@nathapp/nax 0.84.0 → 0.85.1

package/dist/nax.js

@@ -143,14 +143,48 @@ var init_infra = __esm(() => {
   init_nax_error();
 });
 
+// ../nax-agent/src/internal/redact-structured.ts
+function redactStructured(text) {
+  let out = text;
+  for (const { re } of STRUCTURED_PATTERNS) {
+    re.lastIndex = 0;
+    out = out.replace(re, (_match, keep) => `${keep}${REDACTED}`);
+  }
+  return out;
+}
+var REDACTED = "[REDACTED]", KEYWORD, KEY, DQ_BODY, ESCAPED_BODY, SQ_BODY, NOT_A_REFERENCE, NOT_A_TOKEN_COUNT, AUTH_SCHEME, STRUCTURED_PATTERNS;
+var init_redact_structured = __esm(() => {
+  KEYWORD = String.raw`(?:SECRET|TOKEN(?!s\b)|API[_-]?KEY|PASSWORD|PRIVATE[_-]?KEY|ACCESS[_-]?KEY|WEBHOOK|AUTHORIZATION|COOKIE|CREDENTIAL|PASSWD|(?<=[\w.-])_(?:URI|DSN)|CONNECTION_?STRING)`;
+  KEY = String.raw`[\w.-]{0,64}?${KEYWORD}[\w.-]{0,64}`;
+  DQ_BODY = String.raw`(?:[^"\\\r\n]|\\.)+`;
+  ESCAPED_BODY = String.raw`(?:[^"\\\r\n]|\\(?!\\*"))+`;
+  SQ_BODY = String.raw`[^'\r\n]+`;
+  NOT_A_REFERENCE = String.raw`(?!["'$<{(\[]|process\.|import\.meta|os\.|env\.|await\b|new\b|[\w.]+\(|(?:string|number|boolean|str|int|any|unknown|undefined|null|true|false|none)(?![\w-]))`;
+  NOT_A_TOKEN_COUNT = String.raw`(?![\w.-]{0,64}?TOKEN(?!s\b)[\w.-]{0,64}[ \t]{0,8}[=:][ \t]{0,8}\d+(?![\w.-]))`;
+  AUTH_SCHEME = String.raw`(?:(?:Bearer|Basic|Digest|Token)[ \t]+)?`;
+  STRUCTURED_PATTERNS = [
+    { re: new RegExp(String.raw`("${KEY}"\s{0,256}:\s{0,256}")(${DQ_BODY})`, "gi") },
+    { re: new RegExp(String.raw`('${KEY}'\s{0,256}:\s{0,256}')(${SQ_BODY})`, "gi") },
+    { re: new RegExp(String.raw`('${KEY}'\s{0,256}:\s{0,256}")(${DQ_BODY})`, "gi") },
+    { re: new RegExp(String.raw`(\\{1,3}"${KEY}\\{1,3}"\s{0,256}:\s{0,256}\\{1,3}")(${ESCAPED_BODY})`, "gi") },
+    { re: new RegExp(String.raw`(?<![\w.-])(${KEY}[ \t]{0,8}[=:][ \t]{0,8}")(${DQ_BODY})`, "gi") },
+    { re: new RegExp(String.raw`(?<![\w.-])(${KEY}[ \t]{0,8}[=:][ \t]{0,8}')(${SQ_BODY})`, "gi") },
+    {
+      re: new RegExp(String.raw`(?<![\w.-])${NOT_A_TOKEN_COUNT}(${KEY}[ \t]{0,8}[=:][ \t]{0,8})${NOT_A_REFERENCE}(${AUTH_SCHEME}[^\s"',]+)`, "gi")
+    }
+  ];
+});
+
 // ../nax-agent/src/internal/redact.ts
 function redactString(value) {
   let out = value;
-  for (const { re } of SECRET_VALUE_PATTERNS) {
+  for (const { kind, re } of SECRET_VALUE_PATTERNS) {
+    if (STRUCTURED_KINDS.has(kind))
+      continue;
     re.lastIndex = 0;
-    out = out.replace(re, REDACTED);
+    out = out.replace(re, REDACTED2);
   }
-  return out;
+  return redactStructured(out);
 }
 function redactSecrets(input) {
   return redactValue(input);
@@ -204,15 +238,16 @@ function redactValue(input, seen = new WeakSet, depth = 0) {
       return input.map((item) => redactValue(item, seen, depth + 1));
     const out = {};
     for (const [key, value] of Object.entries(input)) {
-      out[key] = SECRET_KEY_PATTERN.test(key) ? REDACTED : redactValue(value, seen, depth + 1);
+      out[key] = SECRET_KEY_PATTERN.test(key) ? REDACTED2 : redactValue(value, seen, depth + 1);
     }
     return out;
   } finally {
     seen.delete(input);
   }
 }
-var SECRET_KEY_PATTERN, SECRET_VALUE_PATTERNS, REDACTED = "[REDACTED]", MAX_REDACT_DEPTH = 100, CIRCULAR_REF_MARKER = "[Circular]";
+var SECRET_KEY_PATTERN, SECRET_VALUE_PATTERNS, REDACTED2 = "[REDACTED]", STRUCTURED_KINDS, MAX_REDACT_DEPTH = 100, CIRCULAR_REF_MARKER = "[Circular]";
 var init_redact = __esm(() => {
+  init_redact_structured();
   SECRET_KEY_PATTERN = /(SECRET|TOKEN(?!s\b)|API_?KEY|PASSWORD|PRIVATE_?KEY|ACCESS_?KEY|WEBHOOK|AUTHORIZATION|COOKIE|CREDENTIAL|PASSWD|(?:\w+)?_URL|\w+_URI|\w+_DSN|CONNECTION\s*STRING)/i;
   SECRET_VALUE_PATTERNS = [
     { kind: "openai", re: /sk-[A-Za-z0-9_-]{16,}/g },
@@ -238,6 +273,7 @@ var init_redact = __esm(() => {
     { kind: "cookie", re: /\b(?:Set-)?Cookie\s*:\s*[^\r\n]+/gi },
     { kind: "url-credentials", re: /\b[a-z][a-z0-9+.-]*:\/\/(?:[^/\s@]*:[^/\s@]+)@/gi }
   ];
+  STRUCTURED_KINDS = new Set(["assignment", "api-key-header"]);
 });
 
 // ../nax-agent/src/permissions/secret-spans.ts
@@ -3931,6 +3967,20 @@ var init_model_resolver = __esm(() => {
   init_client();
 });
 
+// ../nax-agent/src/native/provider-models.ts
+async function listProviderModels(providerId, catalogOverrides = []) {
+  const client = await getNativeClient(catalogOverrides);
+  const models = await client.listModels(providerId);
+  return models.filter((model) => model.supportsTools).map((model) => ({
+    id: model.id,
+    contextWindow: model.contextWindow,
+    ...model.maxTokens !== undefined ? { maxTokens: model.maxTokens } : {}
+  })).sort((a, b) => byCodePoint(a.id, b.id));
+}
+var init_provider_models = __esm(() => {
+  init_client();
+});
+
 // ../nax-agent/src/native/session/memory-transcript-store.ts
 function createMemoryTranscriptStore() {
   const live = new Map;
@@ -21169,11 +21219,24 @@ function flagFromBoolean(input, field, subcommand, validVerbs, flag) {
 function looksLikeFlag(value) {
   return value.startsWith("-");
 }
+function buildGitRootArgv(input) {
+  const extraFields = Object.keys(input).filter((field) => field !== "subcommand");
+  if (extraFields.length > 0) {
+    return { error: `rev-parse accepts no additional fields (received: ${extraFields.join(", ")})` };
+  }
+  return ["rev-parse", "--show-toplevel"];
+}
+function defaultGitExcludes(subcommand, excludes) {
+  return subcommand === "blame" ? [] : excludes;
+}
 function buildGitArgv(input, defaultExcludes = []) {
   const subcommand = input.subcommand;
   if (typeof subcommand !== "string" || !GIT_READ_VERBS.includes(subcommand)) {
