@octopusdeploy/mcp-server 1.0.1 → 2.1.0

package/dist/index.js

@@ -2,16 +2,17 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { registerTools } from "./tools/index.js";
+import { registerResources } from "./resources/index.js";
 import { Command } from "commander";
 import dotenv from "dotenv";
 import { createToolsetConfig } from "./utils/parseConfig.js";
-import { DEFAULT_TOOLSETS, printToolVersionAnalysis } from "./types/toolConfig.js";
+import { DEFAULT_TOOLSETS, printToolVersionAnalysis, } from "./types/toolConfig.js";
 import { getClientConfigurationFromEnvironment } from "./helpers/getClientConfigurationFromEnvironment.js";
 import { setClientInfo } from "./utils/clientInfo.js";
 import { logger } from "./utils/logger.js";
 import packageJson from "../package.json" with { type: "json" };
 import { fileURLToPath } from "url";
-import { dirname, join, isAbsolute } from "path";
+import { dirname, join } from "path";
 export const SEMVER_VERSION = packageJson.version;
 // Set entry directory for logger (ESM equivalent of __dirname)
 const __filename = fileURLToPath(import.meta.url);
@@ -24,28 +25,81 @@ program
     .description("Octopus Deploy MCP Server")
     .version(SEMVER_VERSION)
     .option("-s, --server-url <url>", "Octopus server URL")
-    .option("-k, --api-key <key>", "Octopus API key")
     .option("--toolsets <toolsets>", `Comma-separated list of toolsets to enable, or "all" (default: all). Available toolsets: ${DEFAULT_TOOLSETS.join(", ")}`)
-    .option("--read-only", "Enable read-only mode (default: enabled)", true)
+    .option("--read-only", "Enable read-only mode: disable all write tools and block POST/PUT/PATCH/DELETE through the execute tool (default: write tools enabled)")
+    .option("--allow-deletes", "Permit DELETE-method requests through the execute tool. Has no effect when --read-only is set. Default false.")
     .option("--log-level <level>", "Minimum log level (info, error)", "info")
-    .option("--log-file <path>", 'Log file path or filename. If not specified, logs are written to console only.')
+    .option("--log-file <path>", "Log file path or filename. If not specified, logs are written to console only.")
     .option("-q, --quiet", "Disable file logging, only log errors to console", false)
     .option("--list-tools-by-version", "List all registered tools by their supported Octopus Server version and exit")
     .parse();
 const options = program.opts();
+// Resolve the Octopus server URL up front so the MCP `instructions` string
+// can advertise which instance the client is connected to. Mirrors the
+// precedence used by getClientConfigurationFromEnvironment (CLI flag wins
+// over OCTOPUS_SERVER_URL env var).
+if (options.serverUrl) {
+    process.env.CLI_SERVER_URL = options.serverUrl;
+}
+const configuredServerUrl = process.env.CLI_SERVER_URL ||
+    process.env.OCTOPUS_SERVER_URL ||
+    "(not configured — set OCTOPUS_SERVER_URL or pass --server-url)";
+const SERVER_INSTRUCTIONS = `
+The official Octopus Deploy MCP server, currently connected to: ${configuredServerUrl}
+
+Tools are grouped into toolsets (core, releases, deployments, tasks, tenants, kubernetes, machines, certificates, accounts, interruptions, featureToggles) and you can filter them via --toolsets. Writes are on by default; pass --read-only to gate them off.
+
+Resource URIs and how to dereference them:
+- Many tools return slim summaries plus an 'octopus://...' URI in fields like 'resourceUri' or 'taskResourceUri' instead of inlining heavy payloads (release notes, packaged versions, structured task activity trees, etc.). To fetch the full body, dereference the URI.
+- Resource-aware clients (Claude Code, MCP Inspector): call the standard 'resources/read' primitive with the URI.
+- Clients without native resources/read (Claude.ai web, several IDE integrations): call the 'read_resource' tool with { uri }. It returns the same body as resources/read. Always available, regardless of toolset filter.
+- The 'read_resource' tool is the universal bridge from any URI returned by any tool — if you see an 'octopus://' string in a response and don't know what to do with it, call read_resource with it.
+
+Currently exposed resource families:
+- releases: 'octopus://spaces/{spaceName}/releases/{releaseId}'
+- tasks: 'octopus://spaces/{spaceName}/tasks/{taskId}' (metadata) and '/details' (structured ActivityLogs tree)
+- interruptions: 'octopus://spaces/{spaceName}/interruptions/{interruptionId}' (full Form definition with control types, Markdown instructions, button options like Abort/Proceed, and any submitted Form.Values). The find_interruptions tool returns slim summaries that point at this URI; dereference it to drill into a specific interruption.
+- feature toggles: 'octopus://spaces/{spaceName}/projects/{projectId}/featuretoggles/{slug}' (full toggle body — per-environment configuration including tenant lists, segments, minimum versions). The find_feature_toggles slim summaries omit those fields and point at this URI.
+- rollout groups: 'octopus://spaces/{spaceName}/projects/{projectId}/rolloutgroups/{rolloutGroupId}' (read-only — this server doesn't expose rollout group writes; use the Octopus UI for those).
+- catalog: 'octopus://api/llms.txt' is the markdown catalog of every Octopus REST endpoint (~300+ KB). 'octopus://api/capabilities' is the runtime introspection blob (server version, enabled toolsets, available tools, feature flags).
+
+There is intentionally NO 'octopus://.../tasks/{id}/log' resource. Activity logs can be multi-megabyte; an addressable resource would tempt you to fetch the entire body when you almost always want only the matching lines. To search a task log, call the 'grep_task_log' tool — its parameters mirror GNU grep (pattern, caseInsensitive, invertMatch, fixedString, beforeContext, afterContext, maxCount) and it returns matching lines with totalMatches count and optional context windows. For step hierarchy / categories / timing, fetch the /details resource instead.
+
+The same pattern applies to the API catalog: do NOT read 'octopus://api/llms.txt' directly because the body is large. Use the 'grep_llms_txt' tool — same GNU-grep parameter shape — to find the endpoints, methods, and request/response shapes you need.
+
+The 'execute' tool reaches Octopus REST endpoints not covered by curated tools. **Method gating is hard-coded server-side**, three tiers:
+- GET                    → read tier:   always allowed (subject to toolset allowlist + sensitive denylist).
+- POST / PUT / PATCH     → write tier:  blocked when --read-only is set; requires user confirmation via elicitation otherwise.
+- DELETE                 → delete tier: requires --allow-deletes (and is blocked when --read-only is set) AND a stronger confirmation.
+
+The HTTP method enum IS the read/write/delete classifier — the runtime classifies based on the actual method, never on a flag the agent sets. Use grep_llms_txt to discover the right path + method before calling execute.
