeded\n * ones really were done.\n *\n * Two result shapes reach here. Most batch tools carry a `summary`. `create` and\n * `move` do not: they publish `{files|moves, failures, skipped}` (see\n * create.ts's CreateOutputSchema and move.ts's MoveOutputSchema), so a\n * summary-only check reported a fully-denied write as a successful call. Both\n * shapes are handled here rather than by growing the two output schemas, which\n * are the client-facing contract.\n */\nfunction isTotalBatchFailure(structured: unknown): boolean {\n  if (typeof structured !== 'object' || structured === null) return false;\n  const result = structured as {\n    summary?: { total?: number; failed?: number };\n    failures?: unknown;\n    files?: unknown;\n    moves?: unknown;\n    skipped?: unknown;\n  };\n\n  const { summary } = result;\n  if (typeof summary?.total === 'number') {\n    return summary.total > 0 && summary.failed === summary.total;\n  }\n\n  const len = (value: unknown): number => (Array.isArray(value) ? value.length : 0);\n  if (len(result.failures) === 0) return false;\n  // A skipped entry is work the caller asked to skip, not work that failed —\n  // a self-move that was silently dropped means the call did something.\n  return len(result.files) + len(result.moves) + len(result.skipped) === 0;\n}\n\n/**\n * Claude Code — and any client that treats `structuredContent` as the canonical\n * model view — discards the `text` blocks when `structuredContent` is present,\n * showing the model `JSON.stringify(structuredContent)` instead. A tool that\n * authored a text result (list's ASCII tree, read's file) meant that text for\n * the model, so it ships its metadata under `_meta`, which no client renders in\n * place of the content. Tools with no `text` keep `structuredContent`: the JSON\n * *is* their model-facing view.\n */\nfunction buildSuccessResponse<O>(result: RunResult<O>): CallToolResult {\n  const hasText = result.text !== undefined;\n  const text = result.text ?? JSON.stringify(result.structured);\n  const content: ContentBlock[] = [{ type: 'text' as const, text }, ...(result.resources ?? [])];\n  return {\n    content,\n    ...(hasText\n      ? // Safe because every `ToolDef.output` is a Zod object schema, so\n        // `structured` is always a plain object. Constraining `O` to prove it\n        // is not worth the cost: the bound has to thread through five generic\n        // sites and still loses to `exactOptionalPropertyTypes` variance on\n        // `RunResult`'s optional fields.\n        { _meta: result.structured as Record<string, unknown> }\n      : { structuredContent: result.structured }),\n    ...(isTotalBatchFailure(result.structured) ? { isError: true } : {}),\n  };\n}\n\nclass ToolExecutor<I extends z.ZodType, O extends z.ZodType> {\n  readonly signal: AbortSignal;\n  private readonly def: ToolDef<I, O>;\n  private readonly parsedArgs: z.infer<I>;\n  private readonly toolCtx: ToolCtx;\n\n  #progressClosed = false;\n  readonly #progressCtx: ProgressCtx;\n  readonly #mcpSink?: McpProgressSink;\n  readonly #progressSession: ProgressSession;\n\n  constructor(toolName: string, ctx: ToolCtx, def: ToolDef<I, O>, parsedArgs: z.infer<I>) {\n    this.def = def;\n    this.parsedArgs = parsedArgs;\n    this.signal = composeSignal(ctx.signal, def.timeoutMs);\n    this.#progressCtx = resolveProgressCtx(def, parsedArgs);\n    const token = ctx._meta?.progressToken;\n    if (token !== undefined && ctx.sendNotification !== undefined) {\n      this.#mcpSink = new McpProgressSink(toolName, token, ctx.sendNotification);\n    }\n    const isTest = process.env['NODE_ENV'] === 'test' || process.execArgv.includes('--test');\n    this.#progressSession = new ProgressSession({\n      label: this.#progressCtx.label,\n      ...(this.#mcpSink ? { sink: this.#mcpSink } : {}),\n      ...(isTest ? { rateLimitMs: 0 } : {}),\n    });\n    this.toolCtx = {\n      ...ctx,\n      signal: this.signal,\n      log: (level: LoggingLevel, data: unknown, logger?: string) => {\n        const msg = typeof data === 'string' ? data : String(data);\n        const prefix = logger ? `[${logger}] ` : '';\n        Logger.emit(level, `${prefix}${msg}`);\n      },\n      onProgress: (p) => {\n        this.