@lifeaitools/clauth 1.5.84 → 1.6.0

package/cli/commands/serve.js

@@ -17,7 +17,7 @@ import ora from "ora";
 import { execSync as execSyncTop } from "child_process";
 import Conf from "conf";
 import { getConfOptions } from "../conf-path.js";
-import { appendFile, readdir, readFile, writeFile, rm, mkdir, stat, rename } from "node:fs/promises";
+import { appendFile, readdir, readFile, writeFile, rm, mkdir, stat, rename, cp } from "node:fs/promises";
 import fg from "fast-glob";
 import { rgPath } from "@vscode/ripgrep";
 import { createStudioDebugRuntime } from "../studio-debug.js";
@@ -607,14 +607,14 @@ function dashboardHtml(port, whitelist, isStaged = false) {
   .project-tab{background:none;border:none;border-bottom:2px solid transparent;color:#64748b;padding:8px 16px;font-size:.82rem;font-weight:500;cursor:pointer;white-space:nowrap;transition:all .15s}
   .project-tab:hover{color:#94a3b8;background:rgba(59,130,246,.05)}
   .project-tab.active{color:#60a5fa;border-bottom-color:#3b82f6;background:rgba(59,130,246,.08)}
-  .project-tab .tab-count{font-size:.7rem;color:#475569;margin-left:4px;font-weight:400}
-  .project-tab.active .tab-count{color:#3b82f6}
-  .service-search{display:flex;align-items:center;gap:10px;margin:-.35rem 0 1rem;background:#0f172a;border:1px solid #1e293b;border-radius:8px;padding:9px 12px}
-  .service-search-label{font-size:.76rem;color:#64748b;font-weight:600;letter-spacing:.02em;text-transform:uppercase;white-space:nowrap}
-  .service-search-input{flex:1;min-width:180px;background:#0a0f1a;border:1px solid #334155;border-radius:6px;color:#e2e8f0;font-family:'Courier New',monospace;font-size:.88rem;padding:8px 11px;outline:none;transition:border-color .15s}
-  .service-search-input:focus{border-color:#3b82f6}
-  .service-search-count{font-size:.78rem;color:#64748b;white-space:nowrap}
-  .project-edit{display:none;margin-top:8px;padding:8px 10px;background:#0f172a;border:1px solid #334155;border-radius:6px}
+  .project-tab .tab-count{font-size:.7rem;color:#475569;margin-left:4px;font-weight:400}
+  .project-tab.active .tab-count{color:#3b82f6}
+  .service-search{display:flex;align-items:center;gap:10px;margin:-.35rem 0 1rem;background:#0f172a;border:1px solid #1e293b;border-radius:8px;padding:9px 12px}
+  .service-search-label{font-size:.76rem;color:#64748b;font-weight:600;letter-spacing:.02em;text-transform:uppercase;white-space:nowrap}
+  .service-search-input{flex:1;min-width:180px;background:#0a0f1a;border:1px solid #334155;border-radius:6px;color:#e2e8f0;font-family:'Courier New',monospace;font-size:.88rem;padding:8px 11px;outline:none;transition:border-color .15s}
+  .service-search-input:focus{border-color:#3b82f6}
+  .service-search-count{font-size:.78rem;color:#64748b;white-space:nowrap}
+  .project-edit{display:none;margin-top:8px;padding:8px 10px;background:#0f172a;border:1px solid #334155;border-radius:6px}
   .project-edit.open{display:flex;gap:6px;align-items:center}
   .project-edit input{background:#1e293b;border:1px solid #334155;border-radius:4px;color:#e2e8f0;font-size:.78rem;padding:4px 8px;outline:none;flex:1;font-family:'Courier New',monospace;transition:border-color .15s}
   .project-edit input:focus{border-color:#3b82f6}
@@ -868,13 +868,13 @@ function dashboardHtml(port, whitelist, isStaged = false) {
     <div class="wizard-foot" id="wizard-foot"></div>
   </div>
 
-  <div id="project-tabs" class="project-tabs" style="display:none"></div>
-  <div id="service-search" class="service-search">
-    <span class="service-search-label">Search</span>
-    <input id="service-search-input" class="service-search-input" type="search" placeholder="service name or display name" autocomplete="off" spellcheck="false" oninput="setServiceSearch(this.value)">
-    <span id="service-search-count" class="service-search-count"></span>
-  </div>
-  <div id="grid" class="grid"><p class="loading">Loading services…</p></div>
+  <div id="project-tabs" class="project-tabs" style="display:none"></div>
+  <div id="service-search" class="service-search">
+    <span class="service-search-label">Search</span>
+    <input id="service-search-input" class="service-search-input" type="search" placeholder="service name or display name" autocomplete="off" spellcheck="false" oninput="setServiceSearch(this.value)">
+    <span id="service-search-count" class="service-search-count"></span>
+  </div>
+  <div id="grid" class="grid"><p class="loading">Loading services…</p></div>
   <div class="footer">localhost:${port} · 127.0.0.1 only · 10-strike lockout</div>
 </div>
 
@@ -1168,25 +1168,25 @@ async function stopDaemon() {
 }
 
 // ── Load services ───────────────────────────
-let allServices = [];
-let activeProjectTab = "all";
-let serviceSearchQuery = "";
-
-function serviceSort(a, b) {
-  return String(a.name || "").localeCompare(String(b.name || ""), undefined, { sensitivity: "base", numeric: true });
-}
-
-function matchesServiceSearch(s, query) {
-  if (!query) return true;
-  const q = query.toLowerCase();
-  return String(s.name || "").toLowerCase().includes(q) ||
-    String(s.label || "").toLowerCase().includes(q);
-}
-
-function setServiceSearch(value) {
-  serviceSearchQuery = value || "";
-  renderServiceGrid(allServices);
-}
+let allServices = [];
+let activeProjectTab = "all";
+let serviceSearchQuery = "";
+
+function serviceSort(a, b) {
+  return String(a.name || "").localeCompare(String(b.name || ""), undefined, { sensitivity: "base", numeric: true });
+}
+
+function matchesServiceSearch(s, query) {
+  if (!query) return true;
+  const q = query.toLowerCase();
+  return String(s.name || "").toLowerCase().includes(q) ||
+    String(s.label || "").toLowerCase().includes(q);
+}
+
+function setServiceSearch(value) {
+  serviceSearchQuery = value || "";
+  renderServiceGrid(allServices);
+}
 
 function renderProjectTabs(services) {
   const tabsEl = document.getElementById("project-tabs");
@@ -1212,35 +1212,35 @@ function renderProjectTabs(services) {
   ).join("");
 }
 
-function switchProjectTab(key) {
-  activeProjectTab = key;
-  renderProjectTabs(allServices);
-  renderServiceGrid(allServices);
-}
+function switchProjectTab(key) {
+  activeProjectTab = key;
+  renderProjectTabs(allServices);
+  renderServiceGrid(allServices);
+}
 
 function renderServiceGrid(services) {
   const grid = document.getElementById("grid");
   let filtered = services;
   if (activeProjectTab === "unassigned") {
     filtered = services.filter(s => !s.project);
-  } else if (activeProjectTab !== "all") {
-    filtered = services.filter(s => s.project === activeProjectTab);
-  }
-  filtered = filtered
-    .filter(s => matchesServiceSearch(s, serviceSearchQuery))
-    .slice()
-    .sort(serviceSort);
-  const searchCount = document.getElementById("service-search-count");
-  if (searchCount) {
-    const trimmed = serviceSearchQuery.trim();
-    searchCount.textContent = trimmed ? filtered.length + " match" + (filtered.length === 1 ? "" : "es") : filtered.length + " shown";
-  }
-  if (!filtered.length) {
-    grid.innerHTML = serviceSearchQuery.trim()
-      ? '<p class="loading">No services match that search.</p>'
-      : '<p class="loading">No services in this group.</p>';
-    return;
-  }
+  } else if (activeProjectTab !== "all") {
+    filtered = services.filter(s => s.project === activeProjectTab);
+  }
+  filtered = filtered
+    .filter(s => matchesServiceSearch(s, serviceSearchQuery))
+    .slice()
+    .sort(serviceSort);
+  const searchCount = document.getElementById("service-search-count");
+  if (searchCount) {
+    const trimmed = serviceSearchQuery.trim();
+    searchCount.textContent = trimmed ? filtered.length + " match" + (filtered.length === 1 ? "" : "es") : filtered.length + " shown";
+  }
+  if (!filtered.length) {
+    grid.innerHTML = serviceSearchQuery.trim()
+      ? '<p class="loading">No services match that search.</p>'
+      : '<p class="loading">No services in this group.</p>';
+    return;
+  }
   grid.innerHTML = filtered.map(s => \`
     <div class="card">
       <div style="display:flex;align-items:flex-start;justify-content:space-between">
@@ -5117,8 +5117,8 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
     }
 
