@oxy-hq/cli 0.5.0 → 0.7.0

package/dist/mcp-CIsyezzU.mjs

@@ -1,316 +0,0 @@
-#!/usr/bin/env node
-import { a as runJq, c as isExternalSurface, d as paramsToQuery, f as parseFields, i as searchRoutes, l as normalizePath, m as ExitCode, n as loadCatalog, o as parseJson, p as CliError, r as loadOpenApi, s as request, t as comparablePath, u as substitutePlaceholders } from "./main.mjs";
-import { existsSync, readFileSync } from "node:fs";
-import { dirname, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
-
-//#region src/commands/mcp.ts
-/**
-* `oxyc mcp` — the Oxy API as MCP tools, over stdio.
-*
-* NOT THE SAME THING AS `oxy mcp`. That one is workspace tooling: it takes a
-* local checkout and exposes the semantic model, automations and `.sql` files
-* in it. This one takes a TOKEN and exposes the deployment's HTTP API — the
-* same surface `oxyc api` reaches, for an agent that would rather call a tool
-* than shell out. Different input, different audience, no overlap.
-*
-* FOUR TOOLS, NOT SIX HUNDRED — the design decision that makes this affordable.
-*
-* The obvious shape is one tool per endpoint, and it is the wrong one: the API
-* has ~670 routes, an agent runtime ships every tool's JSON schema in every
-* request, and that is tens of kilobytes of context spent on each turn before
-* a single question is asked. It would also go stale on every deploy, since
-* the tool list would be baked into this package rather than read from the
-* deployment.
-*
-* So discovery stays a QUESTION the agent asks (`routes`, `schema`) rather
-* than a payload it carries, exactly as the CLI does it. Four tools cost a few
-* hundred bytes per turn and reach every endpoint, including ones added after
-* this package was published.
-*
-* Auth, target resolution and placeholder substitution are the CLI's — the
-* same `Context`, so a token cached by `oxyc login` works
-* here with no separate setup, and `{org}` / `{workspace}` resolve the same
-* way.
-*/
-/**
-* Package version, reported in the MCP handshake.
-*
-* Read from `package.json` rather than restated, so a release bump cannot
-* leave the server announcing a version nobody shipped.
-*/
-const VERSION = (() => {
-	try {
-		const here = dirname(fileURLToPath(import.meta.url));
-		for (const candidate of [resolve(here, "..", "package.json"), resolve(here, "..", "..", "package.json")]) if (existsSync(candidate)) return JSON.parse(readFileSync(candidate, "utf8")).version ?? "0.0.0";
-	} catch {}
-	return "0.0.0";
-})();
-/**
-* A tool result. MCP wants content blocks; everything here is text, because
-* the caller is a language model and the payloads are JSON or markdown.
-*/
-function text(body, isError = false) {
-	return {
-		content: [{
-			type: "text",
-			text: body
-		}],
-		isError
-	};
-}
-const TOOLS = [
-	{
-		name: "oxy_routes",
-		description: "List the API endpoints this Oxy deployment mounts, with what each one does. ALWAYS call this before oxy_request rather than guessing a path. Pass a filter (matched against method, path, surface and description) to narrow it — unfiltered is ~670 routes. Above 60 matches the descriptions are dropped and only method, path and credential come back, so narrow enough to stay under that when you need to know what an endpoint does; past ~400 it is refused outright.",
-		inputSchema: {
-			type: "object",
-			properties: {
-				filter: {
-					type: "string",
-					description: "Substring to narrow by, e.g. 'threads', 'sql', 'admin', 'semantic'."
-				},
-				all: {
-					type: "boolean",
-					description: "Include ide-only and worker-only routes. Off by default: those are mounted on one instance of the fleet, so a caller hitting the load balancer cannot reach them directly."
-				}
-			}
-		}
-	},
-	{
-		name: "oxy_schema",
-		description: "The request and response schema for ONE endpoint, so a body can be built correctly. Covers the data plane (SQL, semantic query, and the org/workspace lookups); a blank result means undocumented, not nonexistent — use oxy_routes to confirm the endpoint exists.",
-		inputSchema: {
-			type: "object",
-			properties: {
-				path: {
-					type: "string",
-					description: "Endpoint path, e.g. '{workspace}/sql/query'."
