@nexrall/code-core 1.4.71 → 1.4.73

package/dist/mcp/manager.js

@@ -76,6 +76,36 @@ class McpManager {
         for (const client of this._clients.values())
             client.setElicitationHandler(handler);
     }
+    /**
+     * Route server→client notifications for one client: `tools/list_changed` re-fetches
+     * the tool table and rebuilds the prefixed map in place (new tools appear on the next
+     * turn — no restart), `prompts/list_changed` drops the cached prompt list. A failed
+     * refresh keeps the OLD table: a transient error must not empty the toolset.
+     */
+    _wireNotifications(name, client) {
+        client.setNotificationHandler((method) => {
+            if (method === 'notifications/tools/list_changed') {
+                void client
+                    .refreshTools()
+                    .then(() => this._refreshToolMap(name, client.tools))
+                    .catch(() => {
+                    /* keep the old table on failure */
+                });
+            }
+            else if (method === 'notifications/prompts/list_changed') {
+                this._promptCache.delete(name);
+            }
+        });
+    }
+    /** Replace one server's entries in the prefixed tool map with its current list. */
+    _refreshToolMap(name, tools) {
+        for (const key of [...this._toolMap.keys()]) {
+            if (this._toolMap.get(key) === name)
+                this._toolMap.delete(key);
+        }
+        for (const tool of tools)
+            this._toolMap.set(`${name}__${tool.name}`, name);
+    }
     /** Pick the transport for a server config: stdio (command), Streamable HTTP, or legacy SSE. */
     static makeClient(name, cfg) {
         if (cfg.type === 'sse')
@@ -91,11 +121,10 @@ class McpManager {
         try {
             Object.assign(merged.mcpServers, (0, index_1.pluginMcpServers)(workDir));
         }
-        catch { /* plugin scan is best-effort */ }
-        const locations = [
-            path.join(os.homedir(), '.nexrall', 'mcp.json'),
-            path.join(workDir, '.nexrall', 'mcp.json'),
-        ];
+        catch {
+            /* plugin scan is best-effort */
+        }
+        const locations = [path.join(os.homedir(), '.nexrall', 'mcp.json'), path.join(workDir, '.nexrall', 'mcp.json')];
         // A list, so the two scopes UNION rather than override: switching a server off in
         // the project must add to whatever the user file already silences.
         const disabled = new Set();
@@ -128,16 +157,14 @@ class McpManager {
             }
             const client = McpManager.makeClient(name, serverCfg);
             client.setElicitationHandler(this._elicitationHandler);
+            this._wireNotifications(name, client);
             try {
                 await client.connect();
                 this._clients.set(name, client);
                 this._errors.delete(name);
                 this._needsAuth.delete(name);
                 // Register tools with prefixed names: serverName__toolName
-                for (const tool of client.tools) {
-                    const prefixed = `${name}__${tool.name}`;
-                    this._toolMap.set(prefixed, name);
-                }
+                this._refreshToolMap(name, client.tools);
             }
             catch (err) {
                 if (err instanceof httpClient_1.McpOAuthRequiredError) {
@@ -204,7 +231,21 @@ class McpManager {
         // stats of two servers with a same-named tool never merge.
         const startedAt = Date.now();
         this.stats.begin();
-        const timed = (p) => p.then((v) => { this.stats.ok(prefixedName, Date.now() - startedAt); return v; }, (e) => { this.stats.fail(prefixedName, Date.now() - startedAt, e.message || String(e)); throw e; });
+        const timed = (p) => p.then((v) => {
+            this.stats.ok(prefixedName, Date.now() - startedAt);
+            return v;
+        }, (e) => {
+            this.stats.fail(prefixedName, Date.now() - startedAt, e.message || String(e));
+            throw e;
+        });
+        // A 401 mid-CALL is different from one at connect: the server is already up and
+        // some tools work — record it so /mcp flips to needs-auth (with the missing
+        // scope) and let the enriched message reach the caller (the model sees WHY).
+        const trackAuth = (p) => p.catch((err) => {
+            if (err instanceof httpClient_1.McpOAuthRequiredError)
+                this._needsAuth.set(serverName, err.wwwAuthenticate);
