@j0hanz/filesystem-mcp 2.1.7 → 2.2.0

package/dist/index.js

@@ -35,29 +35,17 @@ async function shutdown(reason, exitCode = 0) {
     }, SHUTDOWN_TIMEOUT_MS);
     timer.unref();
     try {
-        if (activeHttpServer) {
-            const server = activeHttpServer;
-            try {
-                await new Promise((resolve, reject) => {
-                    server.close((err) => {
-                        if (err)
-                            reject(err);
-                        else
-                            resolve();
-                    });
-                });
-            }
-            catch (error) {
-                logRuntimeFailure('shutdown_http_error', 'process', 'shutdown', error);
-            }
+        try {
+            await activeHttpServer?.[Symbol.asyncDispose]();
         }
-        if (activeStdioHandle) {
-            try {
-                await activeStdioHandle.close();
-            }
-            catch (error) {
-                logRuntimeFailure('shutdown_mcp_error', 'process', 'shutdown', error);
-            }
+        catch (error) {
+            logRuntimeFailure('shutdown_http_error', 'process', 'shutdown', error);
+        }
+        try {
+            await activeStdioHandle?.close();
+        }
+        catch (error) {
+            logRuntimeFailure('shutdown_mcp_error', 'process', 'shutdown', error);
         }
     }
     finally {
@@ -65,37 +53,22 @@ async function shutdown(reason, exitCode = 0) {
     }
 }
 async function main() {
-    let allowedDirs;
-    let allowCwd;
-    let port;
-    let readOnly;
-    let printConfig;
-    let json;
-    let httpHost;
-    let cliApiKey;
+    let parsed;
     try {
-        const parsed = await parseArgs();
-        allowedDirs = parsed.allowedDirs;
-        allowCwd = parsed.allowCwd;
-        port = parsed.port;
-        readOnly = parsed.readOnly;
-        printConfig = parsed.printConfig;
-        json = parsed.json;
-        httpHost = parsed.httpHost;
-        cliApiKey = parsed.apiKey;
+        parsed = await parseArgs();
     }
     catch (error) {
         if (error instanceof CliExitError) {
             if (error.message.length > 0) {
                 logRuntimeFailure('cli_exit', 'startup', 'parse_args', error.message);
             }
-            process.exitCode = error.exitCode;
+            process.exitCode = 1;
             return;
         }
         throw error;
     }
+    const { allowedDirs, allowCwd, port, readOnly, printConfig, json, httpHost, apiKey } = parsed;
     if (printConfig) {
-        const apiKey = cliApiKey;
         await runPrintConfig({
             allowedDirs,
             allowCwd,
@@ -122,7 +95,7 @@ async function main() {
     const serverOptions = { allowCwd, cliAllowedDirs: allowedDirs, readOnly };
     const runtimeConfig = {
         ...(httpHost !== undefined ? { httpHost } : {}),
-        ...(cliApiKey !== undefined ? { apiKey: cliApiKey } : {}),
+        ...(apiKey !== undefined ? { apiKey } : {}),
     };
     if (port !== undefined) {
         activeHttpServer = await startHttpServer(port, serverOptions, runtimeConfig);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAKA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE9D,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;AAEzB,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,IAAI,iBAAgD,CAAC;AACrD,IAAI,gBAAyC,CAAC;AAC9C,IAAI,eAAe,GAAG,KAAK,CAAC;AAE5B,SAAS,YAAY,CAAC,KAAuC;IAC3D,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,OAAO,CAAC;AAC9C,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAuC;IACtE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7D,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;QACtB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9D,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC;IAClD,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,OAAO;IACT,CAAC;IACD,eAAe,GAAG,IAAI,CAAC;IAEvB,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAE5B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,iBAAiB,CACf,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,uBAAuB,MAAM,kBAAkB,CAChD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACxB,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,IAAI,CAAC;QACH,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,gBAAgB,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACnB,IAAI,GAAG;4BAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;4BAChB,OAAO,EAAE,CAAC;oBACjB,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,iBAAiB,CAAC,qBAAqB,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,iBAAiB,CAAC,KAAK,EAAE,CAAC;YAClC,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,iBAAiB,CAAC,oBAAoB,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,WAAqB,CAAC;IAC1B,IAAI,QAAiB,CAAC;IACtB,IAAI,IAAwB,CAAC;IAC7B,IAAI,QAAiB,CAAC;IACtB,IAAI,WAAoB,CAAC;IACzB,IAAI,IAAa,CAAC;IAClB,IAAI,QAA4B,CAAC;IACjC,IAAI,SAA6B,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACjC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACnB,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACjC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACnB,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAClC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,SAAS,CAAC;QACzB,MAAM,cAAc,CAAC;YACnB,WAAW;YACX,QAAQ;YACR,QAAQ;YACR,IAAI;YACJ,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IAC1E,MAAM,aAAa,GAAG;QACpB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;IAEF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,gBAAgB,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACN,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACjC,iBAAiB,GAAG,WAAW,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,uBAAuB,CAAC,SAAS,CAAC,CAAC;AACnC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAElC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,MAAe,EAAE,EAAE;IACrD,iBAAiB,CAAC,qBAAqB,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC;IAClF,KAAK,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,KAAY,EAAE,EAAE;IACjD,iBAAiB,CAAC,oBAAoB,EAAE,SAAS,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC/E,KAAK,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACrD,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\n// Type-only imports are erased at runtime — safe to keep static.\nimport type { StdioServerHandle } from '@modelcontextprotocol/server/stdio';\n\nimport type * as http from 'node:http';\nimport process from 'node:process';\n\nimport * as z from 'zod/v4';\n\nimport { CliExitError, parseArgs, runPrintConfig } from './cli.js';\nimport { NO_POSITIONAL_ROOTS_GUIDANCE } from './core/config.js';\nimport { logRuntimeFailure } from './core/observability.js';\nimport { startHttpServer, startServer } from './transport.js';\n\nz.config(z.locales.en());\n\nconst SHUTDOWN_TIMEOUT_MS = 5000;\nlet activeStdioHandle: StdioServerHandle | undefined;\nlet activeHttpServer: http.Server | undefined;\nlet shutdownStarted = false;\n\nfunction isStdinEvent(event: NodeJS.Signals | 'end' | 'close'): boolean {\n  return event === 'end' || event === 'close';\n}\n\nfunction registerShutdownTrigger(event: NodeJS.Signals | 'end' | 'close'): void {\n  const target = isStdinEvent(event) ? process.stdin : process;\n  target.once(event, () => {\n    const reason = isStdinEvent(event) ? `stdin ${event}` : event;\n    void shutdown(reason, 0);\n  });\n}\n\nasync function shutdown(reason: string, exitCode = 0): Promise<void> {\n  if (shutdownStarted) {\n    if (reason === 'SIGINT' || reason === 'SIGTERM') {\n      process.exit(130);\n    }\n    return;\n  }\n  shutdownStarted = true;\n\n  process.exitCode = exitCode;\n\n  const timer = setTimeout(() => {\n    logRuntimeFailure(\n      'shutdown_timeout',\n      'process',\n      'shutdown',\n      `Shutdown timed out (${reason}), forcing exit.`,\n    );\n    process.exit(exitCode);\n  }, SHUTDOWN_TIMEOUT_MS);\n  timer.unref();\n\n  try {\n    if (activeHttpServer) {\n      const server = activeHttpServer;\n      try {\n        await new Promise<void>((resolve, reject) => {\n          server.close((err) => {\n            if (err) reject(err);\n            else resolve();\n          });\n        });\n      } catch (error: unknown) {\n        logRuntimeFailure('shutdown_http_error', 'process', 'shutdown', error);\n      }\n    }\n    if (activeStdioHandle) {\n      try {\n        await activeStdioHandle.close();\n      } catch (error: unknown) {\n        logRuntimeFailure('shutdown_mcp_error', 'process', 'shutdown', error);\n      }\n    }\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nasync function main(): Promise<void> {\n  let allowedDirs: string[];\n  let allowCwd: boolean;\n  let port: number | undefined;\n  let readOnly: boolean;\n  let printConfig: boolean;\n  let json: boolean;\n  let httpHost: string | undefined;\n  let cliApiKey: string | undefined;\n\n  try {\n    const parsed = await parseArgs();\n    allowedDirs = parsed.allowedDirs;\n    allowCwd = parsed.allowCwd;\n    port = parsed.port;\n    readOnly = parsed.readOnly;\n    printConfig = parsed.printConfig;\n    json = parsed.json;\n    httpHost = parsed.httpHost;\n    cliApiKey = parsed.apiKey;\n  } catch (error: unknown) {\n    if (error instanceof CliExitError) {\n      if (error.message.length > 0) {\n        logRuntimeFailure('cli_exit', 'startup', 'parse_args', error.message);\n      }\n      process.exitCode = error.exitCode;\n      return;\n    }\n    throw error;\n  }\n\n  if (printConfig) {\n    const apiKey = cliApiKey;\n    await runPrintConfig({\n      allowedDirs,\n      allowCwd,\n      readOnly,\n      json,\n      ...(port !== undefined ? { port } : {}),\n      ...(httpHost !== undefined ? { httpHost } : {}),\n      ...(apiKey !== undefined ? { apiKey } : {}),\n    });\n    return;\n  }\n\n  if (allowedDirs.length > 0) {\n    console.error('Allowed directories (from CLI):');\n    for (const dir of allowedDirs) {\n      console.error(`- ${dir}`);\n    }\n  } else {\n    console.error(NO_POSITIONAL_ROOTS_GUIDANCE);\n  }\n\n  if (readOnly) {\n    console.error('Read-only mode: mutating tools disabled.');\n  }\n\n  const serverOptions = { allowCwd, cliAllowedDirs: allowedDirs, readOnly };\n  const runtimeConfig = {\n    ...(httpHost !== undefined ? { httpHost } : {}),\n    ...(cliApiKey !== undefined ? { apiKey: cliApiKey } : {}),\n  };\n\n  if (port !== undefined) {\n    activeHttpServer = await startHttpServer(port, serverOptions, runtimeConfig);\n  } else {\n    registerShutdownTrigger('end');\n    registerShutdownTrigger('close');\n    activeStdioHandle = startServer(serverOptions, runtimeConfig);\n  }\n}\n\nregisterShutdownTrigger('SIGTERM');\nregisterShutdownTrigger('SIGINT');\n\nprocess.once('unhandledRejection', (reason: unknown) => {\n  logRuntimeFailure('unhandled_rejection', 'process', 'unhandledRejection', reason);\n  void shutdown('unhandledRejection', 1);\n});\n\nprocess.once('uncaughtException', (error: Error) => {\n  logRuntimeFailure('uncaught_exception', 'process', 'uncaughtException', error);\n  void shutdown('uncaughtException', 1);\n});\n\nmain().catch((error: unknown) => {\n  logRuntimeFailure('fatal', 'startup', 'main', error);\n  void shutdown('fatal', 1);\n});\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAKA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE9D,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;AAEzB,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,IAAI,iBAAgD,CAAC;AACrD,IAAI,gBAAyC,CAAC;AAC9C,IAAI,eAAe,GAAG,KAAK,CAAC;AAE5B,SAAS,YAAY,CAAC,KAAuC;IAC3D,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,OAAO,CAAC;AAC9C,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAuC;IACtE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7D,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;QACtB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9D,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC;IAClD,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,OAAO;IACT,CAAC;IACD,eAAe,GAAG,IAAI,CAAC;IAEvB,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAE5B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,iBAAiB,CACf,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,uBAAuB,MAAM,kBAAkB,CAChD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACxB,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,gBAAgB,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAClD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,iBAAiB,CAAC,qBAAqB,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,iBAAiB,EAAE,KAAK,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,iBAAiB,CAAC,oBAAoB,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,MAA6C,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE9F,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,cAAc,CAAC;YACnB,WAAW;YACX,QAAQ;YACR,QAAQ;YACR,IAAI;YACJ,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IAC1E,MAAM,aAAa,GAAG;QACpB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;IAEF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,gBAAgB,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACN,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACjC,iBAAiB,GAAG,WAAW,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,uBAAuB,CAAC,SAAS,CAAC,CAAC;AACnC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAElC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,MAAe,EAAE,EAAE;IACrD,iBAAiB,CAAC,qBAAqB,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC;IAClF,KAAK,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,KAAY,EAAE,EAAE;IACjD,iBAAiB,CAAC,oBAAoB,EAAE,SAAS,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC/E,KAAK,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACrD,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\n// Type-only imports are erased at runtime — safe to keep static.\nimport type { StdioServerHandle } from '@modelcontextprotocol/server/stdio';\n\nimport type * as http from 'node:http';\nimport process from 'node:process';\n\nimport * as z from 'zod/v4';\n\nimport { CliExitError, parseArgs, runPrintConfig } from './cli.js';\nimport { NO_POSITIONAL_ROOTS_GUIDANCE } from './core/config.js';\nimport { logRuntimeFailure } from './core/observability.js';\nimport { startHttpServer, startServer } from './transport.js';\n\nz.config(z.locales.en());\n\nconst SHUTDOWN_TIMEOUT_MS = 5000;\nlet activeStdioHandle: StdioServerHandle | undefined;\nlet activeHttpServer: http.Server | undefined;\nlet shutdownStarted = false;\n\nfunction isStdinEvent(event: NodeJS.Signals | 'end' | 'close'): boolean {\n  return event === 'end' || event === 'close';\n}\n\nfunction registerShutdownTrigger(event: NodeJS.Signals | 'end' | 'close'): void {\n  const target = isStdinEvent(event) ? process.stdin : process;\n  target.once(event, () => {\n    const reason = isStdinEvent(event) ? `stdin ${event}` : event;\n    void shutdown(reason, 0);\n  });\n}\n\nasync function shutdown(reason: string, exitCode = 0): Promise<void> {\n  if (shutdownStarted) {\n    if (reason === 'SIGINT' || reason === 'SIGTERM') {\n      process.exit(130);\n    }\n    return;\n  }\n  shutdownStarted = true;\n\n  process.exitCode = exitCode;\n\n  const timer = setTimeout(() => {\n    logRuntimeFailure(\n      'shutdown_timeout',\n      'process',\n      'shutdown',\n      `Shutdown timed out (${reason}), forcing exit.`,\n    );\n    process.exit(exitCode);\n  }, SHUTDOWN_TIMEOUT_MS);\n  timer.unref();\n\n  try {\n    try {\n      await activeHttpServer?.[Symbol.asyncDispose]();\n    } catch (error: unknown) {\n      logRuntimeFailure('shutdown_http_error', 'process', 'shutdown', error);\n    }\n    try {\n      await activeStdioHandle?.close();\n    } catch (error: unknown) {\n      logRuntimeFailure('shutdown_mcp_error', 'process', 'shutdown', error);\n    }\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nasync function main(): Promise<void> {\n  let parsed: Awaited<ReturnType<typeof parseArgs>>;\n  try {\n    parsed = await parseArgs();\n  } catch (error: unknown) {\n    if (error instanceof CliExitError) {\n      if (error.message.length > 0) {\n        logRuntimeFailure('cli_exit', 'startup', 'parse_args', error.message);\n      }\n      process.exitCode = 1;\n      return;\n    }\n    throw error;\n  }\n  const { allowedDirs, allowCwd, port, readOnly, printConfig, json, httpHost, apiKey } = parsed;\n\n  if (printConfig) {\n    await runPrintConfig({\n      allowedDirs,\n      allowCwd,\n      readOnly,\n      json,\n      ...(port !== undefined ? { port } : {}),\n      ...(httpHost !== undefined ? { httpHost } : {}),\n      ...(apiKey !== undefined ? { apiKey } : {}),\n    });\n    return;\n  }\n\n  if (allowedDirs.length > 0) {\n    console.error('Allowed directories (from CLI):');\n    for (const dir of allowedDirs) {\n      console.error(`- ${dir}`);\n    }\n  } else {\n    console.error(NO_POSITIONAL_ROOTS_GUIDANCE);\n  }\n\n  if (readOnly) {\n    console.error('Read-only mode: mutating tools disabled.');\n  }\n\n  const serverOptions = { allowCwd, cliAllowedDirs: allowedDirs, readOnly };\n  const runtimeConfig = {\n    ...(httpHost !== undefined ? { httpHost } : {}),\n    ...(apiKey !== undefined ? { apiKey } : {}),\n  };\n\n  if (port !== undefined) {\n    activeHttpServer = await startHttpServer(port, serverOptions, runtimeConfig);\n  } else {\n    registerShutdownTrigger('end');\n    registerShutdownTrigger('close');\n    activeStdioHandle = startServer(serverOptions, runtimeConfig);\n  }\n}\n\nregisterShutdownTrigger('SIGTERM');\nregisterShutdownTrigger('SIGINT');\n\nprocess.once('unhandledRejection', (reason: unknown) => {\n  logRuntimeFailure('unhandled_rejection', 'process', 'unhandledRejection', reason);\n  void shutdown('unhandledRejection', 1);\n});\n\nprocess.once('uncaughtException', (error: Error) => {\n  logRuntimeFailure('uncaught_exception', 'process', 'uncaughtException', error);\n  void shutdown('uncaughtException', 1);\n});\n\nmain().catch((error: unknown) => {\n  logRuntimeFailure('fatal', 'startup', 'main', error);\n  void shutdown('fatal', 1);\n});\n"]}

