@j0hanz/filesystem-mcp 2.7.4 → 2.7.6

package/dist/server.js

@@ -4,6 +4,7 @@ import { requestStateCodec } from "./core/input-required.js";
 import { Logger } from "./core/observability.js";
 import { PathGuard } from "./core/path.js";
 import { PageSnapshotStore, ResourceStore } from "./core/store.js";
+import { MAX_TOOL_INPUT_ELEMENTS } from "./core/util.js";
 import { INSTRUCTIONS_SUMMARY, INSTRUCTIONS_URI } from "./instructions.js";
 import { registerPrompts } from "./prompts.js";
 import { registerResources } from "./resources.js";
@@ -36,6 +37,12 @@ export async function createServer(options = {}, extraDeps) {
     const serverConfig = {
         capabilities,
         enforceStrictCapabilities: true,
+        // Structural bound on tools/call arguments, checked before Zod walks the
+        // value: the body limit is bytes (31 MiB by default), and every per-tool
+        // `.max()` runs only after a full traversal. No schema-legal call comes
+        // near this (see MAX_TOOL_INPUT_ELEMENTS); a payload over it is answered
+        // with a tool error after counting at most 4097 nodes.
+        maxToolInputElements: MAX_TOOL_INPUT_ELEMENTS,
         cacheHints: {
             'tools/list': { ttlMs: 3_600_000, cacheScope },
             'prompts/list': { ttlMs: 3_600_000, cacheScope },
@@ -116,6 +123,7 @@ export async function createServer(options = {}, extraDeps) {
         ...(extraDeps?.watcherRegistry ? { watcherRegistry: extraDeps.watcherRegistry } : {}),
         ...(extraDeps?.notifier ? { notifier: extraDeps.notifier } : {}),
         ...(extraDeps?.era ? { era: extraDeps.era } : {}),
+        ...(extraDeps?.transport ? { transport: extraDeps.transport } : {}),
     };
     const resourceDisposable = registerResources(deps);
     registerPrompts(deps);

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,WAAW,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEnE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,kEAAkE;AAClE,YAAY;AACZ,kEAAkE;AAElE,MAAM,EACJ,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,kBAAkB,EAC/B,QAAQ,EAAE,eAAe,GAC1B,GAAG,WAAW,CAAC;AAQhB,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAyB,EAAE,EAC3B,SAkCC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,gCAAgC;IAChC,EAAE;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnE,wEAAwE;IACxE,uEAAuE;IACvE,8DAA8D;IAC9D,4EAA4E;IAC5E,kEAAkE;IAClE,2EAA2E;IAC3E,uEAAuE;IACvE,qFAAqF;IACrF,MAAM,UAAU,GAAG,SAAS,EAAE,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC;IACnF,MAAM,YAAY,GAAG;QACnB,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,UAAU,EAAE;KACnC,CAAC;IAE/B,MAAM,UAAU,GAAyB,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClF,MAAM,YAAY,GAA4D;QAC5E,YAAY;QACZ,yBAAyB,EAAE,IAAI;QAC/B,UAAU,EAAE;YACV,YAAY,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE;YAC9C,cAAc,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE;YAChD,+DAA+D;YAC/D,0EAA0E;YAC1E,0EAA0E;YAC1E,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,yEAAyE;YACzE,oEAAoE;YACpE,gBAAgB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE;YAC1D,0BAA0B,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE;YAC5D,iBAAiB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE;SACpD;QACD,4EAA4E;QAC5E,wEAAwE;QACxE,2EAA2E;QAC3E,2DAA2D;QAC3D,kCAAkC;QAClC,6DAA6D;QAC7D,YAAY,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,MAAM,EAAE;QAClD,uEAAuE;QACvE,+DAA+D;QAC/D,uEAAuE;QACvE,gEAAgE;QAChE,0DAA0D;QAC1D,iEAAiE;QACjE,wEAAwE;QACxE,uEAAuE;QACvE,mEAAmE;QACnE,iDAAiD;QACjD,4BAA4B,EAAE,CAAC,sCAAsC,CAAC;KACvE,CAAC;IAEF,YAAY,CAAC,YAAY;QACvB,GAAG,oBAAoB,GAAG;YAC1B,2BAA2B,gBAAgB,8BAA8B,CAAC;IAE5E,MAAM,cAAc,GAAmB;QACrC,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,cAAc;QACvB,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC3D,MAAM,CAAC,MAAM,CAAC,2BAA2B,GAAG,CAAC,YAAY,EAAE,EAAE;QAC3D,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC;IAEF,oEAAoE;IACpE,MAAM,aAAa,GACjB,SAAS,EAAE,aAAa;QACxB,IAAI,aAAa,CAAC,GAAG,EAAE;YACrB,IAAI,SAAS,EAAE,QAAQ,EAAE,CAAC;gBACxB,SAAS,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACpE,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,MAAM,SAAS,GAAG,SAAS,EAAE,SAAS,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAElE,MAAM,SAAS,GAAG,SAAS,EAAE,SAAS,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IACjE,0EAA0E;IAC1E,sEAAsE;IACtE,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,yDAAyD;IACzD,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;QAAE,MAAM,SAAS,CAAC,2BAA2B,EAAE,CAAC;IAE9E,MAAM,IAAI,GAAG;QACX,MAAM;QACN,SAAS;QACT,SAAS;QACT,aAAa;QACb,UAAU;QACV,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;IAEF,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACnD,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,aAAa,CAAC,IAAI,CAAC,CAAC;IAEpB,yEAAyE;IACzE,MAAM,SAAS,GAAG,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC;IACrD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,OAAO,GAA4B;QACvC,GAAG,EAAE,MAAM;QACX,SAAS;QACT,mBAAmB;YACjB,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,SAAS;gBAAE,SAAS,CAAC,KAAK,EAAE,CAAC;YACjC,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC;KACF,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;QAC3B,eAAe,EAAE,EAAE,CAAC;QACpB,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAChC,CAAC,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import type {\n  Implementation,\n  ServerCapabilities,\n  ServerNotifier,\n} from '@modelcontextprotocol/server';\nimport { McpServer } from '@modelcontextprotocol/server';\n\nimport packageJson from '../package.json' with { type: 'json' };\nimport { requestStateCodec } from './core/input-required.ts';\nimport { Logger } from './core/observability.ts';\nimport type { ServerOptions } from './core/path.ts';\nimport { PathGuard } from './core/path.ts';\nimport { PageSnapshotStore, ResourceStore } from './core/store.ts';\nimport type { WatcherRegistry } from './core/watcher-registry.ts';\nimport { INSTRUCTIONS_SUMMARY, INSTRUCTIONS_URI } from './instructions.ts';\nimport { registerPrompts } from './prompts.ts';\nimport { registerResources } from './resources.ts';\nimport { registerTools } from './tools/index.ts';\n\n// ═══════════════════════════════════════════════════════════════\n// bootstrap\n// ═══════════════════════════════════════════════════════════════\n\nconst {\n  version: SERVER_VERSION,\n  description: SERVER_DESCRIPTION,\n  homepage: SERVER_HOMEPAGE,\n} = packageJson;\n\nexport interface FilesystemServerContext {\n  readonly mcp: McpServer;\n  readonly pathGuard: PathGuard;\n  disposeRuntimeState(): void;\n}\n\nexport async function createServer(\n  options: ServerOptions = {},\n  extraDeps?: {\n    /** Shared file-watcher registry for the modern (per-request) HTTP leg. */\n    watcherRegistry?: WatcherRegistry;\n    /** Modern-leg typed notification publisher. */\n    notifier?: ServerNotifier;\n    /**\n     * Guard to use instead of constructing one. The HTTP leg builds a single\n     * guard for the whole endpoint and passes it to every per-request instance,\n     * so an accepted access grant survives the request that accepted it (R8) and\n     * the listen-watcher path validates against the same allowed set. Omitted on\n     * stdio, where the instance is pinned for the connection and owns its guard.\n     */\n    pathGuard?: PathGuard;\n    /**\n     * Store to use instead of constructing one. The HTTP modern leg shares one\n     * store across every per-request instance, so a result a tool externalized\n     * in one POST survives to the follow-up resources/read. Omitted on stdio,\n     * where the pinned instance owns its store for the connection.\n     */\n    resourceStore?: ResourceStore;\n    /**\n     * Pagination snapshots shared by every modern HTTP request. Omitted on\n     * stdio, where the connection-owned context clears its store on close.\n     */\n    pageStore?: PageSnapshotStore;\n    /** The protocol era this instance serves; omitted where the caller does not know. */\n    era?: 'legacy' | 'modern';\n    /**\n     * The resolved HTTP credential, from `--api-key` or `FS_API_KEY`. Lives here\n     * rather than on `ServerOptions` because that object is `PathGuard`'s\n     * constructor argument and is exposed on its public `options` field — a\n     * bearer secret has no business being reachable from a tool handler.\n     */\n    apiKey?: string;\n  },\n): Promise<FilesystemServerContext> {\n  // Only `resources` is declared: `McpServer` advertises `tools` and `prompts`\n  // (with `listChanged: true`) and `completions` from the registrations below,\n  // but never infers `subscribe`.\n  //\n  // `resources.subscribe` stays advertised on both eras: the verb itself is\n  // 2025-only, but the SDK's listen router honors a `subscriptions/listen`\n  // resource filter only while this bit is advertised (dist: `allow(\n  // capabilities?.resources?.subscribe)` on `resourceSubscriptions`). The\n  // strict-capability gate on outbound `notifications/resources/updated`\n  // checks only that `resources` exists. The one exception is a\n  // legacy instance on the HTTP leg (era 'legacy' with a notifier): it serves\n  // one request, registers no subscribe handler (resources.ts, same\n  // predicate) and sends no notification of any kind — there is no stream to\n  // send it on — so neither `subscribe` nor `listChanged` is advertised.\n  // sunset(SEP-2577): removal trigger in docs/adr/002-legacy-protocol-paths-sunset.md.\n  const legacyHttp = extraDeps?.era === 'legacy' && extraDeps.notifier !== undefined;\n  const capabilities = {\n    resources: { subscribe: !legacyHttp, listChanged: !legacyHttp },\n  } satisfies ServerCapabilities;\n\n  const cacheScope: 'private' | 'public' = extraDeps?.apiKey ? 'private' : 'public';\n  const serverConfig: NonNullable<ConstructorParameters<typeof McpServer>[1]> = {\n    capabilities,\n    enforceStrictCapabilities: true,\n    cacheHints: {\n      'tools/list': { ttlMs: 3_600_000, cacheScope },\n      'prompts/list': { ttlMs: 3_600_000, cacheScope },\n      // Always private, never `cacheScope`: this list enumerates the\n      // ResourceStore, so its entries are one caller's externalized tool output\n      // — the same entries whose own read hint is `private` (resources.ts). The\n      // other four lists are the same for every caller and follow the key, and\n      // they are built from frozen module-level arrays that cannot change at\n      // runtime, so an hour is honest: a shorter hint only buys the client a\n      // re-fetch of bytes that cannot have differed, at the cost of the prompt\n      // cache stability the spec asks deterministic ordering to preserve.\n      'resources/list': { ttlMs: 30_000, cacheScope: 'private' },\n      'resources/templates/list': { ttlMs: 3_600_000, cacheScope },\n      'server/discover': { ttlMs: 3_600_000, cacheScope },\n    },\n    // Multi-round-trip `requestState` integrity (protocol revision 2026-07-28):\n    // the codec verifies the HMAC on every retried round before the handler\n    // runs, so a tampered or expired state is rejected as `-32602` rather than\n    // trusted. The decoded `PendingState` reaches handlers via\n    // `ctx.mcpReq.requestState<T>()`.\n    // eslint-disable-next-line @typescript-eslint/unbound-method\n    requestState: { verify: requestStateCodec.verify },\n    // The ResourceStore fires list-changed on every externalization and on\n    // every expiry prune (store.ts), so parallel tools/call on one\n    // connection can send the same notification several times in one tick;\n    // each copy makes the client refetch an unchanged list. The SDK\n    // coalesces same-tick duplicates for methods listed here.\n    // ponytail: same-tick coalescing only — cross-tick bursts (batch\n    // externalizations separated by fs awaits) still fan out; a store-level\n    // debounce is the fix if clients ever report that. The modern HTTP leg\n    // publishes through the ServerEventBus, which this option does not\n    // touch, so it protects the stdio/in-memory leg.\n    debouncedNotificationMethods: ['notifications/resources/list_changed'],\n  };\n\n  serverConfig.instructions =\n    `${INSTRUCTIONS_SUMMARY} ` +\n    `For full guidance, read ${INSTRUCTIONS_URI} or run the get-help prompt.`;\n\n  const implementation: Implementation = {\n    name: 'filesystem-mcp',\n    title: 'Filesystem MCP',\n    version: SERVER_VERSION,\n    ...(SERVER_DESCRIPTION ? { description: SERVER_DESCRIPTION } : {}),\n    ...(SERVER_HOMEPAGE ? { websiteUrl: SERVER_HOMEPAGE } : {}),\n  };\n  const server = new McpServer(implementation, serverConfig);\n  server.server.fallbackNotificationHandler = (notification) => {\n    Logger.debug('Unhandled client notification', { method: notification.method });\n    return Promise.resolve();\n  };\n\n  // A failed send means the connection went away; nothing to recover.\n  const resourceStore =\n    extraDeps?.resourceStore ??\n    new ResourceStore(() => {\n      if (extraDeps?.notifier) {\n        extraDeps.notifier.resourcesChanged();\n        return;\n      }\n      void server.server.sendResourceListChanged().catch((error: unknown) => {\n        Logger.debug('resource list_changed not delivered', { error: String(error) });\n      });\n    });\n  const pageStore = extraDeps?.pageStore ?? new PageSnapshotStore();\n\n  const pathGuard = extraDeps?.pathGuard ?? new PathGuard(options);\n  // Recompute once per guard, keyed on the guard's own state rather than on\n  // whether it was injected — an injected-but-uninitialized guard would\n  // otherwise deny every path. Not unconditional: the HTTP leg shares one guard\n  // across a fresh instance per request, and a repeat recompute would both redo\n  // the root resolution per request and race a concurrent `applyGrant`, which\n  // commits under a mutation lock this call does not take.\n  if (!pathGuard.isInitialized()) await pathGuard.recomputeAllowedDirectories();\n\n  const deps = {\n    server,\n    pathGuard,\n    pageStore,\n    resourceStore,\n    cacheScope,\n    ...(options.readOnly ? { readOnly: true } : {}),\n    ...(extraDeps?.watcherRegistry ? { watcherRegistry: extraDeps.watcherRegistry } : {}),\n    ...(extraDeps?.notifier ? { notifier: extraDeps.notifier } : {}),\n    ...(extraDeps?.era ? { era: extraDeps.era } : {}),\n  };\n\n  const resourceDisposable = registerResources(deps);\n  registerPrompts(deps);\n  registerTools(deps);\n\n  // False when the store is shared across instances and outlives this one.\n  const ownsPages = extraDeps?.pageStore === undefined;\n  let cleanedUp = false;\n  const context: FilesystemServerContext = {\n    mcp: server,\n    pathGuard,\n    disposeRuntimeState() {\n      if (cleanedUp) return;\n      cleanedUp = true;\n      if (ownsPages) pageStore.clear();\n      resourceDisposable.dispose();\n    },\n  };\n  const previousOnClose = server.server.onclose;\n  server.server.onclose = () => {\n    previousOnClose?.();\n    context.disposeRuntimeState();\n  };\n  return context;\n}\n"]}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,WAAW,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,kEAAkE;AAClE,YAAY;AACZ,kEAAkE;AAElE,MAAM,EACJ,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,kBAAkB,EAC/B,QAAQ,EAAE,eAAe,GAC1B,GAAG,WAAW,CAAC;AAQhB,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAyB,EAAE,EAC3B,SAoCC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,gCAAgC;IAChC,EAAE;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnE,wEAAwE;IACxE,uEAAuE;IACvE,8DAA8D;IAC9D,4EAA4E;IAC5E,kEAAkE;IAClE,2EAA2E;IAC3E,uEAAuE;IACvE,qFAAqF;IACrF,MAAM,UAAU,GAAG,SAAS,EAAE,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC;IACnF,MAAM,YAAY,GAAG;QACnB,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,UAAU,EAAE;KACnC,CAAC;IAE/B,MAAM,UAAU,GAAyB,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClF,MAAM,YAAY,GAA4D;QAC5E,YAAY;QACZ,yBAAyB,EAAE,IAAI;QAC/B,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,uDAAuD;QACvD,oBAAoB,EAAE,uBAAuB;QAC7C,UAAU,EAAE;YACV,YAAY,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE;YAC9C,cAAc,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE;YAChD,+DAA+D;YAC/D,0EAA0E;YAC1E,0EAA0E;YAC1E,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,yEAAyE;YACzE,oEAAoE;YACpE,gBAAgB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE;YAC1D,0BAA0B,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE;YAC5D,iBAAiB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE;SACpD;QACD,4EAA4E;QAC5E,wEAAwE;QACxE,2EAA2E;QAC3E,2DAA2D;QAC3D,kCAAkC;QAClC,6DAA6D;QAC7D,YAAY,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,MAAM,EAAE;QAClD,uEAAuE;QACvE,+DAA+D;QAC/D,uEAAuE;QACvE,gEAAgE;QAChE,0DAA0D;QAC1D,iEAAiE;QACjE,wEAAwE;QACxE,uEAAuE;QACvE,mEAAmE;QACnE,iDAAiD;QACjD,4BAA4B,EAAE,CAAC,sCAAsC,CAAC;KACvE,CAAC;IAEF,YAAY,CAAC,YAAY;QACvB,GAAG,oBAAoB,GAAG;YAC1B,2BAA2B,gBAAgB,8BAA8B,CAAC;IAE5E,MAAM,cAAc,GAAmB;QACrC,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,cAAc;QACvB,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC3D,MAAM,CAAC,MAAM,CAAC,2BAA2B,GAAG,CAAC,YAAY,EAAE,EAAE;QAC3D,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC;IAEF,oEAAoE;IACpE,MAAM,aAAa,GACjB,SAAS,EAAE,aAAa;QACxB,IAAI,aAAa,CAAC,GAAG,EAAE;YACrB,IAAI,SAAS,EAAE,QAAQ,EAAE,CAAC;gBACxB,SAAS,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACpE,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,MAAM,SAAS,GAAG,SAAS,EAAE,SAAS,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAElE,MAAM,SAAS,GAAG,SAAS,EAAE,SAAS,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IACjE,0EAA0E;IAC1E,sEAAsE;IACtE,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,yDAAyD;IACzD,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;QAAE,MAAM,SAAS,CAAC,2BAA2B,EAAE,CAAC;IAE9E,MAAM,IAAI,GAAG;QACX,MAAM;QACN,SAAS;QACT,SAAS;QACT,aAAa;QACb,UAAU;QACV,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;IAEF,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACnD,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,aAAa,CAAC,IAAI,CAAC,CAAC;IAEpB,yEAAyE;IACzE,MAAM,SAAS,GAAG,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC;IACrD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,OAAO,GAA4B;QACvC,GAAG,EAAE,MAAM;QACX,SAAS;QACT,mBAAmB;YACjB,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,SAAS;gBAAE,SAAS,CAAC,KAAK,EAAE,CAAC;YACjC,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC;KACF,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;QAC3B,eAAe,EAAE,EAAE,CAAC;QACpB,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAChC,CAAC,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import type {\n  Implementation,\n  ServerCapabilities,\n  ServerNotifier,\n} from '@modelcontextprotocol/server';\nimport { McpServer } from '@modelcontextprotocol/server';\n\nimport packageJson from '../package.json' with { type: 'json' };\nimport { requestStateCodec } from './core/input-required.ts';\nimport { Logger } from './core/observability.ts';\nimport type { ServerOptions } from './core/path.ts';\nimport { PathGuard } from './core/path.ts';\nimport { PageSnapshotStore, ResourceStore } from './core/store.ts';\nimport { MAX_TOOL_INPUT_ELEMENTS } from './core/util.ts';\nimport type { WatcherRegistry } from './core/watcher-registry.ts';\nimport { INSTRUCTIONS_SUMMARY, INSTRUCTIONS_URI } from './instructions.ts';\nimport { registerPrompts } from './prompts.ts';\nimport { registerResources } from './resources.ts';\nimport { registerTools } from './tools/index.ts';\n\n// ═══════════════════════════════════════════════════════════════\n// bootstrap\n// ═══════════════════════════════════════════════════════════════\n\nconst {\n  version: SERVER_VERSION,\n  description: SERVER_DESCRIPTION,\n  homepage: SERVER_HOMEPAGE,\n} = packageJson;\n\nexport interface FilesystemServerContext {\n  readonly mcp: McpServer;\n  readonly pathGuard: PathGuard;\n  disposeRuntimeState(): void;\n}\n\nexport async function createServer(\n  options: ServerOptions = {},\n  extraDeps?: {\n    /** Shared file-watcher registry for the modern (per-request) HTTP leg. */\n    watcherRegistry?: WatcherRegistry;\n    /** Modern-leg typed notification publisher. */\n    notifier?: ServerNotifier;\n    /**\n     * Guard to use instead of constructing one. The HTTP leg builds a single\n     * guard for the whole endpoint and passes it to every per-request instance,\n     * so an accepted access grant survives the request that accepted it (R8) and\n     * the listen-watcher path validates against the same allowed set. Omitted on\n     * stdio, where the instance is pinned for the connection and owns its guard.\n     */\n    pathGuard?: PathGuard;\n    /**\n     * Store to use instead of constructing one. The HTTP modern leg shares one\n     * store across every per-request instance, so a result a tool externalized\n     * in one POST survives to the follow-up resources/read. Omitted on stdio,\n     * where the pinned instance owns its store for the connection.\n     */\n    resourceStore?: ResourceStore;\n    /**\n     * Pagination snapshots shared by every modern HTTP request. Omitted on\n     * stdio, where the connection-owned context clears its store on close.\n     */\n    pageStore?: PageSnapshotStore;\n    /** The protocol era this instance serves; omitted where the caller does not know. */\n    era?: 'legacy' | 'modern';\n    /** Only `stdio` has the SDK's fixed 10 MiB ReadBuffer, so only there does `read` cap its result. */\n    transport?: 'stdio' | 'http';\n    /**\n     * The resolved HTTP credential, from `--api-key` or `FS_API_KEY`. Lives here\n     * rather than on `ServerOptions` because that object is `PathGuard`'s\n     * constructor argument and is exposed on its public `options` field — a\n     * bearer secret has no business being reachable from a tool handler.\n     */\n    apiKey?: string;\n  },\n): Promise<FilesystemServerContext> {\n  // Only `resources` is declared: `McpServer` advertises `tools` and `prompts`\n  // (with `listChanged: true`) and `completions` from the registrations below,\n  // but never infers `subscribe`.\n  //\n  // `resources.subscribe` stays advertised on both eras: the verb itself is\n  // 2025-only, but the SDK's listen router honors a `subscriptions/listen`\n  // resource filter only while this bit is advertised (dist: `allow(\n  // capabilities?.resources?.subscribe)` on `resourceSubscriptions`). The\n  // strict-capability gate on outbound `notifications/resources/updated`\n  // checks only that `resources` exists. The one exception is a\n  // legacy instance on the HTTP leg (era 'legacy' with a notifier): it serves\n  // one request, registers no subscribe handler (resources.ts, same\n  // predicate) and sends no notification of any kind — there is no stream to\n  // send it on — so neither `subscribe` nor `listChanged` is advertised.\n  // sunset(SEP-2577): removal trigger in docs/adr/002-legacy-protocol-paths-sunset.md.\n  const legacyHttp = extraDeps?.era === 'legacy' && extraDeps.notifier !== undefined;\n  const capabilities = {\n    resources: { subscribe: !legacyHttp, listChanged: !legacyHttp },\n  } satisfies ServerCapabilities;\n\n  const cacheScope: 'private' | 'public' = extraDeps?.apiKey ? 'private' : 'public';\n  const serverConfig: NonNullable<ConstructorParameters<typeof McpServer>[1]> = {\n    capabilities,\n    enforceStrictCapabilities: true,\n    // Structural bound on tools/call arguments, checked before Zod walks the\n    // value: the body limit is bytes (31 MiB by default), and every per-tool\n    // `.max()` runs only after a full traversal. No schema-legal call comes\n    // near this (see MAX_TOOL_INPUT_ELEMENTS); a payload over it is answered\n    // with a tool error after counting at most 4097 nodes.\n    maxToolInputElements: MAX_TOOL_INPUT_ELEMENTS,\n    cacheHints: {\n      'tools/list': { ttlMs: 3_600_000, cacheScope },\n      'prompts/list': { ttlMs: 3_600_000, cacheScope },\n      // Always private, never `cacheScope`: this list enumerates the\n      // ResourceStore, so its entries are one caller's externalized tool output\n      // — the same entries whose own read hint is `private` (resources.ts). The\n      // other four lists are the same for every caller and follow the key, and\n      // they are built from frozen module-level arrays that cannot change at\n      // runtime, so an hour is honest: a shorter hint only buys the client a\n      // re-fetch of bytes that cannot have differed, at the cost of the prompt\n      // cache stability the spec asks deterministic ordering to preserve.\n      'resources/list': { ttlMs: 30_000, cacheScope: 'private' },\n      'resources/templates/list': { ttlMs: 3_600_000, cacheScope },\n      'server/discover': { ttlMs: 3_600_000, cacheScope },\n    },\n    // Multi-round-trip `requestState` integrity (protocol revision 2026-07-28):\n    // the codec verifies the HMAC on every retried round before the handler\n    // runs, so a tampered or expired state is rejected as `-32602` rather than\n    // trusted. The decoded `PendingState` reaches handlers via\n    // `ctx.mcpReq.requestState<T>()`.\n    // eslint-disable-next-line @typescript-eslint/unbound-method\n    requestState: { verify: requestStateCodec.verify },\n    // The ResourceStore fires list-changed on every externalization and on\n    // every expiry prune (store.ts), so parallel tools/call on one\n    // connection can send the same notification several times in one tick;\n    // each copy makes the client refetch an unchanged list. The SDK\n    // coalesces same-tick duplicates for methods listed here.\n    // ponytail: same-tick coalescing only — cross-tick bursts (batch\n    // externalizations separated by fs awaits) still fan out; a store-level\n    // debounce is the fix if clients ever report that. The modern HTTP leg\n    // publishes through the ServerEventBus, which this option does not\n    // touch, so it protects the stdio/in-memory leg.\n    debouncedNotificationMethods: ['notifications/resources/list_changed'],\n  };\n\n  serverConfig.instructions =\n    `${INSTRUCTIONS_SUMMARY} ` +\n    `For full guidance, read ${INSTRUCTIONS_URI} or run the get-help prompt.`;\n\n  const implementation: Implementation = {\n    name: 'filesystem-mcp',\n    title: 'Filesystem MCP',\n    version: SERVER_VERSION,\n    ...(SERVER_DESCRIPTION ? { description: SERVER_DESCRIPTION } : {}),\n    ...(SERVER_HOMEPAGE ? { websiteUrl: SERVER_HOMEPAGE } : {}),\n  };\n  const server = new McpServer(implementation, serverConfig);\n  server.server.fallbackNotificationHandler = (notification) => {\n    Logger.debug('Unhandled client notification', { method: notification.method });\n    return Promise.resolve();\n  };\n\n  // A failed send means the connection went away; nothing to recover.\n  const resourceStore =\n    extraDeps?.resourceStore ??\n    new ResourceStore(() => {\n      if (extraDeps?.notifier) {\n        extraDeps.notifier.resourcesChanged();\n        return;\n      }\n      void server.server.sendResourceListChanged().catch((error: unknown) => {\n        Logger.debug('resource list_changed not delivered', { error: String(error) });\n      });\n    });\n  const pageStore = extraDeps?.pageStore ?? new PageSnapshotStore();\n\n  const pathGuard = extraDeps?.pathGuard ?? new PathGuard(options);\n  // Recompute once per guard, keyed on the guard's own state rather than on\n  // whether it was injected — an injected-but-uninitialized guard would\n  // otherwise deny every path. Not unconditional: the HTTP leg shares one guard\n  // across a fresh instance per request, and a repeat recompute would both redo\n  // the root resolution per request and race a concurrent `applyGrant`, which\n  // commits under a mutation lock this call does not take.\n  if (!pathGuard.isInitialized()) await pathGuard.recomputeAllowedDirectories();\n\n  const deps = {\n    server,\n    pathGuard,\n    pageStore,\n    resourceStore,\n    cacheScope,\n    ...(options.readOnly ? { readOnly: true } : {}),\n    ...(extraDeps?.watcherRegistry ? { watcherRegistry: extraDeps.watcherRegistry } : {}),\n    ...(extraDeps?.notifier ? { notifier: extraDeps.notifier } : {}),\n    ...(extraDeps?.era ? { era: extraDeps.era } : {}),\n    ...(extraDeps?.transport ? { transport: extraDeps.transport } : {}),\n  };\n\n  const resourceDisposable = registerResources(deps);\n  registerPrompts(deps);\n  registerTools(deps);\n\n  // False when the store is shared across instances and outlives this one.\n  const ownsPages = extraDeps?.pageStore === undefined;\n  let cleanedUp = false;\n  const context: FilesystemServerContext = {\n    mcp: server,\n    pathGuard,\n    disposeRuntimeState() {\n      if (cleanedUp) return;\n      cleanedUp = true;\n      if (ownsPages) pageStore.clear();\n      resourceDisposable.dispose();\n    },\n  };\n  const previousOnClose = server.server.onclose;\n  server.server.onclose = () => {\n    previousOnClose?.();\n    context.disposeRuntimeState();\n  };\n  return context;\n}\n"]}

