@j0hanz/filesystem-mcp 2.3.0 → 2.4.1

package/README.md

@@ -370,15 +370,13 @@ filesystem-mcp /path/to/project1 /path/to/project2
 | `--http-host <host>`      | —       | HTTP server bind address (env: `FS_HTTP_HOST`)                                                                                        |
 | `--api-key <key>`         | —       | Require this API key on HTTP requests (env: `FS_API_KEY`)                                                                             |
 | `--read-only`             | `false` | Disable write tools: `create`, `edit`, `delete`, `move`, `patch`, `replace_text`                                                      |
-| `--safe`                  | `false` | Alias for `--read-only`                                                                                                               |
 | `--deny <pattern>`        | —       | Block paths matching this pattern; repeatable                                                                                         |
 | `--allow <pattern>`       | —       | Exempt a pattern from the built-in sensitive denylist; repeatable (env: `FS_ALLOWLIST`). Does not lift `--deny`/`FS_DENYLIST` entries |
 | `--allow-sensitive`       | `false` | Allow access to sensitive system paths (env: `FS_ALLOW_SENSITIVE`)                                                                    |
 | `--root-boundary <path>`  | —       | Require all allowed roots to fall under this path (env: `FS_ROOT_BOUNDARY`)                                                           |
 | `--max-file-size <bytes>` | —       | Maximum file size for reads in bytes (env: `FS_MAX_FILE_SIZE`)                                                                        |
 | `--log-level <level>`     | `info`  | RFC 5424 log level, `debug` through `emergency` (env: `FS_LOG_LEVEL`)                                                                 |
-| `--print-config`          | `false` | Print the active configuration and exit (use `--json` for machine-readable output)                                                    |
-| `--json`                  | `false` | Output `--print-config` as JSON                                                                                                       |
+| `--print-config`          | `false` | Print the active configuration as JSON and exit                                                                                       |
 
 `--deny` and `--allow` patterns support `*` (any run within a segment),
 `**` (any run of segments), `?`, `[...]` classes, and `{a,b}` alternation.
@@ -411,12 +409,7 @@ Flags take precedence when both are set.
 | `FS_ALLOW_UNRESTRICTED_HOSTS` | Bind a wildcard host with no Host validation (accepts the risk).                                                                                                                       |
 | `FS_PUBLIC_URL`               | Resource identifier URL for RFC 9728 discovery.                                                                                                                                        |
 | `FS_RATE_LIMIT_RPM`           | Per-client-IP requests/minute (default 120 with API-key authentication, 6,000 for keyless loopback; range 1–100000).                                                                   |
-| `FS_MAX_REQUEST_BYTES`        | Max HTTP request body bytes (default 4194304, 1024–268435456).                                                                                                                         |
-| `FS_KEEPALIVE_TIMEOUT_MS`     | HTTP keep-alive timeout in ms; set above any fronting proxy's idle timeout (default 5000, 1000–600000).                                                                                |
 | `FS_MAX_WATCHERS`             | Max concurrent file watchers (default 256, 1–4096).                                                                                                                                    |
-| `FS_MAX_INLINE_MATCHES`       | Deprecated and ignored; `maxResults` sets the `search_text` page size. Logs a warning when set; removed in the next major.                                                             |
-| `FS_MAX_READ_MANY_BYTES`      | Max total bytes across a batched `read` (default 524288, 10240–104857600).                                                                                                             |
-| `FS_SEARCH_TIMEOUT_MS`        | Search timeout in ms (default 5000, 100–60000).                                                                                                                                        |
 | `NO_COLOR`                    | Any value disables ANSI color output.                                                                                                                                                  |
 | `FS_REQUEST_STATE_KEY`        | HMAC key sealing `input_required` requestState across retry rounds. Optional (random per boot if unset); set it, at >=32 bytes UTF-8, to keep in-flight rounds alive across a restart. |
 

package/dist/cli-help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-help.d.ts","sourceRoot":"","sources":["../src/cli-help.ts"],"names":[],"mappings":"AAwJA,wBAAgB,gBAAgB,IAAI,KAAK,CAkCxC;AAED,wBAAgB,mBAAmB,IAAI,KAAK,CAG3C"}
+{"version":3,"file":"cli-help.d.ts","sourceRoot":"","sources":["../src/cli-help.ts"],"names":[],"mappings":"AAmIA,wBAAgB,gBAAgB,IAAI,KAAK,CA4BxC;AAED,wBAAgB,mBAAmB,IAAI,KAAK,CAG3C"}

package/dist/cli-help.js

@@ -1,6 +1,6 @@
+import { styleText } from 'node:util';
 import packageJson from '../package.json' with { type: 'json' };
-import { cliFmt, padEndVisible } from './core/fmt.js';
-import { MUTATING_TOOL_NAMES } from './tools/index.js';
+import { MUTATING_TOOL_NAMES } from "./tools/index.js";
 // Help text and its rendering. Split out of cli.ts so that module holds only
 // argument parsing and directory validation: this file is static copy plus a
 // formatter, and shares no state with the parser.
@@ -17,12 +17,7 @@ const OPTIONS_HELP = [
         flags: '--read-only',
         desc: `Disable write tools: ${[...MUTATING_TOOL_NAMES].sort().join(', ')}`,
     },
-    { flags: '--safe', desc: 'Alias for --read-only' },
-    {
-        flags: '--print-config',
-        desc: 'Print the active configuration and exit (use with --json for machine output)',
-    },
-    { flags: '--json', desc: 'Output --print-config as JSON' },
+    { flags: '--print-config', desc: 'Print the active configuration as JSON and exit' },
     {
         flags: '--log-level <level>',
         desc: 'Log level, RFC 5424: debug|info|notice|warn|error|critical|alert|emergency (env: FS_LOG_LEVEL)',
@@ -104,31 +99,14 @@ const ENV_HELP = [
         flags: 'FS_RATE_LIMIT_RPM',
         desc: 'Per-client-IP requests/min (default 120 authenticated, 6000 keyless loopback; 1–100000)',
     },
-    {
-        flags: 'FS_MAX_REQUEST_BYTES',
-        desc: 'Max HTTP request body bytes (default 4194304, 1024–268435456)',
-    },
-    {
-        flags: 'FS_KEEPALIVE_TIMEOUT_MS',
-        desc: 'HTTP keep-alive timeout; set above any fronting proxy idle timeout (default 5000, 1000–600000)',
-    },
     {
         flags: 'FS_MAX_WATCHERS',
         desc: 'Max concurrent file watchers (default 256, 1–4096)',
     },
-    {
-        flags: 'FS_MAX_INLINE_MATCHES',
-        desc: 'Deprecated and ignored; maxResults sets the search_text page size. Removed in the next major',
-    },
-    {
-        flags: 'FS_MAX_READ_MANY_BYTES',
-        desc: 'Max total bytes across one batch read (default 524288, 10240–104857600)',
-    },
-    { flags: 'FS_SEARCH_TIMEOUT_MS', desc: 'Search timeout in ms (default 5000, 100–60000)' },
     { flags: 'NO_COLOR', desc: 'Any value disables ANSI color output' },
     {
         flags: 'FS_REQUEST_STATE_KEY',
-        desc: 'HMAC key for input_required state; optional outside fleet mode, shared and >=32 bytes in fleet mode',
+        desc: 'HMAC key for input_required state; optional, >=32 bytes when set',
     },
 ];
 const EXAMPLES_HELP = [
@@ -137,31 +115,26 @@ const EXAMPLES_HELP = [
     '$ filesystem-mcp /project/src /project/tests --allow-cwd',
     '$ filesystem-mcp --port 3000 /path/to/allowed/dir',
     '$ filesystem-mcp --read-only /data/readonly',
-    '$ filesystem-mcp --print-config --json /project',
+    '$ filesystem-mcp --print-config /project',
 ];
 export function printHelpAndExit() {
-    const { bold, dim, section, flag, yellow, cyan } = cliFmt;
     const COL = 27;
-    const optRow = (flags, desc) => {
-        const colored = flags
-            .replace(/<[^>]+>/g, (m) => yellow(m))
-            .replace(/-{1,2}[\w-]+/g, (m) => flag(m));
-        return `  ${padEndVisible(colored, COL)}${desc}`;
-    };
-    const envRow = (name, desc) => {
-        return `  ${padEndVisible(cyan(name), COL - 1)} ${desc}`;
-    };
+    // Pad first, colour after: `styleText` honours NO_COLOR, and padding the
+    // plain text keeps the columns aligned whether or not colour is on.
+    const row = (color, name, desc) => `  ${styleText(color, name.padEnd(COL))}${desc}`;
+    const dim = (t) => styleText('dim', t);
+    const section = (t) => styleText(['cyan', 'bold'], t);
     const lines = [
         '',
-        `${bold('Filesystem MCP')} ${dim(`v${SERVER_VERSION}`)}`,
+        `${styleText('bold', 'Filesystem MCP')} ${dim(`v${SERVER_VERSION}`)}`,
         '',
         dim('Pass one or more directories to set the allowed access roots.'),
         '',
         section('Options:'),
-        ...OPTIONS_HELP.map(({ flags, desc }) => optRow(flags, desc)),
+        ...OPTIONS_HELP.map(({ flags, desc }) => row('green', flags, desc)),
         '',
         `${section('Environment variables:')} ${dim('(flags take precedence when both are set)')}`,
-        ...ENV_HELP.map(({ flags, desc }) => envRow(flags, desc)),
+        ...ENV_HELP.map(({ flags, desc }) => row('cyan', flags, desc)),
         '',
         section('Examples:'),
         ...EXAMPLES_HELP.map((ex) => `  ${dim(ex)}`),
@@ -171,7 +144,7 @@ export function printHelpAndExit() {
     process.exit(0);
 }
 export function printVersionAndExit() {
-    process.stdout.write(`${cliFmt.cyan(SERVER_VERSION)}\n`);
+    process.stdout.write(`${styleText('cyan', SERVER_VERSION)}\n`);
     process.exit(0);
 }
 //# sourceMappingURL=cli-help.js.map