+
+More resource families will be added over time.
+`.trim();
 const server = new McpServer({
     name: "Octopus Deploy",
     description: "Official Octopus Deploy MCP server.",
     version: SEMVER_VERSION,
+}, {
+    instructions: SERVER_INSTRUCTIONS,
 });
-const toolsetConfig = createToolsetConfig(options.toolsets, options.readOnly);
+const toolsetConfig = createToolsetConfig(options.toolsets, options.readOnly, options.allowDeletes);
+// `--allow-deletes` only takes effect when writes are enabled. Surface this
+// on stderr at startup so an operator who set both --read-only and
+// --allow-deletes doesn't silently end up with DELETE requests blocked.
+if (toolsetConfig.allowDeletes && toolsetConfig.readOnlyMode) {
+    process.stderr.write("WARNING: --allow-deletes was provided, but --read-only is also set. " +
+        "DELETE requests through the execute tool remain blocked. Remove " +
+        "--read-only to enable DELETE.\n");
+}
 registerTools(server, toolsetConfig);
+registerResources(server, toolsetConfig);
 if (options.listToolsByVersion) {
     printToolVersionAnalysis();
     process.exit(0);
 }
 if (options.logFile) {
-    if (dirname(options.logFile) === '.') {
+    if (dirname(options.logFile) === ".") {
         logger.setLogFilePath(join(__dirname, options.logFile));
     }
     else {
@@ -54,14 +108,7 @@ if (options.logFile) {
 }
 logger.setLogLevel(logger.parseLogLevel(options.logLevel));
 logger.setQuietMode(options.quiet);
-if (options.serverUrl) {
-    process.env.CLI_SERVER_URL = options.serverUrl;
-}
-if (options.apiKey) {
-    process.env.CLI_API_KEY = options.apiKey;
-}
-// Test configuration
-getClientConfigurationFromEnvironment();
+// CLI_SERVER_URL is set earlier so the MCP instructions string can reference it.
 // Set up initialization callback to capture client info
 server.server.oninitialized = () => {
     const clientInfo = server.server.getClientVersion();
@@ -76,6 +123,8 @@ server.server.oninitialized = () => {
 logger.info(`Starting Octopus Deploy MCP server (version: ${SEMVER_VERSION})`);
 // Start server
 async function runServer() {
+    // Test configuration
+    getClientConfigurationFromEnvironment();
     const transport = new StdioServerTransport();
     await server.connect(transport);
 }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,qCAAqC,EAAE,MAAM,oDAAoD,CAAC;AAC3G,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,WAAW,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAEjD,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC;AAElD,+DAA+D;AAC/D,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE/B,+BAA+B;AAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,oBAAoB,CAAC;KAC1B,WAAW,CAAC,2BAA2B,CAAC;KACxC,OAAO,CAAC,cAAc,CAAC;KACvB,MAAM,CAAC,wBAAwB,EAAE,oBAAoB,CAAC;KACtD,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;KAChD,MAAM,CAAC,uBAAuB,EAAE,4FAA4F,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;KAC1J,MAAM,CAAC,aAAa,EAAE,0CAA0C,EAAE,IAAI,CAAC;KACvE,MAAM,CAAC,qBAAqB,EAAE,iCAAiC,EAAE,MAAM,CAAC;KACxE,MAAM,CAAC,mBAAmB,EAAE,gFAAgF,CAAC;KAC7G,MAAM,CAAC,aAAa,EAAE,kDAAkD,EAAE,KAAK,CAAC;KAChF,MAAM,CAAC,yBAAyB,EAAE,8EAA8E,CAAC;KACjH,KAAK,EAAE,CAAC;AAEX,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;AAE/B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,qCAAqC;IAClD,OAAO,EAAE,cAAc;CACxB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC9E,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAErC,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAC/B,wBAAwB,EAAE,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACpB,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3D,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEnC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;AACjD,CAAC;AACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED,qBAAqB;AACrB,qCAAqC,EAAE,CAAC;AAExC,wDAAwD;AACxD,MAAM,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,EAAE;IACjC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;IACpD,IAAI,UAAU,EAAE,CAAC;QACf,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,uBAAuB,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,IAAI,CAAC,gDAAgD,cAAc,GAAG,CAAC,CAAC;AAE/E,eAAe;AACf,KAAK,UAAU,SAAS;IACtB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC1B,MAAM,CAAC,KAAK,CAAC,+BAA+B,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qCAAqC,EAAE,MAAM,oDAAoD,CAAC;AAC3G,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,WAAW,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAErC,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC;AAElD,+DAA+D;AAC/D,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE/B,+BAA+B;AAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,oBAAoB,CAAC;KAC1B,WAAW,CAAC,2BAA2B,CAAC;KACxC,OAAO,CAAC,cAAc,CAAC;KACvB,MAAM,CAAC,wBAAwB,EAAE,oBAAoB,CAAC;KACtD,MAAM,CACL,uBAAuB,EACvB,4FAA4F,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1H;KACA,MAAM,CACL,aAAa,EACb,wIAAwI,CACzI;KACA,MAAM,CACL,iBAAiB,EACjB,+GAA+G,CAChH;KACA,MAAM,CAAC,qBAAqB,EAAE,iCAAiC,EAAE,MAAM,CAAC;KACxE,MAAM,CACL,mBAAmB,EACnB,gFAAgF,CACjF;KACA,MAAM,CACL,aAAa,EACb,kDAAkD,EAClD,KAAK,CACN;KACA,MAAM,CACL,yBAAyB,EACzB,8EAA8E,CAC/E;KACA,KAAK,EAAE,CAAC;AAEX,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;AAE/B,2EAA2E;AAC3E,uEAAuE;AACvE,0EAA0E;AAC1E,oCAAoC;AACpC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;AACjD,CAAC;AACD,MAAM,mBAAmB,GACvB,OAAO,CAAC,GAAG,CAAC,cAAc;IAC1B,OAAO,CAAC,GAAG,CAAC,kBAAkB;IAC9B,gEAAgE,CAAC;AAEnE,MAAM,mBAAmB,GAAG;kEACsC,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BpF,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;IACE,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,qCAAqC;IAClD,OAAO,EAAE,cAAc;CACxB,EACD;IACE,YAAY,EAAE,mBAAmB;CAClC,CACF,CAAC;AAEF,MAAM,aAAa,GAAG,mBAAmB,CACvC,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,YAAY,CACrB,CAAC;AAEF,4EAA4E;AAC5E,mEAAmE;AACnE,wEAAwE;AACxE,IAAI,aAAa,CAAC,YAAY,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sEAAsE;QACpE,kEAAkE;QAClE,iCAAiC,CACpC,CAAC;AACJ,CAAC;AAED,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AACrC,iBAAiB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAEzC,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAC/B,wBAAwB,EAAE,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACpB,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3D,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEnC,iFAAiF;AAEjF,wDAAwD;AACxD,MAAM,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,EAAE;IACjC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;IACpD,IAAI,UAAU,EAAE,CAAC;QACf,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CACT,uBAAuB,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAChE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,IAAI,CAAC,gDAAgD,cAAc,GAAG,CAAC,CAAC;AAE/E,eAAe;AACf,KAAK,UAAU,SAAS;IACtB,qBAAqB;IACrB,qCAAqC,EAAE,CAAC;IAExC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC1B,MAAM,CAAC,KAAK,CAAC,+BAA+B,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/resources/catalog/capabilities.d.ts