package/dist/tools/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/tools/create.ts"],"names":[],"mappings":"AA+GA,eAAO,MAAM,MAAM,mCA+MjB,CAAC"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/tools/create.ts"],"names":[],"mappings":"AA+GA,eAAO,MAAM,MAAM,mCAkIjB,CAAC"}

package/dist/tools/create.js

@@ -116,7 +116,7 @@ export const CREATE = defineTool({
             if (round !== undefined)
                 return round;
         }
-        const batch = await runOverPaths(args.files, ctx, ErrorCode.UNKNOWN, async ({ path, content, append }) => {
+        const batch = await runOverPaths(args.files, ctx, ErrorCode.UNKNOWN, async ({ path, content, append, overwrite }) => {
             const pendingPath = pendingByPath.get(path);
             if (pendingPath !== undefined) {
                 const key = confirmKey(pendingSorted.indexOf(pendingPath));
@@ -127,90 +127,18 @@ export const CREATE = defineTool({
                     throw new FsError(ErrorCode.CANCELLED, `create cancelled: overwrite of "${path}" was ${describeRefusal(ctx, key)}`, path);
                 }
             }
-            await ctx.fs.mkdir(dirname(path), { recursive: true });
-            // Overwrite: file content == `content`, so content-derived meta is
-            // exact and the atomic temp+rename write protects the existing mode.
-            // Append: the resulting file is everything that was there plus
-            // `content`, so size/created/modified come from a real post-append
-            // stat, MIME from the resulting file's leading bytes, and the line
-            // count streams the file — reading a multi-GB log back whole is the
-            // round-trip append exists to avoid.
-            let validPath;
-            let meta;
-            let created;
-            let modified;
-            if (append) {
-                const appended = await ctx.fs.appendFile(path, content, {
-                    signal: ctx.signal,
-                });
-                validPath = appended.validPath;
-                // The append is the commit point: the bytes are on disk, so
-                // everything below is best-effort RESULT METADATA, not part of the
-                // write. It runs unwired to ctx.signal, and a metadata failure
-                // degrades the result instead of failing it — either would report
-                // the append as failed and a client retry would append twice. The
-                // stat covers the committed validPath, never the input path: a
-                // symlink there could have been swapped between write and stat,
-                // and the result must describe the file the bytes landed in.
-                let stats;
-                let mimeType;
-                let kind;
-                let lineCount = 0;
-                try {
-                    stats = (await ctx.fs.stat(appended.validPath)).stats;
-                    // Sniff the resulting file's leading bytes, not the appended
-                    // chunk: text appended to a binary file is still a binary file.
-                    const sample = await ctx.fs.readLeadingSample(appended.validPath, MIME_SAMPLE_SIZE);
-                    const mimeInfo = detectMimeFromContent(appended.validPath, sample);
-                    mimeType = mimeInfo.mimeType;
-                    kind = mimeInfo.kind;
-                    lineCount = await countFileLines(appended.validPath);
+            // Lock per resolved file so two entries naming one file (e.g. through a
+            // symlinked parent) cannot clobber each other.
+            return ctx.fs.lockForWrite(path, async (resolvedTarget) => {
+                // The file may have appeared since the overwrite set was planned.
+                if (!append &&
+                    !overwrite &&
+                    pendingPath === undefined &&
+                    (await destExists(ctx.fs, resolvedTarget, 'create'))) {
+                    throw new FsError(ErrorCode.INVALID_INPUT, `create refused: "${path}" appeared after overwrite confirmation was checked`, path);
                 }
-                catch (error) {
-                    ctx.log('warning', `create append: result metadata degraded for ${appended.validPath}: ${formatUnknownErrorMessage(error)}`, 'create');
-                    // A POSIX mode-0222 file appends fine but cannot be opened 'r';
-                    // fall back to the chunk for MIME (an approximation) and report
-                    // the line count as unknown-as-zero rather than fail the append.
-                    const mimeInfo = detectMimeFromContent(appended.validPath, content);
-                    mimeType = mimeInfo.mimeType;
-                    kind = mimeInfo.kind;
-                }
-                // A failed stat leaves the size unknown, so nothing is advertised.
-                meta = {
-                    size: stats?.size ?? 0,
-                    lineCount,
-                    mimeType,
-                    kind,
-                    ...writtenFileLinks(appended.validPath, mimeType, stats?.size, false, stats?.mtime.toISOString()),
-                };
-                created = (stats?.birthtime ?? EPOCH).toISOString();
-                modified = (stats?.mtime ?? EPOCH).toISOString();
-            }
-            else {
-                const written = await ctx.fs.writeFile(path, content, {
-                    signal: ctx.signal,
-                });
-                validPath = written.validPath;
-                const fileStats = (await ctx.fs.stat(path, { signal: ctx.signal })).stats;
-                created = fileStats.birthtime.toISOString();
-                modified = fileStats.mtime.toISOString();
-                meta = buildWrittenFileMeta({
-                    validPath: written.validPath,
-                    content,
-                    lastModified: modified,
-                });
-            }
-            const file = {
-                path: validPath,
-                size: meta.size,
-                lineCount: meta.lineCount,
-                mimeType: meta.mimeType,
-                kind: meta.kind,
-                resourceUri: meta.resourceUri,
-                created,
-                modified,
-            };
-            return meta.resourceLink ? { file, resourceLink: meta.resourceLink } : { file };
+                return createOne(path, content, append, ctx);
+            });
         });
         const results = [];
         const failures = [];
@@ -250,4 +178,90 @@ export const CREATE = defineTool({
             : `${String(args.files.length)} files`,
     }),
 });
+async function createOne(path, content, append, ctx) {
+    await ctx.fs.mkdir(dirname(path), { recursive: true });
+    // Overwrite: file content == `content`, so content-derived meta is
+    // exact and the atomic temp+rename write protects the existing mode.
+    // Append: the resulting file is everything that was there plus
+    // `content`, so size/created/modified come from a real post-append
+    // stat, MIME from the resulting file's leading bytes, and the line
+    // count streams the file — reading a multi-GB log back whole is the
+    // round-trip append exists to avoid.
+    let validPath;
+    let meta;
+    let created;
+    let modified;
+    if (append) {
+        const appended = await ctx.fs.appendFile(path, content, {
+            signal: ctx.signal,
+        });
+        validPath = appended.validPath;
+        // The append is the commit point: the bytes are on disk, so
+        // everything below is best-effort RESULT METADATA, not part of the
+        // write. It runs unwired to ctx.signal, and a metadata failure
+        // degrades the result instead of failing it — either would report
+        // the append as failed and a client retry would append twice. The
+        // stat covers the committed validPath, never the input path: a
+        // symlink there could have been swapped between write and stat,
+        // and the result must describe the file the bytes landed in.
+        let stats;
+        let mimeType;
+        let kind;
+        let lineCount = 0;
+        try {
+            stats = (await ctx.fs.stat(appended.validPath)).stats;
+            // Sniff the resulting file's leading bytes, not the appended
+            // chunk: text appended to a binary file is still a binary file.
+            const sample = await ctx.fs.readLeadingSample(appended.validPath, MIME_SAMPLE_SIZE);
+            const mimeInfo = detectMimeFromContent(appended.validPath, sample);
+            mimeType = mimeInfo.mimeType;
+            kind = mimeInfo.kind;
+            lineCount = await countFileLines(appended.validPath);
+        }
+        catch (error) {
+            ctx.log('warning', `create append: result metadata degraded for ${appended.validPath}: ${formatUnknownErrorMessage(error)}`, 'create');
+            // A POSIX mode-0222 file appends fine but cannot be opened 'r';
+            // fall back to the chunk for MIME (an approximation) and report
+            // the line count as unknown-as-zero rather than fail the append.
+            const mimeInfo = detectMimeFromContent(appended.validPath, content);
+            mimeType = mimeInfo.mimeType;
+            kind = mimeInfo.kind;
+        }
+        // A failed stat leaves the size unknown, so nothing is advertised.
+        meta = {
+            size: stats?.size ?? 0,
+            lineCount,
+            mimeType,
+            kind,
+            ...writtenFileLinks(appended.validPath, mimeType, stats?.size, false, stats?.mtime.toISOString()),
+        };
+        created = (stats?.birthtime ?? EPOCH).toISOString();
+        modified = (stats?.mtime ?? EPOCH).toISOString();
+    }
+    else {
+        const written = await ctx.fs.writeFile(path, content, {
+            signal: ctx.signal,
+        });
+        validPath = written.validPath;
+        const fileStats = (await ctx.fs.stat(path, { signal: ctx.signal })).stats;
+        created = fileStats.birthtime.toISOString();
+        modified = fileStats.mtime.toISOString();
+        meta = buildWrittenFileMeta({
+            validPath: written.validPath,
+            content,
+            lastModified: modified,
+        });
+    }
+    const file = {
+        path: validPath,
+        size: meta.size,
+        lineCount: meta.lineCount,
+        mimeType: meta.mimeType,
+        kind: meta.kind,
+        resourceUri: meta.resourceUri,
+        created,
+        modified,
+    };
+    return meta.resourceLink ? { file, resourceLink: meta.resourceLink } : { file };
+}
 //# sourceMappingURL=create.js.map