     // POST /update-service — update service metadata (project, label, description)
-    if (method === "POST" && reqPath === "/update-service") {
-      if (lockedGuard(res)) return;
+    if (method === "POST" && reqPath === "/update-service") {
+      if (lockedGuard(res)) return;
 
       let body;
       try { body = await readBody(req); } catch {
@@ -5149,39 +5149,39 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
         return ok(res, { ok: true, service: service.toLowerCase(), ...updates });
       } catch (err) {
         return strike(res, 502, err.message);
-      }
-    }
-
-    if (method === "GET" && reqPath === "/search") {
-      if (lockedGuard(res)) return;
-      const query = (url.searchParams.get("q") || url.searchParams.get("query") || "").trim();
-      const project = (url.searchParams.get("project") || "").trim() || undefined;
-      const includeAddresses = url.searchParams.get("addresses") !== "false";
-      if (!query) {
-        res.writeHead(400, { "Content-Type": "application/json", ...CORS });
-        return res.end(JSON.stringify({ error: "q query parameter is required" }));
-      }
-
-      try {
-        const { token, timestamp } = deriveToken(password, machineHash);
-        const result = await searchServices({
-          password,
-          machineHash,
-          token,
-          timestamp,
-          project,
-          query,
-          includeAddresses,
-          whitelist
-        });
-        if (result.error) return strike(res, 502, result.error);
-        return ok(res, result);
-      } catch (err) {
-        return strike(res, 502, err.message);
-      }
-    }
-
-    // Unknown route — a wrong URL is not an auth failure. Log it, return 404,
+      }
+    }
+
+    if (method === "GET" && reqPath === "/search") {
+      if (lockedGuard(res)) return;
+      const query = (url.searchParams.get("q") || url.searchParams.get("query") || "").trim();
+      const project = (url.searchParams.get("project") || "").trim() || undefined;
+      const includeAddresses = url.searchParams.get("addresses") !== "false";
+      if (!query) {
+        res.writeHead(400, { "Content-Type": "application/json", ...CORS });
+        return res.end(JSON.stringify({ error: "q query parameter is required" }));
+      }
+
+      try {
+        const { token, timestamp } = deriveToken(password, machineHash);
+        const result = await searchServices({
+          password,
+          machineHash,
+          token,
+          timestamp,
+          project,
+          query,
+          includeAddresses,
+          whitelist
+        });
+        if (result.error) return strike(res, 502, result.error);
+        return ok(res, result);
+      } catch (err) {
+        return strike(res, 502, err.message);
+      }
+    }
+
+    // Unknown route — a wrong URL is not an auth failure. Log it, return 404,
     // but do NOT increment failCount (which locks the vault at MAX_FAILS).
     // Auth failures (wrong password, wrong token) still strike via /auth and /get/:service.
     try {
@@ -5552,8 +5552,8 @@ async function actionForeground(opts) {
 // Reuses the same auth model as the HTTP daemon.
 // Secrets are delivered via temp files — never in the MCP response.
 
-import { createInterface } from "readline";
-import { execSync, spawn as spawnProc, spawnSync } from "child_process";
+import { createInterface } from "readline";
+import { execSync, spawn as spawnProc, spawnSync } from "child_process";
 
 // ── Monkey dispatch — headless Claude CLI worker ─────────────────
 function findClaudeBinary() {
@@ -6156,9 +6156,9 @@ function stopCodevelopSession(session_id) {
   return { stopped: true, session_id };
 }
 
-const ENV_MAP = {
-  "github":           "GITHUB_TOKEN",
-  "supabase-anon":    "NEXT_PUBLIC_SUPABASE_ANON_KEY",
+const ENV_MAP = {
+  "github":           "GITHUB_TOKEN",
+  "supabase-anon":    "NEXT_PUBLIC_SUPABASE_ANON_KEY",
   "supabase-service": "SUPABASE_SERVICE_ROLE_KEY",
   "supabase-db":      "SUPABASE_DB_URL",
   "vercel":           "VERCEL_TOKEN",
@@ -6170,116 +6170,116 @@ const ENV_MAP = {
   "rocketreach":      "ROCKETREACH_API_KEY",
   "npm":              "NPM_TOKEN",
   "namecheap":        "NAMECHEAP_API_KEY",
-  "gmail":            "GMAIL_CREDENTIALS",
-};
-
-const ADDRESS_KEY_TYPES = new Set(["connstring", "fileserver", "oauth"]);
-const ADDRESS_FIELDS = new Set(["url", "uri", "host", "hostname", "server", "address", "base_url", "endpoint", "path", "root"]);
-
-function normalizeSearchText(value) {
-  return String(value || "").toLowerCase();
-}
-
-function redactUrlish(value) {
-  const text = String(value || "").trim();
-  if (!text) return "";
-  try {
-    const url = new URL(text);
-    if (url.username) url.username = "***";
-    if (url.password) url.password = "***";
-    return url.toString();
-  } catch {
-    return text.replace(/:\/\/([^:@/\s]+):([^@/\s]+)@/g, "://***:***@");
-  }
-}
-
-function collectAddressHints(value, keyType) {
-  if (!ADDRESS_KEY_TYPES.has(String(keyType || "").toLowerCase())) return [];
-  const hints = new Set();
-
-  function add(candidate) {
-    if (candidate === undefined || candidate === null) return;
-    const text = redactUrlish(candidate);
-    if (text) hints.add(text);
-  }
-
-  function walk(node, fieldName = "") {
-    if (node === undefined || node === null) return;
-    if (typeof node === "string") {
-      if (fieldName && ADDRESS_FIELDS.has(fieldName.toLowerCase())) add(node);
-      if (/^[a-z][a-z0-9+.-]*:\/\//i.test(node) || /^[A-Za-z]:[\\/]/.test(node) || node.startsWith("\\\\")) add(node);
-      return;
-    }
-    if (Array.isArray(node)) {
-      for (const item of node) walk(item, fieldName);
-      return;
-    }
-    if (typeof node === "object") {
-      for (const [key, child] of Object.entries(node)) walk(child, key);
-    }
-  }
-
-  try {
-    walk(JSON.parse(value));
-  } catch {
-    walk(value);
-  }
-
-  return [...hints];
-}
-
-async function searchServices({ password, machineHash, token, timestamp, query, project, includeAddresses = true, whitelist }) {
-  const q = normalizeSearchText(query);
-  if (!q) return { error: "query is required" };
-
-  const result = await api.status(password, machineHash, token, timestamp, project);
-  if (result.error) return { error: result.error };
-
-  let services = result.services || [];
-  if (whitelist) services = services.filter(s => whitelist.includes(String(s.name || "").toLowerCase()));
-
-  const matches = [];
-  for (const s of services) {
-    const fields = {
-      name: s.name,
-      label: s.label,
-      project: s.project,
-      type: s.key_type,
-      description: s.description
-    };
-    const matched = Object.entries(fields)
-      .filter(([, value]) => normalizeSearchText(value).includes(q))
-      .map(([field]) => field);
-
-    let addressHints = [];
-    if (includeAddresses && ADDRESS_KEY_TYPES.has(String(s.key_type || "").toLowerCase()) && s.vault_key) {
-      const secret = await api.retrieve(password, machineHash, token, timestamp, s.name);
-      if (!secret.error) {
-        addressHints = collectAddressHints(secret.value, s.key_type);
-        if (addressHints.some(h => normalizeSearchText(h).includes(q))) matched.push("address");
-      }
-    }
-
-    if (matched.length) {
-      matches.push({
-        name: s.name,
-        label: s.label || null,
-        project: s.project || null,
-        key_type: s.key_type,
-        enabled: !!s.enabled,
-        has_key: !!s.vault_key,
-        description: s.description || null,
-        matched: [...new Set(matched)],
-        address_hints: addressHints
-      });
-    }
-  }
-
-  return { query, count: matches.length, matches };
-}
-
-// ── Filesystem service config — loaded from clauth vault ──
-let _fsMountsCache = null;
+  "gmail":            "GMAIL_CREDENTIALS",
+};
+
+const ADDRESS_KEY_TYPES = new Set(["connstring", "fileserver", "oauth"]);
+const ADDRESS_FIELDS = new Set(["url", "uri", "host", "hostname", "server", "address", "base_url", "endpoint", "path", "root"]);
+
+function normalizeSearchText(value) {
+  return String(value || "").toLowerCase();
+}
+
+function redactUrlish(value) {
+  const text = String(value || "").trim();
+  if (!text) return "";
+  try {
+    const url = new URL(text);
+    if (url.username) url.username = "***";
+    if (url.password) url.password = "***";
+    return url.toString();
+  } catch {
+    return text.replace(/:\/\/([^:@/\s]+):([^@/\s]+)@/g, "://***:***@");
+  }
+}
+
+function collectAddressHints(value, keyType) {
+  if (!ADDRESS_KEY_TYPES.has(String(keyType || "").toLowerCase())) return [];
+  const hints = new Set();
+
+  function add(candidate) {
+    if (candidate === undefined || candidate === null) return;
+    const text = redactUrlish(candidate);
+    if (text) hints.add(text);
+  }
+
+  function walk(node, fieldName = "") {
+    if (node === undefined || node === null) return;
+    if (typeof node === "string") {
+      if (fieldName && ADDRESS_FIELDS.has(fieldName.toLowerCase())) add(node);
+      if (/^[a-z][a-z0-9+.-]*:\/\//i.test(node) || /^[A-Za-z]:[\\/]/.test(node) || node.startsWith("\\\\")) add(node);
+      return;
+    }
+    if (Array.isArray(node)) {
+      for (const item of node) walk(item, fieldName);
+      return;
+    }
+    if (typeof node === "object") {
+      for (const [key, child] of Object.entries(node)) walk(child, key);
+    }
+  }
+
+  try {
+    walk(JSON.parse(value));
+  } catch {
+    walk(value);
+  }
+
+  return [...hints];
+}
+
+async function searchServices({ password, machineHash, token, timestamp, query, project, includeAddresses = true, whitelist }) {
+  const q = normalizeSearchText(query);
+  if (!q) return { error: "query is required" };
+
+  const result = await api.status(password, machineHash, token, timestamp, project);
+  if (result.error) return { error: result.error };
+
+  let services = result.services || [];
+  if (whitelist) services = services.filter(s => whitelist.includes(String(s.name || "").toLowerCase()));
+
+  const matches = [];
+  for (const s of services) {
+    const fields = {
+      name: s.name,
+      label: s.label,
+      project: s.project,
+      type: s.key_type,
+      description: s.description
+    };
+    const matched = Object.entries(fields)
+      .filter(([, value]) => normalizeSearchText(value).includes(q))
+      .map(([field]) => field);
+
+    let addressHints = [];
+    if (includeAddresses && ADDRESS_KEY_TYPES.has(String(s.key_type || "").toLowerCase()) && s.vault_key) {
+      const secret = await api.retrieve(password, machineHash, token, timestamp, s.name);
+      if (!secret.error) {
+        addressHints = collectAddressHints(secret.value, s.key_type);
+        if (addressHints.some(h => normalizeSearchText(h).includes(q))) matched.push("address");
+      }
+    }
+
+    if (matched.length) {
+      matches.push({
+        name: s.name,
+        label: s.label || null,
+        project: s.project || null,
+        key_type: s.key_type,
+        enabled: !!s.enabled,
+        has_key: !!s.vault_key,
+        description: s.description || null,
+        matched: [...new Set(matched)],
+        address_hints: addressHints
+      });
+    }
+  }
+
+  return { query, count: matches.length, matches };
+}
+
+// ── Filesystem service config — loaded from clauth vault ──
+let _fsMountsCache = null;
 let _fsMountsCacheTime = 0;
 const FS_CACHE_TTL = 60000; // 1 minute
 
