@j0hanz/filesystem-mcp 2.0.0 → 2.1.1

package/dist/tools/roots.js.map

@@ -1 +1 @@
-{"version":3,"file":"roots.js","sourceRoot":"","sources":["../../src/tools/roots.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,gBAAgB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAE5C,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;CAChG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,UAAU,CAAC;IACjD,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,gQAAgQ;IAClQ,KAAK,EAAE,gBAAgB;IACvB,MAAM,EAAE,iBAAiB;IACzB,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,KAAK;QACtB,aAAa,EAAE,KAAK;KACrB;IACD,GAAG,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,qBAAqB,EAAE,CAAC;QACtD,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,GAAG,CAAC;YACb,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACjB,CAAC,CAAC,6IAA6I,CAAC;QACpJ,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,gBAAgB,EAAE,SAAS,CAAC,OAAO;CACpC,CAAC,CAAC","sourcesContent":["import * as z from 'zod/v4';\n\nimport { ErrorCode } from '../core/errors.js';\nimport { defineTool } from './define.js';\n\nconst RootsInputSchema = z.strictObject({});\n\nconst RootsOutputSchema = z.strictObject({\n  roots: z.array(z.string()).describe('Absolute paths of the allowed workspace root directories'),\n});\n\nexport const LIST_ALLOWED_DIRECTORIES = defineTool({\n  name: 'list_roots',\n  title: 'Workspace Roots',\n  description:\n    'List the allowed workspace root directories. Call this first to discover what paths are accessible; all other tools are scoped to these roots. Allowed directories are configured via CLI arguments, the FS_ALLOWED_DIRS environment variable, or --allow-cwd.',\n  input: RootsInputSchema,\n  output: RootsOutputSchema,\n  annotations: {\n    readOnlyHint: true,\n    idempotentHint: true,\n    destructiveHint: false,\n    openWorldHint: false,\n  },\n  run: (_args, ctx) => {\n    const dirs = ctx.fs.pathGuard.getAllowedDirectories();\n    const structured = { roots: [...dirs] };\n    const text =\n      dirs.length > 0\n        ? dirs.join('\\n')\n        : 'No allowed directories. Please configure allowed directories using CLI arguments, the FS_ALLOWED_DIRS environment variable, or --allow-cwd.';\n    return Promise.resolve({ structured, text });\n  },\n\n  defaultErrorCode: ErrorCode.UNKNOWN,\n});\n"]}
+{"version":3,"file":"roots.js","sourceRoot":"","sources":["../../src/tools/roots.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,gBAAgB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAE5C,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IAC/F,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,kEAAkE,CAAC;CAChF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,UAAU,CAAC;IACjD,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,gQAAgQ;IAClQ,KAAK,EAAE,gBAAgB;IACvB,MAAM,EAAE,iBAAiB;IACzB,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,KAAK;QACtB,aAAa,EAAE,KAAK;KACrB;IACD,GAAG,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,qBAAqB,EAAE,CAAC;QACtD,wEAAwE;QACxE,0EAA0E;QAC1E,4EAA4E;QAC5E,uCAAuC;QACvC,EAAE;QACF,4EAA4E;QAC5E,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,UAAU,EAAE;gBACV,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;gBAChB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE;SACF,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,EAAE,SAAS,CAAC,OAAO;CACpC,CAAC,CAAC","sourcesContent":["import * as z from 'zod/v4';\n\nimport { NO_POSITIONAL_ROOTS_GUIDANCE } from '../core/config.js';\nimport { ErrorCode } from '../core/errors.js';\nimport { defineTool } from './define.js';\n\nconst RootsInputSchema = z.strictObject({});\n\nconst RootsOutputSchema = z.strictObject({\n  roots: z.array(z.string()).describe('Absolute paths of the allowed workspace root directories'),\n  hint: z\n    .string()\n    .optional()\n    .describe('How to configure roots; present only when there are none to list'),\n});\n\nexport const LIST_ALLOWED_DIRECTORIES = defineTool({\n  name: 'list_roots',\n  title: 'Workspace Roots',\n  description:\n    'List the allowed workspace root directories. Call this first to discover what paths are accessible; all other tools are scoped to these roots. Allowed directories are configured via CLI arguments, the FS_ALLOWED_DIRS environment variable, or --allow-cwd.',\n  input: RootsInputSchema,\n  output: RootsOutputSchema,\n  annotations: {\n    readOnlyHint: true,\n    idempotentHint: true,\n    destructiveHint: false,\n    openWorldHint: false,\n  },\n  run: (_args, ctx) => {\n    const dirs = ctx.fs.pathGuard.getAllowedDirectories();\n    // No `text` on purpose. A newline-joined path list and the JSON say the\n    // same thing, and the JSON is the shape every caller of this tool parses.\n    // Supplying no text makes this a data tool, so `define.ts` renders the JSON\n    // and keeps it in `structuredContent`.\n    //\n    // `hint` rides the same JSON so the recovery reaches every client. An empty\n    // `roots` says the call failed to be useful but not what to do about it,\n    // and the elicitation route out — call a tool with a concrete path and\n    // approve the grant — appears in no tool description. It is conditional\n    // because a configured server pays nothing to be told how to configure.\n    return Promise.resolve({\n      structured: {\n        roots: [...dirs],\n        ...(dirs.length === 0 ? { hint: NO_POSITIONAL_ROOTS_GUIDANCE } : {}),\n      },\n    });\n  },\n\n  defaultErrorCode: ErrorCode.UNKNOWN,\n});\n"]}

package/dist/tools/stat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stat.d.ts","sourceRoot":"","sources":["../../src/tools/stat.ts"],"names":[],"mappings":"AAgMA,eAAO,MAAM,aAAa,mCAkFxB,CAAC"}
+{"version":3,"file":"stat.d.ts","sourceRoot":"","sources":["../../src/tools/stat.ts"],"names":[],"mappings":"AA+LA,eAAO,MAAM,aAAa,mCAsExB,CAAC"}

package/dist/tools/stat.js

@@ -1,7 +1,6 @@
 import { parse } from 'node:path';
 import * as z from 'zod/v4';
 import { ErrorCode, rethrowIfAborted } from '../core/errors.js';
-import { formatBytes } from '../core/fmt.js';
 import { getFileType, isHidden } from '../core/fs.js';
 import { detectMimeType } from '../core/mime.js';
 import { FileInfoSchema, NonNegInt, OperationSummarySchema, PerFileErrorSchema, singleOrBatchAccessPaths, singleOrBatchPathsInput, } from '../core/schema.js';
@@ -176,21 +175,10 @@ export const GET_FILE_INFO = defineTool({
             resourceUri = entry.uri;
             resources.push(link);
         }
-        const text = perPathPayload
-            .map((r) => {
-            if (r.value) {
-                const { name, type, size } = r.value;
-                // A directory's own inode size says nothing about what is inside it
-                // (0 on Windows, 4096 on ext4), and "directory, 0 B" reads as empty.
-                // Use `list` for contents; report the byte size only where it means
-                // something.
-                if (type === 'directory')
-                    return `${name}: directory`;
-                return `${name}: ${type}, ${formatBytes(size)}`;
-            }
-            return `${r.path}: ${r.error?.message ?? 'error'}`;
-        })
-            .join('\n');
+        // No `text` on purpose. The one-liner this used to build (`AGENTS.md: file,
+        // 751 B`) dropped tokenEstimate, modified, mimeType and isHidden — the very
+        // fields a caller asks `stat` for. Supplying no text makes this a data tool,
+        // so `define.ts` renders the JSON and keeps it in `structuredContent`.
         return {
             structured: {
                 results: perPathPayload,
@@ -199,7 +187,6 @@ export const GET_FILE_INFO = defineTool({
                 dirCount,
                 ...(resourceUri ? { resourceUri } : {}),
             },
-            text,
             ...(resources.length > 0 ? { resources } : {}),
         };
     },