package/dist/cli-help.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-help.js","sourceRoot":"","sources":["../src/cli-help.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,6EAA6E;AAC7E,6EAA6E;AAC7E,kDAAkD;AAElD,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC;AAOhD,MAAM,YAAY,GAAc;IAC9B,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACvD,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAC3D,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,sDAAsD,EAAE;IACtF;QACE,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,kDAAkD;KACzD;IACD;QACE,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,wBAAwB,CAAC,GAAG,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KAC3E;IACD,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAClD;QACE,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,8EAA8E;KACrF;IACD,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,+BAA+B,EAAE;IAC1D;QACE,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,gGAAgG;KACvG;IACD,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,8CAA8C,EAAE;IACrF;QACE,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,mFAAmF;KAC1F;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,kEAAkE;KACzE;IACD;QACE,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,2EAA2E;KAClF;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,8DAA8D;KACrE;IACD,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,8DAA8D,EAAE;IAC7F,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,+CAA+C,EAAE;IACpF;QACE,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,uFAAuF;KAC9F;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,2DAA2D;KAClE;CACF,CAAC;AAEF,MAAM,QAAQ,GAAc;IAC1B;QACE,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,4EAA4E;KACnF;IACD,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,mDAAmD,EAAE;IAC/E,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACpD,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE;IAC7C;QACE,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,2FAA2F;KAClG;IACD;QACE,KAAK,EAAE,oBAAoB;QAC3B,IAAI,EAAE,2DAA2D;KAClE;IACD,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,+CAA+C,EAAE;IACpF,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,sCAAsC,EAAE;IAC3E;QACE,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,qEAAqE;KAC5E;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,sEAAsE;KAC7E;IACD,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,0CAA0C,EAAE;IAC1E;QACE,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,uGAAuG;KAC9G;IACD;QACE,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,wFAAwF;KAC/F;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,IAAI,EAAE,+DAA+D;KACtE;IACD,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,2CAA2C,EAAE;IAClF;QACE,KAAK,EAAE,6BAA6B;QACpC,IAAI,EAAE,6FAA6F;KACpG;IACD,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,gDAAgD,EAAE;IAClF;QACE,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,yFAAyF;KAChG;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,IAAI,EAAE,+DAA+D;KACtE;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,gGAAgG;KACvG;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,oDAAoD;KAC3D;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,8FAA8F;KACrG;IACD;QACE,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,yEAAyE;KAChF;IACD,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,gDAAgD,EAAE;IACzF,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,sCAAsC,EAAE;IACnE;QACE,KAAK,EAAE,sBAAsB;QAC7B,IAAI,EAAE,qGAAqG;KAC5G;CACF,CAAC;AAEF,MAAM,aAAa,GAAG;IACpB,uCAAuC;IACvC,8BAA8B;IAC9B,0DAA0D;IAC1D,mDAAmD;IACnD,6CAA6C;IAC7C,iDAAiD;CAClD,CAAC;AAEF,MAAM,UAAU,gBAAgB;IAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IAC1D,MAAM,GAAG,GAAG,EAAE,CAAC;IAEf,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAY,EAAU,EAAE;QACrD,MAAM,OAAO,GAAG,KAAK;aAClB,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;aACrC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO,KAAK,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE;QACpD,OAAO,KAAK,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3D,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,IAAI,cAAc,EAAE,CAAC,EAAE;QACxD,EAAE;QACF,GAAG,CAAC,+DAA+D,CAAC;QACpE,EAAE;QACF,OAAO,CAAC,UAAU,CAAC;QACnB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7D,EAAE;QACF,GAAG,OAAO,CAAC,wBAAwB,CAAC,IAAI,GAAG,CAAC,2CAA2C,CAAC,EAAE;QAC1F,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzD,EAAE;QACF,OAAO,CAAC,WAAW,CAAC;QACpB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5C,EAAE;KACH,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC","sourcesContent":["import packageJson from '../package.json' with { type: 'json' };\nimport { cliFmt, padEndVisible } from './core/fmt.js';\nimport { MUTATING_TOOL_NAMES } from './tools/index.js';\n\n// Help text and its rendering. Split out of cli.ts so that module holds only\n// argument parsing and directory validation: this file is static copy plus a\n// formatter, and shares no state with the parser.\n\nconst { version: SERVER_VERSION } = packageJson;\n\ninterface HelpRow {\n  flags: string;\n  desc: string;\n}\n\nconst OPTIONS_HELP: HelpRow[] = [\n  { flags: '-h, --help', desc: 'Show this help message' },\n  { flags: '-v, --version', desc: 'Show the server version' },\n  { flags: '--allow-cwd', desc: 'Add the current working directory as an allowed root' },\n  {\n    flags: '--port <number>',\n    desc: 'Start HTTP transport on this port (env: FS_PORT)',\n  },\n  {\n    flags: '--read-only',\n    desc: `Disable write tools: ${[...MUTATING_TOOL_NAMES].sort().join(', ')}`,\n  },\n  { flags: '--safe', desc: 'Alias for --read-only' },\n  {\n    flags: '--print-config',\n    desc: 'Print the active configuration and exit (use with --json for machine output)',\n  },\n  { flags: '--json', desc: 'Output --print-config as JSON' },\n  {\n    flags: '--log-level <level>',\n    desc: 'Log level, RFC 5424: debug|info|notice|warn|error|critical|alert|emergency (env: FS_LOG_LEVEL)',\n  },\n  { flags: '--http-host <host>', desc: 'HTTP server bind address (env: FS_HTTP_HOST)' },\n  {\n    flags: '--api-key <key>',\n    desc: 'Require this API key on HTTP requests; prefer FS_API_KEY (argv is world-readable)',\n  },\n  {\n    flags: '--allow-sensitive',\n    desc: 'Allow access to sensitive system paths (env: FS_ALLOW_SENSITIVE)',\n  },\n  {\n    flags: '--root-boundary <path>',\n    desc: 'Require all allowed roots to fall under this path (env: FS_ROOT_BOUNDARY)',\n  },\n  {\n    flags: '--max-file-size <bytes>',\n    desc: 'Maximum file size for reads in bytes (env: FS_MAX_FILE_SIZE)',\n  },\n  { flags: '--walk-cwd', desc: 'Walk up from CWD to find a project root; implies --allow-cwd' },\n  { flags: '--deny <pattern>', desc: 'Block paths matching this pattern; repeatable' },\n  {\n    flags: '--allow <pattern>',\n    desc: 'Exempt a pattern from the built-in sensitive denylist; repeatable (env: FS_ALLOWLIST)',\n  },\n  {\n    flags: '--allow-missing-roots',\n    desc: 'Start even if configured allowed directories do not exist',\n  },\n];\n\nconst ENV_HELP: HelpRow[] = [\n  {\n    flags: 'FS_LOG_LEVEL',\n    desc: 'Log level, RFC 5424: debug|info|notice|warn|error|critical|alert|emergency',\n  },\n  { flags: 'FS_PORT', desc: 'Start HTTP transport on this port (unset = stdio)' },\n  { flags: 'FS_HTTP_HOST', desc: 'HTTP bind address' },\n  { flags: 'FS_API_KEY', desc: 'HTTP API key' },\n  {\n    flags: 'FS_TRUST_PROXY',\n    desc: 'Express trust-proxy setting: hop count or expression (unset = do not trust X-Forwarded-*)',\n  },\n  {\n    flags: 'FS_ALLOW_SENSITIVE',\n    desc: 'Allow sensitive system paths (\"true\" or \"1\" enables this)',\n  },\n  { flags: 'FS_ROOT_BOUNDARY', desc: 'Path prefix all allowed roots must fall under' },\n  { flags: 'FS_MAX_FILE_SIZE', desc: 'Maximum file size for reads in bytes' },\n  {\n    flags: 'FS_ALLOWED_DIRS',\n    desc: 'Allowed dirs: colon-separated (Unix), semicolon-separated (Windows)',\n  },\n  {\n    flags: 'FS_ALLOW_CWD_WALK',\n    desc: 'Walk up from CWD to find a project root (\"true\" or \"1\" enables this)',\n  },\n  { flags: 'FS_DENYLIST', desc: 'Paths/patterns to block, comma-separated' },\n  {\n    flags: 'FS_ALLOWLIST',\n    desc: 'Patterns exempted from the built-in sensitive denylist, comma-separated; --deny/FS_DENYLIST still win',\n  },\n  {\n    flags: 'FS_ALLOW_MISSING_ROOTS',\n    desc: 'Start even if configured allowed directories do not exist (\"true\" or \"1\" enables this)',\n  },\n  {\n    flags: 'FS_ALLOWED_HOSTS',\n    desc: 'Comma-separated Host header values to accept (HTTP transport)',\n  },\n  { flags: 'FS_ALLOWED_ORIGINS', desc: 'Comma-separated origin hostnames for CORS' },\n  {\n    flags: 'FS_ALLOW_UNRESTRICTED_HOSTS',\n    desc: 'Bind a wildcard host with no Host validation, accepts the risk (\"true\" or \"1\" enables this)',\n  },\n  { flags: 'FS_PUBLIC_URL', desc: 'Resource identifier URL for RFC 9728 discovery' },\n  {\n    flags: 'FS_RATE_LIMIT_RPM',\n    desc: 'Per-client-IP requests/min (default 120 authenticated, 6000 keyless loopback; 1–100000)',\n  },\n  {\n    flags: 'FS_MAX_REQUEST_BYTES',\n    desc: 'Max HTTP request body bytes (default 4194304, 1024–268435456)',\n  },\n  {\n    flags: 'FS_KEEPALIVE_TIMEOUT_MS',\n    desc: 'HTTP keep-alive timeout; set above any fronting proxy idle timeout (default 5000, 1000–600000)',\n  },\n  {\n    flags: 'FS_MAX_WATCHERS',\n    desc: 'Max concurrent file watchers (default 256, 1–4096)',\n  },\n  {\n    flags: 'FS_MAX_INLINE_MATCHES',\n    desc: 'Deprecated and ignored; maxResults sets the search_text page size. Removed in the next major',\n  },\n  {\n    flags: 'FS_MAX_READ_MANY_BYTES',\n    desc: 'Max total bytes across one batch read (default 524288, 10240–104857600)',\n  },\n  { flags: 'FS_SEARCH_TIMEOUT_MS', desc: 'Search timeout in ms (default 5000, 100–60000)' },\n  { flags: 'NO_COLOR', desc: 'Any value disables ANSI color output' },\n  {\n    flags: 'FS_REQUEST_STATE_KEY',\n    desc: 'HMAC key for input_required state; optional outside fleet mode, shared and >=32 bytes in fleet mode',\n  },\n];\n\nconst EXAMPLES_HELP = [\n  '$ filesystem-mcp /path/to/allowed/dir',\n  '$ filesystem-mcp --allow-cwd',\n  '$ filesystem-mcp /project/src /project/tests --allow-cwd',\n  '$ filesystem-mcp --port 3000 /path/to/allowed/dir',\n  '$ filesystem-mcp --read-only /data/readonly',\n  '$ filesystem-mcp --print-config --json /project',\n];\n\nexport function printHelpAndExit(): never {\n  const { bold, dim, section, flag, yellow, cyan } = cliFmt;\n  const COL = 27;\n\n  const optRow = (flags: string, desc: string): string => {\n    const colored = flags\n      .replace(/<[^>]+>/g, (m) => yellow(m))\n      .replace(/-{1,2}[\\w-]+/g, (m) => flag(m));\n    return `  ${padEndVisible(colored, COL)}${desc}`;\n  };\n\n  const envRow = (name: string, desc: string): string => {\n    return `  ${padEndVisible(cyan(name), COL - 1)} ${desc}`;\n  };\n\n  const lines = [\n    '',\n    `${bold('Filesystem MCP')} ${dim(`v${SERVER_VERSION}`)}`,\n    '',\n    dim('Pass one or more directories to set the allowed access roots.'),\n    '',\n    section('Options:'),\n    ...OPTIONS_HELP.map(({ flags, desc }) => optRow(flags, desc)),\n    '',\n    `${section('Environment variables:')} ${dim('(flags take precedence when both are set)')}`,\n    ...ENV_HELP.map(({ flags, desc }) => envRow(flags, desc)),\n    '',\n    section('Examples:'),\n    ...EXAMPLES_HELP.map((ex) => `  ${dim(ex)}`),\n    '',\n  ];\n\n  process.stdout.write(lines.join('\\n'));\n  process.exit(0);\n}\n\nexport function printVersionAndExit(): never {\n  process.stdout.write(`${cliFmt.cyan(SERVER_VERSION)}\\n`);\n  process.exit(0);\n}\n"]}