@@ -6313,115 +6313,115 @@ async function getFileserverMounts(vault) {
   }
 }
 
-async function resolveInMount(requestedPath, mountName, vault) {
+async function resolveInMount(requestedPath, mountName, vault) {
   const { mounts, error } = await getFileserverMounts(vault);
   if (error) return { error };
   if (!mounts || mounts.length === 0) return { error: "No fileserver services configured. Add one with key_type='fileserver' and value: {\"path\": \"C:/Dev/regen-root\", \"access\": \"rwd\"}" };
   const mount = mountName ? mounts.find(m => m.name === mountName) : mounts[0];
   if (!mount) return { error: `Mount '${mountName}' not found. Available: ${mounts.map(m => m.name).join(", ")}` };
   if (!mount.path) return { error: `Fileserver '${mount.name}' has no path configured` };
-  const resolved = path.resolve(mount.path, requestedPath);
-  const normalized = path.normalize(resolved);
-  const relative = path.relative(path.normalize(mount.path), normalized);
-  if (relative.startsWith("..") || path.isAbsolute(relative)) {
-    return { error: `Path escapes mount: ${requestedPath}` };
-  }
-  return { resolved: normalized, mount };
-}
-
-function checkAccess(mount, flag) {
-  return mount.access.includes(flag);
-}
-
-function sha256Hex(value) {
-  return crypto.createHash("sha256").update(value).digest("hex");
-}
-
-async function atomicWriteText(filePath, content) {
-  await mkdir(path.dirname(filePath), { recursive: true });
-  const tempPath = path.join(
-    path.dirname(filePath),
-    `.${path.basename(filePath)}.tmp-${process.pid}-${Date.now()}-${crypto.randomBytes(4).toString("hex")}`
-  );
-  await writeFile(tempPath, content, "utf8");
-  await rename(tempPath, filePath);
-}
-
-async function fileInfo(filePath, requestedPath) {
-  const s = await stat(filePath);
-  const info = {
-    path: requestedPath,
-    type: s.isDirectory() ? "dir" : "file",
-    size: s.size,
-    modified: s.mtime.toISOString(),
-  };
-  if (s.isFile()) {
-    const content = await readFile(filePath);
-    info.sha256 = sha256Hex(content);
-  }
-  return info;
-}
-
-const FS_UPLOAD_SESSIONS = new Map();
-const FS_UPLOAD_TTL_MS = 30 * 60 * 1000;
-const FS_MAX_CHUNKS = 500;
-const FS_MAX_CHUNK_BYTES = 128 * 1024;
-const FS_MAX_INGEST_BYTES = 25 * 1024 * 1024;
-const FS_GIT_IMPORT_ALLOWED_PREFIXES = [
-  "docs/",
-  ".rdc/plans/",
-  ".rdc/guides/",
-  ".claude/context/",
-  ".claude/rules/",
-  ".rdc/relay/from-claude-ai/",
-];
-
-function cleanupFsUploadSessions() {
-  const cutoff = Date.now() - FS_UPLOAD_TTL_MS;
-  for (const [id, session] of FS_UPLOAD_SESSIONS) {
-    if (session.updatedAt < cutoff) FS_UPLOAD_SESSIONS.delete(id);
-  }
-}
-
-function runGit(cwd, args, opts = {}) {
-  const res = spawnSync("git", args, {
-    cwd,
-    encoding: "utf8",
-    windowsHide: true,
-    maxBuffer: opts.maxBuffer || 10 * 1024 * 1024,
-  });
-  if (res.status !== 0) {
-    const detail = (res.stderr || res.stdout || "").trim();
-    throw new Error(`git ${args.join(" ")} failed${detail ? `: ${detail}` : ""}`);
-  }
-  return (res.stdout || "").trim();
-}
-
-function runGitRaw(cwd, args, opts = {}) {
-  const res = spawnSync("git", args, {
-    cwd,
-    encoding: "buffer",
-    windowsHide: true,
-    maxBuffer: opts.maxBuffer || 10 * 1024 * 1024,
-  });
-  if (res.status !== 0) {
-    const detail = Buffer.concat([res.stderr || Buffer.alloc(0), res.stdout || Buffer.alloc(0)]).toString("utf8").trim();
-    throw new Error(`git ${args.join(" ")} failed${detail ? `: ${detail}` : ""}`);
-  }
-  return res.stdout || Buffer.alloc(0);
-}
-
-function normalizeRepoPath(p) {
-  if (!p || typeof p !== "string") return null;
-  const normalized = p.replace(/\\/g, "/").replace(/^\/+/, "");
-  const parts = normalized.split("/").filter(Boolean);
-  if (parts.length === 0 || parts.includes("..") || path.isAbsolute(p)) return null;
-  return parts.join("/");
-}
-
-function isAllowedGitImportPath(p, allowedPrefixes = FS_GIT_IMPORT_ALLOWED_PREFIXES) {
-  return allowedPrefixes.some((prefix) => p === prefix.replace(/\/$/, "") || p.startsWith(prefix));
-}
+  const resolved = path.resolve(mount.path, requestedPath);
+  const normalized = path.normalize(resolved);
+  const relative = path.relative(path.normalize(mount.path), normalized);
+  if (relative.startsWith("..") || path.isAbsolute(relative)) {
+    return { error: `Path escapes mount: ${requestedPath}` };
+  }
+  return { resolved: normalized, mount };
+}
+
+function checkAccess(mount, flag) {
+  return mount.access.includes(flag);
+}
+
+function sha256Hex(value) {
+  return crypto.createHash("sha256").update(value).digest("hex");
+}
+
+async function atomicWriteText(filePath, content) {
+  await mkdir(path.dirname(filePath), { recursive: true });
+  const tempPath = path.join(
+    path.dirname(filePath),
+    `.${path.basename(filePath)}.tmp-${process.pid}-${Date.now()}-${crypto.randomBytes(4).toString("hex")}`
+  );
+  await writeFile(tempPath, content, "utf8");
+  await rename(tempPath, filePath);
+}
+
+async function fileInfo(filePath, requestedPath) {
+  const s = await stat(filePath);
+  const info = {
+    path: requestedPath,
+    type: s.isDirectory() ? "dir" : "file",
+    size: s.size,
+    modified: s.mtime.toISOString(),
+  };
+  if (s.isFile()) {
+    const content = await readFile(filePath);
+    info.sha256 = sha256Hex(content);
+  }
+  return info;
+}
+
+const FS_UPLOAD_SESSIONS = new Map();
+const FS_UPLOAD_TTL_MS = 30 * 60 * 1000;
+const FS_MAX_CHUNKS = 500;
+const FS_MAX_CHUNK_BYTES = 128 * 1024;
+const FS_MAX_INGEST_BYTES = 25 * 1024 * 1024;
+const FS_GIT_IMPORT_ALLOWED_PREFIXES = [
+  "docs/",
+  ".rdc/plans/",
+  ".rdc/guides/",
+  ".claude/context/",
+  ".claude/rules/",
+  ".rdc/relay/from-claude-ai/",
+];
+
+function cleanupFsUploadSessions() {
+  const cutoff = Date.now() - FS_UPLOAD_TTL_MS;
+  for (const [id, session] of FS_UPLOAD_SESSIONS) {
+    if (session.updatedAt < cutoff) FS_UPLOAD_SESSIONS.delete(id);
+  }
+}
+
+function runGit(cwd, args, opts = {}) {
+  const res = spawnSync("git", args, {
+    cwd,
+    encoding: "utf8",
+    windowsHide: true,
+    maxBuffer: opts.maxBuffer || 10 * 1024 * 1024,
+  });
+  if (res.status !== 0) {
+    const detail = (res.stderr || res.stdout || "").trim();
+    throw new Error(`git ${args.join(" ")} failed${detail ? `: ${detail}` : ""}`);
+  }
+  return (res.stdout || "").trim();
+}
+
+function runGitRaw(cwd, args, opts = {}) {
+  const res = spawnSync("git", args, {
+    cwd,
+    encoding: "buffer",
+    windowsHide: true,
+    maxBuffer: opts.maxBuffer || 10 * 1024 * 1024,
+  });
+  if (res.status !== 0) {
+    const detail = Buffer.concat([res.stderr || Buffer.alloc(0), res.stdout || Buffer.alloc(0)]).toString("utf8").trim();
+    throw new Error(`git ${args.join(" ")} failed${detail ? `: ${detail}` : ""}`);
+  }
+  return res.stdout || Buffer.alloc(0);
+}
+
+function normalizeRepoPath(p) {
+  if (!p || typeof p !== "string") return null;
+  const normalized = p.replace(/\\/g, "/").replace(/^\/+/, "");
+  const parts = normalized.split("/").filter(Boolean);
+  if (parts.length === 0 || parts.includes("..") || path.isAbsolute(p)) return null;
+  return parts.join("/");
+}
+
+function isAllowedGitImportPath(p, allowedPrefixes = FS_GIT_IMPORT_ALLOWED_PREFIXES) {
+  return allowedPrefixes.some((prefix) => p === prefix.replace(/\/$/, "") || p.startsWith(prefix));
+}
 