package/dist/instructions.js

@@ -1,10 +1,10 @@
 import { DEFAULT_SEARCH_CONTENT_RESULTS, getMaxTextFileSize, MAX_SEARCH_RESULTS, } from './core/util.js';
-import { GET_FILE_INFO, LIST, LIST_ALLOWED_DIRECTORIES, MUTATING_TOOL_NAMES, READ_FILE, SEARCH_CONTENT, SEARCH_FILES, } from './tools/index.js';
+import { FIND_FILES, LIST, LIST_ROOTS, MUTATING_TOOL_NAMES, READ, SEARCH_TEXT, STAT, } from './tools/index.js';
 function buildToolsOverview(readOnly) {
     const rows = [
-        ['Navigate', [LIST_ALLOWED_DIRECTORIES.name, LIST.name, SEARCH_FILES.name]],
-        ['Inspect', [GET_FILE_INFO.name, SEARCH_CONTENT.name]],
-        ['Read', [READ_FILE.name]],
+        ['Navigate', [LIST_ROOTS.name, LIST.name, FIND_FILES.name]],
+        ['Inspect', [STAT.name, SEARCH_TEXT.name]],
+        ['Read', [READ.name]],
     ];
     // Under --read-only the mutating tools are never registered, so advertising
     // them here would point the model at tools that are not there. Drop the row
@@ -30,9 +30,9 @@ export function buildSectionsRecord(readOnly) {
         guidelines: [
             'Guidelines:',
             '```',
-            `root_access: ${LIST_ALLOWED_DIRECTORIES.name} lists configured or accepted roots; every other tool is scoped to them.`,
+            `root_access: ${LIST_ROOTS.name} lists configured or accepted roots; every other tool is scoped to them.`,
             'modern_root_grants: Modern clients do not automatically send workspace roots. Call a tool with a concrete path and approve its grant when elicitation is available.',
-            `path_resolution: Confirm a path with ${LIST.name} or ${SEARCH_FILES.name} before acting on it.`,
+            `path_resolution: Confirm a path with ${LIST.name} or ${FIND_FILES.name} before acting on it.`,
             '```',
         ].join('\n'),
         tools_overview: [
@@ -44,20 +44,20 @@ export function buildSectionsRecord(readOnly) {
         constraints: [
             'Constraints:',
             '```',
-            `allowed_roots: Startup roots come from CLI paths, FS_ALLOWED_DIRS, or --allow-cwd; accepted modern grants are additive. Call ${LIST_ALLOWED_DIRECTORIES.name} to read the current set.`,
+            `allowed_roots: Startup roots come from CLI paths, FS_ALLOWED_DIRS, or --allow-cwd; accepted modern grants are additive. Call ${LIST_ROOTS.name} to read the current set.`,
             'legacy_roots: Legacy clients may additionally seed roots through the deprecated roots/list flow.',
             'sensitive_paths: Sensitive file paths (.env, *.pem, *id_rsa*) are denied by default.',
             `enforced_limits: max file size ${maxFileMb} MB, file search cap ${MAX_SEARCH_RESULTS} results, content search cap ${DEFAULT_SEARCH_CONTENT_RESULTS} matches.`,
             'ephemeral_results: When a result carries a resource_link or a resourceUri (in structuredContent or _meta), call resources/read immediately — cached results are ephemeral and expire after ~60 seconds, eviction, or restart.',
-            'pagination: nextCursor appears in the text (list) or _meta (find_files, search_text) and is backed by a snapshot on the same ~60s clock. Page through promptly; if a cursor is rejected, start again without one. resourceUri appears on the first page only.',
+            'pagination: nextCursor appears in the result text and in _meta, backed by a snapshot on the same ~60s clock. Page through promptly; if a cursor is rejected, start again without one. resourceUri appears on the first page only.',
             '```',
         ].join('\n'),
         error_recovery: [
             'Error Recovery:',
             '```',
-            `ACCESS_DENIED: Run ${LIST_ALLOWED_DIRECTORIES.name}; configure a missing startup root or retry a concrete path and approve the grant.`,
-            `NOT_FOUND: Run ${LIST.name} or ${SEARCH_FILES.name} to verify the path.`,
-            `TOO_LARGE: Use ${READ_FILE.name} with head/tail or startLine/endLine, or split across several calls.`,
+            `ACCESS_DENIED: Run ${LIST_ROOTS.name}; configure a missing startup root or retry a concrete path and approve the grant.`,
+            `NOT_FOUND: Run ${LIST.name} or ${FIND_FILES.name} to verify the path.`,
+            `TOO_LARGE: Use ${READ.name} with head/tail or startLine/endLine, or split across several calls.`,
             'TIMEOUT: Reduce scope, depth, or maxResults.',
             'INVALID_INPUT: Re-read the tool schema in tools/list.',
             '```',

