@launchdarkly/mcp-server 0.7.0 → 0.7.2

package/dist/commonjs/funcs/metricsPatch.js

@@ -0,0 +1,129 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.metricsPatch = metricsPatch;
+const encodings_js_1 = require("../lib/encodings.js");
+const M = __importStar(require("../lib/matchers.js"));
+const primitives_js_1 = require("../lib/primitives.js");
+const schemas_js_1 = require("../lib/schemas.js");
+const security_js_1 = require("../lib/security.js");
+const url_js_1 = require("../lib/url.js");
+const components = __importStar(require("../models/components/index.js"));
+const errors = __importStar(require("../models/errors/index.js"));
+const operations = __importStar(require("../models/operations/index.js"));
+const async_js_1 = require("../types/async.js");
+/**
+ * Update metric
+ *
+ * @remarks
+ * Patch a metric by key. Updating a metric uses a [JSON patch](https://datatracker.ietf.org/doc/html/rfc6902) representation of the desired changes. To learn more, read [Updates](https://launchdarkly.com/docs/api#updates).
+ */
+function metricsPatch(client, request, options) {
+    return new async_js_1.APIPromise($do(client, request, options));
+}
+async function $do(client, request, options) {
+    const parsed = (0, schemas_js_1.safeParse)(request, (value) => operations.PatchMetricRequest$outboundSchema.parse(value), "Input validation failed");
+    if (!parsed.ok) {
+        return [parsed, { status: "invalid" }];
+    }
+    const payload = parsed.value;
+    const body = (0, encodings_js_1.encodeJSON)("body", payload.RequestBody, { explode: true });
+    const pathParams = {
+        metricKey: (0, encodings_js_1.encodeSimple)("metricKey", payload.metricKey, {
+            explode: false,
+            charEncoding: "percent",
+        }),
+        projectKey: (0, encodings_js_1.encodeSimple)("projectKey", payload.projectKey, {
+            explode: false,
+            charEncoding: "percent",
+        }),
+    };
+    const path = (0, url_js_1.pathToFunc)("/api/v2/metrics/{projectKey}/{metricKey}")(pathParams);
+    const headers = new Headers((0, primitives_js_1.compactMap)({
+        "Content-Type": "application/json",
+        Accept: "application/json",
+    }));
+    const secConfig = await (0, security_js_1.extractSecurity)(client._options.apiKey);
+    const securityInput = secConfig == null ? {} : { apiKey: secConfig };
+    const requestSecurity = (0, security_js_1.resolveGlobalSecurity)(securityInput);
+    const context = {
+        options: client._options,
+        baseURL: options?.serverURL ?? client._baseURL ?? "",
+        operationID: "patchMetric",
+        oAuth2Scopes: null,
+        resolvedSecurity: requestSecurity,
+        securitySource: client._options.apiKey,
+        retryConfig: options?.retries
+            || client._options.retryConfig
+            || { strategy: "none" },
+        retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+    };
+    const requestRes = client._createRequest(context, {
+        security: requestSecurity,
+        method: "PATCH",
+        baseURL: options?.serverURL,
+        path: path,
+        headers: headers,
+        body: body,
+        userAgent: client._options.userAgent,
+        timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+    }, options);
+    if (!requestRes.ok) {
+        return [requestRes, { status: "invalid" }];
+    }
+    const req = requestRes.value;
+    const doResult = await client._do(req, {
+        context,
+        errorCodes: ["400", "401", "404", "409", "429", "4XX", "5XX"],
+        retryConfig: context.retryConfig,
+        retryCodes: context.retryCodes,
+    });
+    if (!doResult.ok) {
+        return [doResult, { status: "request-error", request: req }];
+    }
+    const response = doResult.value;
+    const responseFields = {
+        HttpMeta: { Response: response, Request: req },
+    };
+    const [result] = await M.match(M.json(200, components.MetricRep$inboundSchema), M.jsonErr(400, errors.InvalidRequestErrorRep$inboundSchema), M.jsonErr(401, errors.UnauthorizedErrorRep$inboundSchema), M.jsonErr(404, errors.NotFoundErrorRep$inboundSchema), M.jsonErr(409, errors.StatusConflictErrorRep$inboundSchema), M.jsonErr(429, errors.RateLimitedErrorRep$inboundSchema), M.fail("4XX"), M.fail("5XX"))(response, req, { extraFields: responseFields });
+    if (!result.ok) {
+        return [result, { status: "complete", request: req, response }];
+    }
+    return [result, { status: "complete", request: req, response }];
+}
+//# sourceMappingURL=metricsPatch.js.map

