@j0hanz/filesystem-mcp 2.7.0 → 2.7.2

package/dist/tools/read.js

@@ -2,7 +2,7 @@ import { createHash } from 'node:crypto';
 import { basename } from 'node:path';
 import * as z from 'zod/v4';
 import { processInParallel } from "../core/concurrency.js";
-import { ErrorCode } from "../core/errors.js";
+import { ErrorCode, FsError } from "../core/errors.js";
 import { buildFileResourceLinkFor, buildFileResourceUri } from "../core/file-uri.js";
 import { detectMimeFromContent, detectMimeType } from "../core/mime.js";
 import { readFileWithStats } from "../core/read.js";
@@ -110,49 +110,27 @@ async function collectFileBudget(filePaths, maxTotalSize, maxSize, ctx) {
         }
     }, PARALLEL_CONCURRENCY, ctx.signal);
     const byIndex = new Map();
-    const known = new Map();
     for (const { value: item } of results) {
-        if (!item)
-            continue;
-        byIndex.set(item.index, item.size);
-        // Keyed by the ORIGINAL requested path string (not validPath) — that's
-        // what readOnePath is called with downstream, and what filePaths[i]
-        // holds.
-        const requestedPath = filePaths[item.index];
-        if (requestedPath !== undefined) {
-            known.set(requestedPath, { validPath: item.validPath, stats: item.stats });
-        }
+        if (item)
+            byIndex.set(item.index, item);
     }
     let total = 0;
-    const skippedResults = new Map();
-    const survivors = [];
-    for (let i = 0; i < filePaths.length; i += 1) {
-        const path = filePaths[i];
-        if (path === undefined)
-            continue;
-        const size = byIndex.get(i);
-        // A failed stat falls through to survivors so its read surfaces the real
-        // error, not a misleading TOO_LARGE.
-        if (size === undefined) {
-            survivors.push(path);
-            continue;
-        }
+    return filePaths.map((path, i) => {
+        const info = byIndex.get(i);
+        // A failed stat is neither known nor skipped, so its read surfaces the
+        // real error, not a misleading TOO_LARGE.
+        if (info === undefined)
+            return { path };
         // Skip this file only; a later, smaller file that still fits is read.
-        if (total + size > maxTotalSize) {
-            skippedResults.set(i, {
+        if (total + info.size > maxTotalSize) {
+            return {
                 path,
-                error: {
-                    code: ErrorCode.TOO_LARGE,
-                    message: `Skipped: this file alone would push the batch past maxTotalSize (${String(maxTotalSize)} bytes). Read it on its own with path instead of paths.`,
-                    path,
-                },
-            });
-            continue;
+                skip: new FsError(ErrorCode.TOO_LARGE, `Skipped: this file alone would push the batch past maxTotalSize (${String(maxTotalSize)} bytes). Read it on its own with path instead of paths.`, path),
+            };
         }
-        total += size;
-        survivors.push(path);
-    }
-    return { skippedResults, survivors, known };
+        total += info.size;
+        return { path, known: { validPath: info.validPath, stats: info.stats } };
+    });
 }
 function buildPerPathReadValue(result, options) {
     const mimeInfo = detectMimeFromContent(result.path, result.content);
@@ -267,44 +245,14 @@ export const READ = defineTool({
     },
     accessPaths: singleOrBatchAccessPaths,
     run: async (args, ctx) => {
-        let pathList;
-        let skippedResults = new Map();
-        let survivors;
-        let known = new Map();
-        if (args.paths !== undefined) {
-            pathList = args.paths;
-            const budget = await collectFileBudget(pathList, READ_MANY_MAX_TOTAL_BYTES, getMaxTextFileSize(), ctx);
-            known = budget.known;
-            skippedResults = budget.skippedResults;
-            survivors = budget.survivors;
-        }
-        else {
-            pathList = [args.path ?? ''];
-            survivors = [...pathList];
-        }
-        // Every path can be budget-skipped (a single file over maxTotalSize does
-        // it), and runOverPaths rejects an empty list. The per-path TOO_LARGE
-        // results are already built — return those rather than failing the call.
-        const batch = survivors.length === 0
-            ? { results: [] }
-            : await runOverPaths(survivors, ctx, ErrorCode.NOT_FILE, (path) => readOnePath(path, args, ctx, known.get(path)));
-        const resultMap = new Map(batch.results.map((r) => [r.path, r]));
-        const ordered = pathList.map((path, idx) => {
-            const skipped = skippedResults.get(idx);
-            if (skipped)
-                return skipped;
-            const result = resultMap.get(path);
-            return (result ?? {
-                path,
-                error: { code: ErrorCode.UNKNOWN, message: 'Unknown read failure' },
-            });
+        const items = args.paths !== undefined
+            ? await collectFileBudget(args.paths, READ_MANY_MAX_TOTAL_BYTES, getMaxTextFileSize(), ctx)
+            : [{ path: args.path ?? '' }];
+        const { results: ordered, summary } = await runOverPaths(items, ctx, ErrorCode.NOT_FILE, ({ path, known, skip }) => {
+            if (skip)
+                throw skip;
+            return readOnePath(path, args, ctx, known);
         });
-        const failed = ordered.filter((r) => 'error' in r).length;
-        const summary = {
-            total: ordered.length,
-            succeeded: ordered.length - failed,
-            failed,
-        };
         const resources = [];
         for (const result of ordered) {
             if ('error' in result)

package/dist/tools/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/tools/read.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAiB,MAAM,iBAAiB,CAAC;AAEvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,+BAA+B,EAC/B,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,GAAG,CAAC,WAAmB,EAAE,EAAE,CACzC,CAAC;KACE,KAAK,EAAE;KACP,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;KAC7B,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;KACxC,QAAQ,EAAE;KACV,QAAQ,CAAC,WAAW,CAAC,CAAC;AAE3B,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,UAAU,CAAC,sBAAsB,CAAC;IACxC,IAAI,EAAE,UAAU,CAAC,qBAAqB,CAAC;IACvC,SAAS,EAAE,UAAU,CAAC,wBAAwB,CAAC;IAC/C,OAAO,EAAE,UAAU,CAAC,sBAAsB,CAAC;CAC5C,CAAC;AAEF,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;IAClD,WAAW,EAAE,mBAAmB,CAAC,8DAA8D,CAAC;IAChG,GAAG,eAAe;CACnB,CAAC;KACC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,iBAAiB,CACf;QACE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,EACD,GAAG,CACJ,CAAC;AACJ,CAAC,CAAC;IACF,4EAA4E;IAC5E,6EAA6E;IAC7E,mEAAmE;IACnE,EAAE;IACF,2DAA2D;IAC3D,+EAA+E;IAC/E,iDAAiD;KAChD,IAAI,CAAC;IACJ,oEAAoE;IACpE,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,SAAS;IACT,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;CAC9C,CAAC,CAAC;AA4BL,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,SAAS,aAAa,CAAC,IAAmB,EAAE,MAAoB;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEhD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC;IAC5E,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC;IAC5E,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,SAAS,IAAI,CAAC;YACrB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,UAAU;SACd,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,SAAS,qBAAqB,CAC5B,MAAsB,EACtB,aAAqB;IAErB,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IACtD,IAAI,SAAiB,CAAC;IACtB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1E,SAAS,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,+BAA+B,CAAC;IAC9C,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC;IAC1C,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;QACrE,IAAI,EAAE,0BAA0B,MAAM,CAAC,SAAS,CAAC,oCAAoC;KACtF,CAAC;AACJ,CAAC;AAoBD,KAAK,UAAU,iBAAiB,CAC9B,SAA4B,EAC5B,YAAoB,EACpB,OAAe,EACf,GAA2C;IAM3C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CACzC,OAAO,EACP,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAsC,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO;gBACL,KAAK;gBACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;gBACvC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,uCAAuC,IAAI,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACzF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,EACD,oBAAoB,EACpB,GAAG,CAAC,MAAM,CACX,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAA+C,CAAC;IACrE,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,uEAAuE;QACvE,oEAAoE;QACpE,SAAS;QACT,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,cAAc,GAAG,IAAI,GAAG,EAA2C,CAAC;IAC1E,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5B,yEAAyE;QACzE,qCAAqC;QACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,sEAAsE;QACtE,IAAI,KAAK,GAAG,IAAI,GAAG,YAAY,EAAE,CAAC;YAChC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE;gBACpB,IAAI;gBACJ,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS,CAAC,SAAS;oBACzB,OAAO,EAAE,oEAAoE,MAAM,CAAC,YAAY,CAAC,yDAAyD;oBAC1J,IAAI;iBACL;aACF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,KAAK,IAAI,IAAI,CAAC;QACd,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAsB,EACtB,OAAyD;IAEzD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,YAAY,GAChB,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;QAC/C,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC;QACtD,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW;QACrC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACpE,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,WAAW,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,CAAmB;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CACR,iBAAiB,CAAC,CAAC,YAAY,CAAC,IAAI,mBAAmB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACvD,6EAA6E;QAC7E,qEAAqE;QACrE,KAAK,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,QAAgB,EAChB,IAAmB,EACnB,GAAY,EACZ,KAA2C;IAE3C,0EAA0E;IAC1E,gEAAgE;IAChE,2EAA2E;IAC3E,8EAA8E;IAC9E,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,WAAW,GACf,IAAI,CAAC,IAAI,KAAK,SAAS;QACvB,IAAI,CAAC,IAAI,KAAK,SAAS;QACvB,IAAI,CAAC,SAAS,KAAK,SAAS;QAC5B,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;IAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACnE,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,WAAW,IAAI,CAAC,IAAI,aAAa,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,IAAI,CAAC,IAAI,iBAAiB;oBACvH,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBAC1C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK;QAClB,CAAC,CAAC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;QACvE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE1C,OAAO,qBAAqB,CAAC,MAAM,EAAE;QACnC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,aAAa,EAAE,QAAQ;KACxB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,UAAU,CAA4D;IACxF,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,WAAW;IAClB,WAAW,EACT,uFAAuF;QACvF,oEAAoE;IACtE,KAAK,EAAE,mBAAmB;IAC1B,YAAY,EAAE,IAAI;IAClB,SAAS,EAAE,yBAAyB;IACpC,gBAAgB,EAAE,SAAS,CAAC,QAAQ;IACpC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9F,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnD,CAAC;QACD,IAAI,KAAyB,CAAC;QAC9B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;YAClC,KAAK,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,KAAK,GAAG,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,KAAK,GAAG,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAChF,CAAC;IACD,WAAW,EAAE,wBAAwB;IACrC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,IAAI,QAAkB,CAAC;QACvB,IAAI,cAAc,GAAG,IAAI,GAAG,EAA2C,CAAC;QACxE,IAAI,SAAmB,CAAC;QACxB,IAAI,KAAK,GAAG,IAAI,GAAG,EAA+C,CAAC;QAEnE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC,QAAQ,EACR,yBAAyB,EACzB,kBAAkB,EAAE,EACpB,GAAG,CACJ,CAAC;YACF,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YACrB,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;YACvC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC7B,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,yEAAyE;QACzE,sEAAsE;QACtE,yEAAyE;QACzE,MAAM,KAAK,GACT,SAAS,CAAC,MAAM,KAAK,CAAC;YACpB,CAAC,CAAC,EAAE,OAAO,EAAE,EAAuC,EAAE;YACtD,CAAC,CAAC,MAAM,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAC9D,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAC9C,CAAC;QAER,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAsC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC5E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,CACL,MAAM,IAAI;gBACR,IAAI;gBACJ,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE;aACpE,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM;YAClC,MAAM;SACP,CAAC;QAEF,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,OAAO,IAAI,MAAM;gBAAE,SAAS;YAChC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;YACvB,oEAAoE;YACpE,0EAA0E;YAC1E,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;gBAC5E,SAAS,CAAC,IAAI,CACZ,CAAC,CAAC,IAAI,KAAK,OAAO;oBAChB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;oBAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAC/D,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,SAAS;YAC3C,2EAA2E;YAC3E,2EAA2E;YAC3E,2EAA2E;YAC3E,4DAA4D;YAC5D,SAAS,CAAC,IAAI,CACZ,wBAAwB,CACtB,CAAC,CAAC,WAAW,EACb,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EACrB,CAAC,CAAC,QAAQ,IAAI,0BAA0B,EACxC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EACpC,CAAC,CAAC,QAAQ,CACX,CACF,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAmB,EAAU,EAAE;YAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,aAAa,CAAC;YAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC;YACzC,2EAA2E;YAC3E,+BAA+B;YAC/B,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,CAAC,CAAC;QACF,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,KAAK,SAAS;YAChD,CAAC,CAAC,OAAO,IAAI,YAAY;gBACvB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO;gBAC5B,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAC5B,CAAC,CAAC,OAAO;iBACJ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,OAAO,IAAI,CAAC;oBAAE,OAAO,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,OAAO,GAAG,MAAM,eAAe,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnD,CAAC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtB,yEAAyE;QACzE,oEAAoE;QACpE,2EAA2E;QAC3E,uEAAuE;QACvE,sEAAsE;QACtE,sCAAsC;QACtC,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/C,IAAI,OAAO,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YACrC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;YAC5E,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE;YACnD,IAAI;YACJ,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;YAChC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import type { ContentBlock } from '@modelcontextprotocol/server';\n\nimport { createHash } from 'node:crypto';\nimport type { Stats } from 'node:fs';\nimport { basename } from 'node:path';\n\nimport * as z from 'zod/v4';\n\nimport { processInParallel } from '../core/concurrency.ts';\nimport { ErrorCode } from '../core/errors.ts';\nimport { buildFileResourceLinkFor, buildFileResourceUri } from '../core/file-uri.ts';\nimport { detectMimeFromContent, detectMimeType, type FileKind } from '../core/mime.ts';\nimport type { ReadFileResult, ReadSpec } from '../core/read.ts';\nimport { readFileWithStats } from '../core/read.ts';\nimport {\n  defaultFalseBoolean,\n  singleOrBatchAccessPaths,\n  singleOrBatchPathsInput,\n  validateReadRange,\n} from '../core/schema.ts';\nimport {\n  DEFAULT_CONTINUATION_CHUNK_SIZE,\n  DEFAULT_SEARCH_TIMEOUT_MS,\n  getMaxTextFileSize,\n  PARALLEL_CONCURRENCY,\n  READ_MANY_MAX_TOTAL_BYTES,\n} from '../core/util.ts';\nimport type { BatchResult, PerPathResult } from './batch.ts';\nimport { isTotalFailure, runOverPaths } from './batch.ts';\nimport type { ToolCtx } from './define.ts';\nimport { defineTool } from './define.ts';\n\nconst rangeField = (description: string) =>\n  z\n    .int32()\n    .min(1, { message: 'Min: 1' })\n    .max(100000, { message: 'Max: 100,000' })\n    .optional()\n    .describe(description);\n\nconst readRangeFields = {\n  head: rangeField('Return first N lines'),\n  tail: rangeField('Return last N lines'),\n  startLine: rangeField('Start line (1-indexed)'),\n  endLine: rangeField('End line (1-indexed)'),\n};\n\nconst ReadFileInputSchema = singleOrBatchPathsInput({\n  includeHash: defaultFalseBoolean('Include SHA-256 hash of the returned content in the response'),\n  ...readRangeFields,\n})\n  .superRefine((value, ctx) => {\n    validateReadRange(\n      {\n        head: value.head,\n        tail: value.tail,\n        startLine: value.startLine,\n        endLine: value.endLine,\n      },\n      ctx,\n    );\n  })\n  // Mirror `validateReadRange` on the wire. Without this the four line params\n  // published as four independent optional integers, so `{ path, head, tail }`\n  // passed the advertised schema and was rejected only at call time.