@@ -0,0 +1,36 @@
+import { type Toolset } from "../../types/toolConfig.js";
+import { type MethodTier } from "../../helpers/methodTier.js";
+interface CapabilityToolEntry {
+    name: string;
+    toolset: Toolset;
+    readOnly: boolean;
+    minimumOctopusVersion?: string;
+    /**
+     * True for tools whose actual read/write/delete behaviour depends on
+     * arguments rather than a static tool-level flag. Currently set only on
+     * `execute`, where the HTTP method is the runtime classifier.
+     */
+    methodGated?: boolean;
+    /**
+     * Effective method tiers reachable through this tool in the *current*
+     * session. For `execute` this reflects --read-only and --allow-deletes;
+     * for static tools it is undefined (the `readOnly` flag is sufficient).
+     */
+    tiersAvailable?: MethodTier[];
+}
+interface Capabilities {
+    server: {
+        version: string;
+        installationId: string;
+    };
+    session: {
+        enabledToolsets: Toolset[];
+        readOnlyMode: boolean;
+        allowDeletes: boolean;
+    };
+    tools: CapabilityToolEntry[];
+    featureFlags?: unknown;
+}
+export declare function buildCapabilities(): Promise<Capabilities>;
+export {};
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/resources/catalog/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../../src/resources/catalog/capabilities.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,OAAO,EACb,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,cAAc,CAAC,EAAE,UAAU,EAAE,CAAC;CAC/B;AAED,UAAU,YAAY;IACpB,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,OAAO,EAAE;QACP,eAAe,EAAE,OAAO,EAAE,CAAC;QAC3B,YAAY,EAAE,OAAO,CAAC;QACtB,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;IACF,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAUD,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,YAAY,CAAC,CAgE/D"}