package/dist/tools/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../src/tools/create.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,SAAS,EACT,yBAAyB,EACzB,OAAO,EAEP,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAwB,MAAM,qBAAqB,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,UAAU,EAAc,MAAM,eAAe,CAAC;AACvE,OAAO,EACL,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,qBAAqB,EAAiB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AAE1B,MAAM,oBAAoB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1C,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC3E,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,kBAAkB,EAAE,EAAE;QACnD,OAAO,EAAE,gDAAgD;KAC1D,CAAC;SACD,QAAQ,CAAC,kCAAkC,CAAC;IAC/C,MAAM,EAAE,CAAC;SACN,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,yGAAyG,CAC1G;IACH,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,wGAAwG,CACzG;CACJ,CAAC,CAAC;AAQH,MAAM,iBAAiB,GAAG,CAAC;KACxB,YAAY,CAAC;IACZ,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,oBAAoB,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,CACP,4HAA4H,CAC7H;CACJ,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,qEAAqE;IACrE,kEAAkE;IAClE,iEAAiE;IACjE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClF,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;YAClB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;gBAC9B,OAAO,EAAE,sBAAsB,MAAM,CAAC,KAAK,CAAC,4BAA4B;gBACxE,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,6EAA6E;IAC7E,2EAA2E;IAC3E,6CAA6C;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,uBAAuB,MAAM,CAAC,KAAK,CAAC,gDAAgD,MAAM,CAAC,KAAK,CAAC,uCAAuC;YACjJ,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAaL,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,CAAyC;IACvE,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,yGAAyG;QACzG,iDAAiD;IACnD,KAAK,EAAE,iBAAiB;IACxB,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAClD,IAAI,CAAC,KAAK,EACV,KAAK,EAAE,KAAK,EAAE,EAAE;YACd,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS;gBAAE,OAAO,SAAS,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1E,OAAO,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACxB,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC,EACD,oBAAoB,EACpB,GAAG,CAAC,MAAM,CACX,CAAC;QACF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;QAChD,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;YAC1C,IAAI,KAAK,IAAI,SAAS;gBAAE,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,wEAAwE;YACxE,8DAA8D;YAC9D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;gBACxC,EAAE,EAAE,QAAQ;gBACZ,OAAO,EAAE,aAAa;gBACtB,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;oBACxB,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;oBAClB,OAAO,EAAE,IAAI,MAAM,iCAAiC;oBACpD,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC/B,CAAC,CAAC;aACN,CAAC,CAAC;YACH,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;QACxC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAG9B,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;YACxE,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;gBAC3D,IAAI,MAAM,KAAK,MAAM;oBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAChD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;oBAC3B,MAAM,IAAI,OAAO,CACf,SAAS,CAAC,SAAS,EACnB,mCAAmC,IAAI,SAAS,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAC3E,IAAI,CACL,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEvD,mEAAmE;YACnE,qEAAqE;YACrE,+DAA+D;YAC/D,mEAAmE;YACnE,mEAAmE;YACnE,oEAAoE;YACpE,qCAAqC;YACrC,IAAI,SAAiB,CAAC;YACtB,IAAI,IAAqB,CAAC;YAC1B,IAAI,OAAe,CAAC;YACpB,IAAI,QAAgB,CAAC;YACrB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE;oBACtD,MAAM,EAAE,GAAG,CAAC,MAAM;iBACnB,CAAC,CAAC;gBACH,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;gBAC/B,4DAA4D;gBAC5D,mEAAmE;gBACnE,+DAA+D;gBAC/D,kEAAkE;gBAClE,kEAAkE;gBAClE,+DAA+D;gBAC/D,gEAAgE;gBAChE,6DAA6D;gBAC7D,IAAI,KAAwB,CAAC;gBAC7B,IAAI,QAAgB,CAAC;gBACrB,IAAI,IAAc,CAAC;gBACnB,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClB,IAAI,CAAC;oBACH,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;oBACtD,6DAA6D;oBAC7D,gEAAgE;oBAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;oBACpF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBACnE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;oBAC7B,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;oBACrB,SAAS,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACvD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,GAAG,CACL,SAAS,EACT,+CAA+C,QAAQ,CAAC,SAAS,KAAK,yBAAyB,CAAC,KAAK,CAAC,EAAE,EACxG,QAAQ,CACT,CAAC;oBACF,gEAAgE;oBAChE,gEAAgE;oBAChE,iEAAiE;oBACjE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;oBACpE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;oBAC7B,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;gBACvB,CAAC;gBACD,mEAAmE;gBACnE,IAAI,GAAG;oBACL,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;oBACtB,SAAS;oBACT,QAAQ;oBACR,IAAI;oBACJ,GAAG,gBAAgB,CACjB,QAAQ,CAAC,SAAS,EAClB,QAAQ,EACR,KAAK,EAAE,IAAI,EACX,KAAK,EACL,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAC3B;iBACF,CAAC;gBACF,OAAO,GAAG,CAAC,KAAK,EAAE,SAAS,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBACpD,QAAQ,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE;oBACpD,MAAM,EAAE,GAAG,CAAC,MAAM;iBACnB,CAAC,CAAC;gBACH,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;gBAC9B,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;gBAC1E,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC5C,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBACzC,IAAI,GAAG,oBAAoB,CAAC;oBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,OAAO;oBACP,YAAY,EAAE,QAAQ;iBACvB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAqB;gBAC7B,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,OAAO;gBACP,QAAQ;aACT,CAAC;YAEF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAClF,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAwB,EAAE,CAAC;QACzC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChD,SAAS;YACX,CAAC;YACD,IAAI,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,UAAU,GAAG;YACjB,KAAK,EAAE,OAAO;YACd,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C,CAAC;QACF,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,oEAAoE;QACpE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClF,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,CAAC;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnB,KAAK,EAAE,QAAQ;QACf,OAAO,EACL,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YACrC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ;KAC3C,CAAC;CACH,CAAC,CAAC","sourcesContent":["import type { ContentBlock } from '@modelcontextprotocol/server';\n\nimport { basename, dirname } from 'node:path';\n\nimport * as z from 'zod/v4';\n\nimport { processInParallel } from '../core/concurrency.ts';\nimport {\n  ErrorCode,\n  formatUnknownErrorMessage,\n  FsError,\n  type Problem,\n  rethrowIfAborted,\n} from '../core/errors.ts';\nimport { buildWrittenFileMeta, writtenFileLinks, type WrittenFileMeta } from '../core/file-uri.ts';\nimport { countFileLines, destExists, type Stats } from '../core/fs.ts';\nimport {\n  confirmKey,\n  describeRefusal,\n  pendingRoundTrip,\n  readAcceptedChoice,\n} from '../core/input-required.ts';\nimport { detectMimeFromContent, type FileKind, MIME_SAMPLE_SIZE } from '../core/mime.ts';\nimport { isSamePath } from '../core/path-utils.ts';\nimport { RequiredPath } from '../core/schema.ts';\nimport { getMaxTextFileSize, PARALLEL_CONCURRENCY } from '../core/util.ts';\nimport { isTotalFailure, runOverPaths } from './batch.ts';\nimport { defineTool } from './define.ts';\n\nconst EPOCH = new Date(0);\n\nconst CreateFileItemSchema = z.strictObject({\n  path: RequiredPath.describe('Absolute path where the file will be created'),\n  content: z\n    .string()\n    .refine((val) => val.length <= getMaxTextFileSize(), {\n      message: 'Content exceeds maximum allowed text file size',\n    })\n    .describe('Text content to write, verbatim.'),\n  append: z\n    .boolean()\n    .optional()\n    .describe(\n      'Append the content to the end of the file instead of overwriting; creates the file if it does not exist',\n    ),\n  overwrite: z\n    .boolean()\n    .optional()\n    .describe(\n      'Replace an existing file without asking the user; without it an existing file prompts for confirmation',\n    ),\n});\n\ntype CreateFileResult = Omit<WrittenFileMeta, 'resourceLink'> & {\n  path: string;\n  created: string;\n  modified: string;\n};\n\nconst CreateInputSchema = z\n  .strictObject({\n    files: z\n      .array(CreateFileItemSchema)\n      .min(1)\n      .max(100)\n      .describe(\n        'List of files to create (max 100); each entry requires path and content; combined content is capped at the file-size limit',\n      ),\n  })\n  .superRefine((value, ctx) => {\n    // Entries write in parallel and each replaces its file whole, so two\n    // entries for one path race: the last rename wins and the other's\n    // content is lost while both report success. One entry per file.\n    for (const [index, file] of value.files.entries()) {\n      const first = value.files.findIndex((other) => isSamePath(other.path, file.path));\n      if (first < index) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['files', index, 'path'],\n          message: `duplicate of files[${String(first)}].path; one entry per file`,\n          input: value,\n        });\n      }\n    }\n    // One call's content is what one inbound message carries; the transports\n    // size their message bound from this same limit (getMaxInboundMessageBytes),\n    // so a batch that passes here always fits on the wire. Counted in the same\n    // UTF-16 units as the per-file refine above.\n    const total = value.files.reduce((sum, file) => sum + file.content.length, 0);\n    const limit = getMaxTextFileSize();\n    if (total > limit) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['files'],\n        message: `combined content is ${String(total)} characters; one create call carries at most ${String(limit)} (FS_MAX_FILE_SIZE). Split the batch.`,\n        input: value,\n      });\n    }\n  });\n\ninterface CreateFailureItem {\n  path: string;\n  error: Problem;\n}\n\ninterface CreateOutput {\n  files: CreateFileResult[];\n  failures?: CreateFailureItem[];\n  skipped?: string[];\n}\n\nexport const CREATE = defineTool<typeof CreateInputSchema, CreateOutput>({\n  name: 'create',\n  title: 'Create Files',\n  description:\n    'Write whole text files: create new ones, overwrite, or append. Missing parent directories are created. ' +\n    'edit or patch changes part of an existing file.',\n  input: CreateInputSchema,\n  readOnlyHint: false,\n  accessPaths: (args) => args.files.map((f) => f.path),\n  run: async (args, ctx) => {\n    // Phase 1 (no mutation): which entries would replace a file that exists\n    // right now? Those need the user's word before anything is written (R14).\n    // append never destroys, and overwrite: true is that word given up front.\n    // A path that fails validation here is left for runOverPaths to report.\n    // A file that appears between rounds needs no re-stat before the write:\n    // the retry re-plans, and the grown pending set fails the R9 check.\n    const { results: planned } = await processInParallel(\n      args.files,\n      async (entry) => {\n        if (entry.append || entry.overwrite) return undefined;\n        try {\n          const validPath = await ctx.fs.pathGuard.validatePathForWrite(entry.path);\n          return (await destExists(ctx.fs, validPath, 'create')) ? validPath : undefined;\n        } catch (error) {\n          rethrowIfAborted(error);\n          return undefined;\n        }\n      },\n      PARALLEL_CONCURRENCY,\n      ctx.signal,\n    );\n    const pendingByPath = new Map<string, string>();\n    for (const { index, value } of planned) {\n      const requested = args.files[index]?.path;\n      if (value && requested) pendingByPath.set(requested, value);\n    }\n    const pendingSorted = [...new Set(pendingByPath.values())].sort();\n    if (pendingSorted.length > 0) {\n      // Round 1 returns input_required; a retry whose verified state does not\n      // bind this overwrite set throws (R9) via `pendingRoundTrip`.\n      const round = await pendingRoundTrip(ctx, {\n        op: 'create',\n        pending: pendingSorted,\n        buildInputs: (paths) =>\n          paths.map((target, i) => ({\n            key: confirmKey(i),\n            message: `\"${target}\" already exists. Overwrite it?`,\n            choices: ['overwrite', 'skip'],\n          })),\n      });\n      if (round !== undefined) return round;\n    }\n\n    const batch = await runOverPaths<\n      z.infer<typeof CreateFileItemSchema>,\n      { file: CreateFileResult; resourceLink?: ContentBlock } | { skipped: string }\n    >(args.files, ctx, ErrorCode.UNKNOWN, async ({ path, content, append }) => {\n      const pendingPath = pendingByPath.get(path);\n      if (pendingPath !== undefined) {\n        const key = confirmKey(pendingSorted.indexOf(pendingPath));\n        const choice = readAcceptedChoice(ctx.inputResponses, key);\n        if (choice === 'skip') return { skipped: path };\n        if (choice !== 'overwrite') {\n          throw new FsError(\n            ErrorCode.CANCELLED,\n            `create cancelled: overwrite of \"${path}\" was ${describeRefusal(ctx, key)}`,\n            path,\n          );\n        }\n      }\n\n      await ctx.fs.mkdir(dirname(path), { recursive: true });\n\n      // Overwrite: file content == `content`, so content-derived meta is\n      // exact and the atomic temp+rename write protects the existing mode.\n      // Append: the resulting file is everything that was there plus\n      // `content`, so size/created/modified come from a real post-append\n      // stat, MIME from the resulting file's leading bytes, and the line\n      // count streams the file — reading a multi-GB log back whole is the\n      // round-trip append exists to avoid.\n      let validPath: string;\n      let meta: WrittenFileMeta;\n      let created: string;\n      let modified: string;\n      if (append) {\n        const appended = await ctx.fs.appendFile(path, content, {\n          signal: ctx.signal,\n        });\n        validPath = appended.validPath;\n        // The append is the commit point: the bytes are on disk, so\n        // everything below is best-effort RESULT METADATA, not part of the\n        // write. It runs unwired to ctx.signal, and a metadata failure\n        // degrades the result instead of failing it — either would report\n        // the append as failed and a client retry would append twice. The\n        // stat covers the committed validPath, never the input path: a\n        // symlink there could have been swapped between write and stat,\n        // and the result must describe the file the bytes landed in.\n        let stats: Stats | undefined;\n        let mimeType: string;\n        let kind: FileKind;\n        let lineCount = 0;\n        try {\n          stats = (await ctx.fs.stat(appended.validPath)).stats;\n          // Sniff the resulting file's leading bytes, not the appended\n          // chunk: text appended to a binary file is still a binary file.\n          const sample = await ctx.fs.readLeadingSample(appended.validPath, MIME_SAMPLE_SIZE);\n          const mimeInfo = detectMimeFromContent(appended.validPath, sample);\n          mimeType = mimeInfo.mimeType;\n          kind = mimeInfo.kind;\n          lineCount = await countFileLines(appended.validPath);\n        } catch (error) {\n          ctx.log(\n            'warning',\n            `create append: result metadata degraded for ${appended.validPath}: ${formatUnknownErrorMessage(error)}`,\n            'create',\n          );\n          // A POSIX mode-0222 file appends fine but cannot be opened 'r';\n          // fall back to the chunk for MIME (an approximation) and report\n          // the line count as unknown-as-zero rather than fail the append.\n          const mimeInfo = detectMimeFromContent(appended.validPath, content);\n          mimeType = mimeInfo.mimeType;\n          kind = mimeInfo.kind;\n        }\n        // A failed stat leaves the size unknown, so nothing is advertised.\n        meta = {\n          size: stats?.size ?? 0,\n          lineCount,\n          mimeType,\n          kind,\n          ...writtenFileLinks(\n            appended.validPath,\n            mimeType,\n            stats?.size,\n            false,\n            stats?.mtime.toISOString(),\n          ),\n        };\n        created = (stats?.birthtime ?? EPOCH).toISOString();\n        modified = (stats?.mtime ?? EPOCH).toISOString();\n      } else {\n        const written = await ctx.fs.writeFile(path, content, {\n          signal: ctx.signal,\n        });\n        validPath = written.validPath;\n        const fileStats = (await ctx.fs.stat(path, { signal: ctx.signal })).stats;\n        created = fileStats.birthtime.toISOString();\n        modified = fileStats.mtime.toISOString();\n        meta = buildWrittenFileMeta({\n          validPath: written.validPath,\n          content,\n          lastModified: modified,\n        });\n      }\n\n      const file: CreateFileResult = {\n        path: validPath,\n        size: meta.size,\n        lineCount: meta.lineCount,\n        mimeType: meta.mimeType,\n        kind: meta.kind,\n        resourceUri: meta.resourceUri,\n        created,\n        modified,\n      };\n\n      return meta.resourceLink ? { file, resourceLink: meta.resourceLink } : { file };\n    });\n\n    const results: CreateFileResult[] = [];\n    const failures: CreateFailureItem[] = [];\n    const skipped: string[] = [];\n    const links: ContentBlock[] = [];\n    for (const r of batch.results) {\n      if ('error' in r) {\n        failures.push({ path: r.path, error: r.error });\n        continue;\n      }\n      if ('skipped' in r.value) {\n        skipped.push(r.value.skipped);\n        continue;\n      }\n      results.push(r.value.file);\n      if (r.value.resourceLink) links.push(r.value.resourceLink);\n    }\n\n    const structured = {\n      files: results,\n      ...(failures.length > 0 ? { failures } : {}),\n      ...(skipped.length > 0 ? { skipped } : {}),\n    };\n    // No `text` on purpose. The one-line roster this used to build named the\n    // paths and dropped every per-file size, line count and error the caller\n    // asked `create` for. Supplying no text makes this a data tool, so\n    // `define.ts` renders the JSON and keeps it in `structuredContent`.\n    if (links.length > 0) {\n      return { structured, resources: links, isError: isTotalFailure(batch.summary) };\n    }\n\n    return { structured, isError: isTotalFailure(batch.summary) };\n  },\n  progress: (args) => ({\n    label: 'Create',\n    subject:\n      args.files.length === 1\n        ? basename(args.files[0]?.path ?? '')\n        : `${String(args.files.length)} files`,\n  }),\n});\n"]}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../src/tools/create.