package/dist/tools/stat.js.map

@@ -1 +1 @@
-{"version":3,"file":"stat.js","sourceRoot":"","sources":["../../src/tools/stat.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EACL,cAAc,EACd,SAAS,EACT,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,eAAe,GAAG,uBAAuB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAE/D,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAC3C,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC9E,KAAK,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CACnF,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtC,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,iBAAiB,CAAC;SACxB,QAAQ,CAAC,4DAA4D,CAAC;IACzE,OAAO,EAAE,sBAAsB;IAC/B,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAClF,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC/E,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+FAA+F,CAChG;CACJ,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC;QACrC,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAY,EACZ,aAAqB,EACrB,SAAkB,EAClB,KAAY,EACZ,QAA4B,EAC5B,aAAiC;IAEjC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC;QAChD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,KAAK,CAAC,SAAS;QACxB,QAAQ,EAAE,KAAK,CAAC,KAAK;QACrB,QAAQ,EAAE,KAAK,CAAC,KAAK;QACrB,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;QACvC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC;QACxB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,UAAkB,EAClB,EAAqB,EACrB,MAAoB,EACpB,GAAoB;IAEpB,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,GAAG,EAAE,CAAC,SAAS,EAAE,8BAA8B,UAAU,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAUD,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAwB;IACnE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IACpC,MAAM,EAAE,cAAc,EAAE,CAAC;IAEzB,MAAM,EACJ,aAAa,EACb,SAAS,EACT,KAAK,EAAE,aAAa,GACrB,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAErE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC;IAC1D,MAAM,QAAQ,GACZ,eAAe,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5F,4EAA4E;IAC5E,wEAAwE;IACxE,0DAA0D;IAC1D,IAAI,KAAK,GAAG,aAAa,CAAC;IAC1B,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,0EAA0E;YAC1E,uEAAuE;YACvE,yEAAyE;YACzE,4DAA4D;YAC5D,GAAG,EAAE,CAAC,SAAS,EAAE,2BAA2B,aAAa,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACxF,KAAK,GAAG,aAAa,CAAC;QACxB,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,YAAY,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,YAAY;QAChC,CAAC,CAAC,MAAM,gBAAgB,CAAC,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC;QACxD,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO,mBAAmB,CAAC,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2C;IAIrE,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,OAAO,IAAI,MAAM;YAAE,SAAS;QAChC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,QAAQ,IAAI,CAAC,CAAC;;YAChD,SAAS,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,oBAAoB,CAAC,CAA0B;IACtD,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC;IACrB,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;YACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;IACtC,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,wHAAwH;QACxH,iEAAiE;QACjE,mDAAmD;IACrD,KAAK,EAAE,eAAe;IACtB,MAAM,EAAE,gBAAgB;IACxB,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,KAAK;QACtB,aAAa,EAAE,KAAK;KACrB;IACD,SAAS,EAAE,yBAAyB;IACpC,gBAAgB,EAAE,SAAS,CAAC,SAAS;IACrC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QACjB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1E,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IACrD,CAAC;IACD,WAAW,EAAE,wBAAwB;IACrC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QAE/F,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,UAAU,EACV,GAAG,EACH,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CACjB,WAAW,CAAC,IAAI,EAAE;YAChB,eAAe,EAAE,IAAI;YACrB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,EAAE,GAAG,CAAC,GAAG;SACb,CAAC,EACJ,EAAE,gBAAgB,EAAE,SAAS,CAAC,SAAS,EAAE,CAC1C,CAAC;QAEF,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAE/D,IAAI,WAA+B,CAAC;QACpC,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,eAAe,CACrC,GAAG,CAAC,aAAa,EACjB,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtC,cAAc,CACf,CAAC;YACF,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC;YACxB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAED,MAAM,IAAI,GAAG,cAAc;aACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC;gBACrC,oEAAoE;gBACpE,qEAAqE;gBACrE,oEAAoE;gBACpE,aAAa;gBACb,IAAI,IAAI,KAAK,WAAW;oBAAE,OAAO,GAAG,IAAI,aAAa,CAAC;gBACtD,OAAO,GAAG,IAAI,KAAK,IAAI,KAAK,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,CAAC;YACD,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,OAAO,EAAE,CAAC;QACrD,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,OAAO;YACL,UAAU,EAAE;gBACV,OAAO,EAAE,cAAc;gBACvB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS;gBACT,QAAQ;gBACR,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC;YACD,IAAI;YACJ,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import type { ContentBlock } from '@modelcontextprotocol/server';\n\nimport { parse } from 'node:path';\n\nimport * as z from 'zod/v4';\n\nimport { ErrorCode, rethrowIfAborted } from '../core/errors.js';\nimport { formatBytes } from '../core/fmt.js';\nimport type { FileInfo, GuardedFileSystem, Stats } from '../core/fs.js';\nimport { getFileType, isHidden } from '../core/fs.js';\nimport { detectMimeType } from '../core/mime.js';\nimport {\n  FileInfoSchema,\n  NonNegInt,\n  OperationSummarySchema,\n  PerFileErrorSchema,\n  singleOrBatchAccessPaths,\n  singleOrBatchPathsInput,\n} from '../core/schema.js';\nimport { putJsonResource } from '../core/store.js';\nimport { DEFAULT_SEARCH_TIMEOUT_MS } from '../core/util.js';\nimport type { PerPathResult } from './batch.js';\nimport { runOverPaths } from './batch.js';\nimport type { ToolCtx } from './define.js';\nimport { defineTool } from './define.js';\n\nconst StatInputSchema = singleOrBatchPathsInput({ extra: {} });\n\nconst StatPerPathSchema = z.strictObject({\n  path: z.string().describe('Requested path'),\n  value: FileInfoSchema.optional().describe('File metadata; present on success'),\n  error: PerFileErrorSchema.optional().describe('Error details; present on failure'),\n});\n\nconst StatOutputSchema = z.strictObject({\n  results: z\n    .array(StatPerPathSchema)\n    .describe('Per-path metadata results ordered to match the input paths'),\n  summary: OperationSummarySchema,\n  fileCount: NonNegInt.optional().describe('Number of regular files in the results'),\n  dirCount: NonNegInt.optional().describe('Number of directories in the results'),\n  resourceUri: z\n    .string()\n    .optional()\n    .describe(\n      'URI to aggregated stats.json in the resource store (present when resource store is available)',\n    ),\n});\n\nfunction getPermissions(mode: number): string {\n  let out = '';\n  for (const shift of [6, 3, 0]) {\n    const bits = (mode >> shift) & 0b111;\n    out += (bits & 0b100 ? 'r' : '-') + (bits & 0b010 ? 'w' : '-') + (bits & 0b001 ? 'x' : '-');\n  }\n  return out;\n}\n\nfunction buildFileInfoResult(\n  name: string,\n  requestedPath: string,\n  isSymlink: boolean,\n  stats: Stats,\n  mimeType: string | undefined,\n  symlinkTarget: string | undefined,\n): FileInfo {\n  const tokenEstimate = stats.isFile() ? Math.ceil(stats.size / 4) : undefined;\n  return {\n    name,\n    path: requestedPath,\n    type: isSymlink ? 'symlink' : getFileType(stats),\n    size: stats.size,\n    ...(tokenEstimate !== undefined ? { tokenEstimate } : {}),\n    created: stats.birthtime,\n    modified: stats.mtime,\n    accessed: stats.atime,\n    permissions: getPermissions(stats.mode),\n    isHidden: isHidden(name),\n    ...(mimeType !== undefined ? { mimeType } : {}),\n    ...(symlinkTarget !== undefined ? { symlinkTarget } : {}),\n  };\n}\n\nasync function getSymlinkTarget(\n  pathToRead: string,\n  fs: GuardedFileSystem,\n  signal?: AbortSignal,\n  log?: ToolCtx['log'],\n): Promise<string | undefined> {\n  signal?.throwIfAborted();\n  try {\n    const { linkString } = await fs.readlink(pathToRead);\n    return linkString;\n  } catch (error) {\n    rethrowIfAborted(error);\n    log?.('warning', `stat: readlink failed for \"${pathToRead}\": ${String(error)}`, 'stat');\n    return undefined;\n  }\n}\n\ninterface FileInfoOptions {\n  includeMimeType?: boolean | undefined;\n  signal?: AbortSignal | undefined;\n  onProgress?: (() => void) | undefined;\n  fs: GuardedFileSystem;\n  log?: ToolCtx['log'] | undefined;\n}\n\nasync function getFileInfo(filePath: string, options: FileInfoOptions): Promise<FileInfo> {\n  const { signal, fs, log } = options;\n  signal?.throwIfAborted();\n\n  const {\n    requestedPath,\n    isSymlink,\n    stats: followedStats,\n  } = await fs.statDetailed(filePath, signal ? { signal } : undefined);\n\n  const { base: name, ext: rawExt } = parse(requestedPath);\n  const includeMimeType = options.includeMimeType !== false;\n  const mimeType =\n    includeMimeType && rawExt.length > 0 ? detectMimeType(requestedPath).mimeType : undefined;\n\n  // For a symlink, fsStat follows the link and reports the target's metadata.\n  // Report the link's own metadata instead so size/permissions/timestamps\n  // describe the link the user asked about, not its target.\n  let stats = followedStats;\n  if (isSymlink) {\n    try {\n      ({ stats } = await fs.lstat(requestedPath, signal ? { signal } : undefined));\n    } catch (error) {\n      // A cancelled request is not a \"link metadata unavailable\" fallback.\n      rethrowIfAborted(error);\n      // Guarded lstat can be refused where raw lstat succeeded (e.g. an allowed\n      // root that is itself a symlink, whose parent sits outside the roots).\n      // Falling back to the followed stats degrades the report to the target's\n      // metadata, so leave a trace instead of degrading silently.\n      log?.('warning', `stat: lstat failed for \"${requestedPath}\": ${String(error)}`, 'stat');\n      stats = followedStats;\n    }\n  }\n\n  // isSymlink above is true whenever ANY ancestor is a symlink, because it\n  // compares the requested path with its fully-resolved real path. Only the\n  // entry's own lstat says whether THIS path is a link, so a regular file under\n  // a symlinked parent is reported as a file and no readlink is attempted.\n  const isOwnSymlink = stats.isSymbolicLink();\n  const symlinkTarget = isOwnSymlink\n    ? await getSymlinkTarget(requestedPath, fs, signal, log)\n    : undefined;\n\n  return buildFileInfoResult(name, requestedPath, isOwnSymlink, stats, mimeType, symlinkTarget);\n}\n\nfunction classifyTypeCounts(results: readonly PerPathResult<FileInfo>[]): {\n  fileCount: number;\n  dirCount: number;\n} {\n  let fileCount = 0;\n  let dirCount = 0;\n  for (const result of results) {\n    if ('error' in result) continue;\n    if (result.value.type === 'directory') dirCount += 1;\n    else fileCount += 1;\n  }\n  return { fileCount, dirCount };\n}\n\nfunction toStatPerPathPayload(r: PerPathResult<FileInfo>): z.infer<typeof StatPerPathSchema> {\n  if ('error' in r) {\n    return { path: r.path, error: r.error };\n  }\n  const info = r.value;\n  return {\n    path: r.path,\n    value: {\n      name: info.name,\n      path: info.path,\n      type: info.type,\n      size: info.size,\n      ...(info.tokenEstimate !== undefined ? { tokenEstimate: info.tokenEstimate } : {}),\n      created: info.created.toISOString(),\n      modified: info.modified.toISOString(),\n      accessed: info.accessed.toISOString(),\n      permissions: info.permissions,\n      isHidden: info.isHidden,\n      ...(info.mimeType !== undefined ? { mimeType: info.mimeType } : {}),\n      ...(info.symlinkTarget !== undefined ? { symlinkTarget: info.symlinkTarget } : {}),\n    },\n  };\n}\n\nexport const GET_FILE_INFO = defineTool({\n  name: 'stat',\n  title: 'Get File Info',\n  description:\n    'Get metadata for one or more files or directories: size, type, permissions, MIME type, timestamps, and tokenEstimate. ' +\n    'Use tokenEstimate to pre-screen read cost before calling read. ' +\n    'Single path: pass path. Batch mode: pass paths[].',\n  input: StatInputSchema,\n  output: StatOutputSchema,\n  annotations: {\n    readOnlyHint: true,\n    idempotentHint: true,\n    destructiveHint: false,\n    openWorldHint: false,\n  },\n  timeoutMs: DEFAULT_SEARCH_TIMEOUT_MS,\n  defaultErrorCode: ErrorCode.NOT_FOUND,\n  progress: (args) => {\n    if (args.paths !== undefined) {\n      return { label: 'Stat', subject: `${String(args.paths.length)} paths` };\n    }\n    return { label: 'Stat', subject: args.path ?? '' };\n  },\n  accessPaths: singleOrBatchAccessPaths,\n  run: async (args, ctx) => {\n    const batchInput = args.path !== undefined ? { path: args.path } : { paths: args.paths ?? [] };\n\n    const batch = await runOverPaths<undefined, FileInfo>(\n      batchInput,\n      ctx,\n      async ({ path }) =>\n        getFileInfo(path, {\n          includeMimeType: true,\n          fs: ctx.fs,\n          signal: ctx.signal,\n          log: ctx.log,\n        }),\n      { defaultErrorCode: ErrorCode.NOT_FOUND },\n    );\n\n    const { fileCount, dirCount } = classifyTypeCounts(batch.results);\n    const perPathPayload = batch.results.map(toStatPerPathPayload);\n\n    let resourceUri: string | undefined;\n    const resources: ContentBlock[] = [];\n    if (ctx.resourceStore && batch.summary.total > 1) {\n      const { entry, link } = putJsonResource(\n        ctx.resourceStore,\n        `${String(batch.summary.total)} paths`,\n        perPathPayload,\n      );\n      resourceUri = entry.uri;\n      resources.push(link);\n    }\n\n    const text = perPathPayload\n      .map((r) => {\n        if (r.value) {\n          const { name, type, size } = r.value;\n          // A directory's own inode size says nothing about what is inside it\n          // (0 on Windows, 4096 on ext4), and \"directory, 0 B\" reads as empty.\n          // Use `list` for contents; report the byte size only where it means\n          // something.\n          if (type === 'directory') return `${name}: directory`;\n          return `${name}: ${type}, ${formatBytes(size)}`;\n        }\n        return `${r.path}: ${r.error?.message ?? 'error'}`;\n      })\n      .join('\\n');\n\n    return {\n      structured: {\n        results: perPathPayload,\n        summary: batch.summary,\n        fileCount,\n        dirCount,\n        ...(resourceUri ? { resourceUri } : {}),\n      },\n      text,\n      ...(resources.length > 0 ? { resources } : {}),\n    };\n  },\n});\n"]}
+{"version":3,"file":"stat.js","sourceRoot":"","sources":["../../src/tools/stat.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EACL,cAAc,EACd,SAAS,EACT,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,eAAe,GAAG,uBAAuB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAE/D,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAC3C,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC9E,KAAK,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CACnF,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtC,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,iBAAiB,CAAC;SACxB,QAAQ,CAAC,4DAA4D,CAAC;IACzE,OAAO,EAAE,sBAAsB;IAC/B,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAClF,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC/E,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+FAA+F,CAChG;CACJ,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC;QACrC,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAY,EACZ,aAAqB,EACrB,SAAkB,EAClB,KAAY,EACZ,QAA4B,EAC5B,aAAiC;IAEjC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC;QAChD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,KAAK,CAAC,SAAS;QACxB,QAAQ,EAAE,KAAK,CAAC,KAAK;QACrB,QAAQ,EAAE,KAAK,CAAC,KAAK;QACrB,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;QACvC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC;QACxB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,UAAkB,EAClB,EAAqB,EACrB,MAAoB,EACpB,GAAoB;IAEpB,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,GAAG,EAAE,CAAC,SAAS,EAAE,8BAA8B,UAAU,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAUD,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAwB;IACnE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IACpC,MAAM,EAAE,cAAc,EAAE,CAAC;IAEzB,MAAM,EACJ,aAAa,EACb,SAAS,EACT,KAAK,EAAE,aAAa,GACrB,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAErE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC;IAC1D,MAAM,QAAQ,GACZ,eAAe,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5F,4EAA4E;IAC5E,wEAAwE;IACxE,0DAA0D;IAC1D,IAAI,KAAK,GAAG,aAAa,CAAC;IAC1B,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,0EAA0E;YAC1E,uEAAuE;YACvE,yEAAyE;YACzE,4DAA4D;YAC5D,GAAG,EAAE,CAAC,SAAS,EAAE,2BAA2B,aAAa,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACxF,KAAK,GAAG,aAAa,CAAC;QACxB,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,YAAY,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,YAAY;QAChC,CAAC,CAAC,MAAM,gBAAgB,CAAC,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC;QACxD,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO,mBAAmB,CAAC,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2C;IAIrE,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,OAAO,IAAI,MAAM;YAAE,SAAS;QAChC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,QAAQ,IAAI,CAAC,CAAC;;YAChD,SAAS,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,oBAAoB,CAAC,CAA0B;IACtD,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC;IACrB,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;YACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;IACtC,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,wHAAwH;QACxH,iEAAiE;QACjE,mDAAmD;IACrD,KAAK,EAAE,eAAe;IACtB,MAAM,EAAE,gBAAgB;IACxB,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,KAAK;QACtB,aAAa,EAAE,KAAK;KACrB;IACD,SAAS,EAAE,yBAAyB;IACpC,gBAAgB,EAAE,SAAS,CAAC,SAAS;IACrC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QACjB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1E,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IACrD,CAAC;IACD,WAAW,EAAE,wBAAwB;IACrC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QAE/F,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,UAAU,EACV,GAAG,EACH,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CACjB,WAAW,CAAC,IAAI,EAAE;YAChB,eAAe,EAAE,IAAI;YACrB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,EAAE,GAAG,CAAC,GAAG;SACb,CAAC,EACJ,EAAE,gBAAgB,EAAE,SAAS,CAAC,SAAS,EAAE,CAC1C,CAAC;QAEF,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAE/D,IAAI,WAA+B,CAAC;QACpC,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,eAAe,CACrC,GAAG,CAAC,aAAa,EACjB,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtC,cAAc,CACf,CAAC;YACF,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC;YACxB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAED,4EAA4E;QAC5E,4EAA4E;QAC5E,6EAA6E;QAC7E,uEAAuE;QACvE,OAAO;YACL,UAAU,EAAE;gBACV,OAAO,EAAE,cAAc;gBACvB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS;gBACT,QAAQ;gBACR,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC;YACD,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import type { ContentBlock } from '@modelcontextprotocol/server';\n\nimport { parse } from 'node:path';\n\nimport * as z from 'zod/v4';\n\nimport { ErrorCode, rethrowIfAborted } from '../core/errors.js';\nimport type { FileInfo, GuardedFileSystem, Stats } from '../core/fs.js';\nimport { getFileType, isHidden } from '../core/fs.js';\nimport { detectMimeType } from '../core/mime.js';\nimport {\n  FileInfoSchema,\n  NonNegInt,\n  OperationSummarySchema,\n  PerFileErrorSchema,\n  singleOrBatchAccessPaths,\n  singleOrBatchPathsInput,\n} from '../core/schema.js';\nimport { putJsonResource } from '../core/store.js';\nimport { DEFAULT_SEARCH_TIMEOUT_MS } from '../core/util.js';\nimport type { PerPathResult } from './batch.js';\nimport { runOverPaths } from './batch.js';\nimport type { ToolCtx } from './define.js';\nimport { defineTool } from './define.js';\n\nconst StatInputSchema = singleOrBatchPathsInput({ extra: {} });\n\nconst StatPerPathSchema = z.strictObject({\n  path: z.string().describe('Requested path'),\n  value: FileInfoSchema.optional().describe('File metadata; present on success'),\n  error: PerFileErrorSchema.optional().describe('Error details; present on failure'),\n});\n\nconst StatOutputSchema = z.strictObject({\n  results: z\n    .array(StatPerPathSchema)\n    .describe('Per-path metadata results ordered to match the input paths'),\n  summary: OperationSummarySchema,\n  fileCount: NonNegInt.optional().describe('Number of regular files in the results'),\n  dirCount: NonNegInt.optional().describe('Number of directories in the results'),\n  resourceUri: z\n    .string()\n    .optional()\n    .describe(\n      'URI to aggregated stats.json in the resource store (present when resource store is available)',\n    ),\n});\n\nfunction getPermissions(mode: number): string {\n  let out = '';\n  for (const shift of [6, 3, 0]) {\n    const bits = (mode >> shift) & 0b111;\n    out += (bits & 0b100 ? 'r' : '-') + (bits & 0b010 ? 'w' : '-') + (bits & 0b001 ? 'x' : '-');\n  }\n  return out;\n}\n\nfunction buildFileInfoResult(\n  name: string,\n  requestedPath: string,\n  isSymlink: boolean,\n  stats: Stats,\n  mimeType: string | undefined,\n  symlinkTarget: string | undefined,\n): FileInfo {\n  const tokenEstimate = stats.isFile() ? Math.ceil(stats.size / 4) : undefined;\n  return {\n    name,\n    path: requestedPath,\n    type: isSymlink ? 'symlink' : getFileType(stats),\n    size: stats.size,\n    ...(tokenEstimate !== undefined ? { tokenEstimate } : {}),\n    created: stats.birthtime,\n    modified: stats.mtime,\n    accessed: stats.atime,\n    permissions: getPermissions(stats.mode),\n    isHidden: isHidden(name),\n    ...(mimeType !== undefined ? { mimeType } : {}),\n    ...(symlinkTarget !== undefined ? { symlinkTarget } : {}),\n  };\n}\n\nasync function getSymlinkTarget(\n  pathToRead: string,\n  fs: GuardedFileSystem,\n  signal?: AbortSignal,\n  log?: ToolCtx['log'],\n): Promise<string | undefined> {\n  signal?.throwIfAborted();\n  try {\n    const { linkString } = await fs.readlink(pathToRead);\n    return linkString;\n  } catch (error) {\n    rethrowIfAborted(error);\n    log?.('warning', `stat: readlink failed for \"${pathToRead}\": ${String(error)}`, 'stat');\n    return undefined;\n  }\n}\n\ninterface FileInfoOptions {\n  includeMimeType?: boolean | undefined;\n  signal?: AbortSignal | undefined;\n  onProgress?: (() => void) | undefined;\n  fs: GuardedFileSystem;\n  log?: ToolCtx['log'] | undefined;\n}\n\nasync function getFileInfo(filePath: string, options: FileInfoOptions): Promise<FileInfo> {\n  const { signal, fs, log } = options;\n  signal?.throwIfAborted();\n\n  const {\n    requestedPath,\n    isSymlink,\n    stats: followedStats,\n  } = await fs.statDetailed(filePath, signal ? { signal } : undefined);\n\n  const { base: name, ext: rawExt } = parse(requestedPath);\n  const includeMimeType = options.includeMimeType !== false;\n  const mimeType =\n    includeMimeType && rawExt.length > 0 ? detectMimeType(requestedPath).mimeType : undefined;\n\n  // For a symlink, fsStat follows the link and reports the target's metadata.\n  // Report the link's own metadata instead so size/permissions/timestamps\n  // describe the link the user asked about, not its target.\n  let stats = followedStats;\n  if (isSymlink) {\n    try {\n      ({ stats } = await fs.lstat(requestedPath, signal ? { signal } : undefined));\n    } catch (error) {\n      // A cancelled request is not a \"link metadata unavailable\" fallback.\n      rethrowIfAborted(error);\n      // Guarded lstat can be refused where raw lstat succeeded (e.g. an allowed\n      // root that is itself a symlink, whose parent sits outside the roots).\n      // Falling back to the followed stats degrades the report to the target's\n      // metadata, so leave a trace instead of degrading silently.\n      log?.('warning', `stat: lstat failed for \"${requestedPath}\": ${String(error)}`, 'stat');\n      stats = followedStats;\n    }\n  }\n\n  // isSymlink above is true whenever ANY ancestor is a symlink, because it\n  // compares the requested path with its fully-resolved real path. Only the\n  // entry's own lstat says whether THIS path is a link, so a regular file under\n  // a symlinked parent is reported as a file and no readlink is attempted.\n  const isOwnSymlink = stats.isSymbolicLink();\n  const symlinkTarget = isOwnSymlink\n    ? await getSymlinkTarget(requestedPath, fs, signal, log)\n    : undefined;\n\n  return buildFileInfoResult(name, requestedPath, isOwnSymlink, stats, mimeType, symlinkTarget);\n}\n\nfunction classifyTypeCounts(results: readonly PerPathResult<FileInfo>[]): {\n  fileCount: number;\n  dirCount: number;\n} {\n  let fileCount = 0;\n  let dirCount = 0;\n  for (const result of results) {\n    if ('error' in result) continue;\n    if (result.value.type === 'directory') dirCount += 1;\n    else fileCount += 1;\n  }\n  return { fileCount, dirCount };\n}\n\nfunction toStatPerPathPayload(r: PerPathResult<FileInfo>): z.infer<typeof StatPerPathSchema> {\n  if ('error' in r) {\n    return { path: r.path, error: r.error };\n  }\n  const info = r.value;\n  return {\n    path: r.path,\n    value: {\n      name: info.name,\n      path: info.path,\n      type: info.type,\n      size: info.size,\n      ...(info.tokenEstimate !== undefined ? { tokenEstimate: info.tokenEstimate } : {}),\n      created: info.created.toISOString(),\n      modified: info.modified.toISOString(),\n      accessed: info.accessed.toISOString(),\n      permissions: info.permissions,\n      isHidden: info.isHidden,\n      ...(info.mimeType !== undefined ? { mimeType: info.mimeType } : {}),\n      ...(info.symlinkTarget !== undefined ? { symlinkTarget: info.symlinkTarget } : {}),\n    },\n  };\n}\n\nexport const GET_FILE_INFO = defineTool({\n  name: 'stat',\n  title: 'Get File Info',\n  description:\n    'Get metadata for one or more files or directories: size, type, permissions, MIME type, timestamps, and tokenEstimate. ' +\n    'Use tokenEstimate to pre-screen read cost before calling read. ' +\n    'Single path: pass path. Batch mode: pass paths[].',\n  input: StatInputSchema,\n  output: StatOutputSchema,\n  annotations: {\n    readOnlyHint: true,\n    idempotentHint: true,\n    destructiveHint: false,\n    openWorldHint: false,\n  },\n  timeoutMs: DEFAULT_SEARCH_TIMEOUT_MS,\n  defaultErrorCode: ErrorCode.NOT_FOUND,\n  progress: (args) => {\n    if (args.paths !== undefined) {\n      return { label: 'Stat', subject: `${String(args.paths.length)} paths` };\n    }\n    return { label: 'Stat', subject: args.path ?? '' };\n  },\n  accessPaths: singleOrBatchAccessPaths,\n  run: async (args, ctx) => {\n    const batchInput = args.path !== undefined ? { path: args.path } : { paths: args.paths ?? [] };\n\n    const batch = await runOverPaths<undefined, FileInfo>(\n      batchInput,\n      ctx,\n      async ({ path }) =>\n        getFileInfo(path, {\n          includeMimeType: true,\n          fs: ctx.fs,\n          signal: ctx.signal,\n          log: ctx.log,\n        }),\n      { defaultErrorCode: ErrorCode.NOT_FOUND },\n    );\n\n    const { fileCount, dirCount } = classifyTypeCounts(batch.results);\n    const perPathPayload = batch.results.map(toStatPerPathPayload);\n\n    let resourceUri: string | undefined;\n    const resources: ContentBlock[] = [];\n    if (ctx.resourceStore && batch.summary.total > 1) {\n      const { entry, link } = putJsonResource(\n        ctx.resourceStore,\n        `${String(batch.summary.total)} paths`,\n        perPathPayload,\n      );\n      resourceUri = entry.uri;\n      resources.push(link);\n    }\n\n    // No `text` on purpose. The one-liner this used to build (`AGENTS.md: file,\n    // 751 B`) dropped tokenEstimate, modified, mimeType and isHidden — the very\n    // fields a caller asks `stat` for. Supplying no text makes this a data tool,\n    // so `define.ts` renders the JSON and keeps it in `structuredContent`.\n    return {\n      structured: {\n        results: perPathPayload,\n        summary: batch.summary,\n        fileCount,\n        dirCount,\n        ...(resourceUri ? { resourceUri } : {}),\n      },\n      ...(resources.length > 0 ? { resources } : {}),\n    };\n  },\n});\n"]}