package/dist/resources/catalog/capabilities.js

@@ -0,0 +1,90 @@
+import { Client } from "@octopusdeploy/api-client";
+import { registerResourceDescriptor } from "../../types/resourceConfig.js";
+import { getClientConfigurationFromEnvironment } from "../../helpers/getClientConfigurationFromEnvironment.js";
+import { TOOL_REGISTRY, DEFAULT_TOOLSETS, } from "../../types/toolConfig.js";
+import { getActiveToolsetConfig } from "../../helpers/activeToolsetConfig.js";
+import {} from "../../helpers/methodTier.js";
+function resolveEnabledToolsets() {
+    const config = getActiveToolsetConfig();
+    if (config.enabledToolsets === "all" || config.enabledToolsets == null) {
+        return DEFAULT_TOOLSETS;
+    }
+    return config.enabledToolsets;
+}
+export async function buildCapabilities() {
+    const client = await Client.create(getClientConfigurationFromEnvironment());
+    const serverInfo = await client.getServerInformation();
+    const activeConfig = getActiveToolsetConfig();
+    const enabledToolsets = resolveEnabledToolsets();
+    const readOnlyMode = activeConfig.readOnlyMode ?? false;
+    const allowDeletes = activeConfig.allowDeletes ?? false;
+    const enabledSet = new Set(enabledToolsets);
+    enabledSet.add("core");
+    const tools = [];
+    for (const [name, registration] of TOOL_REGISTRY) {
+        if (!enabledSet.has(registration.config.toolset))
+            continue;
+        if (readOnlyMode && !registration.config.readOnly)
+            continue;
+        const entry = {
+            name,
+            toolset: registration.config.toolset,
+            readOnly: registration.config.readOnly,
+            minimumOctopusVersion: registration.minimumOctopusVersion,
+        };
+        // The execute tool registers as readOnly:true (so it survives the
+        // registration filter in read-only mode for its GET branch) but its
+        // actual behaviour is method-gated. Surface that explicitly so callers
+        // don't conclude execute is fully read-only.
+        if (name === "execute") {
+            entry.methodGated = true;
+            const tiers = ["read"];
+            if (!readOnlyMode)
+                tiers.push("write");
+            if (!readOnlyMode && allowDeletes)
+                tiers.push("delete");
+            entry.tiersAvailable = tiers;
+        }
+        tools.push(entry);
+    }
+    tools.sort((a, b) => a.name.localeCompare(b.name));
+    let featureFlags;
+    try {
+        featureFlags = await client.get("~/api/serverstatus/extensions");
+    }
+    catch {
+        // The serverstatus/extensions endpoint isn't universally available across
+        // older Octopus versions. Omit feature flags rather than failing the whole
+        // capabilities read — server version is the high-value field.
+        featureFlags = undefined;
+    }
+    const capabilities = {
+        server: {
+            version: serverInfo.version,
+            installationId: serverInfo.installationId,
+        },
+        session: {
+            enabledToolsets: Array.from(enabledSet).sort(),
+            readOnlyMode,
+            allowDeletes,
+        },
+        tools,
+    };
+    if (featureFlags !== undefined) {
+        capabilities.featureFlags = featureFlags;
+    }
+    return capabilities;
+}
+registerResourceDescriptor({
+    name: "catalog-capabilities",
+    uriTemplate: "octopus://api/capabilities",
+    toolset: "core",
+    title: "Octopus MCP capabilities",
+    description: "Server version, enabled toolsets, available tools, and Octopus feature flags for this MCP session. Use this to discover what's reachable before calling other tools.",
+    mimeType: "application/json",
+    read: async () => ({
+        mimeType: "application/json",
+        text: JSON.stringify(await buildCapabilities()),
+    }),
+});
+//# sourceMappingURL=capabilities.js.map