 const MCP_TOOLS = [
   {
@@ -6444,28 +6444,28 @@ const MCP_TOOLS = [
     description: "List all services with type, enabled state, key presence, and last retrieval time",
     inputSchema: { type: "object", properties: {}, additionalProperties: false }
   },
-  {
-    name: "clauth_list",
-    description: "List registered service names",
-    inputSchema: { type: "object", properties: {}, additionalProperties: false }
-  },
-  {
-    name: "clauth_search",
-    description: "Search registered services by name, label, project, description, type, or redacted address hints from address-bearing secrets",
-    inputSchema: {
-      type: "object",
-      properties: {
-        query: { type: "string", description: "Search text, such as part of a service name, project, host, URL, or filesystem path" },
-        project: { type: "string", description: "Optional project scope" },
-        addresses: { type: "boolean", default: true, description: "Include redacted address hints from connstring/fileserver/oauth secrets" }
-      },
-      required: ["query"],
-      additionalProperties: false
-    }
-  },
-  {
-    name: "clauth_get",
-    description: "Retrieve a secret and deliver to a temp file (default), clipboard, or stdout. Temp files auto-delete after 30 seconds.",
+  {
+    name: "clauth_list",
+    description: "List registered service names",
+    inputSchema: { type: "object", properties: {}, additionalProperties: false }
+  },
+  {
+    name: "clauth_search",
+    description: "Search registered services by name, label, project, description, type, or redacted address hints from address-bearing secrets",
+    inputSchema: {
+      type: "object",
+      properties: {
+        query: { type: "string", description: "Search text, such as part of a service name, project, host, URL, or filesystem path" },
+        project: { type: "string", description: "Optional project scope" },
+        addresses: { type: "boolean", default: true, description: "Include redacted address hints from connstring/fileserver/oauth secrets" }
+      },
+      required: ["query"],
+      additionalProperties: false
+    }
+  },
+  {
+    name: "clauth_get",
+    description: "Retrieve a secret and deliver to a temp file (default), clipboard, or stdout. Temp files auto-delete after 30 seconds.",
     inputSchema: {
       type: "object",
       properties: {
@@ -6928,9 +6928,9 @@ const MCP_TOOLS = [
       additionalProperties: false,
     },
   },
-  {
-    name: "fs_write",
-    description: "Write content to a file. Creates parent directories if needed. Overwrites existing file.",
+  {
+    name: "fs_write",
+    description: "Write content to a file. Creates parent directories if needed. Overwrites existing file.",
     inputSchema: {
       type: "object",
       properties: {
@@ -6939,93 +6939,93 @@ const MCP_TOOLS = [
         mount: { type: "string", description: "Mount name (default: first mount)" },
       },
       required: ["path", "content"],
-      additionalProperties: false,
-    },
-  },
-  {
-    name: "fs_stat",
-    description: "Get file or directory metadata. Files include a SHA-256 hash for guarded edits.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        path: { type: "string", description: "Relative path within mount" },
-        mount: { type: "string", description: "Mount name (default: first mount)" },
-      },
-      required: ["path"],
-      additionalProperties: false,
-    },
-  },
-  {
-    name: "fs_append",
-    description: "Append text to a file, optionally guarded by the current file SHA-256 hash.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        path: { type: "string", description: "Relative path within mount" },
-        content: { type: "string", description: "Text to append" },
-        mount: { type: "string", description: "Mount name (default: first mount)" },
-        expected_sha256: { type: "string", description: "Optional current file SHA-256. If provided and the file exists, append only when it matches." },
-      },
-      required: ["path", "content"],
-      additionalProperties: false,
-    },
-  },
-  {
-    name: "fs_write_chunk",
-    description: "Stage chunked text writes and atomically publish when all chunks arrive. Use when single write arguments are too large.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        upload_id: { type: "string", description: "Caller-chosen idempotency key for this file upload" },
-        path: { type: "string", description: "Relative path within mount" },
-        chunk_index: { type: "number", description: "Zero-based chunk index" },
-        total_chunks: { type: "number", description: "Total chunks expected" },
-        content: { type: "string", description: "Chunk text content" },
-        mount: { type: "string", description: "Mount name (default: first mount)" },
-        expected_sha256: { type: "string", description: "Optional SHA-256 of the final assembled file content" },
-      },
-      required: ["upload_id", "path", "chunk_index", "total_chunks", "content"],
-      additionalProperties: false,
-    },
-  },
-  {
-    name: "fs_ingest_url",
-    description: "Download text from an http(s) URL and atomically write it inside the mount. Useful for moving cloud files into the local filesystem.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        url: { type: "string", description: "HTTPS or HTTP URL to fetch" },
-        path: { type: "string", description: "Relative output path within mount" },
-        mount: { type: "string", description: "Mount name (default: first mount)" },
-        max_bytes: { type: "number", description: "Maximum download size in bytes (default 5MB, hard max 25MB)" },
-        expected_sha256: { type: "string", description: "Optional SHA-256 of fetched content before writing" },
-      },
-      required: ["url", "path"],
-      additionalProperties: false,
-    },
-  },
-  {
-    name: "fs_import_git_files",
-    description: "Fetch a Git ref and restore only named files into the mounted repo, optionally committing just those files. Designed for Claude.ai GitHub uploads into dirty local monorepos.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        remote: { type: "string", description: "Git remote name (default: origin)" },
-        ref: { type: "string", description: "Branch, tag, or commit to fetch/restore from" },
-        paths: { type: "array", items: { type: "string" }, description: "Repo-relative file paths to import" },
-        mode: { type: "string", enum: ["new_only", "overwrite"], description: "new_only refuses existing local paths. overwrite restores named paths only." },
-        commit: { type: "boolean", description: "When true, stage only imported paths and create a local commit. Never pushes." },
-        message: { type: "string", description: "Commit subject when commit=true" },
-        mount: { type: "string", description: "Mount name (default: first mount)" },
-        allowed_prefixes: { type: "array", items: { type: "string" }, description: "Optional path allowlist prefixes. Defaults to docs and agent corpus paths." },
-      },
-      required: ["ref", "paths"],
-      additionalProperties: false,
-    },
-  },
-  {
-    name: "fs_list",
-    description: "List directory contents with file type, size, and modification time.",
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "fs_stat",
+    description: "Get file or directory metadata. Files include a SHA-256 hash for guarded edits.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        path: { type: "string", description: "Relative path within mount" },
+        mount: { type: "string", description: "Mount name (default: first mount)" },
+      },
+      required: ["path"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "fs_append",
+    description: "Append text to a file, optionally guarded by the current file SHA-256 hash.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        path: { type: "string", description: "Relative path within mount" },
+        content: { type: "string", description: "Text to append" },
+        mount: { type: "string", description: "Mount name (default: first mount)" },
+        expected_sha256: { type: "string", description: "Optional current file SHA-256. If provided and the file exists, append only when it matches." },
+      },
+      required: ["path", "content"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "fs_write_chunk",
+    description: "Stage chunked text writes and atomically publish when all chunks arrive. Use when single write arguments are too large.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        upload_id: { type: "string", description: "Caller-chosen idempotency key for this file upload" },
+        path: { type: "string", description: "Relative path within mount" },
+        chunk_index: { type: "number", description: "Zero-based chunk index" },
+        total_chunks: { type: "number", description: "Total chunks expected" },
+        content: { type: "string", description: "Chunk text content" },
+        mount: { type: "string", description: "Mount name (default: first mount)" },
+        expected_sha256: { type: "string", description: "Optional SHA-256 of the final assembled file content" },
+      },
+      required: ["upload_id", "path", "chunk_index", "total_chunks", "content"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "fs_ingest_url",
+    description: "Download text from an http(s) URL and atomically write it inside the mount. Useful for moving cloud files into the local filesystem.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        url: { type: "string", description: "HTTPS or HTTP URL to fetch" },
+        path: { type: "string", description: "Relative output path within mount" },
+        mount: { type: "string", description: "Mount name (default: first mount)" },
+        max_bytes: { type: "number", description: "Maximum download size in bytes (default 5MB, hard max 25MB)" },
+        expected_sha256: { type: "string", description: "Optional SHA-256 of fetched content before writing" },
+      },
+      required: ["url", "path"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "fs_import_git_files",
+    description: "Fetch a Git ref and restore only named files into the mounted repo, optionally committing just those files. Designed for Claude.ai GitHub uploads into dirty local monorepos.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        remote: { type: "string", description: "Git remote name (default: origin)" },
+        ref: { type: "string", description: "Branch, tag, or commit to fetch/restore from" },
+        paths: { type: "array", items: { type: "string" }, description: "Repo-relative file paths to import" },
+        mode: { type: "string", enum: ["new_only", "overwrite"], description: "new_only refuses existing local paths. overwrite restores named paths only." },
+        commit: { type: "boolean", description: "When true, stage only imported paths and create a local commit. Never pushes." },
+        message: { type: "string", description: "Commit subject when commit=true" },
+        mount: { type: "string", description: "Mount name (default: first mount)" },
+        allowed_prefixes: { type: "array", items: { type: "string" }, description: "Optional path allowlist prefixes. Defaults to docs and agent corpus paths." },
+      },
+      required: ["ref", "paths"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "fs_list",
+    description: "List directory contents with file type, size, and modification time.",
     inputSchema: {
       type: "object",
       properties: {
@@ -7092,6 +7092,53 @@ const MCP_TOOLS = [
       additionalProperties: false,
     },
   },
+  {
+    name: "fs_edit",
+    description: "Replace a unique string in a file. Like Edit in Claude Code: fails if old_string is not found or matches multiple times unless replace_all=true. Atomic write. Returns new file info including sha256.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        path: { type: "string", description: "Relative path within mount" },
+        old_string: { type: "string", description: "Exact text to find (must be unique unless replace_all=true)" },
+        new_string: { type: "string", description: "Replacement text (must differ from old_string)" },
+        replace_all: { type: "boolean", description: "Replace every occurrence (default false)" },
+        expected_sha256: { type: "string", description: "Optional current file SHA-256 guard. If provided and mismatched, edit is rejected." },
+        mount: { type: "string", description: "Mount name (default: first mount)" },
+      },
+      required: ["path", "old_string", "new_string"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "fs_move",
+    description: "Move or rename a file or directory within a mount. Single syscall when possible; falls back to copy+delete across devices. Refuses to overwrite existing destination unless overwrite=true.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        from: { type: "string", description: "Source relative path within mount" },
+        to: { type: "string", description: "Destination relative path within mount" },
+        overwrite: { type: "boolean", description: "Overwrite destination if it exists (default false)" },
+        mount: { type: "string", description: "Mount name for both from and to (default: first mount)" },
+      },
+      required: ["from", "to"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "fs_copy",
+    description: "Copy a file or directory tree within a mount. Recursive by default. Refuses to overwrite existing destination unless overwrite=true.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        from: { type: "string", description: "Source relative path within mount" },
+        to: { type: "string", description: "Destination relative path within mount" },
+        overwrite: { type: "boolean", description: "Overwrite destination if it exists (default false)" },
+        mount: { type: "string", description: "Mount name for both from and to (default: first mount)" },
+      },
+      required: ["from", "to"],
+      additionalProperties: false,
+    },
+  },
   {
     name: "fs_mounts",
     description: "List configured filesystem mounts (fileserver services from vault).",
@@ -7182,10 +7229,10 @@ async function handleMcpTool(vault, name, args) {
       }
     }
 