package/dist/transport/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAUxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAuBrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAyOjD,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,MAAM,CAAC,CAgIjB"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AASxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAuBrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAyOjD,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,MAAM,CAAC,CAuHjB"}

package/dist/transport/http.js

@@ -5,7 +5,6 @@ import { toNodeHandler } from '@modelcontextprotocol/node';
 import { createMcpHandler, DEFAULT_REQUEST_TIMEOUT_MSEC, ProtocolErrorCode, } from '@modelcontextprotocol/server';
 import { createServer as createHttpServer } from 'node:http';
 import { formatUnknownErrorMessage } from '../core/errors.js';
-import { assertFleetRequestStateKey } from '../core/input-required.js';
 import { Logger } from '../core/observability.js';
 import { PageSnapshotStore } from '../core/page-store.js';
 import { PathGuard } from '../core/path.js';
@@ -183,16 +182,8 @@ function setupExpressApp(httpHost, apiKey, allowedHosts, modernNodeHandler, shar
 }
 export async function startHttpServer(port, options, config = {}) {
     const httpHost = config.httpHost ?? '127.0.0.1';
-    const { apiKey, eventBus } = config;
-    const fleet = config.deploymentMode === 'fleet';
+    const { apiKey } = config;
     assertHttpBindingPolicy(httpHost, apiKey);
-    if (fleet && !apiKey) {
-        throw new Error('Fleet deployment mode requires an API key.');
-    }
-    if (fleet && !eventBus) {
-        throw new Error('Fleet deployment mode requires a shared event bus.');
-    }
-    assertFleetRequestStateKey(fleet);
     const allowedHosts = resolveAllowedHosts(httpHost, process.env['FS_ALLOWED_HOSTS']);
     assertHttpHostPolicy(httpHost, allowedHosts, parseTrueEnvFlag(process.env['FS_ALLOW_UNRESTRICTED_HOSTS'], 'FS_ALLOW_UNRESTRICTED_HOSTS'));
     const sharedRegistry = createWatcherRegistry();
@@ -219,7 +210,6 @@ export async function startHttpServer(port, options, config = {}) {
     await sharedPathGuard.recomputeAllowedDirectories();
     const modernHandler = createMcpHandler(makeHttpModernFactory(options, () => modernHandler.notify, sharedRegistry, sharedPathGuard, sharedStore, sharedPageStore, apiKey), {
         legacy: 'reject',
-        ...(eventBus ? { bus: eventBus } : {}),
         onerror: (error) => {
             Logger.error('[HTTP] modern leg error:', formatUnknownErrorMessage(error));
         },