-				},
-				method: {
-					type: "string",
-					description: "Narrow to one HTTP method."
-				}
-			},
-			required: ["path"]
-		}
-	},
-	{
-		name: "oxy_request",
-		description: "Make an authenticated request to the Oxy API. The credential is picked from the path (/api/** takes a bearer, /external/api/** an API key). Placeholders {org}, {workspace}, {project}, {customer} and {me} are substituted from context. Read freely; ask the human before any mutating request against production.",
-		inputSchema: {
-			type: "object",
-			properties: {
-				path: {
-					type: "string",
-					description: "Path relative to /api, e.g. '{org}/workspaces'."
-				},
-				method: {
-					type: "string",
-					description: "HTTP method. Defaults to GET, or POST with fields."
-				},
-				fields: {
-					type: "object",
-					description: "Request parameters. Sent as a JSON body on POST/PUT/PATCH, or as query parameters on GET/HEAD/DELETE. Values keep their JSON type."
-				},
-				jq: {
-					type: "string",
-					description: "A jq program to reduce the response before it is returned. Use it — a full list response is far more context than the two fields you need."
-				}
-			},
-			required: ["path"]
-		}
-	},
-	{
-		name: "oxy_whoami",
-		description: "Which deployment this is pointed at and who the token belongs to. Use it when a call returns 401/403, or a 200 with a null body — on this API an expired session answers 200 null rather than 401, and this tells the two apart.",
-		inputSchema: {
-			type: "object",
-			properties: {}
-		}
-	}
-];
-/**
-* Above this many matches, `oxy_routes` drops the descriptions.
-*
-* DEGRADES, IT DOES NOT REFUSE — the same shape as `oxyc routes`, which picks
-* `renderDetailed` under 40 matches and the compact method+path table above it
-* (`discover.ts`). The expensive field is `description`, not the row: a trimmed
-* row is a few tens of bytes, so several hundred still fit in a result an agent
-* can read, while the descriptions are what turn a broad match into hundreds of
-* KB of context spent before a question is asked.
-*
-* The threshold is on the COUNT, not on whether a `filter` was supplied — a
-* filter is not evidence of narrowing. `searchRoutes` matches a substring of
-* method, path, surface or description, so `"admin"`, `"workspace"` and
-* `"query"` are all filters a model reaches for in good faith that clear this.
-*/
-const MAX_DESCRIBED_ROUTES = 60;
-/**
-* And above THIS many, there is nothing useful to return at all.
-*
-* Deliberately far above the threshold that drops descriptions: refusing is the
-* answer only when even the trimmed listing would be a context dump, which for
-* a deployment of ~670 routes means "you asked for effectively all of them".
-*/
-const MAX_ROUTES_PER_RESULT = 400;
-/** `{ a: 1 }` → the `-f`/`-F` pairs `parseFields` understands. */
-function fieldPairs(fields) {
-	if (!fields) return [];
-	return Object.entries(fields).map(([k, v]) => `${k}=${JSON.stringify(v)}`);
-}
-/**
-* Check the arguments the schema says are required.
-*
-* `inputSchema.required` is ADVISORY on the low-level `Server` — it is handed
-* to the model, not enforced by the transport. Without this, `oxy_schema` with
-* no `path` matched every path and returned the whole OpenAPI document, and
-* `oxy_request` with none built a request to `/api/`.