     return { error: `subcommand must be one of: ${GIT_READ_VERBS.join(", ")}` };
   }
+  if (subcommand === "rev-parse") {
+    return buildGitRootArgv(input);
+  }
   const refs = Array.isArray(input.refs) ? input.refs : [];
   const paths = Array.isArray(input.paths) ? input.paths : [];
   const argv = [subcommand];
@@ -21239,8 +21302,7 @@ function buildGitArgv(input, defaultExcludes = []) {
   argv.push("--");
   if (paths.length === 0) {
     argv.push(".");
-    if (subcommand !== "blame")
-      argv.push(...defaultExcludes);
+    argv.push(...defaultGitExcludes(subcommand, defaultExcludes));
     return argv;
   }
   for (const path of paths) {
@@ -21258,7 +21320,7 @@ var init_git = __esm(() => {
   init_git_exec();
   init_truncate();
   init_git_flags();
-  GIT_READ_VERBS = ["diff", "log", "show", "status", "blame"];
+  GIT_READ_VERBS = ["diff", "log", "show", "status", "blame", "rev-parse"];
   GIT_DIFF_FILTERS = ["A", "M", "D", "R"];
   GIT_NAME_ONLY_VERBS = ["diff", "log", "show"];
   GIT_DIFF_FILTER_VERBS = ["diff", "log", "show"];
@@ -21267,11 +21329,15 @@ var init_git = __esm(() => {
   GIT_FULL_MESSAGE_VERBS = ["log"];
   gitTool = {
     name: "Git",
-    description: "Run a read-only git command (diff, log, show, status, blame) in the repository. Supply refs and pathspecs as arrays, not as a command line. Command-line flags are not accepted in any field; use the nameOnly, diffFilter, oneline, fullMessage and maxCount fields instead.",
+    description: "Run a read-only git command (diff, log, show, status, blame, rev-parse) in the repository. rev-parse is fixed to `git rev-parse --show-toplevel` and accepts no other fields. Supply refs and pathspecs as arrays, not as a command line. Command-line flags are not accepted in any field; use the nameOnly, diffFilter, oneline, fullMessage and maxCount fields instead.",
     inputSchema: {
       type: "object",
       properties: {
-        subcommand: { type: "string", enum: [...GIT_READ_VERBS], description: "Read-only git subcommand" },
+        subcommand: {
+          type: "string",
+          enum: [...GIT_READ_VERBS],
+          description: "Read-only git subcommand; rev-parse is fixed to --show-toplevel"
+        },
         refs: { type: "array", items: { type: "string" }, description: "Refs, e.g. ['HEAD~1','HEAD']" },
         paths: { type: "array", items: { type: "string" }, description: "Pathspecs, relative to the permitted root" },
         nameOnly: {
@@ -23971,7 +24037,7 @@ function redirectForVerb(deniedTool, verb, available, declaredCommands) {
 }
 var GIT_READ_VERBS2, GIT_COMMIT_VERBS, GIT_REVERT_VERBS, NAX_OWNED_RUN_STATE_EXPLANATION = "`.nax/` is nax's own run state, written by the harness during this run. It is not part of your diff and must not be reverted.", GLOB, GREP, READ, DELETE, GIT, GIT_COMMIT2, TEST_SCOPED, BASH, HEAD_INTENTS, TASK_RUNNERS, INSTALL_VERBS;
 var init_denial_redirect = __esm(() => {
-  GIT_READ_VERBS2 = new Set(["diff", "log", "show", "status", "blame"]);
+  GIT_READ_VERBS2 = new Set(["diff", "log", "show", "status", "blame", "rev-parse"]);
   GIT_COMMIT_VERBS = new Set(["add", "commit"]);
   GIT_REVERT_VERBS = new Set(["checkout", "restore"]);
   GLOB = { tool: "Glob", how: "Glob lists repository paths by pattern" };
@@ -26514,6 +26580,7 @@ var init_native = __esm(() => {
   init_errors();
   init_model_resolver();
   init_models();
+  init_provider_models();
   init_transcript_store();
   init_session_adapter();
   init_session_affinity();
@@ -26668,6 +26735,23 @@ var init_interaction_handler = __esm(() => {
   NO_OP_INTERACTION_HANDLER2 = NO_OP_INTERACTION_HANDLER;
 });
 
+// ../nax-agent/src/native/session/compaction-settings.ts
+function resolveCompaction(input) {
+  return compactionSettingsSchema.parse(input);
+}
+var DEFAULT_COMPACTION, compactionSettingsSchema;
+var init_compaction_settings = __esm(() => {
+  init_zod();
+  DEFAULT_COMPACTION = { enabled: true, compactAtPercent: 90, keepRecentPercent: 30 };
+  compactionSettingsSchema = exports_external.object({
+    enabled: exports_external.boolean().default(DEFAULT_COMPACTION.enabled),
+    compactAtPercent: exports_external.number().int().min(50).max(99).default(DEFAULT_COMPACTION.compactAtPercent),
+    keepRecentPercent: exports_external.number().int().min(5).max(79).default(DEFAULT_COMPACTION.keepRecentPercent)
+  }).refine((c) => c.keepRecentPercent <= c.compactAtPercent - 20, {
+    message: "keepRecentPercent must be at least 20 points below compactAtPercent"
+  }).default({ ...DEFAULT_COMPACTION });
+});
+
 // ../nax-agent/src/session/native-backend-options.ts
 function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -26679,6 +26763,7 @@ var isStringArray = (value) => Array.isArray(value) && value.every((item) => typ
 var init_native_backend_options = __esm(() => {
   init_zod();
   init_models();
+  init_compaction_settings();
   init_instruction_file_name();
   init_agent_session_errors();
   OptionsSchema2 = exports_external.strictObject({
@@ -26693,7 +26778,8 @@ var init_native_backend_options = __esm(() => {
     }).optional(),
     bashApproval: exports_external.enum(["raw", "gated", "escalate"]).optional(),
     allowUnsandboxed: exports_external.boolean().optional(),
-    carryHistoryAcrossModels: exports_external.boolean().optional()
+    carryHistoryAcrossModels: exports_external.boolean().optional(),
+    compaction: compactionSettingsSchema.optional()
   });
 });
 
@@ -27020,6 +27106,7 @@ var init_session_tool_support = __esm(() => {
 var init_native_backend = __esm(() => {