package/dist/transport/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,6EAA6E;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAM3D,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAI7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,YAAY,GAEb,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,6BAA6B,EAC7B,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAErB,MAAM,sBAAsB,GAAG,WAAW,CAAC,sBAAsB,EAAE,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;AAE7F;;;;GAIG;AACH,MAAM,2BAA2B,GAAG,CAAC,KAAK,CAAC;AAE3C,kFAAkF;AAClF,SAAS,sBAAsB,CAC7B,GAAgC,EAChC,IAAa,EACb,GAAa,EACb,IAAkB;IAElB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAsB,EACtB,WAAiC,EACjC,cAA+B,EAC/B,eAA0B,EAC1B,WAA0B,EAC1B,eAAkC,EAClC,MAA0B;IAE1B,OAAO,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;YACpC,eAAe,EAAE,cAAc;YAC/B,QAAQ;YACR,SAAS,EAAE,eAAe;YAC1B,aAAa,EAAE,WAAW;YAC1B,SAAS,EAAE,eAAe;YAC1B,GAAG;YACH,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;YAC1B,eAAe,EAAE,EAAE,CAAC;YACpB,CAAC,CAAC,mBAAmB,EAAE,CAAC;QAC1B,CAAC,CAAC;QACF,OAAO,CAAC,CAAC,GAAG,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,QAAgB,EAChB,MAA0B,EAC1B,YAAsB,EACtB,iBAAuF,EACvF,eAA0B,EAC1B,cAA+B,EAC/B,QAAwB;IAExB,MAAM,sBAAsB,GAAG,6BAA6B,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAChG,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAE/C,MAAM,GAAG,GAAG,mBAAmB,CAAC;QAC9B,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,GAAG,sBAAsB,GAAG;QACvC,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9F,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CACT,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAClE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAE9D,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,GAAG,GAAG,WAAW,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/E,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IAExC,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,eAAe,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;YAC5D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,sEAAsE;gBACtE,2DAA2D;gBAC3D,uEAAuE;gBACvE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,wBAAwB,EAAE,CAAC,QAAQ,CAAC;gBACpC,aAAa,EAAE,gBAAgB;aAChC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,GAAG,CAAC,GAAG,CACL,CAAC,uCAAuC,EAAE,2CAA2C,CAAC,EACtF,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAElF,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAQ,EAAE;QAC/C,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACnE,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,UAAU,GAAG,GAAG,CAAC,IAAe,CAAC;YACvC,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,gEAAgE;YAChE,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3C,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,0EAA0E;YAC1E,uEAAuE;YACvE,uEAAuE;YACvE,yDAAyD;YACzD,MAAM,aAAa,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;YACzD,qEAAqE;YACrE,kDAAkD;YAClD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/E,MAAM,SAAS,GAAG,YAAY,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC/B,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,iBAAiB,CAAC,aAAa,EAC/B,8BAA8B,OAAO,CAAC,MAAM,kCAAkC,SAAS,8BAA8B,YAAY,2CAA2C,EAC5K,gBAAgB,CAAC,UAAU,CAAC,CAC7B,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,UAAU,EACV,eAAe,EACf,cAAc,EACd,kBAAkB,CACnB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,iBAAiB,CAAC,aAAa,EAC/B,QAAQ,CAAC,OAAO,EAChB,gBAAgB,CAAC,UAAU,CAAC,CAC7B,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY;oBAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvE,CAAC,CAAC;YACF,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,uEAAuE;gBACvE,uEAAuE;gBACvE,sEAAsE;gBACtE,0BAA0B;gBAC1B,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa;oBAAE,OAAO,EAAE,CAAC;;oBAC3D,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,wEAAwE;IACxE,8EAA8E;IAC9E,mEAAmE;IACnE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC/C,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,IAAI,EAAE;YACnF,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAEhC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,OAAsB,EACtB,SAAwB,EAAE;IAE1B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;IAChD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC;IAChD,uBAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpF,oBAAoB,CAClB,QAAQ,EACR,YAAY,EACZ,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,6BAA6B,CAAC,CAC5F,CAAC;IAEF,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;IAC/C,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,kBAAkB;IAClB,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC,GAAG,EAAE;QACzC,aAAa,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAChD,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,6CAA6C;IAC7C,MAAM,eAAe,GAAG,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,eAAe,CAAC,2BAA2B,EAAE,CAAC;IAEpD,MAAM,aAAa,GAAmB,gBAAgB,CACpD,qBAAqB,CACnB,OAAO,EACP,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,EAC1B,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,MAAM,CACP,EACD;QACE,MAAM,EAAE,QAAQ;QAChB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACxB,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,CAAC;KACF,CACF,CAAC;IACF,MAAM,iBAAiB,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAEvD,MAAM,GAAG,GAAG,eAAe,CACzB,QAAQ,EACR,MAAM,EACN,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,aAAa,CAAC,MAAM,CACrB,CAAC;IAEF,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,WAAW,GAAG,WAAW,CAAC,yBAAyB,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAClF,UAAU,CAAC,gBAAgB,GAAG,WAAW,CAAC;IAC1C,UAAU,CAAC,cAAc,GAAG,WAAW,GAAG,KAAK,CAAC;IAChD,UAAU,CAAC,cAAc,GAAG,4BAA4B,CAAC;IAEzD,MAAM,iBAAiB,GAAG,CAAC,KAAY,EAAQ,EAAE;QAC/C,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC1C,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,KAAK,EAAE,yBAAyB,CAAC,KAAK,CAAC;SACxC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAE1C,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxD,UAAU,CAAC,KAAK,GAAG,UAAU,QAAkC;QAC7D,cAAc,CAAC,OAAO,EAAE,CAAC;QACzB,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,aAAa;aACV,KAAK,EAAE;aACP,IAAI,CAAC,GAAG,EAAE;YACT,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,MAAM,CAAC,KAAK,CACV,wDAAwD,EACxD,yBAAyB,CAAC,GAAG,CAAC,CAC/B,CAAC;YACF,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACL,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;YAC7B,cAAc,CAAC,OAAO,EAAE,CAAC;YACzB,eAAe,CAAC,KAAK,EAAE,CAAC;YACxB,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,QAAiB,EAAE,EAAE;gBAChD,MAAM,CAAC,KAAK,CACV,kDAAkD,EAClD,yBAAyB,CAAC,QAAQ,CAAC,CACpC,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QACF,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAElC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;YACrC,UAAU,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,qCAAqC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;YACrE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// HTTP hosting: express app assembly, security middleware wiring, the modern\n// per-request server factory, and listen-filter watcher gating on POST /mcp.\nimport { createMcpExpressApp } from '@modelcontextprotocol/express';\nimport { toNodeHandler } from '@modelcontextprotocol/node';\nimport type {\n  McpHttpHandler,\n  McpServerFactory,\n  ServerNotifier,\n} from '@modelcontextprotocol/server';\nimport {\n  createMcpHandler,\n  DEFAULT_REQUEST_TIMEOUT_MSEC,\n  ProtocolErrorCode,\n} from '@modelcontextprotocol/server';\n\nimport type { Server } from 'node:http';\nimport { createServer as createHttpServer } from 'node:http';\n\nimport type { Express, NextFunction, Request, Response } from 'express';\n\nimport { formatUnknownErrorMessage } from '../core/errors.js';\nimport { assertFleetRequestStateKey } from '../core/input-required.js';\nimport { Logger } from '../core/observability.js';\nimport { PageSnapshotStore } from '../core/page-store.js';\nimport { PathGuard } from '../core/path.js';\nimport type { ServerOptions } from '../core/path.js';\nimport { parseTrueEnvFlag } from '../core/primitives.js';\nimport { ResourceStore } from '../core/store.js';\nimport { MIB, parseEnvInt } from '../core/util.js';\nimport {\n  createWatcherRegistry,\n  MAX_WATCHERS,\n  type WatcherRegistry,\n} from '../core/watcher-registry.js';\nimport {\n  assertHttpBindingPolicy,\n  assertHttpHostPolicy,\n  bearerAuthMiddleware,\n  computeAllowedOriginHostnames,\n  corsOriginMiddleware,\n  corsPreflightHandler,\n  createRateLimiter,\n  protectedResourceUrl,\n  resolveAllowedHosts,\n  resolveTrustProxySetting,\n  sendJsonRpcError,\n} from '../http-policy.js';\nimport { createServer } from '../server.js';\nimport type { RuntimeConfig } from './shared.js';\nimport {\n  isStructurallyValidListen,\n  jsonRpcRequestId,\n  listenSubscriptionUris,\n  prepareListenWatchers,\n} from './shared.js';\n\nconst MAX_REQUEST_BODY_BYTES = parseEnvInt('FS_MAX_REQUEST_BYTES', 4 * MIB, 1024, 256 * MIB);\n\n/**\n * The code the SDK's own non-POST rejection carries. Not a `ProtocolErrorCode`\n * member — the enum has no `-32000` — so it is pinned here to keep the local\n * 405 envelope identical to the one the handler would have produced.\n */\nconst SDK_METHOD_NOT_ALLOWED_CODE = -32000;\n\n/** Body-parser rejections and anything else that reaches the end of the chain. */\nfunction errorHandlerMiddleware(\n  err: Error & { status?: number },\n  _req: Request,\n  res: Response,\n  next: NextFunction,\n): void {\n  if (res.headersSent) {\n    next(err);\n    return;\n  }\n  if (err.status === 413) {\n    sendJsonRpcError(res, 413, ProtocolErrorCode.InvalidRequest, 'Request body too large');\n    return;\n  }\n  if (err.status === 400) {\n    sendJsonRpcError(res, 400, ProtocolErrorCode.ParseError, 'Invalid JSON in request body');\n    return;\n  }\n  Logger.error('[HTTP] Unhandled middleware error:', formatUnknownErrorMessage(err));\n  sendJsonRpcError(res, 500, ProtocolErrorCode.InternalError, 'Internal Server Error');\n}\n\nfunction makeHttpModernFactory(\n  options: ServerOptions,\n  getNotifier: () => ServerNotifier,\n  sharedRegistry: WatcherRegistry,\n  sharedPathGuard: PathGuard,\n  sharedStore: ResourceStore,\n  sharedPageStore: PageSnapshotStore,\n  apiKey: string | undefined,\n): McpServerFactory {\n  return async ({ era }) => {\n    const notifier = getNotifier();\n    const c = await createServer(options, {\n      watcherRegistry: sharedRegistry,\n      notifier,\n      pathGuard: sharedPathGuard,\n      resourceStore: sharedStore,\n      pageStore: sharedPageStore,\n      era,\n      ...(apiKey !== undefined ? { apiKey } : {}),\n    });\n    const previousOnClose = c.mcp.server.onclose;\n    c.mcp.server.onclose = () => {\n      previousOnClose?.();\n      c.disposeRuntimeState();\n    };\n    return c.mcp;\n  };\n}\n\nfunction setupExpressApp(\n  httpHost: string,\n  apiKey: string | undefined,\n  allowedHosts: string[],\n  modernNodeHandler: (req: Request, res: Response, parsedBody?: unknown) => Promise<void>,\n  sharedPathGuard: PathGuard,\n  sharedRegistry: WatcherRegistry,\n  notifier: ServerNotifier,\n): Express {\n  const allowedOriginHostnames = computeAllowedOriginHostnames(process.env['FS_ALLOWED_ORIGINS']);\n  // Read once here and passed down, like every other env-derived policy input:\n  // http-policy holds no state and reads no env of its own.\n  const publicUrl = process.env['FS_PUBLIC_URL'];\n\n  const app = createMcpExpressApp({\n    host: httpHost,\n    jsonLimit: `${MAX_REQUEST_BODY_BYTES}b`,\n    ...(allowedHosts.length > 0 ? { allowedHosts: [...allowedHosts] } : {}),\n    ...(allowedOriginHostnames.length > 0 ? { allowedOrigins: [...allowedOriginHostnames] } : {}),\n  });\n\n  const trustProxy = resolveTrustProxySetting(process.env['FS_TRUST_PROXY']);\n  if (trustProxy !== undefined) {\n    app.set('trust proxy', trustProxy);\n  }\n\n  if (allowedHosts.length === 0) {\n    Logger.warn(\n      '[HTTP] FS_ALLOW_UNRESTRICTED_HOSTS is set: binding globally without Host validation.',\n    );\n  }\n\n  app.options('/mcp', corsPreflightHandler(allowedOriginHostnames));\n  app.use('/mcp', corsOriginMiddleware(allowedOriginHostnames));\n\n  // Unconditional: the spec's rate-limit MUST is not scoped to authenticated\n  // binds. A keyless bind is loopback-only, so the cap is looser, not absent.\n  const rpm = parseEnvInt('FS_RATE_LIMIT_RPM', apiKey ? 120 : 6_000, 1, 100_000);\n  app.use('/mcp', createRateLimiter(rpm));\n\n  if (apiKey && allowedHosts.length > 0) {\n    const metadataHandler = (req: Request, res: Response): void => {\n      const resource = protectedResourceUrl(req, true, publicUrl);\n      if (!resource) {\n        // Unreachable for the unrestricted case (the gate above excludes it),\n        // but defend a FS_PUBLIC_URL parse failure with a bodyless\n        // 404 — a generic OAuth client cannot parse a JSON-RPC error envelope.\n        res.status(404).end();\n        return;\n      }\n      res.header('Access-Control-Allow-Origin', '*');\n      res.status(200).json({\n        resource: resource.href,\n        bearer_methods_supported: ['header'],\n        resource_name: 'filesystem-mcp',\n      });\n    };\n    app.get(\n      ['/.well-known/oauth-protected-resource', '/.well-known/oauth-protected-resource/mcp'],\n      metadataHandler,\n    );\n  }\n\n  app.get('/healthz', (_req: Request, res: Response) => {\n    res.status(200).json({\n      status: 'ok',\n      uptime: process.uptime(),\n    });\n  });\n\n  app.use('/mcp', bearerAuthMiddleware(apiKey, allowedHosts.length > 0, publicUrl));\n\n  const resourceUpdateSink = (uri: string): void => {\n    notifier.resourceUpdated(uri);\n  };\n\n  app.post('/mcp', (req: Request, res: Response, next: NextFunction) => {\n    void (async () => {\n      const parsedBody = req.body as unknown;\n      // Only a structurally valid listen gets watchers, mirroring the stdio\n      // gate. A malformed one cannot succeed downstream, so attaching handles\n      // for it only gives the response-close release something to undo — and\n      // everything that is not a listen takes no watchers either way.\n      if (!isStructurallyValidListen(parsedBody)) {\n        await modernNodeHandler(req, res, parsedBody);\n        return;\n      }\n\n      // Reject an over-cap listen before the ack so the client does not believe\n      // every requested URI is watched when the watcher budget is exhausted.\n      // The per-URI `capped` failure below would also reject, but only after\n      // creating and tearing down every watcher up to the cap.