+{"version":3,"file":"cli-help.js","sourceRoot":"","sources":["../src/cli-help.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,WAAW,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,6EAA6E;AAC7E,6EAA6E;AAC7E,kDAAkD;AAElD,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC;AAOhD,MAAM,YAAY,GAAc;IAC9B,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACvD,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAC3D,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,sDAAsD,EAAE;IACtF;QACE,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,kDAAkD;KACzD;IACD;QACE,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,wBAAwB,CAAC,GAAG,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KAC3E;IACD,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,iDAAiD,EAAE;IACpF;QACE,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,gGAAgG;KACvG;IACD,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,8CAA8C,EAAE;IACrF;QACE,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,mFAAmF;KAC1F;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,kEAAkE;KACzE;IACD;QACE,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,2EAA2E;KAClF;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,8DAA8D;KACrE;IACD,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,8DAA8D,EAAE;IAC7F,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,+CAA+C,EAAE;IACpF;QACE,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,uFAAuF;KAC9F;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,2DAA2D;KAClE;CACF,CAAC;AAEF,MAAM,QAAQ,GAAc;IAC1B;QACE,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,4EAA4E;KACnF;IACD,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,mDAAmD,EAAE;IAC/E,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACpD,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE;IAC7C;QACE,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,2FAA2F;KAClG;IACD;QACE,KAAK,EAAE,oBAAoB;QAC3B,IAAI,EAAE,2DAA2D;KAClE;IACD,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,+CAA+C,EAAE;IACpF,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,sCAAsC,EAAE;IAC3E;QACE,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,qEAAqE;KAC5E;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,sEAAsE;KAC7E;IACD,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,0CAA0C,EAAE;IAC1E;QACE,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,uGAAuG;KAC9G;IACD;QACE,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,wFAAwF;KAC/F;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,IAAI,EAAE,+DAA+D;KACtE;IACD,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,2CAA2C,EAAE;IAClF;QACE,KAAK,EAAE,6BAA6B;QACpC,IAAI,EAAE,6FAA6F;KACpG;IACD,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,gDAAgD,EAAE;IAClF;QACE,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,yFAAyF;KAChG;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,oDAAoD;KAC3D;IACD,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,sCAAsC,EAAE;IACnE;QACE,KAAK,EAAE,sBAAsB;QAC7B,IAAI,EAAE,kEAAkE;KACzE;CACF,CAAC;AAEF,MAAM,aAAa,GAAG;IACpB,uCAAuC;IACvC,8BAA8B;IAC9B,0DAA0D;IAC1D,mDAAmD;IACnD,6CAA6C;IAC7C,0CAA0C;CAC3C,CAAC;AAEF,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,EAAE,CAAC;IACf,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,GAAG,GAAG,CAAC,KAAuB,EAAE,IAAY,EAAE,IAAY,EAAU,EAAE,CAC1E,KAAK,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtE,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,GAAG,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAAC,IAAI,GAAG,CAAC,IAAI,cAAc,EAAE,CAAC,EAAE;QACrE,EAAE;QACF,GAAG,CAAC,+DAA+D,CAAC;QACpE,EAAE;QACF,OAAO,CAAC,UAAU,CAAC;QACnB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACnE,EAAE;QACF,GAAG,OAAO,CAAC,wBAAwB,CAAC,IAAI,GAAG,CAAC,2CAA2C,CAAC,EAAE;QAC1F,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9D,EAAE;QACF,OAAO,CAAC,WAAW,CAAC;QACpB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5C,EAAE;KACH,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC","sourcesContent":["import { styleText } from 'node:util';\n\nimport packageJson from '../package.json' with { type: 'json' };\nimport { MUTATING_TOOL_NAMES } from './tools/index.ts';\n\n// Help text and its rendering. Split out of cli.ts so that module holds only\n// argument parsing and directory validation: this file is static copy plus a\n// formatter, and shares no state with the parser.\n\nconst { version: SERVER_VERSION } = packageJson;\n\ninterface HelpRow {\n  flags: string;\n  desc: string;\n}\n\nconst OPTIONS_HELP: HelpRow[] = [\n  { flags: '-h, --help', desc: 'Show this help message' },\n  { flags: '-v, --version', desc: 'Show the server version' },\n  { flags: '--allow-cwd', desc: 'Add the current working directory as an allowed root' },\n  {\n    flags: '--port <number>',\n    desc: 'Start HTTP transport on this port (env: FS_PORT)',\n  },\n  {\n    flags: '--read-only',\n    desc: `Disable write tools: ${[...MUTATING_TOOL_NAMES].sort().join(', ')}`,\n  },\n  { flags: '--print-config', desc: 'Print the active configuration as JSON and exit' },\n  {\n    flags: '--log-level <level>',\n    desc: 'Log level, RFC 5424: debug|info|notice|warn|error|critical|alert|emergency (env: FS_LOG_LEVEL)',\n  },\n  { flags: '--http-host <host>', desc: 'HTTP server bind address (env: FS_HTTP_HOST)' },\n  {\n    flags: '--api-key <key>',\n    desc: 'Require this API key on HTTP requests; prefer FS_API_KEY (argv is world-readable)',\n  },\n  {\n    flags: '--allow-sensitive',\n    desc: 'Allow access to sensitive system paths (env: FS_ALLOW_SENSITIVE)',\n  },\n  {\n    flags: '--root-boundary <path>',\n    desc: 'Require all allowed roots to fall under this path (env: FS_ROOT_BOUNDARY)',\n  },\n  {\n    flags: '--max-file-size <bytes>',\n    desc: 'Maximum file size for reads in bytes (env: FS_MAX_FILE_SIZE)',\n  },\n  { flags: '--walk-cwd', desc: 'Walk up from CWD to find a project root; implies --allow-cwd' },\n  { flags: '--deny <pattern>', desc: 'Block paths matching this pattern; repeatable' },\n  {\n    flags: '--allow <pattern>',\n    desc: 'Exempt a pattern from the built-in sensitive denylist; repeatable (env: FS_ALLOWLIST)',\n  },\n  {\n    flags: '--allow-missing-roots',\n    desc: 'Start even if configured allowed directories do not exist',\n  },\n];\n\nconst ENV_HELP: HelpRow[] = [\n  {\n    flags: 'FS_LOG_LEVEL',\n    desc: 'Log level, RFC 5424: debug|info|notice|warn|error|critical|alert|emergency',\n  },\n  { flags: 'FS_PORT', desc: 'Start HTTP transport on this port (unset = stdio)' },\n  { flags: 'FS_HTTP_HOST', desc: 'HTTP bind address' },\n  { flags: 'FS_API_KEY', desc: 'HTTP API key' },\n  {\n    flags: 'FS_TRUST_PROXY',\n    desc: 'Express trust-proxy setting: hop count or expression (unset = do not trust X-Forwarded-*)',\n  },\n  {\n    flags: 'FS_ALLOW_SENSITIVE',\n    desc: 'Allow sensitive system paths (\"true\" or \"1\" enables this)',\n  },\n  { flags: 'FS_ROOT_BOUNDARY', desc: 'Path prefix all allowed roots must fall under' },\n  { flags: 'FS_MAX_FILE_SIZE', desc: 'Maximum file size for reads in bytes' },\n  {\n    flags: 'FS_ALLOWED_DIRS',\n    desc: 'Allowed dirs: colon-separated (Unix), semicolon-separated (Windows)',\n  },\n  {\n    flags: 'FS_ALLOW_CWD_WALK',\n    desc: 'Walk up from CWD to find a project root (\"true\" or \"1\" enables this)',\n  },\n  { flags: 'FS_DENYLIST', desc: 'Paths/patterns to block, comma-separated' },\n  {\n    flags: 'FS_ALLOWLIST',\n    desc: 'Patterns exempted from the built-in sensitive denylist, comma-separated; --deny/FS_DENYLIST still win',\n  },\n  {\n    flags: 'FS_ALLOW_MISSING_ROOTS',\n    desc: 'Start even if configured allowed directories do not exist (\"true\" or \"1\" enables this)',\n  },\n  {\n    flags: 'FS_ALLOWED_HOSTS',\n    desc: 'Comma-separated Host header values to accept (HTTP transport)',\n  },\n  { flags: 'FS_ALLOWED_ORIGINS', desc: 'Comma-separated origin hostnames for CORS' },\n  {\n    flags: 'FS_ALLOW_UNRESTRICTED_HOSTS',\n    desc: 'Bind a wildcard host with no Host validation, accepts the risk (\"true\" or \"1\" enables this)',\n  },\n  { flags: 'FS_PUBLIC_URL', desc: 'Resource identifier URL for RFC 9728 discovery' },\n  {\n    flags: 'FS_RATE_LIMIT_RPM',\n    desc: 'Per-client-IP requests/min (default 120 authenticated, 6000 keyless loopback; 1–100000)',\n  },\n  {\n    flags: 'FS_MAX_WATCHERS',\n    desc: 'Max concurrent file watchers (default 256, 1–4096)',\n  },\n  { flags: 'NO_COLOR', desc: 'Any value disables ANSI color output' },\n  {\n    flags: 'FS_REQUEST_STATE_KEY',\n    desc: 'HMAC key for input_required state; optional, >=32 bytes when set',\n  },\n];\n\nconst EXAMPLES_HELP = [\n  '$ filesystem-mcp /path/to/allowed/dir',\n  '$ filesystem-mcp --allow-cwd',\n  '$ filesystem-mcp /project/src /project/tests --allow-cwd',\n  '$ filesystem-mcp --port 3000 /path/to/allowed/dir',\n  '$ filesystem-mcp --read-only /data/readonly',\n  '$ filesystem-mcp --print-config /project',\n];\n\nexport function printHelpAndExit(): never {\n  const COL = 27;\n  // Pad first, colour after: `styleText` honours NO_COLOR, and padding the\n  // plain text keeps the columns aligned whether or not colour is on.\n  const row = (color: 'green' | 'cyan', name: string, desc: string): string =>\n    `  ${styleText(color, name.padEnd(COL))}${desc}`;\n  const dim = (t: string): string => styleText('dim', t);\n  const section = (t: string): string => styleText(['cyan', 'bold'], t);\n\n  const lines = [\n    '',\n    `${styleText('bold', 'Filesystem MCP')} ${dim(`v${SERVER_VERSION}`)}`,\n    '',\n    dim('Pass one or more directories to set the allowed access roots.'),\n    '',\n    section('Options:'),\n    ...OPTIONS_HELP.map(({ flags, desc }) => row('green', flags, desc)),\n    '',\n    `${section('Environment variables:')} ${dim('(flags take precedence when both are set)')}`,\n    ...ENV_HELP.map(({ flags, desc }) => row('cyan', flags, desc)),\n    '',\n    section('Examples:'),\n    ...EXAMPLES_HELP.map((ex) => `  ${dim(ex)}`),\n    '',\n  ];\n\n  process.stdout.write(lines.join('\\n'));\n  process.exit(0);\n}\n\nexport function printVersionAndExit(): never {\n  process.stdout.write(`${styleText('cyan', SERVER_VERSION)}\\n`);\n  process.exit(0);\n}\n"]}