-*/
-function requireArgs(name, args, required) {
-	const missing = required.filter((k) => {
-		const v = args[k];
-		return v === void 0 || v === null || typeof v === "string" && v.trim() === "";
-	});
-	if (missing.length > 0) throw new CliError(`${name} needs ${missing.join(", ")}`, { code: ExitCode.USAGE });
-}
-async function callTool(ctx, name, args) {
-	switch (name) {
-		case "oxy_routes": {
-			const catalog = await loadCatalog({
-				target: ctx.target(),
-				bearer: ctx.maybeBearer()
-			});
-			const filter = args.filter?.trim();
-			let matches = searchRoutes(catalog, filter || void 0);
-			if (!args.all) matches = matches.filter((r) => r.role === "fleet-ok");
-			const staleNote = catalog.stale ? "NOTE: this route table came from a stale local cache; the deployment was unreachable.\n\n" : "";
-			const asked = filter ? ` ${JSON.stringify(filter)}` : "";
-			if (matches.length > MAX_ROUTES_PER_RESULT) return text(`${staleNote}${matches.length} routes match${asked}, which is effectively the whole deployment. Call oxy_routes again with a narrower \`filter\` (matched against method, path, surface and description), e.g. "threads", "sql", "semantic", "admin".`, true);
-			if (matches.length === 0) return text(`${staleNote}No route matches ${JSON.stringify(filter ?? "")}. Try a broader filter, or pass all=true to include ide-only and worker-only mounts.`, true);
-			const described = matches.length <= MAX_DESCRIBED_ROUTES;
-			const trimmed = matches.map((r) => described ? {
-				method: r.method,
-				path: r.path,
-				credential: r.credential,
-				description: r.description
-			} : {
-				method: r.method,
-				path: r.path,
-				credential: r.credential
-			});
-			return text(`${staleNote}${described ? "" : `NOTE: ${matches.length} routes match${asked} — too many to describe, so each row is method, path and credential WITHOUT its description. Narrow the \`filter\` to ${MAX_DESCRIBED_ROUTES} or fewer matches to get the descriptions back.\n\n`}${JSON.stringify(trimmed)}`);
-		}
-		case "oxy_schema": {
-			requireArgs("oxy_schema", args, ["path"]);
-			const doc = await loadOpenApi({
-				target: ctx.target(),
-				bearer: ctx.maybeBearer()
-			});
-			const wanted = String(args.path ?? "");
-			const method = args.method;
-			const paths = Object.entries(doc.paths ?? {});
-			const exact = paths.filter(([p]) => comparablePath(p) === comparablePath(wanted));
-			const hit = exact.length > 0 ? exact : paths.filter(([p]) => comparablePath(p).includes(comparablePath(wanted)));
-			if (hit.length === 0) return text(`No documented schema for ${wanted}. The OpenAPI document covers the data plane only — call oxy_routes with a filter to confirm the endpoint exists.`, true);
-			const selected = Object.fromEntries(hit.map(([p, ops]) => [p, method ? Object.fromEntries(Object.entries(ops).filter(([verb]) => verb.toLowerCase() === method.toLowerCase())) : ops]));
-			return text(JSON.stringify({
-				paths: selected,
-				components: doc.components
-			}, null, 2));
-		}
-		case "oxy_request": {
-			requireArgs("oxy_request", args, ["path"]);
-			const raw = String(args.path ?? "");
-			const method = String(args.method ?? "").toUpperCase() || void 0;
-			const fields = parseFields([], fieldPairs(args.fields));
-			const verb = method ?? (fields.present ? "POST" : "GET");
-			const carriesBody = ![
-				"GET",
-				"HEAD",
-				"DELETE"
-			].includes(verb);
-			let path = substitutePlaceholders(normalizePath(raw), ctx.placeholders());
-			let body;
-			if (fields.present) {
-				if (carriesBody) body = JSON.stringify(fields.params);
-				else {
-					const query = paramsToQuery(fields.params);
-					if (query) path += (path.includes("?") ? "&" : "?") + query;
-				}
-			}
-			const apiKey = ctx.apiKey();
-			const external = isExternalSurface(path);
-			const response = await request({
-				target: ctx.target(),
-				path,
-				method: verb,
-				body,
-				bearer: external && apiKey ? ctx.maybeBearer() : ctx.bearer(),
-				apiKey
-			});
-			if (response.status < 200 || response.status >= 300) return text(`HTTP ${response.status} ${response.statusText}\n${response.body}`, true);
-			if (response.body.trim() === "null") return text("null\n\n(NOTE: a 200 with a null body can mean an expired session on this API, not 'no such thing'. Call oxy_whoami to tell them apart.)");
-			const jq = args.jq;
-			if (jq) return text(runJq(response.body, jq));
-			return text(response.body);
-		}
-		case "oxy_whoami": {
-			const target = ctx.target();
-			const response = await request({
-				target,
-				path: "/api/user",
-				method: "GET",
-				bearer: ctx.bearer()
-			});
-			const payload = parseJson(response.body);
-			if (payload === null || payload === void 0) return text(`target: ${target}\nThe token no longer resolves to a user — the session has expired. Ask the human to run \`oxyc login\`.`, true);
-			return text(JSON.stringify({
-				target,
-				user: payload
-			}, null, 2));
-		}
-		default: return text(`unknown tool: ${name}`, true);
-	}
-}
-/**
-* Serve MCP on stdio until the client disconnects.