\n      const requestedUris = listenSubscriptionUris(parsedBody);\n      // Only URIs without a live watcher consume a slot; a re-listen to an\n      // already-watched URI just retains another lease.\n      const newUris = requestedUris.filter((uri) => !sharedRegistry.hasWatcher(uri));\n      const available = MAX_WATCHERS - sharedRegistry.size();\n      if (newUris.length > available) {\n        sendJsonRpcError(\n          res,\n          400,\n          ProtocolErrorCode.InvalidParams,\n          `subscriptions/listen names ${newUris.length} not-yet-watched URIs but only ${available} watcher slots remain (cap ${MAX_WATCHERS}). Reduce the resourceSubscriptions list.`,\n          jsonRpcRequestId(parsedBody),\n        );\n        return;\n      }\n\n      const prepared = await prepareListenWatchers(\n        parsedBody,\n        sharedPathGuard,\n        sharedRegistry,\n        resourceUpdateSink,\n      );\n      if (!prepared.ok) {\n        sendJsonRpcError(\n          res,\n          400,\n          ProtocolErrorCode.InvalidParams,\n          prepared.message,\n          jsonRpcRequestId(parsedBody),\n        );\n        return;\n      }\n\n      let released = false;\n      const release = (): void => {\n        if (released) return;\n        released = true;\n        for (const uri of prepared.acquiredUris) sharedRegistry.release(uri);\n      };\n      if (prepared.acquiredUris.length > 0) {\n        // The attach loop awaits per-URI path validation, so the client can be\n        // gone by the time it returns. `close` fires once: a listener attached\n        // after it would never run and every lease this batch took would leak\n        // until process shutdown.\n        if (res.closed || res.destroyed || res.writableEnded) release();\n        else res.once('close', release);\n      }\n\n      try {\n        await modernNodeHandler(req, res, parsedBody);\n      } catch (error) {\n        release();\n        throw error;\n      }\n    })().catch(next);\n  });\n\n  // Answer non-POST here rather than handing it to `modernNodeHandler`. The\n  // SDK's own 405 is byte-identical to this one, but it omits the `Allow`\n  // header RFC 9110 §15.5.6 requires and routes every routine GET probe through\n  // the handler's `onerror` — which this server logs at error level.\n  app.all('/mcp', (_req: Request, res: Response) => {\n    sendJsonRpcError(res, 405, SDK_METHOD_NOT_ALLOWED_CODE, 'Method not allowed.', null, {\n      Allow: 'POST, OPTIONS',\n    });\n  });\n\n  app.use(errorHandlerMiddleware);\n\n  return app;\n}\n\nexport async function startHttpServer(\n  port: number,\n  options: ServerOptions,\n  config: RuntimeConfig = {},\n): Promise<Server> {\n  const httpHost = config.httpHost ?? '127.0.0.1';\n  const { apiKey, eventBus } = config;\n  const fleet = config.deploymentMode === 'fleet';\n  assertHttpBindingPolicy(httpHost, apiKey);\n  if (fleet && !apiKey) {\n    throw new Error('Fleet deployment mode requires an API key.');\n  }\n  if (fleet && !eventBus) {\n    throw new Error('Fleet deployment mode requires a shared event bus.');\n  }\n  assertFleetRequestStateKey(fleet);\n  const allowedHosts = resolveAllowedHosts(httpHost, process.env['FS_ALLOWED_HOSTS']);\n  assertHttpHostPolicy(\n    httpHost,\n    allowedHosts,\n    parseTrueEnvFlag(process.env['FS_ALLOW_UNRESTRICTED_HOSTS'], 'FS_ALLOW_UNRESTRICTED_HOSTS'),\n  );\n\n  const sharedRegistry = createWatcherRegistry();\n  // One store for the whole endpoint, same lifetime and same one-credential\n  // trust argument as the shared guard below: a result a tool externalized in\n  // one POST must survive to the follow-up resources/read, and the modern leg\n  // builds a fresh McpServer per request so a per-request store would discard\n  // it immediately.\n  // Fires only from a tool call, which is long after `modernHandler` below is\n  // constructed, so reading it from the closure is safe (same as `getNotifier`).\n  const sharedStore = new ResourceStore(() => {\n    modernHandler.notify.resourcesChanged();\n  });\n  const sharedPageStore = new PageSnapshotStore();\n  // One guard for the whole endpoint. The modern leg builds a fresh McpServer\n  // per request, so a per-instance guard would discard every accepted access\n  // grant the moment the request ended — re-prompting on each subsequent call\n  // and leaving the listen-watcher path validating against a stale allowed set.\n  // Grant scope is therefore the endpoint, not the connection: with API_KEY set\n  // every caller presents the same key (one auth context by construction), and\n  // without it the bind is loopback-only. Split into per-auth-context guards if\n  // this ever serves more than one credential.\n  const sharedPathGuard = new PathGuard(options, true);\n  await sharedPathGuard.recomputeAllowedDirectories();\n\n  const modernHandler: McpHttpHandler = createMcpHandler(\n    makeHttpModernFactory(\n      options,\n      () => modernHandler.notify,\n      sharedRegistry,\n      sharedPathGuard,\n      sharedStore,\n      sharedPageStore,\n      apiKey,\n    ),\n    {\n      legacy: 'reject',\n      ...(eventBus ? { bus: eventBus } : {}),\n      onerror: (error: Error) => {\n        Logger.error('[HTTP] modern leg error:', formatUnknownErrorMessage(error));\n      },\n    },\n  );\n  const modernNodeHandler = toNodeHandler(modernHandler);\n\n  const app = setupExpressApp(\n    httpHost,\n    apiKey,\n    allowedHosts,\n    modernNodeHandler,\n    sharedPathGuard,\n    sharedRegistry,\n    modernHandler.notify,\n  );\n\n  const httpServer = createHttpServer(app);\n  // Must exceed the idle timeout of any proxy in front of this server, or the\n  // proxy reuses connections the server already closed (intermittent 502s).\n  const keepAliveMs = parseEnvInt('FS_KEEPALIVE_TIMEOUT_MS', 5_000, 1_000, 600_000);\n  httpServer.keepAliveTimeout = keepAliveMs;\n  httpServer.headersTimeout = keepAliveMs + 5_000;\n  httpServer.requestTimeout = DEFAULT_REQUEST_TIMEOUT_MSEC;\n\n  const onHttpServerError = (error: Error): void => {\n    Logger.error('[HTTP] runtime server error', {\n      host: httpHost,\n      port,\n      error: formatUnknownErrorMessage(error),\n    });\n  };\n  httpServer.on('error', onHttpServerError);\n\n  const originalClose = httpServer.close.bind(httpServer);\n  httpServer.close = function (callback?: (error?: Error) => void) {\n    sharedRegistry.destroy();\n    sharedPageStore.clear();\n    modernHandler\n      .close()\n      .then(() => {\n        originalClose(callback);\n      })\n      .catch((err: unknown) => {\n        Logger.error(\n          '[HTTP] Error closing handler during HTTP server close:',\n          formatUnknownErrorMessage(err),\n        );\n        originalClose(callback);\n      });\n    return httpServer;\n  };\n\n  return new Promise((resolve, reject) => {\n    const onError = (err: Error) => {\n      sharedRegistry.destroy();\n      sharedPageStore.clear();\n      modernHandler.close().catch((closeErr: unknown) => {\n        Logger.error(\n          '[HTTP] Error closing handler on startup failure:',\n          formatUnknownErrorMessage(closeErr),\n        );\n      });\n      reject(err);\n    };\n    httpServer.once('error', onError);\n\n    httpServer.listen(port, httpHost, () => {\n      httpServer.removeListener('error', onError);\n      Logger.info(`[HTTP] Server listening on http://${httpHost}:${port}`);\n      resolve(httpServer);\n    });\n  });\n}\n"]}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,6EAA6E;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAM3D,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAI7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,YAAY,GAEb,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,6BAA6B,EAC7B,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAErB,MAAM,sBAAsB,GAAG,WAAW,CAAC,sBAAsB,EAAE,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;AAE7F;;;;GAIG;AACH,MAAM,2BAA2B,GAAG,CAAC,KAAK,CAAC;AAE3C,kFAAkF;AAClF,SAAS,sBAAsB,CAC7B,GAAgC,EAChC,IAAa,EACb,GAAa,EACb,IAAkB;IAElB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAsB,EACtB,WAAiC,EACjC,cAA+B,EAC/B,eAA0B,EAC1B,WAA0B,EAC1B,eAAkC,EAClC,MAA0B;IAE1B,OAAO,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;YACpC,eAAe,EAAE,cAAc;YAC/B,QAAQ;YACR,SAAS,EAAE,eAAe;YAC1B,aAAa,EAAE,WAAW;YAC1B,SAAS,EAAE,eAAe;YAC1B,GAAG;YACH,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;YAC1B,eAAe,EAAE,EAAE,CAAC;YACpB,CAAC,CAAC,mBAAmB,EAAE,CAAC;QAC1B,CAAC,CAAC;QACF,OAAO,CAAC,CAAC,GAAG,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,QAAgB,EAChB,MAA0B,EAC1B,YAAsB,EACtB,iBAAuF,EACvF,eAA0B,EAC1B,cAA+B,EAC/B,QAAwB;IAExB,MAAM,sBAAsB,GAAG,6BAA6B,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAChG,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAE/C,MAAM,GAAG,GAAG,mBAAmB,CAAC;QAC9B,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,GAAG,sBAAsB,GAAG;QACvC,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9F,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CACT,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAClE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAE9D,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,GAAG,GAAG,WAAW,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/E,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IAExC,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,eAAe,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;YAC5D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,sEAAsE;gBACtE,2DAA2D;gBAC3D,uEAAuE;gBACvE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,wBAAwB,EAAE,CAAC,QAAQ,CAAC;gBACpC,aAAa,EAAE,gBAAgB;aAChC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,GAAG,CAAC,GAAG,CACL,CAAC,uCAAuC,EAAE,2CAA2C,CAAC,EACtF,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAElF,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAQ,EAAE;QAC/C,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACnE,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,UAAU,GAAG,GAAG,CAAC,IAAe,CAAC;YACvC,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,gEAAgE;YAChE,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3C,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,0EAA0E;YAC1E,uEAAuE;YACvE,uEAAuE;YACvE,yDAAyD;YACzD,MAAM,aAAa,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;YACzD,qEAAqE;YACrE,kDAAkD;YAClD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/E,MAAM,SAAS,GAAG,YAAY,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC/B,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,iBAAiB,CAAC,aAAa,EAC/B,8BAA8B,OAAO,CAAC,MAAM,kCAAkC,SAAS,8BAA8B,YAAY,2CAA2C,EAC5K,gBAAgB,CAAC,UAAU,CAAC,CAC7B,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,UAAU,EACV,eAAe,EACf,cAAc,EACd,kBAAkB,CACnB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,iBAAiB,CAAC,aAAa,EAC/B,QAAQ,CAAC,OAAO,EAChB,gBAAgB,CAAC,UAAU,CAAC,CAC7B,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY;oBAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvE,CAAC,CAAC;YACF,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,uEAAuE;gBACvE,uEAAuE;gBACvE,sEAAsE;gBACtE,0BAA0B;gBAC1B,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa;oBAAE,OAAO,EAAE,CAAC;;oBAC3D,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,wEAAwE;IACxE,8EAA8E;IAC9E,mEAAmE;IACnE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC/C,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,IAAI,EAAE;YACnF,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAEhC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,OAAsB,EACtB,SAAwB,EAAE;IAE1B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;IAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,uBAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpF,oBAAoB,CAClB,QAAQ,EACR,YAAY,EACZ,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,6BAA6B,CAAC,CAC5F,CAAC;IAEF,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;IAC/C,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,kBAAkB;IAClB,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC,GAAG,EAAE;QACzC,aAAa,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAChD,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,6CAA6C;IAC7C,MAAM,eAAe,GAAG,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,eAAe,CAAC,2BAA2B,EAAE,CAAC;IAEpD,MAAM,aAAa,GAAmB,gBAAgB,CACpD,qBAAqB,CACnB,OAAO,EACP,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,EAC1B,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,MAAM,CACP,EACD;QACE,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACxB,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,CAAC;KACF,CACF,CAAC;IACF,MAAM,iBAAiB,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAEvD,MAAM,GAAG,GAAG,eAAe,CACzB,QAAQ,EACR,MAAM,EACN,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,aAAa,CAAC,MAAM,CACrB,CAAC;IAEF,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,WAAW,GAAG,WAAW,CAAC,yBAAyB,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAClF,UAAU,CAAC,gBAAgB,GAAG,WAAW,CAAC;IAC1C,UAAU,CAAC,cAAc,GAAG,WAAW,GAAG,KAAK,CAAC;IAChD,UAAU,CAAC,cAAc,GAAG,4BAA4B,CAAC;IAEzD,MAAM,iBAAiB,GAAG,CAAC,KAAY,EAAQ,EAAE;QAC/C,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC1C,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,KAAK,EAAE,yBAAyB,CAAC,KAAK,CAAC;SACxC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAE1C,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxD,UAAU,CAAC,KAAK,GAAG,UAAU,QAAkC;QAC7D,cAAc,CAAC,OAAO,EAAE,CAAC;QACzB,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,aAAa;aACV,KAAK,EAAE;aACP,IAAI,CAAC,GAAG,EAAE;YACT,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,MAAM,CAAC,KAAK,CACV,wDAAwD,EACxD,yBAAyB,CAAC,GAAG,CAAC,CAC/B,CAAC;YACF,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACL,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;YAC7B,cAAc,CAAC,OAAO,EAAE,CAAC;YACzB,eAAe,CAAC,KAAK,EAAE,CAAC;YACxB,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,QAAiB,EAAE,EAAE;gBAChD,MAAM,CAAC,KAAK,CACV,kDAAkD,EAClD,yBAAyB,CAAC,QAAQ,CAAC,CACpC,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QACF,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAElC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;YACrC,UAAU,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,qCAAqC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;YACrE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// HTTP hosting: express app assembly, security middleware wiring, the modern\n// per-request server factory, and listen-filter watcher gating on POST /mcp.