@opentabs-dev/mcp-server 0.0.19

package/dist/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../src/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGnD;;;;GAIG;AACH,MAAM,eAAe,GAAG,GAAa,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAE9D;;;GAGG;AACH,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAmB,EAAE;IAC3D,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,KAAK,EAAE,YAAoB,EAAoB,EAAE;IAC3E,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAEhE,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC;AACrF,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAW,EAAE,CACjD,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;IAC1B,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;IAC3B,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;IAC3B,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;IAC5B,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;IACzB,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;IAC1B,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;IAC3B,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAEpC;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAE,SAAiB,EAAU,EAAE;IACxE,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CAAC,SAAiB,EAA0B,EAAE;IACtE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,SAAS,eAAe,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7E,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,iBAAiB,GAAG,KAAK,EAAE,SAAiB,EAAE,SAAiB,EAAmC,EAAE;IACxG,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAE5D,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,GAAG,CAAC,qCAAqC,YAAY,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,2DAA2D;QAC3D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,OAAO,GAAG,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC,mBAAmB,YAAY,mDAAmD,CAAC,CAAC;QACjG,CAAC;QAED,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC,CAAC;AAEF,mEAAmE;AACnE,IAAI,iBAAiB,GAAoB,IAAI,CAAC;AAE9C;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,GAAa,EAAE;IAC/C,IAAI,iBAAiB,KAAK,IAAI;QAAE,OAAO,iBAAiB,CAAC;IAEzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,0BAA0B;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QACpD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,CAAC;gBACjE,kEAAkE;gBAClE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IAED,iBAAiB,GAAG,KAAK,CAAC;IAC1B,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,gBAAgB,GAAG,KAAK,EAAE,GAAW,EAAoB,EAAE;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC1F,OAAO,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,aAAa,GAAG,KAAK,EAAE,SAAiB,EAAqB,EAAE;IACnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6DAA6D;IAC7D,MAAM,cAAc,GAAoB,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAoB,EAAE,CAAC;IAE1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACxC,cAAc,CAAC,IAAI,CACjB,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBACtC,IAAI,KAAK;oBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,kEAAkE;YAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACxC,aAAa,CAAC,IAAI,CAChB,OAAO,CAAC,QAAQ,CAAC;iBACd,IAAI,CAAC,KAAK,EAAC,YAAY,EAAC,EAAE;gBACzB,MAAM,WAAW,GAAoB,EAAE,CAAC;gBACxC,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;oBACtC,IAAI,UAAU,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;wBAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;wBAC5C,WAAW,CAAC,IAAI,CACd,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;4BACtC,IAAI,KAAK;gCAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBAClC,CAAC,CAAC,CACH,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE;gBACV,uCAAuC;YACzC,CAAC,CAAC,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,cAAc,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,wBAAwB,GAAG,KAAK,IAAmD,EAAE;IACzF,MAAM,WAAW,GAAG,yBAAyB,EAAE,CAAC;IAChD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,6CAA6C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEhF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,4EAA4E;gBAC5E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACd,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,kBAAkB,SAAS,KAAK,GAAG,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,MAAM,yBAAyB,CAAC,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC,CAAC;AAEF,mDAAmD;AACnD,MAAM,qBAAqB,GAAG,GAAS,EAAE;IACvC,iBAAiB,GAAG,IAAI,CAAC;AAC3B,CAAC,CAAC;AAEF,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/sanitize-error.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Sanitize error messages before returning them to external clients.
+ * Strips absolute file paths, URLs, localhost references, and IP addresses
+ * to prevent leaking internal system details. Truncates to 500 characters.
+ */
+declare const sanitizeErrorMessage: (message: string) => string;
+export { sanitizeErrorMessage };
+//# sourceMappingURL=sanitize-error.d.ts.map

package/dist/sanitize-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-error.d.ts","sourceRoot":"","sources":["../src/sanitize-error.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,QAAA,MAAM,oBAAoB,GAAI,SAAS,MAAM,KAAG,MAkB/C,CAAC;AAEF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/sanitize-error.js