package/dist/resources/catalog/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../../src/resources/catalog/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,qCAAqC,EAAE,MAAM,wDAAwD,CAAC;AAC/G,OAAO,EACL,aAAa,EACb,gBAAgB,GAEjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAmB,MAAM,6BAA6B,CAAC;AAmC9D,SAAS,sBAAsB;IAC7B,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAC;IACxC,IAAI,MAAM,CAAC,eAAe,KAAK,KAAK,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;QACvE,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC,eAAe,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,qCAAqC,EAAE,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;IAEvD,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAC;IAC9C,MAAM,eAAe,GAAG,sBAAsB,EAAE,CAAC;IACjD,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,IAAI,KAAK,CAAC;IACxD,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,IAAI,KAAK,CAAC;IAExD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAU,eAAe,CAAC,CAAC;IACrD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,aAAa,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3D,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ;YAAE,SAAS;QAC5D,MAAM,KAAK,GAAwB;YACjC,IAAI;YACJ,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;YACpC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,QAAQ;YACtC,qBAAqB,EAAE,YAAY,CAAC,qBAAqB;SAC1D,CAAC;QACF,kEAAkE;QAClE,oEAAoE;QACpE,uEAAuE;QACvE,6CAA6C;QAC7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;YACzB,MAAM,KAAK,GAAiB,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,YAAY;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,CAAC,YAAY,IAAI,YAAY;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxD,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEnD,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,MAAM,CAAC,GAAG,CAAU,+BAA+B,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,2EAA2E;QAC3E,8DAA8D;QAC9D,YAAY,GAAG,SAAS,CAAC;IAC3B,CAAC;IAED,MAAM,YAAY,GAAiB;QACjC,MAAM,EAAE;YACN,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,cAAc,EAAE,UAAU,CAAC,cAAc;SAC1C;QACD,OAAO,EAAE;YACP,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAe;YAC3D,YAAY;YACZ,YAAY;SACb;QACD,KAAK;KACN,CAAC;IACF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,YAAY,CAAC,YAAY,GAAG,YAAY,CAAC;IAC3C,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,0BAA0B,CAAC;IACzB,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EAAE,4BAA4B;IACzC,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACT,sKAAsK;IACxK,QAAQ,EAAE,kBAAkB;IAC5B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACjB,QAAQ,EAAE,kBAAkB;QAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,iBAAiB,EAAE,CAAC;KAChD,CAAC;CACH,CAAC,CAAC"}

package/dist/resources/catalog/llmsTxt.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Fetch llms.txt for the configured Octopus server, with a 5-minute TTL cache.
+ * Exposed so grep_llms_txt can share the same cache.
+ */
+export declare function fetchLlmsTxt(): Promise<string>;
+/** Test seam: clear the cache between tests. */
+export declare function clearLlmsTxtCache(): void;
+//# sourceMappingURL=llmsTxt.d.ts.map

package/dist/resources/catalog/llmsTxt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llmsTxt.d.ts","sourceRoot":"","sources":["../../../src/resources/catalog/llmsTxt.ts"],"names":[],"mappings":"AAkBA;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAcpD;AAED,gDAAgD;AAChD,wBAAgB,iBAAiB,IAAI,IAAI,CAExC"}

package/dist/resources/catalog/llmsTxt.js

@@ -0,0 +1,44 @@
+import { Client } from "@octopusdeploy/api-client";
+import { registerResourceDescriptor } from "../../types/resourceConfig.js";
+import { getClientConfigurationFromEnvironment } from "../../helpers/getClientConfigurationFromEnvironment.js";
+const LLMS_TXT_PATH = "~/api/experimental/llms.txt";
+const CACHE_TTL_MS = 5 * 60 * 1000;
+// Module-scoped cache keyed on the configured Octopus server URL. llms.txt
+// only changes when Octopus itself ships a new version; refetching on every
+// resource read or every grep call would burn ~360 KB of bandwidth and add
+// latency to every catalog query.
+const cache = new Map();
+/**
+ * Fetch llms.txt for the configured Octopus server, with a 5-minute TTL cache.
+ * Exposed so grep_llms_txt can share the same cache.
+ */
+export async function fetchLlmsTxt() {
+    const configuration = getClientConfigurationFromEnvironment();
+    const cacheKey = configuration.instanceURL ?? "(unknown)";
+    const now = Date.now();
+    const hit = cache.get(cacheKey);
+    if (hit && now - hit.fetchedAt < CACHE_TTL_MS) {
+        return hit.body;
+    }
+    const client = await Client.create(configuration);
+    const body = await client.getRaw(LLMS_TXT_PATH);
+    cache.set(cacheKey, { body, fetchedAt: now });
+    return body;
+}
+/** Test seam: clear the cache between tests. */
+export function clearLlmsTxtCache() {
+    cache.clear();
+}
+registerResourceDescriptor({
+    name: "catalog-llms-txt",
+    uriTemplate: "octopus://api/llms.txt",
+    toolset: "core",
+    title: "Octopus API catalog (llms.txt)",
+    description: "Markdown catalog of every Octopus REST endpoint, including HTTP method, path, query params, and request/response types. Large (~300+ KB) — prefer the grep_llms_txt tool to search it instead of reading the whole body. Requires Octopus Server 2026.2.3916 or later (the /api/experimental/llms.txt endpoint shipped in that release).",
+    mimeType: "text/markdown",
+    read: async () => ({
+        mimeType: "text/markdown",
+        text: await fetchLlmsTxt(),
+    }),
+});
+//# sourceMappingURL=llmsTxt.js.map