\nimport { createMcpExpressApp } from '@modelcontextprotocol/express';\nimport { toNodeHandler } from '@modelcontextprotocol/node';\nimport type {\n  McpHttpHandler,\n  McpServerFactory,\n  ServerNotifier,\n} from '@modelcontextprotocol/server';\nimport {\n  createMcpHandler,\n  DEFAULT_REQUEST_TIMEOUT_MSEC,\n  ProtocolErrorCode,\n} from '@modelcontextprotocol/server';\n\nimport type { Server } from 'node:http';\nimport { createServer as createHttpServer } from 'node:http';\n\nimport type { Express, NextFunction, Request, Response } from 'express';\n\nimport { formatUnknownErrorMessage } from '../core/errors.js';\nimport { Logger } from '../core/observability.js';\nimport { PageSnapshotStore } from '../core/page-store.js';\nimport { PathGuard } from '../core/path.js';\nimport type { ServerOptions } from '../core/path.js';\nimport { parseTrueEnvFlag } from '../core/primitives.js';\nimport { ResourceStore } from '../core/store.js';\nimport { MIB, parseEnvInt } from '../core/util.js';\nimport {\n  createWatcherRegistry,\n  MAX_WATCHERS,\n  type WatcherRegistry,\n} from '../core/watcher-registry.js';\nimport {\n  assertHttpBindingPolicy,\n  assertHttpHostPolicy,\n  bearerAuthMiddleware,\n  computeAllowedOriginHostnames,\n  corsOriginMiddleware,\n  corsPreflightHandler,\n  createRateLimiter,\n  protectedResourceUrl,\n  resolveAllowedHosts,\n  resolveTrustProxySetting,\n  sendJsonRpcError,\n} from '../http-policy.js';\nimport { createServer } from '../server.js';\nimport type { RuntimeConfig } from './shared.js';\nimport {\n  isStructurallyValidListen,\n  jsonRpcRequestId,\n  listenSubscriptionUris,\n  prepareListenWatchers,\n} from './shared.js';\n\nconst MAX_REQUEST_BODY_BYTES = parseEnvInt('FS_MAX_REQUEST_BYTES', 4 * MIB, 1024, 256 * MIB);\n\n/**\n * The code the SDK's own non-POST rejection carries. Not a `ProtocolErrorCode`\n * member — the enum has no `-32000` — so it is pinned here to keep the local\n * 405 envelope identical to the one the handler would have produced.\n */\nconst SDK_METHOD_NOT_ALLOWED_CODE = -32000;\n\n/** Body-parser rejections and anything else that reaches the end of the chain. */\nfunction errorHandlerMiddleware(\n  err: Error & { status?: number },\n  _req: Request,\n  res: Response,\n  next: NextFunction,\n): void {\n  if (res.headersSent) {\n    next(err);\n    return;\n  }\n  if (err.status === 413) {\n    sendJsonRpcError(res, 413, ProtocolErrorCode.InvalidRequest, 'Request body too large');\n    return;\n  }\n  if (err.status === 400) {\n    sendJsonRpcError(res, 400, ProtocolErrorCode.ParseError, 'Invalid JSON in request body');\n    return;\n  }\n  Logger.error('[HTTP] Unhandled middleware error:', formatUnknownErrorMessage(err));\n  sendJsonRpcError(res, 500, ProtocolErrorCode.InternalError, 'Internal Server Error');\n}\n\nfunction makeHttpModernFactory(\n  options: ServerOptions,\n  getNotifier: () => ServerNotifier,\n  sharedRegistry: WatcherRegistry,\n  sharedPathGuard: PathGuard,\n  sharedStore: ResourceStore,\n  sharedPageStore: PageSnapshotStore,\n  apiKey: string | undefined,\n): McpServerFactory {\n  return async ({ era }) => {\n    const notifier = getNotifier();\n    const c = await createServer(options, {\n      watcherRegistry: sharedRegistry,\n      notifier,\n      pathGuard: sharedPathGuard,\n      resourceStore: sharedStore,\n      pageStore: sharedPageStore,\n      era,\n      ...(apiKey !== undefined ? { apiKey } : {}),\n    });\n    const previousOnClose = c.mcp.server.onclose;\n    c.mcp.server.onclose = () => {\n      previousOnClose?.();\n      c.disposeRuntimeState();\n    };\n    return c.mcp;\n  };\n}\n\nfunction setupExpressApp(\n  httpHost: string,\n  apiKey: string | undefined,\n  allowedHosts: string[],\n  modernNodeHandler: (req: Request, res: Response, parsedBody?: unknown) => Promise<void>,\n  sharedPathGuard: PathGuard,\n  sharedRegistry: WatcherRegistry,\n  notifier: ServerNotifier,\n): Express {\n  const allowedOriginHostnames = computeAllowedOriginHostnames(process.env['FS_ALLOWED_ORIGINS']);\n  // Read once here and passed down, like every other env-derived policy input:\n  // http-policy holds no state and reads no env of its own.\n  const publicUrl = process.env['FS_PUBLIC_URL'];\n\n  const app = createMcpExpressApp({\n    host: httpHost,\n    jsonLimit: `${MAX_REQUEST_BODY_BYTES}b`,\n    ...(allowedHosts.length > 0 ? { allowedHosts: [...allowedHosts] } : {}),\n    ...(allowedOriginHostnames.length > 0 ? { allowedOrigins: [...allowedOriginHostnames] } : {}),\n  });\n\n  const trustProxy = resolveTrustProxySetting(process.env['FS_TRUST_PROXY']);\n  if (trustProxy !== undefined) {\n    app.set('trust proxy', trustProxy);\n  }\n\n  if (allowedHosts.length === 0) {\n    Logger.warn(\n      '[HTTP] FS_ALLOW_UNRESTRICTED_HOSTS is set: binding globally without Host validation.',\n    );\n  }\n\n  app.options('/mcp', corsPreflightHandler(allowedOriginHostnames));\n  app.use('/mcp', corsOriginMiddleware(allowedOriginHostnames));\n\n  // Unconditional: the spec's rate-limit MUST is not scoped to authenticated\n  // binds. A keyless bind is loopback-only, so the cap is looser, not absent.\n  const rpm = parseEnvInt('FS_RATE_LIMIT_RPM', apiKey ? 120 : 6_000, 1, 100_000);\n  app.use('/mcp', createRateLimiter(rpm));\n\n  if (apiKey && allowedHosts.length > 0) {\n    const metadataHandler = (req: Request, res: Response): void => {\n      const resource = protectedResourceUrl(req, true, publicUrl);\n      if (!resource) {\n        // Unreachable for the unrestricted case (the gate above excludes it),\n        // but defend a FS_PUBLIC_URL parse failure with a bodyless\n        // 404 — a generic OAuth client cannot parse a JSON-RPC error envelope.\n        res.status(404).end();\n        return;\n      }\n      res.header('Access-Control-Allow-Origin', '*');\n      res.status(200).json({\n        resource: resource.href,\n        bearer_methods_supported: ['header'],\n        resource_name: 'filesystem-mcp',\n      });\n    };\n    app.get(\n      ['/.well-known/oauth-protected-resource', '/.well-known/oauth-protected-resource/mcp'],\n      metadataHandler,\n    );\n  }\n\n  app.get('/healthz', (_req: Request, res: Response) => {\n    res.status(200).json({\n      status: 'ok',\n      uptime: process.uptime(),\n    });\n  });\n\n  app.use('/mcp', bearerAuthMiddleware(apiKey, allowedHosts.length > 0, publicUrl));\n\n  const resourceUpdateSink = (uri: string): void => {\n    notifier.resourceUpdated(uri);\n  };\n\n  app.post('/mcp', (req: Request, res: Response, next: NextFunction) => {\n    void (async () => {\n      const parsedBody = req.body as unknown;\n      // Only a structurally valid listen gets watchers, mirroring the stdio\n      // gate. A malformed one cannot succeed downstream, so attaching handles\n      // for it only gives the response-close release something to undo — and\n      // everything that is not a listen takes no watchers either way.\n      if (!isStructurallyValidListen(parsedBody)) {\n        await modernNodeHandler(req, res, parsedBody);\n        return;\n      }\n\n      // Reject an over-cap listen before the ack so the client does not believe\n      // every requested URI is watched when the watcher budget is exhausted.\n      // The per-URI `capped` failure below would also reject, but only after\n      // creating and tearing down every watcher up to the cap.\n      const requestedUris = listenSubscriptionUris(parsedBody);\n      // Only URIs without a live watcher consume a slot; a re-listen to an\n      // already-watched URI just retains another lease.\n      const newUris = requestedUris.filter((uri) => !sharedRegistry.hasWatcher(uri));\n      const available = MAX_WATCHERS - sharedRegistry.size();\n      if (newUris.length > available) {\n        sendJsonRpcError(\n          res,\n          400,\n          ProtocolErrorCode.InvalidParams,\n          `subscriptions/listen names ${newUris.length} not-yet-watched URIs but only ${available} watcher slots remain (cap ${MAX_WATCHERS}). Reduce the resourceSubscriptions list.`,\n          jsonRpcRequestId(parsedBody),\n        );\n        return;\n      }\n\n      const prepared = await prepareListenWatchers(\n        parsedBody,\n        sharedPathGuard,\n        sharedRegistry,\n        resourceUpdateSink,\n      );\n      if (!prepared.ok) {\n        sendJsonRpcError(\n          res,\n          400,\n          ProtocolErrorCode.InvalidParams,\n          prepared.message,\n          jsonRpcRequestId(parsedBody),\n        );\n        return;\n      }\n\n      let released = false;\n      const release = (): void => {\n        if (released) return;\n        released = true;\n        for (const uri of prepared.acquiredUris) sharedRegistry.release(uri);\n      };\n      if (prepared.acquiredUris.length > 0) {\n        // The attach loop awaits per-URI path validation, so the client can be\n        // gone by the time it returns. `close` fires once: a listener attached\n        // after it would never run and every lease this batch took would leak\n        // until process shutdown.\n        if (res.closed || res.destroyed || res.writableEnded) release();\n        else res.once('close', release);\n      }\n\n      try {\n        await modernNodeHandler(req, res, parsedBody);\n      } catch (error) {\n        release();\n        throw error;\n      }\n    })().catch(next);\n  });\n\n  // Answer non-POST here rather than handing it to `modernNodeHandler`. The\n  // SDK's own 405 is byte-identical to this one, but it omits the `Allow`\n  // header RFC 9110 §15.5.6 requires and routes every routine GET probe through\n  // the handler's `onerror` — which this server logs at error level.\n  app.all('/mcp', (_req: Request, res: Response) => {\n    sendJsonRpcError(res, 405, SDK_METHOD_NOT_ALLOWED_CODE, 'Method not allowed.', null, {\n      Allow: 'POST, OPTIONS',\n    });\n  });\n\n  app.use(errorHandlerMiddleware);\n\n  return app;\n}\n\nexport async function startHttpServer(\n  port: number,\n  options: ServerOptions,\n  config: RuntimeConfig = {},\n): Promise<Server> {\n  const httpHost = config.httpHost ?? '127.0.0.1';\n  const { apiKey } = config;\n  assertHttpBindingPolicy(httpHost, apiKey);\n  const allowedHosts = resolveAllowedHosts(httpHost, process.env['FS_ALLOWED_HOSTS']);\n  assertHttpHostPolicy(\n    httpHost,\n    allowedHosts,\n    parseTrueEnvFlag(process.env['FS_ALLOW_UNRESTRICTED_HOSTS'], 'FS_ALLOW_UNRESTRICTED_HOSTS'),\n  );\n\n  const sharedRegistry = createWatcherRegistry();\n  // One store for the whole endpoint, same lifetime and same one-credential\n  // trust argument as the shared guard below: a result a tool externalized in\n  // one POST must survive to the follow-up resources/read, and the modern leg\n  // builds a fresh McpServer per request so a per-request store would discard\n  // it immediately.\n  // Fires only from a tool call, which is long after `modernHandler` below is\n  // constructed, so reading it from the closure is safe (same as `getNotifier`).\n  const sharedStore = new ResourceStore(() => {\n    modernHandler.notify.resourcesChanged();\n  });\n  const sharedPageStore = new PageSnapshotStore();\n  // One guard for the whole endpoint. The modern leg builds a fresh McpServer\n  // per request, so a per-instance guard would discard every accepted access\n  // grant the moment the request ended — re-prompting on each subsequent call\n  // and leaving the listen-watcher path validating against a stale allowed set.\n  // Grant scope is therefore the endpoint, not the connection: with API_KEY set\n  // every caller presents the same key (one auth context by construction), and\n  // without it the bind is loopback-only. Split into per-auth-context guards if\n  // this ever serves more than one credential.\n  const sharedPathGuard = new PathGuard(options, true);\n  await sharedPathGuard.recomputeAllowedDirectories();\n\n  const modernHandler: McpHttpHandler = createMcpHandler(\n    makeHttpModernFactory(\n      options,\n      () => modernHandler.notify,\n      sharedRegistry,\n      sharedPathGuard,\n      sharedStore,\n      sharedPageStore,\n      apiKey,\n    ),\n    {\n      legacy: 'reject',\n      onerror: (error: Error) => {\n        Logger.error('[HTTP] modern leg error:', formatUnknownErrorMessage(error));\n      },\n    },\n  );\n  const modernNodeHandler = toNodeHandler(modernHandler);\n\n  const app = setupExpressApp(\n    httpHost,\n    apiKey,\n    allowedHosts,\n    modernNodeHandler,\n    sharedPathGuard,\n    sharedRegistry,\n    modernHandler.notify,\n  );\n\n  const httpServer = createHttpServer(app);\n  // Must exceed the idle timeout of any proxy in front of this server, or the\n  // proxy reuses connections the server already closed (intermittent 502s).\n  const keepAliveMs = parseEnvInt('FS_KEEPALIVE_TIMEOUT_MS', 5_000, 1_000, 600_000);\n  httpServer.keepAliveTimeout = keepAliveMs;\n  httpServer.headersTimeout = keepAliveMs + 5_000;\n  httpServer.requestTimeout = DEFAULT_REQUEST_TIMEOUT_MSEC;\n\n  const onHttpServerError = (error: Error): void => {\n    Logger.error('[HTTP] runtime server error', {\n      host: httpHost,\n      port,\n      error: formatUnknownErrorMessage(error),\n    });\n  };\n  httpServer.on('error', onHttpServerError);\n\n  const originalClose = httpServer.close.bind(httpServer);\n  httpServer.close = function (callback?: (error?: Error) => void) {\n    sharedRegistry.destroy();\n    sharedPageStore.clear();\n    modernHandler\n      .close()\n      .then(() => {\n        originalClose(callback);\n      })\n      .catch((err: unknown) => {\n        Logger.error(\n          '[HTTP] Error closing handler during HTTP server close:',\n          formatUnknownErrorMessage(err),\n        );\n        originalClose(callback);\n      });\n    return httpServer;\n  };\n\n  return new Promise((resolve, reject) => {\n    const onError = (err: Error) => {\n      sharedRegistry.destroy();\n      sharedPageStore.clear();\n      modernHandler.close().catch((closeErr: unknown) => {\n        Logger.error(\n          '[HTTP] Error closing handler on startup failure:',\n          formatUnknownErrorMessage(closeErr),\n        );\n      });\n      reject(err);\n    };\n    httpServer.once('error', onError);\n\n    httpServer.listen(port, httpHost, () => {\n      httpServer.removeListener('error', onError);\n      Logger.info(`[HTTP] Server listening on http://${httpHost}:${port}`);\n      resolve(httpServer);\n    });\n  });\n}\n"]}