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,SAAS,EACT,yBAAyB,EACzB,OAAO,EAEP,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAwB,MAAM,qBAAqB,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,UAAU,EAAc,MAAM,eAAe,CAAC;AACvE,OAAO,EACL,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,qBAAqB,EAAiB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAgB,MAAM,aAAa,CAAC;AAEvD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AAE1B,MAAM,oBAAoB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1C,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC3E,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,kBAAkB,EAAE,EAAE;QACnD,OAAO,EAAE,gDAAgD;KAC1D,CAAC;SACD,QAAQ,CAAC,kCAAkC,CAAC;IAC/C,MAAM,EAAE,CAAC;SACN,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,yGAAyG,CAC1G;IACH,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,wGAAwG,CACzG;CACJ,CAAC,CAAC;AAQH,MAAM,iBAAiB,GAAG,CAAC;KACxB,YAAY,CAAC;IACZ,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,oBAAoB,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,CACP,4HAA4H,CAC7H;CACJ,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,qEAAqE;IACrE,kEAAkE;IAClE,iEAAiE;IACjE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClF,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;YAClB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;gBAC9B,OAAO,EAAE,sBAAsB,MAAM,CAAC,KAAK,CAAC,4BAA4B;gBACxE,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,6EAA6E;IAC7E,2EAA2E;IAC3E,6CAA6C;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,uBAAuB,MAAM,CAAC,KAAK,CAAC,gDAAgD,MAAM,CAAC,KAAK,CAAC,uCAAuC;YACjJ,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAaL,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,CAAyC;IACvE,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,yGAAyG;QACzG,iDAAiD;IACnD,KAAK,EAAE,iBAAiB;IACxB,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAClD,IAAI,CAAC,KAAK,EACV,KAAK,EAAE,KAAK,EAAE,EAAE;YACd,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS;gBAAE,OAAO,SAAS,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1E,OAAO,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACxB,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC,EACD,oBAAoB,EACpB,GAAG,CAAC,MAAM,CACX,CAAC;QACF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;QAChD,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;YAC1C,IAAI,KAAK,IAAI,SAAS;gBAAE,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,wEAAwE;YACxE,8DAA8D;YAC9D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;gBACxC,EAAE,EAAE,QAAQ;gBACZ,OAAO,EAAE,aAAa;gBACtB,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;oBACxB,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;oBAClB,OAAO,EAAE,IAAI,MAAM,iCAAiC;oBACpD,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC/B,CAAC,CAAC;aACN,CAAC,CAAC;YACH,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;QACxC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAG9B,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;YACnF,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;gBAC3D,IAAI,MAAM,KAAK,MAAM;oBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAChD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;oBAC3B,MAAM,IAAI,OAAO,CACf,SAAS,CAAC,SAAS,EACnB,mCAAmC,IAAI,SAAS,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAC3E,IAAI,CACL,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,wEAAwE;YACxE,+CAA+C;YAC/C,OAAO,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;gBACxD,kEAAkE;gBAClE,IACE,CAAC,MAAM;oBACP,CAAC,SAAS;oBACV,WAAW,KAAK,SAAS;oBACzB,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,EACpD,CAAC;oBACD,MAAM,IAAI,OAAO,CACf,SAAS,CAAC,aAAa,EACvB,oBAAoB,IAAI,qDAAqD,EAC7E,IAAI,CACL,CAAC;gBACJ,CAAC;gBACD,OAAO,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAwB,EAAE,CAAC;QACzC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChD,SAAS;YACX,CAAC;YACD,IAAI,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,UAAU,GAAG;YACjB,KAAK,EAAE,OAAO;YACd,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C,CAAC;QACF,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,oEAAoE;QACpE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClF,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,CAAC;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnB,KAAK,EAAE,QAAQ;QACf,OAAO,EACL,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YACrC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ;KAC3C,CAAC;CACH,CAAC,CAAC;AAEH,KAAK,UAAU,SAAS,CACtB,IAAY,EACZ,OAAe,EACf,MAA2B,EAC3B,GAAY;IAEZ,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvD,mEAAmE;IACnE,qEAAqE;IACrE,+DAA+D;IAC/D,mEAAmE;IACnE,mEAAmE;IACnE,oEAAoE;IACpE,qCAAqC;IACrC,IAAI,SAAiB,CAAC;IACtB,IAAI,IAAqB,CAAC;IAC1B,IAAI,OAAe,CAAC;IACpB,IAAI,QAAgB,CAAC;IACrB,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE;YACtD,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;QACH,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC/B,4DAA4D;QAC5D,mEAAmE;QACnE,+DAA+D;QAC/D,kEAAkE;QAClE,kEAAkE;QAClE,+DAA+D;QAC/D,gEAAgE;QAChE,6DAA6D;QAC7D,IAAI,KAAwB,CAAC;QAC7B,IAAI,QAAgB,CAAC;QACrB,IAAI,IAAc,CAAC;QACnB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;YACtD,6DAA6D;YAC7D,gEAAgE;YAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;YACpF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACnE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAC7B,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YACrB,SAAS,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,GAAG,CACL,SAAS,EACT,+CAA+C,QAAQ,CAAC,SAAS,KAAK,yBAAyB,CAAC,KAAK,CAAC,EAAE,EACxG,QAAQ,CACT,CAAC;YACF,gEAAgE;YAChE,gEAAgE;YAChE,iEAAiE;YACjE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACpE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAC7B,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QACD,mEAAmE;QACnE,IAAI,GAAG;YACL,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;YACtB,SAAS;YACT,QAAQ;YACR,IAAI;YACJ,GAAG,gBAAgB,CACjB,QAAQ,CAAC,SAAS,EAClB,QAAQ,EACR,KAAK,EAAE,IAAI,EACX,KAAK,EACL,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAC3B;SACF,CAAC;QACF,OAAO,GAAG,CAAC,KAAK,EAAE,SAAS,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,QAAQ,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE;YACpD,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;QACH,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAC9B,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC1E,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAC5C,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,GAAG,oBAAoB,CAAC;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO;YACP,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAqB;QAC7B,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO;QACP,QAAQ;KACT,CAAC;IAEF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AAClF,CAAC","sourcesContent":["import type { ContentBlock } from '@modelcontextprotocol/server';\n\nimport { basename, dirname } from 'node:path';\n\nimport * as z from 'zod/v4';\n\nimport { processInParallel } from '../core/concurrency.ts';\nimport {\n  ErrorCode,\n  formatUnknownErrorMessage,\n  FsError,\n  type Problem,\n  rethrowIfAborted,\n} from '../core/errors.ts';\nimport { buildWrittenFileMeta, writtenFileLinks, type WrittenFileMeta } from '../core/file-uri.ts';\nimport { countFileLines, destExists, type Stats } from '../core/fs.ts';\nimport {\n  confirmKey,\n  describeRefusal,\n  pendingRoundTrip,\n  readAcceptedChoice,\n} from '../core/input-required.ts';\nimport { detectMimeFromContent, type FileKind, MIME_SAMPLE_SIZE } from '../core/mime.ts';\nimport { isSamePath } from '../core/path-utils.ts';\nimport { RequiredPath } from '../core/schema.ts';\nimport { getMaxTextFileSize, PARALLEL_CONCURRENCY } from '../core/util.ts';\nimport { isTotalFailure, runOverPaths } from './batch.ts';\nimport { defineTool, type ToolCtx } from './define.ts';\n\nconst EPOCH = new Date(0);\n\nconst CreateFileItemSchema = z.strictObject({\n  path: RequiredPath.describe('Absolute path where the file will be created'),\n  content: z\n    .string()\n    .refine((val) => val.length <= getMaxTextFileSize(), {\n      message: 'Content exceeds maximum allowed text file size',\n    })\n    .describe('Text content to write, verbatim.'),\n  append: z\n    .boolean()\n    .optional()\n    .describe(\n      'Append the content to the end of the file instead of overwriting; creates the file if it does not exist',\n    ),\n  overwrite: z\n    .boolean()\n    .optional()\n    .describe(\n      'Replace an existing file without asking the user; without it an existing file prompts for confirmation',\n    ),\n});\n\ntype CreateFileResult = Omit<WrittenFileMeta, 'resourceLink'> & {\n  path: string;\n  created: string;\n  modified: string;\n};\n\nconst CreateInputSchema = z\n  .strictObject({\n    files: z\n      .array(CreateFileItemSchema)\n      .min(1)\n      .max(100)\n      .describe(\n        'List of files to create (max 100); each entry requires path and content; combined content is capped at the file-size limit',\n      ),\n  })\n  .superRefine((value, ctx) => {\n    // Entries write in parallel and each replaces its file whole, so two\n    // entries for one path race: the last rename wins and the other's\n    // content is lost while both report success. One entry per file.\n    for (const [index, file] of value.files.entries()) {\n      const first = value.files.findIndex((other) => isSamePath(other.path, file.path));\n      if (first < index) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['files', index, 'path'],\n          message: `duplicate of files[${String(first)}].path; one entry per file`,\n          input: value,\n        });\n      }\n    }\n    // One call's content is what one inbound message carries; the transports\n    // size their message bound from this same limit (getMaxInboundMessageBytes),\n    // so a batch that passes here always fits on the wire. Counted in the same\n    // UTF-16 units as the per-file refine above.\n    const total = value.files.reduce((sum, file) => sum + file.content.length, 0);\n    const limit = getMaxTextFileSize();\n    if (total > limit) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['files'],\n        message: `combined content is ${String(total)} characters; one create call carries at most ${String(limit)} (FS_MAX_FILE_SIZE). Split the batch.`,\n        input: value,\n      });\n    }\n  });\n\ninterface CreateFailureItem {\n  path: string;\n  error: Problem;\n}\n\ninterface CreateOutput {\n  files: CreateFileResult[];\n  failures?: CreateFailureItem[];\n  skipped?: string[];\n}\n\nexport const CREATE = defineTool<typeof CreateInputSchema, CreateOutput>({\n  name: 'create',\n  title: 'Create Files',\n  description:\n    'Write whole text files: create new ones, overwrite, or append. Missing parent directories are created. ' +\n    'edit or patch changes part of an existing file.',\n  input: CreateInputSchema,\n  readOnlyHint: false,\n  accessPaths: (args) => args.files.map((f) => f.path),\n  run: async (args, ctx) => {\n    // Phase 1 (no mutation): which entries would replace a file that exists\n    // right now? Those need the user's word before anything is written (R14).\n    // append never destroys, and overwrite: true is that word given up front.\n    // A path that fails validation here is left for runOverPaths to report.\n    // A file that appears between rounds needs no re-stat before the write:\n    // the retry re-plans, and the grown pending set fails the R9 check.\n    const { results: planned } = await processInParallel(\n      args.files,\n      async (entry) => {\n        if (entry.append || entry.overwrite) return undefined;\n        try {\n          const validPath = await ctx.fs.pathGuard.validatePathForWrite(entry.path);\n          return (await destExists(ctx.fs, validPath, 'create')) ? validPath : undefined;\n        } catch (error) {\n          rethrowIfAborted(error);\n          return undefined;\n        }\n      },\n      PARALLEL_CONCURRENCY,\n      ctx.signal,\n    );\n    const pendingByPath = new Map<string, string>();\n    for (const { index, value } of planned) {\n      const requested = args.files[index]?.path;\n      if (value && requested) pendingByPath.set(requested, value);\n    }\n    const pendingSorted = [...new Set(pendingByPath.values())].sort();\n    if (pendingSorted.length > 0) {\n      // Round 1 returns input_required; a retry whose verified state does not\n      // bind this overwrite set throws (R9) via `pendingRoundTrip`.\n      const round = await pendingRoundTrip(ctx, {\n        op: 'create',\n        pending: pendingSorted,\n        buildInputs: (paths) =>\n          paths.map((target, i) => ({\n            key: confirmKey(i),\n            message: `\"${target}\" already exists. Overwrite it?`,\n            choices: ['overwrite', 'skip'],\n          })),\n      });\n      if (round !== undefined) return round;\n    }\n\n    const batch = await runOverPaths<\n      z.infer<typeof CreateFileItemSchema>,\n      { file: CreateFileResult; resourceLink?: ContentBlock } | { skipped: string }\n    >(args.files, ctx, ErrorCode.UNKNOWN, async ({ path, content, append, overwrite }) => {\n      const pendingPath = pendingByPath.get(path);\n      if (pendingPath !== undefined) {\n        const key = confirmKey(pendingSorted.indexOf(pendingPath));\n        const choice = readAcceptedChoice(ctx.inputResponses, key);\n        if (choice === 'skip') return { skipped: path };\n        if (choice !== 'overwrite') {\n          throw new FsError(\n            ErrorCode.CANCELLED,\n            `create cancelled: overwrite of \"${path}\" was ${describeRefusal(ctx, key)}`,\n            path,\n          );\n        }\n      }\n\n      // Lock per resolved file so two entries naming one file (e.g. through a\n      // symlinked parent) cannot clobber each other.\n      return ctx.fs.lockForWrite(path, async (resolvedTarget) => {\n        // The file may have appeared since the overwrite set was planned.\n        if (\n          !append &&\n          !overwrite &&\n          pendingPath === undefined &&\n          (await destExists(ctx.fs, resolvedTarget, 'create'))\n        ) {\n          throw new FsError(\n            ErrorCode.INVALID_INPUT,\n            `create refused: \"${path}\" appeared after overwrite confirmation was checked`,\n            path,\n          );\n        }\n        return createOne(path, content, append, ctx);\n      });\n    });\n\n    const results: CreateFileResult[] = [];\n    const failures: CreateFailureItem[] = [];\n    const skipped: string[] = [];\n    const links: ContentBlock[] = [];\n    for (const r of batch.results) {\n      if ('error' in r) {\n        failures.push({ path: r.path, error: r.error });\n        continue;\n      }\n      if ('skipped' in r.value) {\n        skipped.push(r.value.skipped);\n        continue;\n      }\n      results.push(r.value.file);\n      if (r.value.resourceLink) links.push(r.value.resourceLink);\n    }\n\n    const structured = {\n      files: results,\n      ...(failures.length > 0 ? { failures } : {}),\n      ...(skipped.length > 0 ? { skipped } : {}),\n    };\n    // No `text` on purpose. The one-line roster this used to build named the\n    // paths and dropped every per-file size, line count and error the caller\n    // asked `create` for. Supplying no text makes this a data tool, so\n    // `define.ts` renders the JSON and keeps it in `structuredContent`.\n    if (links.length > 0) {\n      return { structured, resources: links, isError: isTotalFailure(batch.summary) };\n    }\n\n    return { structured, isError: isTotalFailure(batch.summary) };\n  },\n  progress: (args) => ({\n    label: 'Create',\n    subject:\n      args.files.length === 1\n        ? basename(args.files[0]?.path ?? '')\n        : `${String(args.files.length)} files`,\n  }),\n});\n\nasync function createOne(\n  path: string,\n  content: string,\n  append: boolean | undefined,\n  ctx: ToolCtx,\n): Promise<{ file: CreateFileResult; resourceLink?: ContentBlock }> {\n  await ctx.fs.mkdir(dirname(path), { recursive: true });\n\n  // Overwrite: file content == `content`, so content-derived meta is\n  // exact and the atomic temp+rename write protects the existing mode.\n  // Append: the resulting file is everything that was there plus\n  // `content`, so size/created/modified come from a real post-append\n  // stat, MIME from the resulting file's leading bytes, and the line\n  // count streams the file — reading a multi-GB log back whole is the\n  // round-trip append exists to avoid.\n  let validPath: string;\n  let meta: WrittenFileMeta;\n  let created: string;\n  let modified: string;\n  if (append) {\n    const appended = await ctx.fs.appendFile(path, content, {\n      signal: ctx.signal,\n    });\n    validPath = appended.validPath;\n    // The append is the commit point: the bytes are on disk, so\n    // everything below is best-effort RESULT METADATA, not part of the\n    // write. It runs unwired to ctx.signal, and a metadata failure\n    // degrades the result instead of failing it — either would report\n    // the append as failed and a client retry would append twice. The\n    // stat covers the committed validPath, never the input path: a\n    // symlink there could have been swapped between write and stat,\n    // and the result must describe the file the bytes landed in.\n    let stats: Stats | undefined;\n    let mimeType: string;\n    let kind: FileKind;\n    let lineCount = 0;\n    try {\n      stats = (await ctx.fs.stat(appended.validPath)).stats;\n      // Sniff the resulting file's leading bytes, not the appended\n      // chunk: text appended to a binary file is still a binary file.\n      const sample = await ctx.fs.readLeadingSample(appended.validPath, MIME_SAMPLE_SIZE);\n      const mimeInfo = detectMimeFromContent(appended.validPath, sample);\n      mimeType = mimeInfo.mimeType;\n      kind = mimeInfo.kind;\n      lineCount = await countFileLines(appended.validPath);\n    } catch (error) {\n      ctx.log(\n        'warning',\n        `create append: result metadata degraded for ${appended.validPath}: ${formatUnknownErrorMessage(error)}`,\n        'create',\n      );\n      // A POSIX mode-0222 file appends fine but cannot be opened 'r';\n      // fall back to the chunk for MIME (an approximation) and report\n      // the line count as unknown-as-zero rather than fail the append.\n      const mimeInfo = detectMimeFromContent(appended.validPath, content);\n      mimeType = mimeInfo.mimeType;\n      kind = mimeInfo.kind;\n    }\n    // A failed stat leaves the size unknown, so nothing is advertised.\n    meta = {\n      size: stats?.size ?? 0,\n      lineCount,\n      mimeType,\n      kind,\n      ...writtenFileLinks(\n        appended.validPath,\n        mimeType,\n        stats?.size,\n        false,\n        stats?.mtime.toISOString(),\n      ),\n    };\n    created = (stats?.birthtime ?? EPOCH).toISOString();\n    modified = (stats?.mtime ?? EPOCH).toISOString();\n  } else {\n    const written = await ctx.fs.writeFile(path, content, {\n      signal: ctx.signal,\n    });\n    validPath = written.validPath;\n    const fileStats = (await ctx.fs.stat(path, { signal: ctx.signal })).stats;\n    created = fileStats.birthtime.toISOString();\n    modified = fileStats.mtime.toISOString();\n    meta = buildWrittenFileMeta({\n      validPath: written.validPath,\n      content,\n      lastModified: modified,\n    });\n  }\n\n  const file: CreateFileResult = {\n    path: validPath,\n    size: meta.size,\n    lineCount: meta.lineCount,\n    mimeType: meta.mimeType,\n    kind: meta.kind,\n    resourceUri: meta.resourceUri,\n    created,\n    modified,\n  };\n\n  return meta.resourceLink ? { file, resourceLink: meta.resourceLink } : { file };\n}\n"]}