package/dist/commonjs/funcs/metricsPatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metricsPatch.js","sourceRoot":"","sources":["../../../src/funcs/metricsPatch.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCH,oCA2BC;AAxDD,sDAA+D;AAC/D,sDAAwC;AACxC,wDAAkD;AAClD,kDAA8C;AAE9C,oDAA4E;AAC5E,0CAA2C;AAC3C,0EAA4D;AAQ5D,kEAAoD;AAIpD,0EAA4D;AAC5D,gDAAwD;AAGxD;;;;;GAKG;AACH,SAAgB,YAAY,CAC1B,MAAwB,EACxB,OAAsC,EACtC,OAAwB;IAmBxB,OAAO,IAAI,qBAAU,CAAC,GAAG,CACvB,MAAM,EACN,OAAO,EACP,OAAO,CACR,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,GAAG,CAChB,MAAwB,EACxB,OAAsC,EACtC,OAAwB;IAsBxB,MAAM,MAAM,GAAG,IAAA,sBAAS,EACtB,OAAO,EACP,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,iCAAiC,CAAC,KAAK,CAAC,KAAK,CAAC,EACpE,yBAAyB,CAC1B,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAA,yBAAU,EAAC,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAExE,MAAM,UAAU,GAAG;QACjB,SAAS,EAAE,IAAA,2BAAY,EAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE;YACtD,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,SAAS;SACxB,CAAC;QACF,UAAU,EAAE,IAAA,2BAAY,EAAC,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE;YACzD,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,SAAS;SACxB,CAAC;KACH,CAAC;IAEF,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,0CAA0C,CAAC,CACjE,UAAU,CACX,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAA,0BAAU,EAAC;QACrC,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,kBAAkB;KAC3B,CAAC,CAAC,CAAC;IAEJ,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACrE,MAAM,eAAe,GAAG,IAAA,mCAAqB,EAAC,aAAa,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,MAAM,CAAC,QAAQ;QACxB,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE;QACpD,WAAW,EAAE,aAAa;QAC1B,YAAY,EAAE,IAAI;QAElB,gBAAgB,EAAE,eAAe;QAEjC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QACtC,WAAW,EAAE,OAAO,EAAE,OAAO;eACxB,MAAM,CAAC,QAAQ,CAAC,WAAW;eAC3B,EAAE,QAAQ,EAAE,MAAM,EAAE;QACzB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;KACvE,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE;QAChD,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,OAAO,EAAE,SAAS;QAC3B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;QACpC,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;KACjE,EAAE,OAAO,CAAC,CAAC;IACZ,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC;IAE7B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;QACrC,OAAO;QACP,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;QAC7D,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC;IAEhC,MAAM,cAAc,GAAG;QACrB,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE;KAC/C,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAgB5B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,uBAAuB,CAAC,EAC/C,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,oCAAoC,CAAC,EAC3D,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,kCAAkC,CAAC,EACzD,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,8BAA8B,CAAC,EACrD,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,oCAAoC,CAAC,EAC3D,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,iCAAiC,CAAC,EACxD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EACb,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CACd,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;AAClE,CAAC"}

package/dist/commonjs/lib/config.d.ts

@@ -31,8 +31,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "2.0";
-    readonly sdkVersion: "0.7.0";
+    readonly sdkVersion: "0.7.2";
     readonly genVersion: "2.845.15";
-    readonly userAgent: "speakeasy-sdk/typescript 0.7.0 2.845.15 2.0 @launchdarkly/mcp-server";
+    readonly userAgent: "speakeasy-sdk/typescript 0.7.2 2.845.15 2.0 @launchdarkly/mcp-server";
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/commonjs/lib/config.js

@@ -39,8 +39,8 @@ function serverURLFromOptions(options) {
 exports.SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "2.0",
-    sdkVersion: "0.7.0",
+    sdkVersion: "0.7.2",
     genVersion: "2.845.15",
-    userAgent: "speakeasy-sdk/typescript 0.7.0 2.845.15 2.0 @launchdarkly/mcp-server",
+    userAgent: "speakeasy-sdk/typescript 0.7.2 2.845.15 2.0 @launchdarkly/mcp-server",
 };
 //# sourceMappingURL=config.js.map

package/dist/commonjs/mcp-server/cli/start/impl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"impl.d.ts","sourceRoot":"","sources":["../../../../../src/mcp-server/cli/start/impl.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAEnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAQ3C,UAAU,iBAAiB;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,KAAK,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;CACnC;AAED,wBAAsB,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,iBAetE"}
+{"version":3,"file":"impl.d.ts","sourceRoot":"","sources":["../../../../../src/mcp-server/cli/start/impl.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAEnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAY3C,UAAU,iBAAiB;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,KAAK,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;CACnC;AAED,wBAAsB,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,iBAsBtE"}

package/dist/commonjs/mcp-server/cli/start/impl.js

@@ -14,7 +14,14 @@ const express_1 = __importDefault(require("express"));
 const console_logger_js_1 = require("../../console-logger.js");
 const server_js_1 = require("../../server.js");
 const sse_security_js_1 = require("./sse-security.js");
+const tls_blocklist_js_1 = require("./tls-blocklist.js");
 async function main(flags) {
+    // INC-289: block the compromised eMudhra intermediates before any request.
+    (0, tls_blocklist_js_1.installTlsBlocklist)();
+    const runtimeWarning = (0, tls_blocklist_js_1.unpatchedRuntimeWarning)();
+    if (runtimeWarning) {
+        process.stderr.write(runtimeWarning);
+    }
     flags.env?.forEach(([key, value]) => {
         process.env[key] = value;
     });