package/dist/transport/shared.d.ts

@@ -1,4 +1,3 @@
-import type { ServerEventBus } from '@modelcontextprotocol/server';
 import type { PathGuard } from '../core/path.js';
 import { type WatcherRegistry } from '../core/watcher-registry.js';
 /**
@@ -12,10 +11,6 @@ export interface RuntimeConfig {
     httpHost?: string;
     /** `--api-key` or `API_KEY`. Unset means open access (loopback dev mode). */
     apiKey?: string;
-    /** Shared change-event bus for multi-instance HTTP deployments. Caller-owned. */
-    eventBus?: ServerEventBus;
-    /** Explicit topology; fleet mode requires shared state and event delivery. */
-    deploymentMode?: 'single' | 'fleet';
 }
 /**
  * True when `message` really is a `subscriptions/listen` request, not merely a

package/dist/transport/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/transport/shared.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAInE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,6BAA6B,CAAC;AAErC;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,8EAA8E;IAC9E,cAAc,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAGnE;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAG5E;AAED,wFAAwF;AACxF,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,EAAE,CAYpE;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAoBrD;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,OAAO,EACnB,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAY5B"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/transport/shared.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,6BAA6B,CAAC;AAErC;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAGnE;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAG5E;AAED,wFAAwF;AACxF,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,EAAE,CAYpE;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAoBrD;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,OAAO,EACnB,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAY5B"}

package/dist/transport/shared.js

@@ -1,3 +1,7 @@
+// Pieces both transport legs share: the runtime config contract and the
+// `subscriptions/listen` watcher-preparation ladder. stdio and HTTP gate the
+// same message shape; only where the lease is released differs (connection
+// close vs response close).
 import { specTypeSchemas } from '@modelcontextprotocol/server';
 import { formatUnknownErrorMessage } from '../core/errors.js';
 import { MAX_WATCHERS, } from '../core/watcher-registry.js';