package/dist/tools/define.d.ts

@@ -59,6 +59,8 @@ export interface ToolCtx {
     readonly clientCapabilities?: ClientCapabilities | undefined;
     /** The SDK request context this call runs under; `pendingRoundTrip` binds minted state to it. */
     readonly serverCtx: ServerContext;
+    /** `stdio` alone has a 10 MiB frame limit; unset on HTTP and the in-memory test pair. */
+    readonly transport?: 'stdio' | 'http' | undefined;
 }
 interface ToolDeps {
     readonly server: McpServer;
@@ -66,6 +68,7 @@ interface ToolDeps {
     readonly pageStore: PageSnapshotStore;
     readonly resourceStore: ResourceStore;
     readonly era?: 'legacy' | 'modern';
+    readonly transport?: 'stdio' | 'http';
 }
 interface RunResult<T> {
     readonly structured: T;

package/dist/tools/define.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../src/tools/define.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,EACT,WAAW,EACX,oBAAoB,EACpB,aAAa,EAGd,MAAM,8BAA8B,CAAC;AAOtC,OAAO,KAAK,KAAK,CAAC,MAAM,QAAQ,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAsC,MAAM,mBAAmB,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAQlD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGzE,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACzC,wFAAwF;IACxF,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5E,QAAQ,CAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC3E;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC9D;;;;;OAKG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAClE;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACzD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC7D,iGAAiG;IACjG,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;CACnC;AAED,UAAU,QAAQ;IAChB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACpC;AAED,UAAU,SAAS,CAAC,CAAC;IACnB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,MAAM;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;IACtD,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,MAAM,EAAE,CAAC;IAC/D,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC;CAC/F;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,cAAc,CAAC;CAC1C;AAwPD,wBAAgB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,WAAW,CA0CjG"}
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../src/tools/define.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,EACT,WAAW,EACX,oBAAoB,EACpB,aAAa,EAGd,MAAM,8BAA8B,CAAC;AAOtC,OAAO,KAAK,KAAK,CAAC,MAAM,QAAQ,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAsC,MAAM,mBAAmB,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAQlD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGzE,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACzC,wFAAwF;IACxF,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5E,QAAQ,CAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC3E;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC9D;;;;;OAKG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAClE;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACzD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC7D,iGAAiG;IACjG,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,yFAAyF;IACzF,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;CACnD;AAED,UAAU,QAAQ;IAChB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CACvC;AAED,UAAU,SAAS,CAAC,CAAC;IACnB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,MAAM;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;IACtD,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,MAAM,EAAE,CAAC;IAC/D,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC;CAC/F;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,cAAc,CAAC;CAC1C;AA4PD,wBAAgB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,WAAW,CA0CjG"}

package/dist/tools/define.js

@@ -47,6 +47,7 @@ function toToolCtx(ctx, deps) {
         requestState: ctx.mcpReq.requestState,
         serverCtx: ctx,
         ...(clientCapabilities ? { clientCapabilities } : {}),
+        ...(deps.transport ? { transport: deps.transport } : {}),
     };
 }
 /**