package/dist/resources/catalog/llmsTxt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llmsTxt.js","sourceRoot":"","sources":["../../../src/resources/catalog/llmsTxt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,qCAAqC,EAAE,MAAM,wDAAwD,CAAC;AAE/G,MAAM,aAAa,GAAG,6BAA6B,CAAC;AACpD,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAOnC,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,kCAAkC;AAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,aAAa,GAAG,qCAAqC,EAAE,CAAC;IAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,IAAI,WAAW,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC;QAC9C,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAChD,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,iBAAiB;IAC/B,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,0BAA0B,CAAC;IACzB,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,wBAAwB;IACrC,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,gCAAgC;IACvC,WAAW,EACT,0UAA0U;IAC5U,QAAQ,EAAE,eAAe;IACzB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACjB,QAAQ,EAAE,eAAe;QACzB,IAAI,EAAE,MAAM,YAAY,EAAE;KAC3B,CAAC;CACH,CAAC,CAAC"}

package/dist/resources/dispatch.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Registry-driven dispatch for octopus:// resource URIs.
+ *
+ * Both the Resource Template registrations (src/resources/index.ts) and the
+ * `read_resource` Tool backstop (src/tools/readResource.ts) flow through the
+ * same descriptor registry, so resource-aware clients (which call resources/read)
+ * and resource-less clients (which call the Tool wrapper) hit identical logic.
+ *
+ * Toolset filtering is enforced at dispatch time. Native MCP clients only
+ * see resources whose toolset is enabled because registerResources skips
+ * disabled descriptors at registration. The `read_resource` backstop, by
+ * contrast, is registered under `core` and is always available — so without
+ * filtering here a caller could guess a URI for a descriptor whose toolset
+ * is disabled and still fetch the body. The filter below closes that gap.
+ */
+import { type ResourcePayload } from "../types/resourceConfig.js";
+/**
+ * Pick the first value for each variable and URL-decode it.
+ *
+ * The SDK's UriTemplate.match captures regex groups as raw strings (no decoding),
+ * so an input URI like `octopus://spaces/AI%20Foundations/releases/Releases-1`
+ * yields `spaceName = "AI%20Foundations"` here. Decoding makes the variables
+ * usable directly against the Octopus API, which expects the literal `AI Foundations`.
+ *
+ * Falls back to the raw value if a string contains an invalid percent-escape so
+ * a malformed input surfaces as a clearer downstream error rather than a URIError.
+ */
+export declare function flatten(variables: Record<string, string | string[]>): Record<string, string>;
+export declare function dispatchOctopusUri(uri: string): Promise<ResourcePayload | null>;
+//# sourceMappingURL=dispatch.d.ts.map

package/dist/resources/dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/resources/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AAmBpC;;;;;;;;;;GAUG;AACH,wBAAgB,OAAO,CACrB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,GAC3C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAmBD,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAejC"}