\n  //\n  // `oneOf` is restated because `.meta()` replaces the entry\n  // `singleOrBatchPathsInput` set rather than merging into it — dropping it here\n  // would silently un-publish the path/paths rule.\n  .meta({\n    // The line-param exclusivity that used to sit here as a five-branch\n    // `not/anyOf` is one sentence in the description instead: validateReadRange\n    // rejects every conflicting combination by name at runtime, so the wire copy\n    // was paying for a second statement of a rule the model reads better in\n    // prose.\n    oneOf: [{ required: ['path'] }, { required: ['paths'] }],\n    dependentRequired: { endLine: ['startLine'] },\n  });\n\ninterface ReadContinuation {\n  tool: 'read';\n  args: { path: string; startLine: number; endLine: number };\n  hint: string;\n}\n\n// File bytes ride content blocks, never the structured metadata.\ninterface ReadPerPathValue {\n  mimeType?: string;\n  kind?: FileKind;\n  resourceUri?: string;\n  /** ISO-8601 mtime at read time; also rides the resource_link. */\n  modified?: string;\n  continuation?: ReadContinuation;\n  totalLines?: number;\n  linesRead?: number;\n  hasMoreLines?: boolean;\n  head?: number;\n  tail?: number;\n  startLine?: number;\n  endLine?: number;\n  contentHash?: string;\n}\n\ntype ReadFileInput = z.infer<typeof ReadFileInputSchema>;\n\nconst READ_TOOL_LABEL = 'Read';\n\nfunction buildReadSpec(args: ReadFileInput, signal?: AbortSignal): ReadSpec {\n  const signalPart = signal ? { signal } : {};\n  const { head, tail, startLine, endLine } = args;\n\n  if (head !== undefined) return { kind: 'head', lines: head, ...signalPart };\n  if (tail !== undefined) return { kind: 'tail', lines: tail, ...signalPart };\n  if (startLine !== undefined || endLine !== undefined) {\n    return {\n      kind: 'range',\n      start: startLine ?? 1,\n      ...(endLine !== undefined ? { end: endLine } : {}),\n      ...signalPart,\n    };\n  }\n  return { kind: 'full', ...signalPart };\n}\n\n// No `totalLines`: only `readFull` counts them and a full read never leaves\n// more behind, so a continuation cannot know the total without a second pass.\nfunction buildReadContinuation(\n  result: ReadFileResult,\n  requestedPath: string,\n): ReadContinuation | undefined {\n  if (!result.hasMoreLines) return undefined;\n  const linesRead = result.linesRead ?? 0;\n  const nextStart = (result.startLine ?? 1) + linesRead;\n  let chunkSize: number;\n  if (result.head !== undefined) {\n    chunkSize = result.head;\n  } else if (result.startLine !== undefined && result.endLine !== undefined) {\n    chunkSize = result.endLine - result.startLine + 1;\n  } else {\n    chunkSize = DEFAULT_CONTINUATION_CHUNK_SIZE;\n  }\n  const nextEnd = nextStart + chunkSize - 1;\n  return {\n    tool: 'read',\n    args: { path: requestedPath, startLine: nextStart, endLine: nextEnd },\n    hint: `More lines remain from ${String(nextStart)}. Read next chunk with these args.`,\n  };\n}\n\n/**\n * The published metadata plus the bytes this call read. `content` and\n * `mediaData` exist only between `readOnePath` and the content blocks `run`\n * builds from them — they are stripped before the structured half is returned,\n * which is why they are not in `ReadPerPathValue`.\n */\ntype PerPathReadValue = ReadPerPathValue & {\n  content?: string;\n  mediaData?: string;\n};\n\ninterface BatchFileInfo {\n  index: number;\n  size: number;\n  validPath: string;\n  stats: Stats;\n}\n\nasync function collectFileBudget(\n  filePaths: readonly string[],\n  maxTotalSize: number,\n  maxSize: number,\n  ctx: Pick<ToolCtx, 'fs' | 'signal' | 'log'>,\n): Promise<{\n  skippedResults: Map<number, PerPathResult<PerPathReadValue>>;\n  survivors: string[];\n  known: Map<string, { validPath: string; stats: Stats }>;\n}> {\n  const indexed = filePaths.map((path, index) => ({ path, index }));\n  const { results } = await processInParallel(\n    indexed,\n    async ({ path, index }): Promise<BatchFileInfo | undefined> => {\n      try {\n        const out = await ctx.fs.stat(path);\n        return {\n          index,\n          size: Math.min(out.stats.size, maxSize),\n          validPath: out.validPath,\n          stats: out.stats,\n        };\n      } catch (err: unknown) {\n        ctx.log('debug', `collectFileBudget: stat failed for \"${path}\": ${String(err)}`, 'read');\n        return undefined;\n      }\n    },\n    PARALLEL_CONCURRENCY,\n    ctx.signal,\n  );\n\n  const byIndex = new Map<number, number>();\n  const known = new Map<string, { validPath: string; stats: Stats }>();\n  for (const { value: item } of results) {\n    if (!item) continue;\n    byIndex.set(item.index, item.size);\n    // Keyed by the ORIGINAL requested path string (not validPath) — that's\n    // what readOnePath is called with downstream, and what filePaths[i]\n    // holds.\n    const requestedPath = filePaths[item.index];\n    if (requestedPath !== undefined) {\n      known.set(requestedPath, { validPath: item.validPath, stats: item.stats });\n    }\n  }\n\n  let total = 0;\n  const skippedResults = new Map<number, PerPathResult<PerPathReadValue>>();\n  const survivors: string[] = [];\n  for (let i = 0; i < filePaths.length; i += 1) {\n    const path = filePaths[i];\n    if (path === undefined) continue;\n    const size = byIndex.get(i);\n    // A failed stat falls through to survivors so its read surfaces the real\n    // error, not a misleading TOO_LARGE.\n    if (size === undefined) {\n      survivors.push(path);\n      continue;\n    }\n    // Skip this file only; a later, smaller file that still fits is read.\n    if (total + size > maxTotalSize) {\n      skippedResults.set(i, {\n        path,\n        error: {\n          code: ErrorCode.TOO_LARGE,\n          message: `Skipped: this file alone would push the batch past maxTotalSize (${String(maxTotalSize)} bytes). Read it on its own with path instead of paths.`,\n          path,\n        },\n      });\n      continue;\n    }\n    total += size;\n    survivors.push(path);\n  }\n\n  return { skippedResults, survivors, known };\n}\n\nfunction buildPerPathReadValue(\n  result: ReadFileResult,\n  options: { includeHash?: boolean; requestedPath: string },\n): PerPathReadValue {\n  const mimeInfo = detectMimeFromContent(result.path, result.content);\n  const continuation =\n    result.hasMoreLines && result.readMode !== 'tail'\n      ? buildReadContinuation(result, options.requestedPath)\n      : undefined;\n  const contentHash = options.includeHash\n    ? createHash('sha256').update(result.content, 'utf-8').digest('hex')\n    : undefined;\n\n  return {\n    content: result.content,\n    mimeType: mimeInfo.mimeType,\n    kind: mimeInfo.kind,\n    ...(continuation ? { continuation } : {}),\n    ...(result.totalLines !== undefined ? { totalLines: result.totalLines } : {}),\n    ...(result.linesRead !== undefined ? { linesRead: result.linesRead } : {}),\n    ...(result.hasMoreLines ? { hasMoreLines: true } : {}),\n    ...(result.head !== undefined ? { head: result.head } : {}),\n    ...(result.tail !== undefined ? { tail: result.tail } : {}),\n    ...(result.startLine !== undefined ? { startLine: result.startLine } : {}),\n    ...(result.endLine !== undefined ? { endLine: result.endLine } : {}),\n    ...(contentHash !== undefined ? { contentHash } : {}),\n    resourceUri: buildFileResourceUri(result.path),\n    modified: result.modified,\n  };\n}\n\n/**\n * The two facts the model cannot act on without: that lines were dropped, and\n * the exact args to get the next chunk. Both used to live only in the structured\n * half, which no longer reaches the model. Each line is `//` prefixed and set\n * off by a blank line so it cannot be read as file bytes — do not drop either\n * guard.\n */\nfunction readTrailer(v: PerPathReadValue): string[] {\n  const lines: string[] = [];\n  if (v.continuation) {\n    lines.push(\n      `// truncated: ${v.continuation.hint} Continue: read ${JSON.stringify(v.continuation.args)}`,\n    );\n  } else if (v.hasMoreLines && v.linesRead !== undefined) {\n    // A tail read gets no continuation — there are no args that read *backwards*\n    // — so say what was shown rather than leaving the truncation silent.\n    lines.push(`// truncated: showing last ${String(v.linesRead)} lines`);\n  }\n  if (v.contentHash !== undefined) lines.push(`// sha256: ${v.contentHash}`);\n  return lines;\n}\n\nasync function readOnePath(\n  filePath: string,\n  args: ReadFileInput,\n  ctx: ToolCtx,\n  known?: { validPath: string; stats: Stats },\n): Promise<PerPathReadValue> {\n  // Image/audio full read: return a media content block instead of throwing\n  // INVALID_INPUT (\"Binary file detected.\"). Line-range reads are\n  // text-oriented and stay rejected. `readRaw` enforces the same size cap as\n  // the text path (getMaxTextFileSize), so a too-large image surfaces TOO_LARGE\n  // rather than blowing memory. svg carries kind:'image' but is XML text —\n  // readRaw.isBinary is false for it, so it falls through to the text path.\n  const isRangeRead =\n    args.head !== undefined ||\n    args.tail !== undefined ||\n    args.startLine !== undefined ||\n    args.endLine !== undefined;\n  if (!isRangeRead) {\n    const mime = detectMimeType(filePath);\n    if (mime.kind === 'image' || mime.kind === 'audio') {\n      const raw = await ctx.fs.readRaw(filePath, { signal: ctx.signal });\n      if (raw.isBinary) {\n        return {\n          content: `[binary ${mime.kind} content: ${String(raw.content.length)} bytes; returned as a ${mime.kind} content block]`,\n          mimeType: raw.mimeType,\n          kind: mime.kind,\n          mediaData: raw.content.toString('base64'),\n        };\n      }\n    }\n  }\n\n  const spec = buildReadSpec(args, ctx.signal);\n  const result = known\n    ? await readFileWithStats(filePath, known.validPath, known.stats, spec)\n    : await ctx.fs.readFile(filePath, spec);\n\n  return buildPerPathReadValue(result, {\n    includeHash: args.includeHash,\n    // The continuation is args the caller pastes back, so it echoes the path\n    // they wrote. `result.path` is the resolved absolute one — on Windows that\n    // is a backslash-doubling JSON string that also spells out the server root.\n    requestedPath: filePath,\n  });\n}\n\nexport const READ = defineTool<typeof ReadFileInputSchema, BatchResult<ReadPerPathValue>>({\n  name: 'read',\n  title: 'Read File',\n  description:\n    'Read text files, like cat: whole, or one slice via head, tail, or startLine/endLine. ' +\n    'Images and audio return as media; other binary files are rejected.',\n  input: ReadFileInputSchema,\n  readOnlyHint: true,\n  timeoutMs: DEFAULT_SEARCH_TIMEOUT_MS,\n  defaultErrorCode: ErrorCode.NOT_FILE,\n  progress: (args) => {\n    const isBatch = args.paths !== undefined;\n    const name = isBatch ? `${String(args.paths?.length ?? 0)} files` : basename(args.path ?? '');\n    if (isBatch) {\n      return { label: READ_TOOL_LABEL, subject: name };\n    }\n    let scope: string | undefined;\n    if (args.startLine !== undefined) {\n      const end = args.endLine ?? '...';\n      scope = `${args.startLine}-${String(end)}`;\n    } else if (args.head !== undefined) {\n      scope = `head ${args.head}`;\n    } else if (args.tail !== undefined) {\n      scope = `tail ${args.tail}`;\n    }\n    return { label: READ_TOOL_LABEL, subject: name, ...(scope ? { scope } : {}) };\n  },\n  accessPaths: singleOrBatchAccessPaths,\n  run: async (args, ctx) => {\n    let pathList: string[];\n    let skippedResults = new Map<number, PerPathResult<PerPathReadValue>>();\n    let survivors: string[];\n    let known = new Map<string, { validPath: string; stats: Stats }>();\n\n    if (args.paths !== undefined) {\n      pathList = args.paths;\n      const budget = await collectFileBudget(\n        pathList,\n        READ_MANY_MAX_TOTAL_BYTES,\n        getMaxTextFileSize(),\n        ctx,\n      );\n      known = budget.known;\n      skippedResults = budget.skippedResults;\n      survivors = budget.survivors;\n    } else {\n      pathList = [args.path ?? ''];\n      survivors = [...pathList];\n    }\n\n    // Every path can be budget-skipped (a single file over maxTotalSize does\n    // it), and runOverPaths rejects an empty list. The per-path TOO_LARGE\n    // results are already built — return those rather than failing the call.\n    const batch =\n      survivors.length === 0\n        ? { results: [] as PerPathResult<PerPathReadValue>[] }\n        : await runOverPaths(survivors, ctx, ErrorCode.NOT_FILE, (path) =>\n            readOnePath(path, args, ctx, known.get(path)),\n          );\n\n    const resultMap = new Map(batch.results.map((r) => [r.path, r]));\n    const ordered: PerPathResult<PerPathReadValue>[] = pathList.map((path, idx) => {\n      const skipped = skippedResults.get(idx);\n      if (skipped) return skipped;\n      const result = resultMap.get(path);\n      return (\n        result ?? {\n          path,\n          error: { code: ErrorCode.UNKNOWN, message: 'Unknown read failure' },\n        }\n      );\n    });\n\n    const failed = ordered.filter((r) => 'error' in r).length;\n    const summary = {\n      total: ordered.length,\n      succeeded: ordered.length - failed,\n      failed,\n    };\n\n    const resources: ContentBlock[] = [];\n    for (const result of ordered) {\n      if ('error' in result) continue;\n      const v = result.value;\n      // Image/audio full read: emit the media content block alongside the\n      // structured value. The base64 lives in v.mediaData (set in readOnePath).