package/dist/tools/define.js.map

@@ -1 +1 @@
-{"version":3,"file":"define.js","sourceRoot":"","sources":["../../src/tools/define.ts"],"names":[],"mappings":"AAeA,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AAItC,OAAO,EAAE,SAAS,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAElF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAwGhD,SAAS,SAAS,CAChB,GAAkB,EAClB,IAAoF;IAEpF,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,4BAA4B;IAC5B,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,QAA+C,CAAC;IAC5E,MAAM,kBAAkB,GACrB,QAAQ,EAAE,CAAC,4BAA4B,CAAoC;QAC5E,wJAAwJ;QACxJ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE;QAC1C,kEAAkE;QAClE,uEAAuE;QACvE,sEAAsE;QACtE,qEAAqE;QACrE,2EAA2E;QAC3E,qFAAqF;QACrF,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAE3C,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QACzB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;QACxB,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,oBAAoB,CAAC,KAAK,QAAQ;YAC9D,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE;YACzD,CAAC,CAAC,EAAE,CAAC;QACP,EAAE,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QACzC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACzE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc;QACzC,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,wBAAwB;QAC7D,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY;QACrC,SAAS,EAAE,GAAG;QACd,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAmB,MAAoB;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/F,OAAO;QACL,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,qFAAqF;YAC/F,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAqC,EAAE;YACzD,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,YAAY;IACP,MAAM,CAAc;IACZ,GAAG,CAAgB;IACnB,UAAU,CAAa;IACvB,OAAO,CAAU;IAEzB,YAAY,CAAc;IAC1B,gBAAgB,CAAkB;IAE3C,YACE,QAAgB,EAChB,GAAwC,EACxC,GAAkB,EAClB,UAAsB;QAEtB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,SAAS;YACzB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACf,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;QACnF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC;QACvC,IAAI,CAAC,gBAAgB,GAAG,IAAI,eAAe,CAAC;YAC1C,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK;YAC9B,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,GAAG;YACN,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,CAAC,KAAmB,EAAE,IAAa,EAAE,MAAe,EAAE,EAAE;gBAC3D,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC3D,mEAAmE;gBACnE,kEAAkE;gBAClE,sEAAsE;gBACtE,qEAAqE;gBACrE,mEAAmE;gBACnE,oEAAoE;gBACpE,2BAA2B;gBAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC7C,MAAM,CAAC,IAAI,CACT,KAAK,EACL,QAAQ,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,KAAK,MAAM,GAAG,IAAI,EAAE,CAC5E,CAAC;YACJ,CAAC;YACD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAsC;QAC1C,MAAM,OAAO,GAAgB;YAC3B,GAAG,IAAI,CAAC,YAAY;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAS;QACtC,MAAM,OAAO,GAAgB,IAAI,CAAC,GAAG,CAAC,YAAY;YAChD,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE;YAC7E,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;QACtB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAc;QACvC,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;QACxF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACrD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE7C,sEAAsE;QACtE,wEAAwE;QACxE,iEAAiE;QACjE,+DAA+D;QAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE;YACjD,EAAE,EAAE,OAAO;YACX,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CACpB,KAAK;gBACH,CAAC,CAAC;oBACE;wBACE,GAAG,EAAE,OAAO;wBACZ,OAAO,EAAE,yEAAyE;wBAClF,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE,IAAI;qBACZ;iBACF;gBACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;oBACpB,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;oBAClB,OAAO,EAAE,+BAA+B,GAAG,IAAI;iBAChD,CAAC,CAAC;SACV,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,wEAAwE;QACxE,0EAA0E;QAC1E,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,mDAAmD;QACnD,MAAM,QAAQ,GAAG,KAAK;YACpB,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;YACvE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAC3B,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAChE,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAAE,SAAS;YACzD,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,mEAAmE;YACnE,iEAAiE;YACjE,oEAAoE;YACpE,mEAAmE;YACnE,sCAAsC;YACtC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YACjD,IAAI,aAAa,KAAK,SAAS;gBAAE,OAAO,aAAa,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjE,qEAAqE;YACrE,gEAAgE;YAChE,qEAAqE;YACrE,yDAAyD;YACzD,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC/C,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAwC,GAAkB;IAClF,0EAA0E;IAC1E,6EAA6E;IAC7E,mBAAmB;IACnB,0EAA0E;IAC1E,MAAM,oBAAoB,GAAoB;QAC5C,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,aAAa,EAAE,KAAK;QACpB,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;KACvD,CAAC;IAEF,MAAM,YAAY,GAAG;QACnB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,sEAAsE;QACtE,sEAAsE;QACtE,0EAA0E;QAC1E,oEAAoE;QACpE,eAAe;QACf,WAAW,EAAE,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAG3C;QACD,sEAAsE;QACtE,4EAA4E;QAC5E,0DAA0D;QAC1D,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,WAAW,EAAE,oBAAoB;KAClC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,YAAY,EAAE,GAAG,CAAC,YAAY;QAE9B,QAAQ,CAAC,IAAc;YACrB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAC1E,IAAI,YAAY,CAAO,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAC5E,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  CallToolResult,\n  ClientCapabilities,\n  ContentBlock,\n  InputRequiredResult,\n  McpServer,\n  Notification,\n  RegisteredTool,\n  RequestId,\n  RequestMeta,\n  RequestStateAccessor,\n  ServerContext,\n  StandardSchemaWithJSON,\n  ToolAnnotations,\n} from '@modelcontextprotocol/server';\nimport {\n  CLIENT_CAPABILITIES_META_KEY,\n  isInputRequiredResult,\n  TRACEPARENT_META_KEY,\n} from '@modelcontextprotocol/server';\n\nimport type * as z from 'zod/v4';\n\nimport { ErrorCode, formatUnknownErrorMessage, Problem } from '../core/errors.ts';\nimport type { ProgressCtx } from '../core/fmt.ts';\nimport { plainMessage } from '../core/fmt.ts';\nimport { GuardedFileSystem } from '../core/fs.ts';\nimport {\n  confirmKey,\n  pendingRoundTrip,\n  readAcceptedConfirm,\n  readAcceptedMultiChoice,\n} from '../core/input-required.ts';\nimport { Logger, sanitizeLogField } from '../core/observability.ts';\nimport type { LoggingLevel } from '../core/observability.ts';\nimport { isSamePath } from '../core/path-utils.ts';\nimport type { PathGuard } from '../core/path.ts';\nimport { withSplitArgsRecovery } from '../core/schema.ts';\nimport type { PageSnapshotStore, ResourceStore } from '../core/store.ts';\nimport { ProgressSession } from './progress.ts';\n\nexport interface ToolCtx {\n  readonly signal: AbortSignal;\n  readonly _meta?: RequestMeta | undefined;\n  /** The JSON-RPC id of the `tools/call` this context serves; prefixes every log line. */\n  readonly requestId: RequestId;\n  /** W3C trace context the client put in `_meta`, when it did; rides the log prefix. */\n  readonly traceparent?: string | undefined;\n  readonly fs: GuardedFileSystem;\n  readonly pageStore: PageSnapshotStore;\n  readonly resourceStore: ResourceStore;\n  /** Emits a log line to stderr via `Logger.emit`, gated by `FS_LOG_LEVEL`. */\n  readonly log: (level: LoggingLevel, data: unknown, logger?: string) => void;\n  readonly sendNotification: (notification: Notification) => Promise<void>;\n  readonly onProgress: (params: { current: number; total?: number }) => void;\n  /**\n   * Multi-round-trip `inputResponses` carried by a retried `tools/call`\n   * (protocol revision 2026-07-28); `undefined` on the first round. Bare,\n   * unvalidated client values — handlers read them through\n   * `readAcceptedConfirm`.\n   */\n  readonly inputResponses?: Record<string, unknown> | undefined;\n  /**\n   * Keys of `inputResponses` entries the SDK dropped on this round because\n   * they were not bare results (the `{ method, result }` wrapper some hosts\n   * send). `pendingRoundTrip` re-issues a confirmation whose key is listed\n   * here once; `describeRefusal` names the cause after that.\n   */\n  readonly droppedInputResponseKeys?: readonly string[] | undefined;\n  /**\n   * Reads the verified multi-round-trip `requestState` for the current round:\n   * the decoded `PendingState` the `requestStateCodec` verified, or `undefined`\n   * when the round carried no state (the first round). `undefined` when no\n   * live request context is available.\n   */\n  readonly requestState?: RequestStateAccessor | undefined;\n  /**\n   * What the connected client declared it can do, or `undefined` when this\n   * connection cannot say. Read by the `input_required` flows: an embedded\n   * elicitation sent to a client that never declared `elicitation` is rejected\n   * by the SDK with `-32021` before it reaches the wire, so the handlers check\n   * first and answer with an actionable tool error instead.\n   *\n   * Two sources, because the eras differ: a legacy connection negotiated them\n   * at `initialize` (`Server.getClientCapabilities()`), a modern one carries\n   * them per request in the `_meta` envelope and never runs `initialize` at\n   * all. `undefined` means \"cannot tell\" — never \"no capabilities\".\n   */\n  readonly clientCapabilities?: ClientCapabilities | undefined;\n  /** The SDK request context this call runs under; `pendingRoundTrip` binds minted state to it. */\n  readonly serverCtx: ServerContext;\n}\n\ninterface ToolDeps {\n  readonly server: McpServer;\n  readonly pathGuard: PathGuard;\n  readonly pageStore: PageSnapshotStore;\n  readonly resourceStore: ResourceStore;\n  readonly era?: 'legacy' | 'modern';\n}\n\ninterface RunResult<T> {\n  readonly structured: T;\n  readonly text?: string;\n  readonly resources?: ContentBlock[];\n  /**\n   * The call as a whole failed. Batch tools set it from `isTotalFailure` in\n   * `batch.ts` — every requested item failed — so the executor never has to\n   * know a tool's output shape. Absent or `false` means the call did work.\n   */\n  readonly isError?: boolean;\n}\n\nexport interface ToolDef<I extends z.ZodType, O extends object> {\n  readonly name: string;\n  readonly title: string;\n  readonly description: string;\n  readonly input: I;\n  /** Required: drives both the --read-only gate and published annotations. */\n  readonly readOnlyHint: boolean;\n  readonly timeoutMs?: number;\n  readonly progress?: (args: z.infer<I>) => ProgressCtx;\n  readonly progressDone?: (args: z.infer<I>, result: O) => Partial<ProgressCtx>;\n  readonly defaultErrorCode?: ErrorCode;\n  /**\n   * The filesystem paths this tool will operate on, extracted from its parsed\n   * args. The executor runs an access-grant pre-check over these BEFORE `run`\n   * (R7): any path outside the granted roots yields an `input_required`\n   * round-trip requesting a grant, and nothing is touched until the client\n   * retries with an accepted grant (R8). Omit for tools that do not operate on\n   * caller-supplied filesystem paths.\n   */\n  readonly accessPaths?: (args: z.infer<I>) => readonly string[];\n  readonly run: (args: z.infer<I>, ctx: ToolCtx) => Promise<RunResult<O> | InputRequiredResult>;\n}\n\nexport interface DefinedTool {\n  readonly name: string;\n  readonly readOnlyHint: boolean;\n\n  register(deps: ToolDeps): RegisteredTool;\n}\n\nfunction toToolCtx(\n  ctx: ServerContext,\n  deps: Pick<ToolDeps, 'pathGuard' | 'pageStore' | 'resourceStore' | 'server' | 'era'>,\n): Omit<ToolCtx, 'log' | 'onProgress'> {\n  // Envelope first, accessor second — the two eras carry this differently.\n  // A modern request states the capabilities in its own `_meta` envelope; a\n  // legacy connection fixed them at `initialize` and has no envelope at all.\n  // The deprecated accessor still answers for both today (the SDK backfills it\n  // per request from the validated envelope on modern instances), but reading\n  // the envelope directly is the supported path, so it leads: when the accessor\n  // goes, legacy degrades to \"cannot tell\", which fails open to the behavior\n  // that predates this check.\n  //\n  // The cast is the SDK's shipped `RequestMetaEnvelope` declaration collapsing\n  // to `{}` — the reserved keys survive at runtime but not in the .d.ts, so the\n  // key constant cannot index the declared type.\n  const envelope = ctx.mcpReq.envelope as Record<string, unknown> | undefined;\n  const clientCapabilities =\n    (envelope?.[CLIENT_CAPABILITIES_META_KEY] as ClientCapabilities | undefined) ??\n    // eslint-disable-next-line @typescript-eslint/no-deprecated -- the only source of client capabilities on a legacy connection, where no envelope exists.\n    deps.server.server.getClientCapabilities() ??\n    // A legacy instance that never saw `initialize` is the HTTP leg's\n    // per-request serving (`createMcpHandler` with `legacy: 'stateless'`):\n    // there is no return path for a server-to-client request, so read the\n    // client as having declared nothing. The `input_required` flows then\n    // answer with their named workaround instead of the SDK's generic refusal.\n    // sunset(SEP-2577): removal trigger in docs/adr/002-legacy-protocol-paths-sunset.md.\n    (deps.era === 'legacy' ? {} : undefined);\n\n  return {\n    signal: ctx.mcpReq.signal,\n    ...(ctx.mcpReq._meta ? { _meta: ctx.mcpReq._meta } : {}),\n    requestId: ctx.mcpReq.id,\n    ...(typeof ctx.mcpReq._meta?.[TRACEPARENT_META_KEY] === 'string'\n      ? { traceparent: ctx.mcpReq._meta[TRACEPARENT_META_KEY] }\n      : {}),\n    fs: new GuardedFileSystem(deps.pathGuard),\n    pageStore: deps.pageStore,\n    resourceStore: deps.resourceStore,\n    sendNotification: async (notification) => ctx.mcpReq.notify(notification),\n    inputResponses: ctx.mcpReq.inputResponses,\n    droppedInputResponseKeys: ctx.mcpReq.droppedInputResponseKeys,\n    requestState: ctx.mcpReq.requestState,\n    serverCtx: ctx,\n    ...(clientCapabilities ? { clientCapabilities } : {}),\n  };\n}\n\n/**\n * Claude Code — and any client that treats `structuredContent` as the canonical\n * model view — discards the `text` blocks when `structuredContent` is present,\n * showing the model `JSON.stringify(structuredContent)` instead. A tool that\n * authored a text result (list's ASCII tree, read's file) meant that text for\n * the model, so it ships its metadata under `_meta`, which no client renders in\n * place of the content. Tools with no `text` keep `structuredContent`: the JSON\n * *is* their model-facing view.\n */\nfunction buildSuccessResponse<O extends object>(result: RunResult<O>): CallToolResult {\n  const hasText = result.text !== undefined;\n  const text = result.text ?? JSON.stringify(result.structured);\n  const content: ContentBlock[] = [{ type: 'text' as const, text }, ...(result.resources ?? [])];\n  return {\n    content,\n    ...(hasText // Result interfaces have named fields; the SDK metadata requires an index signature.\n      ? { _meta: result.structured as Record<string, unknown> }\n      : { structuredContent: result.structured }),\n    ...(result.isError ? { isError: true } : {}),\n  };\n}\n\nclass ToolExecutor<I extends z.ZodType, O extends object> {\n  readonly signal: AbortSignal;\n  private readonly def: ToolDef<I, O>;\n  private readonly parsedArgs: z.infer<I>;\n  private readonly toolCtx: ToolCtx;\n\n  readonly #progressCtx: ProgressCtx;\n  readonly #progressSession: ProgressSession;\n\n  constructor(\n    toolName: string,\n    ctx: Omit<ToolCtx, 'log' | 'onProgress'>,\n    def: ToolDef<I, O>,\n    parsedArgs: z.infer<I>,\n  ) {\n    this.def = def;\n    this.parsedArgs = parsedArgs;\n    this.signal = def.timeoutMs\n      ? AbortSignal.any([ctx.signal, AbortSignal.timeout(def.timeoutMs)])\n      : ctx.signal;\n    this.#progressCtx = def.progress ? def.progress(parsedArgs) : { label: def.title };\n    const token = ctx._meta?.progressToken;\n    this.#progressSession = new ProgressSession({\n      label: this.#progressCtx.label,\n      ...(token !== undefined ? { sink: { toolName, token, notify: ctx.sendNotification } } : {}),\n    });\n    this.toolCtx = {\n      ...ctx,\n      signal: this.signal,\n      log: (level: LoggingLevel, data: unknown, logger?: string) => {\n        const msg = typeof data === 'string' ? data : String(data);\n        // `[req <id>]` first so one grep finds every line of one call; the\n        // traceparent rides along only when the client sent one. Both are\n        // client-supplied, so they pass through `sanitizeLogField`: a control\n        // character in a JSON-RPC id or a traceparent would forge log lines.\n        // The message is flattened too (uncapped): it can carry a resolved\n        // path or OS error text, and input schemas reject CR/LF but not the\n        // Unicode line separators.