+            throw err;
+        });
         const racers = [timed(client.callTool(toolName, input)), timed(timeoutPromise)];
         if (abortSignal) {
             let pollId;
@@ -220,9 +261,9 @@ class McpManager {
             // Clearing the poll on whichever branch wins avoids leaving a live interval
             // (and the closure it holds) running for the rest of the process lifetime —
             // the same leak-prevention pattern client.ts uses for its own abort poll.
-            return Promise.race(racers).finally(() => clearInterval(pollId));
+            return trackAuth(Promise.race(racers).finally(() => clearInterval(pollId)));
         }
-        return Promise.race(racers);
+        return trackAuth(Promise.race(racers));
     }
     /** Resources across connected, enabled servers. One server failing never hides the others. */
     async listResources(server) {
@@ -241,7 +282,9 @@ class McpManager {
         if (!client)
             throw new Error(`No connected MCP server named "${server}". Connected: ${[...this._clients.keys()].join(', ') || '(none)'}`);
         let timer;
-        const timeout = new Promise((_, rej) => { timer = setTimeout(() => rej(new Error(`Reading ${uri} timed out after 60s`)), 60000); });
+        const timeout = new Promise((_, rej) => {
+            timer = setTimeout(() => rej(new Error(`Reading ${uri} timed out after 60s`)), 60000);
+        });
         try {
             return await Promise.race([client.readResource(uri), timeout]);
         }
@@ -300,13 +343,18 @@ class McpManager {
             throw new Error(`MCP prompt "${server}:${name}" takes ${declared.length} argument(s)${declared.length ? ` (${declared.map((a) => a.name).join(', ')})` : ''} — got ${values.length}.`);
         }
         const args = {};
-        declared.forEach((a, i) => { const v = values[i]; if (v !== undefined && v !== '')
-            args[a.name] = v; });
+        declared.forEach((a, i) => {
+            const v = values[i];
+            if (v !== undefined && v !== '')
+                args[a.name] = v;
+        });
         const missing = declared.filter((a) => a.required && args[a.name] === undefined);
         if (missing.length)
             throw new Error(`MCP prompt "${server}:${name}" is missing required argument(s): ${missing.map((a) => a.name).join(', ')}.`);
         let timer;
-        const timeout = new Promise((_, rej) => { timer = setTimeout(() => rej(new Error(`MCP prompt ${server}:${name} timed out after 60s`)), 60000); });
+        const timeout = new Promise((_, rej) => {
+            timer = setTimeout(() => rej(new Error(`MCP prompt ${server}:${name} timed out after 60s`)), 60000);
+        });
         try {
             return await Promise.race([client.getPrompt(name, args), timeout]);
         }
@@ -325,6 +373,21 @@ class McpManager {
     get toolCount() {
         return this._toolMap.size;
     }
+    /**
+     * Names of configured servers whose entry sets `alwaysLoad: true` (CC parity).
+     * The agent loop sends this per request; the backend keeps those servers' tools
+     * out of BOTH deferral paths (tool-search `defer_loading` and the cap selector's
+     * droppable set). Config-level — a server that failed to connect still contributes
+     * an inert name, since it sends no tools to protect. Sorted because the list rides
+     * in the request body, which is part of the tools-cache key.
+     */
+    alwaysLoadServers() {
+        const names = [];
+        for (const [name, cfg] of this._configs)
+            if (cfg.alwaysLoad === true)
+                names.push(name);
+        return names.sort();
+    }
     static transportOf(cfg) {
         if (cfg?.type)
             return cfg.type;
@@ -334,7 +397,19 @@ class McpManager {
     getStatus() {
         const out = [];
         for (const [name, client] of this._clients) {
-            out.push({ name, transport: McpManager.transportOf(this._configs.get(name)), tools: client.tools, connected: true, disabled: false });
+            out.push({
+                name,
+                transport: McpManager.transportOf(this._configs.get(name)),
+                tools: client.tools,
+                connected: true,
+                disabled: false,
+                // A server can be UP and still have recorded a 401 from a mid-call
+                // insufficient_scope challenge — the row says so, the detail says which scope.
+                needsAuth: this._needsAuth.has(name),