package/dist/cli.d.ts

@@ -7,7 +7,6 @@ export declare function parseArgs(): Promise<{
     port: number | undefined;
     readOnly: boolean;
     printConfig: boolean;
-    json: boolean;
     httpHost: string | undefined;
     apiKey: string | undefined;
 }>;
@@ -15,7 +14,6 @@ export declare function runPrintConfig(options: {
     allowedDirs: string[];
     allowCwd: boolean;
     readOnly: boolean;
-    json: boolean;
     /** Resolved `--port`. Present means the launch this reports on is an HTTP bind. */
     port?: number;
     httpHost?: string;

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAsBA,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAsGD,wBAAsB,SAAS,IAAI,OAAO,CAAC;IACzC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC,CA6ED;AAMD,wBAAsB,cAAc,CAAC,OAAO,EAAE;IAC5C,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqChB"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAqBA,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAyFD,wBAAsB,SAAS,IAAI,OAAO,CAAC;IACzC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC,CA2ED;AAMD,wBAAsB,cAAc,CAAC,OAAO,EAAE;IAC5C,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBhB"}

package/dist/cli.js

@@ -1,14 +1,12 @@
 import { stat } from 'node:fs/promises';
 import { parseArgs as utilParseArgs } from 'node:util';
-import { printHelpAndExit, printVersionAndExit } from './cli-help.js';
-import { cli } from './core/config.js';
-import { formatUnknownErrorMessage } from './core/errors.js';
-import { cliFmt, padEndVisible } from './core/fmt.js';
-import { getReservedDeviceNameForPath, isWindowsDriveRelativePath, normalizePath, } from './core/path-utils.js';
-import { PathGuard } from './core/path.js';
-import { IS_WINDOWS, parseTrueEnvFlag } from './core/primitives.js';
-import { getMaxTextFileSize } from './core/util.js';
-import { registeredTools } from './tools/index.js';
+import { printHelpAndExit, printVersionAndExit } from "./cli-help.js";
+import { cli } from "./core/config.js";
+import { formatUnknownErrorMessage } from "./core/errors.js";
+import { getReservedDeviceNameForPath, isWindowsDriveRelativePath, normalizePath, parseTrueEnvFlag, } from "./core/path-utils.js";
+import { PathGuard } from "./core/path.js";
+import { getMaxTextFileSize } from "./core/util.js";
+import { registeredTools } from "./tools/index.js";
 // ════════════════════════════════════════════════════════════
 // Path & Config Utilities — pure functions and error types
 // ════════════════════════════════════════════════════════════
@@ -48,29 +46,20 @@ async function validateDirectoryPath(inputPath, allowMissing = false) {
         throw new Error(`${inputPath} is not a directory`);
     return normalized;
 }
+// No dedupe here: PathGuard's `normalizeAllowedDirectories` already Set-dedupes
+// the normalized set, and containment checks are case-insensitive where the
+// filesystem is.
 async function normalizeAndValidateDirs(paths, allowMissing = false) {
     const normalized = [];
     for (const p of paths) {
         normalized.push(await validateDirectoryPath(p, allowMissing));
     }
-    return deduplicateAllowedDirectories(normalized);
+    return normalized;
 }
 function normalizeCliExitMessage(error) {
     const rawMessage = formatUnknownErrorMessage(error);
     return rawMessage.startsWith('Error:') ? rawMessage : `Error: ${rawMessage}`;
 }
-function deduplicateAllowedDirectories(dirs) {
-    const seen = new Set();
-    const deduplicated = [];
-    for (const dir of dirs) {
-        const key = IS_WINDOWS ? dir.toLowerCase() : dir;
-        if (seen.has(key))
-            continue;
-        seen.add(key);
-        deduplicated.push(dir);
-    }
-    return deduplicated;
-}
 function parsePortOption(raw) {
     // '' reads as unset: FS_PORT set-but-empty (compose templating) means stdio.
     if (raw === undefined || raw === '')
@@ -85,9 +74,7 @@ const CLI_PARSER_CONFIG = {
     options: {
         'allow-cwd': { type: 'boolean', default: false },
         'read-only': { type: 'boolean', default: false },
-        safe: { type: 'boolean', default: false },
         'print-config': { type: 'boolean', default: false },
-        json: { type: 'boolean', default: false },
         port: { type: 'string' },
         help: { type: 'boolean', short: 'h' },
         version: { type: 'boolean', short: 'v' },
@@ -149,9 +136,8 @@ export async function parseArgs() {
         const allowCwd = v['allow-cwd'] ||
             v['walk-cwd'] ||
             parseTrueEnvFlag(process.env['FS_ALLOW_CWD_WALK'], 'FS_ALLOW_CWD_WALK');
-        const readOnly = v['read-only'] || v.safe;
+        const readOnly = v['read-only'];
         const printConfig = v['print-config'];
-        const json = v.json;
         const port = parsePortOption(v.port ?? process.env['FS_PORT']);
         const allowMissingRoots = v['allow-missing-roots'] ||
             parseTrueEnvFlag(process.env['FS_ALLOW_MISSING_ROOTS'], 'FS_ALLOW_MISSING_ROOTS');
@@ -171,7 +157,6 @@ export async function parseArgs() {
             port,
             readOnly,
             printConfig,
-            json,
             httpHost,
             apiKey,
         };
@@ -184,10 +169,9 @@ export async function parseArgs() {
     }
 }
 // ════════════════════════════════════════════════════════════
-// Effective config reporting — prints the resolved server config
+// Effective config reporting — prints the resolved server config as JSON
 // ════════════════════════════════════════════════════════════
 export async function runPrintConfig(options) {
-    const write = (s) => process.stdout.write(s);
     const pathGuard = new PathGuard({
         allowCwd: options.allowCwd,
         cliAllowedDirs: options.allowedDirs,
@@ -207,17 +191,6 @@ export async function runPrintConfig(options) {
         apiKey: options.apiKey ? '***' : null,
         limits: { maxFileSizeBytes: getMaxTextFileSize() },
     };
-    if (options.json) {
-        write(JSON.stringify(config, null, 2));
-    }
-    else {
-        const key = (k) => padEndVisible(cliFmt.cyan(k), 14);
-        write(`${key('transport:')}${config.transport}\n`);
-        write(`${key('readOnly:')}${cliFmt.bool(config.readOnly)}\n`);
-        write(`${key('apiKey:')}${cliFmt.dim(config.apiKey ?? 'none')}\n`);
-        write(`${key('allowedRoots:')}${config.allowedRoots.join(', ') || cliFmt.dim('(none)')}\n`);
-        write(`${key('tools:')}${cliFmt.dim(config.tools.join(', '))}\n`);
-        write(`${key('maxFileSize:')}${cliFmt.yellow(String(config.limits.maxFileSizeBytes))}\n`);
-    }
+    process.stdout.write(`${JSON.stringify(config, null, 2)}\n`);
 }
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,WAAW,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,+DAA+D;AAC/D,2DAA2D;AAC3D,+DAA+D;AAE/D,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,YAAY,CAAC,2BAA2B,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,0BAA0B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,YAAY,CACpB,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,4BAA4B,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,6CAA6C,QAAQ,GAAG,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,YAAY,GAAG,KAAK;IAC1E,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAE5C,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,YAAY;YAAE,OAAO,UAAU,CAAC;QACpC,8DAA8D;QAC9D,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,KAAK,yBAAyB,CAAC,KAAK,CAAC,EAAE,EAAE;YAC3F,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,qBAAqB,CAAC,CAAC;IAC7E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,KAAwB,EACxB,YAAY,GAAG,KAAK;IAEpB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,6BAA6B,CAAC,UAAU,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,UAAU,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,6BAA6B,CAAC,IAAuB;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACjD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,6EAA6E;IAC7E,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;QAC/C,MAAM,IAAI,YAAY,CAAC,gEAAgE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,iBAAiB,GAAG;IACxB,OAAO,EAAE;QACP,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QAChD,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QAChD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QACzC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QACnD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QACzC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;QACrC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;QACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC7B,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QACtD,