\n        const trace = ctx.traceparent ? ` ${sanitizeLogField(ctx.traceparent)}` : '';\n        const prefix = logger ? `[${logger}] ` : '';\n        const text = sanitizeLogField(msg, Infinity);\n        Logger.emit(\n          level,\n          `[req ${sanitizeLogField(String(ctx.requestId))}${trace}] ${prefix}${text}`,\n        );\n      },\n      onProgress: (p) => {\n        this.#tick(p);\n      },\n    };\n  }\n\n  #tick(p: { current: number; total?: number }): void {\n    const tickCtx: ProgressCtx = {\n      ...this.#progressCtx,\n      current: p.current,\n      ...(p.total !== undefined ? { total: p.total } : {}),\n    };\n    this.#progressSession.set({ ...p, message: plainMessage('tick', tickCtx) });\n  }\n\n  private async completeProgress(result: O): Promise<void> {\n    const doneCtx: ProgressCtx = this.def.progressDone\n      ? { ...this.#progressCtx, ...this.def.progressDone(this.parsedArgs, result) }\n      : this.#progressCtx;\n    this.#progressSession.complete(plainMessage('done', doneCtx));\n    await this.#progressSession.flush();\n  }\n\n  private async failProgress(error: unknown): Promise<{ isError: true; content: ContentBlock[] }> {\n    const errMsg = formatUnknownErrorMessage(error);\n    this.#progressSession.fail(plainMessage('fail', { ...this.#progressCtx, error: errMsg }));\n    await this.#progressSession.flush();\n    const errorText = Problem.toText(error, this.def.defaultErrorCode ?? ErrorCode.UNKNOWN);\n    return {\n      content: [{ type: 'text' as const, text: errorText }],\n      isError: true,\n    };\n  }\n\n  /**\n   * Access-grant pre-check (R7/R8/R9). Before `run` touches the filesystem,\n   * ask PathGuard which of the tool's declared paths are out-of-root and\n   * grantable. If any are and this round carries no verified `requestState`,\n   * return `input_required` (nothing is read or written — R7). On retry, the\n   * verified state must bind this grant set (R9); apply each accepted grant for\n   * the session (R8) and proceed. A declined or ungrantable path is left for\n   * `validateAccess` to fail closed during the operation. Returns `undefined`\n   * when no round-trip is needed and any applicable grants have been applied.\n   */\n  private async precheckGrant(): Promise<InputRequiredResult | undefined> {\n    const extract = this.def.accessPaths;\n    if (!extract) return undefined;\n    const paths = extract(this.parsedArgs);\n    if (paths.length === 0) return undefined;\n    const grantDirs = await this.toolCtx.fs.pathGuard.precheckAccess(paths);\n    if (grantDirs.length === 0) return undefined;\n\n    // One grant dir: a single boolean confirm. Multiple: one multi-select\n    // elicitation so the client picks the subset to allow in one round-trip\n    // (N dirs → 1 round-trip, not N). `pendingRoundTrip` still binds\n    // `paths: grantDirs` sorted, so R9 path-binding is unaffected.\n    const multi = grantDirs.length > 1;\n    const round = await pendingRoundTrip(this.toolCtx, {\n      op: 'grant',\n      pending: grantDirs,\n      buildInputs: (dirs) =>\n        multi\n          ? [\n              {\n                key: 'grant',\n                message: 'Grant filesystem access to these directories? Select the ones to allow.',\n                choices: dirs,\n                multi: true,\n              },\n            ]\n          : dirs.map((dir, i) => ({\n              key: confirmKey(i),\n              message: `Grant filesystem access to \"${dir}\"?`,\n            })),\n    });\n    if (round !== undefined) return round;\n    // Apply accepted grants for the session (R8). Declined/missing dirs are\n    // skipped here; their paths fail with ACCESS_DENIED during the operation.\n    //\n    // No list-changed notification follows: a grant widens the allowed roots,\n    // and no resource list reads them. The instructions resource has a fixed\n    // URI, the result template lists the ResourceStore, and the file template\n    // lists nothing at all (see resources.ts). Notifying here only bought the\n    // client a round trip to re-fetch a list that could not have changed.\n    //\n    // `readAcceptedMultiChoice` does NOT validate against the offered choices\n    // (attacker-controlled inputResponses on re-entry). Only grant dirs that\n    // were actually offered by precheckAccess — a value outside grantDirs is\n    // ignored and fails closed in validateAccess. The single-select path reads\n    // `confirmKey(i)` for `grantDirs[i]`, so the isSamePath filter is a no-op\n    // there; it only bites for the multi-select array.\n    const accepted = multi\n      ? (readAcceptedMultiChoice(this.toolCtx.inputResponses, 'grant') ?? [])\n      : grantDirs.filter((_dir, i) =>\n          readAcceptedConfirm(this.toolCtx.inputResponses, confirmKey(i)),\n        );\n    for (const dir of accepted) {\n      if (!grantDirs.some((g) => isSamePath(g, dir))) continue;\n      await this.toolCtx.fs.pathGuard.applyGrant(dir);\n    }\n    return undefined;\n  }\n\n  async execute(): Promise<CallToolResult | InputRequiredResult> {\n    try {\n      // Access-grant pre-check before any filesystem touch (R7/R8/R9). A\n      // grant input_required short-circuits here (progress paused, not\n      // finished); an R9 mismatch throws, which this catch surfaces as an\n      // isError tool result like every other handler failure — not a raw\n      // JSON-RPC error (GRANT-1 impact #2).\n      const grantRequired = await this.precheckGrant();\n      if (grantRequired !== undefined) return grantRequired;\n      const result = await this.def.run(this.parsedArgs, this.toolCtx);\n      // input_required is a return value, not a completed call: the client\n      // retries the same tools/call carrying inputResponses, and this\n      // handler re-enters from the top. Skip the progress \"done\" close and\n      // return it verbatim — progress is paused, not finished.\n      if (isInputRequiredResult(result)) {\n        return result;\n      }\n      await this.completeProgress(result.structured);\n      return buildSuccessResponse(result);\n    } catch (error) {\n      return await this.failProgress(error);\n    } finally {\n      await this.#progressSession.flush();\n    }\n  }\n}\n\nexport function defineTool<I extends z.ZodType, O extends object>(def: ToolDef<I, O>): DefinedTool {\n  // Nothing here depends on `deps`, so it is built once per tool definition\n  // rather than once per `register` — the HTTP leg registers every tool afresh\n  // on each request.\n  // Filesystem tools are closed-world; only mutating tools are destructive.\n  const publishedAnnotations: ToolAnnotations = {\n    readOnlyHint: def.readOnlyHint,\n    openWorldHint: false,\n    ...(def.readOnlyHint ? {} : { destructiveHint: true }),\n  };\n\n  const toolDefShape = {\n    title: def.title,\n    description: def.description,\n    // The Zod schema goes in behind `withSplitArgsRecovery` only: the SDK\n    // validates with it and publishes its own draft-2020-12 conversion in\n    // `tools/list`, which the preprocess step leaves unchanged. The cast only\n    // names the in/out types a generic `ZodType` cannot surface through\n    // `~standard`.\n    inputSchema: withSplitArgsRecovery(def.input) as unknown as StandardSchemaWithJSON<\n      z.input<I>,\n      z.output<I>\n    >,\n    // No `outputSchema`, ever. Publishing one obliges the result to carry\n    // `structuredContent` (clients enforce it), and every tool that authors its\n    // own text ships its metadata under `_meta` instead — see\n    // `buildSuccessResponse`. The two cannot both hold, and the text is what\n    // the model reads. `TOOL-SURFACE-001` pins this for the whole surface.\n    // Result shapes are checked by TypeScript, not unused runtime schemas.\n    annotations: publishedAnnotations,\n  };\n\n  return {\n    name: def.name,\n    readOnlyHint: def.readOnlyHint,\n\n    register(deps: ToolDeps): RegisteredTool {\n      return deps.server.registerTool(def.name, toolDefShape, async (args, ctx) =>\n        new ToolExecutor<I, O>(def.name, toToolCtx(ctx, deps), def, args).execute(),\n      );\n    },\n  };\n}\n"]}
+{"version":3,"file":"define.js","sourceRoot":"","sources":["../../src/tools/define.ts"],"names":[],"mappings":"AAeA,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AAItC,OAAO,EAAE,SAAS,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAElF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AA2GhD,SAAS,SAAS,CAChB,GAAkB,EAClB,IAGC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,4BAA4B;IAC5B,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,QAA+C,CAAC;IAC5E,MAAM,kBAAkB,GACrB,QAAQ,EAAE,CAAC,4BAA4B,CAAoC;QAC5E,wJAAwJ;QACxJ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE;QAC1C,kEAAkE;QAClE,uEAAuE;QACvE,sEAAsE;QACtE,qEAAqE;QACrE,2EAA2E;QAC3E,qFAAqF;QACrF,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAE3C,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QACzB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;QACxB,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,oBAAoB,CAAC,KAAK,QAAQ;YAC9D,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE;YACzD,CAAC,CAAC,EAAE,CAAC;QACP,EAAE,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QACzC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACzE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc;QACzC,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,wBAAwB;QAC7D,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY;QACrC,SAAS,EAAE,GAAG;QACd,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAmB,MAAoB;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/F,OAAO;QACL,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,qFAAqF;YAC/F,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAqC,EAAE;YACzD,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,YAAY;IACP,MAAM,CAAc;IACZ,GAAG,CAAgB;IACnB,UAAU,CAAa;IACvB,OAAO,CAAU;IAEzB,YAAY,CAAc;IAC1B,gBAAgB,CAAkB;IAE3C,YACE,QAAgB,EAChB,GAAwC,EACxC,GAAkB,EAClB,UAAsB;QAEtB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,SAAS;YACzB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACf,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;QACnF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC;QACvC,IAAI,CAAC,gBAAgB,GAAG,IAAI,eAAe,CAAC;YAC1C,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK;YAC9B,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,GAAG;YACN,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,CAAC,KAAmB,EAAE,IAAa,EAAE,MAAe,EAAE,EAAE;gBAC3D,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC3D,mEAAmE;gBACnE,kEAAkE;gBAClE,sEAAsE;gBACtE,qEAAqE;gBACrE,mEAAmE;gBACnE,oEAAoE;gBACpE,2BAA2B;gBAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC7C,MAAM,CAAC,IAAI,CACT,KAAK,EACL,QAAQ,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,KAAK,MAAM,GAAG,IAAI,EAAE,CAC5E,CAAC;YACJ,CAAC;YACD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAsC;QAC1C,MAAM,OAAO,GAAgB;YAC3B,GAAG,IAAI,CAAC,YAAY;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAS;QACtC,MAAM,OAAO,GAAgB,IAAI,CAAC,GAAG,CAAC,YAAY;YAChD,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE;YAC7E,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;QACtB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAc;QACvC,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;QACxF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACrD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE7C,sEAAsE;QACtE,wEAAwE;QACxE,iEAAiE;QACjE,+DAA+D;QAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE;YACjD,EAAE,EAAE,OAAO;YACX,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CACpB,KAAK;gBACH,CAAC,CAAC;oBACE;wBACE,GAAG,EAAE,OAAO;wBACZ,OAAO,EAAE,yEAAyE;wBAClF,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE,IAAI;qBACZ;iBACF;gBACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;oBACpB,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;oBAClB,OAAO,EAAE,+BAA+B,GAAG,IAAI;iBAChD,CAAC,CAAC;SACV,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,wEAAwE;QACxE,0EAA0E;QAC1E,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,mDAAmD;QACnD,MAAM,QAAQ,GAAG,KAAK;YACpB,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;YACvE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAC3B,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAChE,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAAE,SAAS;YACzD,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,mEAAmE;YACnE,iEAAiE;YACjE,oEAAoE;YACpE,mEAAmE;YACnE,sCAAsC;YACtC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YACjD,IAAI,aAAa,KAAK,SAAS;gBAAE,OAAO,aAAa,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjE,qEAAqE;YACrE,gEAAgE;YAChE,qEAAqE;YACrE,yDAAyD;YACzD,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC/C,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAwC,GAAkB;IAClF,0EAA0E;IAC1E,6EAA6E;IAC7E,mBAAmB;IACnB,0EAA0E;IAC1E,MAAM,oBAAoB,GAAoB;QAC5C,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,aAAa,EAAE,KAAK;QACpB,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;KACvD,CAAC;IAEF,MAAM,YAAY,GAAG;QACnB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,sEAAsE;QACtE,sEAAsE;QACtE,0EAA0E;QAC1E,oEAAoE;QACpE,eAAe;QACf,WAAW,EAAE,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAG3C;QACD,sEAAsE;QACtE,4EAA4E;QAC5E,0DAA0D;QAC1D,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,WAAW,EAAE,oBAAoB;KAClC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,YAAY,EAAE,GAAG,CAAC,YAAY;QAE9B,QAAQ,CAAC,IAAc;YACrB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAC1E,IAAI,YAAY,CAAO,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAC5E,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  CallToolResult,\n  ClientCapabilities,\n  ContentBlock,\n  InputRequiredResult,\n  McpServer,\n  Notification,\n  RegisteredTool,\n  RequestId,\n  RequestMeta,\n  RequestStateAccessor,\n  ServerContext,\n  StandardSchemaWithJSON,\n  ToolAnnotations,\n} from '@modelcontextprotocol/server';\nimport {\n  CLIENT_CAPABILITIES_META_KEY,\n  isInputRequiredResult,\n  TRACEPARENT_META_KEY,\n} from '@modelcontextprotocol/server';\n\nimport type * as z from 'zod/v4';\n\nimport { ErrorCode, formatUnknownErrorMessage, Problem } from '../core/errors.ts';\nimport type { ProgressCtx } from '../core/fmt.ts';\nimport { plainMessage } from '../core/fmt.ts';\nimport { GuardedFileSystem } from '../core/fs.ts';\nimport {\n  confirmKey,\n  pendingRoundTrip,\n  readAcceptedConfirm,\n  readAcceptedMultiChoice,\n} from '../core/input-required.ts';\nimport { Logger, sanitizeLogField } from '../core/observability.ts';\nimport type { LoggingLevel } from '../core/observability.ts';\nimport { isSamePath } from '../core/path-utils.ts';\nimport type { PathGuard } from '../core/path.ts';\nimport { withSplitArgsRecovery } from '../core/schema.ts';\nimport type { PageSnapshotStore, ResourceStore } from '../core/store.ts';\nimport { ProgressSession } from './progress.ts';\n\nexport interface ToolCtx {\n  readonly signal: AbortSignal;\n  readonly _meta?: RequestMeta | undefined;\n  /** The JSON-RPC id of the `tools/call` this context serves; prefixes every log line. */\n  readonly requestId: RequestId;\n  /** W3C trace context the client put in `_meta`, when it did; rides the log prefix. */\n  readonly traceparent?: string | undefined;\n  readonly fs: GuardedFileSystem;\n  readonly pageStore: PageSnapshotStore;\n  readonly resourceStore: ResourceStore;\n  /** Emits a log line to stderr via `Logger.emit`, gated by `FS_LOG_LEVEL`. */\n  readonly log: (level: LoggingLevel, data: unknown, logger?: string) => void;\n  readonly sendNotification: (notification: Notification) => Promise<void>;\n  readonly onProgress: (params: { current: number; total?: number }) => void;\n  /**\n   * Multi-round-trip `inputResponses` carried by a retried `tools/call`\n   * (protocol revision 2026-07-28); `undefined` on the first round. Bare,\n   * unvalidated client values — handlers read them through\n   * `readAcceptedConfirm`.\n   */\n  readonly inputResponses?: Record<string, unknown> | undefined;\n  /**\n   * Keys of `inputResponses` entries the SDK dropped on this round because\n   * they were not bare results (the `{ method, result }` wrapper some hosts\n   * send). `pendingRoundTrip` re-issues a confirmation whose key is listed\n   * here once; `describeRefusal` names the cause after that.\n   */\n  readonly droppedInputResponseKeys?: readonly string[] | undefined;\n  /**\n   * Reads the verified multi-round-trip `requestState` for the current round:\n   * the decoded `PendingState` the `requestStateCodec` verified, or `undefined`\n   * when the round carried no state (the first round). `undefined` when no\n   * live request context is available.