+                missingScope: this.missingScope(name) || undefined,
+                protocolVersion: client.protocolVersion,
+                alwaysLoad: this._configs.get(name)?.alwaysLoad === true,
+            });
         }
         for (const name of this._configs.keys()) {
             if (this._clients.has(name))
@@ -344,12 +419,26 @@ class McpManager {
             // A disabled server that never connected has no error to report — say nothing
             // rather than repeat "disconnected" as if it were a failure.
             if (disabled && !error) {
-                out.push({ name, transport: McpManager.transportOf(this._configs.get(name)), tools: [], connected: false, disabled: true });
+                out.push({
+                    name,
+                    transport: McpManager.transportOf(this._configs.get(name)),
+                    tools: [],
+                    connected: false,
+                    disabled: true,
+                    alwaysLoad: this._configs.get(name)?.alwaysLoad === true,
+                });
                 continue;
             }
             out.push({
-                name, transport: McpManager.transportOf(this._configs.get(name)), tools: [],
-                connected: false, disabled, error, needsAuth: this._needsAuth.has(name),
+                name,
+                transport: McpManager.transportOf(this._configs.get(name)),
+                tools: [],
+                connected: false,
+                disabled,
+                error,
+                needsAuth: this._needsAuth.has(name),
+                missingScope: this.missingScope(name) || undefined,
+                alwaysLoad: this._configs.get(name)?.alwaysLoad === true,
             });
         }
         return out.sort((a, b) => a.name.localeCompare(b.name));
@@ -358,6 +447,23 @@ class McpManager {
     authChallenge(name) {
         return this._needsAuth.get(name) ?? '';
     }
+    /** Permissions an auth-required server says are missing ('' when unknown/plain 401). */
+    missingScope(name) {
+        return (0, httpClient_1.parseOAuthChallenge)(this._needsAuth.get(name) ?? '').scope ?? '';
+    }
+    /**
+     * `initialize.instructions` from every connected server that sent one — static
+     * reference notes (workflow rules, repo layout) the conversation should carry.
+     * The caller decides where they go; ordering is by server name for stable output.
+     */
+    serverInstructions() {
+        const out = [];
+        for (const [name, client] of this._clients) {
+            if (client.instructions)
+                out.push({ server: name, instructions: client.instructions });
+        }
+        return out.sort((a, b) => a.server.localeCompare(b.server));
+    }
     /** True when the user has switched this server off for the session. */
     isDisabled(name) {
         return this._disabled.has(name);
@@ -386,6 +492,7 @@ class McpManager {
         this._dropClient(name);
         const client = McpManager.makeClient(name, cfg);
         client.setElicitationHandler(this._elicitationHandler);
+        this._wireNotifications(name, client);
         try {
             await client.connect();
         }
@@ -399,8 +506,7 @@ class McpManager {
         this._clients.set(name, client);
         this._errors.delete(name);
         this._needsAuth.delete(name);
-        for (const tool of client.tools)
-            this._toolMap.set(`${name}__${tool.name}`, name);
+        this._refreshToolMap(name, client.tools);
         return null;
     }
     /** Disconnect one server for the session (its config stays; `enable` brings it back). */
@@ -415,9 +521,12 @@ class McpManager {
         const client = this._clients.get(name);
         if (client) {
             try {
+                client.setNotificationHandler(null);
                 client.disconnect();
             }
-            catch { /* best effort */ }
+            catch {
+                /* best effort */
+            }
         }
         this._clients.delete(name);
         for (const key of [...this._toolMap.keys()]) {
@@ -491,7 +600,9 @@ class McpManager {
             if ((0, index_1.pluginMcpServers)(workDir)[name])
                 return 'plugin';
         }
-        catch { /* plugin scan is best-effort */ }
+        catch {
+            /* plugin scan is best-effort */
+        }
         return 'none';
     }
     /** Remove a server from whichever scope(s) define it. Returns true if anything was removed. */