\n      if (v.mediaData && v.mimeType && (v.kind === 'image' || v.kind === 'audio')) {\n        resources.push(\n          v.kind === 'image'\n            ? { type: 'image', data: v.mediaData, mimeType: v.mimeType }\n            : { type: 'audio', data: v.mediaData, mimeType: v.mimeType },\n        );\n        continue;\n      }\n      if (!v.resourceUri || !v.content) continue;\n      // `result.path` is the path as *requested*; `v.resourceUri` was built from\n      // the *validated* one. Rebuilding from the request would emit a second URI\n      // for the same file whenever the two differ in case — subscribe by one and\n      // unsubscribe by the other and the watcher never goes away.\n      resources.push(\n        buildFileResourceLinkFor(\n          v.resourceUri,\n          basename(result.path),\n          v.mimeType ?? 'application/octet-stream',\n          Buffer.byteLength(v.content, 'utf8'),\n          v.modified,\n        ),\n      );\n    }\n\n    const [firstOrdered] = ordered;\n    const body = (v: PerPathReadValue): string => {\n      const content = v.content ?? 'read failed';\n      const trailer = readTrailer(v);\n      if (trailer.length === 0) return content;\n      // Exactly one blank line between the bytes and the trailer, whether or not\n      // the file ended in a newline.\n      return `${content}${content.endsWith('\\n') ? '\\n' : '\\n\\n'}${trailer.join('\\n')}`;\n    };\n    const text =\n      ordered.length === 1 && firstOrdered !== undefined\n        ? 'error' in firstOrdered\n          ? firstOrdered.error.message\n          : body(firstOrdered.value)\n        : ordered\n            .map((r) => {\n              const header = `// ${r.path}`;\n              if ('value' in r) return `${header}\\n${body(r.value)}`;\n              return `${header}\\n// Error: ${r.error.message}`;\n            })\n            .join('\\n\\n');\n\n    // The bytes ship once. `text` above already carries every file's content\n    // verbatim (and image/audio bytes ride the media content block), so\n    // repeating them under `results[].value` doubled both the wire payload and\n    // the model's token cost for every read. The structured half keeps the\n    // metadata a client cannot recover from the text: paths, line counts,\n    // hashes, continuations, resourceUri.\n    const structuredResults = ordered.map((result) => {\n      if ('error' in result) return result;\n      const { content: _content, mediaData: _mediaData, ...value } = result.value;\n      return { ...result, value };\n    });\n\n    return {\n      structured: { results: structuredResults, summary },\n      text,\n      isError: isTotalFailure(summary),\n      ...(resources.length > 0 ? { resources } : {}),\n    };\n  },\n});\n"]}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/tools/read.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAiB,MAAM,iBAAiB,CAAC;AAEvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,+BAA+B,EAC/B,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,GAAG,CAAC,WAAmB,EAAE,EAAE,CACzC,CAAC;KACE,KAAK,EAAE;KACP,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;KAC7B,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;KACxC,QAAQ,EAAE;KACV,QAAQ,CAAC,WAAW,CAAC,CAAC;AAE3B,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,UAAU,CAAC,sBAAsB,CAAC;IACxC,IAAI,EAAE,UAAU,CAAC,qBAAqB,CAAC;IACvC,SAAS,EAAE,UAAU,CAAC,wBAAwB,CAAC;IAC/C,OAAO,EAAE,UAAU,CAAC,sBAAsB,CAAC;CAC5C,CAAC;AAEF,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;IAClD,WAAW,EAAE,mBAAmB,CAAC,8DAA8D,CAAC;IAChG,GAAG,eAAe;CACnB,CAAC;KACC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,iBAAiB,CACf;QACE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,EACD,GAAG,CACJ,CAAC;AACJ,CAAC,CAAC;IACF,4EAA4E;IAC5E,6EAA6E;IAC7E,mEAAmE;IACnE,EAAE;IACF,2DAA2D;IAC3D,+EAA+E;IAC/E,iDAAiD;KAChD,IAAI,CAAC;IACJ,oEAAoE;IACpE,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,SAAS;IACT,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;CAC9C,CAAC,CAAC;AA4BL,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,SAAS,aAAa,CAAC,IAAmB,EAAE,MAAoB;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEhD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC;IAC5E,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC;IAC5E,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,SAAS,IAAI,CAAC;YACrB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,UAAU;SACd,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,SAAS,qBAAqB,CAC5B,MAAsB,EACtB,aAAqB;IAErB,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IACtD,IAAI,SAAiB,CAAC;IACtB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1E,SAAS,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,+BAA+B,CAAC;IAC9C,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC;IAC1C,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;QACrE,IAAI,EAAE,0BAA0B,MAAM,CAAC,SAAS,CAAC,oCAAoC;KACtF,CAAC;AACJ,CAAC;AA0BD,KAAK,UAAU,iBAAiB,CAC9B,SAA4B,EAC5B,YAAoB,EACpB,OAAe,EACf,GAA2C;IAE3C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CACzC,OAAO,EACP,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAsC,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO;gBACL,KAAK;gBACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;gBACvC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,uCAAuC,IAAI,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACzF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,EACD,oBAAoB,EACpB,GAAG,CAAC,MAAM,CACX,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;QACtC,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAc,EAAE;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5B,uEAAuE;QACvE,0CAA0C;QAC1C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACxC,sEAAsE;QACtE,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;YACrC,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,IAAI,OAAO,CACf,SAAS,CAAC,SAAS,EACnB,oEAAoE,MAAM,CAAC,YAAY,CAAC,yDAAyD,EACjJ,IAAI,CACL;aACF,CAAC;QACJ,CAAC;QACD,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAsB,EACtB,OAAyD;IAEzD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,YAAY,GAChB,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;QAC/C,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC;QACtD,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW;QACrC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACpE,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,WAAW,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,CAAmB;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CACR,iBAAiB,CAAC,CAAC,YAAY,CAAC,IAAI,mBAAmB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACvD,6EAA6E;QAC7E,qEAAqE;QACrE,KAAK,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,QAAgB,EAChB,IAAmB,EACnB,GAAY,EACZ,KAA2C;IAE3C,0EAA0E;IAC1E,gEAAgE;IAChE,2EAA2E;IAC3E,8EAA8E;IAC9E,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,WAAW,GACf,IAAI,CAAC,IAAI,KAAK,SAAS;QACvB,IAAI,CAAC,IAAI,KAAK,SAAS;QACvB,IAAI,CAAC,SAAS,KAAK,SAAS;QAC5B,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;IAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACnE,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,WAAW,IAAI,CAAC,IAAI,aAAa,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,IAAI,CAAC,IAAI,iBAAiB;oBACvH,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBAC1C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK;QAClB,CAAC,CAAC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;QACvE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE1C,OAAO,qBAAqB,CAAC,MAAM,EAAE;QACnC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,aAAa,EAAE,QAAQ;KACxB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,UAAU,CAA4D;IACxF,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,WAAW;IAClB,WAAW,EACT,uFAAuF;QACvF,oEAAoE;IACtE,KAAK,EAAE,mBAAmB;IAC1B,YAAY,EAAE,IAAI;IAClB,SAAS,EAAE,yBAAyB;IACpC,gBAAgB,EAAE,SAAS,CAAC,QAAQ;IACpC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9F,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnD,CAAC;QACD,IAAI,KAAyB,CAAC;QAC9B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;YAClC,KAAK,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,KAAK,GAAG,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,KAAK,GAAG,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAChF,CAAC;IACD,WAAW,EAAE,wBAAwB;IACrC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,KAAK,SAAS;YACtB,CAAC,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC;YAC3F,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CACtD,KAAK,EACL,GAAG,EACH,SAAS,CAAC,QAAQ,EAClB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;YACxB,IAAI,IAAI;gBAAE,MAAM,IAAI,CAAC;YACrB,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC,CACF,CAAC;QAEF,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,OAAO,IAAI,MAAM;gBAAE,SAAS;YAChC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;YACvB,oEAAoE;YACpE,0EAA0E;YAC1E,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;gBAC5E,SAAS,CAAC,IAAI,CACZ,CAAC,CAAC,IAAI,KAAK,OAAO;oBAChB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;oBAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAC/D,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,SAAS;YAC3C,2EAA2E;YAC3E,2EAA2E;YAC3E,2EAA2E;YAC3E,4DAA4D;YAC5D,SAAS,CAAC,IAAI,CACZ,wBAAwB,CACtB,CAAC,CAAC,WAAW,EACb,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EACrB,CAAC,CAAC,QAAQ,IAAI,0BAA0B,EACxC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EACpC,CAAC,CAAC,QAAQ,CACX,CACF,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAmB,EAAU,EAAE;YAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,aAAa,CAAC;YAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC;YACzC,2EAA2E;YAC3E,+BAA+B;YAC/B,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,CAAC,CAAC;QACF,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,KAAK,SAAS;YAChD,CAAC,CAAC,OAAO,IAAI,YAAY;gBACvB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO;gBAC5B,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAC5B,CAAC,CAAC,OAAO;iBACJ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,OAAO,IAAI,CAAC;oBAAE,OAAO,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,OAAO,GAAG,MAAM,eAAe,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnD,CAAC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtB,yEAAyE;QACzE,oEAAoE;QACpE,2EAA2E;QAC3E,uEAAuE;QACvE,sEAAsE;QACtE,sCAAsC;QACtC,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/C,IAAI,OAAO,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YACrC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;YAC5E,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE;YACnD,IAAI;YACJ,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;YAChC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import type { ContentBlock } from '@modelcontextprotocol/server';\n\nimport { createHash } from 'node:crypto';\nimport type { Stats } from 'node:fs';\nimport { basename } from 'node:path';\n\nimport * as z from 'zod/v4';\n\nimport { processInParallel } from '../core/concurrency.ts';\nimport { ErrorCode, FsError } from '../core/errors.ts';\nimport { buildFileResourceLinkFor, buildFileResourceUri } from '../core/file-uri.ts';\nimport { detectMimeFromContent, detectMimeType, type FileKind } from '../core/mime.ts';\nimport type { ReadFileResult, ReadSpec } from '../core/read.ts';\nimport { readFileWithStats } from '../core/read.ts';\nimport {\n  defaultFalseBoolean,\n  singleOrBatchAccessPaths,\n  singleOrBatchPathsInput,\n  validateReadRange,\n} from '../core/schema.ts';\nimport {\n  DEFAULT_CONTINUATION_CHUNK_SIZE,\n  DEFAULT_SEARCH_TIMEOUT_MS,\n  getMaxTextFileSize,\n  PARALLEL_CONCURRENCY,\n  READ_MANY_MAX_TOTAL_BYTES,\n} from '../core/util.ts';\nimport type { BatchResult } from './batch.ts';\nimport { isTotalFailure, runOverPaths } from './batch.ts';\nimport type { ToolCtx } from './define.ts';\nimport { defineTool } from './define.ts';\n\nconst rangeField = (description: string) =>\n  z\n    .int32()\n    .min(1, { message: 'Min: 1' })\n    .max(100000, { message: 'Max: 100,000' })\n    .optional()\n    .describe(description);\n\nconst readRangeFields = {\n  head: rangeField('Return first N lines'),\n  tail: rangeField('Return last N lines'),\n  startLine: rangeField('Start line (1-indexed)'),\n  endLine: rangeField('End line (1-indexed)'),\n};\n\nconst ReadFileInputSchema = singleOrBatchPathsInput({\n  includeHash: defaultFalseBoolean('Include SHA-256 hash of the returned content in the response'),\n  ...readRangeFields,\n})\n  .superRefine((value, ctx) => {\n    validateReadRange(\n      {\n        head: value.head,\n        tail: value.tail,\n        startLine: value.startLine,\n        endLine: value.endLine,\n      },\n      ctx,\n    );\n  })\n  // Mirror `validateReadRange` on the wire. Without this the four line params\n  // published as four independent optional integers, so `{ path, head, tail }`\n  // passed the advertised schema and was rejected only at call time.\n  //\n  // `oneOf` is restated because `.meta()` replaces the entry\n  // `singleOrBatchPathsInput` set rather than merging into it — dropping it here\n  // would silently un-publish the path/paths rule.\n  .meta({\n    // The line-param exclusivity that used to sit here as a five-branch\n    // `not/anyOf` is one sentence in the description instead: validateReadRange\n    // rejects every conflicting combination by name at runtime, so the wire copy\n    // was paying for a second statement of a rule the model reads better in\n    // prose.\n    oneOf: [{ required: ['path'] }, { required: ['paths'] }],\n    dependentRequired: { endLine: ['startLine'] },\n  });\n\ninterface ReadContinuation {\n  tool: 'read';\n  args: { path: string; startLine: number; endLine: number };\n  hint: string;\n}\n\n// File bytes ride content blocks, never the structured metadata.\ninterface ReadPerPathValue {\n  mimeType?: string;\n  kind?: FileKind;\n  resourceUri?: string;\n  /** ISO-8601 mtime at read time; also rides the resource_link. */\n  modified?: string;\n  continuation?: ReadContinuation;\n  totalLines?: number;\n  linesRead?: number;\n  hasMoreLines?: boolean;\n  head?: number;\n  tail?: number;\n  startLine?: number;\n  endLine?: number;\n  contentHash?: string;\n}\n\ntype ReadFileInput = z.infer<typeof ReadFileInputSchema>;\n\nconst READ_TOOL_LABEL = 'Read';\n\nfunction buildReadSpec(args: ReadFileInput, signal?: AbortSignal): ReadSpec {\n  const signalPart = signal ? { signal } : {};\n  const { head, tail, startLine, endLine } = args;\n\n  if (head !