package/dist/instructions.js.map

@@ -1 +1 @@
-{"version":3,"file":"instructions.js","sourceRoot":"","sources":["../src/instructions.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,aAAa,EACb,IAAI,EACJ,wBAAwB,EACxB,mBAAmB,EACnB,SAAS,EACT,cAAc,EACd,YAAY,GACb,MAAM,kBAAkB,CAAC;AAE1B,SAAS,kBAAkB,CAAC,QAAiB;IAC3C,MAAM,IAAI,GAAyB;QACjC,CAAC,UAAU,EAAE,CAAC,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QAC3E,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;KAC3B,CAAC;IAEF,4EAA4E;IAC5E,4EAA4E;IAC5E,iCAAiC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,OAAO,WAAW,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAE1D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAC/B,6DAA6D;IAC7D,kHAAkH,CAAC;AAErH,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IACjE,OAAO;QACL,UAAU,EAAE;YACV,aAAa;YACb,KAAK;YACL,gBAAgB,wBAAwB,CAAC,IAAI,0EAA0E;YACvH,qKAAqK;YACrK,wCAAwC,IAAI,CAAC,IAAI,OAAO,YAAY,CAAC,IAAI,uBAAuB;YAChG,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,cAAc,EAAE;YACd,iBAAiB;YACjB,kBAAkB,CAAC,QAAQ,CAAC;YAC5B,EAAE;YACF,kEAAkE;SACnE,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,WAAW,EAAE;YACX,cAAc;YACd,KAAK;YACL,gIAAgI,wBAAwB,CAAC,IAAI,2BAA2B;YACxL,kGAAkG;YAClG,sFAAsF;YACtF,kCAAkC,SAAS,wBAAwB,kBAAkB,gCAAgC,8BAA8B,WAAW;YAC9J,+NAA+N;YAC/N,+PAA+P;YAC/P,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,cAAc,EAAE;YACd,iBAAiB;YACjB,KAAK;YACL,sBAAsB,wBAAwB,CAAC,IAAI,oFAAoF;YACvI,kBAAkB,IAAI,CAAC,IAAI,OAAO,YAAY,CAAC,IAAI,sBAAsB;YACzE,kBAAkB,SAAS,CAAC,IAAI,sEAAsE;YACtG,8CAA8C;YAC9C,uDAAuD;YACvD,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgC;IAC7D,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AACvD,CAAC","sourcesContent":["import {\n  DEFAULT_SEARCH_CONTENT_RESULTS,\n  getMaxTextFileSize,\n  MAX_SEARCH_RESULTS,\n} from './core/util.js';\nimport {\n  GET_FILE_INFO,\n  LIST,\n  LIST_ALLOWED_DIRECTORIES,\n  MUTATING_TOOL_NAMES,\n  READ_FILE,\n  SEARCH_CONTENT,\n  SEARCH_FILES,\n} from './tools/index.js';\n\nfunction buildToolsOverview(readOnly: boolean): string {\n  const rows: [string, string[]][] = [\n    ['Navigate', [LIST_ALLOWED_DIRECTORIES.name, LIST.name, SEARCH_FILES.name]],\n    ['Inspect', [GET_FILE_INFO.name, SEARCH_CONTENT.name]],\n    ['Read', [READ_FILE.name]],\n  ];\n\n  // Under --read-only the mutating tools are never registered, so advertising\n  // them here would point the model at tools that are not there. Drop the row\n  // rather than emit an empty one.\n  if (!readOnly) {\n    rows.push(['Write', [...MUTATING_TOOL_NAMES]]);\n  }\n\n  const rowLines = rows.map(([cat, names]) => `${cat}: ${names.join(', ')}`);\n  return `\\`\\`\\`\\n${rowLines.join('\\n')}\\n\\`\\`\\``;\n}\n\nexport const INSTRUCTIONS_URI = 'internal://instructions';\n\n/**\n * The one statement of what this server is and how to approach it. The server's\n * `instructions`, the `get-help` prompt, and the instructions resource all\n * describe the same document, and three hand-maintained paraphrases of it drift\n * against each other and cost the client the same sentence three times.\n */\nexport const INSTRUCTIONS_SUMMARY =\n  'Navigation guide for filesystem-mcp tools and constraints. ' +\n  'Use list_roots to inspect configured or accepted roots, then list/find_files -> stat -> read. Never guess paths.';\n\nexport function buildSectionsRecord(readOnly: boolean): Record<string, string> {\n  const maxFileMb = Math.floor(getMaxTextFileSize() / 1024 / 1024);\n  return {\n    guidelines: [\n      'Guidelines:',\n      '```',\n      `root_access: ${LIST_ALLOWED_DIRECTORIES.name} lists configured or accepted roots; every other tool is scoped to them.`,\n      'modern_root_grants: Modern clients do not automatically send workspace roots. Call a tool with a concrete path and approve its grant when elicitation is available.',\n      `path_resolution: Confirm a path with ${LIST.name} or ${SEARCH_FILES.name} before acting on it.`,\n      '```',\n    ].join('\\n'),\n    tools_overview: [\n      'Tools Overview:',\n      buildToolsOverview(readOnly),\n      '',\n      'Full schemas, descriptions, and annotations are in `tools/list`.',\n    ].join('\\n'),\n    constraints: [\n      'Constraints:',\n      '```',\n      `allowed_roots: Startup roots come from CLI paths, FS_ALLOWED_DIRS, or --allow-cwd; accepted modern grants are additive. Call ${LIST_ALLOWED_DIRECTORIES.name} to read the current set.`,\n      'legacy_roots: Legacy clients may additionally seed roots through the deprecated roots/list flow.',\n      'sensitive_paths: Sensitive file paths (.env, *.pem, *id_rsa*) are denied by default.',\n      `enforced_limits: max file size ${maxFileMb} MB, file search cap ${MAX_SEARCH_RESULTS} results, content search cap ${DEFAULT_SEARCH_CONTENT_RESULTS} matches.`,\n      'ephemeral_results: When a result carries a resource_link or a resourceUri (in structuredContent or _meta), call resources/read immediately — cached results are ephemeral and expire after ~60 seconds, eviction, or restart.',\n      'pagination: nextCursor appears in the text (list) or _meta (find_files, search_text) and is backed by a snapshot on the same ~60s clock. Page through promptly; if a cursor is rejected, start again without one. resourceUri appears on the first page only.',\n      '```',\n    ].join('\\n'),\n    error_recovery: [\n      'Error Recovery:',\n      '```',\n      `ACCESS_DENIED: Run ${LIST_ALLOWED_DIRECTORIES.name}; configure a missing startup root or retry a concrete path and approve the grant.`,\n      `NOT_FOUND: Run ${LIST.name} or ${SEARCH_FILES.name} to verify the path.`,\n      `TOO_LARGE: Use ${READ_FILE.name} with head/tail or startLine/endLine, or split across several calls.`,\n      'TIMEOUT: Reduce scope, depth, or maxResults.',\n      'INVALID_INPUT: Re-read the tool schema in tools/list.',\n      '```',\n    ].join('\\n'),\n  };\n}\n\nexport function renderSections(sections: Record<string, string>): string {\n  return `\\n${Object.values(sections).join('\\n\\n')}\\n`;\n}\n"]}
+{"version":3,"file":"instructions.js","sourceRoot":"","sources":["../src/instructions.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,UAAU,EACV,IAAI,EACJ,UAAU,EACV,mBAAmB,EACnB,IAAI,EACJ,WAAW,EACX,IAAI,GACL,MAAM,kBAAkB,CAAC;AAE1B,SAAS,kBAAkB,CAAC,QAAiB;IAC3C,MAAM,IAAI,GAAyB;QACjC,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KACtB,CAAC;IAEF,4EAA4E;IAC5E,4EAA4E;IAC5E,iCAAiC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,OAAO,WAAW,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAE1D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAC/B,6DAA6D;IAC7D,kHAAkH,CAAC;AAErH,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IACjE,OAAO;QACL,UAAU,EAAE;YACV,aAAa;YACb,KAAK;YACL,gBAAgB,UAAU,CAAC,IAAI,0EAA0E;YACzG,qKAAqK;YACrK,wCAAwC,IAAI,CAAC,IAAI,OAAO,UAAU,CAAC,IAAI,uBAAuB;YAC9F,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,cAAc,EAAE;YACd,iBAAiB;YACjB,kBAAkB,CAAC,QAAQ,CAAC;YAC5B,EAAE;YACF,kEAAkE;SACnE,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,WAAW,EAAE;YACX,cAAc;YACd,KAAK;YACL,gIAAgI,UAAU,CAAC,IAAI,2BAA2B;YAC1K,kGAAkG;YAClG,sFAAsF;YACtF,kCAAkC,SAAS,wBAAwB,kBAAkB,gCAAgC,8BAA8B,WAAW;YAC9J,+NAA+N;YAC/N,mOAAmO;YACnO,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,cAAc,EAAE;YACd,iBAAiB;YACjB,KAAK;YACL,sBAAsB,UAAU,CAAC,IAAI,oFAAoF;YACzH,kBAAkB,IAAI,CAAC,IAAI,OAAO,UAAU,CAAC,IAAI,sBAAsB;YACvE,kBAAkB,IAAI,CAAC,IAAI,sEAAsE;YACjG,8CAA8C;YAC9C,uDAAuD;YACvD,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgC;IAC7D,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AACvD,CAAC","sourcesContent":["import {\n  DEFAULT_SEARCH_CONTENT_RESULTS,\n  getMaxTextFileSize,\n  MAX_SEARCH_RESULTS,\n} from './core/util.js';\nimport {\n  FIND_FILES,\n  LIST,\n  LIST_ROOTS,\n  MUTATING_TOOL_NAMES,\n  READ,\n  SEARCH_TEXT,\n  STAT,\n} from './tools/index.js';\n\nfunction buildToolsOverview(readOnly: boolean): string {\n  const rows: [string, string[]][] = [\n    ['Navigate', [LIST_ROOTS.name, LIST.name, FIND_FILES.name]],\n    ['Inspect', [STAT.name, SEARCH_TEXT.name]],\n    ['Read', [READ.name]],\n  ];\n\n  // Under --read-only the mutating tools are never registered, so advertising\n  // them here would point the model at tools that are not there. Drop the row\n  // rather than emit an empty one.\n  if (!readOnly) {\n    rows.push(['Write', [...MUTATING_TOOL_NAMES]]);\n  }\n\n  const rowLines = rows.map(([cat, names]) => `${cat}: ${names.join(', ')}`);\n  return `\\`\\`\\`\\n${rowLines.join('\\n')}\\n\\`\\`\\``;\n}\n\nexport const INSTRUCTIONS_URI = 'internal://instructions';\n\n/**\n * The one statement of what this server is and how to approach it. The server's\n * `instructions`, the `get-help` prompt, and the instructions resource all\n * describe the same document, and three hand-maintained paraphrases of it drift\n * against each other and cost the client the same sentence three times.\n */\nexport const INSTRUCTIONS_SUMMARY =\n  'Navigation guide for filesystem-mcp tools and constraints. ' +\n  'Use list_roots to inspect configured or accepted roots, then list/find_files -> stat -> read. Never guess paths.';\n\nexport function buildSectionsRecord(readOnly: boolean): Record<string, string> {\n  const maxFileMb = Math.floor(getMaxTextFileSize() / 1024 / 1024);\n  return {\n    guidelines: [\n      'Guidelines:',\n      '```',\n      `root_access: ${LIST_ROOTS.name} lists configured or accepted roots; every other tool is scoped to them.`,\n      'modern_root_grants: Modern clients do not automatically send workspace roots. Call a tool with a concrete path and approve its grant when elicitation is available.',\n      `path_resolution: Confirm a path with ${LIST.name} or ${FIND_FILES.name} before acting on it.`,\n      '```',\n    ].join('\\n'),\n    tools_overview: [\n      'Tools Overview:',\n      buildToolsOverview(readOnly),\n      '',\n      'Full schemas, descriptions, and annotations are in `tools/list`.',\n    ].join('\\n'),\n    constraints: [\n      'Constraints:',\n      '```',\n      `allowed_roots: Startup roots come from CLI paths, FS_ALLOWED_DIRS, or --allow-cwd; accepted modern grants are additive. Call ${LIST_ROOTS.name} to read the current set.`,\n      'legacy_roots: Legacy clients may additionally seed roots through the deprecated roots/list flow.',\n      'sensitive_paths: Sensitive file paths (.env, *.pem, *id_rsa*) are denied by default.',\n      `enforced_limits: max file size ${maxFileMb} MB, file search cap ${MAX_SEARCH_RESULTS} results, content search cap ${DEFAULT_SEARCH_CONTENT_RESULTS} matches.`,\n      'ephemeral_results: When a result carries a resource_link or a resourceUri (in structuredContent or _meta), call resources/read immediately — cached results are ephemeral and expire after ~60 seconds, eviction, or restart.',\n      'pagination: nextCursor appears in the result text and in _meta, backed by a snapshot on the same ~60s clock. Page through promptly; if a cursor is rejected, start again without one. resourceUri appears on the first page only.',\n      '```',\n    ].join('\\n'),\n    error_recovery: [\n      'Error Recovery:',\n      '```',\n      `ACCESS_DENIED: Run ${LIST_ROOTS.name}; configure a missing startup root or retry a concrete path and approve the grant.`,\n      `NOT_FOUND: Run ${LIST.name} or ${FIND_FILES.name} to verify the path.`,\n      `TOO_LARGE: Use ${READ.name} with head/tail or startLine/endLine, or split across several calls.`,\n      'TIMEOUT: Reduce scope, depth, or maxResults.',\n      'INVALID_INPUT: Re-read the tool schema in tools/list.',\n      '```',\n    ].join('\\n'),\n  };\n}\n\nexport function renderSections(sections: Record<string, string>): string {\n  return `\\n${Object.values(sections).join('\\n\\n')}\\n`;\n}\n"]}

package/dist/prompts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,SAAS,EAGV,MAAM,8BAA8B,CAAC;AAUtC,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AA+BD,wBAAgB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAmC/D"}
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAS/E,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAID,wBAAgB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAgD/D"}

package/dist/prompts.js

@@ -1,26 +1,6 @@
 import { completable } from '@modelcontextprotocol/server';
 import * as z from 'zod/v4';
-import { Logger } from './core/observability.js';
 import { buildSectionsRecord, INSTRUCTIONS_SUMMARY, renderSections } from './instructions.js';
-// --- Helpers ---
-function topicArg(topics, description) {
-    return completable(
-    // No content validation beyond non-empty: the handler resolves a topic by
-    // `Object.hasOwn` against a frozen record, so anything unrecognized already
-    // falls through to the not-found reply without reaching an interpreter.
-    z.string().min(1, { message: 'Topic required' }).describe(description), (value) => {
-        const lower = value.toLowerCase();
-        return lower ? topics.filter((t) => t.startsWith(lower)) : [...topics];
-    });
-}
-function userText(text) {
-    const content = {
-        type: 'text',
-        text,
-        annotations: { audience: ['assistant'], priority: 1 },
-    };
-    return { role: 'user', content };
-}
 // --- Prompt entries ---
 export function registerPrompts(deps) {
     const sections = buildSectionsRecord(deps.readOnly ?? false);
@@ -30,21 +10,33 @@ export function registerPrompts(deps) {
         title: 'Get Help',
         description: INSTRUCTIONS_SUMMARY,
         argsSchema: z.strictObject({
-            topic: topicArg(topics, `Section key to filter instructions (one of: ${topics.join(', ')}); omit to return all instructions.`).optional(),
+            topic: completable(
+            // No content validation beyond non-empty: the handler resolves a topic by
+            // `Object.hasOwn` against a frozen record, so anything unrecognized already
+            // falls through to the not-found reply without reaching an interpreter.
+            z
+                .string()
+                .min(1, { message: 'Topic required' })
+                .describe(`Section key to filter instructions (one of: ${topics.join(', ')}); omit to return all instructions.`), (value) => {
+                const lower = value.toLowerCase();
+                return lower ? topics.filter((t) => t.startsWith(lower)) : [...topics];
+            }).optional(),
         }),
     }, ({ topic }) => {
         const lowerTopic = topic?.toLowerCase();
         const section = lowerTopic && Object.hasOwn(sections, lowerTopic) ? sections[lowerTopic] : undefined;
-        if (topic && !section) {
-            Logger.debug('get-help: unknown topic requested', { topic });
-        }
         const text = section ??
             (topic
                 ? `Section '${topic}' not found. Available: ${topics.join(', ')}\n\n${instructions}`
                 : instructions);
         return {
             description: INSTRUCTIONS_SUMMARY,
-            messages: [userText(text)],
+            messages: [
+                {
+                    role: 'user',
+                    content: { type: 'text', text, annotations: { audience: ['assistant'], priority: 1 } },
+                },
+            ],
         };
     });
 }

package/dist/prompts.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAS9F,kBAAkB;AAElB,SAAS,QAAQ,CACf,MAAyB,EACzB,WAAmB;IAEnB,OAAO,WAAW;IAChB,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EACtE,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IACzE,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,MAAM;QACZ,IAAI;QACJ,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;KACtD,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,yBAAyB;AAEzB,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAErC,IAAI,CAAC,MAAM,CAAC,cAAc,CACxB,UAAU,EACV;QACE,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,oBAAoB;QACjC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC;YACzB,KAAK,EAAE,QAAQ,CACb,MAAM,EACN,+CAA+C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,CACtG,CAAC,QAAQ,EAAE;SACb,CAAC;KACH,EACD,CAAC,EAAE,KAAK,EAAkC,EAAmB,EAAE;QAC7D,MAAM,UAAU,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC;QACxC,MAAM,OAAO,GACX,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,IAAI,GACR,OAAO;YACP,CAAC,KAAK;gBACJ,CAAC,CAAC,YAAY,KAAK,2BAA2B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,YAAY,EAAE;gBACpF,CAAC,CAAC,YAAY,CAAC,CAAC;QACpB,OAAO;YACL,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SAC3B,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  GetPromptResult,\n  McpServer,\n  PromptMessage,\n  TextContent,\n} from '@modelcontextprotocol/server';\nimport { completable } from '@modelcontextprotocol/server';\n\nimport * as z from 'zod/v4';\n\nimport { Logger } from './core/observability.js';\nimport { buildSectionsRecord, INSTRUCTIONS_SUMMARY, renderSections } from './instructions.js';\n\n// --- Types ---\n\ninterface PromptRegistrarDeps {\n  readonly server: McpServer;\n  readonly readOnly?: boolean;\n}\n\n// --- Helpers ---\n\nfunction topicArg(\n  topics: readonly string[],\n  description: string,\n): ReturnType<typeof completable<z.ZodString>> {\n  return completable(\n    // No content validation beyond non-empty: the handler resolves a topic by\n    // `Object.hasOwn` against a frozen record, so anything unrecognized already\n    // falls through to the not-found reply without reaching an interpreter.\n    z.string().min(1, { message: 'Topic required' }).describe(description),\n    (value) => {\n      const lower = value.toLowerCase();\n      return lower ? topics.filter((t) => t.startsWith(lower)) : [...topics];\n    },\n  );\n}\n\nfunction userText(text: string): PromptMessage {\n  const content: TextContent = {\n    type: 'text',\n    text,\n    annotations: { audience: ['assistant'], priority: 1 },\n  };\n  return { role: 'user', content };\n}\n\n// --- Prompt entries ---\n\nexport function registerPrompts(deps: PromptRegistrarDeps): void {\n  const sections = buildSectionsRecord(deps.readOnly ?? false);\n  const instructions = renderSections(sections);\n  const topics = Object.keys(sections);\n\n  deps.server.registerPrompt(\n    'get-help',\n    {\n      title: 'Get Help',\n      description: INSTRUCTIONS_SUMMARY,\n      argsSchema: z.strictObject({\n        topic: topicArg(\n          topics,\n          `Section key to filter instructions (one of: ${topics.join(', ')}); omit to return all instructions.`,\n        ).optional(),\n      }),\n    },\n    ({ topic }: { topic?: string | undefined }): GetPromptResult => {\n      const lowerTopic = topic?.toLowerCase();\n      const section =\n        lowerTopic && Object.hasOwn(sections, lowerTopic) ? sections[lowerTopic] : undefined;\n      if (topic && !section) {\n        Logger.debug('get-help: unknown topic requested', { topic });\n      }\n      const text =\n        section ??\n        (topic\n          ? `Section '${topic}' not found. Available: ${topics.join(', ')}\\n\\n${instructions}`\n          : instructions);\n      return {\n        description: INSTRUCTIONS_SUMMARY,\n        messages: [userText(text)],\n      };\n    },\n  );\n}\n"]}
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAS9F,yBAAyB;AAEzB,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAErC,IAAI,CAAC,MAAM,CAAC,cAAc,CACxB,UAAU,EACV;QACE,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,oBAAoB;QACjC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC;YACzB,KAAK,EAAE,WAAW;YAChB,0EAA0E;YAC1E,4EAA4E;YAC5E,wEAAwE;YACxE,CAAC;iBACE,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;iBACrC,QAAQ,CACP,+CAA+C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,CACtG,EACH,CAAC,KAAK,EAAE,EAAE;gBACR,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;YACzE,CAAC,CACF,CAAC,QAAQ,EAAE;SACb,CAAC;KACH,EACD,CAAC,EAAE,KAAK,EAAkC,EAAmB,EAAE;QAC7D,MAAM,UAAU,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC;QACxC,MAAM,OAAO,GACX,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,IAAI,GACR,OAAO;YACP,CAAC,KAAK;gBACJ,CAAC,CAAC,YAAY,KAAK,2BAA2B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,YAAY,EAAE;gBACpF,CAAC,CAAC,YAAY,CAAC,CAAC;QACpB,OAAO;YACL,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;iBACvF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { GetPromptResult, McpServer } from '@modelcontextprotocol/server';\nimport { completable } from '@modelcontextprotocol/server';\n\nimport * as z from 'zod/v4';\n\nimport { buildSectionsRecord, INSTRUCTIONS_SUMMARY, renderSections } from './instructions.js';\n\n// --- Types ---\n\ninterface PromptRegistrarDeps {\n  readonly server: McpServer;\n  readonly readOnly?: boolean;\n}\n\n// --- Prompt entries ---\n\nexport function registerPrompts(deps: PromptRegistrarDeps): void {\n  const sections = buildSectionsRecord(deps.readOnly ?? false);\n  const instructions = renderSections(sections);\n  const topics = Object.keys(sections);\n\n  deps.server.registerPrompt(\n    'get-help',\n    {\n      title: 'Get Help',\n      description: INSTRUCTIONS_SUMMARY,\n      argsSchema: z.strictObject({\n        topic: completable(\n          // No content validation beyond non-empty: the handler resolves a topic by\n          // `Object.hasOwn` against a frozen record, so anything unrecognized already\n          // falls through to the not-found reply without reaching an interpreter.\n          z\n            .string()\n            .min(1, { message: 'Topic required' })\n            .describe(\n              `Section key to filter instructions (one of: ${topics.join(', ')}); omit to return all instructions.`,\n            ),\n          (value) => {\n            const lower = value.toLowerCase();\n            return lower ? topics.filter((t) => t.startsWith(lower)) : [...topics];\n          },\n        ).optional(),\n      }),\n    },\n    ({ topic }: { topic?: string | undefined }): GetPromptResult => {\n      const lowerTopic = topic?.toLowerCase();\n      const section =\n        lowerTopic && Object.hasOwn(sections, lowerTopic) ? sections[lowerTopic] : undefined;\n      const text =\n        section ??\n        (topic\n          ? `Section '${topic}' not found. Available: ${topics.join(', ')}\\n\\n${instructions}`\n          : instructions);\n      return {\n        description: INSTRUCTIONS_SUMMARY,\n        messages: [\n          {\n            role: 'user',\n            content: { type: 'text', text, annotations: { audience: ['assistant'], priority: 1 } },\n          },\n        ],\n      };\n    },\n  );\n}\n"]}