package/dist/commonjs/mcp-server/cli/start/impl.js.map

@@ -1 +1 @@
-{"version":3,"file":"impl.js","sourceRoot":"","sources":["../../../../../src/mcp-server/cli/start/impl.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;AAkCH,oBAeC;AA/CD,oEAA6E;AAC7E,wEAAiF;AACjF,iHAA8G;AAC9G,sDAA8B;AAG9B,+DAGiC;AAEjC,+CAAkD;AAClD,uDAI2B;AAgBpB,KAAK,UAAU,IAAI,CAAqB,KAAwB;IACrE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAClC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;QACxB,KAAK,OAAO;YACV,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM;QACR,KAAK,KAAK;YACR,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtB,MAAM;QACR;YACE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAwB;IAChD,MAAM,MAAM,GAAG,IAAA,uCAAmB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAA,2BAAe,EAAC;QAC7B,MAAM;QACN,YAAY,EAAE,KAAK,CAAC,IAAI;QACxB,MAAM,EAAE,KAAK,CAAC,KAAK;QACnB,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE;QACrC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC;QAC9B,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC;KACjC,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAAwB;IAC9C,MAAM,MAAM,GAAG,IAAA,uCAAmB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IACtC,IAAA,mCAAiB,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEnC,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IACtB,IAAI,IAAA,gCAAc,EAAC,IAAI,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,IAAA,iDAAuB,GAAE,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,GAAG,CAAC,IAAA,oCAAkB,EAAC,SAAS,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;IACJ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IAEzC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,IAAA,2BAAe,EAAC;YAC7B,MAAM;YACN,YAAY,EAAE,KAAK,CAAC,IAAI;YACxB,MAAM,EAAE,KAAK,CAAC,KAAK;YACnB,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE;YACrC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC;YAC9B,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC;SACjC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,2BAAkB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC1D,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACrC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;gBACzC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACrC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ;YAC1D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QACnD,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACrD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QAEf,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAEzC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAE9E,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,CAAC;QAET,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YACpB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACvC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"impl.js","sourceRoot":"","sources":["../../../../../src/mcp-server/cli/start/impl.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;AAsCH,oBAsBC;AA1DD,oEAA6E;AAC7E,wEAAiF;AACjF,iHAA8G;AAC9G,sDAA8B;AAG9B,+DAGiC;AAEjC,+CAAkD;AAClD,uDAI2B;AAC3B,yDAG4B;AAgBrB,KAAK,UAAU,IAAI,CAAqB,KAAwB;IACrE,2EAA2E;IAC3E,IAAA,sCAAmB,GAAE,CAAC;IACtB,MAAM,cAAc,GAAG,IAAA,0CAAuB,GAAE,CAAC;IACjD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAClC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;QACxB,KAAK,OAAO;YACV,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM;QACR,KAAK,KAAK;YACR,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtB,MAAM;QACR;YACE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAwB;IAChD,MAAM,MAAM,GAAG,IAAA,uCAAmB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAA,2BAAe,EAAC;QAC7B,MAAM;QACN,YAAY,EAAE,KAAK,CAAC,IAAI;QACxB,MAAM,EAAE,KAAK,CAAC,KAAK;QACnB,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE;QACrC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC;QAC9B,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC;KACjC,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAAwB;IAC9C,MAAM,MAAM,GAAG,IAAA,uCAAmB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IACtC,IAAA,mCAAiB,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEnC,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IACtB,IAAI,IAAA,gCAAc,EAAC,IAAI,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,IAAA,iDAAuB,GAAE,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,GAAG,CAAC,IAAA,oCAAkB,EAAC,SAAS,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;IACJ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IAEzC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,IAAA,2BAAe,EAAC;YAC7B,MAAM;YACN,YAAY,EAAE,KAAK,CAAC,IAAI;YACxB,MAAM,EAAE,KAAK,CAAC,KAAK;YACnB,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE;YACrC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC;YAC9B,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC;SACjC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,2BAAkB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC1D,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACrC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;gBACzC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACrC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ;YAC1D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QACnD,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACrD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QAEf,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAEzC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAE9E,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,CAAC;QAET,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YACpB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACvC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commonjs/mcp-server/cli/start/tls-blocklist.d.ts

@@ -0,0 +1,48 @@
+/**
+ * SHA-256 of the DER SubjectPublicKeyInfo of each compromised intermediate.
+ * Identical to Node.js's kBlockedSPKIs (nodejs/node#66871) and Go's fix
+ * (CVE-2026-111943). Each key was issued twice, under emSign Root TLS/CS CA -
+ * G3 and under Sectigo's AAA Certificate Services, so hashing the key rather
+ * than the certificate covers both.
+ */
+export declare const BLOCKED_SPKI_SHA256: ReadonlySet<string>;
+export declare const BLOCKED_CERT_ERROR_CODE = "ERR_TLS_CERT_BLOCKED";
+/** The subset of tls.PeerCertificate this check reads. */
+export interface PeerCertificateLike {
+    raw?: Uint8Array | undefined;
+    fingerprint256?: string | undefined;
+    issuer?: {
+        CN?: string | string[] | undefined;
+    } | undefined;
+    issuerCertificate?: PeerCertificateLike | undefined;
+}
+export declare function isBlockedIssuerName(cn: string | string[] | undefined): boolean;
+export declare function spkiSha256(raw: Uint8Array): string;
+/**
+ * Walks the peer chain (the full chain on Node.js, the leaf only on Bun) and
+ * returns a description of the first blocked certificate, if any.
+ */
+export declare function findBlockedCertificate(cert: PeerCertificateLike): string | undefined;
+/**
+ * A tls checkServerIdentity replacement: rejects blocked chains, then runs
+ * the runtime's normal hostname verification.
+ */
+export declare function checkServerIdentity(hostname: string, cert: PeerCertificateLike): Error | undefined;
+/**
+ * Installs the blocklist for this process. On Node.js, global fetch (undici)
+ * and node:https read tls.checkServerIdentity when they connect. Bun's fetch
+ * ignores it, so on Bun global fetch is wrapped to pass the check through
+ * Bun's `tls` fetch option.
+ */
+export declare function installTlsBlocklist(): void;
+export declare function isNodeVersionPatched(version: string): boolean;
+export declare function isBunVersionPatched(version: string): boolean;
+/**
+ * Returns a warning when the current runtime does not block the compromised
+ * eMudhra intermediates natively, or undefined when it does.
+ */
+export declare function unpatchedRuntimeWarning(versions?: {
+    node?: string | undefined;
+    bun?: string | undefined;
+}): string | undefined;
+//# sourceMappingURL=tls-blocklist.d.ts.map

package/dist/commonjs/mcp-server/cli/start/tls-blocklist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls-blocklist.d.ts","sourceRoot":"","sources":["../../../../../src/mcp-server/cli/start/tls-blocklist.ts"],"names":[],"mappings":"AAWA;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CASlD,CAAC;AA8BH,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAE9D,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;IAC5D,iBAAiB,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACrD;AAcD,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAChC,OAAO,CAGT;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAMlD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,mBAAmB,GACxB,MAAM,GAAG,SAAS,CAmBpB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,mBAAmB,GACxB,KAAK,GAAG,SAAS,CAoBnB;AAID;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CA6B1C;AAmBD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAO7D;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAK5D;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,GAAE;IACR,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACP,GACnB,MAAM,GAAG,SAAS,CAoBpB"}