   init_spin_breaker();
   init_models();
+  init_compaction_settings();
   init_transcript_identity();
   init_session_adapter();
   init_agent_session_errors();
@@ -29630,6 +29717,7 @@ __export(exports_internal, {
   COMPACTION_SUMMARY_SUFFIX: () => COMPACTION_SUMMARY_SUFFIX,
   DEFAULT_BASH_APPROVAL_MODE: () => DEFAULT_BASH_APPROVAL_MODE,
   DEFAULT_BASH_SHELL: () => DEFAULT_BASH_SHELL,
+  DEFAULT_COMPACTION: () => DEFAULT_COMPACTION,
   DEFAULT_INSTRUCTION_FILE_NAME: () => DEFAULT_INSTRUCTION_FILE_NAME,
   DEFAULT_LOG_FORMAT: () => DEFAULT_LOG_FORMAT,
   DEFAULT_LOG_MAX_COUNT: () => DEFAULT_LOG_MAX_COUNT,
@@ -29755,6 +29843,7 @@ __export(exports_internal, {
   codingToolSupportModule: () => exports_coding_tool_support,
   codingToolsToDefinitions: () => codingToolsToDefinitions,
   commandSpecIncludes: () => commandSpecIncludes,
+  compactionSettingsSchema: () => compactionSettingsSchema,
   compactionThreshold: () => compactionThreshold,
   compileToolPolicy: () => compileToolPolicy,
   completeWithRecovery: () => completeWithRecovery,
@@ -29841,6 +29930,7 @@ __export(exports_internal, {
   listCredentialFiles: () => listCredentialFiles,
   listGitGuardFiles: () => listGitGuardFiles,
   listNaxEntries: () => listNaxEntries,
+  listProviderModels: () => listProviderModels,
   listStoredProviders: () => listStoredProviders,
   loadTranscript: () => loadTranscript,
   loginProviderIds: () => loginProviderIds,
@@ -29908,6 +29998,7 @@ __export(exports_internal, {
   resetSandboxBackend: () => resetSandboxBackend,
   resolveBashApproval: () => resolveBashApproval,
   resolveBashSupport: () => resolveBashSupport,
+  resolveCompaction: () => resolveCompaction,
   resolveContextWindow: () => resolveContextWindow,
   resolveGitLayout: () => resolveGitLayout,
   resolveNativeId: () => resolveNativeId,
@@ -29984,6 +30075,7 @@ var init_internal = __esm(() => {
   init_core();
   init_infra();
   init_git_exec();
+  init_compaction_settings();
   init_instruction_file_name();
   init_repository_instructions();
   init_session();
@@ -30023,6 +30115,7 @@ var init_internal = __esm(() => {
   init_errors();
   init_model_resolver();
   init_models();
+  init_provider_models();
   init_external_handler();
   init_loop_events();
   init_session();
@@ -32922,7 +33015,7 @@ function isLegacyFlatModels(val) {
   }
   return false;
 }
-var ConfigPricingTierSchema, ConfigPricingSchema, ThinkingLevelSchema, CatalogPricingSchema, OpenRouterRoutingSchema, CatalogModelOverrideSchema, LOOPBACK_HOSTS2, BASE_URL_MESSAGE = "baseUrl must be an https URL (http allowed only for localhost/127.0.0.1) and must not embed credentials", ProviderCatalogOverrideSchema, ModelDefSchema, ModelEntrySchema, PerAgentModelMapSchema, ModelMapSchema, ModelTierSchema, ConfiguredModelObjectSchema, ConfiguredModelSchema, TierConfigSchema;
+var ConfigPricingTierSchema, ConfigPricingSchema, ThinkingLevelSchema, CatalogPricingSchema, PercentileCutoffSchema, PercentileTargetSchema, OpenRouterRoutingSchema, CatalogModelOverrideSchema, LOOPBACK_HOSTS2, BASE_URL_MESSAGE = "baseUrl must be an https URL (http allowed only for localhost/127.0.0.1) and must not embed credentials", ProviderCatalogOverrideSchema, ModelDefSchema, ModelEntrySchema, PerAgentModelMapSchema, ModelMapSchema, ModelTierSchema, ConfiguredModelObjectSchema, ConfiguredModelSchema, TierConfigSchema;
 var init_schemas_model = __esm(() => {
   init_zod();
   ConfigPricingTierSchema = exports_external.object({
@@ -32946,6 +33039,13 @@ var init_schemas_model = __esm(() => {
     cacheRead: exports_external.number().min(0),
     cacheWrite: exports_external.number().min(0)
   }).strict();
+  PercentileCutoffSchema = exports_external.object({
+    p50: exports_external.number().positive().optional(),
+    p75: exports_external.number().positive().optional(),
+    p90: exports_external.number().positive().optional(),
+    p99: exports_external.number().positive().optional()
+  }).strict().refine((v) => Object.keys(v).length > 0, { message: "a percentile cutoff object must not be empty" });
+  PercentileTargetSchema = exports_external.union([exports_external.number().positive(), PercentileCutoffSchema]);
   OpenRouterRoutingSchema = exports_external.object({
     allow_fallbacks: exports_external.boolean().optional(),
     require_parameters: exports_external.boolean().optional(),
@@ -32955,7 +33055,9 @@ var init_schemas_model = __esm(() => {
     only: exports_external.array(exports_external.string().min(1)).optional(),
     ignore: exports_external.array(exports_external.string().min(1)).optional(),
     quantizations: exports_external.array(exports_external.string().min(1)).optional(),
-    sort: exports_external.enum(["price", "throughput", "latency"]).optional()
+    sort: exports_external.enum(["price", "throughput", "latency"]).optional(),
+    preferred_min_throughput: PercentileTargetSchema.optional(),
+    preferred_max_latency: PercentileTargetSchema.optional()
   }).strict().refine((v) => Object.keys(v).length > 0, {
     message: "openRouterRouting must not be empty \u2014 omit the key to leave the model's routing unset"
   });
@@ -33150,13 +33252,7 @@ var init_schemas_execution = __esm(() => {
     rectification: RectificationConfigSchema,
     regressionGate: RegressionGateConfigSchema,
     contextProviderTokenBudget: exports_external.number().int().positive({ message: "contextProviderTokenBudget must be > 0" }).default(2000),
-    compaction: exports_external.object({
-      enabled: exports_external.boolean().default(true),