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QAC/C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzC,qBAAqB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;KAC3D;IACD,MAAM,EAAE,IAAI;IACZ,gBAAgB,EAAE,IAAI;CACd,CAAC;AAEX,MAAM,CAAC,KAAK,UAAU,SAAS;IAU7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC;QAEhD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,gBAAgB,EAAE,CAAC;QACrB,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1B,mBAAmB,EAAE,CAAC;QACxB,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5C,eAAe,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACxB,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;QAChE,IAAI,CAAC,CAAC,eAAe,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;QAC3E,IAAI,CAAC,CAAC,eAAe,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;QAC5E,IAAI,CAAC,CAAC,iBAAiB,CAAC;YAAE,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC;QACpD,IAAI,CAAC,CAAC,UAAU,CAAC;YAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3C,IAAI,CAAC,CAAC,qBAAqB,CAAC;YAAE,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC3D,MAAM,WAAW,GAAG,CAAC,OAAsC,EAAqB,EAAE,CAAC;YACjF,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;SACzE,CAAC;QACF,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,YAAY,GAAG,YAAY,CAAC;QAC7D,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;QAEhE,MAAM,QAAQ,GACZ,CAAC,CAAC,WAAW,CAAC;YACd,CAAC,CAAC,UAAU,CAAC;YACb,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAC1C,MAAM,WAAW,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACpB,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,iBAAiB,GACrB,CAAC,CAAC,qBAAqB,CAAC;YACxB,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAEpF,IAAI,WAAW,GAAa,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,WAAW;gBACT,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;oBAC3B,CAAC,CAAC,MAAM,wBAAwB,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC;oBACvE,CAAC,CAAC,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,OAAO;YACL,WAAW;YACX,QAAQ;YACR,IAAI;YACJ,QAAQ;YACR,WAAW;YACX,IAAI;YACJ,QAAQ;YACR,MAAM;SACP,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,IAAI,YAAY,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,iEAAiE;AACjE,+DAA+D;AAE/D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OASpC;IACC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAErD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,cAAc,EAAE,OAAO,CAAC,WAAW;KACpC,CAAC,CAAC;IACH,MAAM,SAAS,CAAC,2BAA2B,EAAE,CAAC;IAC9C,MAAM,YAAY,GAAG,SAAS,CAAC,qBAAqB,EAAE,CAAC;IAEvD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEnE,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,MAAM,GAAG;QACb,SAAS,EACP,OAAO,CAAC,IAAI,KAAK,SAAS;YACxB,CAAC,CAAC,UAAU,OAAO,CAAC,QAAQ,IAAI,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACrE,CAAC,CAAC,OAAO;QACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY;QACZ,KAAK;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACrC,MAAM,EAAE,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,EAAE;KACnD,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,KAAK,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QACnD,KAAK,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9D,KAAK,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,GAAG,GAAG,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5F,KAAK,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,KAAK,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC","sourcesContent":["import type { Stats } from 'node:fs';\nimport { stat } from 'node:fs/promises';\nimport { parseArgs as utilParseArgs } from 'node:util';\n\nimport { printHelpAndExit, printVersionAndExit } from './cli-help.js';\nimport { cli } from './core/config.js';\nimport { formatUnknownErrorMessage } from './core/errors.js';\nimport { cliFmt, padEndVisible } from './core/fmt.js';\nimport {\n  getReservedDeviceNameForPath,\n  isWindowsDriveRelativePath,\n  normalizePath,\n} from './core/path-utils.js';\nimport { PathGuard } from './core/path.js';\nimport { IS_WINDOWS, parseTrueEnvFlag } from './core/primitives.js';\nimport { getMaxTextFileSize } from './core/util.js';\nimport { registeredTools } from './tools/index.js';\n\n// ════════════════════════════════════════════════════════════\n// Path & Config Utilities — pure functions and error types\n// ════════════════════════════════════════════════════════════\n\nexport class CliExitError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'CliExitError';\n  }\n}\n\nfunction validateCliPath(inputPath: string): void {\n  if (inputPath.includes('\\0')) {\n    throw new CliExitError('Path contains null bytes.');\n  }\n\n  if (isWindowsDriveRelativePath(inputPath)) {\n    throw new CliExitError(\n      'Windows drive-relative paths are not allowed. Use C:\\\\path or C:/path instead of C:path.',\n    );\n  }\n\n  const reserved = getReservedDeviceNameForPath(inputPath);\n  if (reserved) {\n    throw new CliExitError(`Windows reserved device name not allowed: ${reserved}.`);\n  }\n}\n\nasync function validateDirectoryPath(inputPath: string, allowMissing = false): Promise<string> {\n  const normalized = normalizePath(inputPath);\n\n  let stats: Stats;\n  try {\n    stats = await stat(normalized);\n  } catch (error) {\n    if (allowMissing) return normalized;\n    // Node's own message already names the syscall and the errno.\n    throw new Error(`Cannot access directory ${inputPath}: ${formatUnknownErrorMessage(error)}`, {\n      cause: error,\n    });\n  }\n\n  if (!stats.isDirectory()) throw new Error(`${inputPath} is not a directory`);\n  return normalized;\n}\n\nasync function normalizeAndValidateDirs(\n  paths: readonly string[],\n  allowMissing = false,\n): Promise<string[]> {\n  const normalized: string[] = [];\n  for (const p of paths) {\n    normalized.push(await validateDirectoryPath(p, allowMissing));\n  }\n  return deduplicateAllowedDirectories(normalized);\n}\n\nfunction normalizeCliExitMessage(error: unknown): string {\n  const rawMessage = formatUnknownErrorMessage(error);\n  return rawMessage.startsWith('Error:') ? rawMessage : `Error: ${rawMessage}`;\n}\n\nfunction deduplicateAllowedDirectories(dirs: readonly string[]): string[] {\n  const seen = new Set<string>();\n  const deduplicated: string[] = [];\n\n  for (const dir of dirs) {\n    const key = IS_WINDOWS ? dir.toLowerCase() : dir;\n    if (seen.has(key)) continue;\n    seen.add(key);\n    deduplicated.push(dir);\n  }\n\n  return deduplicated;\n}\n\nfunction parsePortOption(raw: unknown): number | undefined {\n  // '' reads as unset: FS_PORT set-but-empty (compose templating) means stdio.\n  if (raw === undefined || raw === '') return undefined;\n  const n = Number(raw);\n  if (!Number.isInteger(n) || n < 1 || n > 65535) {\n    throw new CliExitError(`Error: --port / FS_PORT must be an integer between 1 and 65535`);\n  }\n  return n;\n}\n\nconst CLI_PARSER_CONFIG = {\n  options: {\n    'allow-cwd': { type: 'boolean', default: false },\n    'read-only': { type: 'boolean', default: false },\n    safe: { type: 'boolean', default: false },\n    'print-config': { type: 'boolean', default: false },\n    json: { type: 'boolean', default: false },\n    port: { type: 'string' },\n    help: { type: 'boolean', short: 'h' },\n    version: { type: 'boolean', short: 'v' },\n    'log-level': { type: 'string' },\n    'http-host': { type: 'string' },\n    'api-key': { type: 'string' },\n    'allow-sensitive': { type: 'boolean', default: false },\n    'root-boundary': { type: 'string' },\n    'max-file-size': { type: 'string' },\n    'walk-cwd': { type: 'boolean', default: false },\n    deny: { type: 'string', multiple: true },\n    allow: { type: 'string', multiple: true },\n    'allow-missing-roots': { type: 'boolean', default: false },\n  },\n  strict: true,\n  allowPositionals: true,\n} as const;\n\nexport async function parseArgs(): Promise<{\n  allowedDirs: string[];\n  allowCwd: boolean;\n  port: number | undefined;\n  readOnly: boolean;\n  printConfig: boolean;\n  json: boolean;\n  httpHost: string | undefined;\n  apiKey: string | undefined;\n}> {\n  try {\n    const parsed = utilParseArgs(CLI_PARSER_CONFIG);\n\n    if (parsed.values.help) {\n      printHelpAndExit();\n    }\n\n    if (parsed.values.version) {\n      printVersionAndExit();\n    }\n\n    for (const positional of parsed.positionals) {\n      validateCliPath(positional);\n    }\n\n    const v = parsed.values;\n    // `--http-host` and `--api-key` are returned to the caller and handed to\n    // the server as config. Every other flag lands in the CLI-override store\n    // (core/config.ts) — the one owner of the flag-beats-env rule — which deep\n    // core readers (path, sensitive, observability, util) consult before\n    // falling back to the operator's environment. Nothing writes process.env.