package/dist/mcp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAI3C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IACF,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,wDAAwD;IACxD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAaD;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,EAAE,CA+BlD;AASD;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAuHhE"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAGjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAI3C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IACF,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,wDAAwD;IACxD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAaD;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,EAAE,CA8ClD;AAcD;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAyIhE"}

package/dist/mcp/server.js

@@ -15,6 +15,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.readOnlyMcpTools = readOnlyMcpTools;
 exports.serveMcp = serveMcp;
 const executor_1 = require("../tools/executor");
+const client_1 = require("./client");
 // ─── The toolset ──────────────────────────────────────────────────────────────
 /** Wrap one executor tool. The executor is the single source of behaviour — same caps, same
  *  error messages, same path resolution as the CLI's own turns. */
@@ -31,32 +32,52 @@ const fromExecutor = (name, description, inputSchema) => ({
  */
 function readOnlyMcpTools() {
     return [
-        fromExecutor('read_file', 'Read a text file. Returns numbered lines so later edits can cite them. Binary files are refused.', { type: 'object', properties: {
+        fromExecutor('read_file', 'Read a text file. Returns numbered lines so later edits can cite them. Binary files are refused.', {
+            type: 'object',
+            properties: {
                 path: { type: 'string', description: 'File path, absolute or relative to the workspace root' },
                 offset: { type: 'number', description: '0-based line to start from (default 0)' },
                 limit: { type: 'number', description: 'How many lines to return' },
-            }, required: ['path'] }),
-        fromExecutor('list_directory', 'List the entries of a directory, each marked as file or directory.', { type: 'object', properties: {
+            },
+            required: ['path'],
+        }),
+        fromExecutor('list_directory', 'List the entries of a directory, each marked as file or directory.', {
+            type: 'object',
+            properties: {
                 path: { type: 'string', description: 'Directory path (default: the workspace root)' },
-            } }),
-        fromExecutor('glob', 'Find files by glob pattern, e.g. "**/*.ts" or "src/**/*.test.js".', { type: 'object', properties: {
+            },
+        }),
+        fromExecutor('glob', 'Find files by glob pattern, e.g. "**/*.ts" or "src/**/*.test.js".', {
+            type: 'object',
+            properties: {
                 pattern: { type: 'string', description: 'Glob pattern' },
                 path: { type: 'string', description: 'Directory to search from (default: the workspace root)' },
-            }, required: ['pattern'] }),
-        fromExecutor('search_files', 'Search file contents with a regular expression. Returns matching file paths by default; ask for context lines to get the matches themselves.', { type: 'object', properties: {
+            },
+            required: ['pattern'],
+        }),
+        fromExecutor('search_files', 'Search file contents with a regular expression. Returns matching file paths by default; ask for context lines to get the matches themselves.', {
+            type: 'object',
+            properties: {
                 pattern: { type: 'string', description: 'Regular expression' },
                 path: { type: 'string', description: 'Directory to search (default: the workspace root)' },
                 type: { type: 'string', description: '"files" (paths only) or "content" (matching lines)' },
                 include: { type: 'string', description: 'Only files matching this glob, e.g. "*.ts"' },
                 case_insensitive: { type: 'boolean', description: 'Case-insensitive match' },
                 context_lines: { type: 'number', description: 'Lines of context around each match (implies type "content")' },
-            }, required: ['pattern'] }),
+            },
+            required: ['pattern'],
+        }),
     ];
 }
 // ─── Protocol ─────────────────────────────────────────────────────────────────
-/** Versions whose framing we actually implement (they are all the same for our surface). */
-const SUPPORTED_PROTOCOLS = ['2024-11-05', '2025-03-26', '2025-06-18'];
-const DEFAULT_PROTOCOL = '2024-11-05';
+// Shared with the client half of the module so the two cannot drift. All listed
+// revisions have the same framing for our surface (initialize/tools/resources);
+// when a client asks for a revision we do not implement, the answer is the LATEST
+// we do — that is what the MCP spec requires ("another protocol version it
+// supports, preferably the latest"), and it keeps modern clients on a modern
+// negotiation instead of downgrading them to the 2024 framing by default.
+const SUPPORTED_PROTOCOLS = client_1.MCP_PROTOCOL_VERSIONS;
+const DEFAULT_PROTOCOL = client_1.MCP_PROTOCOL_VERSION;
 const SERVER_NAME = 'nexrall';
 /**
  * Serve MCP on stdio until the client closes the pipe. Resolves (never rejects) at EOF — the
@@ -69,7 +90,9 @@ async function serveMcp(opts) {
     const tools = opts.tools ?? readOnlyMcpTools();
     const version = opts.version ?? '0.0.0';
     const byName = new Map(tools.map((t) => [t.name, t]));
-    const send = (msg) => { output.write(JSON.stringify(msg) + '\n'); };
+    const send = (msg) => {
+        output.write(JSON.stringify(msg) + '\n');
+    };
     const reply = (id, result) => send({ jsonrpc: '2.0', id, result });
     const replyError = (id, code, message) => send({ jsonrpc: '2.0', id, error: { code, message } });
     async function handle(message) {
@@ -110,7 +133,15 @@ async function serveMcp(opts) {
                 if (!tool) {
                     // A RESULT, not a protocol error: the calling model should read "not offered" as tool
                     // output and pick another route, not see the whole call fail.
-                    reply(id, { content: [{ type: 'text', text: `Tool "${name}" is not offered by this server (read-only). Available: ${[...byName.keys()].join(', ')}.` }], isError: true });
+                    reply(id, {
+                        content: [
+                            {
+                                type: 'text',
+                                text: `Tool "${name}" is not offered by this server (read-only). Available: ${[...byName.keys()].join(', ')}.`,
+                            },
+                        ],
+                        isError: true,
+                    });
                     return;
                 }
                 try {
@@ -122,7 +153,10 @@ async function serveMcp(opts) {
                 }
                 catch (err) {
                     // A throwing tool is the tool's problem, not the session's — answer and keep serving.
-                    reply(id, { content: [{ type: 'text', text: err instanceof Error ? err.message : String(err) }], isError: true });
+                    reply(id, {
+                        content: [{ type: 'text', text: err instanceof Error ? err.message : String(err) }],
+                        isError: true,
+                    });
                 }
                 return;
             }