-*
-* STDIO IS THE WHOLE TRANSPORT, deliberately. An HTTP/SSE server would need a
-* port, a lifetime and an auth story of its own; stdio is what every agent
-* runtime already launches, and the process inherits the caller's environment
-* — which is where the token and the target come from.
-*
-* NOTHING MAY BE WRITTEN TO STDOUT except protocol frames. `log.info` and
-* friends already go to stderr, which is why this can share the CLI's own
-* plumbing without corrupting the stream.
-*/
-async function runMcp(ctx) {
-	const server = new Server({
-		name: "oxyc",
-		version: VERSION
-	}, { capabilities: { tools: {} } });
-	server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
-	server.setRequestHandler(CallToolRequestSchema, async (req) => {
-		try {
-			return await callTool(ctx, req.params.name, req.params.arguments ?? {});
-		} catch (cause) {
-			const message = cause.message ?? String(cause);
-			const { hint, remedy } = cause;
-			const extra = [hint, remedy].filter((line) => line !== void 0 && line !== "").join("\n\n");
-			return text(extra ? `${message}\n\n${extra}` : message, true);
-		}
-	});
-	await server.connect(new StdioServerTransport());
-	await new Promise((resolve) => {
-		process.stdin.on("close", resolve);
-		server.onclose = resolve;
-	});
-}
-
-//#endregion
-export { runMcp };
-//# sourceMappingURL=mcp-CIsyezzU.mjs.map

package/dist/mcp-CIsyezzU.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-CIsyezzU.mjs","names":[],"sources":["../src/commands/mcp.ts"],"sourcesContent":["/**\n * `oxyc mcp` — the Oxy API as MCP tools, over stdio.\n *\n * NOT THE SAME THING AS `oxy mcp`. That one is workspace tooling: it takes a\n * local checkout and exposes the semantic model, automations and `.sql` files\n * in it. This one takes a TOKEN and exposes the deployment's HTTP API — the\n * same surface `oxyc api` reaches, for an agent that would rather call a tool\n * than shell out. Different input, different audience, no overlap.\n *\n * FOUR TOOLS, NOT SIX HUNDRED — the design decision that makes this affordable.\n *\n * The obvious shape is one tool per endpoint, and it is the wrong one: the API\n * has ~670 routes, an agent runtime ships every tool's JSON schema in every\n * request, and that is tens of kilobytes of context spent on each turn before\n * a single question is asked. It would also go stale on every deploy, since\n * the tool list would be baked into this package rather than read from the\n * deployment.\n *\n * So discovery stays a QUESTION the agent asks (`routes`, `schema`) rather\n * than a payload it carries, exactly as the CLI does it. Four tools cost a few\n * hundred bytes per turn and reach every endpoint, including ones added after\n * this package was published.\n *\n * Auth, target resolution and placeholder substitution are the CLI's — the\n * same `Context`, so a token cached by `oxyc login` works\n * here with no separate setup, and `{org}` / `{workspace}` resolve the same\n * way.\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { Server } from \"@modelcontextprotocol/sdk/server/index.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport { CallToolRequestSchema, ListToolsRequestSchema } from \"@modelcontextprotocol/sdk/types.js\";\nimport { loadCatalog, loadOpenApi, searchRoutes } from \"../api/catalog.js\";\nimport { paramsToQuery, parseFields } from \"../api/fields.js\";\nimport { runJq } from \"../api/output.js\";\nimport { isExternalSurface, normalizePath, substitutePlaceholders } from \"../api/paths.js\";\nimport { parseJson, request } from \"../api/request.js\";\nimport type { Context } from \"../context/resolve.js\";\nimport { CliError, ExitCode } from \"../util/errors.js\";\nimport { comparablePath } from \"./discover.js\";\n\n/**\n * Package version, reported in the MCP handshake.\n *\n * Read from `package.json` rather than restated, so a release bump cannot\n * leave the server announcing a version nobody shipped.\n */\nconst VERSION: string = (() => {\n  try {\n    const here = dirname(fileURLToPath(import.meta.url));\n    for (const candidate of [\n      resolve(here, \"..