@@ -0,0 +1,25 @@
+/**
+ * Sanitize error messages before returning them to external clients.
+ * Strips absolute file paths, URLs, localhost references, and IP addresses
+ * to prevent leaking internal system details. Truncates to 500 characters.
+ */
+const MAX_LENGTH = 500;
+const sanitizeErrorMessage = (message) => {
+    let sanitized = message
+        // Windows absolute paths: C:\path\to\file or C:/path/to/file
+        .replace(/[a-z]:[/\\][^\s,;)}\]]+/gi, '[PATH]')
+        // Unix absolute paths: /path/to/file (at least 2 segments to avoid false positives like "/")
+        .replace(/\/[a-z0-9._-]+(?:\/[a-z0-9._-]+)+/gi, '[PATH]')
+        // Full URLs with protocol
+        .replace(/https?:\/\/[^\s,;)}\]]+/gi, '[URL]')
+        // localhost with port
+        .replace(/localhost:\d+/gi, '[LOCALHOST]')
+        // IPv4 addresses
+        .replace(/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/g, '[IP]');
+    if (sanitized.length > MAX_LENGTH) {
+        sanitized = sanitized.slice(0, MAX_LENGTH - 3) + '...';
+    }
+    return sanitized;
+};
+export { sanitizeErrorMessage };
+//# sourceMappingURL=sanitize-error.js.map

package/dist/sanitize-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-error.js","sourceRoot":"","sources":["../src/sanitize-error.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAU,EAAE;IACvD,IAAI,SAAS,GAAG,OAAO;QACrB,6DAA6D;SAC5D,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC;QAC/C,6FAA6F;SAC5F,OAAO,CAAC,qCAAqC,EAAE,QAAQ,CAAC;QACzD,0BAA0B;SACzB,OAAO,CAAC,2BAA2B,EAAE,OAAO,CAAC;QAC9C,sBAAsB;SACrB,OAAO,CAAC,iBAAiB,EAAE,aAAa,CAAC;QAC1C,iBAAiB;SAChB,OAAO,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC;IAE1D,IAAI,SAAS,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAClC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IACzD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/sanitize-tool-output.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Sanitize successful tool output before returning to MCP clients.
+ *
+ * Applies the same path, URL, localhost, and IP replacement patterns
+ * as sanitizeErrorMessage (from sanitize-error.ts) but operates
+ * recursively on all string values within an object tree. Numbers,
+ * booleans, nulls, and object keys are left untouched.
+ *
+ * This prevents internal system details (filesystem paths, local IP
+ * addresses) from leaking to AI agents in tool output. Error messages
+ * are sanitized separately by sanitizeErrorMessage and are not affected
+ * by the skipSanitization flag.
+ */
+/**
+ * Recursively sanitize all string values within an object.
+ * Leaves numbers, booleans, nulls, and object keys unchanged.
+ */
+declare const sanitizeToolOutput: (obj: unknown, depth?: number) => unknown;
+export { sanitizeToolOutput };
+//# sourceMappingURL=sanitize-tool-output.d.ts.map

package/dist/sanitize-tool-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-tool-output.d.ts","sourceRoot":"","sources":["../src/sanitize-tool-output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAsBH;;;GAGG;AACH,QAAA,MAAM,kBAAkB,GAAI,KAAK,OAAO,EAAE,cAAS,KAAG,OAerD,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/sanitize-tool-output.js