package/dist/mcp/sseClient.d.ts

@@ -1,4 +1,4 @@
-import type { McpServerConfig, McpToolDefinition, McpTransport, McpResource, McpPrompt, McpElicitationHandler } from './client';
+import type { McpServerConfig, McpToolDefinition, McpTransport, McpResource, McpPrompt, McpElicitationHandler, McpNotificationHandler } from './client';
 export declare class McpSseClient implements McpTransport {
     private readonly config;
     private _nextId;
@@ -10,11 +10,19 @@ export declare class McpSseClient implements McpTransport {
     private readonly _pending;
     private _endpointWaiter;
     private _elicitationHandler;
+    private _notificationHandler;
+    private _protocolVersion;
+    private _instructions;
     readonly name: string;
     constructor(name: string, config: McpServerConfig);
     get tools(): McpToolDefinition[];
+    get protocolVersion(): string | undefined;
+    get instructions(): string | undefined;
     setElicitationHandler(handler: McpElicitationHandler | null): void;
+    setNotificationHandler(handler: McpNotificationHandler | null): void;
     connect(): Promise<void>;
+    /** Re-fetch `tools/list` (see McpClient.refreshTools for the failure rule). */
+    refreshTools(): Promise<void>;
     listResources(): Promise<McpResource[]>;
     readResource(uri: string): Promise<string>;
     listPrompts(): Promise<McpPrompt[]>;