\n    const httpHost = v['http-host'] ?? process.env['FS_HTTP_HOST'];\n    const apiKey = v['api-key'] ?? process.env['FS_API_KEY'];\n    if (v['log-level'] !== undefined) cli.logLevel = v['log-level'];\n    if (v['max-file-size'] !== undefined) cli.maxFileSize = v['max-file-size'];\n    if (v['root-boundary'] !== undefined) cli.rootBoundary = v['root-boundary'];\n    if (v['allow-sensitive']) cli.allowSensitive = true;\n    if (v['walk-cwd']) cli.allowCwdWalk = true;\n    if (v['allow-missing-roots']) cli.allowMissingRoots = true;\n    const patternList = (entries: readonly string[] | undefined): readonly string[] => [\n      ...new Set((entries ?? []).map((entry) => entry.trim()).filter(Boolean)),\n    ];\n    const denyPatterns = patternList(v.deny);\n    if (denyPatterns.length > 0) cli.denyPatterns = denyPatterns;\n    const allowPatterns = patternList(v.allow);\n    if (allowPatterns.length > 0) cli.allowPatterns = allowPatterns;\n\n    const allowCwd =\n      v['allow-cwd'] ||\n      v['walk-cwd'] ||\n      parseTrueEnvFlag(process.env['FS_ALLOW_CWD_WALK'], 'FS_ALLOW_CWD_WALK');\n    const readOnly = v['read-only'] || v.safe;\n    const printConfig = v['print-config'];\n    const json = v.json;\n    const port = parsePortOption(v.port ?? process.env['FS_PORT']);\n    const allowMissingRoots =\n      v['allow-missing-roots'] ||\n      parseTrueEnvFlag(process.env['FS_ALLOW_MISSING_ROOTS'], 'FS_ALLOW_MISSING_ROOTS');\n\n    let allowedDirs: string[] = [];\n    try {\n      allowedDirs =\n        parsed.positionals.length > 0\n          ? await normalizeAndValidateDirs(parsed.positionals, allowMissingRoots)\n          : [];\n    } catch (error: unknown) {\n      throw new CliExitError(normalizeCliExitMessage(error));\n    }\n\n    return {\n      allowedDirs,\n      allowCwd,\n      port,\n      readOnly,\n      printConfig,\n      json,\n      httpHost,\n      apiKey,\n    };\n  } catch (error: unknown) {\n    if (error instanceof CliExitError) {\n      throw error;\n    }\n\n    throw new CliExitError(normalizeCliExitMessage(error));\n  }\n}\n\n// ════════════════════════════════════════════════════════════\n// Effective config reporting — prints the resolved server config\n// ════════════════════════════════════════════════════════════\n\nexport async function runPrintConfig(options: {\n  allowedDirs: string[];\n  allowCwd: boolean;\n  readOnly: boolean;\n  json: boolean;\n  /** Resolved `--port`. Present means the launch this reports on is an HTTP bind. */\n  port?: number;\n  httpHost?: string;\n  apiKey?: string;\n}): Promise<void> {\n  const write = (s: string) => process.stdout.write(s);\n\n  const pathGuard = new PathGuard({\n    allowCwd: options.allowCwd,\n    cliAllowedDirs: options.allowedDirs,\n  });\n  await pathGuard.recomputeAllowedDirectories();\n  const allowedRoots = pathGuard.getAllowedDirectories();\n\n  const tools = registeredTools(options.readOnly).map((t) => t.name);\n\n  // Derived, never assumed: `--print-config --port 3000` reports the HTTP bind\n  // that `--port` would actually have started, not the stdio default.\n  const config = {\n    transport:\n      options.port !== undefined\n        ? `http://${options.httpHost ?? '127.0.0.1'}:${String(options.port)}`\n        : 'stdio',\n    readOnly: options.readOnly,\n    allowedRoots,\n    tools,\n    apiKey: options.apiKey ? '***' : null,\n    limits: { maxFileSizeBytes: getMaxTextFileSize() },\n  };\n\n  if (options.json) {\n    write(JSON.stringify(config, null, 2));\n  } else {\n    const key = (k: string) => padEndVisible(cliFmt.cyan(k), 14);\n    write(`${key('transport:')}${config.transport}\\n`);\n    write(`${key('readOnly:')}${cliFmt.bool(config.readOnly)}\\n`);\n    write(`${key('apiKey:')}${cliFmt.dim(config.apiKey ?? 'none')}\\n`);\n    write(`${key('allowedRoots:')}${config.allowedRoots.join(', ') || cliFmt.dim('(none)')}\\n`);\n    write(`${key('tools:')}${cliFmt.dim(config.tools.join(', '))}\\n`);\n    write(`${key('maxFileSize:')}${cliFmt.yellow(String(config.limits.maxFileSizeBytes))}\\n`);\n  }\n}\n"]}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,WAAW,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,aAAa,EACb,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,+DAA+D;AAC/D,2DAA2D;AAC3D,+DAA+D;AAE/D,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,YAAY,CAAC,2BAA2B,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,0BAA0B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,YAAY,CACpB,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,4BAA4B,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,6CAA6C,QAAQ,GAAG,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,YAAY,GAAG,KAAK;IAC1E,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAE5C,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,YAAY;YAAE,OAAO,UAAU,CAAC;QACpC,8DAA8D;QAC9D,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,KAAK,yBAAyB,CAAC,KAAK,CAAC,EAAE,EAAE;YAC3F,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,qBAAqB,CAAC,CAAC;IAC7E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gFAAgF;AAChF,4EAA4E;AAC5E,iBAAiB;AACjB,KAAK,UAAU,wBAAwB,CACrC,KAAwB,EACxB,YAAY,GAAG,KAAK;IAEpB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,UAAU,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,6EAA6E;IAC7E,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;QAC/C,MAAM,IAAI,YAAY,CAAC,gEAAgE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,iBAAiB,GAAG;IACxB,OAAO,EAAE;QACP,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QAChD,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QAChD,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QACnD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;QACrC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;QACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC7B,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QACtD,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QAC/C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzC,qBAAqB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;KAC3D;IACD,MAAM,EAAE,IAAI;IACZ,gBAAgB,EAAE,IAAI;CACd,CAAC;AAEX,MAAM,CAAC,KAAK,UAAU,SAAS;IAS7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC;QAEhD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,gBAAgB,EAAE,CAAC;QACrB,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1B,mBAAmB,EAAE,CAAC;QACxB,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5C,eAAe,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACxB,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;QAChE,IAAI,CAAC,CAAC,eAAe,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;QAC3E,IAAI,CAAC,CAAC,eAAe,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;QAC5E,IAAI,CAAC,CAAC,iBAAiB,CAAC;YAAE,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC;QACpD,IAAI,CAAC,CAAC,UAAU,CAAC;YAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3C,IAAI,CAAC,CAAC,qBAAqB,CAAC;YAAE,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC3D,MAAM,WAAW,GAAG,CAAC,OAAsC,EAAqB,EAAE,CAAC;YACjF,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;SACzE,CAAC;QACF,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,YAAY,GAAG,YAAY,CAAC;QAC7D,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;QAEhE,MAAM,QAAQ,GACZ,CAAC,CAAC,WAAW,CAAC;YACd,CAAC,CAAC,UAAU,CAAC;YACb,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,iBAAiB,GACrB,CAAC,CAAC,qBAAqB,CAAC;YACxB,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAEpF,IAAI,WAAW,GAAa,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,WAAW;gBACT,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;oBAC3B,CAAC,CAAC,MAAM,wBAAwB,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC;oBACvE,CAAC,CAAC,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,OAAO;YACL,WAAW;YACX,QAAQ;YACR,IAAI;YACJ,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,MAAM;SACP,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,IAAI,YAAY,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,yEAAyE;AACzE,+DAA+D;AAE/D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAQpC;IACC,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,cAAc,EAAE,OAAO,CAAC,WAAW;KACpC,CAAC,CAAC;IACH,MAAM,SAAS,CAAC,2BAA2B,EAAE,CAAC;IAC9C,MAAM,YAAY,GAAG,SAAS,CAAC,qBAAqB,EAAE,CAAC;IAEvD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEnE,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,MAAM,GAAG;QACb,SAAS,EACP,OAAO,CAAC,IAAI,KAAK,SAAS;YACxB,CAAC,CAAC,UAAU,OAAO,CAAC,QAAQ,IAAI,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACrE,CAAC,CAAC,OAAO;QACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY;QACZ,KAAK;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACrC,MAAM,EAAE,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,EAAE;KACnD,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC","sourcesContent":["import