#tick(p);\n      },\n    };\n  }\n\n  #tick(p: { current: number; total?: number }): void {\n    if (this.#progressClosed) return;\n    const tickCtx: ProgressCtx = {\n      ...this.#progressCtx,\n      current: p.current,\n      ...(p.total !== undefined ? { total: p.total } : {}),\n    };\n    this.#progressSession.set({ ...p, message: plainMessage('tick', tickCtx) });\n  }\n\n  async #closeWithDone(message: string): Promise<void> {\n    this.#progressClosed = true;\n    this.#progressSession.complete(message);\n    if (this.#mcpSink) await this.#mcpSink.flush();\n  }\n\n  async #closeWithFail(error: unknown, message: string): Promise<void> {\n    this.#progressClosed = true;\n    this.#progressSession.fail(error, message);\n    if (this.#mcpSink) await this.#mcpSink.flush();\n  }\n\n  async #flushProgress(): Promise<void> {\n    if (this.#mcpSink) await this.#mcpSink.flush();\n  }\n\n  private async completeProgress(result: z.infer<O>): Promise<void> {\n    const doneCtx: ProgressCtx = this.def.progressDone\n      ? { ...this.#progressCtx, ...this.def.progressDone(this.parsedArgs, result) }\n      : this.#progressCtx;\n    await this.#closeWithDone(plainMessage('done', doneCtx));\n  }\n\n  private async failProgress(error: unknown): Promise<{ isError: true; content: ContentBlock[] }> {\n    const errMsg = formatUnknownErrorMessage(error);\n    const message = plainMessage('fail', { ...this.#progressCtx, error: errMsg });\n    await this.#closeWithFail(error, message);\n    const { text: errorText } = Problem.toText(\n      error,\n      this.def.defaultErrorCode ?? ErrorCode.UNKNOWN,\n    );\n    return {\n      content: [{ type: 'text' as const, text: errorText }],\n      isError: true,\n    };\n  }\n\n  /**\n   * Access-grant pre-check (R7/R8/R9). Before `run` touches the filesystem,\n   * ask PathGuard which of the tool's declared paths are out-of-root and\n   * grantable. If any are and this round carries no verified `requestState`,\n   * return `input_required` (nothing is read or written — R7). On retry, the\n   * verified state must bind this grant set (R9); apply each accepted grant for\n   * the session (R8) and proceed. A declined or ungrantable path is left for\n   * `validateAccess` to fail closed during the operation. Returns `undefined`\n   * when no round-trip is needed and any applicable grants have been applied.\n   */\n  private async precheckGrant(): Promise<InputRequiredResult | undefined> {\n    const extract = this.def.accessPaths;\n    if (!extract) return undefined;\n    const paths = extract(this.parsedArgs);\n    if (paths.length === 0) return undefined;\n    const grantDirs = await this.toolCtx.fs.pathGuard.precheckAccess(paths);\n    if (grantDirs.length === 0) return undefined;\n\n    // One grant dir: a single boolean confirm. Multiple: one multi-select\n    // elicitation so the client picks the subset to allow in one round-trip\n    // (N dirs → 1 round-trip, not N). `pendingRoundTrip` still binds\n    // `paths: grantDirs` sorted, so R9 path-binding is unaffected.\n    const multi = grantDirs.length > 1;\n    const round = await pendingRoundTrip({\n      op: 'grant',\n      pending: grantDirs,\n      requestState: this.toolCtx.requestState,\n      clientCapabilities: this.toolCtx.clientCapabilities,\n      buildInputs: (dirs) =>\n        multi\n          ? [\n              multiSelectInput(\n                'grant',\n                'Grant filesystem access to these directories? Select the ones to allow.',\n                dirs.map((d) => ({ value: d, title: d })),\n              ),\n            ]\n          : dirs.map((dir, i) =>\n              confirmInput(`confirm_${i}`, `Grant filesystem access to \"${dir}\"?`),\n            ),\n    });\n    if (round !== undefined) return round;\n    // Apply accepted grants for the session (R8). Declined/missing dirs are\n    // skipped here; their paths fail with ACCESS_DENIED during the operation.\n    //\n    // No list-changed notification follows: a grant widens the allowed roots,\n    // and no resource list reads them. The instructions resource has a fixed\n    // URI, the result template lists the ResourceStore, and the file template\n    // lists nothing at all (see resources.ts). Notifying here only bought the\n    // client a round trip to re-fetch a list that could not have changed.