-    case "clauth_list": {
-      if (!vault.password) return mcpError("Vault is locked — call clauth_unlock first");
-      try {
-        const { token, timestamp } = deriveToken(vault.password, vault.machineHash);
+    case "clauth_list": {
+      if (!vault.password) return mcpError("Vault is locked — call clauth_unlock first");
+      try {
+        const { token, timestamp } = deriveToken(vault.password, vault.machineHash);
         const result = await api.status(vault.password, vault.machineHash, token, timestamp);
         if (result.error) return mcpError(result.error);
         let services = result.services || [];
@@ -7194,34 +7241,34 @@ async function handleMcpTool(vault, name, args) {
         }
         return mcpResult(services.map(s => s.name).join(", "));
       } catch (err) {
-        return mcpError(err.message);
-      }
-    }
-
-    case "clauth_search": {
-      if (!vault.password) return mcpError("Vault is locked — call clauth_unlock first");
-      try {
-        const { token, timestamp } = deriveToken(vault.password, vault.machineHash);
-        const result = await searchServices({
-          password: vault.password,
-          machineHash: vault.machineHash,
-          token,
-          timestamp,
-          query: args.query,
-          project: args.project,
-          includeAddresses: args.addresses !== false,
-          whitelist: vault.whitelist
-        });
-        if (result.error) return mcpError(result.error);
-        return mcpResult(JSON.stringify(result, null, 2));
-      } catch (err) {
-        return mcpError(err.message);
-      }
-    }
-
-    case "clauth_get": {
-      if (!vault.password) return mcpError("Vault is locked — call clauth_unlock first");
-      const service = (args.service || "").toLowerCase();
+        return mcpError(err.message);
+      }
+    }
+
+    case "clauth_search": {
+      if (!vault.password) return mcpError("Vault is locked — call clauth_unlock first");
+      try {
+        const { token, timestamp } = deriveToken(vault.password, vault.machineHash);
+        const result = await searchServices({
+          password: vault.password,
+          machineHash: vault.machineHash,
+          token,
+          timestamp,
+          query: args.query,
+          project: args.project,
+          includeAddresses: args.addresses !== false,
+          whitelist: vault.whitelist
+        });
+        if (result.error) return mcpError(result.error);
+        return mcpResult(JSON.stringify(result, null, 2));
+      } catch (err) {
+        return mcpError(err.message);
+      }
+    }
+
+    case "clauth_get": {
+      if (!vault.password) return mcpError("Vault is locked — call clauth_unlock first");
+      const service = (args.service || "").toLowerCase();
       const target = args.target || "file";
       if (!service) return mcpError("service is required");
       if (vault.whitelist && !vault.whitelist.includes(service)) {
@@ -7515,250 +7562,250 @@ async function handleMcpTool(vault, name, args) {
       }
     }
 