-      compactAtPercent: exports_external.number().int().min(50).max(99).default(90),
-      keepRecentPercent: exports_external.number().int().min(5).max(79).default(30)
-    }).refine((c) => c.keepRecentPercent <= c.compactAtPercent - 20, {
-      message: "keepRecentPercent must be at least 20 points below compactAtPercent"
-    }).default({ enabled: true, compactAtPercent: 90, keepRecentPercent: 30 }),
+    compaction: compactionSettingsSchema,
     lintCommand: exports_external.string().nullable().optional(),
     typecheckCommand: exports_external.string().nullable().optional(),
     permissionProfile: exports_external.enum(["unrestricted", "safe", "scoped"]).default("unrestricted"),
@@ -38851,7 +38947,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@nathapp/nax",
-    version: "0.84.0",
+    version: "0.85.1",
     description: "AI Coding Agent Orchestrator \u2014 loops until done",
     type: "module",
     bin: {
@@ -38937,8 +39033,8 @@ var init_package = __esm(() => {
     dependencies: {
       "@agentclientprotocol/sdk": "~1.7.0",
       "@anthropic-ai/sandbox-runtime": "0.0.77",
-      "@modelcontextprotocol/sdk": "^1.30.0",
-      "@nathapp/nax-ai": "0.84.0",
+      "@modelcontextprotocol/sdk": "^1.32.1",
+      "@nathapp/nax-ai": "0.85.1",
       chalk: "^5.6.2",
       commander: "^13.1.0",
       ink: "^6.7.0",
@@ -44842,6 +44938,8 @@ function buildAgentScopeSection(root, workdirLabel) {
     return [
       "## Your file scope",
       "",
+      `**Execution repository/worktree root:** \`${root}\``,
+      "",
       "Your file tools (Read, Write, Edit, Glob, Grep, Git) are rooted at the repository root.",
       "Every path you pass them is resolved from there."
     ].join(`
@@ -44850,6 +44948,8 @@ function buildAgentScopeSection(root, workdirLabel) {
   return [
     "## Your file scope",
     "",
+    `**Execution repository/worktree root:** \`${root}\``,
+    "",
     "Your file tools (Read, Write, Edit, Glob, Grep, Git) are rooted at the repository root, NOT at your package.",
     `Your story's package is \`${workdirLabel}\`. Spell every path repo-rooted from the repository root: write`,
     `\`${workdirLabel}/src/index.ts\`, never \`src/index.ts\`.`,
@@ -57353,8 +57453,8 @@ var init_version = __esm(() => {
   NAX_AI_VERSION = CATALOG_VERSION;
   NAX_COMMIT = (() => {
     try {
-      if (/^[0-9a-f]{6,10}$/.test("eeb09eb"))
-        return "eeb09eb";
+      if (/^[0-9a-f]{6,10}$/.test("9611b61"))
+        return "9611b61";
     } catch {}
     try {
       const result = Bun.spawnSync(["git", "rev-parse", "--short", "HEAD"], {
@@ -59203,7 +59303,7 @@ var init_v4_mini = __esm(() => {
   init_external2();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
 function isZ4Schema(s) {
   const schema = s;
   return !!schema._zod;
@@ -59280,7 +59380,7 @@ var init_v4 = __esm(() => {
   init_classic();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
 var LATEST_PROTOCOL_VERSION = "2025-11-25", DEFAULT_NEGOTIATED_PROTOCOL_VERSION = "2025-03-26", SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task", JSONRPC_VERSION = "2.0", AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams = (value) => TaskAugmentedRequestParamsSchema.safeParse(value).success, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest = (value) => JSONRPCRequestSchema.safeParse(value).success, JSONRPCNotificationSchema, isJSONRPCNotification = (value) => JSONRPCNotificationSchema.safeParse(value).success, JSONRPCResultResponseSchema, isJSONRPCResultResponse = (value) => JSONRPCResultResponseSchema.safeParse(value).success, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse = (value) => JSONRPCErrorResponseSchema.safeParse(value).success, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest = (value) => InitializeRequestSchema.safeParse(value).success, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError;
 var init_types7 = __esm(() => {
   init_v4();
@@ -60108,7 +60208,7 @@ var init_types7 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
 function isTerminal(status) {
   return status === "completed" || status === "failed" || status === "cancelled";
 }
@@ -60326,7 +60426,7 @@ var init_esm = __esm(() => {
   init_zodToJsonSchema();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
 function getMethodLiteral(schema) {
   const shape = getObjectShape(schema);
   const methodSchema = shape?.method;
@@ -60351,7 +60451,7 @@ var init_zod_json_schema_compat = __esm(() => {
   init_esm();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
 class Protocol {
   constructor(_options) {
     this._options = _options;
@@ -60387,6 +60487,9 @@ class Protocol {
       this.setRequestHandler(GetTaskPayloadRequestSchema, async (request, extra) => {
         const handleTaskResult = async () => {
           const taskId = request.params.taskId;
+          if (!await this._taskStore.getTask(taskId, extra.sessionId)) {
+            throw new McpError(ErrorCode.InvalidParams, `Task not found: ${taskId}`);
+          }
           if (this._taskMessageQueue) {
             let queuedMessage;
             while (queuedMessage = await this._taskMessageQueue.dequeue(taskId, extra.sessionId)) {
@@ -60417,12 +60520,12 @@ class Protocol {
             throw new McpError(ErrorCode.InvalidParams, `Task not found: ${taskId}`);
           }
           if (!isTerminal(task.status)) {
-            await this._waitForTaskUpdate(taskId, extra.signal);
+            await this._waitForTaskUpdate(taskId, extra.signal, extra.sessionId);
             return await handleTaskResult();
           }
           if (isTerminal(task.status)) {