type { Stats } from 'node:fs';\nimport { stat } from 'node:fs/promises';\nimport { parseArgs as utilParseArgs } from 'node:util';\n\nimport { printHelpAndExit, printVersionAndExit } from './cli-help.ts';\nimport { cli } from './core/config.ts';\nimport { formatUnknownErrorMessage } from './core/errors.ts';\nimport {\n  getReservedDeviceNameForPath,\n  isWindowsDriveRelativePath,\n  normalizePath,\n  parseTrueEnvFlag,\n} from './core/path-utils.ts';\nimport { PathGuard } from './core/path.ts';\nimport { getMaxTextFileSize } from './core/util.ts';\nimport { registeredTools } from './tools/index.ts';\n\n// ════════════════════════════════════════════════════════════\n// Path & Config Utilities — pure functions and error types\n// ════════════════════════════════════════════════════════════\n\nexport class CliExitError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'CliExitError';\n  }\n}\n\nfunction validateCliPath(inputPath: string): void {\n  if (inputPath.includes('\\0')) {\n    throw new CliExitError('Path contains null bytes.');\n  }\n\n  if (isWindowsDriveRelativePath(inputPath)) {\n    throw new CliExitError(\n      'Windows drive-relative paths are not allowed. Use C:\\\\path or C:/path instead of C:path.',\n    );\n  }\n\n  const reserved = getReservedDeviceNameForPath(inputPath);\n  if (reserved) {\n    throw new CliExitError(`Windows reserved device name not allowed: ${reserved}.`);\n  }\n}\n\nasync function validateDirectoryPath(inputPath: string, allowMissing = false): Promise<string> {\n  const normalized = normalizePath(inputPath);\n\n  let stats: Stats;\n  try {\n    stats = await stat(normalized);\n  } catch (error) {\n    if (allowMissing) return normalized;\n    // Node's own message already names the syscall and the errno.\n    throw new Error(`Cannot access directory ${inputPath}: ${formatUnknownErrorMessage(error)}`, {\n      cause: error,\n    });\n  }\n\n  if (!stats.isDirectory()) throw new Error(`${inputPath} is not a directory`);\n  return normalized;\n}\n\n// No dedupe here: PathGuard's `normalizeAllowedDirectories` already Set-dedupes\n// the normalized set, and containment checks are case-insensitive where the\n// filesystem is.\nasync function normalizeAndValidateDirs(\n  paths: readonly string[],\n  allowMissing = false,\n): Promise<string[]> {\n  const normalized: string[] = [];\n  for (const p of paths) {\n    normalized.push(await validateDirectoryPath(p, allowMissing));\n  }\n  return normalized;\n}\n\nfunction normalizeCliExitMessage(error: unknown): string {\n  const rawMessage = formatUnknownErrorMessage(error);\n  return rawMessage.startsWith('Error:') ? rawMessage : `Error: ${rawMessage}`;\n}\n\nfunction parsePortOption(raw: unknown): number | undefined {\n  // '' reads as unset: FS_PORT set-but-empty (compose templating) means stdio.\n  if (raw === undefined || raw === '') return undefined;\n  const n = Number(raw);\n  if (!Number.isInteger(n) || n < 1 || n > 65535) {\n    throw new CliExitError(`Error: --port / FS_PORT must be an integer between 1 and 65535`);\n  }\n  return n;\n}\n\nconst CLI_PARSER_CONFIG = {\n  options: {\n    'allow-cwd': { type: 'boolean', default: false },\n    'read-only': { type: 'boolean', default: false },\n    'print-config': { type: 'boolean', default: false },\n    port: { type: 'string' },\n    help: { type: 'boolean', short: 'h' },\n    version: { type: 'boolean', short: 'v' },\n    'log-level': { type: 'string' },\n    'http-host': { type: 'string' },\n    'api-key': { type: 'string' },\n    'allow-sensitive': { type: 'boolean', default: false },\n    'root-boundary': { type: 'string' },\n    'max-file-size': { type: 'string' },\n    'walk-cwd': { type: 'boolean', default: false },\n    deny: { type: 'string', multiple: true },\n    allow: { type: 'string', multiple: true },\n    'allow-missing-roots': { type: 'boolean', default: false },\n  },\n  strict: true,\n  allowPositionals: true,\n} as const;\n\nexport async function parseArgs(): Promise<{\n  allowedDirs: string[];\n  allowCwd: boolean;\n  port: number | undefined;\n  readOnly: boolean;\n  printConfig: boolean;\n  httpHost: string | undefined;\n  apiKey: string | undefined;\n}> {\n  try {\n    const parsed = utilParseArgs(CLI_PARSER_CONFIG);\n\n    if (parsed.values.help) {\n      printHelpAndExit();\n    }\n\n    if (parsed.values.version) {\n      printVersionAndExit();\n    }\n\n    for (const positional of parsed.positionals) {\n      validateCliPath(positional);\n    }\n\n    const v = parsed.values;\n    // `--http-host` and `--api-key` are returned to the caller and handed to\n    // the server as config. Every other flag lands in the CLI-override store\n    // (core/config.ts) — the one owner of the flag-beats-env rule — which deep\n    // core readers (path, sensitive, observability, util) consult before\n    // falling back to the operator's environment. Nothing writes process.env.\n    const httpHost = v['http-host'] ?? process.env['FS_HTTP_HOST'];\n    const apiKey = v['api-key'] ?? process.env['FS_API_KEY'];\n    if (v['log-level'] !== undefined) cli.logLevel = v['log-level'];\n    if (v['max-file-size'] !== undefined) cli.maxFileSize = v['max-file-size'];\n    if (v['root-boundary'] !== undefined) cli.rootBoundary = v['root-boundary'];\n    if (v['allow-sensitive']) cli.allowSensitive = true;\n    if (v['walk-cwd']) cli.allowCwdWalk = true;\n    if (v['allow-missing-roots']) cli.allowMissingRoots = true;\n    const patternList = (entries: readonly string[] | undefined): readonly string[] => [\n      ...new Set((entries ?? []).map((entry) => entry.trim()).filter(Boolean)),\n    ];\n    const denyPatterns = patternList(v.deny);\n    if (denyPatterns.length > 0) cli.denyPatterns = denyPatterns;\n    const allowPatterns = patternList(v.allow);\n    if (allowPatterns.length > 0) cli.allowPatterns = allowPatterns;\n\n    const allowCwd =\n      v['allow-cwd'] ||\n      v['walk-cwd'] ||\n      parseTrueEnvFlag(process.env['FS_ALLOW_CWD_WALK'], 'FS_ALLOW_CWD_WALK');\n    const readOnly = v['read-only'];\n    const printConfig = v['print-config'];\n    const port = parsePortOption(v.port ?? process.env['FS_PORT']);\n    const allowMissingRoots =\n      v['allow-missing-roots'] ||\n      parseTrueEnvFlag(process.env['FS_ALLOW_MISSING_ROOTS'], 'FS_ALLOW_MISSING_ROOTS');\n\n    let allowedDirs: string[] = [];\n    try {\n      allowedDirs =\n        parsed.positionals.length > 0\n          ? await normalizeAndValidateDirs(parsed.positionals, allowMissingRoots)\n          : [];\n    } catch (error: unknown) {\n      throw new CliExitError(normalizeCliExitMessage(error));\n    }\n\n    return {\n      allowedDirs,\n      allowCwd,\n      port,\n      readOnly,\n      printConfig,\n      httpHost,\n      apiKey,\n    };\n  } catch (error: unknown) {\n    if (error instanceof CliExitError) {\n      throw error;\n    }\n\n    throw new CliExitError(normalizeCliExitMessage(error));\n  }\n}\n\n// ════════════════════════════════════════════════════════════\n// Effective config reporting — prints the resolved server config as JSON\n// ════════════════════════════════════════════════════════════\n\nexport async function runPrintConfig(options: {\n  allowedDirs: string[];\n  allowCwd: boolean;\n  readOnly: boolean;\n  /** Resolved `--port`. Present means the launch this reports on is an HTTP bind. */\n  port?: number;\n  httpHost?: string;\n  apiKey?: string;\n}): Promise<void> {\n  const pathGuard = new PathGuard({\n    allowCwd: options.allowCwd,\n    cliAllowedDirs: options.allowedDirs,\n  });\n  await pathGuard.recomputeAllowedDirectories();\n  const allowedRoots = pathGuard.getAllowedDirectories();\n\n  const tools = registeredTools(options.readOnly).map((t) => t.name);\n\n  // Derived, never assumed: `--print-config --port 3000` reports the HTTP bind\n  // that `--port` would actually have started, not the stdio default.\n  const config = {\n    transport:\n      options.port !== undefined\n        ? `http://${options.httpHost ?? '127.0.0.1'}:${String(options.port)}`\n        : 'stdio',\n    readOnly: options.readOnly,\n    allowedRoots,\n    tools,\n    apiKey: options.apiKey ? '***' : null,\n    limits: { maxFileSizeBytes: getMaxTextFileSize() },\n  };\n\n  process.stdout.write(`${JSON.stringify(config, null, 2)}\\n`);\n}\n"]}