== undefined) return { kind: 'head', lines: head, ...signalPart };\n  if (tail !== undefined) return { kind: 'tail', lines: tail, ...signalPart };\n  if (startLine !== undefined || endLine !== undefined) {\n    return {\n      kind: 'range',\n      start: startLine ?? 1,\n      ...(endLine !== undefined ? { end: endLine } : {}),\n      ...signalPart,\n    };\n  }\n  return { kind: 'full', ...signalPart };\n}\n\n// No `totalLines`: only `readFull` counts them and a full read never leaves\n// more behind, so a continuation cannot know the total without a second pass.\nfunction buildReadContinuation(\n  result: ReadFileResult,\n  requestedPath: string,\n): ReadContinuation | undefined {\n  if (!result.hasMoreLines) return undefined;\n  const linesRead = result.linesRead ?? 0;\n  const nextStart = (result.startLine ?? 1) + linesRead;\n  let chunkSize: number;\n  if (result.head !== undefined) {\n    chunkSize = result.head;\n  } else if (result.startLine !== undefined && result.endLine !== undefined) {\n    chunkSize = result.endLine - result.startLine + 1;\n  } else {\n    chunkSize = DEFAULT_CONTINUATION_CHUNK_SIZE;\n  }\n  const nextEnd = nextStart + chunkSize - 1;\n  return {\n    tool: 'read',\n    args: { path: requestedPath, startLine: nextStart, endLine: nextEnd },\n    hint: `More lines remain from ${String(nextStart)}. Read next chunk with these args.`,\n  };\n}\n\n/**\n * The published metadata plus the bytes this call read. `content` and\n * `mediaData` exist only between `readOnePath` and the content blocks `run`\n * builds from them — they are stripped before the structured half is returned,\n * which is why they are not in `ReadPerPathValue`.\n */\ntype PerPathReadValue = ReadPerPathValue & {\n  content?: string;\n  mediaData?: string;\n};\n\ninterface BatchFileInfo {\n  index: number;\n  size: number;\n  validPath: string;\n  stats: Stats;\n}\n\ninterface BudgetItem {\n  path: string;\n  known?: { validPath: string; stats: Stats };\n  skip?: FsError;\n}\n\nasync function collectFileBudget(\n  filePaths: readonly string[],\n  maxTotalSize: number,\n  maxSize: number,\n  ctx: Pick<ToolCtx, 'fs' | 'signal' | 'log'>,\n): Promise<BudgetItem[]> {\n  const indexed = filePaths.map((path, index) => ({ path, index }));\n  const { results } = await processInParallel(\n    indexed,\n    async ({ path, index }): Promise<BatchFileInfo | undefined> => {\n      try {\n        const out = await ctx.fs.stat(path);\n        return {\n          index,\n          size: Math.min(out.stats.size, maxSize),\n          validPath: out.validPath,\n          stats: out.stats,\n        };\n      } catch (err: unknown) {\n        ctx.log('debug', `collectFileBudget: stat failed for \"${path}\": ${String(err)}`, 'read');\n        return undefined;\n      }\n    },\n    PARALLEL_CONCURRENCY,\n    ctx.signal,\n  );\n\n  const byIndex = new Map<number, BatchFileInfo>();\n  for (const { value: item } of results) {\n    if (item) byIndex.set(item.index, item);\n  }\n\n  let total = 0;\n  return filePaths.map((path, i): BudgetItem => {\n    const info = byIndex.get(i);\n    // A failed stat is neither known nor skipped, so its read surfaces the\n    // real error, not a misleading TOO_LARGE.\n    if (info === undefined) return { path };\n    // Skip this file only; a later, smaller file that still fits is read.\n    if (total + info.size > maxTotalSize) {\n      return {\n        path,\n        skip: new FsError(\n          ErrorCode.TOO_LARGE,\n          `Skipped: this file alone would push the batch past maxTotalSize (${String(maxTotalSize)} bytes). Read it on its own with path instead of paths.`,\n          path,\n        ),\n      };\n    }\n    total += info.size;\n    return { path, known: { validPath: info.validPath, stats: info.stats } };\n  });\n}\n\nfunction buildPerPathReadValue(\n  result: ReadFileResult,\n  options: { includeHash?: boolean; requestedPath: string },\n): PerPathReadValue {\n  const mimeInfo = detectMimeFromContent(result.path, result.content);\n  const continuation =\n    result.hasMoreLines && result.readMode !== 'tail'\n      ? buildReadContinuation(result, options.requestedPath)\n      : undefined;\n  const contentHash = options.includeHash\n    ? createHash('sha256').update(result.content, 'utf-8').digest('hex')\n    : undefined;\n\n  return {\n    content: result.content,\n    mimeType: mimeInfo.mimeType,\n    kind: mimeInfo.kind,\n    ...(continuation ? { continuation } : {}),\n    ...(result.totalLines !== undefined ? { totalLines: result.totalLines } : {}),\n    ...(result.linesRead !== undefined ? { linesRead: result.linesRead } : {}),\n    ...(result.hasMoreLines ? { hasMoreLines: true } : {}),\n    ...(result.head !== undefined ? { head: result.head } : {}),\n    ...(result.tail !== undefined ? { tail: result.tail } : {}),\n    ...(result.startLine !== undefined ? { startLine: result.startLine } : {}),\n    ...(result.endLine !== undefined ? { endLine: result.endLine } : {}),\n    ...(contentHash !== undefined ? { contentHash } : {}),\n    resourceUri: buildFileResourceUri(result.path),\n    modified: result.modified,\n  };\n}\n\n/**\n * The two facts the model cannot act on without: that lines were dropped, and\n * the exact args to get the next chunk. Both used to live only in the structured\n * half, which no longer reaches the model. Each line is `//` prefixed and set\n * off by a blank line so it cannot be read as file bytes — do not drop either\n * guard.\n */\nfunction readTrailer(v: PerPathReadValue): string[] {\n  const lines: string[] = [];\n  if (v.continuation) {\n    lines.push(\n      `// truncated: ${v.continuation.hint} Continue: read ${JSON.stringify(v.continuation.args)}`,\n    );\n  } else if (v.hasMoreLines && v.linesRead !== undefined) {\n    // A tail read gets no continuation — there are no args that read *backwards*\n    // — so say what was shown rather than leaving the truncation silent.\n    lines.push(`// truncated: showing last ${String(v.linesRead)} lines`);\n  }\n  if (v.contentHash !== undefined) lines.push(`// sha256: ${v.contentHash}`);\n  return lines;\n}\n\nasync function readOnePath(\n  filePath: string,\n  args: ReadFileInput,\n  ctx: ToolCtx,\n  known?: { validPath: string; stats: Stats },\n): Promise<PerPathReadValue> {\n  // Image/audio full read: return a media content block instead of throwing\n  // INVALID_INPUT (\"Binary file detected.\"). Line-range reads are\n  // text-oriented and stay rejected. `readRaw` enforces the same size cap as\n  // the text path (getMaxTextFileSize), so a too-large image surfaces TOO_LARGE\n  // rather than blowing memory. svg carries kind:'image' but is XML text —\n  // readRaw.isBinary is false for it, so it falls through to the text path.\n  const isRangeRead =\n    args.head !== undefined ||\n    args.tail !== undefined ||\n    args.startLine !== undefined ||\n    args.endLine !== undefined;\n  if (!isRangeRead) {\n    const mime = detectMimeType(filePath);\n    if (mime.kind === 'image' || mime.kind === 'audio') {\n      const raw = await ctx.fs.readRaw(filePath, { signal: ctx.signal });\n      if (raw.isBinary) {\n        return {\n          content: `[binary ${mime.kind} content: ${String(raw.content.length)} bytes; returned as a ${mime.kind} content block]`,\n          mimeType: raw.mimeType,\n          kind: mime.kind,\n          mediaData: raw.content.toString('base64'),\n        };\n      }\n    }\n  }\n\n  const spec = buildReadSpec(args, ctx.signal);\n  const result = known\n    ? await readFileWithStats(filePath, known.validPath, known.stats, spec)\n    : await ctx.fs.readFile(filePath, spec);\n\n  return buildPerPathReadValue(result, {\n    includeHash: args.includeHash,\n    // The continuation is args the caller pastes back, so it echoes the path\n    // they wrote. `result.path` is the resolved absolute one — on Windows that\n    // is a backslash-doubling JSON string that also spells out the server root.\n    requestedPath: filePath,\n  });\n}\n\nexport const READ = defineTool<typeof ReadFileInputSchema, BatchResult<ReadPerPathValue>>({\n  name: 'read',\n  title: 'Read File',\n  description:\n    'Read text files, like cat: whole, or one slice via head, tail, or startLine/endLine. ' +\n    'Images and audio return as media; other binary files are rejected.',\n  input: ReadFileInputSchema,\n  readOnlyHint: true,\n  timeoutMs: DEFAULT_SEARCH_TIMEOUT_MS,\n  defaultErrorCode: ErrorCode.NOT_FILE,\n  progress: (args) => {\n    const isBatch = args.paths !== undefined;\n    const name = isBatch ? `${String(args.paths?.length ?? 0)} files` : basename(args.path ?? '');\n    if (isBatch) {\n      return { label: READ_TOOL_LABEL, subject: name };\n    }\n    let scope: string | undefined;\n    if (args.startLine !== undefined) {\n      const end = args.endLine ?? '...';\n      scope = `${args.startLine}-${String(end)}`;\n    } else if (args.head !== undefined) {\n      scope = `head ${args.head}`;\n    } else if (args.tail !== undefined) {\n      scope = `tail ${args.tail}`;\n    }\n    return { label: READ_TOOL_LABEL, subject: name, ...(scope ? { scope } : {}) };\n  },\n  accessPaths: singleOrBatchAccessPaths,\n  run: async (args, ctx) => {\n    const items: BudgetItem[] =\n      args.paths !== undefined\n        ? await collectFileBudget(args.paths, READ_MANY_MAX_TOTAL_BYTES, getMaxTextFileSize(), ctx)\n        : [{ path: args.path ?? '' }];\n    const { results: ordered, summary } = await runOverPaths(\n      items,\n      ctx,\n      ErrorCode.NOT_FILE,\n      ({ path, known, skip }) => {\n        if (skip) throw skip;\n        return readOnePath(path, args, ctx, known);\n      },\n    );\n\n    const resources: ContentBlock[] = [];\n    for (const result of ordered) {\n      if ('error' in result) continue;\n      const v = result.value;\n      // Image/audio full read: emit the media content block alongside the\n      // structured value. The base64 lives in v.mediaData (set in readOnePath).\n      if (v.mediaData && v.mimeType && (v.kind === 'image' || v.kind === 'audio')) {\n        resources.push(\n          v.kind === 'image'\n            ? { type: 'image', data: v.mediaData, mimeType: v.mimeType }\n            : { type: 'audio', data: v.mediaData, mimeType: v.mimeType },\n        );\n        continue;\n      }\n      if (!v.resourceUri || !v.content) continue;\n      // `result.path` is the path as *requested*; `v.resourceUri` was built from\n      // the *validated* one. Rebuilding from the request would emit a second URI\n      // for the same file whenever the two differ in case — subscribe by one and\n      // unsubscribe by the other and the watcher never goes away.\n      resources.push(\n        buildFileResourceLinkFor(\n          v.resourceUri,\n          basename(result.path),\n          v.mimeType ?? 'application/octet-stream',\n          Buffer.byteLength(v.content, 'utf8'),\n          v.modified,\n        ),\n      );\n    }\n\n    const [firstOrdered] = ordered;\n    const body = (v: PerPathReadValue): string => {\n      const content = v.content ?? 'read failed';\n      const trailer = readTrailer(v);\n      if (trailer.length === 0) return content;\n      // Exactly one blank line between the bytes and the trailer, whether or not\n      // the file ended in a newline.\n      return `${content}${content.endsWith('\\n') ? '\\n' : '\\n\\n'}${trailer.join('\\n')}`;\n    };\n    const text =\n      ordered.length === 1 && firstOrdered !== undefined\n        ? 'error' in firstOrdered\n          ? firstOrdered.error.message\n          : body(firstOrdered.value)\n        : ordered\n            .map((r) => {\n              const header = `// ${r.path}`;\n              if ('value' in r) return `${header}\\n${body(r.value)}`;\n              return `${header}\\n// Error: ${r.error.message}`;\n            })\n            .join('\\n\\n');\n\n    // The bytes ship once. `text` above already carries every file's content\n    // verbatim (and image/audio bytes ride the media content block), so\n    // repeating them under `results[].value` doubled both the wire payload and\n    // the model's token cost for every read. The structured half keeps the\n    // metadata a client cannot recover from the text: paths, line counts,\n    // hashes, continuations, resourceUri.\n    const structuredResults = ordered.map((result) => {\n      if ('error' in result) return result;\n      const { content: _content, mediaData: _mediaData, ...value } = result.value;\n      return { ...result, value };\n    });\n\n    return {\n      structured: { results: structuredResults, summary },\n      text,\n      isError: isTotalFailure(summary),\n      ...(resources.length > 0 ? { resources } : {}),\n    };\n  },\n});\n"]}

package/dist/transport/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAUxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAuBrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAqOjD,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,MAAM,CAAC,CAiIjB"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAUxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAmBrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAmNjD,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,MAAM,CAAC,CA4HjB"}

package/dist/transport/http.js

@@ -11,7 +11,7 @@ import { parseTrueEnvFlag } from "../core/path-utils.js";
 import { PathGuard } from "../core/path.js";
 import { PageSnapshotStore, ResourceStore } from "../core/store.js";
 import { getMaxInboundMessageBytes, parseEnvInt } from "../core/util.js";
-import { createWatcherRegistry, MAX_WATCHERS, } from "../core/watcher-registry.js";
+import { createWatcherRegistry } from "../core/watcher-registry.js";
 import { createServer } from "../server.js";
 import { assertHttpBindingPolicy, assertHttpHostPolicy, bearerAuthMiddleware, computeAllowedOriginHostnames, corsMiddleware, createRateLimiter, isLoopbackHttpHost, JSONRPC_SERVER_ERROR, protectedResourceUrl, resolveAllowedHosts, resolveTrustProxySetting, sendJsonRpcError, } from "./http-policy.js";
 import { jsonRpcRequestId, listenSubscriptionUris, prepareListenWatchers } from "./shared.js";
@@ -126,18 +126,7 @@ function setupExpressApp(httpHost, apiKey, allowedHosts, modernNodeHandler, shar
                 await modernNodeHandler(req, res, parsedBody);
                 return;
             }
-            // Reject an over-cap listen before the ack so the client does not believe
-            // every requested URI is watched when the watcher budget is exhausted.
-            // The per-URI `capped` failure below would also reject, but only after
-            // creating and tearing down every watcher up to the cap.
-            // Only URIs without a live watcher consume a slot; a re-listen to an
-            // already-watched URI just retains another lease.