package/dist/resources.d.ts

@@ -1,4 +1,4 @@
-import type { CacheHint, McpServer, ReadResourceResult, Resource, Role, ServerContext, ServerNotifier } from '@modelcontextprotocol/server';
+import type { CacheHint, CompleteResourceTemplateCallback, McpServer, ReadResourceResult, Resource, Role, ServerContext, ServerNotifier } from '@modelcontextprotocol/server';
 import type { PathGuard } from './core/path.js';
 import type { ResourceStore } from './core/store.js';
 import { type WatcherRegistry } from './core/watcher-registry.js';
@@ -60,9 +60,9 @@ interface StaticResourceContract extends BaseResourceContract {
 interface TemplateResourceContract extends BaseResourceContract {
     uriTemplate: string;
     uri?: never;
-    complete?: (variable: string, value: string, ctx?: {
-        arguments?: Record<string, string>;
-    }) => Promise<string[]> | string[];
+    complete?: {
+        path: CompleteResourceTemplateCallback;
+    };
 }
 type ResourceContract = StaticResourceContract | TemplateResourceContract;
 export declare function getResourceContracts(options: ResourceRegistrationOptions): ResourceContract[];

package/dist/resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,SAAS,EACT,kBAAkB,EAClB,QAAQ,EAER,IAAI,EACJ,aAAa,EACb,cAAc,EAGf,MAAM,8BAA8B,CAAC;AA4BtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AAYpC,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,SAAS,CAAC;IACrB,8FAA8F;IAC9F,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,qFAAqF;IACrF,GAAG,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B;;;;OAIG;IACH,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACnC;AAED,KAAK,qBAAqB,GAAG,IAAI,CAAC,2BAA2B,EAAE,WAAW,GAAG,UAAU,CAAC,GAAG;IACzF,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAoBF,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,WAAW,CAAC,EAAE;QACZ,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,QAAQ,CAAC,IAAI,EAAE,CACb,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,EAC5C,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,CACnB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,KAC1B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,GAAG,OAAO,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,CACd,GAAG,EAAE,aAAa,KACf,OAAO,CAAC;QAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC,GAAG;QAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC;CACrE;AAED,8EAA8E;AAC9E,UAAU,sBAAuB,SAAQ,oBAAoB;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB;AAED,8EAA8E;AAC9E,UAAU,wBAAyB,SAAQ,oBAAoB;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,KAAK,CAAC;IACZ,QAAQ,CAAC,EAAE,CACT,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,KACzC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC;CACnC;AAED,KAAK,gBAAgB,GAAG,sBAAsB,GAAG,wBAAwB,CAAC;AAoP1E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,gBAAgB,EAAE,CAM7F;AA4BD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG;IAAE,OAAO,IAAI,IAAI,CAAA;CAAE,CA6JlF"}
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,gCAAgC,EAChC,SAAS,EACT,kBAAkB,EAClB,QAAQ,EAER,IAAI,EACJ,aAAa,EACb,cAAc,EAGf,MAAM,8BAA8B,CAAC;AA2BtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AAYpC,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,SAAS,CAAC;IACrB,8FAA8F;IAC9F,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,qFAAqF;IACrF,GAAG,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B;;;;OAIG;IACH,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACnC;AAED,KAAK,qBAAqB,GAAG,IAAI,CAAC,2BAA2B,EAAE,WAAW,GAAG,UAAU,CAAC,GAAG;IACzF,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAoBF,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,WAAW,CAAC,EAAE;QACZ,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,QAAQ,CAAC,IAAI,EAAE,CACb,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,EAC5C,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,CACnB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,KAC1B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,GAAG,OAAO,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,CACd,GAAG,EAAE,aAAa,KACf,OAAO,CAAC;QAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC,GAAG;QAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC;CACrE;AAED,8EAA8E;AAC9E,UAAU,sBAAuB,SAAQ,oBAAoB;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB;AAED,8EAA8E;AAC9E,UAAU,wBAAyB,SAAQ,oBAAoB;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,KAAK,CAAC;IACZ,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,gCAAgC,CAAA;KAAE,CAAC;CACvD;AAED,KAAK,gBAAgB,GAAG,sBAAsB,GAAG,wBAAwB,CAAC;AAqP1E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,gBAAgB,EAAE,CAM7F;AA4BD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG;IAAE,OAAO,IAAI,IAAI,CAAA;CAAE,CAiJlF"}

package/dist/resources.js

@@ -1,4 +1,4 @@
-import { checkResourceAllowed, ProtocolError, ProtocolErrorCode, ResourceNotFoundError, ResourceTemplate, resourceUrlFromServerUrl, UriTemplate, } from '@modelcontextprotocol/server';
+import { checkResourceAllowed, ProtocolError, ProtocolErrorCode, ResourceNotFoundError, ResourceTemplate, resourceUrlFromServerUrl, } from '@modelcontextprotocol/server';
 import { ErrorCode, formatUnknownErrorMessage, fsErrorCode, hasErrorShape, isFsError, } from './core/errors.js';
 import { decodeFileUriPath, encodeFileUriPath, extractPath, FILESYSTEM_FILE_URI_TEMPLATE, } from './core/file-uri.js';
 import { GuardedFileSystem } from './core/fs.js';
@@ -110,14 +110,14 @@ function createFilesystemResource(options) {
                 ],
             };
         },
-        async complete(variable, value) {
-            if (variable !== 'path')
-                return [];
+        complete: {
             // Both ends speak the `{+path}` form (see encodeFileUriPath), not raw OS
             // paths: the partial arriving here is whatever this returned last, so the
             // decode mirrors the encode. An undecodable partial is matched as typed.
-            const suggestions = await completer.suggest(decodeFileUriPath(value) ?? value);
-            return suggestions.map(encodeFileUriPath);
+            path: async (value) => {
+                const suggestions = await completer.suggest(decodeFileUriPath(value) ?? value);
+                return suggestions.map(encodeFileUriPath);
+            },
         },
         subscribe(uri, notify) {
             // Already subscribed on this connection: the watcher is live and the sink
@@ -285,17 +285,7 @@ export function registerResources(deps) {
         if (contract.uriTemplate) {
             const template = new ResourceTemplate(contract.uriTemplate, {
                 list: contract.list,
-                ...(contract.complete
-                    ? {
-                        complete: Object.fromEntries(new UriTemplate(contract.uriTemplate).variableNames.map((varName) => [
-                            varName,
-                            (value, ctx) => {
-                                const completeFn = contract.complete;
-                                return completeFn ? completeFn(varName, value, ctx) : [];
-                            },
-                        ])),
-                    }
-                    : {}),
+                ...(contract.complete ? { complete: contract.complete } : {}),
             });
             server.registerResource(contract.name, template, config, wrapRead(contract));
         }