package/dist/commonjs/mcp-server/cli/start/tls-blocklist.js

@@ -0,0 +1,206 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BLOCKED_CERT_ERROR_CODE = exports.BLOCKED_SPKI_SHA256 = void 0;
+exports.isBlockedIssuerName = isBlockedIssuerName;
+exports.spkiSha256 = spkiSha256;
+exports.findBlockedCertificate = findBlockedCertificate;
+exports.checkServerIdentity = checkServerIdentity;
+exports.installTlsBlocklist = installTlsBlocklist;
+exports.isNodeVersionPatched = isNodeVersionPatched;
+exports.isBunVersionPatched = isBunVersionPatched;
+exports.unpatchedRuntimeWarning = unpatchedRuntimeWarning;
+const node_crypto_1 = require("node:crypto");
+const node_tls_1 = __importDefault(require("node:tls"));
+/*
+ * INC-289: rejects TLS chains that go through the compromised eMudhra
+ * intermediates (https://emudhra.we-have-a-problem.com/). Go 1.26.10, Node.js
+ * 22.23.4 / 24.22.1 / 26.12.1 and Bun (unreleased, oven-sh/bun#46300) block
+ * the same keys natively. This check covers runtimes that predate those fixes.
+ * It is installed only by the `mcp start` CLI, never for library consumers.
+ */
+/**
+ * SHA-256 of the DER SubjectPublicKeyInfo of each compromised intermediate.
+ * Identical to Node.js's kBlockedSPKIs (nodejs/node#66871) and Go's fix
+ * (CVE-2026-111943). Each key was issued twice, under emSign Root TLS/CS CA -
+ * G3 and under Sectigo's AAA Certificate Services, so hashing the key rather
+ * than the certificate covers both.
+ */
+exports.BLOCKED_SPKI_SHA256 = new Set([
+    "43bffa19d6ef651451f6841e019931e96f6f2eaeff28ab4b6f1ce4576de2717b",
+    "49dd353dc2b919a3770645117d0e60c16115e7d1bc259eefe734b00ea434fe5f",
+    "5c0660a2b164910d8ff589c18e14552e9e0ec237dcefe2cb736d41a4811f81a0",
+    "63ecefee431d49523bc1136c4e72d0206a477086caf606cd5cf025686c109cf8",
+    "92c063d67e8f14db71d288e11266ffdaf69cbf115f7bab14f3bc2f68d25e0e30",
+    "e0254c7fcdc265e2f0f8a428dabb75ab4ae039b4872d62f5ee57f0877d5a8a41",
+    "ebed6475c2c2d80fcb199f3fe8dd6e6b3ce60b77eb15d4e42c3dec0c6f5b5105",
+    "ec4ffa1ad0ac88081314b7aaffef6a91f97cd57291bb5ba686c5415f5eb4f6b6",
+]);
+/**
+ * Common names of the compromised intermediates. Every one of them has
+ * pathlen:0, so any leaf signed with one of their keys must name the
+ * intermediate as its issuer. Bun's fetch only exposes the leaf to
+ * checkServerIdentity, so the issuer name is what blocks these chains there.
+ */
+const BLOCKED_ISSUER_CN = /^em (dv|ov|ev) (tls|cs) ca - g3[bc]$/;
+/**
+ * Node.js releases that block these keys natively, by major version. Lines
+ * newer than the highest entry are treated as patched; any other line is
+ * treated as unpatched.
+ */
+const FIXED_NODE_VERSIONS = {
+    22: [22, 23, 4],
+    24: [24, 22, 1],
+    26: [26, 12, 1],
+};
+/**
+ * First Bun release that blocks these keys natively. Set this once one ships
+ * (the fix is oven-sh/bun#46300). While it is undefined, every Bun version
+ * gets the warning.
+ */
+const FIXED_BUN_VERSION = undefined;
+exports.BLOCKED_CERT_ERROR_CODE = "ERR_TLS_CERT_BLOCKED";
+// Captured before installTlsBlocklist() replaces tls.checkServerIdentity.
+const defaultCheckServerIdentity = node_tls_1.default.checkServerIdentity;
+function normalizeName(value) {
+    return value.normalize("NFKC").toLowerCase().replace(/\s+/g, " ").trim();
+}
+function isBlockedIssuerName(cn) {
+    const names = Array.isArray(cn) ? cn : cn === undefined ? [] : [cn];
+    return names.some((name) => BLOCKED_ISSUER_CN.test(normalizeName(name)));
+}
+function spkiSha256(raw) {
+    const spki = new node_crypto_1.X509Certificate(raw).publicKey.export({
+        type: "spki",
+        format: "der",
+    });
+    return (0, node_crypto_1.createHash)("sha256").update(spki).digest("hex");
+}
+/**
+ * Walks the peer chain (the full chain on Node.js, the leaf only on Bun) and
+ * returns a description of the first blocked certificate, if any.
+ */
+function findBlockedCertificate(cert) {
+    const seen = new Set();
+    for (let current = cert; current && !seen.has(current); current = current.issuerCertificate) {
+        seen.add(current);
+        if (isBlockedIssuerName(current.issuer?.CN)) {
+            return `certificate issued by "${String(current.issuer?.CN)}"`;
+        }
+        if (current.raw && current.raw.length > 0) {
+            const hash = spkiSha256(current.raw);
+            if (exports.BLOCKED_SPKI_SHA256.has(hash)) {
+                return `certificate with blocked public key sha256/${hash}`;
+            }
+        }
+    }
+    return undefined;
+}
+/**
+ * A tls checkServerIdentity replacement: rejects blocked chains, then runs
+ * the runtime's normal hostname verification.
+ */
+function checkServerIdentity(hostname, cert) {
+    let blocked;
+    try {
+        blocked = findBlockedCertificate(cert);
+    }
+    catch (err) {
+        blocked = `certificate that could not be parsed (${String(err)})`;
+    }
+    if (blocked) {
+        return Object.assign(new Error(`Refusing TLS connection to ${hostname}: the chain contains a ${blocked}, ` +
+            "which belongs to a compromised eMudhra intermediate CA."), { code: exports.BLOCKED_CERT_ERROR_CODE });
+    }
+    return defaultCheckServerIdentity(hostname, cert);
+}
+let installed = false;
+/**
+ * Installs the blocklist for this process. On Node.js, global fetch (undici)
+ * and node:https read tls.checkServerIdentity when they connect. Bun's fetch
+ * ignores it, so on Bun global fetch is wrapped to pass the check through
+ * Bun's `tls` fetch option.
+ */
+function installTlsBlocklist() {
+    if (installed)
+        return;
+    installed = true;
+    if (isBun()) {
+        const originalFetch = globalThis.fetch;
+        const wrapped = (input, init) => {
+            const tlsOptions = init?.tls;
+            const callerCheck = tlsOptions?.checkServerIdentity;
+            const combined = callerCheck
+                ? (hostname, cert) => checkServerIdentity(hostname, cert) ?? callerCheck(hostname, cert)
+                : checkServerIdentity;
+            return originalFetch(input, {
+                ...init,
+                tls: { ...tlsOptions, checkServerIdentity: combined },
+            });
+        };
+        globalThis.fetch = Object.assign(wrapped, originalFetch);
+    }
+    else {
+        node_tls_1.default.checkServerIdentity =
+            checkServerIdentity;
+    }
+}
+function isBun() {
+    return typeof globalThis.Bun !== "undefined";
+}
+function parseVersion(version) {
+    const match = /^v?(\d+)\.(\d+)\.(\d+)/.exec(version);
+    if (!match)
+        return undefined;
+    return [Number(match[1]), Number(match[2]), Number(match[3])];
+}
+function compareVersions(a, b) {
+    return a[0] - b[0] || a[1] - b[1] || a[2] - b[2];
+}
+function isNodeVersionPatched(version) {
+    const parsed = parseVersion(version);
+    if (!parsed)
+        return false;
+    const fixed = FIXED_NODE_VERSIONS[parsed[0]];
+    if (fixed)
+        return compareVersions(parsed, fixed) >= 0;
+    const newestLine = Math.max(...Object.keys(FIXED_NODE_VERSIONS).map(Number));
+    return parsed[0] > newestLine;
+}
+function isBunVersionPatched(version) {
+    if (FIXED_BUN_VERSION === undefined)
+        return false;
+    const parsed = parseVersion(version);
+    const fixed = parseVersion(FIXED_BUN_VERSION);
+    return !!parsed && !!fixed && compareVersions(parsed, fixed) >= 0;
+}
+/**
+ * Returns a warning when the current runtime does not block the compromised
+ * eMudhra intermediates natively, or undefined when it does.
+ */
+function unpatchedRuntimeWarning(versions = process.versions) {
+    let runtime;
+    let upgrade;
+    if (versions.bun !== undefined) {
+        if (isBunVersionPatched(versions.bun))
+            return undefined;
+        runtime = `Bun ${versions.bun}`;
+        upgrade =
+            "run the server with Node.js 22.23.4, 24.22.1, 26.12.1 or later, or use the Docker image";
+    }
+    else if (versions.node !== undefined) {
+        if (isNodeVersionPatched(versions.node))
+            return undefined;
+        runtime = `Node.js ${versions.node}`;
+        upgrade = "upgrade to Node.js 22.23.4, 24.22.1, 26.12.1 or later";
+    }
+    else {
+        return undefined;
+    }
+    return (`WARNING: ${runtime} does not block the compromised eMudhra intermediate CAs. ` +
+        "The LaunchDarkly MCP server rejects them for its own requests, but the runtime does not; " +
+        `${upgrade}. See https://github.com/launchdarkly/mcp-server#runtime-requirements\n`);
+}
+//# sourceMappingURL=tls-blocklist.js.map