             const result = await this._taskStore.getTaskResult(taskId, extra.sessionId);
-            this._clearTaskQueue(taskId);
+            this._clearTaskQueue(taskId, extra.sessionId);
             return {
               ...result,
               _meta: {
@@ -60459,7 +60562,7 @@ class Protocol {
             throw new McpError(ErrorCode.InvalidParams, `Cannot cancel task in terminal status: ${task.status}`);
           }
           await this._taskStore.updateTaskStatus(request.params.taskId, "cancelled", "Client cancelled task execution.", extra.sessionId);
-          this._clearTaskQueue(request.params.taskId);
+          this._clearTaskQueue(request.params.taskId, extra.sessionId);
           const cancelledTask = await this._taskStore.getTask(request.params.taskId, extra.sessionId);
           if (!cancelledTask) {
             throw new McpError(ErrorCode.InvalidParams, `Task not found after cancellation: ${request.params.taskId}`);
@@ -60582,6 +60685,19 @@ class Protocol {
     const handler = this._requestHandlers.get(request.method) ?? this.fallbackRequestHandler;
     const capturedTransport = this._transport;
     const relatedTaskId = request.params?._meta?.[RELATED_TASK_META_KEY]?.taskId;
+    const sessionId = capturedTransport?.sessionId;
+    const store = this._taskStore;
+    let relatedTaskFound = true;
+    let relatedTaskLookup;
+    if (relatedTaskId && store && this._taskMessageQueue && sessionId !== undefined) {
+      relatedTaskFound = false;
+      relatedTaskLookup = (async () => {
+        if (!await store.getTask(relatedTaskId, sessionId)) {
+          throw new McpError(ErrorCode.InvalidParams, `Task not found: ${relatedTaskId}`);
+        }
+        relatedTaskFound = true;
+      })();
+    }
     if (handler === undefined) {
       const errorResponse = {
         jsonrpc: "2.0",
@@ -60591,7 +60707,10 @@ class Protocol {
           message: "Method not found"
         }
       };
-      if (relatedTaskId && this._taskMessageQueue) {
+      if (relatedTaskId && relatedTaskLookup) {
+        const queuedError = { type: "error", message: errorResponse, timestamp: Date.now() };
+        relatedTaskLookup.then(() => this._enqueueTaskMessage(relatedTaskId, queuedError, sessionId), () => capturedTransport?.send(errorResponse)).catch((error48) => this._onerror(new Error(`Failed to send an error response: ${error48}`)));
+      } else if (relatedTaskId && this._taskMessageQueue) {
         this._enqueueTaskMessage(relatedTaskId, {
           type: "error",
           message: errorResponse,
@@ -60642,7 +60761,10 @@ class Protocol {
       closeSSEStream: extra?.closeSSEStream,
       closeStandaloneSSEStream: extra?.closeStandaloneSSEStream
     };
-    Promise.resolve().then(() => {
+    (relatedTaskLookup ?? Promise.resolve()).then(() => {
+      if (relatedTaskLookup && abortController.signal.aborted) {
+        throw new McpError(ErrorCode.ConnectionClosed, "Request was cancelled");
+      }
       if (taskCreationParams) {
         this.assertTaskHandlerCapability(request.method);
       }
@@ -60677,7 +60799,7 @@ class Protocol {
           ...error48["data"] !== undefined && { data: error48["data"] }
         }
       };
-      if (relatedTaskId && this._taskMessageQueue) {
+      if (relatedTaskId && this._taskMessageQueue && relatedTaskFound) {
         await this._enqueueTaskMessage(relatedTaskId, {
           type: "error",
           message: errorResponse,
@@ -61065,7 +61187,7 @@ class Protocol {
       throw new Error("Cannot enqueue task message: taskStore and taskMessageQueue are not configured");
     }
     const maxQueueSize = this._options?.maxTaskQueueSize;
-    await this._taskMessageQueue.enqueue(taskId, message, sessionId, maxQueueSize);
+    await this._taskMessageQueue.enqueue(taskId, message, sessionId ?? this._transport?.sessionId, maxQueueSize);
   }
   async _clearTaskQueue(taskId, sessionId) {
     if (this._taskMessageQueue) {
@@ -61084,10 +61206,10 @@ class Protocol {
       }
     }
   }
-  async _waitForTaskUpdate(taskId, signal) {
+  async _waitForTaskUpdate(taskId, signal, sessionId) {
     let interval = this._options?.defaultTaskPollInterval ?? 1000;
     try {
-      const task = await this._taskStore?.getTask(taskId);
+      const task = await this._taskStore?.getTask(taskId, sessionId);
       if (task?.pollInterval) {
         interval = task.pollInterval;
       }
@@ -64198,7 +64320,7 @@ var require_data = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/.bun/fast-uri@3.1.7/node_modules/fast-uri/lib/utils.js
+// ../../node_modules/.bun/fast-uri@3.1.8/node_modules/fast-uri/lib/utils.js
 var require_utils = __commonJS(function(exports, module) {
   var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
   var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
@@ -64715,7 +64837,7 @@ var require_utils = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/.bun/fast-uri@3.1.7/node_modules/fast-uri/lib/schemes.js
+// ../../node_modules/.bun/fast-uri@3.1.8/node_modules/fast-uri/lib/schemes.js
 var require_schemes = __commonJS(function(exports, module) {
   var { isUUID } = require_utils();
   var URN_REG = /^([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-./:;=@]|%[\da-f]{2})+)$/iu;
@@ -64890,7 +65012,7 @@ var require_schemes = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/.bun/fast-uri@3.1.7/node_modules/fast-uri/index.js
+// ../../node_modules/.bun/fast-uri@3.1.8/node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS(function(exports, module) {