package/dist/resources.js.map

@@ -1 +1 @@
-{"version":3,"file":"resources.js","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,wBAAwB,EACxB,WAAW,GACZ,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EACL,SAAS,EACT,yBAAyB,EACzB,WAAW,EACX,aAAa,EACb,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EACL,qBAAqB,EACrB,YAAY,GAEb,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAoC3B;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,SAAS,CAAC,KAAK,CAAC;QAChB,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,aAAa,CAAC,CAC/E,CAAC;AACJ,CAAC;AAoDD,kEAAkE;AAClE,eAAe;AACf,kEAAkE;AAElE,SAAS,0BAA0B,CAAC,OAAoC;IACtE,MAAM,IAAI,GAAG,cAAc,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,oBAAoB;QACjC,QAAQ,EAAE,eAAe;QACzB,GAAG,EAAE,gBAAgB;QACrB,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;QACvD,SAAS,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;QACzE,IAAI,CAAC,GAAG;YACN,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,GAAG,CAAC,IAAI;wBACb,QAAQ,EAAE,eAAe;wBACzB,IAAI;qBACL;iBACF;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,aAAa;AACb,kEAAkE;AAElE,SAAS,wBAAwB,CAAC,OAAoC;IACpE,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,qBAAqB,EAAE,CAAC;IACpE,4EAA4E;IAC5E,4EAA4E;IAC5E,oCAAoC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC;IAC3D,6EAA6E;IAC7E,kEAAkE;IAClE,0EAA0E;IAC1E,qEAAqE;IACrE,2EAA2E;IAC3E,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,0EAA0E;IAC1E,uEAAuE;IACvE,4EAA4E;IAC5E,4EAA4E;IAC5E,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAC;IAEjE,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,iFAAiF;QAC9F,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;QACvD,mEAAmE;QACnE,0EAA0E;QAC1E,uEAAuE;QACvE,2EAA2E;QAC3E,2EAA2E;QAC3E,SAAS,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE;QAEvE,0EAA0E;QAC1E,mEAAmE;QACnE,uEAAuE;QACvE,oCAAoC;QAEpC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAmB;YAC7C,0EAA0E;YAC1E,yEAAyE;YACzE,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,yEAAyE;YACzE,yDAAyD;YACzD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,aAAa,EAC/B,wDAAwD,CACzD,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACtD,MAAM,EAAE,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAE7C,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,GAAG,CAAC,IAAI;wBACb,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,0BAA0B;wBAC3D,GAAG,CAAC,UAAU,CAAC,QAAQ;4BACrB,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;4BACjD,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;qBACpD;iBACF;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK;YAC5B,IAAI,QAAQ,KAAK,MAAM;gBAAE,OAAO,EAAE,CAAC;YACnC,yEAAyE;YACzE,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;YAC/E,OAAO,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC5C,CAAC;QAED,SAAS,CAAC,GAAG,EAAE,MAAM;YACnB,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC1C,wEAAwE;YACxE,wDAAwD;YACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAE5B,MAAM,OAAO,GAAG,KAAK,IAAkC,EAAE;gBACvD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE;oBACpE,aAAa,EAAE,IAAI;iBACpB,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;oBACd,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACpB,OAAO,SAAS,CAAC;gBACnB,CAAC;gBAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAChC,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;gBACjF,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;oBACrC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;oBACzB,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;wBACvB,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,uBAAuB,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrF,CAAC;oBACD,MAAM,CAAC,IAAI,CACT,gDAAgD,GAAG,KAAK,yBAAyB,CAAC,GAAG,CAAC,EAAE,CACzF,CAAC;oBACF,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,yEAAyE;gBACzE,yDAAyD;gBACzD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;oBAAE,OAAO,SAAS,CAAC;gBAChD,qEAAqE;gBACrE,2DAA2D;gBAC3D,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,WAAW,CAAC,GAAG;YACb,sDAAsD;YACtD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,OAAO;YACpC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,OAAO;YACL,wEAAwE;YACxE,yEAAyE;YACzE,KAAK,MAAM,GAAG,IAAI,UAAU;gBAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpD,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,YAAY;gBAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,SAAS;AACT,kEAAkE;AAElE,SAAS,oBAAoB,CAAC,OAAoC;IAChE,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,8FAA8F;QAChG,QAAQ,EAAE,kBAAkB;QAC5B,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;QACvD,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE;QACnD,IAAI;YACF,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,uBAAuB;YAClD,MAAM,SAAS,GAAe,EAAE,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAClC,SAAS,CAAC,IAAI,CAAC;wBACb,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,4DAA4D;oBAC5D,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,SAAS;wBAAE,SAAS;oBACjE,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,uEAAuE;YACvE,SAAS,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,SAAS;YACjB,MAAM,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC;YACzB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,aAAa,EAC/B,qFAAqF,CACtF,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,CAAC;YACV,IAAI,CAAC;gBACH,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;oBACvD,MAAM,IAAI,qBAAqB,CAC7B,GAAG,CAAC,QAAQ,EAAE,EACd,oEAAoE,CACrE,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;aAC3E,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,mBAAmB;AACnB,kEAAkE;AAElE,MAAM,UAAU,oBAAoB,CAAC,OAAoC;IACvE,OAAO;QACL,0BAA0B,CAAC,OAAO,CAAC;QACnC,oBAAoB,CAAC,OAAO,CAAC;QAC7B,wBAAwB,CAAC,OAAO,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,YAAY;AACZ,kEAAkE;AAElE,SAAS,QAAQ,CAAC,QAA0B;IAC1C,OAAO,KAAK,EAAE,GAAQ,EAAE,SAA4C,EAAE,GAAkB,EAAE,EAAE;QAC1F,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC;gBAAE,MAAM,KAAK,CAAC;YACvD,yEAAyE;YACzE,gEAAgE;YAChE,uEAAuE;YACvE,iDAAiD;YACjD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACjE,CAAC;YACD,+DAA+D;YAC/D,uEAAuE;YACvE,gCAAgC;YAChC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;YAChF,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAA2B;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC;IAE9F,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG;YACb,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;QAEF,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,WAAW,EAAE;gBAC1D,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,GAAG,CAAC,QAAQ,CAAC,QAAQ;oBACnB,CAAC,CAAC;wBACE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAC1B,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;4BACnE,OAAO;4BACP,CAAC,KAAa,EAAE,GAA4C,EAAE,EAAE;gCAC9D,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC;gCACrC,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC3D,CAAC;yBACF,CAAC,CACH;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YAEH,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/E,CAAC;aAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;YACxB,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,GAAQ,EAAE,GAAkB,EAAE,EAAE,CAC5F,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CACjC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,SAAS;IACT,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,qBAAqB,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;QAElE,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAQ,EAAE;YACjD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,MAAM,aAAa,GAAsC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;YAC7E,sEAAsE;YACtE,KAAK,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC3E,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;oBAC5C,GAAG,EAAE,UAAU;oBACf,KAAK,EAAE,yBAAyB,CAAC,GAAG,CAAC;iBACtC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAC7B,qBAAqB,EACrB,KAAK,EAAE,GAAuC,EAAE,EAAE;YAChD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnE,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,uBAAuB,GAAG,KAAK,CAAC;YACpC,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACxB,IACE,UAAU;wBACV,oBAAoB,CAAC,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAC3E,CAAC;wBACD,uBAAuB,GAAG,IAAI,CAAC;oBACjC,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC1B,IACE,oBAAoB,CAAC;oBACnB,iBAAiB;oBACjB,kBAAkB,EAAE,UAAU;iBAC/B,CAAC,EACF,CAAC;oBACD,UAAU,GAAG,IAAI,CAAC;oBAClB,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,SAAS,CAC9C,iBAAiB,CAAC,QAAQ,EAAE,EAC5B,aAAa,CACd,CAAC;oBACF,IAAI,eAAe,KAAK,KAAK,EAAE,CAAC;wBAC9B,+DAA+D;wBAC/D,8DAA8D;wBAC9D,wBAAwB;wBACxB,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,aAAa,EAC/B,6DAA6D,YAAY,yCAAyC,CACnH,CAAC;oBACJ,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,uBAAuB,EAAE,CAAC;oBAC5B,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,aAAa,EAC/B,YAAY,iBAAiB,CAAC,QAAQ,EAAE,yCAAyC,4BAA4B,gDAAgD,CAC9J,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,qBAAqB,CAC7B,iBAAiB,CAAC,QAAQ,EAAE,EAC5B,uBAAuB,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CACtD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAC7B,uBAAuB,EACvB,CAAC,GAAyC,EAAE,EAAE;YAC5C,oEAAoE;YACpE,sEAAsE;YACtE,sEAAsE;YACtE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnE,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;gBACzC,IAAI,CAAC,QAAQ,CAAC,WAAW;oBAAE,SAAS;gBACpC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtE,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC1B,IAAI,oBAAoB,CAAC,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;oBAChF,QAAQ,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;YACL,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;gBACzC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  CacheHint,\n  McpServer,\n  ReadResourceResult,\n  Resource,\n  ResourceUpdatedNotificationParams,\n  Role,\n  ServerContext,\n  ServerNotifier,\n  SubscribeRequestParams,\n  UnsubscribeRequestParams,\n} from '@modelcontextprotocol/server';\nimport {\n  checkResourceAllowed,\n  ProtocolError,\n  ProtocolErrorCode,\n  ResourceNotFoundError,\n  ResourceTemplate,\n  resourceUrlFromServerUrl,\n  UriTemplate,\n} from '@modelcontextprotocol/server';\n\nimport type { FsError } from './core/errors.js';\nimport {\n  ErrorCode,\n  formatUnknownErrorMessage,\n  fsErrorCode,\n  hasErrorShape,\n  isFsError,\n} from './core/errors.js';\nimport {\n  decodeFileUriPath,\n  encodeFileUriPath,\n  extractPath,\n  FILESYSTEM_FILE_URI_TEMPLATE,\n} from './core/file-uri.js';\nimport { GuardedFileSystem } from './core/fs.js';\nimport { Logger } from './core/observability.js';\nimport { PathCompleter } from './core/path-completer.js';\nimport type { PathGuard } from './core/path.js';\nimport type { ResourceStore } from './core/store.js';\nimport {\n  createWatcherRegistry,\n  MAX_WATCHERS,\n  type WatcherRegistry,\n} from './core/watcher-registry.js';\nimport {\n  buildSectionsRecord,\n  INSTRUCTIONS_SUMMARY,\n  INSTRUCTIONS_URI,\n  renderSections,\n} from './instructions.js';\n\n// ═══════════════════════════════════════════════════════════════\n// shared\n// ═══════════════════════════════════════════════════════════════\n\nexport interface ResourceRegistrationOptions {\n  resourceStore: ResourceStore;\n  pathGuard: PathGuard;\n  /** Mirrors the `--read-only` gate so the instructions match the tools actually registered. */\n  readOnly: boolean;\n  /**\n   * Shared file-watcher registry for the modern (per-request) HTTP leg. When set,\n   * the resource uses this handler-scoped registry instead of creating its own\n   * per-server one, so file-change watchers persist across requests and publish\n   * to the shared ServerEventBus. Omitted (per-server registry) on legacy/stdio.\n   */\n  watcherRegistry?: WatcherRegistry;\n  /** Modern-leg typed notification publisher. */\n  notifier?: ServerNotifier;\n  /** The protocol era this instance serves; omitted where the caller does not know. */\n  era?: 'legacy' | 'modern';\n  /**\n   * Scope for shared-content cache hints. 'private' when the endpoint is\n   * API-key gated, mirroring the list hints in server.ts — a shared cache must\n   * not store an authenticated response body. Defaults to 'public'.\n   */\n  cacheScope?: 'public' | 'private';\n}\n\ntype ResourceRegistrarDeps = Omit<ResourceRegistrationOptions, 'pathGuard' | 'readOnly'> & {\n  readonly server: McpServer;\n  readonly pathGuard: PathGuard;\n  readonly readOnly?: boolean;\n};\n\n/**\n * A filesystem failure that reads as not-found on the resource wire, for both\n * `resources/read` and `resources/subscribe`. ACCESS_DENIED folds in\n * deliberately: masking whether an out-of-root or denylisted path exists is the\n * security-correct answer, and the `FsError` message still carries the real\n * cause to the client.\n */\nfunction isNotFoundish(error: unknown): error is FsError {\n  return (\n    isFsError(error) &&\n    (error.code === ErrorCode.NOT_FOUND || error.code === ErrorCode.ACCESS_DENIED)\n  );\n}\n\n// ═══════════════════════════════════════════════════════════════\n// contract\n// ═══════════════════════════════════════════════════════════════\n\ninterface BaseResourceContract {\n  name: string;\n  title?: string;\n  description?: string;\n  mimeType?: string;\n  cacheHint?: CacheHint;\n  annotations?: {\n    audience?: Role[];\n    priority?: number;\n  };\n  readonly read: (\n    uri: URL,\n    variables: Record<string, string | string[]>,\n    ctx: ServerContext,\n  ) => Promise<ReadResourceResult> | ReadResourceResult;\n  readonly subscribe?: (\n    uri: string,\n    notify: (uri: string) => void,\n  ) => Promise<boolean | undefined> | boolean | undefined;\n  readonly unsubscribe?: (uri: string) => void;\n  readonly destroy?: () => void;\n  readonly list?: (\n    ctx: ServerContext,\n  ) => Promise<{ resources: Resource[] }> | { resources: Resource[] };\n}\n\n/** A resource with a fixed, enumerable URI (e.g. internal://instructions). */\ninterface StaticResourceContract extends BaseResourceContract {\n  uri: string;\n  uriTemplate?: never;\n  complete?: never;\n}\n\n/** A resource identified by a URI template (FILESYSTEM_FILE_URI_TEMPLATE). */\ninterface TemplateResourceContract extends BaseResourceContract {\n  uriTemplate: string;\n  uri?: never;\n  complete?: (\n    variable: string,\n    value: string,\n    ctx?: { arguments?: Record<string, string> },\n  ) => Promise<string[]> | string[];\n}\n\ntype ResourceContract = StaticResourceContract | TemplateResourceContract;\n\n// ═══════════════════════════════════════════════════════════════\n// instructions\n// ═══════════════════════════════════════════════════════════════\n\nfunction createInstructionsResource(options: ResourceRegistrationOptions): ResourceContract {\n  const text = renderSections(buildSectionsRecord(options.readOnly));\n  return {\n    name: 'filesystem-mcp-instructions',\n    title: 'Server Instructions',\n    description: INSTRUCTIONS_SUMMARY,\n    mimeType: 'text/markdown',\n    uri: INSTRUCTIONS_URI,\n    annotations: { audience: ['assistant'], priority: 0.8 },\n    cacheHint: { cacheScope: options.cacheScope ?? 'public', ttlMs: 300_000 },\n    read(uri) {\n      return {\n        contents: [\n          {\n            uri: uri.href,\n            mimeType: 'text/markdown',\n            text,\n          },\n        ],\n      };\n    },\n  };\n}\n\n// ═══════════════════════════════════════════════════════════════\n// filesystem\n// ═══════════════════════════════════════════════════════════════\n\nfunction createFilesystemResource(options: ResourceRegistrationOptions): ResourceContract {\n  const completer = new PathCompleter(options.pathGuard);\n  const registry = options.watcherRegistry ?? createWatcherRegistry();\n  // Only the per-server (legacy/stdio) registry is owned by this resource and\n  // destroyed on dispose; the shared modern-leg registry is owned by the host\n  // and torn down at server shutdown.