@@ -0,0 +1,52 @@
+/**
+ * Sanitize successful tool output before returning to MCP clients.
+ *
+ * Applies the same path, URL, localhost, and IP replacement patterns
+ * as sanitizeErrorMessage (from sanitize-error.ts) but operates
+ * recursively on all string values within an object tree. Numbers,
+ * booleans, nulls, and object keys are left untouched.
+ *
+ * This prevents internal system details (filesystem paths, local IP
+ * addresses) from leaking to AI agents in tool output. Error messages
+ * are sanitized separately by sanitizeErrorMessage and are not affected
+ * by the skipSanitization flag.
+ */
+const MAX_DEPTH = 50;
+/**
+ * Sanitize a single string value using the same patterns as sanitizeErrorMessage.
+ * Does NOT truncate — tool output can be arbitrarily long (truncation is only
+ * for error messages where brevity matters).
+ */
+const sanitizeString = (value) => value
+    // Windows absolute paths: C:\path\to\file or C:/path/to/file
+    .replace(/[a-z]:[/\\][^\s,;)}\]]+/gi, '[PATH]')
+    // Unix absolute paths: /path/to/file (at least 2 segments to avoid false positives like "/")
+    .replace(/\/[a-z0-9._-]+(?:\/[a-z0-9._-]+)+/gi, '[PATH]')
+    // Full URLs with protocol
+    .replace(/https?:\/\/[^\s,;)}\]]+/gi, '[URL]')
+    // localhost with port
+    .replace(/localhost:\d+/gi, '[LOCALHOST]')
+    // IPv4 addresses
+    .replace(/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/g, '[IP]');
+/**
+ * Recursively sanitize all string values within an object.
+ * Leaves numbers, booleans, nulls, and object keys unchanged.
+ */
+const sanitizeToolOutput = (obj, depth = 0) => {
+    if (depth > MAX_DEPTH)
+        return obj;
+    if (typeof obj === 'string')
+        return sanitizeString(obj);
+    if (obj === null || obj === undefined || typeof obj !== 'object')
+        return obj;
+    if (Array.isArray(obj)) {
+        return obj.map(item => sanitizeToolOutput(item, depth + 1));
+    }
+    const result = {};
+    for (const [key, value] of Object.entries(obj)) {
+        result[key] = sanitizeToolOutput(value, depth + 1);
+    }
+    return result;
+};
+export { sanitizeToolOutput };
+//# sourceMappingURL=sanitize-tool-output.js.map

package/dist/sanitize-tool-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-tool-output.js","sourceRoot":"","sources":["../src/sanitize-tool-output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB;;;;GAIG;AACH,MAAM,cAAc,GAAG,CAAC,KAAa,EAAU,EAAE,CAC/C,KAAK;IACH,6DAA6D;KAC5D,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC;IAC/C,6FAA6F;KAC5F,OAAO,CAAC,qCAAqC,EAAE,QAAQ,CAAC;IACzD,0BAA0B;KACzB,OAAO,CAAC,2BAA2B,EAAE,OAAO,CAAC;IAC9C,sBAAsB;KACrB,OAAO,CAAC,iBAAiB,EAAE,aAAa,CAAC;IAC1C,iBAAiB;KAChB,OAAO,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,kBAAkB,GAAG,CAAC,GAAY,EAAE,KAAK,GAAG,CAAC,EAAW,EAAE;IAC9D,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,GAAG,CAAC;IAElC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAE7E,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/sdk-version.d.ts

@@ -0,0 +1,11 @@
+/**
+ * SDK version that the MCP server is built against.
+ *
+ * Reads the version from platform/plugin-sdk/package.json (resolved relative
+ * to this file's location in the monorepo). Used at plugin load time to check
+ * SDK compatibility: a plugin's sdkVersion (from its tools.json) must have a
+ * major.minor <= the server's SDK major.minor.
+ */
+declare let sdkVersion: string;
+export { sdkVersion };
+//# sourceMappingURL=sdk-version.d.ts.map

package/dist/sdk-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-version.d.ts","sourceRoot":"","sources":["../src/sdk-version.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,QAAA,IAAI,UAAU,QAAU,CAAC;AAYzB,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/sdk-version.js

@@ -0,0 +1,23 @@
+/**
+ * SDK version that the MCP server is built against.
+ *
+ * Reads the version from platform/plugin-sdk/package.json (resolved relative
+ * to this file's location in the monorepo). Used at plugin load time to check
+ * SDK compatibility: a plugin's sdkVersion (from its tools.json) must have a
+ * major.minor <= the server's SDK major.minor.
+ */
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+let sdkVersion = '0.0.0';
+try {
+    const sdkPkgPath = join(dirname(fileURLToPath(import.meta.url)), '..', '..', 'plugin-sdk', 'package.json');
+    const pkgJson = await Bun.file(sdkPkgPath).json();
+    if (pkgJson !== null && typeof pkgJson === 'object' && 'version' in pkgJson && typeof pkgJson.version === 'string') {
+        sdkVersion = pkgJson.version;
+    }
+}
+catch {
+    // plugin-sdk package.json missing or unreadable — use fallback version
+}
+export { sdkVersion };
+//# sourceMappingURL=sdk-version.js.map