package/dist/mcp/sseClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sseClient.d.ts","sourceRoot":"","sources":["../../src/mcp/sseClient.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AA6BhI,qBAAa,YAAa,YAAW,YAAY;IAYrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAXjD,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,MAAM,CAAgC;IAC9C,OAAO,CAAC,OAAO,CAAM;IACrB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0H;IACnJ,OAAO,CAAC,eAAe,CAAoE;IAC3F,OAAO,CAAC,mBAAmB,CAAsC;IACjE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAmB,MAAM,EAAE,eAAe;IAIlE,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAE/B;IAED,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,GAAG,IAAI;IAE5D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAaxB,aAAa,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAOvC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI1C,WAAW,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAOnC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAMtE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAc5E,UAAU,IAAI,IAAI;IAalB,4EAA4E;YAC9D,WAAW;IAoCzB,OAAO,CAAC,eAAe;IAYvB,oFAAoF;IACpF,OAAO,CAAC,KAAK;IAWb,OAAO,CAAC,mBAAmB;IAQ3B,OAAO,CAAC,cAAc;IAqDtB,OAAO,CAAC,IAAI;YAgBE,OAAO;IAIrB,6EAA6E;YAC/D,YAAY;CAwB3B"}
+{"version":3,"file":"sseClient.d.ts","sourceRoot":"","sources":["../../src/mcp/sseClient.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,SAAS,EACT,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,UAAU,CAAC;AA6BlB,qBAAa,YAAa,YAAW,YAAY;IAoB7C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAnBzB,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,MAAM,CAAgC;IAC9C,OAAO,CAAC,OAAO,CAAM;IACrB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAGrB;IACJ,OAAO,CAAC,eAAe,CAAoE;IAC3F,OAAO,CAAC,mBAAmB,CAAsC;IACjE,OAAO,CAAC,oBAAoB,CAAuC;IACnE,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,aAAa,CAAqB;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAGpB,IAAI,EAAE,MAAM,EACK,MAAM,EAAE,eAAe;IAK1C,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAE/B;IAED,IAAI,eAAe,IAAI,MAAM,GAAG,SAAS,CAExC;IAED,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IAED,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,GAAG,IAAI;IAIlE,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,GAAG,IAAI;IAI9D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB9B,+EAA+E;IACzE,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAK7B,aAAa,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IASvC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI1C,WAAW,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IASnC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAMtE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAc5E,UAAU,IAAI,IAAI;IAalB,4EAA4E;YAC9D,WAAW;IA4CzB,OAAO,CAAC,eAAe;IAYvB,oFAAoF;IACpF,OAAO,CAAC,KAAK;IAWb,OAAO,CAAC,mBAAmB;IAQ3B,OAAO,CAAC,cAAc;IA0DtB,OAAO,CAAC,IAAI;YAoBE,OAAO;IAIrB,6EAA6E;YAC/D,YAAY;CAwB3B"}