\n  const ownsRegistry = options.watcherRegistry === undefined;\n  // The URIs this connection holds a `resources/subscribe` lease for. The wire\n  // verb is per-URI and idempotent — a second subscribe is the same\n  // subscription, and one unsubscribe ends it — but the registry ref-counts\n  // leases (the HTTP listen leg needs that). Without this set a double\n  // subscribe took two leases that one unsubscribe could not release, and an\n  // unsubscribe for a URI never subscribed released a lease this connection\n  // never took, dropping a watcher some other holder still wanted.\n  const leasedUris = new Set<string>();\n  // Subscribes mid-acquire, keyed by URI. Two concurrent subscribes for the\n  // same URI must share one acquire: both passing the `leasedUris` check\n  // before either finished took two registry leases that the single set entry\n  // could release only once — on the shared modern registry that orphan lease\n  // pinned a watcher until process shutdown.\n  const inflight = new Map<string, Promise<boolean | undefined>>();\n\n  return {\n    name: 'filesystem-mcp-file',\n    title: 'Workspace File',\n    description: 'Read a file from the workspace. Subscribe to get updates when the file changes.',\n    uriTemplate: FILESYSTEM_FILE_URI_TEMPLATE,\n    annotations: { audience: ['assistant'], priority: 0.8 },\n    // Without this the SDK falls back to its conservative `{ ttlMs: 0,\n    // cacheScope: 'private' }`, making every file read uncacheable — and this\n    // is the one resource with a live invalidation channel, so TTL and the\n    // watcher compose exactly as the spec's caching section describes. The TTL\n    // stays short because a non-subscriber gets no invalidation signal at all.\n    cacheHint: { cacheScope: options.cacheScope ?? 'public', ttlMs: 5_000 },\n\n    // No `list`: the template registers with `list: undefined` — readable but\n    // not enumerable. Listing each allowed root as a concrete resource\n    // duplicated the template and grew resources/list linearly with roots;\n    // `list_roots` owns root discovery.\n\n    async read(uri, _variables, _ctx: ServerContext) {\n      // Decode via extractPath — the same decoder resources/subscribe uses — so\n      // both consumers are symmetric with buildFileResourceUri's encoding. The\n      // {+path} template variable arrives still percent-encoded, so validating\n      // it directly would treat \"c%3A/proj/a.ts\" as a literal relative path;\n      // no fallback to it here, or the two branches would validate different\n      // strings. extractPath only fails past the template match on undecodable\n      // percent-encoding, which is the caller's malformed URI.\n      const rawPath = extractPath(uri.href);\n      if (rawPath === undefined) {\n        throw new ProtocolError(\n          ProtocolErrorCode.InvalidParams,\n          'Malformed file URI: path is not valid percent-encoding',\n        );\n      }\n      await options.pathGuard.validateExistingPath(rawPath);\n      const fs = new GuardedFileSystem(options.pathGuard);\n      const readResult = await fs.readRaw(rawPath);\n\n      return {\n        contents: [\n          {\n            uri: uri.href,\n            mimeType: readResult.mimeType || 'application/octet-stream',\n            ...(readResult.isBinary\n              ? { blob: readResult.content.toString('base64') }\n              : { text: readResult.content.toString('utf-8') }),\n          },\n        ],\n      };\n    },\n\n    async complete(variable, value) {\n      if (variable !== 'path') return [];\n      // Both ends speak the `{+path}` form (see encodeFileUriPath), not raw OS\n      // paths: the partial arriving here is whatever this returned last, so the\n      // decode mirrors the encode. An undecodable partial is matched as typed.\n      const suggestions = await completer.suggest(decodeFileUriPath(value) ?? value);\n      return suggestions.map(encodeFileUriPath);\n    },\n\n    subscribe(uri, notify) {\n      // Already subscribed on this connection: the watcher is live and the sink\n      // is registered, so this is a no-op success rather than a second lease.\n      if (leasedUris.has(uri)) return undefined;\n      // A subscribe for this URI is mid-acquire: share its outcome instead of\n      // taking a second lease the lease set cannot represent.\n      const pending = inflight.get(uri);\n      if (pending) return pending;\n\n      const acquire = async (): Promise<boolean | undefined> => {\n        const result = await registry.acquire(options.pathGuard, uri, notify, {\n          markSubscribe: true,\n        });\n        if (result.ok) {\n          leasedUris.add(uri);\n          return undefined;\n        }\n\n        if (result.reason === 'bad-uri') {\n          throw new ResourceNotFoundError(uri, `Cannot subscribe: not a filesystem URI`);\n        }\n        if (result.reason === 'invalid-path') {\n          const err = result.error;\n          if (isNotFoundish(err)) {\n            throw new ResourceNotFoundError(uri, `Cannot subscribe to ${uri}: ${err.message}`);\n          }\n          Logger.warn(\n            `Unexpected error validating path for watcher ${uri}: ${formatUnknownErrorMessage(err)}`,\n          );\n          throw err;\n        }\n        // Unsubscribed (or the registry destroyed) mid-await: the caller already\n        // asked for this to stop, so there is nothing to reject.\n        if (result.reason === 'stale') return undefined;\n        // capped / attach-failed: `false` tells the handler to reject, since\n        // undefined would report success with no watcher attached.\n        return false;\n      };\n\n      const promise = acquire().finally(() => inflight.delete(uri));\n      inflight.set(uri, promise);\n      return promise;\n    },\n\n    unsubscribe(uri) {\n      // Only release a lease this connection actually took.\n      if (!leasedUris.delete(uri)) return;\n      registry.release(uri);\n    },\n\n    destroy() {\n      // Release what this connection still holds before the registry goes: on\n      // the shared (modern) registry nothing else would ever end these leases.\n      for (const uri of leasedUris) registry.release(uri);\n      leasedUris.clear();\n      if (ownsRegistry) registry.destroy();\n    },\n  };\n}\n\n// ═══════════════════════════════════════════════════════════════\n// result\n// ═══════════════════════════════════════════════════════════════\n\nfunction createResultResource(options: ResourceRegistrationOptions): ResourceContract {\n  return {\n    name: 'filesystem-mcp-result',\n    title: 'Cached Tool Result',\n    description:\n      'Ephemeral cached tool output. Listed via resources/list; entries expire after the cache TTL.',\n    mimeType: 'application/json',\n    uriTemplate: 'filesystem-mcp://result/{id}',\n    annotations: { audience: ['assistant'], priority: 0.3 },\n    cacheHint: { cacheScope: 'private', ttlMs: 60_000 },\n    list() {\n      const store = options.resourceStore;\n      const uris = store.keys(); // prunes expired first\n      const resources: Resource[] = [];\n      for (const uri of uris) {\n        try {\n          const entry = store.getEntry(uri);\n          resources.push({\n            uri: entry.uri,\n            name: entry.name,\n            mimeType: entry.mimeType,\n            size: entry.size,\n          });\n        } catch (err) {\n          // An entry may expire between keys() and getEntry; skip it.\n          if (isFsError(err) && err.code === ErrorCode.NOT_FOUND) continue;\n          throw err;\n        }\n      }\n      // Recent-first: keys() returns insertion order, so the newest is last.\n      resources.reverse();\n      return { resources };\n    },\n    read(uri, variables) {\n      const { id } = variables;\n      if (typeof id !== 'string' || id.length === 0) {\n        throw new ProtocolError(\n          ProtocolErrorCode.InvalidParams,\n          'Malformed result URI: missing {id}. Use the exact resourceUri returned by the tool.',\n        );\n      }\n\n      let entry;\n      try {\n        entry = options.resourceStore.getEntry(uri.toString());\n      } catch (err) {\n        if (isFsError(err) && err.code === ErrorCode.NOT_FOUND) {\n          throw new ResourceNotFoundError(\n            uri.toString(),\n            'Cached result not found or expired. Re-run the tool to regenerate.',\n          );\n        }\n        throw err;\n      }\n      return {\n        contents: [{ uri: entry.uri, mimeType: entry.mimeType, text: entry.text }],\n      };\n    },\n  };\n}\n\n// ═══════════════════════════════════════════════════════════════\n// export contracts\n// ═══════════════════════════════════════════════════════════════\n\nexport function getResourceContracts(options: ResourceRegistrationOptions): ResourceContract[] {\n  return [\n    createInstructionsResource(options),\n    createResultResource(options),\n    createFilesystemResource(options),\n  ];\n}\n\n// ═══════════════════════════════════════════════════════════════\n// registrar\n// ═══════════════════════════════════════════════════════════════\n\nfunction wrapRead(contract: ResourceContract) {\n  return async (uri: URL, variables: Record<string, string | string[]>, ctx: ServerContext) => {\n    try {\n      return await contract.read(uri, variables, ctx);\n    } catch (error) {\n      if (hasErrorShape(error, 'ProtocolError')) throw error;\n      // A missing or out-of-root path is a not-found, not a malformed request.\n      // The SDK puts ResourceNotFoundError on the wire as -32602 with\n      // `data.uri`, which is what clients match on; -32002 is the older code\n      // they also accept, and this SDK never emits it.\n      if (isNotFoundish(error)) {\n        throw new ResourceNotFoundError(uri.toString(), error.message);\n      }\n      // A remaining FsError (NOT_FILE, TOO_LARGE, ...) traces to the\n      // caller-supplied URI; anything else is a server-side failure and must\n      // not be blamed on the request.\n      const msg = isFsError(error) ? error.message : formatUnknownErrorMessage(error);\n      throw new ProtocolError(fsErrorCode(error), msg);\n    }\n  };\n}\n\nexport function registerResources(deps: ResourceRegistrarDeps): { dispose(): void } {\n  const server = deps.server;\n  const resourceContracts = getResourceContracts({ ...deps, readOnly: deps.readOnly ?? false });\n\n  for (const contract of resourceContracts) {\n    const config = {\n      ...(contract.title !== undefined ? { title: contract.title } : {}),\n      ...(contract.description !== undefined ? { description: contract.description } : {}),\n      ...(contract.mimeType !== undefined ? { mimeType: contract.mimeType } : {}),\n      ...(contract.annotations !== undefined ? { annotations: contract.annotations } : {}),\n      ...(contract.cacheHint !== undefined ? { cacheHint: contract.cacheHint } : {}),\n    };\n\n    if (contract.uriTemplate) {\n      const template = new ResourceTemplate(contract.uriTemplate, {\n        list: contract.list,\n        ...(contract.complete\n          ? {\n              complete: Object.fromEntries(\n                new UriTemplate(contract.uriTemplate).variableNames.map((varName) => [\n                  varName,\n                  (value: string, ctx?: { arguments?: Record<string, string> }) => {\n                    const completeFn = contract.complete;\n                    return completeFn ? completeFn(varName, value, ctx) : [];\n                  },\n                ]),\n              ),\n            }\n          : {}),\n      });\n\n      server.registerResource(contract.name, template, config, wrapRead(contract));\n    } else if (contract.uri) {\n      server.registerResource(contract.name, contract.uri, config, (uri: URL, ctx: ServerContext) =>\n        wrapRead(contract)(uri, {}, ctx),\n      );\n    }\n  }\n\n  // `resources/subscribe`/`unsubscribe` are 2025-era-only verbs; a modern\n  // server answers `-32601 Method not found` for them, so registering these\n  // handlers on a modern-era instance would dispatch to code no request can\n  // reach.\n  if (deps.era !== 'modern') {\n    server.server.assertCanSetRequestHandler('resources/subscribe');\n    server.server.assertCanSetRequestHandler('resources/unsubscribe');\n\n    // One stable callback for the whole registrar, NOT one per subscribe. The\n    // registry holds these in a Set keyed by identity, so a fresh closure per\n    // request made a second `resources/subscribe` for the same URI register a\n    // second sink: one file change then sent N notifications, and `unsubscribe`\n    // (which only ends a lease) removed none of them. Subscribe is per-URI on\n    // the wire, so the sink must be too — this makes it idempotent.\n    const notifyUpdated = (updatedUri: string): void => {\n      if (deps.notifier) {\n        deps.notifier.resourceUpdated(updatedUri);\n        return;\n      }\n      const updatePayload: ResourceUpdatedNotificationParams = { uri: updatedUri };\n      // A failed notify means the connection went away; nothing to recover.\n      void server.server.sendResourceUpdated(updatePayload).catch((err: unknown) => {\n        Logger.debug('resource update not delivered', {\n          uri: updatedUri,\n          error: formatUnknownErrorMessage(err),\n        });\n      });\n    };\n\n    server.server.setRequestHandler(\n      'resources/subscribe',\n      async (req: { params: SubscribeRequestParams }) => {\n        const requestedResource = resourceUrlFromServerUrl(req.params.uri);\n        let foundMatch = false;\n        // A resource that exists but has no watcher (the instructions text, a\n        // cached result) is NOT a not-found: reporting it as one told clients a\n        // URI they can list and read does not exist. Track the two cases apart.\n        let knownButNotSubscribable = false;\n        for (const contract of resourceContracts) {\n          const configured = contract.uri ?? contract.uriTemplate.split('{')[0];\n          if (!contract.subscribe) {\n            if (\n              configured &&\n              checkResourceAllowed({ requestedResource, configuredResource: configured })\n            ) {\n              knownButNotSubscribable = true;\n            }\n            continue;\n          }\n          if (!configured) continue;\n          if (\n            checkResourceAllowed({\n              requestedResource,\n              configuredResource: configured,\n            })\n          ) {\n            foundMatch = true;\n            const subscribeResult = await contract.subscribe(\n              requestedResource.toString(),\n              notifyUpdated,\n            );\n            if (subscribeResult === false) {\n              // InternalError for want of anything better: ProtocolErrorCode\n              // has no resource-limit member, and the message already names\n              // the actionable cause.\n              throw new ProtocolError(\n                ProtocolErrorCode.InternalError,\n                `Subscription rejected: no watcher attached (watcher limit ${MAX_WATCHERS} reached, or fs.watch failed to start).`,\n              );\n            }\n            break;\n          }\n        }\n        if (!foundMatch) {\n          if (knownButNotSubscribable) {\n            throw new ProtocolError(\n              ProtocolErrorCode.InvalidParams,\n              `Resource ${requestedResource.toString()} does not support subscriptions; only ${FILESYSTEM_FILE_URI_TEMPLATE} does. Read it again for the current contents.`,\n            );\n          }\n          throw new ResourceNotFoundError(\n            requestedResource.toString(),\n            `Resource not found: ${requestedResource.toString()}`,\n          );\n        }\n        return {};\n      },\n    );\n\n    server.server.setRequestHandler(\n      'resources/unsubscribe',\n      (req: { params: UnsubscribeRequestParams }) => {\n        // Route by URI prefix, mirroring the subscribe handler: a broadcast\n        // to every contract works while only one is subscribable, but hands a\n        // second subscribable contract someone else's URI the day it appears.\n        const requestedResource = resourceUrlFromServerUrl(req.params.uri);\n        for (const contract of resourceContracts) {\n          if (!contract.unsubscribe) continue;\n          const configured = contract.uri ?? contract.uriTemplate.split('{')[0];\n          if (!configured) continue;\n          if (checkResourceAllowed({ requestedResource, configuredResource: configured })) {\n            contract.unsubscribe(requestedResource.toString());\n          }\n        }\n        return {};\n      },\n    );\n  }\n\n  return {\n    dispose(): void {\n      for (const contract of resourceContracts) {\n        if (contract.destroy) {\n          contract.destroy();\n        }\n      }\n    },\n  };\n}\n"]}