-    case "fs_write": {
-      const r = await resolveInMount(args.path, args.mount, vault);
-      if (r.error) return mcpError(r.error);
-      if (!checkAccess(r.mount, "w")) return mcpError("Write access denied on this mount");
-      try {
-        await atomicWriteText(r.resolved, args.content);
-        return mcpResult(`Written: ${args.path} (${Buffer.byteLength(args.content)} bytes)`);
-      } catch (err) {
-        return mcpError(`Write failed: ${err.message}`);
-      }
-    }
-
-    case "fs_stat": {
-      const r = await resolveInMount(args.path, args.mount, vault);
-      if (r.error) return mcpError(r.error);
-      if (!checkAccess(r.mount, "r")) return mcpError("Read access denied on this mount");
-      try {
-        return mcpResult(JSON.stringify(await fileInfo(r.resolved, args.path), null, 2));
-      } catch (err) {
-        if (err.code === "ENOENT") return mcpError(`Not found: ${args.path}`);
-        return mcpError(`Stat failed: ${err.message}`);
-      }
-    }
-
-    case "fs_append": {
-      const r = await resolveInMount(args.path, args.mount, vault);
-      if (r.error) return mcpError(r.error);
-      if (!checkAccess(r.mount, "w")) return mcpError("Write access denied on this mount");
-      try {
-        try {
-          const current = await readFile(r.resolved);
-          if (args.expected_sha256 && sha256Hex(current) !== args.expected_sha256) {
-            return mcpError("Append rejected: current file hash does not match expected_sha256");
-          }
-        } catch (err) {
-          if (err.code !== "ENOENT") throw err;
-          if (args.expected_sha256) return mcpError("Append rejected: file does not exist for expected_sha256 guard");
-        }
-        await mkdir(path.dirname(r.resolved), { recursive: true });
-        await appendFile(r.resolved, args.content, "utf8");
-        const info = await fileInfo(r.resolved, args.path);
-        return mcpResult(JSON.stringify({ appended_bytes: Buffer.byteLength(args.content), ...info }, null, 2));
-      } catch (err) {
-        return mcpError(`Append failed: ${err.message}`);
-      }
-    }
-
-    case "fs_write_chunk": {
-      cleanupFsUploadSessions();
-      const { upload_id, chunk_index, total_chunks, content } = args;
-      const index = Number(chunk_index);
-      const total = Number(total_chunks);
-      if (!Number.isInteger(index) || !Number.isInteger(total) || index < 0 || total < 1 || index >= total) {
-        return mcpError("Invalid chunk_index/total_chunks");
-      }
-      if (total > FS_MAX_CHUNKS) return mcpError(`Too many chunks: max ${FS_MAX_CHUNKS}`);
-      if (Buffer.byteLength(content, "utf8") > FS_MAX_CHUNK_BYTES) {
-        return mcpError(`Chunk too large: max ${FS_MAX_CHUNK_BYTES} bytes`);
-      }
-
-      const r = await resolveInMount(args.path, args.mount, vault);
-      if (r.error) return mcpError(r.error);
-      if (!checkAccess(r.mount, "w")) return mcpError("Write access denied on this mount");
-
-      const key = `${r.mount.name}:${args.path}:${upload_id}`;
-      let session = FS_UPLOAD_SESSIONS.get(key);
-      if (!session) {
-        session = { path: args.path, resolved: r.resolved, total, chunks: new Map(), expectedSha256: args.expected_sha256 || null, updatedAt: Date.now() };
-        FS_UPLOAD_SESSIONS.set(key, session);
-      }
-      if (session.total !== total || session.path !== args.path || session.resolved !== r.resolved) {
-        return mcpError("Upload id collision: path or total_chunks differs from existing session");
-      }
-      if (args.expected_sha256 && session.expectedSha256 && args.expected_sha256 !== session.expectedSha256) {
-        return mcpError("Upload id collision: expected_sha256 differs from existing session");
-      }
-
-      session.chunks.set(index, content);
-      session.updatedAt = Date.now();
-
-      if (session.chunks.size < total) {
-        return mcpResult(JSON.stringify({ upload_id, status: "staged", received_chunks: session.chunks.size, total_chunks: total }, null, 2));
-      }
-
-      const assembled = Array.from({ length: total }, (_, i) => session.chunks.get(i)).join("");
-      const actualSha = sha256Hex(assembled);
-      if (session.expectedSha256 && actualSha !== session.expectedSha256) {
-        FS_UPLOAD_SESSIONS.delete(key);
-        return mcpError(`Final SHA-256 mismatch: expected ${session.expectedSha256}, got ${actualSha}`);
-      }
-
-      try {
-        await atomicWriteText(r.resolved, assembled);
-        FS_UPLOAD_SESSIONS.delete(key);
-        return mcpResult(JSON.stringify({ upload_id, status: "written", path: args.path, bytes: Buffer.byteLength(assembled), sha256: actualSha }, null, 2));
-      } catch (err) {
-        return mcpError(`Chunked write failed: ${err.message}`);
-      }
-    }
-
-    case "fs_ingest_url": {
-      const r = await resolveInMount(args.path, args.mount, vault);
-      if (r.error) return mcpError(r.error);
-      if (!checkAccess(r.mount, "w")) return mcpError("Write access denied on this mount");
-
-      let url;
-      try {
-        url = new URL(args.url);
-      } catch {
-        return mcpError("Invalid URL");
-      }
-      if (!["http:", "https:"].includes(url.protocol)) return mcpError("Only http(s) URLs are supported");
-
-      const maxBytes = Math.min(Number(args.max_bytes || 5 * 1024 * 1024), FS_MAX_INGEST_BYTES);
-      try {
-        const response = await fetch(url, { redirect: "follow" });
-        if (!response.ok) return mcpError(`Fetch failed: HTTP ${response.status}`);
-        const length = Number(response.headers.get("content-length") || 0);
-        if (length && length > maxBytes) return mcpError(`Fetch rejected: content-length ${length} exceeds max_bytes ${maxBytes}`);
-
-        const reader = response.body?.getReader();
-        if (!reader) return mcpError("Fetch failed: response body is not readable");
-
-        let received = 0;
-        const chunks = [];
-        while (true) {
-          const { done, value } = await reader.read();
-          if (done) break;
-          received += value.byteLength;
-          if (received > maxBytes) return mcpError(`Fetch rejected: response exceeds max_bytes ${maxBytes}`);
-          chunks.push(Buffer.from(value));
-        }
-
-        const content = Buffer.concat(chunks).toString("utf8");
-        const actualSha = sha256Hex(content);
-        if (args.expected_sha256 && actualSha !== args.expected_sha256) {
-          return mcpError(`Fetched SHA-256 mismatch: expected ${args.expected_sha256}, got ${actualSha}`);
-        }
-        await atomicWriteText(r.resolved, content);
-        return mcpResult(JSON.stringify({ status: "written", path: args.path, bytes: Buffer.byteLength(content), sha256: actualSha, source: url.href }, null, 2));
-      } catch (err) {
-        return mcpError(`Ingest failed: ${err.message}`);
-      }
-    }
-
-    case "fs_import_git_files": {
-      if (!Array.isArray(args.paths) || args.paths.length === 0) return mcpError("paths must be a non-empty array");
-      if (args.paths.length > 25) return mcpError("Too many paths: max 25 per import");
-
-      const r = await resolveInMount(".", args.mount, vault);
-      if (r.error) return mcpError(r.error);
-      if (!checkAccess(r.mount, "w")) return mcpError("Write access denied on this mount");
-
-      const repoRoot = r.resolved;
-      const remote = args.remote || "origin";
-      const mode = args.mode || "new_only";
-      const doCommit = args.commit === true;
-      const allowedPrefixes = Array.isArray(args.allowed_prefixes) && args.allowed_prefixes.length > 0
-        ? args.allowed_prefixes.map((p) => normalizeRepoPath(p.endsWith("/") ? p : `${p}/`)).filter(Boolean)
-        : FS_GIT_IMPORT_ALLOWED_PREFIXES;
-
-      try {
-        const topLevel = path.normalize(runGit(repoRoot, ["rev-parse", "--show-toplevel"]));
-        if (topLevel.toLowerCase() !== path.normalize(repoRoot).toLowerCase()) {
-          return mcpError(`Mount root is not the git repo root: ${repoRoot} (repo root: ${topLevel})`);
-        }
-
-        const normalizedPaths = [];
-        for (const rawPath of args.paths) {
-          const normalized = normalizeRepoPath(rawPath);
-          if (!normalized) return mcpError(`Invalid repo path: ${rawPath}`);
-          if (!isAllowedGitImportPath(normalized, allowedPrefixes)) return mcpError(`Path not allowed for git import: ${normalized}`);
-          normalizedPaths.push(normalized);
-        }
-
-        if (mode === "new_only") {
-          for (const rel of normalizedPaths) {
-            const localPath = path.join(repoRoot, rel);
-            try {
-              await stat(localPath);
-              return mcpError(`Import refused: local path already exists in new_only mode: ${rel}`);
-            } catch (err) {
-              if (err.code !== "ENOENT") throw err;
-            }
-          }
-        }
-
-        if (doCommit) {
-          const staged = runGit(repoRoot, ["diff", "--cached", "--name-only"]);
-          if (staged) return mcpError(`Import refused: index already has staged files:\n${staged}`);
-          if (!args.message || !args.message.trim()) return mcpError("message is required when commit=true");
-        }
-
-        runGit(repoRoot, ["fetch", "--no-tags", remote, args.ref]);
-        const sourceCommit = runGit(repoRoot, ["rev-parse", "FETCH_HEAD"]);
-
-        for (const rel of normalizedPaths) {
-          runGit(repoRoot, ["cat-file", "-e", `${sourceCommit}:${rel}`]);
-        }
-
-        runGit(repoRoot, ["restore", `--source=${sourceCommit}`, "--", ...normalizedPaths]);
-
-        const imported = [];
-        for (const rel of normalizedPaths) {
-          const localPath = path.join(repoRoot, rel);
-          const info = await fileInfo(localPath, rel);
-          const sourceBlob = runGit(repoRoot, ["rev-parse", `${sourceCommit}:${rel}`]);
-          const sourceSize = Number(runGitRaw(repoRoot, ["cat-file", "-s", `${sourceCommit}:${rel}`]).toString("utf8").trim());
-          imported.push({ ...info, source_blob: sourceBlob, source_size: sourceSize });
-        }
-
-        let localCommit = null;
-        if (doCommit) {
-          runGit(repoRoot, ["add", "--", ...normalizedPaths]);
-          const body = [
-            args.message.trim(),
-            "",
-            "Imported from Claude.ai GitHub upload.",
-            "",
-            `Source remote: ${remote}`,
-            `Source ref: ${args.ref}`,
-            `Source commit: ${sourceCommit}`,
-            "",
-            "Paths:",
-            ...normalizedPaths.map((p) => `- ${p}`),
-          ].join("\n");
-          runGit(repoRoot, ["commit", "-m", body]);
-          localCommit = runGit(repoRoot, ["rev-parse", "HEAD"]);
-        }
-
-        return mcpResult(JSON.stringify({
-          status: "ok",
-          mode,
-          committed: doCommit,
-          source_commit: sourceCommit,
-          local_commit: localCommit,
-          imported,
-        }, null, 2));
-      } catch (err) {
-        return mcpError(`Git import failed: ${err.message}`);
-      }
-    }
-
-    case "fs_list": {
+    case "fs_write": {
+      const r = await resolveInMount(args.path, args.mount, vault);
+      if (r.error) return mcpError(r.error);