package/dist/resources/dispatch.js

@@ -0,0 +1,81 @@
+/**
+ * Registry-driven dispatch for octopus:// resource URIs.
+ *
+ * Both the Resource Template registrations (src/resources/index.ts) and the
+ * `read_resource` Tool backstop (src/tools/readResource.ts) flow through the
+ * same descriptor registry, so resource-aware clients (which call resources/read)
+ * and resource-less clients (which call the Tool wrapper) hit identical logic.
+ *
+ * Toolset filtering is enforced at dispatch time. Native MCP clients only
+ * see resources whose toolset is enabled because registerResources skips
+ * disabled descriptors at registration. The `read_resource` backstop, by
+ * contrast, is registered under `core` and is always available — so without
+ * filtering here a caller could guess a URI for a descriptor whose toolset
+ * is disabled and still fetch the body. The filter below closes that gap.
+ */
+import { UriTemplate } from "@modelcontextprotocol/sdk/shared/uriTemplate.js";
+import { RESOURCE_REGISTRY, } from "../types/resourceConfig.js";
+import { DEFAULT_TOOLSETS, } from "../types/toolConfig.js";
+import { getActiveToolsetConfig } from "../helpers/activeToolsetConfig.js";
+const COMPILED = new WeakMap();
+function compiled(descriptor) {
+    let template = COMPILED.get(descriptor);
+    if (!template) {
+        template = new UriTemplate(descriptor.uriTemplate);
+        COMPILED.set(descriptor, template);
+    }
+    return template;
+}
+/**
+ * Pick the first value for each variable and URL-decode it.
+ *
+ * The SDK's UriTemplate.match captures regex groups as raw strings (no decoding),
+ * so an input URI like `octopus://spaces/AI%20Foundations/releases/Releases-1`
+ * yields `spaceName = "AI%20Foundations"` here. Decoding makes the variables
+ * usable directly against the Octopus API, which expects the literal `AI Foundations`.
+ *
+ * Falls back to the raw value if a string contains an invalid percent-escape so
+ * a malformed input surfaces as a clearer downstream error rather than a URIError.
+ */
+export function flatten(variables) {
+    const out = {};
+    for (const [key, value] of Object.entries(variables)) {
+        const first = Array.isArray(value) ? (value[0] ?? "") : value;
+        out[key] = safeDecode(first);
+    }
+    return out;
+}
+function safeDecode(value) {
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        return value;
+    }
+}
+function isToolsetEnabled(toolset, config) {
+    if (toolset === "core")
+        return true;
+    const enabled = config.enabledToolsets === "all"
+        ? DEFAULT_TOOLSETS
+        : config.enabledToolsets || DEFAULT_TOOLSETS;
+    return enabled.includes(toolset);
+}
+export async function dispatchOctopusUri(uri) {
+    if (!uri.startsWith("octopus://"))
+        return null;
+    const config = getActiveToolsetConfig();
+    for (const descriptor of RESOURCE_REGISTRY) {
+        const variables = compiled(descriptor).match(uri);
+        if (!variables)
+            continue;
+        // Even though the URI matches, the descriptor's toolset may be disabled
+        // for this session. Skip and keep looking — but no other descriptor
+        // should claim the same template, so this effectively returns null.
+        if (!isToolsetEnabled(descriptor.toolset, config))
+            continue;
+        return descriptor.read(flatten(variables));
+    }
+    return null;
+}
+//# sourceMappingURL=dispatch.js.map

package/dist/resources/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../src/resources/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,iDAAiD,CAAC;AAC9E,OAAO,EACL,iBAAiB,GAGlB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,gBAAgB,GAGjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAE3E,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAmC,CAAC;AAEhE,SAAS,QAAQ,CAAC,UAA8B;IAC9C,IAAI,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACnD,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,OAAO,CACrB,SAA4C;IAE5C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgB,EAAE,MAAqB;IAC/D,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,OAAO,GACX,MAAM,CAAC,eAAe,KAAK,KAAK;QAC9B,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,MAAM,CAAC,eAAe,IAAI,gBAAgB,CAAC;IACjD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW;IAEX,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,wEAAwE;QACxE,oEAAoE;QACpE,oEAAoE;QACpE,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;YAAE,SAAS;QAC5D,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/resources/featureToggle.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=featureToggle.d.ts.map

package/dist/resources/featureToggle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"featureToggle.d.ts","sourceRoot":"","sources":["../../src/resources/featureToggle.ts"],"names":[],"mappings":""}

package/dist/resources/featureToggle.js

@@ -0,0 +1,34 @@
+import { Client, resolveSpaceId } from "@octopusdeploy/api-client";
+import { registerResourceDescriptor } from "../types/resourceConfig.js";
+import { getClientConfigurationFromEnvironment } from "../helpers/getClientConfigurationFromEnvironment.js";
+import { handleOctopusApiError } from "../helpers/errorHandling.js";
+import { stripLinks } from "../helpers/stripLinks.js";
+import {} from "../types/featureToggleTypes.js";
+registerResourceDescriptor({
+    name: "featureToggle",
+    uriTemplate: "octopus://spaces/{spaceName}/projects/{projectId}/featuretoggles/{slug}",
+    toolset: "featureToggles",
+    title: "Octopus feature toggle",
+    description: "Full customer feature toggle body for a given slug in a project. Includes per-environment configuration (tenants, segments, minimum versions) that the find_feature_toggles slim summary omits.",
+    mimeType: "application/json",
+    read: async ({ spaceName, projectId, slug }) => {
+        try {
+            const client = await Client.create(getClientConfigurationFromEnvironment());
+            const spaceId = await resolveSpaceId(client, spaceName);
+            const toggle = await client.get("~/api/{spaceId}/projects/{projectId}/featuretoggles/{slug}", { spaceId, projectId, slug });
+            return {
+                mimeType: "application/json",
+                text: JSON.stringify(stripLinks(toggle)),
+            };
+        }
+        catch (error) {
+            handleOctopusApiError(error, {
+                entityType: "feature toggle",
+                entityId: slug,
+                spaceName,
+                helpText: "Use find_feature_toggles to list valid slugs. If 404 persists across all toggles, the customer feature toggles capability may be disabled on the Octopus instance.",
+            });
+        }
+    },
+});
+//# sourceMappingURL=featureToggle.js.map