package/dist/mcp/sseClient.js

@@ -21,22 +21,42 @@ class McpSseClient {
         this._pending = new Map();
         this._endpointWaiter = null;
         this._elicitationHandler = null;
+        this._notificationHandler = null;
         this.name = name;
     }
     get tools() {
         return this._tools;
     }
-    setElicitationHandler(handler) { this._elicitationHandler = handler; }
+    get protocolVersion() {
+        return this._protocolVersion;
+    }
+    get instructions() {
+        return this._instructions;
+    }
+    setElicitationHandler(handler) {
+        this._elicitationHandler = handler;
+    }
+    setNotificationHandler(handler) {
+        this._notificationHandler = handler;
+    }
     async connect() {
         if (!this.config.url)
             throw new Error(`MCP server "${this.name}" has no url (sse transport requires one).`);
         await this._openStream();
-        await this._rpc('initialize', {
-            protocolVersion: '2024-11-05',
+        const init = (await this._rpc('initialize', {
+            protocolVersion: client_1.MCP_PROTOCOL_VERSION,
             capabilities: (0, client_1.elicitationCapability)(this.config.bareElicitationCapability),
             clientInfo: { name: 'nexrall-code', version: '1.0' },
-        });
+        }));
+        this._protocolVersion =
+            typeof init?.protocolVersion === 'string' && init.protocolVersion ? init.protocolVersion : undefined;
+        this._instructions =
+            typeof init?.instructions === 'string' && init.instructions.trim() ? init.instructions : undefined;
         await this._notify('notifications/initialized');
+        await this.refreshTools();
+    }
+    /** Re-fetch `tools/list` (see McpClient.refreshTools for the failure rule). */
+    async refreshTools() {
         const res = (await this._rpc('tools/list', {}));
         this._tools = res?.tools ?? [];
     }
@@ -111,8 +131,10 @@ class McpSseClient {
         const stream = resp.body;
         stream.on('data', (chunk) => this._feed(chunk.toString('utf-8')));
         stream.on('end', () => this._onStreamClosed(new Error('MCP SSE stream ended')));
-        stream.on('error', (err) => { if (!this._closed)
-            this._onStreamClosed(err); });
+        stream.on('error', (err) => {
+            if (!this._closed)
+                this._onStreamClosed(err);
+        });
         // Wait for the `endpoint` event so we know where to POST messages.
         await new Promise((resolve, reject) => {
             const timer = setTimeout(() => {
@@ -120,8 +142,14 @@ class McpSseClient {
                 reject(new Error('Timed out waiting for SSE endpoint event'));
             }, ENDPOINT_TIMEOUT_MS);
             this._endpointWaiter = {
-                resolve: () => { clearTimeout(timer); resolve(); },
-                reject: (e) => { clearTimeout(timer); reject(e); },
+                resolve: () => {
+                    clearTimeout(timer);
+                    resolve();
+                },
+                reject: (e) => {
+                    clearTimeout(timer);
+                    reject(e);
+                },
             };
         });
     }
@@ -199,7 +227,9 @@ class McpSseClient {
             void (async () => {
                 const reply = await (0, client_1.serverRequestReply)(this.name, this._elicitationHandler, method, params);
                 await this._postMessage({ jsonrpc: '2.0', id: reqId, ...reply });
-            })().catch(() => { });
+            })().catch(() => {
+                /* server times the request out itself */
+            });
             return;
         }
         if (typeof msg.id === 'number' && this._pending.has(msg.id)) {
@@ -212,7 +242,10 @@ class McpSseClient {
                 resolve(msg.result ?? null);
             return;
         }
-        // Server-initiated notifications (no matching id) are ignored.
+        // Server-initiated notification (no id): list_changed for tools/prompts/resources.
+        if (typeof msg.method === 'string' && msg.id == null) {
+            this._notificationHandler?.(msg.method, msg.params);
+        }
     }
     _rpc(method, params) {
         const id = this._nextId++;

package/dist/mcp/stats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../src/mcp/stats.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,OAAO,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAK;IAErB,6DAA6D;IAC7D,KAAK,IAAI,IAAI;IAIb,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,IAAI;IAUpD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,IAAI;IAWrE,6EAA6E;IAC7E,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAIvC,6FAA6F;IAC7F,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAO,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC;IAYjF,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAO,GAAG,YAAY;IAS5D,iFAAiF;IACjF,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;IAK1B,OAAO,CAAC,MAAM;CAKf;AAED,6DAA6D;AAC7D,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAI3C;AAED,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,GAAG,UAAO,GAAG,MAAM,CAO5E"}
+{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../src/mcp/stats.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,OAAO,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAK;IAErB,6DAA6D;IAC7D,KAAK,IAAI,IAAI;IAIb,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,IAAI;IAUpD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,IAAI;IAWrE,6EAA6E;IAC7E,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAIvC,6FAA6F;IAC7F,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAO,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC;IAYjF,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAO,GAAG,YAAY;IAS5D,iFAAiF;IACjF,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;IAQ1B,OAAO,CAAC,MAAM;CAQf;AAED,6DAA6D;AAC7D,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAI3C;AAED,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,GAAG,UAAO,GAAG,MAAM,CAS5E"}

package/dist/permissions/bashClassify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bashClassify.d.ts","sourceRoot":"","sources":["../../src/permissions/bashClassify.ts"],"names":[],"mappings":"AAqCA;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAkB1D"}
+{"version":3,"file":"bashClassify.d.ts","sourceRoot":"","sources":["../../src/permissions/bashClassify.ts"],"names":[],"mappings":"AA2DA;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAkB1D"}