package/dist/sdk-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-version.js","sourceRoot":"","sources":["../src/sdk-version.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,IAAI,UAAU,GAAG,OAAO,CAAC;AAEzB,IAAI,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IAC3G,MAAM,OAAO,GAAY,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,SAAS,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACnH,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAC/B,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,uEAAuE;AACzE,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/shutdown.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Graceful shutdown handler for the MCP server.
+ *
+ * Installs SIGTERM and SIGINT handlers that perform orderly cleanup:
+ *   1. Reject all pending dispatches immediately (fast error for MCP clients)
+ *   2. Stop periodic session sweep timer
+ *   3. Stop file watchers (release OS handles)
+ *   4. Close extension WebSocket cleanly (so offscreen document reconnects)
+ *   5. Exit the process
+ *
+ * The handler is installed once on first load. Under bun --hot, the signal
+ * handlers are not re-registered (they survive across module re-evaluations
+ * because they reference state via the getter closure, not a stale capture).
+ *
+ * A globalThis flag prevents double-registration if index.ts is re-evaluated.
+ */
+import type { ServerState } from './state.js';
+/**
+ * Install graceful shutdown handlers for SIGTERM and SIGINT.
+ * Safe to call on every module evaluation — only installs once per process.
+ *
+ * @param getState - Getter that returns the current ServerState. Using a getter
+ *   instead of a direct reference ensures the handler always operates on the
+ *   latest state after hot reloads.
+ */
+declare const installShutdownHandlers: (getState: () => ServerState) => void;
+export { installShutdownHandlers };
+//# sourceMappingURL=shutdown.d.ts.map

package/dist/shutdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown.d.ts","sourceRoot":"","sources":["../src/shutdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAI9C;;;;;;;GAOG;AACH,QAAA,MAAM,uBAAuB,GAAI,UAAU,MAAM,WAAW,KAAG,IA2C9D,CAAC;AAEF,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/shutdown.js

@@ -0,0 +1,68 @@
+/**
+ * Graceful shutdown handler for the MCP server.
+ *
+ * Installs SIGTERM and SIGINT handlers that perform orderly cleanup:
+ *   1. Reject all pending dispatches immediately (fast error for MCP clients)
+ *   2. Stop periodic session sweep timer
+ *   3. Stop file watchers (release OS handles)
+ *   4. Close extension WebSocket cleanly (so offscreen document reconnects)
+ *   5. Exit the process
+ *
+ * The handler is installed once on first load. Under bun --hot, the signal
+ * handlers are not re-registered (they survive across module re-evaluations
+ * because they reference state via the getter closure, not a stale capture).
+ *
+ * A globalThis flag prevents double-registration if index.ts is re-evaluated.
+ */
+import { stopFileWatching } from './file-watcher.js';
+import { log } from './logger.js';
+const SHUTDOWN_INSTALLED_KEY = '__opentabs_shutdown_installed__';
+/**
+ * Install graceful shutdown handlers for SIGTERM and SIGINT.
+ * Safe to call on every module evaluation — only installs once per process.
+ *
+ * @param getState - Getter that returns the current ServerState. Using a getter
+ *   instead of a direct reference ensures the handler always operates on the
+ *   latest state after hot reloads.
+ */
+const installShutdownHandlers = (getState) => {
+    if (globalThis[SHUTDOWN_INSTALLED_KEY])
+        return;
+    globalThis[SHUTDOWN_INSTALLED_KEY] = true;
+    const shutdown = (signal) => {
+        log.info(`Received ${signal} — shutting down gracefully`);
+        const state = getState();
+        // 1. Reject all pending dispatches so MCP clients get fast errors
+        if (state.pendingDispatches.size > 0) {
+            log.info(`Rejecting ${state.pendingDispatches.size} pending dispatch(es)`);
+            for (const [id, pending] of state.pendingDispatches) {
+                state.pendingDispatches.delete(id);
+                clearTimeout(pending.timerId);
+                pending.reject(new Error('Server shutting down'));
+            }
+        }
+        // 2. Stop periodic session sweep timer
+        if (state.sweepTimerId !== null) {
+            clearInterval(state.sweepTimerId);
+            state.sweepTimerId = null;
+        }
+        // 3. Stop file watchers (release OS handles)
+        stopFileWatching(state);
+        // 4. Close extension WebSocket cleanly
+        if (state.extensionWs) {
+            try {
+                state.extensionWs.close(1001, 'Server shutting down');
+            }
+            catch {
+                // Already closed
+            }
+            state.extensionWs = null;
+        }
+        log.info('Shutdown complete');
+        process.exit(0);
+    };
+    process.on('SIGTERM', () => shutdown('SIGTERM'));
+    process.on('SIGINT', () => shutdown('SIGINT'));
+};
+export { installShutdownHandlers };
+//# sourceMappingURL=shutdown.js.map