   var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
   var { SCHEMES, getSchemeHandler } = require_schemes();
@@ -65220,13 +65342,14 @@ var require_fast_uri = __commonJS(function(exports, module) {
       if (!malformedIPLiteral) {
         malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
       }
-      if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
-        if (uri.indexOf("%") !== -1) {
-          if (parsed.host !== undefined && !malformedIPLiteral) {
-            const host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
-            parsed.host = reescapeHostDelimiters(host, isIP);
-          }
+      if (uri.indexOf("%") !== -1 && parsed.host !== undefined && !malformedIPLiteral) {
+        let host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
+        if (!isIP) {
+          host = normalizePercentEncoding(host.toLowerCase());
         }
+        parsed.host = reescapeHostDelimiters(host, isIP);
+      }
+      if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
         if (parsed.path) {
           parsed.path = normalizePathEncoding(parsed.path);
         }
@@ -68082,7 +68205,7 @@ var require_dist = __commonJS(function(exports, module) {
   exports.default = formatsPlugin;
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/validation/ajv-provider.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/validation/ajv-provider.js
 function createDefaultAjvInstance() {
   const ajv = new import_ajv.default({
     strict: false,
@@ -68125,7 +68248,7 @@ var init_ajv_provider = __esm(() => {
   import_ajv_formats = __toESM(require_dist(), 1);
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/client.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/client.js
 class ExperimentalClientTasks {
   constructor(_client) {
     this._client = _client;
@@ -68194,7 +68317,7 @@ var init_client2 = __esm(() => {
   init_types7();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/helpers.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/helpers.js
 function assertToolsCallTaskCapability(requests, method, entityName) {
   if (!requests) {
     throw new Error(`${entityName} does not support task creation (required for ${method})`);
@@ -68229,7 +68352,7 @@ function assertClientRequestTaskCapability(requests, method, entityName) {
   }
 }
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/client/index.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/client/index.js
 function applyElicitationDefaults(schema, data) {
   if (!schema || data === null || typeof data !== "object")
     return;
@@ -69150,7 +69273,7 @@ var require_cross_spawn = __commonJS(function(exports, module) {
   module.exports._enoent = enoent;
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
 class ReadBuffer {
   constructor(options) {
     this._maxBufferSize = options?.maxBufferSize ?? STDIO_DEFAULT_MAX_BUFFER_SIZE;
@@ -69193,7 +69316,7 @@ var init_stdio = __esm(() => {
   STDIO_DEFAULT_MAX_BUFFER_SIZE = 10 * 1024 * 1024;
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/client/stdio.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/client/stdio.js
 import process4 from "process";
 import { PassThrough } from "stream";
 function getDefaultEnvironment() {
@@ -89595,7 +89718,7 @@ var init_tool_calls = __esm(() => {
   TOO_MANY_TEXT = `Too many concurrent tool calls: at most ${MAX_CONCURRENT_TOOL_CALLS} run at once.`;
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/server.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/server.js
 class ExperimentalServerTasks {
   constructor(_server) {
     this._server = _server;
@@ -89676,7 +89799,7 @@ var init_server = __esm(() => {
   init_types7();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/server/index.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/server/index.js
 var Server;
 var init_server2 = __esm(() => {
   init_protocol();
@@ -91409,7 +91532,7 @@ var require_content_type = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/mediaType.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/mediaType.js
 function mediaTypeEssence(header) {
   if (!header) {
     return;
@@ -91435,7 +91558,53 @@ var init_mediaType = __esm(() => {
   import_content_type = __toESM(require_content_type(), 1);
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/server/sseKeepAlive.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/server/requestBody.js
+function requestBodyTooLargeMessage(maxBytes) {
+  return `Payload Too Large: Request body must not exceed ${maxBytes} bytes`;
+}
+function resolveMaxRequestBodySize(value) {
+  if (value === undefined) {
+    return DEFAULT_MAX_REQUEST_BODY_SIZE;
+  }
+  if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) {
+    throw new RangeError(`maxRequestBodySize must be a positive number of bytes, got ${String(value)}`);
+  }
+  return value;
+}
+async function readRequestBody(request, maxBytes = DEFAULT_MAX_REQUEST_BODY_SIZE) {
+  if (Number(request.headers.get("content-length")) > maxBytes) {
+    return { tooLarge: true };
+  }
+  if (request.body === null) {
+    return { tooLarge: false, text: "" };
+  }
+  const reader = request.body.getReader();
+  const decoder = new TextDecoder;
+  let received = 0;
+  let text = "";
+  try {
+    for (;; ) {
+      const { done, value } = await reader.read();
+      if (done) {
+        break;
+      }
+      received += value.byteLength;
+      if (received > maxBytes) {
+        return { tooLarge: true };
+      }
+      text += decoder.decode(value, { stream: true });
+    }
+  } finally {
+    reader.releaseLock();