\", \"package.json\"),\n      resolve(here, \"..\", \"..\", \"package.json\")\n    ]) {\n      if (existsSync(candidate)) {\n        return (\n          (JSON.parse(readFileSync(candidate, \"utf8\")) as { version?: string }).version ?? \"0.0.0\"\n        );\n      }\n    }\n  } catch {\n    // A packaging shape we did not anticipate. The handshake needs a string,\n    // not an accurate one.\n  }\n  return \"0.0.0\";\n})();\n\n/**\n * A tool result. MCP wants content blocks; everything here is text, because\n * the caller is a language model and the payloads are JSON or markdown.\n */\nfunction text(body: string, isError = false) {\n  return { content: [{ type: \"text\" as const, text: body }], isError };\n}\n\nconst TOOLS = [\n  {\n    name: \"oxy_routes\",\n    description:\n      \"List the API endpoints this Oxy deployment mounts, with what each one does. \" +\n      \"ALWAYS call this before oxy_request rather than guessing a path. \" +\n      \"Pass a filter (matched against method, path, surface and description) to narrow it — \" +\n      \"unfiltered is ~670 routes. Above 60 matches the descriptions are dropped and only \" +\n      \"method, path and credential come back, so narrow enough to stay under that when you \" +\n      \"need to know what an endpoint does; past ~400 it is refused outright.\",\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        filter: {\n          type: \"string\",\n          description: \"Substring to narrow by, e.g. 'threads', 'sql', 'admin', 'semantic'.\"\n        },\n        all: {\n          type: \"boolean\",\n          description:\n            \"Include ide-only and worker-only routes. Off by default: those are mounted on one \" +\n            \"instance of the fleet, so a caller hitting the load balancer cannot reach them directly.\"\n        }\n      }\n    }\n  },\n  {\n    name: \"oxy_schema\",\n    description:\n      \"The request and response schema for ONE endpoint, so a body can be built correctly. \" +\n      \"Covers the data plane (SQL, semantic query, and the org/workspace lookups); a blank \" +\n      \"result means undocumented, not nonexistent — use oxy_routes to confirm the endpoint exists.\",\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        path: { type: \"string\", description: \"Endpoint path, e.g. '{workspace}/sql/query'.\" },\n        method: { type: \"string\", description: \"Narrow to one HTTP method.\" }\n      },\n      required: [\"path\"]\n    }\n  },\n  {\n    name: \"oxy_request\",\n    description:\n      \"Make an authenticated request to the Oxy API. The credential is picked from the path \" +\n      \"(/api/** takes a bearer, /external/api/** an API key). Placeholders {org}, {workspace}, \" +\n      \"{project}, {customer} and {me} are substituted from context. \" +\n      \"Read freely; ask the human before any mutating request against production.\",\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        path: { type: \"string\", description: \"Path relative to /api, e.g. '{org}/workspaces'.\" },\n        method: {\n          type: \"string\",\n          description: \"HTTP method. Defaults to GET, or POST with fields.\"\n        },\n        fields: {\n          type: \"object\",\n          description:\n            \"Request parameters. Sent as a JSON body on POST/PUT/PATCH, or as query parameters \" +\n            \"on GET/HEAD/DELETE. Values keep their JSON type.\"\n        },\n        jq: {\n          type: \"string\",\n          description:\n            \"A jq program to reduce the response before it is returned. Use it — a full list \" +\n            \"response is far more context than the two fields you need.\"\n        }\n      },\n      required: [\"path\"]\n    }\n  },\n  {\n    name: \"oxy_whoami\",\n    description:\n      \"Which deployment this is pointed at and who the token belongs to. \" +\n      \"Use it when a call returns 401/403, or a 200 with a null body — on this API an expired \" +\n      \"session answers 200 null rather than 401, and this tells the two apart.