package/dist/resources/featureToggle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"featureToggle.js","sourceRoot":"","sources":["../../src/resources/featureToggle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,qCAAqC,EAAE,MAAM,qDAAqD,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAA8B,MAAM,gCAAgC,CAAC;AAE5E,0BAA0B,CAAC;IACzB,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,yEAAyE;IAC3E,OAAO,EAAE,gBAAgB;IACzB,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,iMAAiM;IACnM,QAAQ,EAAE,kBAAkB;IAC5B,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAChC,qCAAqC,EAAE,CACxC,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAC7B,4DAA4D,EAC5D,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAC7B,CAAC;YAEF,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;aACzC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qBAAqB,CAAC,KAAK,EAAE;gBAC3B,UAAU,EAAE,gBAAgB;gBAC5B,QAAQ,EAAE,IAAI;gBACd,SAAS;gBACT,QAAQ,EACN,oKAAoK;aACvK,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}

package/dist/resources/index.d.ts

@@ -0,0 +1,12 @@
+import { type McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ToolsetConfig } from "../types/toolConfig.js";
+import "./release.js";
+import "./runbook.js";
+import "./task.js";
+import "./interruption.js";
+import "./featureToggle.js";
+import "./rolloutGroup.js";
+import "./catalog/llmsTxt.js";
+import "./catalog/capabilities.js";
+export declare function registerResources(server: McpServer, config?: ToolsetConfig): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/resources/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAC3F,OAAO,EACL,KAAK,aAAa,EAGnB,MAAM,wBAAwB,CAAC;AAMhC,OAAO,cAAc,CAAC;AACtB,OAAO,cAAc,CAAC;AACtB,OAAO,WAAW,CAAC;AACnB,OAAO,mBAAmB,CAAC;AAC3B,OAAO,oBAAoB,CAAC;AAC5B,OAAO,mBAAmB,CAAC;AAC3B,OAAO,sBAAsB,CAAC;AAC9B,OAAO,2BAA2B,CAAC;AAWnC,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,GAAE,aAAkB,GAAG,IAAI,CA2BrF"}

package/dist/resources/index.js

@@ -0,0 +1,44 @@
+import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { DEFAULT_TOOLSETS, } from "../types/toolConfig.js";
+import { RESOURCE_REGISTRY } from "../types/resourceConfig.js";
+import { flatten } from "./dispatch.js";
+import { setActiveToolsetConfig } from "../helpers/activeToolsetConfig.js";
+// Side-effect imports populate RESOURCE_REGISTRY.
+import "./release.js";
+import "./runbook.js";
+import "./task.js";
+import "./interruption.js";
+import "./featureToggle.js";
+import "./rolloutGroup.js";
+import "./catalog/llmsTxt.js";
+import "./catalog/capabilities.js";
+function isToolsetEnabled(toolset, config) {
+    const enabled = config.enabledToolsets === "all"
+        ? DEFAULT_TOOLSETS
+        : config.enabledToolsets || DEFAULT_TOOLSETS;
+    return toolset === "core" || enabled.includes(toolset);
+}
+export function registerResources(server, config = {}) {
+    setActiveToolsetConfig(config);
+    for (const descriptor of RESOURCE_REGISTRY) {
+        if (!isToolsetEnabled(descriptor.toolset, config))
+            continue;
+        server.registerResource(descriptor.name, new ResourceTemplate(descriptor.uriTemplate, { list: undefined }), {
+            title: descriptor.title,
+            description: descriptor.description,
+            mimeType: descriptor.mimeType,
+        }, async (uri, variables) => {
+            const payload = await descriptor.read(flatten(variables));
+            return {
+                contents: [
+                    {
+                        uri: uri.href,
+                        mimeType: payload.mimeType,
+                        text: payload.text,
+                    },
+                ],
+            };
+        });
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/resources/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/resources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3F,OAAO,EAGL,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAE3E,kDAAkD;AAClD,OAAO,cAAc,CAAC;AACtB,OAAO,cAAc,CAAC;AACtB,OAAO,WAAW,CAAC;AACnB,OAAO,mBAAmB,CAAC;AAC3B,OAAO,oBAAoB,CAAC;AAC5B,OAAO,mBAAmB,CAAC;AAC3B,OAAO,sBAAsB,CAAC;AAC9B,OAAO,2BAA2B,CAAC;AAEnC,SAAS,gBAAgB,CAAC,OAAgB,EAAE,MAAqB;IAC/D,MAAM,OAAO,GACX,MAAM,CAAC,eAAe,KAAK,KAAK;QAC9B,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,MAAM,CAAC,eAAe,IAAI,gBAAgB,CAAC;IAEjD,OAAO,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAiB,EAAE,SAAwB,EAAE;IAC7E,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;QAC3C,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;YAAE,SAAS;QAE5D,MAAM,CAAC,gBAAgB,CACrB,UAAU,CAAC,IAAI,EACf,IAAI,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACjE;YACE,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,EACD,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1D,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,GAAG,CAAC,IAAI;wBACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;qBACnB;iBACF;aACF,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/resources/interruption.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=interruption.d.ts.map

package/dist/resources/interruption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interruption.d.ts","sourceRoot":"","sources":["../../src/resources/interruption.ts"],"names":[],"mappings":""}