-            const newUris = requestedUris.filter((uri) => !sharedRegistry.hasWatcher(uri));
-            const available = MAX_WATCHERS - sharedRegistry.size();
-            if (newUris.length > available) {
-                sendJsonRpcError(res, 400, ProtocolErrorCode.InvalidParams, `subscriptions/listen names ${newUris.length} not-yet-watched URIs but only ${available} watcher slots remain (cap ${MAX_WATCHERS}). Reduce the resourceSubscriptions list.`, jsonRpcRequestId(parsedBody));
-                return;
-            }
+            // Over-cap listens are rejected inside prepareListenWatchers, before the ack.
             const prepared = await prepareListenWatchers(requestedUris, sharedPathGuard, sharedRegistry, resourceUpdateSink);
             if (!prepared.ok) {
                 sendJsonRpcError(res, 400, ProtocolErrorCode.InvalidParams, prepared.message, jsonRpcRequestId(parsedBody));
@@ -221,11 +210,6 @@ export async function startHttpServer(port, options, config = {}) {
             era,
             ...(apiKey !== undefined ? { apiKey } : {}),
         });
-        const previousOnClose = c.mcp.server.onclose;
-        c.mcp.server.onclose = () => {
-            previousOnClose?.();
-            c.disposeRuntimeState();
-        };
         return c.mcp;
     }, {
         // The SDK's default: a 2025-era request is answered by a fresh instance

package/dist/transport/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,6EAA6E;AAC7E,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,OAAO,MAAM,SAAS,CAAC;AAG9B,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,YAAY,GAEb,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,6BAA6B,EAC7B,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAE9F,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC,kFAAkF;AAClF,SAAS,sBAAsB,CAC7B,GAAgC,EAChC,IAAa,EACb,GAAa,EACb,IAAkB;IAElB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,iBAAiB,CAAC,cAAc,EAChC,wCAAwC,MAAM,CAAC,yBAAyB,EAAE,CAAC,4EAA4E,CACxJ,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,eAAe,CACtB,QAAgB,EAChB,MAA0B,EAC1B,YAAsB,EACtB,iBAAuF,EACvF,eAA0B,EAC1B,cAA+B,EAC/B,QAAwB;IAExB,MAAM,sBAAsB,GAAG,6BAA6B,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAChG,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAE/C,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,uDAAuD;IACvD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;IACzE,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACpD,CAAC;SAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,yEAAyE;QACzE,mDAAmD;QACnD,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CACT,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAExD,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,GAAG,GAAG,WAAW,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/E,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IAExC,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,eAAe,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;YAC5D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,sEAAsE;gBACtE,2DAA2D;gBAC3D,uEAAuE;gBACvE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,wBAAwB,EAAE,CAAC,QAAQ,CAAC;gBACpC,aAAa,EAAE,gBAAgB;aAChC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,GAAG,CAAC,GAAG,CACL,CAAC,uCAAuC,EAAE,2CAA2C,CAAC,EACtF,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAElF,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAQ,EAAE;QAC/C,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,yEAAyE;IACzE,uEAAuE;IACvE,4EAA4E;IAC5E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,yBAAyB,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAErF,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC9E,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;gBACpD,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,oBAAoB,EACpB,+DAA+D,CAChE,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAe,CAAC;YACvC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,sFAAsF;gBACtF,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;gBACzF,OAAO;YACT,CAAC;YACD,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,aAAa,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,0EAA0E;YAC1E,uEAAuE;YACvE,uEAAuE;YACvE,yDAAyD;YACzD,qEAAqE;YACrE,kDAAkD;YAClD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/E,MAAM,SAAS,GAAG,YAAY,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC/B,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,iBAAiB,CAAC,aAAa,EAC/B,8BAA8B,OAAO,CAAC,MAAM,kCAAkC,SAAS,8BAA8B,YAAY,2CAA2C,EAC5K,gBAAgB,CAAC,UAAU,CAAC,CAC7B,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,aAAa,EACb,eAAe,EACf,cAAc,EACd,kBAAkB,CACnB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,iBAAiB,CAAC,aAAa,EAC/B,QAAQ,CAAC,OAAO,EAChB,gBAAgB,CAAC,UAAU,CAAC,CAC7B,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY;oBAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvE,CAAC,CAAC;YACF,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,uEAAuE;gBACvE,uEAAuE;gBACvE,sEAAsE;gBACtE,0BAA0B;gBAC1B,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa;oBAAE,OAAO,EAAE,CAAC;;oBAC3D,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,wEAAwE;IACxE,8EAA8E;IAC9E,mEAAmE;IACnE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC/C,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,IAAI,EAAE;YAC5E,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAEhC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,OAAsB,EACtB,SAAwB,EAAE;IAE1B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;IAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,uBAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpF,oBAAoB,CAClB,QAAQ,EACR,YAAY,EACZ,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,6BAA6B,CAAC,CAC5F,CAAC;IAEF,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;IAC/C,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,kBAAkB;IAClB,4EAA4E;IAC5E,uDAAuD;IACvD,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC,GAAG,EAAE;QACzC,aAAa,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAChD,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,iFAAiF;IACjF,6EAA6E;IAC7E,8EAA8E;IAC9E,6CAA6C;IAC7C,MAAM,eAAe,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,eAAe,CAAC,2BAA2B,EAAE,CAAC;IAEpD,MAAM,kBAAkB,GAAG,yBAAyB,EAAE,CAAC;IAEvD,MAAM,aAAa,GAAmB,gBAAgB,CACpD,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAChB,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;YACpC,eAAe,EAAE,cAAc;YAC/B,QAAQ,EAAE,aAAa,CAAC,MAAM;YAC9B,SAAS,EAAE,eAAe;YAC1B,aAAa,EAAE,WAAW;YAC1B,SAAS,EAAE,eAAe;YAC1B,GAAG;YACH,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;YAC1B,eAAe,EAAE,EAAE,CAAC;YACpB,CAAC,CAAC,mBAAmB,EAAE,CAAC;QAC1B,CAAC,CAAC;QACF,OAAO,CAAC,CAAC,GAAG,CAAC;IACf,CAAC,EACD;QACE,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,EAAE,WAAW;QACnB,kBAAkB;QAClB,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACxB,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,CAAC;KACF,CACF,CAAC;IACF,MAAM,iBAAiB,GAAG,aAAa,CAAC,aAAa,EAAE;QACrD,kBAAkB;QAClB,mEAAmE;QACnE,qEAAqE;QACrE,uEAAuE;QACvE,yBAAyB;QACzB,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACxB,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/E,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,eAAe,CACzB,QAAQ,EACR,MAAM,EACN,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,aAAa,CAAC,MAAM,CACrB,CAAC;IAEF,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,UAAU,CAAC,gBAAgB,GAAG,oBAAoB,CAAC;IACnD,UAAU,CAAC,cAAc,GAAG,oBAAoB,GAAG,KAAK,CAAC;IACzD,UAAU,CAAC,cAAc,GAAG,4BAA4B,CAAC;IAEzD,MAAM,iBAAiB,GAAG,CAAC,KAAY,EAAQ,EAAE;QAC/C,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC1C,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,KAAK,EAAE,yBAAyB,CAAC,KAAK,CAAC;SACxC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,GAAkB,EAAE;QACnC,cAAc,CAAC,OAAO,EAAE,CAAC;QACzB,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAClD,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxD,UAAU,CAAC,KAAK,GAAG,UAAU,QAAkC;QAC7D,KAAK,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;YACxB,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;YAC7B,KAAK,QAAQ,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QACF,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAElC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;YACrC,UAAU,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,qCAAqC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;YACrE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// HTTP hosting: express app assembly, security middleware wiring, the modern\n// per-request server factory, and listen-filter watcher gating on POST /mcp.\nimport {\n  hostHeaderValidation,\n  localhostOriginValidation,\n  originValidation,\n} from '@modelcontextprotocol/express';\nimport { toNodeHandler } from '@modelcontextprotocol/node';\nimport type { McpHttpHandler, ServerNotifier } from '@modelcontextprotocol/server';\nimport {\n  createMcpHandler,\n  DEFAULT_REQUEST_TIMEOUT_MSEC,\n  isJsonContentType,\n  ProtocolErrorCode,\n} from '@modelcontextprotocol/server';\n\nimport type { Server } from 'node:http';\nimport { createServer as createHttpServer } from 'node:http';\n\nimport express from 'express';\nimport type { Express, NextFunction, Request, Response } from 'express';\n\nimport { formatUnknownErrorMessage } from '../core/errors.ts';\nimport { Logger } from '../core/observability.ts';\nimport { parseTrueEnvFlag } from '../core/path-utils.ts';\nimport { PathGuard } from '../core/path.ts';\nimport type { ServerOptions } from '../core/path.ts';\nimport { PageSnapshotStore, ResourceStore } from '../core/store.ts';\nimport { getMaxInboundMessageBytes, parseEnvInt } from '../core/util.ts';\nimport {\n  createWatcherRegistry,\n  MAX_WATCHERS,\n  type WatcherRegistry,\n} from '../core/watcher-registry.ts';\nimport { createServer } from '../server.ts';\nimport {\n  assertHttpBindingPolicy,\n  assertHttpHostPolicy,\n  bearerAuthMiddleware,\n  computeAllowedOriginHostnames,\n  corsMiddleware,\n  createRateLimiter,\n  isLoopbackHttpHost,\n  JSONRPC_SERVER_ERROR,\n  protectedResourceUrl,\n  resolveAllowedHosts,\n  resolveTrustProxySetting,\n  sendJsonRpcError,\n} from './http-policy.ts';\nimport type { RuntimeConfig } from './shared.ts';\nimport { jsonRpcRequestId, listenSubscriptionUris, prepareListenWatchers } from './shared.ts';\n\n// Must exceed the idle timeout of any proxy in front of this server, or the\n// proxy reuses connections the server already closed (intermittent 502s).\nconst KEEPALIVE_TIMEOUT_MS = 5_000;\n\n/** Body-parser rejections and anything else that reaches the end of the chain. */\nfunction errorHandlerMiddleware(\n  err: Error & { status?: number },\n  _req: Request,\n  res: Response,\n  next: NextFunction,\n): void {\n  if (res.headersSent) {\n    next(err);\n    return;\n  }\n  if (err.status === 413) {\n    sendJsonRpcError(\n      res,\n      413,\n      ProtocolErrorCode.InvalidRequest,\n      `Request body too large: the limit is ${String(getMaxInboundMessageBytes())} bytes (3 × FS_MAX_FILE_SIZE + 1 MiB). Split the write into smaller calls.`,\n    );\n    return;\n  }\n  if (err.status === 400) {\n    sendJsonRpcError(res, 400, ProtocolErrorCode.ParseError, 'Invalid JSON in request body');\n    return;\n  }\n  Logger.error('[HTTP] Unhandled middleware error:', formatUnknownErrorMessage(err));\n  sendJsonRpcError(res, 500, ProtocolErrorCode.InternalError, 'Internal Server Error');\n}\n\nfunction setupExpressApp(\n  httpHost: string,\n  apiKey: string | undefined,\n  allowedHosts: string[],\n  modernNodeHandler: (req: Request, res: Response, parsedBody?: unknown) => Promise<void>,\n  sharedPathGuard: PathGuard,\n  sharedRegistry: WatcherRegistry,\n  notifier: ServerNotifier,\n): Express {\n  const allowedOriginHostnames = computeAllowedOriginHostnames(process.env['FS_ALLOWED_ORIGINS']);\n  // Read once here and passed down, like every other env-derived policy input:\n  // http-policy holds no state and reads no env of its own.\n  const publicUrl = process.env['FS_PUBLIC_URL'];\n\n  // Assembled from the SDK's own gates rather than `createMcpExpressApp`,\n  // which mounts `express.json()` for the whole app: that would parse every\n  // body before the rate limiter and bearer auth below can refuse it. Host\n  // and Origin validation still run first and app-wide, mounted by the same\n  // rules `createMcpExpressApp` applies to these inputs.\n  const app = express();\n  if (allowedHosts.length > 0) app.use(hostHeaderValidation(allowedHosts));\n  if (allowedOriginHostnames.length > 0) {\n    app.use(originValidation(allowedOriginHostnames));\n  } else if (isLoopbackHttpHost(httpHost)) {\n    // An all-blank FS_ALLOWED_ORIGINS on a loopback bind keeps the localhost\n    // default (see isOriginAllowed in http-policy.ts).\n    app.use(localhostOriginValidation());\n  }\n\n  const trustProxy = resolveTrustProxySetting(process.env['FS_TRUST_PROXY']);\n  if (trustProxy !== undefined) {\n    app.set('trust proxy', trustProxy);\n  }\n\n  if (allowedHosts.length === 0) {\n    Logger.warn(\n      '[HTTP] FS_ALLOW_UNRESTRICTED_HOSTS is set: binding globally without Host validation.',\n    );\n  }\n\n  app.use('/mcp', corsMiddleware(allowedOriginHostnames));\n\n  // Unconditional: the spec's rate-limit MUST is not scoped to authenticated\n  // binds. A keyless bind is loopback-only, so the cap is looser, not absent.\n  const rpm = parseEnvInt('FS_RATE_LIMIT_RPM', apiKey ? 120 : 6_000, 1, 100_000);\n  app.use('/mcp', createRateLimiter(rpm));\n\n  if (apiKey && allowedHosts.length > 0) {\n    const metadataHandler = (req: Request, res: Response): void => {\n      const resource = protectedResourceUrl(req, true, publicUrl);\n      if (!resource) {\n        // Unreachable for the unrestricted case (the gate above excludes it),\n        // but defend a FS_PUBLIC_URL parse failure with a bodyless\n        // 404 — a generic OAuth client cannot parse a JSON-RPC error envelope.\n        res.status(404).end();\n        return;\n      }\n      res.header('Access-Control-Allow-Origin', '*');\n      res.status(200).json({\n        resource: resource.href,\n        bearer_methods_supported: ['header'],\n        resource_name: 'filesystem-mcp',\n      });\n    };\n    app.get(\n      ['/.well-known/oauth-protected-resource', '/.well-known/oauth-protected-resource/mcp'],\n      metadataHandler,\n    );\n  }\n\n  app.get('/healthz', (_req: Request, res: Response) => {\n    res.status(200).json({\n      status: 'ok',\n      uptime: process.uptime(),\n    });\n  });\n\n  app.use('/mcp', bearerAuthMiddleware(apiKey, allowedHosts.length > 0, publicUrl));\n\n  const resourceUpdateSink = (uri: string): void => {\n    notifier.resourceUpdated(uri);\n  };\n\n  // One bound for both transports, derived from the write tools' own limit\n  // (getMaxInboundMessageBytes): a create the schema accepts must not be\n  // refused here. Mounted after CORS, the rate limiter and auth, so a refused\n  // request is answered without its body being read. The SDK's handler and\n  // adapter get the same number below so their internal defaults (4 MiB)\n  // cannot disagree with this parser, although both only read a body when no\n  // parsedBody is supplied — which this route never does.\n  const parseJson = express.json({ limit: `${String(getMaxInboundMessageBytes())}b` });\n\n  app.post('/mcp', parseJson, (req: Request, res: Response, next: NextFunction) => {\n    void (async () => {\n      if (!isJsonContentType(req.headers['content-type'])) {\n        sendJsonRpcError(\n          res,\n          415,\n          JSONRPC_SERVER_ERROR,\n          'Unsupported Media Type: Content-Type must be application/json',\n        );\n        return;\n      }\n      const parsedBody = req.body as unknown;\n      if (parsedBody === undefined) {\n        // Undefined tells the Node adapter to read the raw stream without our parser's limit.