+  }
+  return { tooLarge: false, text: text + decoder.decode() };
+}
+var DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE = 100;
+var init_requestBody = __esm(() => {
+  DEFAULT_MAX_REQUEST_BODY_SIZE = 4 * 1024 * 1024;
+});
+
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/server/sseKeepAlive.js
 function armSseKeepAlive(intervalMs, onTick) {
   if (!Number.isFinite(intervalMs) || intervalMs < 1) {
     return;
@@ -91449,7 +91618,7 @@ var init_sseKeepAlive = __esm(() => {
   MAX_TIMER_DELAY_MS = 2 ** 31 - 1;
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/server/webStandardStreamableHttp.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/server/webStandardStreamableHttp.js
 class WebStandardStreamableHTTPServerTransport {
   constructor(options = {}) {
     this._started = false;
@@ -91472,6 +91641,7 @@ class WebStandardStreamableHTTPServerTransport {
     this._enableDnsRebindingProtection = options.enableDnsRebindingProtection ?? false;
     this._retryInterval = options.retryInterval;
     this._keepAliveMs = options.keepAliveMs ?? DEFAULT_SSE_KEEP_ALIVE_MS;
+    this._maxRequestBodySize = resolveMaxRequestBodySize(options.maxRequestBodySize);
   }
   startKeepAlive(controller, encoder) {
     if (this._closed)
@@ -91788,12 +91958,22 @@ data:
         rawMessage = options.parsedBody;
       } else {
         try {
-          rawMessage = await req.json();
+          const body = await readRequestBody(req, this._maxRequestBodySize);
+          if (body.tooLarge) {
+            const message = requestBodyTooLargeMessage(this._maxRequestBodySize);
+            this.onerror?.(new Error(message));
+            return this.createJsonErrorResponse(413, -32000, message);
+          }
+          rawMessage = JSON.parse(body.text);
         } catch {
           this.onerror?.(new Error("Parse error: Invalid JSON"));
           return this.createJsonErrorResponse(400, -32700, "Parse error: Invalid JSON");
         }
       }
+      if (Array.isArray(rawMessage) && rawMessage.length > MAX_BATCH_SIZE) {
+        this.onerror?.(new Error(`Invalid Request: Batch must not exceed ${MAX_BATCH_SIZE} messages`));
+        return this.createJsonErrorResponse(400, -32600, `Invalid Request: Batch must not exceed ${MAX_BATCH_SIZE} messages`);
+      }
       let messages;
       try {
         if (Array.isArray(rawMessage)) {
@@ -92107,11 +92287,12 @@ data:
 }
 var init_webStandardStreamableHttp = __esm(() => {
   init_mediaType();
+  init_requestBody();
   init_sseKeepAlive();
   init_types7();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/server/streamableHttp.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.32.1/node_modules/@modelcontextprotocol/sdk/dist/esm/server/streamableHttp.js
 class StreamableHTTPServerTransport {
   constructor(options = {}) {
     this._requestContext = new WeakMap;
@@ -104208,7 +104389,8 @@ async function runRectification(ctx, state, phaseCosts, phaseOutputs, overrides)
     success: cycleResult.exitReason === "resolved",
     iterationCount: priorRectifyIterations + cycleResult.iterations.length,
     exitReason: reportedExitReason,
-    finalFindingsCount: cycleResult.finalFindings.length
+    finalFindingsCount: cycleResult.finalFindings.length,
+    ...provisionalMarker(cycleResult.exitReason, cycleResult.finalFindings.length)
   };
   const rectLogger = getSafeLogger2();
   const rectSummary = {
@@ -104255,6 +104437,9 @@ async function runRectification(ctx, state, phaseCosts, phaseOutputs, overrides)
   }
   return repoScoped;
 }
+function provisionalMarker(exitReason, finalFindingsCount) {
+  return exitReason === "validate-short-circuit" && finalFindingsCount === 0 ? { provisional: true } : {};
+}
 var init_rectification = __esm(() => {
   init_findings();
   init_logger2();
@@ -104454,7 +104639,7 @@ async function runPostRectificationResume(plan, tracking, preRectGateFailureKeys
           phase: name,
           source: "post-rectification-resume"
         });
-        break;
+        return false;
       }
       if (phasePassed(name, phaseOutputs[name], ctx.storyId))
         continue;
@@ -104465,8 +104650,19 @@ async function runPostRectificationResume(plan, tracking, preRectGateFailureKeys
       source: "post-rectification-resume",
       secondRectifyUsed: resumeRectifyUsed
     });
-    break;
+    return false;
   }
+  return true;
+}
+function settleProvisionalRectification(phaseOutputs, storyId) {
+  const rect = phaseOutputs.rectification;
+  if (rect?.provisional !== true)
+    return;
+  const othersPassed = Object.entries(phaseOutputs).every(([name, output]) => name === "rectification" || phasePassed(name, output, storyId));
+  if (!othersPassed)
+    return;
+  const { provisional: _settled, ...rest } = rect;
+  phaseOutputs.rectification = { ...rest, success: true, settledBy: "resume" };
 }
 async function runMechanicalOnlyResume(plan, tracking, rectResult) {
   const mechanicalOnly = !!rectResult.unfixedFindings?.length && rectResult.unfixedFindings.every((f) => f.source === "lint" || f.source === "typecheck");
@@ -104658,6 +104854,7 @@ function buildStoryOrchestratorResult(plan, tracking, inputs) {
   });
   const totalCostUsd = Object.values(phaseCosts).reduce((sum, cost) => sum + cost, 0);
   const durationMs = Date.now() - startedAt;
+  const failedPhases = collectFailedPhases(ctx, phaseOutputs, { gateName, verifierPassedSsot, failedPhaseEntries });
   logStoryOrchestratorVerdict(ctx, {
     success: success2,
     phaseOutputs,
@@ -104667,9 +104864,7 @@ function buildStoryOrchestratorResult(plan, tracking, inputs) {