\",\n    inputSchema: { type: \"object\", properties: {} }\n  }\n];\n\n/**\n * Above this many matches, `oxy_routes` drops the descriptions.\n *\n * DEGRADES, IT DOES NOT REFUSE — the same shape as `oxyc routes`, which picks\n * `renderDetailed` under 40 matches and the compact method+path table above it\n * (`discover.ts`). The expensive field is `description`, not the row: a trimmed\n * row is a few tens of bytes, so several hundred still fit in a result an agent\n * can read, while the descriptions are what turn a broad match into hundreds of\n * KB of context spent before a question is asked.\n *\n * The threshold is on the COUNT, not on whether a `filter` was supplied — a\n * filter is not evidence of narrowing. `searchRoutes` matches a substring of\n * method, path, surface or description, so `\"admin\"`, `\"workspace\"` and\n * `\"query\"` are all filters a model reaches for in good faith that clear this.\n */\nconst MAX_DESCRIBED_ROUTES = 60;\n\n/**\n * And above THIS many, there is nothing useful to return at all.\n *\n * Deliberately far above the threshold that drops descriptions: refusing is the\n * answer only when even the trimmed listing would be a context dump, which for\n * a deployment of ~670 routes means \"you asked for effectively all of them\".\n */\nconst MAX_ROUTES_PER_RESULT = 400;\n\n/** `{ a: 1 }` → the `-f`/`-F` pairs `parseFields` understands. */\nfunction fieldPairs(fields: Record<string, unknown> | undefined): string[] {\n  if (!fields) return [];\n  return Object.entries(fields).map(([k, v]) => `${k}=${JSON.stringify(v)}`);\n}\n\n/**\n * Check the arguments the schema says are required.\n *\n * `inputSchema.required` is ADVISORY on the low-level `Server` — it is handed\n * to the model, not enforced by the transport. Without this, `oxy_schema` with\n * no `path` matched every path and returned the whole OpenAPI document, and\n * `oxy_request` with none built a request to `/api/`.\n */\nfunction requireArgs(name: string, args: Record<string, unknown>, required: string[]): void {\n  const missing = required.filter((k) => {\n    const v = args[k];\n    return v === undefined || v === null || (typeof v === \"string\" && v.trim() === \"\");\n  });\n  if (missing.length > 0) {\n    throw new CliError(`${name} needs ${missing.join(\", \")}`, { code: ExitCode.USAGE });\n  }\n}\n\nasync function callTool(ctx: Context, name: string, args: Record<string, unknown>) {\n  switch (name) {\n    case \"oxy_routes\": {\n      const catalog = await loadCatalog({ target: ctx.target(), bearer: ctx.maybeBearer() });\n      const filter = (args.filter as string | undefined)?.trim();\n      let matches = searchRoutes(catalog, filter || undefined);\n      if (!args.all) matches = matches.filter((r) => r.role === \"fleet-ok\");\n\n      // A cache stale enough to be wrong is worth saying INSIDE the result:\n      // `loadCatalog` warns on stderr, which an MCP client never shows anyone.\n      const staleNote = catalog.stale\n        ? \"NOTE: this route table came from a stale local cache; the deployment was unreachable.\\n\\n\"\n        : \"\";\n\n      const asked = filter ? ` ${JSON.stringify(filter)}` : \"\";\n\n      // Only a match set too large even to LIST is refused. Below that the\n      // result degrades instead, because a filter like \"admin\" or \"query\" can\n      // clear the description threshold in good faith and \"guess something\n      // narrower\" is a dead end for a model with no way to see what it hit.\n      if (matches.length > MAX_ROUTES_PER_RESULT) {\n        return text(\n          `${staleNote}${matches.length} routes match${asked}, which is effectively the whole ` +\n            `deployment. Call oxy_routes again with a narrower \\`filter\\` (matched against ` +\n            `method, path, surface and description), e.g. \"threads\", \"sql\", \"semantic\", \"admin\".