\n    //\n    // `readAcceptedMultiChoice` does NOT validate against the offered choices\n    // (attacker-controlled inputResponses on re-entry). Only grant dirs that\n    // were actually offered by precheckAccess — a value outside grantDirs is\n    // ignored and fails closed in validateAccess. The single-select path reads\n    // `confirm_${i}` for `grantDirs[i]`, so the isSamePath filter is a no-op\n    // there; it only bites for the multi-select array.\n    const accepted = multi\n      ? (readAcceptedMultiChoice(this.toolCtx.inputResponses, 'grant') ?? [])\n      : grantDirs.filter((_dir, i) =>\n          readAcceptedConfirm(this.toolCtx.inputResponses, `confirm_${i}`),\n        );\n    for (const dir of accepted) {\n      if (!grantDirs.some((g) => isSamePath(g, dir))) continue;\n      await this.toolCtx.fs.pathGuard.applyGrant(dir);\n    }\n    return undefined;\n  }\n\n  async execute(): Promise<CallToolResult | InputRequiredResult> {\n    const runTool = async (): Promise<CallToolResult | InputRequiredResult> => {\n      try {\n        // Access-grant pre-check before any filesystem touch (R7/R8/R9). A\n        // grant input_required short-circuits here (progress paused, not\n        // finished); an R9 mismatch throws, which this catch surfaces as an\n        // isError tool result like every other handler failure — not a raw\n        // JSON-RPC error (GRANT-1 impact #2).\n        const grantRequired = await this.precheckGrant();\n        if (grantRequired !== undefined) return grantRequired;\n        const result = await this.def.run(this.parsedArgs, this.toolCtx);\n        // input_required is a return value, not a completed call: the client\n        // retries the same tools/call carrying inputResponses, and this\n        // handler re-enters from the top. Skip the progress \"done\" close and\n        // return it verbatim — progress is paused, not finished.\n        if (isInputRequiredResult(result)) {\n          return result;\n        }\n        await this.completeProgress(result.structured);\n        return buildSuccessResponse(result);\n      } catch (error) {\n        return await this.failProgress(error);\n      } finally {\n        await this.#flushProgress();\n      }\n    };\n\n    return runTool();\n  }\n}\n\nfunction createServerToolHandler<I extends z.ZodType, O extends z.ZodType>(\n  def: ToolDef<I, O>,\n  deps: ToolDeps,\n): (args: z.infer<I>, ctx: ServerContext) => Promise<CallToolResult | InputRequiredResult> {\n  return async (args, ctx) =>\n    new ToolExecutor<I, O>(def.name, toToolCtx(ctx, deps), def, args).execute();\n}\n\n/**\n * Validate with Zod while publishing the precomputed JSON Schema: clients get\n * draft-2020-12, handlers get Zod's coercions, defaults and error messages.\n *\n * Each validator instance is built for exactly one schema and handed straight\n * to `fromJsonSchema(thatSchema, ...)`, which calls `getValidator` once with\n * the same schema — so the argument is redundant here and deliberately ignored.\n * Reusing one instance across schemas would silently validate against `schema`.\n */\nfunction zodJsonSchemaValidator(schema: z.ZodType): jsonSchemaValidator {\n  return {\n    getValidator<U>(): JsonSchemaValidator<U> {\n      return (input: unknown) => {\n        const result = schema.safeParse(input);\n        if (result.success) {\n          return {\n            valid: true as const,\n            data: result.data as U,\n            errorMessage: undefined,\n          };\n        }\n        return {\n          valid: false as const,\n          data: undefined,\n          errorMessage: z.prettifyError(result.error),\n        };\n      };\n    },\n  };\n}\n\n/**\n * Generate the wire copy of a schema for `tools/list`. The Zod schema keeps\n * every constraint for runtime validation; the `override` pass only trims what\n * the wire copy costs every client at session start:\n *\n * - `$schema` and `title` carry no information the host uses.