package/dist/shutdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown.js","sourceRoot":"","sources":["../src/shutdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAGlC,MAAM,sBAAsB,GAAG,iCAA0C,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,uBAAuB,GAAG,CAAC,QAA2B,EAAQ,EAAE;IACpE,IAAK,UAAsC,CAAC,sBAAsB,CAAC;QAAE,OAAO;IAC3E,UAAsC,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC;IAEvE,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAQ,EAAE;QACxC,GAAG,CAAC,IAAI,CAAC,YAAY,MAAM,6BAA6B,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QAEzB,kEAAkE;QAClE,IAAI,KAAK,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,iBAAiB,CAAC,IAAI,uBAAuB,CAAC,CAAC;YAC3E,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBACpD,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAChC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAClC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;QAC5B,CAAC;QAED,6CAA6C;QAC7C,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAExB,uCAAuC;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;YACD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QAC3B,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC,CAAC;AAEF,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/skip-confirmation.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Confirmation bypass detection — determined once at startup.
+ *
+ * The --dangerously-skip-confirmation flag (or OPENTABS_SKIP_CONFIRMATION=1
+ * env var) bypasses all browser tool confirmation prompts. This is a
+ * dangerous option that disables human-in-the-loop safety for sensitive
+ * browser operations. It exists for CI/testing environments where no human
+ * is available to approve tool calls.
+ *
+ * The config.json `skipConfirmation` field is checked separately at reload
+ * time and combined with this flag in state.skipConfirmation.
+ */
+/** Whether the CLI flag or env var requests confirmation bypass */
+export declare const isCliSkipConfirmation: () => boolean;
+//# sourceMappingURL=skip-confirmation.d.ts.map

package/dist/skip-confirmation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip-confirmation.d.ts","sourceRoot":"","sources":["../src/skip-confirmation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,mEAAmE;AACnE,eAAO,MAAM,qBAAqB,QAAO,OAA8B,CAAC"}

package/dist/skip-confirmation.js

@@ -0,0 +1,16 @@
+/**
+ * Confirmation bypass detection — determined once at startup.
+ *
+ * The --dangerously-skip-confirmation flag (or OPENTABS_SKIP_CONFIRMATION=1
+ * env var) bypasses all browser tool confirmation prompts. This is a
+ * dangerous option that disables human-in-the-loop safety for sensitive
+ * browser operations. It exists for CI/testing environments where no human
+ * is available to approve tool calls.
+ *
+ * The config.json `skipConfirmation` field is checked separately at reload
+ * time and combined with this flag in state.skipConfirmation.
+ */
+const cliSkipConfirmation = Bun.argv.includes('--dangerously-skip-confirmation') || Bun.env.OPENTABS_SKIP_CONFIRMATION === '1';
+/** Whether the CLI flag or env var requests confirmation bypass */
+export const isCliSkipConfirmation = () => cliSkipConfirmation;
+//# sourceMappingURL=skip-confirmation.js.map

package/dist/skip-confirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip-confirmation.js","sourceRoot":"","sources":["../src/skip-confirmation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,mBAAmB,GACvB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;AAErG,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAY,EAAE,CAAC,mBAAmB,CAAC"}