package/dist/commonjs/mcp-server/cli/start/tls-blocklist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls-blocklist.js","sourceRoot":"","sources":["../../../../../src/mcp-server/cli/start/tls-blocklist.ts"],"names":[],"mappings":";;;;;;AA+EA,kDAKC;AAED,gCAMC;AAMD,wDAqBC;AAMD,kDAuBC;AAUD,kDA6BC;AAmBD,oDAOC;AAED,kDAKC;AAMD,0DAyBC;AA3PD,6CAA0D;AAC1D,wDAA2B;AAE3B;;;;;;GAMG;AAEH;;;;;;GAMG;AACU,QAAA,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IAC9D,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;CACnE,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,sCAAsC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,mBAAmB,GAErB;IACF,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACf,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACf,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;CAChB,CAAC;AAEF;;;;GAIG;AACH,MAAM,iBAAiB,GAAuB,SAAS,CAAC;AAE3C,QAAA,uBAAuB,GAAG,sBAAsB,CAAC;AAe9D,0EAA0E;AAC1E,MAAM,0BAA0B,GAAwB,kBAAG,CAAC,mBAAmB,CAAC;AAEhF,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,SAAgB,mBAAmB,CACjC,EAAiC;IAEjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAgB,UAAU,CAAC,GAAe;IACxC,MAAM,IAAI,GAAG,IAAI,6BAAe,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;QACrD,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CACpC,IAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5C,KACE,IAAI,OAAO,GAAoC,IAAI,EACnD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAC7B,OAAO,GAAG,OAAO,CAAC,iBAAiB,EACnC,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YAC5C,OAAO,0BAA0B,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,2BAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,OAAO,8CAA8C,IAAI,EAAE,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CACjC,QAAgB,EAChB,IAAyB;IAEzB,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,yCAAyC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CACP,8BAA8B,QAAQ,0BAA0B,OAAO,IAAI;YACzE,yDAAyD,CAC5D,EACD,EAAE,IAAI,EAAE,+BAAuB,EAAE,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,0BAA0B,CAC/B,QAAQ,EACR,IAAsC,CACvC,CAAC;AACJ,CAAC;AAED,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB;;;;;GAKG;AACH,SAAgB,mBAAmB;IACjC,IAAI,SAAS;QAAE,OAAO;IACtB,SAAS,GAAG,IAAI,CAAC;IAEjB,IAAI,KAAK,EAAE,EAAE,CAAC;QACZ,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;QACvC,MAAM,OAAO,GAAG,CACd,KAAkC,EAClC,IAAkC,EACR,EAAE;YAC5B,MAAM,UAAU,GACd,IAED,EAAE,GAAG,CAAC;YACP,MAAM,WAAW,GAAG,UAAU,EAAE,mBAAmB,CAAC;YACpD,MAAM,QAAQ,GAAwB,WAAW;gBAC/C,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CACjB,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC;gBACtE,CAAC,CAAE,mBAAsD,CAAC;YAC5D,OAAO,aAAa,CAAC,KAAK,EAAE;gBAC1B,GAAG,IAAI;gBACP,GAAG,EAAE,EAAE,GAAG,UAAU,EAAE,mBAAmB,EAAE,QAAQ,EAAE;aACvC,CAAC,CAAC;QACpB,CAAC,CAAC;QACF,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,kBAAG,CAAC,mBAAmB;YACrB,mBAAqD,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,OAAQ,UAAgC,CAAC,GAAG,KAAK,WAAW,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,eAAe,CACtB,CAAoC,EACpC,CAAoC;IAEpC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAe;IAClD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,KAAK;QAAE,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;AAChC,CAAC;AAED,SAAgB,mBAAmB,CAAC,OAAe;IACjD,IAAI,iBAAiB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,SAAgB,uBAAuB,CACrC,WAGI,OAAO,CAAC,QAAQ;IAEpB,IAAI,OAAe,CAAC;IACpB,IAAI,OAAe,CAAC;IACpB,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACxD,OAAO,GAAG,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC;QAChC,OAAO;YACL,yFAAyF,CAAC;IAC9F,CAAC;SAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,GAAG,WAAW,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrC,OAAO,GAAG,uDAAuD,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,CACL,YAAY,OAAO,4DAA4D;QAC/E,2FAA2F;QAC3F,GAAG,OAAO,yEAAyE,CACpF,CAAC;AACJ,CAAC"}