+      if (!checkAccess(r.mount, "w")) return mcpError("Write access denied on this mount");
+      try {
+        await atomicWriteText(r.resolved, args.content);
+        return mcpResult(`Written: ${args.path} (${Buffer.byteLength(args.content)} bytes)`);
+      } catch (err) {
+        return mcpError(`Write failed: ${err.message}`);
+      }
+    }
+
+    case "fs_stat": {
+      const r = await resolveInMount(args.path, args.mount, vault);
+      if (r.error) return mcpError(r.error);
+      if (!checkAccess(r.mount, "r")) return mcpError("Read access denied on this mount");
+      try {
+        return mcpResult(JSON.stringify(await fileInfo(r.resolved, args.path), null, 2));
+      } catch (err) {
+        if (err.code === "ENOENT") return mcpError(`Not found: ${args.path}`);
+        return mcpError(`Stat failed: ${err.message}`);
+      }
+    }
+
+    case "fs_append": {
+      const r = await resolveInMount(args.path, args.mount, vault);
+      if (r.error) return mcpError(r.error);
+      if (!checkAccess(r.mount, "w")) return mcpError("Write access denied on this mount");
+      try {
+        try {
+          const current = await readFile(r.resolved);
+          if (args.expected_sha256 && sha256Hex(current) !== args.expected_sha256) {
+            return mcpError("Append rejected: current file hash does not match expected_sha256");
+          }
+        } catch (err) {
+          if (err.code !== "ENOENT") throw err;
+          if (args.expected_sha256) return mcpError("Append rejected: file does not exist for expected_sha256 guard");
+        }
+        await mkdir(path.dirname(r.resolved), { recursive: true });
+        await appendFile(r.resolved, args.content, "utf8");
+        const info = await fileInfo(r.resolved, args.path);
+        return mcpResult(JSON.stringify({ appended_bytes: Buffer.byteLength(args.content), ...info }, null, 2));
+      } catch (err) {
+        return mcpError(`Append failed: ${err.message}`);
+      }
+    }
+
+    case "fs_write_chunk": {
+      cleanupFsUploadSessions();
+      const { upload_id, chunk_index, total_chunks, content } = args;
+      const index = Number(chunk_index);
+      const total = Number(total_chunks);
+      if (!Number.isInteger(index) || !Number.isInteger(total) || index < 0 || total < 1 || index >= total) {
+        return mcpError("Invalid chunk_index/total_chunks");
+      }
+      if (total > FS_MAX_CHUNKS) return mcpError(`Too many chunks: max ${FS_MAX_CHUNKS}`);
+      if (Buffer.byteLength(content, "utf8") > FS_MAX_CHUNK_BYTES) {
+        return mcpError(`Chunk too large: max ${FS_MAX_CHUNK_BYTES} bytes`);
+      }
+
+      const r = await resolveInMount(args.path, args.mount, vault);
+      if (r.error) return mcpError(r.error);
+      if (!checkAccess(r.mount, "w")) return mcpError("Write access denied on this mount");
+
+      const key = `${r.mount.name}:${args.path}:${upload_id}`;
+      let session = FS_UPLOAD_SESSIONS.get(key);
+      if (!session) {
+        session = { path: args.path, resolved: r.resolved, total, chunks: new Map(), expectedSha256: args.expected_sha256 || null, updatedAt: Date.now() };
+        FS_UPLOAD_SESSIONS.set(key, session);
+      }
+      if (session.total !== total || session.path !== args.path || session.resolved !== r.resolved) {
+        return mcpError("Upload id collision: path or total_chunks differs from existing session");
+      }
+      if (args.expected_sha256 && session.expectedSha256 && args.expected_sha256 !== session.expectedSha256) {
+        return mcpError("Upload id collision: expected_sha256 differs from existing session");
+      }
+
+      session.chunks.set(index, content);
+      session.updatedAt = Date.now();
+
+      if (session.chunks.size < total) {
+        return mcpResult(JSON.stringify({ upload_id, status: "staged", received_chunks: session.chunks.size, total_chunks: total }, null, 2));
+      }
+
+      const assembled = Array.from({ length: total }, (_, i) => session.chunks.get(i)).join("");
+      const actualSha = sha256Hex(assembled);
+      if (session.expectedSha256 && actualSha !== session.expectedSha256) {
+        FS_UPLOAD_SESSIONS.delete(key);
+        return mcpError(`Final SHA-256 mismatch: expected ${session.expectedSha256}, got ${actualSha}`);
+      }
+
+      try {
+        await atomicWriteText(r.resolved, assembled);
+        FS_UPLOAD_SESSIONS.delete(key);
+        return mcpResult(JSON.stringify({ upload_id, status: "written", path: args.path, bytes: Buffer.byteLength(assembled), sha256: actualSha }, null, 2));
+      } catch (err) {
+        return mcpError(`Chunked write failed: ${err.message}`);
+      }
+    }
+
+    case "fs_ingest_url": {
+      const r = await resolveInMount(args.path, args.mount, vault);
+      if (r.error) return mcpError(r.error);
+      if (!checkAccess(r.mount, "w")) return mcpError("Write access denied on this mount");
+
+      let url;
+      try {
+        url = new URL(args.url);
+      } catch {
+        return mcpError("Invalid URL");
+      }
+      if (!["http:", "https:"].includes(url.protocol)) return mcpError("Only http(s) URLs are supported");
+
+      const maxBytes = Math.min(Number(args.max_bytes || 5 * 1024 * 1024), FS_MAX_INGEST_BYTES);
+      try {
+        const response = await fetch(url, { redirect: "follow" });
+        if (!response.ok) return mcpError(`Fetch failed: HTTP ${response.status}`);
+        const length = Number(response.headers.get("content-length") || 0);
+        if (length && length > maxBytes) return mcpError(`Fetch rejected: content-length ${length} exceeds max_bytes ${maxBytes}`);
+
+        const reader = response.body?.getReader();
+        if (!reader) return mcpError("Fetch failed: response body is not readable");
+
+        let received = 0;
+        const chunks = [];
+        while (true) {
+          const { done, value } = await reader.read();
+          if (done) break;
+          received += value.byteLength;
+          if (received > maxBytes) return mcpError(`Fetch rejected: response exceeds max_bytes ${maxBytes}`);
+          chunks.push(Buffer.from(value));
+        }
+
+        const content = Buffer.concat(chunks).toString("utf8");
+        const actualSha = sha256Hex(content);
+        if (args.expected_sha256 && actualSha !== args.expected_sha256) {
+          return mcpError(`Fetched SHA-256 mismatch: expected ${args.expected_sha256}, got ${actualSha}`);
+        }
+        await atomicWriteText(r.resolved, content);
+        return mcpResult(JSON.stringify({ status: "written", path: args.path, bytes: Buffer.byteLength(content), sha256: actualSha, source: url.href }, null, 2));
+      } catch (err) {
+        return mcpError(`Ingest failed: ${err.message}`);
+      }
+    }
+
+    case "fs_import_git_files": {
+      if (!Array.isArray(args.paths) || args.paths.length === 0) return mcpError("paths must be a non-empty array");
+      if (args.paths.length > 25) return mcpError("Too many paths: max 25 per import");
+
+      const r = await resolveInMount(".", args.mount, vault);
+      if (r.error) return mcpError(r.error);
+      if (!checkAccess(r.mount, "w")) return mcpError("Write access denied on this mount");
+
+      const repoRoot = r.resolved;
+      const remote = args.remote || "origin";
+      const mode = args.mode || "new_only";
+      const doCommit = args.commit === true;
+      const allowedPrefixes = Array.isArray(args.allowed_prefixes) && args.allowed_prefixes.length > 0
+        ? args.allowed_prefixes.map((p) => normalizeRepoPath(p.endsWith("/") ? p : `${p}/`)).filter(Boolean)
+        : FS_GIT_IMPORT_ALLOWED_PREFIXES;
+
+      try {
+        const topLevel = path.normalize(runGit(repoRoot, ["rev-parse", "--show-toplevel"]));
+        if (topLevel.toLowerCase() !== path.normalize(repoRoot).toLowerCase()) {
+          return mcpError(`Mount root is not the git repo root: ${repoRoot} (repo root: ${topLevel})`);
+        }
+
+        const normalizedPaths = [];
+        for (const rawPath of args.paths) {
+          const normalized = normalizeRepoPath(rawPath);
+          if (!normalized) return mcpError(`Invalid repo path: ${rawPath}`);
+          if (!isAllowedGitImportPath(normalized, allowedPrefixes)) return mcpError(`Path not allowed for git import: ${normalized}`);
+          normalizedPaths.push(normalized);
+        }
+
+        if (mode === "new_only") {
+          for (const rel of normalizedPaths) {
+            const localPath = path.join(repoRoot, rel);
+            try {
+              await stat(localPath);
+              return mcpError(`Import refused: local path already exists in new_only mode: ${rel}`);
+            } catch (err) {
+              if (err.code !== "ENOENT") throw err;
+            }
+          }
+        }
+
+        if (doCommit) {
+          const staged = runGit(repoRoot, ["diff", "--cached", "--name-only"]);
+          if (staged) return mcpError(`Import refused: index already has staged files:\n${staged}`);
+          if (!args.message || !args.message.trim()) return mcpError("message is required when commit=true");
+        }
+
+        runGit(repoRoot, ["fetch", "--no-tags", remote, args.ref]);
+        const sourceCommit = runGit(repoRoot, ["rev-parse", "FETCH_HEAD"]);
+
+        for (const rel of normalizedPaths) {
+          runGit(repoRoot, ["cat-file", "-e", `${sourceCommit}:${rel}`]);
+        }
+
+        runGit(repoRoot, ["restore", `--source=${sourceCommit}`, "--", ...normalizedPaths]);
+
+        const imported = [];
+        for (const rel of normalizedPaths) {
+          const localPath = path.join(repoRoot, rel);
+          const info = await fileInfo(localPath, rel);
+          const sourceBlob = runGit(repoRoot, ["rev-parse", `${sourceCommit}:${rel}`]);
+          const sourceSize = Number(runGitRaw(repoRoot, ["cat-file", "-s", `${sourceCommit}:${rel}`]).toString("utf8").trim());
+          imported.push({ ...info, source_blob: sourceBlob, source_size: sourceSize });
+        }
+
+        let localCommit = null;
+        if (doCommit) {
+          runGit(repoRoot, ["add", "--", ...normalizedPaths]);
+          const body = [
+            args.message.trim(),
+            "",
+            "Imported from Claude.ai GitHub upload.",
+            "",
+            `Source remote: ${remote}`,
+            `Source ref: ${args.ref}`,
+            `Source commit: ${sourceCommit}`,
+            "",
+            "Paths:",
+            ...normalizedPaths.map((p) => `- ${p}`),
+          ].join("\n");
+          runGit(repoRoot, ["commit", "-m", body]);
+          localCommit = runGit(repoRoot, ["rev-parse", "HEAD"]);
+        }
+
+        return mcpResult(JSON.stringify({
+          status: "ok",
+          mode,
+          committed: doCommit,
+          source_commit: sourceCommit,
+          local_commit: localCommit,
+          imported,
+        }, null, 2));
+      } catch (err) {
+        return mcpError(`Git import failed: ${err.message}`);
+      }
+    }
+
+    case "fs_list": {
       const dirPath = args.path || ".";
       const r = await resolveInMount(dirPath, args.mount, vault);
       if (r.error) return mcpError(r.error);
@@ -7881,6 +7928,133 @@ async function handleMcpTool(vault, name, args) {
       }
     }
 