package/dist/skip-sanitization.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Output sanitization bypass detection — determined once at startup.
+ *
+ * The --dangerously-skip-sanitization flag (or OPENTABS_SKIP_SANITIZATION=1
+ * env var) disables path/IP sanitization of successful tool output. This is
+ * useful when raw output is needed for debugging or when the AI agent needs
+ * actual filesystem paths.
+ *
+ * Error message sanitization (via sanitizeErrorMessage) is never affected
+ * by this flag — errors are always sanitized regardless.
+ *
+ * The config.json `skipSanitization` field is checked separately at reload
+ * time and combined with this flag in state.skipSanitization.
+ */
+/** Whether the CLI flag or env var requests output sanitization bypass */
+export declare const isCliSkipSanitization: () => boolean;
+//# sourceMappingURL=skip-sanitization.d.ts.map

package/dist/skip-sanitization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip-sanitization.d.ts","sourceRoot":"","sources":["../src/skip-sanitization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,0EAA0E;AAC1E,eAAO,MAAM,qBAAqB,QAAO,OAA8B,CAAC"}

package/dist/skip-sanitization.js

@@ -0,0 +1,18 @@
+/**
+ * Output sanitization bypass detection — determined once at startup.
+ *
+ * The --dangerously-skip-sanitization flag (or OPENTABS_SKIP_SANITIZATION=1
+ * env var) disables path/IP sanitization of successful tool output. This is
+ * useful when raw output is needed for debugging or when the AI agent needs
+ * actual filesystem paths.
+ *
+ * Error message sanitization (via sanitizeErrorMessage) is never affected
+ * by this flag — errors are always sanitized regardless.
+ *
+ * The config.json `skipSanitization` field is checked separately at reload
+ * time and combined with this flag in state.skipSanitization.
+ */
+const cliSkipSanitization = Bun.argv.includes('--dangerously-skip-sanitization') || Bun.env.OPENTABS_SKIP_SANITIZATION === '1';
+/** Whether the CLI flag or env var requests output sanitization bypass */
+export const isCliSkipSanitization = () => cliSkipSanitization;
+//# sourceMappingURL=skip-sanitization.js.map

package/dist/skip-sanitization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip-sanitization.js","sourceRoot":"","sources":["../src/skip-sanitization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,mBAAmB,GACvB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;AAErG,0EAA0E;AAC1E,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAY,EAAE,CAAC,mBAAmB,CAAC"}

package/dist/skip-verification.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Plugin verification bypass detection — determined once at startup.
+ *
+ * The --skip-plugin-verification flag (or OPENTABS_SKIP_PLUGIN_VERIFICATION=1
+ * env var) disables npm registry signature verification for official plugins.
+ * This is intended for air-gapped environments where the npm registry is
+ * unreachable.
+ */
+/** Whether the CLI flag or env var requests plugin verification bypass */
+export declare const isSkipPluginVerification: () => boolean;
+//# sourceMappingURL=skip-verification.d.ts.map

package/dist/skip-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip-verification.d.ts","sourceRoot":"","sources":["../src/skip-verification.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,0EAA0E;AAC1E,eAAO,MAAM,wBAAwB,QAAO,OAA8B,CAAC"}

package/dist/skip-verification.js

@@ -0,0 +1,12 @@
+/**
+ * Plugin verification bypass detection — determined once at startup.
+ *
+ * The --skip-plugin-verification flag (or OPENTABS_SKIP_PLUGIN_VERIFICATION=1
+ * env var) disables npm registry signature verification for official plugins.
+ * This is intended for air-gapped environments where the npm registry is
+ * unreachable.
+ */
+const cliSkipVerification = Bun.argv.includes('--skip-plugin-verification') || Bun.env.OPENTABS_SKIP_PLUGIN_VERIFICATION === '1';
+/** Whether the CLI flag or env var requests plugin verification bypass */
+export const isSkipPluginVerification = () => cliSkipVerification;
+//# sourceMappingURL=skip-verification.js.map

package/dist/skip-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip-verification.js","sourceRoot":"","sources":["../src/skip-verification.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,mBAAmB,GACvB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,iCAAiC,KAAK,GAAG,CAAC;AAEvG,0EAA0E;AAC1E,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAY,EAAE,CAAC,mBAAmB,CAAC"}