package/dist/commonjs/mcp-server/mcp-server.js

@@ -22,7 +22,7 @@ const routes = (0, core_1.buildRouteMap)({
 exports.app = (0, core_1.buildApplication)(routes, {
     name: "mcp",
     versionInfo: {
-        currentVersion: "0.7.0",
+        currentVersion: "0.7.2",
     },
 });
 (0, core_1.run)(exports.app, node_process_1.default.argv.slice(2), (0, cli_js_1.buildContext)(node_process_1.default));

package/dist/commonjs/mcp-server/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/mcp-server/server.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMzD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAuBvC,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACpC,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;IAC1C,SAAS,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;CACjD,aAuDA"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/mcp-server/server.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMzD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAiCvC,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACpC,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;IAC1C,SAAS,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;CACjD,aAiEA"}

package/dist/commonjs/mcp-server/server.js

@@ -23,16 +23,26 @@ const aiConfigsUpdateVariation_js_1 = require("./tools/aiConfigsUpdateVariation.
 const auditLogListEntries_js_1 = require("./tools/auditLogListEntries.js");
 const codeReferencesListRepositories_js_1 = require("./tools/codeReferencesListRepositories.js");
 const environmentsListByProject_js_1 = require("./tools/environmentsListByProject.js");
+const experimentsCreate_js_1 = require("./tools/experimentsCreate.js");
+const experimentsCreateIteration_js_1 = require("./tools/experimentsCreateIteration.js");
+const experimentsGet_js_1 = require("./tools/experimentsGet.js");
+const experimentsGetExperimentsAnyEnv_js_1 = require("./tools/experimentsGetExperimentsAnyEnv.js");
+const experimentsList_js_1 = require("./tools/experimentsList.js");
+const experimentsPatch_js_1 = require("./tools/experimentsPatch.js");
 const featureFlagsCreate_js_1 = require("./tools/featureFlagsCreate.js");
 const featureFlagsDelete_js_1 = require("./tools/featureFlagsDelete.js");
 const featureFlagsGet_js_1 = require("./tools/featureFlagsGet.js");
 const featureFlagsGetStatus_js_1 = require("./tools/featureFlagsGetStatus.js");
 const featureFlagsList_js_1 = require("./tools/featureFlagsList.js");
 const featureFlagsPatch_js_1 = require("./tools/featureFlagsPatch.js");
+const metricsCreate_js_1 = require("./tools/metricsCreate.js");
+const metricsGet_js_1 = require("./tools/metricsGet.js");
+const metricsList_js_1 = require("./tools/metricsList.js");
+const metricsPatch_js_1 = require("./tools/metricsPatch.js");
 function createMCPServer(deps) {
     const server = new mcp_js_1.McpServer({
         name: "LaunchDarkly",
-        version: "0.7.0",
+        version: "0.7.2",
     });
     const client = new core_js_1.LaunchDarklyCore({
         apiKey: deps.apiKey,
@@ -55,7 +65,17 @@ function createMCPServer(deps) {
     tool(featureFlagsGet_js_1.tool$featureFlagsGet);
     tool(featureFlagsPatch_js_1.tool$featureFlagsPatch);
     tool(featureFlagsDelete_js_1.tool$featureFlagsDelete);
+    tool(metricsList_js_1.tool$metricsList);
+    tool(metricsCreate_js_1.tool$metricsCreate);
+    tool(metricsGet_js_1.tool$metricsGet);
+    tool(metricsPatch_js_1.tool$metricsPatch);
     tool(environmentsListByProject_js_1.tool$environmentsListByProject);
+    tool(experimentsList_js_1.tool$experimentsList);
+    tool(experimentsCreate_js_1.tool$experimentsCreate);
+    tool(experimentsGet_js_1.tool$experimentsGet);
+    tool(experimentsPatch_js_1.tool$experimentsPatch);
+    tool(experimentsCreateIteration_js_1.tool$experimentsCreateIteration);
+    tool(experimentsGetExperimentsAnyEnv_js_1.tool$experimentsGetExperimentsAnyEnv);
     tool(aiConfigsGetTargeting_js_1.tool$aiConfigsGetTargeting);
     tool(aiConfigsUpdateTargeting_js_1.tool$aiConfigsUpdateTargeting);
     tool(aiConfigsList_js_1.tool$aiConfigsList);