\n        sendJsonRpcError(res, 400, ProtocolErrorCode.ParseError, 'Invalid JSON in request body');\n        return;\n      }\n      // Only a structurally valid listen gets watchers, mirroring the stdio\n      // gate. A malformed one cannot succeed downstream, so attaching handles\n      // for it only gives the response-close release something to undo — and\n      // everything that is not a listen takes no watchers either way.\n      const requestedUris = listenSubscriptionUris(parsedBody);\n      if (requestedUris === undefined) {\n        await modernNodeHandler(req, res, parsedBody);\n        return;\n      }\n\n      // Reject an over-cap listen before the ack so the client does not believe\n      // every requested URI is watched when the watcher budget is exhausted.\n      // The per-URI `capped` failure below would also reject, but only after\n      // creating and tearing down every watcher up to the cap.\n      // Only URIs without a live watcher consume a slot; a re-listen to an\n      // already-watched URI just retains another lease.\n      const newUris = requestedUris.filter((uri) => !sharedRegistry.hasWatcher(uri));\n      const available = MAX_WATCHERS - sharedRegistry.size();\n      if (newUris.length > available) {\n        sendJsonRpcError(\n          res,\n          400,\n          ProtocolErrorCode.InvalidParams,\n          `subscriptions/listen names ${newUris.length} not-yet-watched URIs but only ${available} watcher slots remain (cap ${MAX_WATCHERS}). Reduce the resourceSubscriptions list.`,\n          jsonRpcRequestId(parsedBody),\n        );\n        return;\n      }\n\n      const prepared = await prepareListenWatchers(\n        requestedUris,\n        sharedPathGuard,\n        sharedRegistry,\n        resourceUpdateSink,\n      );\n      if (!prepared.ok) {\n        sendJsonRpcError(\n          res,\n          400,\n          ProtocolErrorCode.InvalidParams,\n          prepared.message,\n          jsonRpcRequestId(parsedBody),\n        );\n        return;\n      }\n\n      let released = false;\n      const release = (): void => {\n        if (released) return;\n        released = true;\n        for (const uri of prepared.acquiredUris) sharedRegistry.release(uri);\n      };\n      if (prepared.acquiredUris.length > 0) {\n        // The attach loop awaits per-URI path validation, so the client can be\n        // gone by the time it returns. `close` fires once: a listener attached\n        // after it would never run and every lease this batch took would leak\n        // until process shutdown.\n        if (res.closed || res.destroyed || res.writableEnded) release();\n        else res.once('close', release);\n      }\n\n      try {\n        await modernNodeHandler(req, res, parsedBody);\n      } catch (error) {\n        release();\n        throw error;\n      }\n    })().catch(next);\n  });\n\n  // Answer non-POST here rather than handing it to `modernNodeHandler`. The\n  // SDK's own 405 is byte-identical to this one, but it omits the `Allow`\n  // header RFC 9110 §15.5.6 requires and routes every routine GET probe through\n  // the handler's `onerror` — which this server logs at error level.\n  app.all('/mcp', (_req: Request, res: Response) => {\n    sendJsonRpcError(res, 405, JSONRPC_SERVER_ERROR, 'Method not allowed.', null, {\n      Allow: 'POST, OPTIONS',\n    });\n  });\n\n  app.use(errorHandlerMiddleware);\n\n  return app;\n}\n\nexport async function startHttpServer(\n  port: number,\n  options: ServerOptions,\n  config: RuntimeConfig = {},\n): Promise<Server> {\n  const httpHost = config.httpHost ?? '127.0.0.1';\n  const { apiKey } = config;\n  assertHttpBindingPolicy(httpHost, apiKey);\n  const allowedHosts = resolveAllowedHosts(httpHost, process.env['FS_ALLOWED_HOSTS']);\n  assertHttpHostPolicy(\n    httpHost,\n    allowedHosts,\n    parseTrueEnvFlag(process.env['FS_ALLOW_UNRESTRICTED_HOSTS'], 'FS_ALLOW_UNRESTRICTED_HOSTS'),\n  );\n\n  const sharedRegistry = createWatcherRegistry();\n  // One store for the whole endpoint, same lifetime and same one-credential\n  // trust argument as the shared guard below: a result a tool externalized in\n  // one POST must survive to the follow-up resources/read, and the modern leg\n  // builds a fresh McpServer per request so a per-request store would discard\n  // it immediately.\n  // Fires only from a tool call, which is long after `modernHandler` below is\n  // constructed, so reading it from the closure is safe.\n  const sharedStore = new ResourceStore(() => {\n    modernHandler.notify.resourcesChanged();\n  });\n  const sharedPageStore = new PageSnapshotStore();\n  // One guard for the whole endpoint. The modern leg builds a fresh McpServer\n  // per request, so a per-instance guard would discard every accepted access\n  // grant the moment the request ended — re-prompting on each subsequent call\n  // and leaving the listen-watcher path validating against a stale allowed set.\n  // Grant scope is therefore the endpoint, not the connection: with FS_API_KEY set\n  // every caller presents the same key (one auth context by construction), and\n  // without it the bind is loopback-only. Split into per-auth-context guards if\n  // this ever serves more than one credential.\n  const sharedPathGuard = new PathGuard(options);\n  await sharedPathGuard.recomputeAllowedDirectories();\n\n  const maxRequestBodySize = getMaxInboundMessageBytes();\n\n  const modernHandler: McpHttpHandler = createMcpHandler(\n    async ({ era }) => {\n      const c = await createServer(options, {\n        watcherRegistry: sharedRegistry,\n        notifier: modernHandler.notify,\n        pathGuard: sharedPathGuard,\n        resourceStore: sharedStore,\n        pageStore: sharedPageStore,\n        era,\n        ...(apiKey !== undefined ? { apiKey } : {}),\n      });\n      const previousOnClose = c.mcp.server.onclose;\n      c.mcp.server.onclose = () => {\n        previousOnClose?.();\n        c.disposeRuntimeState();\n      };\n      return c.mcp;\n    },\n    {\n      // The SDK's default: a 2025-era request is answered by a fresh instance\n      // from the same factory, no session. What that leg cannot do — answer an\n      // input_required confirmation, deliver a subscription — is refused with a\n      // named workaround (define.ts, resources.ts). See docs/adr/003.\n      legacy: 'stateless',\n      maxRequestBodySize,\n      onerror: (error: Error) => {\n        Logger.error('[HTTP] modern leg error:', formatUnknownErrorMessage(error));\n      },\n    },\n  );\n  const modernNodeHandler = toNodeHandler(modernHandler, {\n    maxRequestBodySize,\n    // The adapter answers 500 when request conversion or handler.fetch\n    // itself throws (e.g. a request racing handler.close()); the entry's\n    // own onerror above never sees those. Log the adapter-level refusal so\n    // the 500 is not silent.\n    onerror: (error: Error) => {\n      Logger.error('[HTTP] node adapter error:', formatUnknownErrorMessage(error));\n    },\n  });\n\n  const app = setupExpressApp(\n    httpHost,\n    apiKey,\n    allowedHosts,\n    modernNodeHandler,\n    sharedPathGuard,\n    sharedRegistry,\n    modernHandler.notify,\n  );\n\n  const httpServer = createHttpServer(app);\n  httpServer.keepAliveTimeout = KEEPALIVE_TIMEOUT_MS;\n  httpServer.headersTimeout = KEEPALIVE_TIMEOUT_MS + 5_000;\n  httpServer.requestTimeout = DEFAULT_REQUEST_TIMEOUT_MSEC;\n\n  const onHttpServerError = (error: Error): void => {\n    Logger.error('[HTTP] runtime server error', {\n      host: httpHost,\n      port,\n      error: formatUnknownErrorMessage(error),\n    });\n  };\n  httpServer.on('error', onHttpServerError);\n\n  const teardown = (): Promise<void> => {\n    sharedRegistry.destroy();\n    sharedPageStore.clear();\n    return modernHandler.close().catch((err: unknown) => {\n      Logger.error('[HTTP] Error closing handler:', formatUnknownErrorMessage(err));\n    });\n  };\n  const originalClose = httpServer.close.bind(httpServer);\n  httpServer.close = function (callback?: (error?: Error) => void) {\n    void teardown().then(() => {\n      originalClose(callback);\n    });\n    return httpServer;\n  };\n\n  return new Promise((resolve, reject) => {\n    const onError = (err: Error) => {\n      void teardown();\n      reject(err);\n    };\n    httpServer.once('error', onError);\n\n    httpServer.listen(port, httpHost, () => {\n      httpServer.removeListener('error', onError);\n      Logger.info(`[HTTP] Server listening on http://${httpHost}:${port}`);\n      resolve(httpServer);\n    });\n  });\n}\n"]}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,6EAA6E;AAC7E,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,OAAO,MAAM,SAAS,CAAC;AAG9B,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAwB,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,6BAA6B,EAC7B,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAE9F,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC,kFAAkF;AAClF,SAAS,sBAAsB,CAC7B,GAAgC,EAChC,IAAa,EACb,GAAa,EACb,IAAkB;IAElB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,iBAAiB,CAAC,cAAc,EAChC,wCAAwC,MAAM,CAAC,yBAAyB,EAAE,CAAC,4EAA4E,CACxJ,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,eAAe,CACtB,QAAgB,EAChB,MAA0B,EAC1B,YAAsB,EACtB,iBAAuF,EACvF,eAA0B,EAC1B,cAA+B,EAC/B,QAAwB;IAExB,MAAM,sBAAsB,GAAG,6BAA6B,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAChG,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAE/C,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,uDAAuD;IACvD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;IACzE,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACpD,CAAC;SAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,yEAAyE;QACzE,mDAAmD;QACnD,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CACT,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAExD,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,GAAG,GAAG,WAAW,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/E,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IAExC,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,eAAe,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;YAC5D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,sEAAsE;gBACtE,2DAA2D;gBAC3D,uEAAuE;gBACvE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,wBAAwB,EAAE,CAAC,QAAQ,CAAC;gBACpC,aAAa,EAAE,gBAAgB;aAChC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,GAAG,CAAC,GAAG,CACL,CAAC,uCAAuC,EAAE,2CAA2C,CAAC,EACtF,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAElF,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAQ,EAAE;QAC/C,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,yEAAyE;IACzE,uEAAuE;IACvE,4EAA4E;IAC5E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,yBAAyB,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAErF,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC9E,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;gBACpD,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,oBAAoB,EACpB,+DAA+D,CAChE,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAe,CAAC;YACvC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,sFAAsF;gBACtF,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;gBACzF,OAAO;YACT,CAAC;YACD,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,aAAa,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,8EAA8E;YAC9E,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,aAAa,EACb,eAAe,EACf,cAAc,EACd,kBAAkB,CACnB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,iBAAiB,CAAC,aAAa,EAC/B,QAAQ,CAAC,OAAO,EAChB,gBAAgB,CAAC,UAAU,CAAC,CAC7B,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY;oBAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvE,CAAC,CAAC;YACF,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,uEAAuE;gBACvE,uEAAuE;gBACvE,sEAAsE;gBACtE,0BAA0B;gBAC1B,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa;oBAAE,OAAO,EAAE,CAAC;;oBAC3D,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,wEAAwE;IACxE,8EAA8E;IAC9E,mEAAmE;IACnE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC/C,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,IAAI,EAAE;YAC5E,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAEhC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,OAAsB,EACtB,SAAwB,EAAE;IAE1B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;IAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,uBAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpF,oBAAoB,CAClB,QAAQ,EACR,YAAY,EACZ,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,6BAA6B,CAAC,CAC5F,CAAC;IAEF,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;IAC/C,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,kBAAkB;IAClB,4EAA4E;IAC5E,uDAAuD;IACvD,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC,GAAG,EAAE;QACzC,aAAa,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAChD,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,iFAAiF;IACjF,6EAA6E;IAC7E,8EAA8E;IAC9E,6CAA6C;IAC7C,MAAM,eAAe,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,eAAe,CAAC,2BAA2B,EAAE,CAAC;IAEpD,MAAM,kBAAkB,GAAG,yBAAyB,EAAE,CAAC;IAEvD,MAAM,aAAa,GAAmB,gBAAgB,CACpD,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAChB,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;YACpC,eAAe,EAAE,cAAc;YAC/B,QAAQ,EAAE,aAAa,CAAC,MAAM;YAC9B,SAAS,EAAE,eAAe;YAC1B,aAAa,EAAE,WAAW;YAC1B,SAAS,EAAE,eAAe;YAC1B,GAAG;YACH,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,GAAG,CAAC;IACf,CAAC,EACD;QACE,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,EAAE,WAAW;QACnB,kBAAkB;QAClB,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACxB,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,CAAC;KACF,CACF,CAAC;IACF,MAAM,iBAAiB,GAAG,aAAa,CAAC,aAAa,EAAE;QACrD,kBAAkB;QAClB,mEAAmE;QACnE,qEAAqE;QACrE,uEAAuE;QACvE,yBAAyB;QACzB,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACxB,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/E,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,eAAe,CACzB,QAAQ,EACR,MAAM,EACN,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,aAAa,CAAC,MAAM,CACrB,CAAC;IAEF,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,UAAU,CAAC,gBAAgB,GAAG,oBAAoB,CAAC;IACnD,UAAU,CAAC,cAAc,GAAG,oBAAoB,GAAG,KAAK,CAAC;IACzD,UAAU,CAAC,cAAc,GAAG,4BAA4B,CAAC;IAEzD,MAAM,iBAAiB,GAAG,CAAC,KAAY,EAAQ,EAAE;QAC/C,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC1C,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,KAAK,EAAE,yBAAyB,CAAC,KAAK,CAAC;SACxC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,GAAkB,EAAE;QACnC,cAAc,CAAC,OAAO,EAAE,CAAC;QACzB,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAClD,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxD,UAAU,CAAC,KAAK,GAAG,UAAU,QAAkC;QAC7D,KAAK,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;YACxB,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;YAC7B,KAAK,QAAQ,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QACF,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAElC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;YACrC,UAAU,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,qCAAqC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;YACrE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// HTTP hosting: express app assembly, security middleware wiring, the modern\n// per-request server factory, and listen-filter watcher gating on POST /mcp.\nimport {\n  hostHeaderValidation,\n  localhostOriginValidation,\n  originValidation,\n} from '@modelcontextprotocol/express';\nimport { toNodeHandler } from '@modelcontextprotocol/node';\nimport type { McpHttpHandler, ServerNotifier } from '@modelcontextprotocol/server';\nimport {\n  createMcpHandler,\n  DEFAULT_REQUEST_TIMEOUT_MSEC,\n  isJsonContentType,\n  ProtocolErrorCode,\n} from '@modelcontextprotocol/server';\n\nimport type { Server } from 'node:http';\nimport { createServer as createHttpServer } from 'node:http';\n\nimport express from 'express';\nimport type { Express, NextFunction, Request, Response } from 'express';\n\nimport { formatUnknownErrorMessage } from '../core/errors.ts';\nimport { Logger } from '../core/observability.ts';\nimport { parseTrueEnvFlag } from '../core/path-utils.ts';\nimport { PathGuard } from '../core/path.ts';\nimport type { ServerOptions } from '../core/path.ts';\nimport { PageSnapshotStore, ResourceStore } from '../core/store.ts';\nimport { getMaxInboundMessageBytes, parseEnvInt } from '../core/util.ts';\nimport { createWatcherRegistry, type WatcherRegistry } from '../core/watcher-registry.ts';\nimport { createServer } from '../server.ts';\nimport {\n  assertHttpBindingPolicy,\n  assertHttpHostPolicy,\n  bearerAuthMiddleware,\n  computeAllowedOriginHostnames,\n  corsMiddleware,\n  createRateLimiter,\n  isLoopbackHttpHost,\n  JSONRPC_SERVER_ERROR,\n  protectedResourceUrl,\n  resolveAllowedHosts,\n  resolveTrustProxySetting,\n  sendJsonRpcError,\n} from './http-policy.ts';\nimport type { RuntimeConfig } from './shared.ts';\nimport { jsonRpcRequestId, listenSubscriptionUris, prepareListenWatchers } from './shared.ts';\n\n// Must exceed the idle timeout of any proxy in front of this server, or the\n// proxy reuses connections the server already closed (intermittent 502s).