package/dist/core/concurrency.d.ts

@@ -2,8 +2,8 @@ import * as z from 'zod/v4';
 export type StoppedReason = 'maxResults' | 'maxFiles' | 'timeout';
 export declare const StoppedReasonSchema: z.ZodOptional<z.ZodEnum<{
     maxResults: "maxResults";
-    timeout: "timeout";
     maxFiles: "maxFiles";
+    timeout: "timeout";
 }>>;
 /**
  * The subset `search_text` and `find_files` can actually emit. Their scans call
@@ -15,19 +15,6 @@ export declare const SearchStoppedReasonSchema: z.ZodOptional<z.ZodEnum<{
     maxResults: "maxResults";
     timeout: "timeout";
 }>>;
-/**
- * Accumulates why an enumeration stopped early. maxResults wins over maxFiles
- * wins over timeout (the most specific cap is the definite cause even if the
- * abort also fired on the same iteration). Call `resolve()` once at the end.
- */
-export declare class StopReasonTracker {
-    #private;
-    hitMaxResults(): void;
-    hitMaxFiles(): void;
-    hitAbort(): void;
-    get truncated(): boolean;
-    resolve(): StoppedReason | undefined;
-}
 interface ParallelResult<R> {
     results: {
         index: number;
@@ -46,8 +33,9 @@ export declare function processInParallel<T, R>(items: readonly T[], processor:
  *
  * `maxEntries` caps how many entries are dispatched (maxFiles); `shouldStop`
  * lets the caller stop on its own accumulating result count (maxResults). Both
- * are checked before dispatch, so the returned tracker names exactly one
- * reason — the loop breaks on the first that fires.
+ * are checked before dispatch, so the returned reason is exactly one — the
+ * loop breaks on the first that fires. `undefined` means every entry was
+ * dispatched.
  */
 export declare function processEntriesConcurrently(entries: AsyncIterable<{
     path: string;
@@ -61,7 +49,7 @@ export declare function processEntriesConcurrently(entries: AsyncIterable<{
     onEntry: () => void;
     onError?: (entryPath: string, err: unknown) => void;
     runEntry: (entryPath: string) => Promise<void>;
-}): Promise<StopReasonTracker>;
+}): Promise<StoppedReason | undefined>;
 export declare function withAbort<T>(promise: Promise<T>, signal?: AbortSignal): Promise<T>;
 export {};
 //# sourceMappingURL=concurrency.d.ts.map

package/dist/core/concurrency.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"concurrency.d.ts","sourceRoot":"","sources":["../../src/core/concurrency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAK5B,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS,CAAC;AAElE,eAAO,MAAM,mBAAmB;;;;GAA2D,CAAC;AAE5F;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;GAA+C,CAAC;AAEtF;;;;GAIG;AACH,qBAAa,iBAAiB;;IAG5B,aAAa,IAAI,IAAI;IAIrB,WAAW,IAAI,IAAI;IAInB,QAAQ,IAAI,IAAI;IAIhB,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,OAAO,IAAI,aAAa,GAAG,SAAS;CAGrC;AAED,UAAU,cAAc,CAAC,CAAC;IACxB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,CAAC,CAAA;KAAE,EAAE,CAAC;IACvC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,EAAE,CAAC;CAC3C;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EAAE,CAAC,EAC1C,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAClC,WAAW,GAAE,MAA6B,EAC1C,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAgE5B;AAED;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EACrE,OAAO,EAAE;IACP,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC;IAC3B,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACpD,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD,GACA,OAAO,CAAC,iBAAiB,CAAC,CA0D5B;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAmBlF"}
+{"version":3,"file":"concurrency.d.ts","sourceRoot":"","sources":["../../src/core/concurrency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAK5B,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS,CAAC;AAElE,eAAO,MAAM,mBAAmB;;;;GAA2D,CAAC;AAE5F;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;GAA+C,CAAC;AAEtF,UAAU,cAAc,CAAC,CAAC;IACxB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,CAAC,CAAA;KAAE,EAAE,CAAC;IACvC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,EAAE,CAAC;CAC3C;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EAAE,CAAC,EAC1C,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAClC,WAAW,GAAE,MAA6B,EAC1C,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAgE5B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EACrE,OAAO,EAAE;IACP,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC;IAC3B,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACpD,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD,GACA,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA0DpC;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAmBlF"}

package/dist/core/concurrency.js

@@ -1,6 +1,6 @@
 import * as z from 'zod/v4';
-import { normalizeUnknownError } from './errors.js';
-import { PARALLEL_CONCURRENCY } from './util.js';
+import { normalizeUnknownError } from "./errors.js";
+import { PARALLEL_CONCURRENCY } from "./util.js";
 export const StoppedReasonSchema = z.enum(['maxResults', 'maxFiles', 'timeout']).optional();
 /**
  * The subset `search_text` and `find_files` can actually emit. Their scans call
@@ -9,30 +9,6 @@ export const StoppedReasonSchema = z.enum(['maxResults', 'maxFiles', 'timeout'])
  * both tools' own descriptions.
  */
 export const SearchStoppedReasonSchema = z.enum(['maxResults', 'timeout']).optional();
-/**
- * Accumulates why an enumeration stopped early. maxResults wins over maxFiles
- * wins over timeout (the most specific cap is the definite cause even if the
- * abort also fired on the same iteration). Call `resolve()` once at the end.
- */
-export class StopReasonTracker {
-    #reason;
-    hitMaxResults() {
-        this.#reason = 'maxResults';
-    }
-    hitMaxFiles() {
-        if (this.#reason !== 'maxResults')
-            this.#reason = 'maxFiles';
-    }
-    hitAbort() {
-        this.#reason ??= 'timeout';
-    }
-    get truncated() {
-        return this.#reason !== undefined;
-    }
-    resolve() {
-        return this.#reason;
-    }
-}
 export async function processInParallel(items, processor, concurrency = PARALLEL_CONCURRENCY, signal) {
     const itemCount = items.length;
     if (itemCount === 0)
@@ -99,13 +75,14 @@ export async function processInParallel(items, processor, concurrency = PARALLEL
  *
  * `maxEntries` caps how many entries are dispatched (maxFiles); `shouldStop`
  * lets the caller stop on its own accumulating result count (maxResults). Both
- * are checked before dispatch, so the returned tracker names exactly one
- * reason — the loop breaks on the first that fires.
+ * are checked before dispatch, so the returned reason is exactly one — the
+ * loop breaks on the first that fires. `undefined` means every entry was
+ * dispatched.
  */
 export async function processEntriesConcurrently(entries, options) {
     const pending = new Set();
     const { signal, concurrency, maxEntries, shouldStop, onEntry, onError, runEntry } = options;
-    const tracker = new StopReasonTracker();
+    let stoppedReason;
     let dispatched = 0;
     const waitForSlot = async () => {
         if (pending.size < concurrency)
@@ -116,17 +93,17 @@ export async function processEntriesConcurrently(entries, options) {
         // The signal is cancellation OR the caller's timeout: stop dispatching and
         // let the caller report the run as incomplete rather than as a full sweep.
         if (signal?.aborted) {
-            tracker.hitAbort();
+            stoppedReason = 'timeout';
             break;
         }
         if (maxEntries !== undefined && dispatched >= maxEntries) {
-            tracker.hitMaxFiles();
+            stoppedReason = 'maxFiles';
             break;
         }
         // Check the result cap before waiting for a slot so an in-flight task that
         // already crossed the cap stops dispatch without an extra wait...
         if (shouldStop?.()) {
-            tracker.hitMaxResults();
+            stoppedReason = 'maxResults';
             break;
         }
         await waitForSlot();
@@ -134,7 +111,7 @@ export async function processEntriesConcurrently(entries, options) {
         // cap can still be exceeded by at most `concurrency - 1` already-dispatched
         // tasks that are mid-flight; that overrun is inherent to concurrent dispatch.
         if (shouldStop?.()) {
-            tracker.hitMaxResults();
+            stoppedReason = 'maxResults';
             break;
         }
         onEntry();
@@ -155,7 +132,7 @@ export async function processEntriesConcurrently(entries, options) {
     if (pending.size > 0) {
         await Promise.allSettled([...pending]);
     }
-    return tracker;
+    return stoppedReason;
 }
 export function withAbort(promise, signal) {
     if (!signal) {