+    case "fs_edit": {
+      if (typeof args.old_string !== "string" || typeof args.new_string !== "string") {
+        return mcpError("old_string and new_string must be strings");
+      }
+      if (args.old_string === args.new_string) {
+        return mcpError("old_string and new_string must differ");
+      }
+      if (args.old_string.length === 0) {
+        return mcpError("old_string must not be empty");
+      }
+      const r = await resolveInMount(args.path, args.mount, vault);
+      if (r.error) return mcpError(r.error);
+      if (!checkAccess(r.mount, "w")) return mcpError("Write access denied on this mount");
+      try {
+        const current = await readFile(r.resolved, "utf8");
+        if (args.expected_sha256 && sha256Hex(current) !== args.expected_sha256) {
+          return mcpError("Edit rejected: current file hash does not match expected_sha256");
+        }
+        const parts = current.split(args.old_string);
+        const occurrences = parts.length - 1;
+        if (occurrences === 0) {
+          return mcpError(`Edit failed: old_string not found in ${args.path}`);
+        }
+        if (occurrences > 1 && !args.replace_all) {
+          return mcpError(`Edit failed: old_string is not unique (${occurrences} matches in ${args.path}). Set replace_all=true to replace all, or provide more surrounding context.`);
+        }
+        const updated = args.replace_all
+          ? parts.join(args.new_string)
+          : current.replace(args.old_string, args.new_string);
+        await atomicWriteText(r.resolved, updated);
+        const info = await fileInfo(r.resolved, args.path);
+        return mcpResult(JSON.stringify({ replacements: args.replace_all ? occurrences : 1, ...info }, null, 2));
+      } catch (err) {
+        if (err.code === "ENOENT") return mcpError(`File not found: ${args.path}`);
+        return mcpError(`Edit failed: ${err.message}`);
+      }
+    }
+
+    case "fs_move": {
+      const src = await resolveInMount(args.from, args.mount, vault);
+      if (src.error) return mcpError(src.error);
+      const dst = await resolveInMount(args.to, args.mount, vault);
+      if (dst.error) return mcpError(dst.error);
+      if (!checkAccess(src.mount, "w") || !checkAccess(src.mount, "d")) {
+        return mcpError("Move requires write+delete access on this mount");
+      }
+      try {
+        await stat(src.resolved);
+      } catch (err) {
+        if (err.code === "ENOENT") return mcpError(`Source not found: ${args.from}`);
+        return mcpError(`Stat failed: ${err.message}`);
+      }
+      let dstExists = false;
+      try {
+        await stat(dst.resolved);
+        dstExists = true;
+      } catch (err) {
+        if (err.code !== "ENOENT") return mcpError(`Stat failed: ${err.message}`);
+      }
+      if (dstExists && !args.overwrite) {
+        return mcpError(`Move refused: destination already exists: ${args.to} (use overwrite=true)`);
+      }
+      try {
+        await mkdir(path.dirname(dst.resolved), { recursive: true });
+        if (dstExists && args.overwrite) {
+          const dstStat = await stat(dst.resolved);
+          await rm(dst.resolved, { recursive: dstStat.isDirectory(), force: true });
+        }
+        try {
+          await rename(src.resolved, dst.resolved);
+        } catch (err) {
+          if (err.code === "EXDEV") {
+            await cp(src.resolved, dst.resolved, { recursive: true, errorOnExist: false, force: true });
+            const srcStat = await stat(src.resolved);
+            await rm(src.resolved, { recursive: srcStat.isDirectory(), force: true });
+          } else {
+            throw err;
+          }
+        }
+        return mcpResult(JSON.stringify({ status: "moved", from: args.from, to: args.to }, null, 2));
+      } catch (err) {
+        return mcpError(`Move failed: ${err.message}`);
+      }
+    }
+
+    case "fs_copy": {
+      const src = await resolveInMount(args.from, args.mount, vault);
+      if (src.error) return mcpError(src.error);
+      const dst = await resolveInMount(args.to, args.mount, vault);
+      if (dst.error) return mcpError(dst.error);
+      if (!checkAccess(src.mount, "r")) return mcpError("Read access denied on this mount");
+      if (!checkAccess(src.mount, "w")) return mcpError("Write access denied on this mount");
+      let srcStat;
+      try {
+        srcStat = await stat(src.resolved);
+      } catch (err) {
+        if (err.code === "ENOENT") return mcpError(`Source not found: ${args.from}`);
+        return mcpError(`Stat failed: ${err.message}`);
+      }
+      let dstExists = false;
+      try {
+        await stat(dst.resolved);
+        dstExists = true;
+      } catch (err) {
+        if (err.code !== "ENOENT") return mcpError(`Stat failed: ${err.message}`);
+      }
+      if (dstExists && !args.overwrite) {
+        return mcpError(`Copy refused: destination already exists: ${args.to} (use overwrite=true)`);
+      }
+      try {
+        await mkdir(path.dirname(dst.resolved), { recursive: true });
+        await cp(src.resolved, dst.resolved, {
+          recursive: true,
+          errorOnExist: false,
+          force: !!args.overwrite,
+        });
+        return mcpResult(JSON.stringify({
+          status: "copied",
+          from: args.from,
+          to: args.to,
+          type: srcStat.isDirectory() ? "dir" : "file",
+        }, null, 2));
+      } catch (err) {
+        return mcpError(`Copy failed: ${err.message}`);
+      }
+    }
+
     case "fs_mounts": {
       const { mounts, error } = await getFileserverMounts(vault);
       if (error) return mcpError(error);