\nconst KEEPALIVE_TIMEOUT_MS = 5_000;\n\n/** Body-parser rejections and anything else that reaches the end of the chain. */\nfunction errorHandlerMiddleware(\n  err: Error & { status?: number },\n  _req: Request,\n  res: Response,\n  next: NextFunction,\n): void {\n  if (res.headersSent) {\n    next(err);\n    return;\n  }\n  if (err.status === 413) {\n    sendJsonRpcError(\n      res,\n      413,\n      ProtocolErrorCode.InvalidRequest,\n      `Request body too large: the limit is ${String(getMaxInboundMessageBytes())} bytes (3 × FS_MAX_FILE_SIZE + 1 MiB). Split the write into smaller calls.`,\n    );\n    return;\n  }\n  if (err.status === 400) {\n    sendJsonRpcError(res, 400, ProtocolErrorCode.ParseError, 'Invalid JSON in request body');\n    return;\n  }\n  Logger.error('[HTTP] Unhandled middleware error:', formatUnknownErrorMessage(err));\n  sendJsonRpcError(res, 500, ProtocolErrorCode.InternalError, 'Internal Server Error');\n}\n\nfunction setupExpressApp(\n  httpHost: string,\n  apiKey: string | undefined,\n  allowedHosts: string[],\n  modernNodeHandler: (req: Request, res: Response, parsedBody?: unknown) => Promise<void>,\n  sharedPathGuard: PathGuard,\n  sharedRegistry: WatcherRegistry,\n  notifier: ServerNotifier,\n): Express {\n  const allowedOriginHostnames = computeAllowedOriginHostnames(process.env['FS_ALLOWED_ORIGINS']);\n  // Read once here and passed down, like every other env-derived policy input:\n  // http-policy holds no state and reads no env of its own.\n  const publicUrl = process.env['FS_PUBLIC_URL'];\n\n  // Assembled from the SDK's own gates rather than `createMcpExpressApp`,\n  // which mounts `express.json()` for the whole app: that would parse every\n  // body before the rate limiter and bearer auth below can refuse it. Host\n  // and Origin validation still run first and app-wide, mounted by the same\n  // rules `createMcpExpressApp` applies to these inputs.\n  const app = express();\n  if (allowedHosts.length > 0) app.use(hostHeaderValidation(allowedHosts));\n  if (allowedOriginHostnames.length > 0) {\n    app.use(originValidation(allowedOriginHostnames));\n  } else if (isLoopbackHttpHost(httpHost)) {\n    // An all-blank FS_ALLOWED_ORIGINS on a loopback bind keeps the localhost\n    // default (see isOriginAllowed in http-policy.ts).\n    app.use(localhostOriginValidation());\n  }\n\n  const trustProxy = resolveTrustProxySetting(process.env['FS_TRUST_PROXY']);\n  if (trustProxy !== undefined) {\n    app.set('trust proxy', trustProxy);\n  }\n\n  if (allowedHosts.length === 0) {\n    Logger.warn(\n      '[HTTP] FS_ALLOW_UNRESTRICTED_HOSTS is set: binding globally without Host validation.',\n    );\n  }\n\n  app.use('/mcp', corsMiddleware(allowedOriginHostnames));\n\n  // Unconditional: the spec's rate-limit MUST is not scoped to authenticated\n  // binds. A keyless bind is loopback-only, so the cap is looser, not absent.\n  const rpm = parseEnvInt('FS_RATE_LIMIT_RPM', apiKey ? 120 : 6_000, 1, 100_000);\n  app.use('/mcp', createRateLimiter(rpm));\n\n  if (apiKey && allowedHosts.length > 0) {\n    const metadataHandler = (req: Request, res: Response): void => {\n      const resource = protectedResourceUrl(req, true, publicUrl);\n      if (!resource) {\n        // Unreachable for the unrestricted case (the gate above excludes it),\n        // but defend a FS_PUBLIC_URL parse failure with a bodyless\n        // 404 — a generic OAuth client cannot parse a JSON-RPC error envelope.\n        res.status(404).end();\n        return;\n      }\n      res.header('Access-Control-Allow-Origin', '*');\n      res.status(200).json({\n        resource: resource.href,\n        bearer_methods_supported: ['header'],\n        resource_name: 'filesystem-mcp',\n      });\n    };\n    app.get(\n      ['/.well-known/oauth-protected-resource', '/.well-known/oauth-protected-resource/mcp'],\n      metadataHandler,\n    );\n  }\n\n  app.get('/healthz', (_req: Request, res: Response) => {\n    res.status(200).json({\n      status: 'ok',\n      uptime: process.uptime(),\n    });\n  });\n\n  app.use('/mcp', bearerAuthMiddleware(apiKey, allowedHosts.length > 0, publicUrl));\n\n  const resourceUpdateSink = (uri: string): void => {\n    notifier.resourceUpdated(uri);\n  };\n\n  // One bound for both transports, derived from the write tools' own limit\n  // (getMaxInboundMessageBytes): a create the schema accepts must not be\n  // refused here. Mounted after CORS, the rate limiter and auth, so a refused\n  // request is answered without its body being read. The SDK's handler and\n  // adapter get the same number below so their internal defaults (4 MiB)\n  // cannot disagree with this parser, although both only read a body when no\n  // parsedBody is supplied — which this route never does.\n  const parseJson = express.json({ limit: `${String(getMaxInboundMessageBytes())}b` });\n\n  app.post('/mcp', parseJson, (req: Request, res: Response, next: NextFunction) => {\n    void (async () => {\n      if (!isJsonContentType(req.headers['content-type'])) {\n        sendJsonRpcError(\n          res,\n          415,\n          JSONRPC_SERVER_ERROR,\n          'Unsupported Media Type: Content-Type must be application/json',\n        );\n        return;\n      }\n      const parsedBody = req.body as unknown;\n      if (parsedBody === undefined) {\n        // Undefined tells the Node adapter to read the raw stream without our parser's limit.\n        sendJsonRpcError(res, 400, ProtocolErrorCode.ParseError, 'Invalid JSON in request body');\n        return;\n      }\n      // Only a structurally valid listen gets watchers, mirroring the stdio\n      // gate. A malformed one cannot succeed downstream, so attaching handles\n      // for it only gives the response-close release something to undo — and\n      // everything that is not a listen takes no watchers either way.\n      const requestedUris = listenSubscriptionUris(parsedBody);\n      if (requestedUris === undefined) {\n        await modernNodeHandler(req, res, parsedBody);\n        return;\n      }\n\n      // Over-cap listens are rejected inside prepareListenWatchers, before the ack.\n      const prepared = await prepareListenWatchers(\n        requestedUris,\n        sharedPathGuard,\n        sharedRegistry,\n        resourceUpdateSink,\n      );\n      if (!prepared.ok) {\n        sendJsonRpcError(\n          res,\n          400,\n          ProtocolErrorCode.InvalidParams,\n          prepared.message,\n          jsonRpcRequestId(parsedBody),\n        );\n        return;\n      }\n\n      let released = false;\n      const release = (): void => {\n        if (released) return;\n        released = true;\n        for (const uri of prepared.acquiredUris) sharedRegistry.release(uri);\n      };\n      if (prepared.acquiredUris.length > 0) {\n        // The attach loop awaits per-URI path validation, so the client can be\n        // gone by the time it returns. `close` fires once: a listener attached\n        // after it would never run and every lease this batch took would leak\n        // until process shutdown.\n        if (res.closed || res.destroyed || res.writableEnded) release();\n        else res.once('close', release);\n      }\n\n      try {\n        await modernNodeHandler(req, res, parsedBody);\n      } catch (error) {\n        release();\n        throw error;\n      }\n    })().catch(next);\n  });\n\n  // Answer non-POST here rather than handing it to `modernNodeHandler`. The\n  // SDK's own 405 is byte-identical to this one, but it omits the `Allow`\n  // header RFC 9110 §15.5.6 requires and routes every routine GET probe through\n  // the handler's `onerror` — which this server logs at error level.\n  app.all('/mcp', (_req: Request, res: Response) => {\n    sendJsonRpcError(res, 405, JSONRPC_SERVER_ERROR, 'Method not allowed.', null, {\n      Allow: 'POST, OPTIONS',\n    });\n  });\n\n  app.use(errorHandlerMiddleware);\n\n  return app;\n}\n\nexport async function startHttpServer(\n  port: number,\n  options: ServerOptions,\n  config: RuntimeConfig = {},\n): Promise<Server> {\n  const httpHost = config.httpHost ?? '127.0.0.1';\n  const { apiKey } = config;\n  assertHttpBindingPolicy(httpHost, apiKey);\n  const allowedHosts = resolveAllowedHosts(httpHost, process.env['FS_ALLOWED_HOSTS']);\n  assertHttpHostPolicy(\n    httpHost,\n    allowedHosts,\n    parseTrueEnvFlag(process.env['FS_ALLOW_UNRESTRICTED_HOSTS'], 'FS_ALLOW_UNRESTRICTED_HOSTS'),\n  );\n\n  const sharedRegistry = createWatcherRegistry();\n  // One store for the whole endpoint, same lifetime and same one-credential\n  // trust argument as the shared guard below: a result a tool externalized in\n  // one POST must survive to the follow-up resources/read, and the modern leg\n  // builds a fresh McpServer per request so a per-request store would discard\n  // it immediately.\n  // Fires only from a tool call, which is long after `modernHandler` below is\n  // constructed, so reading it from the closure is safe.\n  const sharedStore = new ResourceStore(() => {\n    modernHandler.notify.resourcesChanged();\n  });\n  const sharedPageStore = new PageSnapshotStore();\n  // One guard for the whole endpoint. The modern leg builds a fresh McpServer\n  // per request, so a per-instance guard would discard every accepted access\n  // grant the moment the request ended — re-prompting on each subsequent call\n  // and leaving the listen-watcher path validating against a stale allowed set.\n  // Grant scope is therefore the endpoint, not the connection: with FS_API_KEY set\n  // every caller presents the same key (one auth context by construction), and\n  // without it the bind is loopback-only. Split into per-auth-context guards if\n  // this ever serves more than one credential.\n  const sharedPathGuard = new PathGuard(options);\n  await sharedPathGuard.recomputeAllowedDirectories();\n\n  const maxRequestBodySize = getMaxInboundMessageBytes();\n\n  const modernHandler: McpHttpHandler = createMcpHandler(\n    async ({ era }) => {\n      const c = await createServer(options, {\n        watcherRegistry: sharedRegistry,\n        notifier: modernHandler.notify,\n        pathGuard: sharedPathGuard,\n        resourceStore: sharedStore,\n        pageStore: sharedPageStore,\n        era,\n        ...(apiKey !== undefined ? { apiKey } : {}),\n      });\n      return c.mcp;\n    },\n    {\n      // The SDK's default: a 2025-era request is answered by a fresh instance\n      // from the same factory, no session. What that leg cannot do — answer an\n      // input_required confirmation, deliver a subscription — is refused with a\n      // named workaround (define.ts, resources.ts). See docs/adr/003.\n      legacy: 'stateless',\n      maxRequestBodySize,\n      onerror: (error: Error) => {\n        Logger.error('[HTTP] modern leg error:', formatUnknownErrorMessage(error));\n      },\n    },\n  );\n  const modernNodeHandler = toNodeHandler(modernHandler, {\n    maxRequestBodySize,\n    // The adapter answers 500 when request conversion or handler.fetch\n    // itself throws (e.g. a request racing handler.close()); the entry's\n    // own onerror above never sees those. Log the adapter-level refusal so\n    // the 500 is not silent.\n    onerror: (error: Error) => {\n      Logger.error('[HTTP] node adapter error:', formatUnknownErrorMessage(error));\n    },\n  });\n\n  const app = setupExpressApp(\n    httpHost,\n    apiKey,\n    allowedHosts,\n    modernNodeHandler,\n    sharedPathGuard,\n    sharedRegistry,\n    modernHandler.notify,\n  );\n\n  const httpServer = createHttpServer(app);\n  httpServer.keepAliveTimeout = KEEPALIVE_TIMEOUT_MS;\n  httpServer.headersTimeout = KEEPALIVE_TIMEOUT_MS + 5_000;\n  httpServer.requestTimeout = DEFAULT_REQUEST_TIMEOUT_MSEC;\n\n  const onHttpServerError = (error: Error): void => {\n    Logger.error('[HTTP] runtime server error', {\n      host: httpHost,\n      port,\n      error: formatUnknownErrorMessage(error),\n    });\n  };\n  httpServer.on('error', onHttpServerError);\n\n  const teardown = (): Promise<void> => {\n    sharedRegistry.destroy();\n    sharedPageStore.clear();\n    return modernHandler.close().catch((err: unknown) => {\n      Logger.error('[HTTP] Error closing handler:', formatUnknownErrorMessage(err));\n    });\n  };\n  const originalClose = httpServer.close.bind(httpServer);\n  httpServer.close = function (callback?: (error?: Error) => void) {\n    void teardown().then(() => {\n      originalClose(callback);\n    });\n    return httpServer;\n  };\n\n  return new Promise((resolve, reject) => {\n    const onError = (err: Error) => {\n      void teardown();\n      reject(err);\n    };\n    httpServer.once('error', onError);\n\n    httpServer.listen(port, httpHost, () => {\n      httpServer.removeListener('error', onError);\n      Logger.info(`[HTTP] Server listening on http://${httpHost}:${port}`);\n      resolve(httpServer);\n    });\n  });\n}\n"]}

package/dist/transport/shared.d.ts

@@ -49,7 +49,9 @@ export type ListenPreparation = {
 };
 /**
  * Prepare every filesystem watcher named by a `subscriptions/listen` filter.
- * The batch is all-or-nothing: a failed URI releases each prior lease.
+ * The batch is all-or-nothing: a failed URI releases each prior lease. An
+ * over-cap listen is rejected up front, before the ack and before any watcher
+ * exists.
  */
 export declare function prepareListenWatchers(uris: readonly string[], pathGuard: PathGuard, registry: WatcherRegistry, notify: (uri: string) => void): Promise<ListenPreparation>;
 //# sourceMappingURL=shared.d.ts.map

package/dist/transport/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/transport/shared.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAmB,MAAM,8BAA8B,CAAC;AAGhF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,6BAA6B,CAAC;AAErC;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAG5E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,GAAG,IAAI,EAC5D,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,EAAE,GACL;IAAE,OAAO,EAAE,OAAO,eAAe,CAAC;IAAC,EAAE,EAAE,EAAE,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAEvF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CAQ7E;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAoBrD;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAW5B"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/transport/shared.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAmB,MAAM,8BAA8B,CAAC;AAGhF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,6BAA6B,CAAC;AAErC;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAG5E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,GAAG,IAAI,EAC5D,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,EAAE,GACL;IAAE,OAAO,EAAE,OAAO,eAAe,CAAC;IAAC,EAAE,EAAE,EAAE,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAEvF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CAQ7E;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAoBrD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAsB5B"}

package/dist/transport/shared.js

@@ -55,9 +55,22 @@ function watcherFailureMessage(uri, result) {
 }
 /**
  * Prepare every filesystem watcher named by a `subscriptions/listen` filter.