     missingRequiredReviewPhases,
     upstreamShortCircuited,
     shortCircuitPhase,
-    failedPhaseEntries,
-    gateName,
-    verifierPassedSsot
+    failedPhases
   });
   return {
     success: success2,
@@ -104679,9 +104874,20 @@ function buildStoryOrchestratorResult(plan, tracking, inputs) {
     phaseOutputs,
     ...rectResult,
     gateRegressedDuringRect,
-    missingRequiredReviewPhases: missingRequiredReviewPhases.length > 0 ? missingRequiredReviewPhases : undefined
+    missingRequiredReviewPhases: missingRequiredReviewPhases.length > 0 ? missingRequiredReviewPhases : undefined,
+    ...failedPhases.length > 0 && { failedPhases }
   };
 }
+function collectFailedPhases(ctx, phaseOutputs, opts) {
+  return [
+    ...Object.entries(phaseOutputs).filter(([name, output]) => {
+      if (opts.verifierPassedSsot && name === opts.gateName)
+        return false;
+      return !phasePassed(name, output, ctx.storyId);
+    }).map(([name]) => name),
+    ...opts.failedPhaseEntries.map((name) => `${name} (never ran)`)
+  ];
+}
 function logStoryOrchestratorVerdict(ctx, inputs) {
   const {
     success: success2,
@@ -104692,19 +104898,9 @@ function logStoryOrchestratorVerdict(ctx, inputs) {
     missingRequiredReviewPhases,
     upstreamShortCircuited,
     shortCircuitPhase,
-    failedPhaseEntries,
-    gateName,
-    verifierPassedSsot
+    failedPhases
   } = inputs;
   const logger = getSafeLogger2();
-  const failedPhases = [
-    ...Object.entries(phaseOutputs).filter(([name, output]) => {
-      if (verifierPassedSsot && name === gateName)
-        return false;
-      return !phasePassed(name, output, ctx.storyId);
-    }).map(([name]) => name),
-    ...failedPhaseEntries.map((name) => `${name} (never ran)`)
-  ];
   const summary = {
     storyId: ctx.storyId,
     success: success2,
@@ -104775,13 +104971,13 @@ class ExecutionPlan {
       isThreeSession: this.isThreeSession
     });
     const resumeLoopEligible = !!this.state.rectification && !rectResult.terminalReviewRequired && (!rectResult.rectificationExhausted || !!rectResult.liteScopeIncomplete);
-    if (resumeLoopEligible) {
-      await runPostRectificationResume(plan, tracking, preRectGateFailureKeys);
-    }
+    const resumeCompleted = resumeLoopEligible && await runPostRectificationResume(plan, tracking, preRectGateFailureKeys);
     if (this.state.rectification && rectResult.rectificationExhausted) {
       await runMechanicalOnlyResume(plan, tracking, rectResult);
     }
     await maybeRunNonBlockingFix(plan, tracking, rectResult, { gateName, preRectGateFailureKeys });
+    if (resumeCompleted)
+      settleProvisionalRectification(tracking.phaseOutputs, this.ctx.storyId);
     return buildStoryOrchestratorResult(plan, tracking, {
       gateName,
       preRectGateFailureKeys,
@@ -109528,7 +109724,7 @@ function routeTddFailure(failureCategory, isLiteMode, ctx, reviewReason, failure
   };
   const pauseFallback = {
     action: "pause",
-    reason: reviewReason || "Three-session TDD requires review"
+    reason: reviewReason || TDD_REVIEW_PAUSE_REASON
   };
   if (failureCategory === undefined) {
     return pauseFallback;
@@ -109560,6 +109756,7 @@ function routeTddFailure(failureCategory, isLiteMode, ctx, reviewReason, failure
       return pauseFallback;
   }
 }
+var TDD_REVIEW_PAUSE_REASON = "Three-session TDD requires review";
 var init_execution_helpers = __esm(() => {
   init_errors4();
 });
@@ -121900,7 +122097,13 @@ Category: ${failureCategory ?? "unknown"}`,
     });
     return { action: "pause", reason: `Human review needed: ${failureCategory ?? "unknown"}` };
   }
-  return routeTddFailure(failureCategory, isLiteMode, ctx);
+  return routeTddFailure(failureCategory, isLiteMode, ctx, uncategorisedPauseReason(frame));
+}
+function uncategorisedPauseReason(frame) {
+  const failed3 = frame.planResult.failedPhases;
+  if (frame.inspection.failureCategory !== undefined || !failed3?.length)
+    return;
+  return `${TDD_REVIEW_PAUSE_REASON} (failed phases: ${failed3.join(", ")})`;
 }
 async function failOnMergeConflict(frame) {
   const { ctx, inspection, deps } = frame;
@@ -121919,7 +122122,7 @@ async function failOnMergeConflict(frame) {
   }
   return null;
 }
-function collectFailedPhases(planResult) {
+function collectFailedPhases2(planResult) {
   const failedPhases = {};
   for (const [name, output] of Object.entries(planResult.phaseOutputs)) {
     if (!output || typeof output !== "object")
@@ -121951,7 +122154,7 @@ async function escalateFailedSession(frame) {
   const { ctx, planResult, inspection, deps } = frame;
   const logger = getLogger2();
   const { agentResult, failureCategory } = inspection;
-  const failedPhases = collectFailedPhases(planResult);
+  const failedPhases = collectFailedPhases2(planResult);
   const stderrTail = (agentResult.stderr ?? "").slice(-500);
   const outputTail = (agentResult.output ?? "").slice(-500);
   logger.error("execution", "Agent session failed", {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nathapp/nax",
-  "version": "0.84.0",
+  "version": "0.85.1",
   "description": "AI Coding Agent Orchestrator — loops until done",
   "type": "module",
   "bin": {
@@ -86,8 +86,8 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "~1.7.0",
     "@anthropic-ai/sandbox-runtime": "0.0.77",
-    "@modelcontextprotocol/sdk": "^1.30.0",
-    "@nathapp/nax-ai": "0.84.0",
+    "@modelcontextprotocol/sdk": "^1.32.1",
+    "@nathapp/nax-ai": "0.85.1",
     "chalk": "^5.6.2",
     "commander": "^13.1.0",
     "ink": "^6.7.0",