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAaA,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EACL,SAAS,EACT,yBAAyB,EACzB,WAAW,EACX,aAAa,EACb,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EACL,qBAAqB,EACrB,YAAY,GAEb,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAoC3B;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,SAAS,CAAC,KAAK,CAAC;QAChB,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,aAAa,CAAC,CAC/E,CAAC;AACJ,CAAC;AAgDD,kEAAkE;AAClE,eAAe;AACf,kEAAkE;AAElE,SAAS,0BAA0B,CAAC,OAAoC;IACtE,MAAM,IAAI,GAAG,cAAc,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,oBAAoB;QACjC,QAAQ,EAAE,eAAe;QACzB,GAAG,EAAE,gBAAgB;QACrB,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;QACvD,SAAS,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;QACzE,IAAI,CAAC,GAAG;YACN,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,GAAG,CAAC,IAAI;wBACb,QAAQ,EAAE,eAAe;wBACzB,IAAI;qBACL;iBACF;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,aAAa;AACb,kEAAkE;AAElE,SAAS,wBAAwB,CAAC,OAAoC;IACpE,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,qBAAqB,EAAE,CAAC;IACpE,4EAA4E;IAC5E,4EAA4E;IAC5E,oCAAoC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC;IAC3D,6EAA6E;IAC7E,kEAAkE;IAClE,0EAA0E;IAC1E,qEAAqE;IACrE,2EAA2E;IAC3E,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,0EAA0E;IAC1E,uEAAuE;IACvE,4EAA4E;IAC5E,4EAA4E;IAC5E,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAC;IAEjE,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,iFAAiF;QAC9F,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;QACvD,mEAAmE;QACnE,0EAA0E;QAC1E,uEAAuE;QACvE,2EAA2E;QAC3E,2EAA2E;QAC3E,SAAS,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE;QAEvE,0EAA0E;QAC1E,mEAAmE;QACnE,uEAAuE;QACvE,oCAAoC;QAEpC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAmB;YAC7C,0EAA0E;YAC1E,yEAAyE;YACzE,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,yEAAyE;YACzE,yDAAyD;YACzD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,aAAa,EAC/B,wDAAwD,CACzD,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACtD,MAAM,EAAE,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAE7C,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,GAAG,CAAC,IAAI;wBACb,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,0BAA0B;wBAC3D,GAAG,CAAC,UAAU,CAAC,QAAQ;4BACrB,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;4BACjD,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;qBACpD;iBACF;aACF,CAAC;QACJ,CAAC;QAED,QAAQ,EAAE;YACR,yEAAyE;YACzE,0EAA0E;YAC1E,yEAAyE;YACzE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACpB,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;gBAC/E,OAAO,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC5C,CAAC;SACF;QAED,SAAS,CAAC,GAAG,EAAE,MAAM;YACnB,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC1C,wEAAwE;YACxE,wDAAwD;YACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAE5B,MAAM,OAAO,GAAG,KAAK,IAAkC,EAAE;gBACvD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE;oBACpE,aAAa,EAAE,IAAI;iBACpB,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;oBACd,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACpB,OAAO,SAAS,CAAC;gBACnB,CAAC;gBAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAChC,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;gBACjF,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;oBACrC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;oBACzB,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;wBACvB,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,uBAAuB,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrF,CAAC;oBACD,MAAM,CAAC,IAAI,CACT,gDAAgD,GAAG,KAAK,yBAAyB,CAAC,GAAG,CAAC,EAAE,CACzF,CAAC;oBACF,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,yEAAyE;gBACzE,yDAAyD;gBACzD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;oBAAE,OAAO,SAAS,CAAC;gBAChD,qEAAqE;gBACrE,2DAA2D;gBAC3D,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,WAAW,CAAC,GAAG;YACb,sDAAsD;YACtD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,OAAO;YACpC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,OAAO;YACL,wEAAwE;YACxE,yEAAyE;YACzE,KAAK,MAAM,GAAG,IAAI,UAAU;gBAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpD,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,YAAY;gBAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,SAAS;AACT,kEAAkE;AAElE,SAAS,oBAAoB,CAAC,OAAoC;IAChE,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,8FAA8F;QAChG,QAAQ,EAAE,kBAAkB;QAC5B,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;QACvD,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE;QACnD,IAAI;YACF,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,uBAAuB;YAClD,MAAM,SAAS,GAAe,EAAE,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAClC,SAAS,CAAC,IAAI,CAAC;wBACb,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,4DAA4D;oBAC5D,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,SAAS;wBAAE,SAAS;oBACjE,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,uEAAuE;YACvE,SAAS,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,SAAS;YACjB,MAAM,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC;YACzB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,aAAa,EAC/B,qFAAqF,CACtF,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,CAAC;YACV,IAAI,CAAC;gBACH,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;oBACvD,MAAM,IAAI,qBAAqB,CAC7B,GAAG,CAAC,QAAQ,EAAE,EACd,oEAAoE,CACrE,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;aAC3E,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,mBAAmB;AACnB,kEAAkE;AAElE,MAAM,UAAU,oBAAoB,CAAC,OAAoC;IACvE,OAAO;QACL,0BAA0B,CAAC,OAAO,CAAC;QACnC,oBAAoB,CAAC,OAAO,CAAC;QAC7B,wBAAwB,CAAC,OAAO,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,YAAY;AACZ,kEAAkE;AAElE,SAAS,QAAQ,CAAC,QAA0B;IAC1C,OAAO,KAAK,EAAE,GAAQ,EAAE,SAA4C,EAAE,GAAkB,EAAE,EAAE;QAC1F,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC;gBAAE,MAAM,KAAK,CAAC;YACvD,yEAAyE;YACzE,gEAAgE;YAChE,uEAAuE;YACvE,iDAAiD;YACjD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACjE,CAAC;YACD,+DAA+D;YAC/D,uEAAuE;YACvE,gCAAgC;YAChC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;YAChF,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAA2B;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC;IAE9F,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG;YACb,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;QAEF,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,WAAW,EAAE;gBAC1D,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;YAEH,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/E,CAAC;aAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;YACxB,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,GAAQ,EAAE,GAAkB,EAAE,EAAE,CAC5F,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CACjC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,SAAS;IACT,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,qBAAqB,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;QAElE,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAQ,EAAE;YACjD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,MAAM,aAAa,GAAsC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;YAC7E,sEAAsE;YACtE,KAAK,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC3E,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;oBAC5C,GAAG,EAAE,UAAU;oBACf,KAAK,EAAE,yBAAyB,CAAC,GAAG,CAAC;iBACtC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAC7B,qBAAqB,EACrB,KAAK,EAAE,GAAuC,EAAE,EAAE;YAChD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnE,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,uBAAuB,GAAG,KAAK,CAAC;YACpC,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACxB,IACE,UAAU;wBACV,oBAAoB,CAAC,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAC3E,CAAC;wBACD,uBAAuB,GAAG,IAAI,CAAC;oBACjC,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC1B,IACE,oBAAoB,CAAC;oBACnB,iBAAiB;oBACjB,kBAAkB,EAAE,UAAU;iBAC/B,CAAC,EACF,CAAC;oBACD,UAAU,GAAG,IAAI,CAAC;oBAClB,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,SAAS,CAC9C,iBAAiB,CAAC,QAAQ,EAAE,EAC5B,aAAa,CACd,CAAC;oBACF,IAAI,eAAe,KAAK,KAAK,EAAE,CAAC;wBAC9B,+DAA+D;wBAC/D,8DAA8D;wBAC9D,wBAAwB;wBACxB,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,aAAa,EAC/B,6DAA6D,YAAY,yCAAyC,CACnH,CAAC;oBACJ,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,uBAAuB,EAAE,CAAC;oBAC5B,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,aAAa,EAC/B,YAAY,iBAAiB,CAAC,QAAQ,EAAE,yCAAyC,4BAA4B,gDAAgD,CAC9J,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,qBAAqB,CAC7B,iBAAiB,CAAC,QAAQ,EAAE,EAC5B,uBAAuB,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CACtD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAC7B,uBAAuB,EACvB,CAAC,GAAyC,EAAE,EAAE;YAC5C,oEAAoE;YACpE,sEAAsE;YACtE,sEAAsE;YACtE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnE,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;gBACzC,IAAI,CAAC,QAAQ,CAAC,WAAW;oBAAE,SAAS;gBACpC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtE,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC1B,IAAI,oBAAoB,CAAC,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;oBAChF,QAAQ,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;YACL,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;gBACzC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  CacheHint,\n  CompleteResourceTemplateCallback,\n  McpServer,\n  ReadResourceResult,\n  Resource,\n  ResourceUpdatedNotificationParams,\n  Role,\n  ServerContext,\n  ServerNotifier,\n  SubscribeRequestParams,\n  UnsubscribeRequestParams,\n} from '@modelcontextprotocol/server';\nimport {\n  checkResourceAllowed,\n  ProtocolError,\n  ProtocolErrorCode,\n  ResourceNotFoundError,\n  ResourceTemplate,\n  resourceUrlFromServerUrl,\n} from '@modelcontextprotocol/server';\n\nimport type { FsError } from './core/errors.js';\nimport {\n  ErrorCode,\n  formatUnknownErrorMessage,\n  fsErrorCode,\n  hasErrorShape,\n  isFsError,\n} from './core/errors.js';\nimport {\n  decodeFileUriPath,\n  encodeFileUriPath,\n  extractPath,\n  FILESYSTEM_FILE_URI_TEMPLATE,\n} from './core/file-uri.js';\nimport { GuardedFileSystem } from './core/fs.js';\nimport { Logger } from './core/observability.js';\nimport { PathCompleter } from './core/path-completer.js';\nimport type { PathGuard } from './core/path.js';\nimport type { ResourceStore } from './core/store.js';\nimport {\n  createWatcherRegistry,\n  MAX_WATCHERS,\n  type WatcherRegistry,\n} from './core/watcher-registry.js';\nimport {\n  buildSectionsRecord,\n  INSTRUCTIONS_SUMMARY,\n  INSTRUCTIONS_URI,\n  renderSections,\n} from './instructions.js';\n\n// ═══════════════════════════════════════════════════════════════\n// shared\n// ═══════════════════════════════════════════════════════════════\n\nexport interface ResourceRegistrationOptions {\n  resourceStore: ResourceStore;\n  pathGuard: PathGuard;\n  /** Mirrors the `--read-only` gate so the instructions match the tools actually registered. */\n  readOnly: boolean;\n  /**\n   * Shared file-watcher registry for the modern (per-request) HTTP leg. When set,\n   * the resource uses this handler-scoped registry instead of creating its own\n   * per-server one, so file-change watchers persist across requests and publish\n   * to the shared ServerEventBus. Omitted (per-server registry) on legacy/stdio.\n   */\n  watcherRegistry?: WatcherRegistry;\n  /** Modern-leg typed notification publisher. */\n  notifier?: ServerNotifier;\n  /** The protocol era this instance serves; omitted where the caller does not know. */\n  era?: 'legacy' | 'modern';\n  /**\n   * Scope for shared-content cache hints. 'private' when the endpoint is\n   * API-key gated, mirroring the list hints in server.ts — a shared cache must\n   * not store an authenticated response body. Defaults to 'public'.\n   */\n  cacheScope?: 'public' | 'private';\n}\n\ntype ResourceRegistrarDeps = Omit<ResourceRegistrationOptions, 'pathGuard' | 'readOnly'> & {\n  readonly server: McpServer;\n  readonly pathGuard: PathGuard;\n  readonly readOnly?: boolean;\n};\n\n/**\n * A filesystem failure that reads as not-found on the resource wire, for both\n * `resources/read` and `resources/subscribe`. ACCESS_DENIED folds in\n * deliberately: masking whether an out-of-root or denylisted path exists is the\n * security-correct answer, and the `FsError` message still carries the real\n * cause to the client.\n */\nfunction isNotFoundish(error: unknown): error is FsError {\n  return (\n    isFsError(error) &&\n    (error.code === ErrorCode.NOT_FOUND || error.code === ErrorCode.ACCESS_DENIED)\n  );\n}\n\n// ═══════════════════════════════════════════════════════════════\n// contract\n// ═══════════════════════════════════════════════════════════════\n\ninterface BaseResourceContract {\n  name: string;\n  title?: string;\n  description?: string;\n  mimeType?: string;\n  cacheHint?: CacheHint;\n  annotations?: {\n    audience?: Role[];\n    priority?: number;\n  };\n  readonly read: (\n    uri: URL,\n    variables: Record<string, string | string[]>,\n    ctx: ServerContext,\n  ) => Promise<ReadResourceResult> | ReadResourceResult;\n  readonly subscribe?: (\n    uri: string,\n    notify: (uri: string) => void,\n  ) => Promise<boolean | undefined> | boolean | undefined;\n  readonly unsubscribe?: (uri: string) => void;\n  readonly destroy?: () => void;\n  readonly list?: (\n    ctx: ServerContext,\n  ) => Promise<{ resources: Resource[] }> | { resources: Resource[] };\n}\n\n/** A resource with a fixed, enumerable URI (e.g. internal://instructions). */\ninterface StaticResourceContract extends BaseResourceContract {\n  uri: string;\n  uriTemplate?: never;\n  complete?: never;\n}\n\n/** A resource identified by a URI template (FILESYSTEM_FILE_URI_TEMPLATE). */\ninterface TemplateResourceContract extends BaseResourceContract {\n  uriTemplate: string;\n  uri?: never;\n  complete?: { path: CompleteResourceTemplateCallback };\n}\n\ntype ResourceContract = StaticResourceContract | TemplateResourceContract;\n\n// ═══════════════════════════════════════════════════════════════\n// instructions\n// ═══════════════════════════════════════════════════════════════\n\nfunction createInstructionsResource(options: ResourceRegistrationOptions): ResourceContract {\n  const text = renderSections(buildSectionsRecord(options.readOnly));\n  return {\n    name: 'filesystem-mcp-instructions',\n    title: 'Server Instructions',\n    description: INSTRUCTIONS_SUMMARY,\n    mimeType: 'text/markdown',\n    uri: INSTRUCTIONS_URI,\n    annotations: { audience: ['assistant'], priority: 0.8 },\n    cacheHint: { cacheScope: options.cacheScope ?? 'public', ttlMs: 300_000 },\n    read(uri) {\n      return {\n        contents: [\n          {\n            uri: uri.href,\n            mimeType: 'text/markdown',\n            text,\n          },\n        ],\n      };\n    },\n  };\n}\n\n// ═══════════════════════════════════════════════════════════════\n// filesystem\n// ═══════════════════════════════════════════════════════════════\n\nfunction createFilesystemResource(options: ResourceRegistrationOptions): ResourceContract {\n  const completer = new PathCompleter(options.pathGuard);\n  const registry = options.watcherRegistry ?? createWatcherRegistry();\n  // Only the per-server (legacy/stdio) registry is owned by this resource and\n  // destroyed on dispose; the shared modern-leg registry is owned by the host\n  // and torn down at server shutdown.\n  const ownsRegistry = options.watcherRegistry === undefined;\n  // The URIs this connection holds a `resources/subscribe` lease for. The wire\n  // verb is per-URI and idempotent — a second subscribe is the same\n  // subscription, and one unsubscribe ends it — but the registry ref-counts\n  // leases (the HTTP listen leg needs that). Without this set a double\n  // subscribe took two leases that one unsubscribe could not release, and an\n  // unsubscribe for a URI never subscribed released a lease this connection\n  // never took, dropping a watcher some other holder still wanted.