- * The batch is all-or-nothing: a failed URI releases each prior lease.
+ * The batch is all-or-nothing: a failed URI releases each prior lease. An
+ * over-cap listen is rejected up front, before the ack and before any watcher
+ * exists.
  */
 export async function prepareListenWatchers(uris, pathGuard, registry, notify) {
+    // The per-URI `capped` failure below would also reject, but only after
+    // creating and tearing down watchers up to the cap. Only URIs without a live
+    // watcher consume a slot.
+    const newUris = uris.filter((uri) => !registry.hasWatcher(uri));
+    const available = MAX_WATCHERS - registry.size();
+    if (newUris.length > available) {
+        return {
+            ok: false,
+            message: `subscriptions/listen names ${newUris.length} not-yet-watched URIs but only ${available} watcher slots remain (cap ${MAX_WATCHERS}). Reduce the resourceSubscriptions list.`,
+        };
+    }
     const acquired = [];
     for (const uri of uris) {
         const result = await registry.acquire(pathGuard, uri, notify);

package/dist/transport/shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/transport/shared.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,gDAAgD;AAChD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEhF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EACL,YAAY,GAGb,MAAM,6BAA6B,CAAC;AAerC,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,MAAM,EAAE,GAAI,UAAkD,EAAE,EAAE,CAAC;IACnE,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,OAAe,EACf,EAAM;IAEN,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtE,IAAK,OAAgC,CAAC,MAAM,KAAK,sBAAsB;QAAE,OAAO,SAAS,CAAC;IAC1F,MAAM,MAAM,GAAG,eAAe,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzF,IAAI,MAAM,YAAY,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/E,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC;AACrF,CAAC;AAMD,MAAM,uBAAuB,GAAG;IAC9B,SAAS,EAAE,0BAA0B;IACrC,MAAM,EAAE,iBAAiB,YAAY,UAAU;IAC/C,eAAe,EAAE,yCAAyC;IAC1D,KAAK,EAAE,yCAAyC;CACxC,CAAC;AAEX,SAAS,qBAAqB,CAC5B,GAAW,EACX,MAAkD;IAElD,MAAM,GAAG,GACP,MAAM,CAAC,MAAM,KAAK,cAAc;QAC9B,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC;QACzC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,uBAAuB,GAAG,KAAK,GAAG,EAAE,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAuB,EACvB,SAAoB,EACpB,QAAyB,EACzB,MAA6B;IAE7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,QAAQ;gBAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC","sourcesContent":["// Pieces both transport legs share: the runtime config contract, the JSON-RPC\n// error envelope, and the `subscriptions/listen` watcher-preparation ladder.\n// stdio and HTTP gate the same message shape; only where the lease is released\n// differs (connection close vs response close).\nimport { JSONRPC_VERSION, specTypeSchemas } from '@modelcontextprotocol/server';\n\nimport { formatUnknownErrorMessage } from '../core/errors.ts';\nimport type { PathGuard } from '../core/path.ts';\nimport {\n  MAX_WATCHERS,\n  type WatcherAttachResult,\n  type WatcherRegistry,\n} from '../core/watcher-registry.ts';\n\n/**\n * Runtime inputs the CLI resolves once (flag, else the operator's env var) and\n * hands the transport. Separate from `ServerOptions` because that object is\n * `PathGuard`'s constructor argument: the filesystem guard has no use for a\n * bind address and no business holding a bearer secret.\n */\nexport interface RuntimeConfig {\n  /** `--http-host` or `FS_HTTP_HOST`. The HTTP bind defaults to loopback without it. */\n  httpHost?: string;\n  /** `--api-key` or `FS_API_KEY`. Unset means open access (loopback dev mode). */\n  apiKey?: string;\n}\n\n/** The request id of a parsed JSON-RPC body, for error-envelope echo. */\nexport function jsonRpcRequestId(parsedBody: unknown): string | number | null {\n  const id = (parsedBody as { id?: unknown } | null | undefined)?.id;\n  return typeof id === 'string' || typeof id === 'number' ? id : null;\n}\n\n/**\n * The one JSON-RPC error envelope both legs refuse in. HTTP wraps it in\n * `sendJsonRpcError` to add status and headers; stdio hands it straight to the\n * wire. A second hand-built literal is how the two drift apart.\n */\nexport function jsonRpcError<Id extends string | number | null>(\n  code: number,\n  message: string,\n  id: Id,\n): { jsonrpc: typeof JSONRPC_VERSION; id: Id; error: { code: number; message: string } } {\n  return { jsonrpc: JSONRPC_VERSION, id, error: { code, message } };\n}\n\n/**\n * The de-duplicated `resourceSubscriptions` URIs of a structurally valid\n * `subscriptions/listen` request — `[]` when it names none — or `undefined` for\n * anything else, including a listen the schema rejects. Both legs gate watcher\n * attachment on this: a malformed listen cannot succeed downstream, so creating\n * and tearing down `fs.watch` handles for it is pure waste — and on HTTP the\n * teardown depended on the response-close listener firing.\n *\n * The method check runs first because every inbound stdio message passes\n * through here; only a listen pays for the schema parse.\n */\nexport function listenSubscriptionUris(message: unknown): string[] | undefined {\n  if (typeof message !== 'object' || message === null) return undefined;\n  if ((message as { method?: unknown }).method !== 'subscriptions/listen') return undefined;\n  const result = specTypeSchemas.SubscriptionsListenRequest['~standard'].validate(message);\n  if (result instanceof Promise || result.issues !== undefined) return undefined;\n  // De-duplicate: one attach must yield one ref-count, or the release below\n  // decrements further than it incremented and tears down a live watcher.\n  return [...new Set(result.value.params.notifications.resourceSubscriptions ?? [])];\n}\n\nexport type ListenPreparation =\n  | { readonly ok: true; readonly acquiredUris: string[] }\n  | { readonly ok: false; readonly message: string };\n\nconst WATCHER_FAILURE_REASONS = {\n  'bad-uri': 'unsupported resource URI',\n  capped: `watcher limit ${MAX_WATCHERS} reached`,\n  'attach-failed': 'filesystem watcher could not be created',\n  stale: 'subscription was cancelled during setup',\n} as const;\n\nfunction watcherFailureMessage(\n  uri: string,\n  result: Exclude<WatcherAttachResult, { ok: true }>,\n): string {\n  const why =\n    result.reason === 'invalid-path'\n      ? formatUnknownErrorMessage(result.error)\n      : WATCHER_FAILURE_REASONS[result.reason];\n  return `Cannot subscribe to ${uri}: ${why}`;\n}\n\n/**\n * Prepare every filesystem watcher named by a `subscriptions/listen` filter.\n * The batch is all-or-nothing: a failed URI releases each prior lease.\n */\nexport async function prepareListenWatchers(\n  uris: readonly string[],\n  pathGuard: PathGuard,\n  registry: WatcherRegistry,\n  notify: (uri: string) => void,\n): Promise<ListenPreparation> {\n  const acquired: string[] = [];\n  for (const uri of uris) {\n    const result = await registry.acquire(pathGuard, uri, notify);\n    if (!result.ok) {\n      for (const prior of acquired) registry.release(prior);\n      return { ok: false, message: watcherFailureMessage(uri, result) };\n    }\n    acquired.push(uri);\n  }\n  return { ok: true, acquiredUris: acquired };\n}\n"]}
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/transport/shared.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,gDAAgD;AAChD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEhF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EACL,YAAY,GAGb,MAAM,6BAA6B,CAAC;AAerC,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,MAAM,EAAE,GAAI,UAAkD,EAAE,EAAE,CAAC;IACnE,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,OAAe,EACf,EAAM;IAEN,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtE,IAAK,OAAgC,CAAC,MAAM,KAAK,sBAAsB;QAAE,OAAO,SAAS,CAAC;IAC1F,MAAM,MAAM,GAAG,eAAe,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzF,IAAI,MAAM,YAAY,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/E,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC;AACrF,CAAC;AAMD,MAAM,uBAAuB,GAAG;IAC9B,SAAS,EAAE,0BAA0B;IACrC,MAAM,EAAE,iBAAiB,YAAY,UAAU;IAC/C,eAAe,EAAE,yCAAyC;IAC1D,KAAK,EAAE,yCAAyC;CACxC,CAAC;AAEX,SAAS,qBAAqB,CAC5B,GAAW,EACX,MAAkD;IAElD,MAAM,GAAG,GACP,MAAM,CAAC,MAAM,KAAK,cAAc;QAC9B,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC;QACzC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,uBAAuB,GAAG,KAAK,GAAG,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAuB,EACvB,SAAoB,EACpB,QAAyB,EACzB,MAA6B;IAE7B,uEAAuE;IACvE,6EAA6E;IAC7E,0BAA0B;IAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,8BAA8B,OAAO,CAAC,MAAM,kCAAkC,SAAS,8BAA8B,YAAY,2CAA2C;SACtL,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,QAAQ;gBAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC","sourcesContent":["// Pieces both transport legs share: the runtime config contract, the JSON-RPC\n// error envelope, and the `subscriptions/listen` watcher-preparation ladder.\n// stdio and HTTP gate the same message shape; only where the lease is released\n// differs (connection close vs response close).\nimport { JSONRPC_VERSION, specTypeSchemas } from '@modelcontextprotocol/server';\n\nimport { formatUnknownErrorMessage } from '../core/errors.ts';\nimport type { PathGuard } from '../core/path.ts';\nimport {\n  MAX_WATCHERS,\n  type WatcherAttachResult,\n  type WatcherRegistry,\n} from '../core/watcher-registry.ts';\n\n/**\n * Runtime inputs the CLI resolves once (flag, else the operator's env var) and\n * hands the transport. Separate from `ServerOptions` because that object is\n * `PathGuard`'s constructor argument: the filesystem guard has no use for a\n * bind address and no business holding a bearer secret.\n */\nexport interface RuntimeConfig {\n  /** `--http-host` or `FS_HTTP_HOST`. The HTTP bind defaults to loopback without it. */\n  httpHost?: string;\n  /** `--api-key` or `FS_API_KEY`. Unset means open access (loopback dev mode). */\n  apiKey?: string;\n}\n\n/** The request id of a parsed JSON-RPC body, for error-envelope echo. */\nexport function jsonRpcRequestId(parsedBody: unknown): string | number | null {\n  const id = (parsedBody as { id?: unknown } | null | undefined)?.id;\n  return typeof id === 'string' || typeof id === 'number' ? id : null;\n}\n\n/**\n * The one JSON-RPC error envelope both legs refuse in. HTTP wraps it in\n * `sendJsonRpcError` to add status and headers; stdio hands it straight to the\n * wire. A second hand-built literal is how the two drift apart.\n */\nexport function jsonRpcError<Id extends string | number | null>(\n  code: number,\n  message: string,\n  id: Id,\n): { jsonrpc: typeof JSONRPC_VERSION; id: Id; error: { code: number; message: string } } {\n  return { jsonrpc: JSONRPC_VERSION, id, error: { code, message } };\n}\n\n/**\n * The de-duplicated `resourceSubscriptions` URIs of a structurally valid\n * `subscriptions/listen` request — `[]` when it names none — or `undefined` for\n * anything else, including a listen the schema rejects. Both legs gate watcher\n * attachment on this: a malformed listen cannot succeed downstream, so creating\n * and tearing down `fs.watch` handles for it is pure waste — and on HTTP the\n * teardown depended on the response-close listener firing.\n *\n * The method check runs first because every inbound stdio message passes\n * through here; only a listen pays for the schema parse.\n */\nexport function listenSubscriptionUris(message: unknown): string[] | undefined {\n  if (typeof message !== 'object' || message === null) return undefined;\n  if ((message as { method?: unknown }).method !== 'subscriptions/listen') return undefined;\n  const result = specTypeSchemas.SubscriptionsListenRequest['~standard'].validate(message);\n  if (result instanceof Promise || result.issues !== undefined) return undefined;\n  // De-duplicate: one attach must yield one ref-count, or the release below\n  // decrements further than it incremented and tears down a live watcher.\n  return [...new Set(result.value.params.notifications.resourceSubscriptions ?? [])];\n}\n\nexport type ListenPreparation =\n  | { readonly ok: true; readonly acquiredUris: string[] }\n  | { readonly ok: false; readonly message: string };\n\nconst WATCHER_FAILURE_REASONS = {\n  'bad-uri': 'unsupported resource URI',\n  capped: `watcher limit ${MAX_WATCHERS} reached`,\n  'attach-failed': 'filesystem watcher could not be created',\n  stale: 'subscription was cancelled during setup',\n} as const;\n\nfunction watcherFailureMessage(\n  uri: string,\n  result: Exclude<WatcherAttachResult, { ok: true }>,\n): string {\n  const why =\n    result.reason === 'invalid-path'\n      ? formatUnknownErrorMessage(result.error)\n      : WATCHER_FAILURE_REASONS[result.reason];\n  return `Cannot subscribe to ${uri}: ${why}`;\n}\n\n/**\n * Prepare every filesystem watcher named by a `subscriptions/listen` filter.\n * The batch is all-or-nothing: a failed URI releases each prior lease. An\n * over-cap listen is rejected up front, before the ack and before any watcher\n * exists.\n */\nexport async function prepareListenWatchers(\n  uris: readonly string[],\n  pathGuard: PathGuard,\n  registry: WatcherRegistry,\n  notify: (uri: string) => void,\n): Promise<ListenPreparation> {\n  // The per-URI `capped` failure below would also reject, but only after\n  // creating and tearing down watchers up to the cap. Only URIs without a live\n  // watcher consume a slot.\n  const newUris = uris.filter((uri) => !registry.hasWatcher(uri));\n  const available = MAX_WATCHERS - registry.size();\n  if (newUris.length > available) {\n    return {\n      ok: false,\n      message: `subscriptions/listen names ${newUris.length} not-yet-watched URIs but only ${available} watcher slots remain (cap ${MAX_WATCHERS}). Reduce the resourceSubscriptions list.`,\n    };\n  }\n  const acquired: string[] = [];\n  for (const uri of uris) {\n    const result = await registry.acquire(pathGuard, uri, notify);\n    if (!result.ok) {\n      for (const prior of acquired) registry.release(prior);\n      return { ok: false, message: watcherFailureMessage(uri, result) };\n    }\n    acquired.push(uri);\n  }\n  return { ok: true, acquiredUris: acquired };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@j0hanz/filesystem-mcp",
-  "version": "2.7.0",
+  "version": "2.7.2",
   "mcpName": "io.github.j0hanz/filesystem-mcp",
   "description": "Secure filesystem MCP server for reading, writing, searching, diffing, and patching files.",
   "author": "j0hanz",