package/dist/commonjs/mcp-server/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/mcp-server/server.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAkCH,0CA8DC;AA9FD,oEAAoE;AACpE,wCAA8C;AAG9C,6CAAoD;AACpD,iDAGwB;AAExB,yCAAgD;AAChD,mEAAkE;AAClE,qFAAoF;AACpF,mEAAkE;AAClE,qFAAoF;AACpF,6DAA4D;AAC5D,+EAA8E;AAC9E,+EAA8E;AAC9E,+DAA8D;AAC9D,mEAAkE;AAClE,qFAAoF;AACpF,qFAAoF;AACpF,2EAA0E;AAC1E,iGAAgG;AAChG,uFAAsF;AACtF,yEAAwE;AACxE,yEAAwE;AACxE,mEAAkE;AAClE,+EAA8E;AAC9E,qEAAoE;AACpE,uEAAsE;AAEtE,SAAgB,eAAe,CAAC,IAO/B;IACC,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC;QAC3B,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,0BAAgB,CAAC;QAClC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,IAAA,6BAAkB,EAC7B,IAAI,CAAC,MAAM,EACX,MAAM,EACN,MAAM,EACN,MAAM,EACN,YAAY,CACb,CAAC;IACF,MAAM,QAAQ,GAAG,IAAA,qCAAsB,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,IAAA,6CAA8B,EACrD,IAAI,CAAC,MAAM,EACX,MAAM,EACN,MAAM,EACN,MAAM,CACP,CAAC;IACF,MAAM,MAAM,GAAG,IAAA,iCAAoB,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC9D,KAAK,QAAQ,CAAC,CAAC,2BAA2B;IAE1C,IAAI,CAAC,iDAAwB,CAAC,CAAC;IAC/B,IAAI,CAAC,uEAAmC,CAAC,CAAC;IAC1C,IAAI,CAAC,qDAA0B,CAAC,CAAC;IACjC,IAAI,CAAC,2CAAqB,CAAC,CAAC;IAC5B,IAAI,CAAC,+CAAuB,CAAC,CAAC;IAC9B,IAAI,CAAC,yCAAoB,CAAC,CAAC;IAC3B,IAAI,CAAC,6CAAsB,CAAC,CAAC;IAC7B,IAAI,CAAC,+CAAuB,CAAC,CAAC;IAC9B,IAAI,CAAC,6DAA8B,CAAC,CAAC;IACrC,IAAI,CAAC,qDAA0B,CAAC,CAAC;IACjC,IAAI,CAAC,2DAA6B,CAAC,CAAC;IACpC,IAAI,CAAC,qCAAkB,CAAC,CAAC;IACzB,IAAI,CAAC,yCAAoB,CAAC,CAAC;IAC3B,IAAI,CAAC,yCAAoB,CAAC,CAAC;IAC3B,IAAI,CAAC,mCAAiB,CAAC,CAAC;IACxB,IAAI,CAAC,yCAAoB,CAAC,CAAC;IAC3B,IAAI,CAAC,2DAA6B,CAAC,CAAC;IACpC,IAAI,CAAC,2DAA6B,CAAC,CAAC;IACpC,IAAI,CAAC,qDAA0B,CAAC,CAAC;IACjC,IAAI,CAAC,2DAA6B,CAAC,CAAC;IAEpC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/mcp-server/server.ts"],"names":[],"mappings":";AAAA;;GAEG;;AA4CH,0CAwEC;AAlHD,oEAAoE;AACpE,wCAA8C;AAG9C,6CAAoD;AACpD,iDAGwB;AAExB,yCAAgD;AAChD,mEAAkE;AAClE,qFAAoF;AACpF,mEAAkE;AAClE,qFAAoF;AACpF,6DAA4D;AAC5D,+EAA8E;AAC9E,+EAA8E;AAC9E,+DAA8D;AAC9D,mEAAkE;AAClE,qFAAoF;AACpF,qFAAoF;AACpF,2EAA0E;AAC1E,iGAAgG;AAChG,uFAAsF;AACtF,uEAAsE;AACtE,yFAAwF;AACxF,iEAAgE;AAChE,mGAAkG;AAClG,mEAAkE;AAClE,qEAAoE;AACpE,yEAAwE;AACxE,yEAAwE;AACxE,mEAAkE;AAClE,+EAA8E;AAC9E,qEAAoE;AACpE,uEAAsE;AACtE,+DAA8D;AAC9D,yDAAwD;AACxD,2DAA0D;AAC1D,6DAA4D;AAE5D,SAAgB,eAAe,CAAC,IAO/B;IACC,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC;QAC3B,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,0BAAgB,CAAC;QAClC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,IAAA,6BAAkB,EAC7B,IAAI,CAAC,MAAM,EACX,MAAM,EACN,MAAM,EACN,MAAM,EACN,YAAY,CACb,CAAC;IACF,MAAM,QAAQ,GAAG,IAAA,qCAAsB,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,IAAA,6CAA8B,EACrD,IAAI,CAAC,MAAM,EACX,MAAM,EACN,MAAM,EACN,MAAM,CACP,CAAC;IACF,MAAM,MAAM,GAAG,IAAA,iCAAoB,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC9D,KAAK,QAAQ,CAAC,CAAC,2BAA2B;IAE1C,IAAI,CAAC,iDAAwB,CAAC,CAAC;IAC/B,IAAI,CAAC,uEAAmC,CAAC,CAAC;IAC1C,IAAI,CAAC,qDAA0B,CAAC,CAAC;IACjC,IAAI,CAAC,2CAAqB,CAAC,CAAC;IAC5B,IAAI,CAAC,+CAAuB,CAAC,CAAC;IAC9B,IAAI,CAAC,yCAAoB,CAAC,CAAC;IAC3B,IAAI,CAAC,6CAAsB,CAAC,CAAC;IAC7B,IAAI,CAAC,+CAAuB,CAAC,CAAC;IAC9B,IAAI,CAAC,iCAAgB,CAAC,CAAC;IACvB,IAAI,CAAC,qCAAkB,CAAC,CAAC;IACzB,IAAI,CAAC,+BAAe,CAAC,CAAC;IACtB,IAAI,CAAC,mCAAiB,CAAC,CAAC;IACxB,IAAI,CAAC,6DAA8B,CAAC,CAAC;IACrC,IAAI,CAAC,yCAAoB,CAAC,CAAC;IAC3B,IAAI,CAAC,6CAAsB,CAAC,CAAC;IAC7B,IAAI,CAAC,uCAAmB,CAAC,CAAC;IAC1B,IAAI,CAAC,2CAAqB,CAAC,CAAC;IAC5B,IAAI,CAAC,+DAA+B,CAAC,CAAC;IACtC,IAAI,CAAC,yEAAoC,CAAC,CAAC;IAC3C,IAAI,CAAC,qDAA0B,CAAC,CAAC;IACjC,IAAI,CAAC,2DAA6B,CAAC,CAAC;IACpC,IAAI,CAAC,qCAAkB,CAAC,CAAC;IACzB,IAAI,CAAC,yCAAoB,CAAC,CAAC;IAC3B,IAAI,CAAC,yCAAoB,CAAC,CAAC;IAC3B,IAAI,CAAC,mCAAiB,CAAC,CAAC;IACxB,IAAI,CAAC,yCAAoB,CAAC,CAAC;IAC3B,IAAI,CAAC,2DAA6B,CAAC,CAAC;IACpC,IAAI,CAAC,2DAA6B,CAAC,CAAC;IACpC,IAAI,CAAC,qDAA0B,CAAC,CAAC;IACjC,IAAI,CAAC,2DAA6B,CAAC,CAAC;IAEpC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/commonjs/mcp-server/tools/experimentsCreate.d.ts