package/dist/permissions/bashClassify.js

@@ -32,9 +32,31 @@ exports.bashNeedsRepoLock = bashNeedsRepoLock;
  * a lockfile, or mutate a shared build/dependency directory.
  */
 const MUTATING_BASH_VERBS = new Set([
-    'git', 'npm', 'pnpm', 'yarn', 'bun', 'cargo', 'go', 'pip', 'pip3', 'poetry', 'uv',
-    'bundle', 'composer', 'gradle', 'mvn', 'make', 'terraform', 'helm', 'docker',
-    'vsce', 'tsc', 'pytest', 'dotnet', 'swift', 'gem',
+    'git',
+    'npm',
+    'pnpm',
+    'yarn',
+    'bun',
+    'cargo',
+    'go',
+    'pip',
+    'pip3',
+    'poetry',
+    'uv',
+    'bundle',
+    'composer',
+    'gradle',
+    'mvn',
+    'make',
+    'terraform',
+    'helm',
+    'docker',
+    'vsce',
+    'tsc',
+    'pytest',
+    'dotnet',
+    'swift',
+    'gem',
 ]);
 /**
  * Whether a bash command should take the repo-state lock.

package/dist/permissions/destructive.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"destructive.d.ts","sourceRoot":"","sources":["../../src/permissions/destructive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,MAAM,WAAW,gBAAgB;IAC/B,0FAA0F;IAC1F,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAiQD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAGnF;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,GAAG,IAAI,CAQvG"}
+{"version":3,"file":"destructive.d.ts","sourceRoot":"","sources":["../../src/permissions/destructive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,MAAM,WAAW,gBAAgB;IAC/B,0FAA0F;IAC1F,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAsRD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAGnF;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,GAAG,IAAI,CASvG"}

package/dist/permissions/destructive.js

@@ -60,7 +60,11 @@ const RAW_RULES = [
     {
         category: 'database',
         reason: 'DELETE without a WHERE clause (deletes every row)',
-        re: new RegExp(CMD_POS + DB_CLIENT + String.raw `\b[\s\S]*?\bdelete\s+from\s+[\w.` + '`' + String.raw `"]+\s*(?:;|"|'|$)(?![\s\S]*\bwhere\b)`, 'i'),
+        re: new RegExp(CMD_POS +
+            DB_CLIENT +
+            String.raw `\b[\s\S]*?\bdelete\s+from\s+[\w.` +
+            '`' +
+            String.raw `"]+\s*(?:;|"|'|$)(?![\s\S]*\bwhere\b)`, 'i'),
     },
     {
         category: 'database',
@@ -94,7 +98,8 @@ const STRIPPED_RULES = [
     {
         category: 'database',
         reason: 'reverses or resets database migrations (may drop columns/tables)',
-        re: new RegExp(CMD_POS + String.raw `(?:rails\s+db:(?:drop|reset)|rake\s+db:(?:drop|reset)|(?:npx\s+)?prisma\s+migrate\s+reset|(?:npx\s+)?sequelize(?:-cli)?\s+db:drop|python\s+manage\.py\s+flush|knex\s+migrate:rollback\s+--all|alembic\s+downgrade\s+base)`, 'i'),
+        re: new RegExp(CMD_POS +
+            String.raw `(?:rails\s+db:(?:drop|reset)|rake\s+db:(?:drop|reset)|(?:npx\s+)?prisma\s+migrate\s+reset|(?:npx\s+)?sequelize(?:-cli)?\s+db:drop|python\s+manage\.py\s+flush|knex\s+migrate:rollback\s+--all|alembic\s+downgrade\s+base)`, 'i'),
     },
     // ── Git history / remotes ───────────────────────────────────────────────────
     {

package/dist/permissions/destructiveTokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"destructiveTokens.d.ts","sourceRoot":"","sources":["../../src/permissions/destructiveTokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAID,uEAAuE;AACvE,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,CA2BhD;AAgQD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,EAC/C,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,GAC7C,UAAU,GAAG,IAAI,CA8DnB"}
+{"version":3,"file":"destructiveTokens.d.ts","sourceRoot":"","sources":["../../src/permissions/destructiveTokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAID,uEAAuE;AACvE,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,CA6DhD;AAsVD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,EAC/C,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,GAC7C,UAAU,GAAG,IAAI,CA+HnB"}