\n * - `maximum: Number.MAX_SAFE_INTEGER` is zod's int() artifact, not a bound.\n * - `examples` is dropped in both directions: on output it describes a field the\n *   server itself fills in, and on input every description that carried one\n *   already spells the same example out inline, so the keyword paid twice.\n *\n * Output `description`s are NOT dropped. They were, and the result was a wire\n * contract the model had to guess at: `delete` returns `path` XOR `paths`,\n * `edit.diff` appears only under dryRun, `read.value` has no required field at\n * all. None of that is inferable from types alone.\n *\n * No shared subschema carries a `.meta({ id })`, so zod inlines every one of\n * them and the emitted document has no `$defs`/`$ref` to dereference.\n */\nfunction toDraft202012(schema: z.ZodType, io: 'input' | 'output'): JsonSchemaType {\n  const generated = z.toJSONSchema(schema, {\n    target: 'draft-2020-12',\n    io,\n    override: ({ jsonSchema }) => {\n      const node = jsonSchema as Record<string, unknown>;\n      delete node['title'];\n      if (node['maximum'] === Number.MAX_SAFE_INTEGER) delete node['maximum'];\n      delete node['examples'];\n    },\n  }) as Record<string, unknown>;\n  delete generated['$schema'];\n  return generated;\n}\n\nexport function defineTool<I extends z.ZodType, O extends z.ZodType>(\n  def: ToolDef<I, O>,\n): DefinedTool {\n  const inputJsonSchema = toDraft202012(def.input, 'input');\n\n  // Nothing here depends on `deps`, so it is built once per tool definition\n  // rather than once per `register` — the HTTP leg registers every tool afresh\n  // on each request.\n  // Published annotations are derived, not passed through. `readOnlyHint` is\n  // load-bearing (MUTATING_TOOL_NAMES derives the --read-only gate from it) and\n  // `openWorldHint: false` is a real claim for a filesystem server. The other\n  // two describe behavior a read-only tool cannot have, and restate the default\n  // for a mutating one — 29 tokens per tool for nothing a client acts on.\n  const publishedAnnotations: ToolAnnotations = {\n    readOnlyHint: def.annotations.readOnlyHint,\n    openWorldHint: def.annotations.openWorldHint ?? false,\n    ...(def.annotations.readOnlyHint\n      ? {}\n      : { destructiveHint: def.annotations.destructiveHint ?? true }),\n  };\n\n  const toolDefShape = {\n    title: def.title,\n    description: def.description,\n    inputSchema: fromJsonSchema<z.infer<I>>(inputJsonSchema, zodJsonSchemaValidator(def.input)),\n    // No `outputSchema`, ever. Publishing one obliges the result to carry\n    // `structuredContent` (clients enforce it), and every tool that authors its\n    // own text ships its metadata under `_meta` instead — see\n    // `buildSuccessResponse`. The two cannot both hold, and the text is what\n    // the model reads. `TOOL-SURFACE-001` pins this for the whole surface.\n    //\n    // `def.output` stays: it types `RunResult<z.infer<O>>`, which is what makes\n    // a tool returning the wrong shape a compile error.\n    annotations: publishedAnnotations,\n  };\n\n  const tool: DefinedTool = {\n    name: def.name,\n    annotations: def.annotations,\n\n    register(deps: ToolDeps): RegisteredTool {\n      return deps.server.registerTool(def.name, toolDefShape, createServerToolHandler(def, deps));\n    },\n  };\n\n  return tool;\n}\n"]}

package/dist/tools/delete-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete-file.d.ts","sourceRoot":"","sources":["../../src/tools/delete-file.ts"],"names":[],"mappings":"AAwZA,eAAO,MAAM,WAAW,mCAyDtB,CAAC"}
+{"version":3,"file":"delete-file.d.ts","sourceRoot":"","sources":["../../src/tools/delete-file.ts"],"names":[],"mappings":"AAwZA,eAAO,MAAM,WAAW,mCAsDtB,CAAC"}

package/dist/tools/delete-file.js

@@ -294,9 +294,6 @@ export const DELETE_FILE = defineTool({
         'Workspace root directories cannot be deleted.',
     input: DeleteInputSchema,
     output: DeleteOutputSchema,
-    // results[].value XOR results[].error, and `deleted: false` means the user
-    // chose Skip rather than a failure — not inferable from the description.
-    publishOutputSchema: true,
     annotations: {
         readOnlyHint: false,
         idempotentHint: false,