package/dist/transport/shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/transport/shared.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EACL,YAAY,GAGb,MAAM,6BAA6B,CAAC;AAmBrC;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzF,OAAO,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,MAAM,EAAE,GAAI,UAAkD,EAAE,EAAE,CAAC;IACnE,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,sBAAsB,CAAC,UAAmB;IACxD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,UAGZ,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,sBAAsB;QAAE,OAAO,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,qBAAqB,CAAC;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;AACpF,CAAC;AAMD,MAAM,uBAAuB,GAAG;IAC9B,SAAS,EAAE,0BAA0B;IACrC,MAAM,EAAE,iBAAiB,YAAY,UAAU;IAC/C,eAAe,EAAE,yCAAyC;IAC1D,KAAK,EAAE,yCAAyC;CACxC,CAAC;AAEX,SAAS,qBAAqB,CAC5B,GAAW,EACX,MAAkD;IAElD,MAAM,GAAG,GACP,MAAM,CAAC,MAAM,KAAK,cAAc;QAC9B,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC;QACzC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,uBAAuB,GAAG,KAAK,GAAG,EAAE,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAmB,EACnB,SAAoB,EACpB,QAAyB,EACzB,MAA6B;IAE7B,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,QAAQ;gBAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC","sourcesContent":["// Pieces both transport legs share: the runtime config contract and the\n// `subscriptions/listen` watcher-preparation ladder. stdio and HTTP gate the\n// same message shape; only where the lease is released differs (connection\n// close vs response close).\nimport type { ServerEventBus } from '@modelcontextprotocol/server';\nimport { specTypeSchemas } from '@modelcontextprotocol/server';\n\nimport { formatUnknownErrorMessage } from '../core/errors.js';\nimport type { PathGuard } from '../core/path.js';\nimport {\n  MAX_WATCHERS,\n  type WatcherAttachResult,\n  type WatcherRegistry,\n} from '../core/watcher-registry.js';\n\n/**\n * Runtime inputs the CLI resolves once (flag, else the operator's env var) and\n * hands the transport. Separate from `ServerOptions` because that object is\n * `PathGuard`'s constructor argument: the filesystem guard has no use for a\n * bind address and no business holding a bearer secret.\n */\nexport interface RuntimeConfig {\n  /** `--http-host` or `HTTP_HOST`. The HTTP bind defaults to loopback without it. */\n  httpHost?: string;\n  /** `--api-key` or `API_KEY`. Unset means open access (loopback dev mode). */\n  apiKey?: string;\n  /** Shared change-event bus for multi-instance HTTP deployments. Caller-owned. */\n  eventBus?: ServerEventBus;\n  /** Explicit topology; fleet mode requires shared state and event delivery. */\n  deploymentMode?: 'single' | 'fleet';\n}\n\n/**\n * True when `message` really is a `subscriptions/listen` request, not merely a\n * body carrying that method string. Both legs gate watcher attachment on this:\n * a malformed listen cannot succeed downstream, so creating and tearing down\n * `fs.watch` handles for it is pure waste — and on HTTP the teardown depended on\n * the response-close listener firing. Non-listen bodies fail it too, which is\n * the same answer `listenSubscriptionUris` gives them.\n */\nexport function isStructurallyValidListen(message: unknown): boolean {\n  const result = specTypeSchemas.SubscriptionsListenRequest['~standard'].validate(message);\n  return !('issues' in result);\n}\n\n/** The request id of a parsed JSON-RPC body, for error-envelope echo. */\nexport function jsonRpcRequestId(parsedBody: unknown): string | number | null {\n  const id = (parsedBody as { id?: unknown } | null | undefined)?.id;\n  return typeof id === 'string' || typeof id === 'number' ? id : null;\n}\n\n/** The `resourceSubscriptions` URIs of a `subscriptions/listen` body, de-duplicated. */\nexport function listenSubscriptionUris(parsedBody: unknown): string[] {\n  if (typeof parsedBody !== 'object' || parsedBody === null) return [];\n  const body = parsedBody as {\n    method?: unknown;\n    params?: { notifications?: { resourceSubscriptions?: unknown } };\n  };\n  if (body.method !== 'subscriptions/listen') return [];\n  const uris = body.params?.notifications?.resourceSubscriptions;\n  if (!Array.isArray(uris)) return [];\n  // De-duplicate: one attach must yield one ref-count, or the release below\n  // decrements further than it incremented and tears down a live watcher.\n  return [...new Set(uris.filter((uri): uri is string => typeof uri === 'string'))];\n}\n\nexport type ListenPreparation =\n  | { readonly ok: true; readonly acquiredUris: string[] }\n  | { readonly ok: false; readonly message: string };\n\nconst WATCHER_FAILURE_REASONS = {\n  'bad-uri': 'unsupported resource URI',\n  capped: `watcher limit ${MAX_WATCHERS} reached`,\n  'attach-failed': 'filesystem watcher could not be created',\n  stale: 'subscription was cancelled during setup',\n} as const;\n\nfunction watcherFailureMessage(\n  uri: string,\n  result: Exclude<WatcherAttachResult, { ok: true }>,\n): string {\n  const why =\n    result.reason === 'invalid-path'\n      ? formatUnknownErrorMessage(result.error)\n      : WATCHER_FAILURE_REASONS[result.reason];\n  return `Cannot subscribe to ${uri}: ${why}`;\n}\n\n/**\n * Prepare every filesystem watcher named by a `subscriptions/listen` filter.\n * The batch is all-or-nothing: a failed URI releases each prior lease.\n */\nexport async function prepareListenWatchers(\n  parsedBody: unknown,\n  pathGuard: PathGuard,\n  registry: WatcherRegistry,\n  notify: (uri: string) => void,\n): Promise<ListenPreparation> {\n  const uris = listenSubscriptionUris(parsedBody);\n  const acquired: string[] = [];\n  for (const uri of uris) {\n    const result = await registry.acquire(pathGuard, uri, notify);\n    if (!result.ok) {\n      for (const prior of acquired) registry.release(prior);\n      return { ok: false, message: watcherFailureMessage(uri, result) };\n    }\n    acquired.push(uri);\n  }\n  return { ok: true, acquiredUris: acquired };\n}\n"]}
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/transport/shared.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,6EAA6E;AAC7E,2EAA2E;AAC3E,4BAA4B;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EACL,YAAY,GAGb,MAAM,6BAA6B,CAAC;AAerC;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,MAAM,GAAG,eAAe,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzF,OAAO,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,MAAM,EAAE,GAAI,UAAkD,EAAE,EAAE,CAAC;IACnE,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,sBAAsB,CAAC,UAAmB;IACxD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,UAGZ,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,sBAAsB;QAAE,OAAO,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,qBAAqB,CAAC;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;AACpF,CAAC;AAMD,MAAM,uBAAuB,GAAG;IAC9B,SAAS,EAAE,0BAA0B;IACrC,MAAM,EAAE,iBAAiB,YAAY,UAAU;IAC/C,eAAe,EAAE,yCAAyC;IAC1D,KAAK,EAAE,yCAAyC;CACxC,CAAC;AAEX,SAAS,qBAAqB,CAC5B,GAAW,EACX,MAAkD;IAElD,MAAM,GAAG,GACP,MAAM,CAAC,MAAM,KAAK,cAAc;QAC9B,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC;QACzC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,uBAAuB,GAAG,KAAK,GAAG,EAAE,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAmB,EACnB,SAAoB,EACpB,QAAyB,EACzB,MAA6B;IAE7B,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,QAAQ;gBAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC","sourcesContent":["// Pieces both transport legs share: the runtime config contract and the\n// `subscriptions/listen` watcher-preparation ladder. stdio and HTTP gate the\n// same message shape; only where the lease is released differs (connection\n// close vs response close).\nimport { specTypeSchemas } from '@modelcontextprotocol/server';\n\nimport { formatUnknownErrorMessage } from '../core/errors.js';\nimport type { PathGuard } from '../core/path.js';\nimport {\n  MAX_WATCHERS,\n  type WatcherAttachResult,\n  type WatcherRegistry,\n} from '../core/watcher-registry.js';\n\n/**\n * Runtime inputs the CLI resolves once (flag, else the operator's env var) and\n * hands the transport. Separate from `ServerOptions` because that object is\n * `PathGuard`'s constructor argument: the filesystem guard has no use for a\n * bind address and no business holding a bearer secret.\n */\nexport interface RuntimeConfig {\n  /** `--http-host` or `HTTP_HOST`. The HTTP bind defaults to loopback without it. */\n  httpHost?: string;\n  /** `--api-key` or `API_KEY`. Unset means open access (loopback dev mode). */\n  apiKey?: string;\n}\n\n/**\n * True when `message` really is a `subscriptions/listen` request, not merely a\n * body carrying that method string. Both legs gate watcher attachment on this:\n * a malformed listen cannot succeed downstream, so creating and tearing down\n * `fs.watch` handles for it is pure waste — and on HTTP the teardown depended on\n * the response-close listener firing. Non-listen bodies fail it too, which is\n * the same answer `listenSubscriptionUris` gives them.\n */\nexport function isStructurallyValidListen(message: unknown): boolean {\n  const result = specTypeSchemas.SubscriptionsListenRequest['~standard'].validate(message);\n  return !('issues' in result);\n}\n\n/** The request id of a parsed JSON-RPC body, for error-envelope echo. */\nexport function jsonRpcRequestId(parsedBody: unknown): string | number | null {\n  const id = (parsedBody as { id?: unknown } | null | undefined)?.id;\n  return typeof id === 'string' || typeof id === 'number' ? id : null;\n}\n\n/** The `resourceSubscriptions` URIs of a `subscriptions/listen` body, de-duplicated. */\nexport function listenSubscriptionUris(parsedBody: unknown): string[] {\n  if (typeof parsedBody !== 'object' || parsedBody === null) return [];\n  const body = parsedBody as {\n    method?: unknown;\n    params?: { notifications?: { resourceSubscriptions?: unknown } };\n  };\n  if (body.method !== 'subscriptions/listen') return [];\n  const uris = body.params?.notifications?.resourceSubscriptions;\n  if (!Array.isArray(uris)) return [];\n  // De-duplicate: one attach must yield one ref-count, or the release below\n  // decrements further than it incremented and tears down a live watcher.\n  return [...new Set(uris.filter((uri): uri is string => typeof uri === 'string'))];\n}\n\nexport type ListenPreparation =\n  | { readonly ok: true; readonly acquiredUris: string[] }\n  | { readonly ok: false; readonly message: string };\n\nconst WATCHER_FAILURE_REASONS = {\n  'bad-uri': 'unsupported resource URI',\n  capped: `watcher limit ${MAX_WATCHERS} reached`,\n  'attach-failed': 'filesystem watcher could not be created',\n  stale: 'subscription was cancelled during setup',\n} as const;\n\nfunction watcherFailureMessage(\n  uri: string,\n  result: Exclude<WatcherAttachResult, { ok: true }>,\n): string {\n  const why =\n    result.reason === 'invalid-path'\n      ? formatUnknownErrorMessage(result.error)\n      : WATCHER_FAILURE_REASONS[result.reason];\n  return `Cannot subscribe to ${uri}: ${why}`;\n}\n\n/**\n * Prepare every filesystem watcher named by a `subscriptions/listen` filter.\n * The batch is all-or-nothing: a failed URI releases each prior lease.\n */\nexport async function prepareListenWatchers(\n  parsedBody: unknown,\n  pathGuard: PathGuard,\n  registry: WatcherRegistry,\n  notify: (uri: string) => void,\n): Promise<ListenPreparation> {\n  const uris = listenSubscriptionUris(parsedBody);\n  const acquired: string[] = [];\n  for (const uri of uris) {\n    const result = await registry.acquire(pathGuard, uri, notify);\n    if (!result.ok) {\n      for (const prior of acquired) registry.release(prior);\n      return { ok: false, message: watcherFailureMessage(uri, result) };\n    }\n    acquired.push(uri);\n  }\n  return { ok: true, acquiredUris: acquired };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@j0hanz/filesystem-mcp",
-  "version": "2.0.0",
+  "version": "2.1.1",
   "mcpName": "io.github.j0hanz/filesystem-mcp",
   "description": "Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.",
   "author": "j0hanz",
@@ -40,8 +40,7 @@
     "test": "node --test --import tsx \"__tests__/**/*.test.ts\"",
     "test:inspector": "node --test --import tsx \"__tests__/inspector-*.test.ts\"",
     "inspector": "npm run build && npx -y @modelcontextprotocol/inspector node dist/index.js",
-    "tasks": "node scripts/tasks.mjs",
-    "qa": "npm run build && node scripts/qa.mjs"
+    "tasks": "node scripts/tasks.mjs"
   },
   "keywords": [
     "mcp",