\n   */\n  readonly requestState?: RequestStateAccessor | undefined;\n  /**\n   * What the connected client declared it can do, or `undefined` when this\n   * connection cannot say. Read by the `input_required` flows: an embedded\n   * elicitation sent to a client that never declared `elicitation` is rejected\n   * by the SDK with `-32021` before it reaches the wire, so the handlers check\n   * first and answer with an actionable tool error instead.\n   *\n   * Two sources, because the eras differ: a legacy connection negotiated them\n   * at `initialize` (`Server.getClientCapabilities()`), a modern one carries\n   * them per request in the `_meta` envelope and never runs `initialize` at\n   * all. `undefined` means \"cannot tell\" — never \"no capabilities\".\n   */\n  readonly clientCapabilities?: ClientCapabilities | undefined;\n  /** The SDK request context this call runs under; `pendingRoundTrip` binds minted state to it. */\n  readonly serverCtx: ServerContext;\n  /** `stdio` alone has a 10 MiB frame limit; unset on HTTP and the in-memory test pair. */\n  readonly transport?: 'stdio' | 'http' | undefined;\n}\n\ninterface ToolDeps {\n  readonly server: McpServer;\n  readonly pathGuard: PathGuard;\n  readonly pageStore: PageSnapshotStore;\n  readonly resourceStore: ResourceStore;\n  readonly era?: 'legacy' | 'modern';\n  readonly transport?: 'stdio' | 'http';\n}\n\ninterface RunResult<T> {\n  readonly structured: T;\n  readonly text?: string;\n  readonly resources?: ContentBlock[];\n  /**\n   * The call as a whole failed. Batch tools set it from `isTotalFailure` in\n   * `batch.ts` — every requested item failed — so the executor never has to\n   * know a tool's output shape. Absent or `false` means the call did work.\n   */\n  readonly isError?: boolean;\n}\n\nexport interface ToolDef<I extends z.ZodType, O extends object> {\n  readonly name: string;\n  readonly title: string;\n  readonly description: string;\n  readonly input: I;\n  /** Required: drives both the --read-only gate and published annotations. */\n  readonly readOnlyHint: boolean;\n  readonly timeoutMs?: number;\n  readonly progress?: (args: z.infer<I>) => ProgressCtx;\n  readonly progressDone?: (args: z.infer<I>, result: O) => Partial<ProgressCtx>;\n  readonly defaultErrorCode?: ErrorCode;\n  /**\n   * The filesystem paths this tool will operate on, extracted from its parsed\n   * args. The executor runs an access-grant pre-check over these BEFORE `run`\n   * (R7): any path outside the granted roots yields an `input_required`\n   * round-trip requesting a grant, and nothing is touched until the client\n   * retries with an accepted grant (R8). Omit for tools that do not operate on\n   * caller-supplied filesystem paths.\n   */\n  readonly accessPaths?: (args: z.infer<I>) => readonly string[];\n  readonly run: (args: z.infer<I>, ctx: ToolCtx) => Promise<RunResult<O> | InputRequiredResult>;\n}\n\nexport interface DefinedTool {\n  readonly name: string;\n  readonly readOnlyHint: boolean;\n\n  register(deps: ToolDeps): RegisteredTool;\n}\n\nfunction toToolCtx(\n  ctx: ServerContext,\n  deps: Pick<\n    ToolDeps,\n    'pathGuard' | 'pageStore' | 'resourceStore' | 'server' | 'era' | 'transport'\n  >,\n): Omit<ToolCtx, 'log' | 'onProgress'> {\n  // Envelope first, accessor second — the two eras carry this differently.\n  // A modern request states the capabilities in its own `_meta` envelope; a\n  // legacy connection fixed them at `initialize` and has no envelope at all.\n  // The deprecated accessor still answers for both today (the SDK backfills it\n  // per request from the validated envelope on modern instances), but reading\n  // the envelope directly is the supported path, so it leads: when the accessor\n  // goes, legacy degrades to \"cannot tell\", which fails open to the behavior\n  // that predates this check.\n  //\n  // The cast is the SDK's shipped `RequestMetaEnvelope` declaration collapsing\n  // to `{}` — the reserved keys survive at runtime but not in the .d.ts, so the\n  // key constant cannot index the declared type.\n  const envelope = ctx.mcpReq.envelope as Record<string, unknown> | undefined;\n  const clientCapabilities =\n    (envelope?.[CLIENT_CAPABILITIES_META_KEY] as ClientCapabilities | undefined) ??\n    // eslint-disable-next-line @typescript-eslint/no-deprecated -- the only source of client capabilities on a legacy connection, where no envelope exists.\n    deps.server.server.getClientCapabilities() ??\n    // A legacy instance that never saw `initialize` is the HTTP leg's\n    // per-request serving (`createMcpHandler` with `legacy: 'stateless'`):\n    // there is no return path for a server-to-client request, so read the\n    // client as having declared nothing. The `input_required` flows then\n    // answer with their named workaround instead of the SDK's generic refusal.\n    // sunset(SEP-2577): removal trigger in docs/adr/002-legacy-protocol-paths-sunset.md.\n    (deps.era === 'legacy' ? {} : undefined);\n\n  return {\n    signal: ctx.mcpReq.signal,\n    ...(ctx.mcpReq._meta ? { _meta: ctx.mcpReq._meta } : {}),\n    requestId: ctx.mcpReq.id,\n    ...(typeof ctx.mcpReq._meta?.[TRACEPARENT_META_KEY] === 'string'\n      ? { traceparent: ctx.mcpReq._meta[TRACEPARENT_META_KEY] }\n      : {}),\n    fs: new GuardedFileSystem(deps.pathGuard),\n    pageStore: deps.pageStore,\n    resourceStore: deps.resourceStore,\n    sendNotification: async (notification) => ctx.mcpReq.notify(notification),\n    inputResponses: ctx.mcpReq.inputResponses,\n    droppedInputResponseKeys: ctx.mcpReq.droppedInputResponseKeys,\n    requestState: ctx.mcpReq.requestState,\n    serverCtx: ctx,\n    ...(clientCapabilities ? { clientCapabilities } : {}),\n    ...(deps.transport ? { transport: deps.transport } : {}),\n  };\n}\n\n/**\n * Claude Code — and any client that treats `structuredContent` as the canonical\n * model view — discards the `text` blocks when `structuredContent` is present,\n * showing the model `JSON.stringify(structuredContent)` instead. A tool that\n * authored a text result (list's ASCII tree, read's file) meant that text for\n * the model, so it ships its metadata under `_meta`, which no client renders in\n * place of the content. Tools with no `text` keep `structuredContent`: the JSON\n * *is* their model-facing view.\n */\nfunction buildSuccessResponse<O extends object>(result: RunResult<O>): CallToolResult {\n  const hasText = result.text !== undefined;\n  const text = result.text ?? JSON.stringify(result.structured);\n  const content: ContentBlock[] = [{ type: 'text' as const, text }, ...(result.resources ?? [])];\n  return {\n    content,\n    ...(hasText // Result interfaces have named fields; the SDK metadata requires an index signature.\n      ? { _meta: result.structured as Record<string, unknown> }\n      : { structuredContent: result.structured }),\n    ...(result.isError ? { isError: true } : {}),\n  };\n}\n\nclass ToolExecutor<I extends z.ZodType, O extends object> {\n  readonly signal: AbortSignal;\n  private readonly def: ToolDef<I, O>;\n  private readonly parsedArgs: z.infer<I>;\n  private readonly toolCtx: ToolCtx;\n\n  readonly #progressCtx: ProgressCtx;\n  readonly #progressSession: ProgressSession;\n\n  constructor(\n    toolName: string,\n    ctx: Omit<ToolCtx, 'log' | 'onProgress'>,\n    def: ToolDef<I, O>,\n    parsedArgs: z.infer<I>,\n  ) {\n    this.def = def;\n    this.parsedArgs = parsedArgs;\n    this.signal = def.timeoutMs\n      ? AbortSignal.any([ctx.signal, AbortSignal.timeout(def.timeoutMs)])\n      : ctx.signal;\n    this.#progressCtx = def.progress ? def.progress(parsedArgs) : { label: def.title };\n    const token = ctx._meta?.progressToken;\n    this.#progressSession = new ProgressSession({\n      label: this.#progressCtx.label,\n      ...(token !== undefined ? { sink: { toolName, token, notify: ctx.sendNotification } } : {}),\n    });\n    this.toolCtx = {\n      ...ctx,\n      signal: this.signal,\n      log: (level: LoggingLevel, data: unknown, logger?: string) => {\n        const msg = typeof data === 'string' ? data : String(data);\n        // `[req <id>]` first so one grep finds every line of one call; the\n        // traceparent rides along only when the client sent one. Both are\n        // client-supplied, so they pass through `sanitizeLogField`: a control\n        // character in a JSON-RPC id or a traceparent would forge log lines.\n        // The message is flattened too (uncapped): it can carry a resolved\n        // path or OS error text, and input schemas reject CR/LF but not the\n        // Unicode line separators.\n        const trace = ctx.traceparent ? ` ${sanitizeLogField(ctx.traceparent)}` : '';\n        const prefix = logger ? `[${logger}] ` : '';\n        const text = sanitizeLogField(msg, Infinity);\n        Logger.emit(\n          level,\n          `[req ${sanitizeLogField(String(ctx.requestId))}${trace}] ${prefix}${text}`,\n        );\n      },\n      onProgress: (p) => {\n        this.#tick(p);\n      },\n    };\n  }\n\n  #tick(p: { current: number; total?: number }): void {\n    const tickCtx: ProgressCtx = {\n      ...this.#progressCtx,\n      current: p.current,\n      ...(p.total !== undefined ? { total: p.total } : {}),\n    };\n    this.#progressSession.set({ ...p, message: plainMessage('tick', tickCtx) });\n  }\n\n  private async completeProgress(result: O): Promise<void> {\n    const doneCtx: ProgressCtx = this.def.progressDone\n      ? { ...this.#progressCtx, ...this.def.progressDone(this.parsedArgs, result) }\n      : this.#progressCtx;\n    this.#progressSession.complete(plainMessage('done', doneCtx));\n    await this.#progressSession.flush();\n  }\n\n  private async failProgress(error: unknown): Promise<{ isError: true; content: ContentBlock[] }> {\n    const errMsg = formatUnknownErrorMessage(error);\n    this.#progressSession.fail(plainMessage('fail', { ...this.#progressCtx, error: errMsg }));\n    await this.#progressSession.flush();\n    const errorText = Problem.toText(error, this.def.defaultErrorCode ?? ErrorCode.UNKNOWN);\n    return {\n      content: [{ type: 'text' as const, text: errorText }],\n      isError: true,\n    };\n  }\n\n  /**\n   * Access-grant pre-check (R7/R8/R9). Before `run` touches the filesystem,\n   * ask PathGuard which of the tool's declared paths are out-of-root and\n   * grantable. If any are and this round carries no verified `requestState`,\n   * return `input_required` (nothing is read or written — R7). On retry, the\n   * verified state must bind this grant set (R9); apply each accepted grant for\n   * the session (R8) and proceed. A declined or ungrantable path is left for\n   * `validateAccess` to fail closed during the operation. Returns `undefined`\n   * when no round-trip is needed and any applicable grants have been applied.\n   */\n  private async precheckGrant(): Promise<InputRequiredResult | undefined> {\n    const extract = this.def.accessPaths;\n    if (!extract) return undefined;\n    const paths = extract(this.parsedArgs);\n    if (paths.length === 0) return undefined;\n    const grantDirs = await this.toolCtx.fs.pathGuard.precheckAccess(paths);\n    if (grantDirs.length === 0) return undefined;\n\n    // One grant dir: a single boolean confirm. Multiple: one multi-select\n    // elicitation so the client picks the subset to allow in one round-trip\n    // (N dirs → 1 round-trip, not N). `pendingRoundTrip` still binds\n    // `paths: grantDirs` sorted, so R9 path-binding is unaffected.\n    const multi = grantDirs.length > 1;\n    const round = await pendingRoundTrip(this.toolCtx, {\n      op: 'grant',\n      pending: grantDirs,\n      buildInputs: (dirs) =>\n        multi\n          ? [\n              {\n                key: 'grant',\n                message: 'Grant filesystem access to these directories? Select the ones to allow.',\n                choices: dirs,\n                multi: true,\n              },\n            ]\n          : dirs.map((dir, i) => ({\n              key: confirmKey(i),\n              message: `Grant filesystem access to \"${dir}\"?`,\n            })),\n    });\n    if (round !== undefined) return round;\n    // Apply accepted grants for the session (R8). Declined/missing dirs are\n    // skipped here; their paths fail with ACCESS_DENIED during the operation.\n    //\n    // No list-changed notification follows: a grant widens the allowed roots,\n    // and no resource list reads them. The instructions resource has a fixed\n    // URI, the result template lists the ResourceStore, and the file template\n    // lists nothing at all (see resources.ts). Notifying here only bought the\n    // client a round trip to re-fetch a list that could not have changed.\n    //\n    // `readAcceptedMultiChoice` does NOT validate against the offered choices\n    // (attacker-controlled inputResponses on re-entry). Only grant dirs that\n    // were actually offered by precheckAccess — a value outside grantDirs is\n    // ignored and fails closed in validateAccess. The single-select path reads\n    // `confirmKey(i)` for `grantDirs[i]`, so the isSamePath filter is a no-op\n    // there; it only bites for the multi-select array.\n    const accepted = multi\n      ? (readAcceptedMultiChoice(this.toolCtx.inputResponses, 'grant') ?? [])\n      : grantDirs.filter((_dir, i) =>\n          readAcceptedConfirm(this.toolCtx.inputResponses, confirmKey(i)),\n        );\n    for (const dir of accepted) {\n      if (!grantDirs.some((g) => isSamePath(g, dir))) continue;\n      await this.toolCtx.fs.pathGuard.applyGrant(dir);\n    }\n    return undefined;\n  }\n\n  async execute(): Promise<CallToolResult | InputRequiredResult> {\n    try {\n      // Access-grant pre-check before any filesystem touch (R7/R8/R9). A\n      // grant input_required short-circuits here (progress paused, not\n      // finished); an R9 mismatch throws, which this catch surfaces as an\n      // isError tool result like every other handler failure — not a raw\n      // JSON-RPC error (GRANT-1 impact #2).\n      const grantRequired = await this.precheckGrant();\n      if (grantRequired !== undefined) return grantRequired;\n      const result = await this.def.run(this.parsedArgs, this.toolCtx);\n      // input_required is a return value, not a completed call: the client\n      // retries the same tools/call carrying inputResponses, and this\n      // handler re-enters from the top. Skip the progress \"done\" close and\n      // return it verbatim — progress is paused, not finished.\n      if (isInputRequiredResult(result)) {\n        return result;\n      }\n      await this.completeProgress(result.structured);\n      return buildSuccessResponse(result);\n    } catch (error) {\n      return await this.failProgress(error);\n    } finally {\n      await this.#progressSession.flush();\n    }\n  }\n}\n\nexport function defineTool<I extends z.ZodType, O extends object>(def: ToolDef<I, O>): DefinedTool {\n  // Nothing here depends on `deps`, so it is built once per tool definition\n  // rather than once per `register` — the HTTP leg registers every tool afresh\n  // on each request.\n  // Filesystem tools are closed-world; only mutating tools are destructive.\n  const publishedAnnotations: ToolAnnotations = {\n    readOnlyHint: def.readOnlyHint,\n    openWorldHint: false,\n    ...(def.readOnlyHint ? {} : { destructiveHint: true }),\n  };\n\n  const toolDefShape = {\n    title: def.title,\n    description: def.description,\n    // The Zod schema goes in behind `withSplitArgsRecovery` only: the SDK\n    // validates with it and publishes its own draft-2020-12 conversion in\n    // `tools/list`, which the preprocess step leaves unchanged. The cast only\n    // names the in/out types a generic `ZodType` cannot surface through\n    // `~standard`.\n    inputSchema: withSplitArgsRecovery(def.input) as unknown as StandardSchemaWithJSON<\n      z.input<I>,\n      z.output<I>\n    >,\n    // No `outputSchema`, ever. Publishing one obliges the result to carry\n    // `structuredContent` (clients enforce it), and every tool that authors its\n    // own text ships its metadata under `_meta` instead — see\n    // `buildSuccessResponse`. The two cannot both hold, and the text is what\n    // the model reads. `TOOL-SURFACE-001` pins this for the whole surface.\n    // Result shapes are checked by TypeScript, not unused runtime schemas.\n    annotations: publishedAnnotations,\n  };\n\n  return {\n    name: def.name,\n    readOnlyHint: def.readOnlyHint,\n\n    register(deps: ToolDeps): RegisteredTool {\n      return deps.server.registerTool(def.name, toolDefShape, async (args, ctx) =>\n        new ToolExecutor<I, O>(def.name, toToolCtx(ctx, deps), def, args).execute(),\n      );\n    },\n  };\n}\n"]}

package/dist/tools/edit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"edit.d.ts","sourceRoot":"","sources":["../../src/tools/edit.ts"],"names":[],"mappings":"AAqdA,eAAO,MAAM,IAAI,mCA0Df,CAAC"}
+{"version":3,"file":"edit.d.ts","sourceRoot":"","sources":["../../src/tools/edit.ts"],"names":[],"mappings":"AAueA,eAAO,MAAM,IAAI,mCA0Df,CAAC"}