\n  const leasedUris = new Set<string>();\n  // Subscribes mid-acquire, keyed by URI. Two concurrent subscribes for the\n  // same URI must share one acquire: both passing the `leasedUris` check\n  // before either finished took two registry leases that the single set entry\n  // could release only once — on the shared modern registry that orphan lease\n  // pinned a watcher until process shutdown.\n  const inflight = new Map<string, Promise<boolean | undefined>>();\n\n  return {\n    name: 'filesystem-mcp-file',\n    title: 'Workspace File',\n    description: 'Read a file from the workspace. Subscribe to get updates when the file changes.',\n    uriTemplate: FILESYSTEM_FILE_URI_TEMPLATE,\n    annotations: { audience: ['assistant'], priority: 0.8 },\n    // Without this the SDK falls back to its conservative `{ ttlMs: 0,\n    // cacheScope: 'private' }`, making every file read uncacheable — and this\n    // is the one resource with a live invalidation channel, so TTL and the\n    // watcher compose exactly as the spec's caching section describes. The TTL\n    // stays short because a non-subscriber gets no invalidation signal at all.\n    cacheHint: { cacheScope: options.cacheScope ?? 'public', ttlMs: 5_000 },\n\n    // No `list`: the template registers with `list: undefined` — readable but\n    // not enumerable. Listing each allowed root as a concrete resource\n    // duplicated the template and grew resources/list linearly with roots;\n    // `list_roots` owns root discovery.\n\n    async read(uri, _variables, _ctx: ServerContext) {\n      // Decode via extractPath — the same decoder resources/subscribe uses — so\n      // both consumers are symmetric with buildFileResourceUri's encoding. The\n      // {+path} template variable arrives still percent-encoded, so validating\n      // it directly would treat \"c%3A/proj/a.ts\" as a literal relative path;\n      // no fallback to it here, or the two branches would validate different\n      // strings. extractPath only fails past the template match on undecodable\n      // percent-encoding, which is the caller's malformed URI.\n      const rawPath = extractPath(uri.href);\n      if (rawPath === undefined) {\n        throw new ProtocolError(\n          ProtocolErrorCode.InvalidParams,\n          'Malformed file URI: path is not valid percent-encoding',\n        );\n      }\n      await options.pathGuard.validateExistingPath(rawPath);\n      const fs = new GuardedFileSystem(options.pathGuard);\n      const readResult = await fs.readRaw(rawPath);\n\n      return {\n        contents: [\n          {\n            uri: uri.href,\n            mimeType: readResult.mimeType || 'application/octet-stream',\n            ...(readResult.isBinary\n              ? { blob: readResult.content.toString('base64') }\n              : { text: readResult.content.toString('utf-8') }),\n          },\n        ],\n      };\n    },\n\n    complete: {\n      // Both ends speak the `{+path}` form (see encodeFileUriPath), not raw OS\n      // paths: the partial arriving here is whatever this returned last, so the\n      // decode mirrors the encode. An undecodable partial is matched as typed.\n      path: async (value) => {\n        const suggestions = await completer.suggest(decodeFileUriPath(value) ?? value);\n        return suggestions.map(encodeFileUriPath);\n      },\n    },\n\n    subscribe(uri, notify) {\n      // Already subscribed on this connection: the watcher is live and the sink\n      // is registered, so this is a no-op success rather than a second lease.\n      if (leasedUris.has(uri)) return undefined;\n      // A subscribe for this URI is mid-acquire: share its outcome instead of\n      // taking a second lease the lease set cannot represent.\n      const pending = inflight.get(uri);\n      if (pending) return pending;\n\n      const acquire = async (): Promise<boolean | undefined> => {\n        const result = await registry.acquire(options.pathGuard, uri, notify, {\n          markSubscribe: true,\n        });\n        if (result.ok) {\n          leasedUris.add(uri);\n          return undefined;\n        }\n\n        if (result.reason === 'bad-uri') {\n          throw new ResourceNotFoundError(uri, `Cannot subscribe: not a filesystem URI`);\n        }\n        if (result.reason === 'invalid-path') {\n          const err = result.error;\n          if (isNotFoundish(err)) {\n            throw new ResourceNotFoundError(uri, `Cannot subscribe to ${uri}: ${err.message}`);\n          }\n          Logger.warn(\n            `Unexpected error validating path for watcher ${uri}: ${formatUnknownErrorMessage(err)}`,\n          );\n          throw err;\n        }\n        // Unsubscribed (or the registry destroyed) mid-await: the caller already\n        // asked for this to stop, so there is nothing to reject.\n        if (result.reason === 'stale') return undefined;\n        // capped / attach-failed: `false` tells the handler to reject, since\n        // undefined would report success with no watcher attached.\n        return false;\n      };\n\n      const promise = acquire().finally(() => inflight.delete(uri));\n      inflight.set(uri, promise);\n      return promise;\n    },\n\n    unsubscribe(uri) {\n      // Only release a lease this connection actually took.\n      if (!leasedUris.delete(uri)) return;\n      registry.release(uri);\n    },\n\n    destroy() {\n      // Release what this connection still holds before the registry goes: on\n      // the shared (modern) registry nothing else would ever end these leases.\n      for (const uri of leasedUris) registry.release(uri);\n      leasedUris.clear();\n      if (ownsRegistry) registry.destroy();\n    },\n  };\n}\n\n// ═══════════════════════════════════════════════════════════════\n// result\n// ═══════════════════════════════════════════════════════════════\n\nfunction createResultResource(options: ResourceRegistrationOptions): ResourceContract {\n  return {\n    name: 'filesystem-mcp-result',\n    title: 'Cached Tool Result',\n    description:\n      'Ephemeral cached tool output. Listed via resources/list; entries expire after the cache TTL.',\n    mimeType: 'application/json',\n    uriTemplate: 'filesystem-mcp://result/{id}',\n    annotations: { audience: ['assistant'], priority: 0.3 },\n    cacheHint: { cacheScope: 'private', ttlMs: 60_000 },\n    list() {\n      const store = options.resourceStore;\n      const uris = store.keys(); // prunes expired first\n      const resources: Resource[] = [];\n      for (const uri of uris) {\n        try {\n          const entry = store.getEntry(uri);\n          resources.push({\n            uri: entry.uri,\n            name: entry.name,\n            mimeType: entry.mimeType,\n            size: entry.size,\n          });\n        } catch (err) {\n          // An entry may expire between keys() and getEntry; skip it.\n          if (isFsError(err) && err.code === ErrorCode.NOT_FOUND) continue;\n          throw err;\n        }\n      }\n      // Recent-first: keys() returns insertion order, so the newest is last.\n      resources.reverse();\n      return { resources };\n    },\n    read(uri, variables) {\n      const { id } = variables;\n      if (typeof id !== 'string' || id.length === 0) {\n        throw new ProtocolError(\n          ProtocolErrorCode.InvalidParams,\n          'Malformed result URI: missing {id}. Use the exact resourceUri returned by the tool.',\n        );\n      }\n\n      let entry;\n      try {\n        entry = options.resourceStore.getEntry(uri.toString());\n      } catch (err) {\n        if (isFsError(err) && err.code === ErrorCode.NOT_FOUND) {\n          throw new ResourceNotFoundError(\n            uri.toString(),\n            'Cached result not found or expired. Re-run the tool to regenerate.',\n          );\n        }\n        throw err;\n      }\n      return {\n        contents: [{ uri: entry.uri, mimeType: entry.mimeType, text: entry.text }],\n      };\n    },\n  };\n}\n\n// ═══════════════════════════════════════════════════════════════\n// export contracts\n// ═══════════════════════════════════════════════════════════════\n\nexport function getResourceContracts(options: ResourceRegistrationOptions): ResourceContract[] {\n  return [\n    createInstructionsResource(options),\n    createResultResource(options),\n    createFilesystemResource(options),\n  ];\n}\n\n// ═══════════════════════════════════════════════════════════════\n// registrar\n// ═══════════════════════════════════════════════════════════════\n\nfunction wrapRead(contract: ResourceContract) {\n  return async (uri: URL, variables: Record<string, string | string[]>, ctx: ServerContext) => {\n    try {\n      return await contract.read(uri, variables, ctx);\n    } catch (error) {\n      if (hasErrorShape(error, 'ProtocolError')) throw error;\n      // A missing or out-of-root path is a not-found, not a malformed request.\n      // The SDK puts ResourceNotFoundError on the wire as -32602 with\n      // `data.uri`, which is what clients match on; -32002 is the older code\n      // they also accept, and this SDK never emits it.\n      if (isNotFoundish(error)) {\n        throw new ResourceNotFoundError(uri.toString(), error.message);\n      }\n      // A remaining FsError (NOT_FILE, TOO_LARGE, ...) traces to the\n      // caller-supplied URI; anything else is a server-side failure and must\n      // not be blamed on the request.\n      const msg = isFsError(error) ? error.message : formatUnknownErrorMessage(error);\n      throw new ProtocolError(fsErrorCode(error), msg);\n    }\n  };\n}\n\nexport function registerResources(deps: ResourceRegistrarDeps): { dispose(): void } {\n  const server = deps.server;\n  const resourceContracts = getResourceContracts({ ...deps, readOnly: deps.readOnly ?? false });\n\n  for (const contract of resourceContracts) {\n    const config = {\n      ...(contract.title !== undefined ? { title: contract.title } : {}),\n      ...(contract.description !== undefined ? { description: contract.description } : {}),\n      ...(contract.mimeType !== undefined ? { mimeType: contract.mimeType } : {}),\n      ...(contract.annotations !== undefined ? { annotations: contract.annotations } : {}),\n      ...(contract.cacheHint !== undefined ? { cacheHint: contract.cacheHint } : {}),\n    };\n\n    if (contract.uriTemplate) {\n      const template = new ResourceTemplate(contract.uriTemplate, {\n        list: contract.list,\n        ...(contract.complete ? { complete: contract.complete } : {}),\n      });\n\n      server.registerResource(contract.name, template, config, wrapRead(contract));\n    } else if (contract.uri) {\n      server.registerResource(contract.name, contract.uri, config, (uri: URL, ctx: ServerContext) =>\n        wrapRead(contract)(uri, {}, ctx),\n      );\n    }\n  }\n\n  // `resources/subscribe`/`unsubscribe` are 2025-era-only verbs; a modern\n  // server answers `-32601 Method not found` for them, so registering these\n  // handlers on a modern-era instance would dispatch to code no request can\n  // reach.\n  if (deps.era !== 'modern') {\n    server.server.assertCanSetRequestHandler('resources/subscribe');\n    server.server.assertCanSetRequestHandler('resources/unsubscribe');\n\n    // One stable callback for the whole registrar, NOT one per subscribe. The\n    // registry holds these in a Set keyed by identity, so a fresh closure per\n    // request made a second `resources/subscribe` for the same URI register a\n    // second sink: one file change then sent N notifications, and `unsubscribe`\n    // (which only ends a lease) removed none of them. Subscribe is per-URI on\n    // the wire, so the sink must be too — this makes it idempotent.\n    const notifyUpdated = (updatedUri: string): void => {\n      if (deps.notifier) {\n        deps.notifier.resourceUpdated(updatedUri);\n        return;\n      }\n      const updatePayload: ResourceUpdatedNotificationParams = { uri: updatedUri };\n      // A failed notify means the connection went away; nothing to recover.\n      void server.server.sendResourceUpdated(updatePayload).catch((err: unknown) => {\n        Logger.debug('resource update not delivered', {\n          uri: updatedUri,\n          error: formatUnknownErrorMessage(err),\n        });\n      });\n    };\n\n    server.server.setRequestHandler(\n      'resources/subscribe',\n      async (req: { params: SubscribeRequestParams }) => {\n        const requestedResource = resourceUrlFromServerUrl(req.params.uri);\n        let foundMatch = false;\n        // A resource that exists but has no watcher (the instructions text, a\n        // cached result) is NOT a not-found: reporting it as one told clients a\n        // URI they can list and read does not exist. Track the two cases apart.\n        let knownButNotSubscribable = false;\n        for (const contract of resourceContracts) {\n          const configured = contract.uri ?? contract.uriTemplate.split('{')[0];\n          if (!contract.subscribe) {\n            if (\n              configured &&\n              checkResourceAllowed({ requestedResource, configuredResource: configured })\n            ) {\n              knownButNotSubscribable = true;\n            }\n            continue;\n          }\n          if (!configured) continue;\n          if (\n            checkResourceAllowed({\n              requestedResource,\n              configuredResource: configured,\n            })\n          ) {\n            foundMatch = true;\n            const subscribeResult = await contract.subscribe(\n              requestedResource.toString(),\n              notifyUpdated,\n            );\n            if (subscribeResult === false) {\n              // InternalError for want of anything better: ProtocolErrorCode\n              // has no resource-limit member, and the message already names\n              // the actionable cause.\n              throw new ProtocolError(\n                ProtocolErrorCode.InternalError,\n                `Subscription rejected: no watcher attached (watcher limit ${MAX_WATCHERS} reached, or fs.watch failed to start).`,\n              );\n            }\n            break;\n          }\n        }\n        if (!foundMatch) {\n          if (knownButNotSubscribable) {\n            throw new ProtocolError(\n              ProtocolErrorCode.InvalidParams,\n              `Resource ${requestedResource.toString()} does not support subscriptions; only ${FILESYSTEM_FILE_URI_TEMPLATE} does. Read it again for the current contents.`,\n            );\n          }\n          throw new ResourceNotFoundError(\n            requestedResource.toString(),\n            `Resource not found: ${requestedResource.toString()}`,\n          );\n        }\n        return {};\n      },\n    );\n\n    server.server.setRequestHandler(\n      'resources/unsubscribe',\n      (req: { params: UnsubscribeRequestParams }) => {\n        // Route by URI prefix, mirroring the subscribe handler: a broadcast\n        // to every contract works while only one is subscribable, but hands a\n        // second subscribable contract someone else's URI the day it appears.\n        const requestedResource = resourceUrlFromServerUrl(req.params.uri);\n        for (const contract of resourceContracts) {\n          if (!contract.unsubscribe) continue;\n          const configured = contract.uri ?? contract.uriTemplate.split('{')[0];\n          if (!configured) continue;\n          if (checkResourceAllowed({ requestedResource, configuredResource: configured })) {\n            contract.unsubscribe(requestedResource.toString());\n          }\n        }\n        return {};\n      },\n    );\n  }\n\n  return {\n    dispose(): void {\n      for (const contract of resourceContracts) {\n        if (contract.destroy) {\n          contract.destroy();\n        }\n      }\n    },\n  };\n}\n"]}