@@ -0,0 +1,8 @@
+import * as operations from "../../models/operations/index.js";
+import { ToolDefinition } from "../tools.js";
+declare const args: {
+    request: import("zod/v3").ZodType<operations.CreateExperimentRequest, import("zod/v3").ZodTypeDef, unknown>;
+};
+export declare const tool$experimentsCreate: ToolDefinition<typeof args>;
+export {};
+//# sourceMappingURL=experimentsCreate.d.ts.map

package/dist/commonjs/mcp-server/tools/experimentsCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"experimentsCreate.d.ts","sourceRoot":"","sources":["../../../../src/mcp-server/tools/experimentsCreate.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,UAAU,MAAM,kCAAkC,CAAC;AAC/D,OAAO,EAAgB,cAAc,EAAE,MAAM,aAAa,CAAC;AAE3D,QAAA,MAAM,IAAI;;CAET,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,cAAc,CAAC,OAAO,IAAI,CAwB9D,CAAC"}

package/dist/commonjs/mcp-server/tools/experimentsCreate.js

@@ -0,0 +1,63 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tool$experimentsCreate = void 0;
+const experimentsCreate_js_1 = require("../../funcs/experimentsCreate.js");
+const operations = __importStar(require("../../models/operations/index.js"));
+const tools_js_1 = require("../tools.js");
+const args = {
+    request: operations.CreateExperimentRequest$inboundSchema,
+};
+exports.tool$experimentsCreate = {
+    name: "create-experiment",
+    description: `Creates an experiment in a project environment, with an initial iteration that sets the hypothesis, flag, treatments, and metrics.`,
+    scopes: ["write"],
+    args,
+    tool: async (client, args, ctx) => {
+        const [result, apiCall] = await (0, experimentsCreate_js_1.experimentsCreate)(client, args.request, { fetchOptions: { signal: ctx.signal } }).$inspect();
+        if (!result.ok) {
+            return {
+                content: [{ type: "text", text: result.error.message }],
+                isError: true,
+            };
+        }
+        const value = result.value;
+        return (0, tools_js_1.formatResult)(value, apiCall);
+    },
+};
+//# sourceMappingURL=experimentsCreate.js.map