`,\n          true\n        );\n      }\n\n      if (matches.length === 0) {\n        // An empty array reads as \"this deployment has no such endpoint\",\n        // which is usually false — the filter was wrong, or the route is\n        // ide-only and hidden by default.\n        return text(\n          `${staleNote}No route matches ${JSON.stringify(filter ?? \"\")}. Try a broader filter, ` +\n            `or pass all=true to include ide-only and worker-only mounts.`,\n          true\n        );\n      }\n      // Trimmed to the fields that help a caller build a request. The full\n      // record carries the handler path and mount notes, which are for a\n      // maintainer reading source, not for an agent composing a call.\n      const described = matches.length <= MAX_DESCRIBED_ROUTES;\n      // `credential` SURVIVES THE TRIM. It is what separates the bearer mount\n      // from the `/external/api` API-key one, so a caller composing a request\n      // needs it in either form — and `renderCompact`, the CLI shape this\n      // mirrors, keeps it as a per-surface heading. It is also not the\n      // expensive field: ~25 bytes a row, ~10 KB across the whole ceiling,\n      // against descriptions that run to hundreds of KB.\n      const trimmed = matches.map((r) =>\n        described\n          ? { method: r.method, path: r.path, credential: r.credential, description: r.description }\n          : { method: r.method, path: r.path, credential: r.credential }\n      );\n      // The note says the listing is trimmed AND how to get the descriptions\n      // back. Without it a model reads a description-less row as an endpoint\n      // that has no documentation, rather than one it did not ask narrowly\n      // enough to see.\n      const trimNote = described\n        ? \"\"\n        : `NOTE: ${matches.length} routes match${asked} — too many to describe, so each row is ` +\n          `method, path and credential WITHOUT its description. Narrow the \\`filter\\` to ` +\n          `${MAX_DESCRIBED_ROUTES} or fewer matches to get the descriptions back.\\n\\n`;\n      return text(`${staleNote}${trimNote}${JSON.stringify(trimmed)}`);\n    }\n\n    case \"oxy_schema\": {\n      requireArgs(\"oxy_schema\", args, [\"path\"]);\n      const doc = (await loadOpenApi({ target: ctx.target(), bearer: ctx.maybeBearer() })) as {\n        paths?: Record<string, Record<string, unknown>>;\n        components?: unknown;\n      };\n      const wanted = String(args.path ?? \"\");\n      const method = args.method as string | undefined;\n      // `comparablePath` is imported from `discover.ts` rather than copied:\n      // a second reduction of the same two spellings is a second thing to keep\n      // in step, and the copy here was untested. Exact first, then substring —\n      // the order `runSchema` uses, so the two commands answer alike.\n      const paths = Object.entries(doc.paths ?? {});\n      const exact = paths.filter(([p]) => comparablePath(p) === comparablePath(wanted));\n      const hit =\n        exact.length > 0\n          ? exact\n          : paths.filter(([p]) => comparablePath(p).includes(comparablePath(wanted)));\n      if (hit.length === 0) {\n        return text(\n          `No documented schema for ${wanted}. The OpenAPI document covers the data plane only — ` +\n            `call oxy_routes with a filter to confirm the endpoint exists.`,\n          true\n        );\n      }\n      const selected = Object.fromEntries(\n        hit.map(([p, ops]) => [\n          p,\n          method\n            ? Object.fromEntries(\n                Object.entries(ops).filter(([verb]) => verb.toLowerCase() === method.toLowerCase())\n              )\n            : ops\n        ])\n      );\n      return text(JSON.stringify({ paths: selected, components: doc.components }, null, 2));\n    }\n\n    case \"oxy_request\": {\n      requireArgs(\"oxy_request\", args, [\"path\"]);\n      const raw = String(args.path ?? \"\");\n      const method = String(args.method ?? \"\").toUpperCase() || undefined;\n      const fields = parseFields([], fieldPairs(args.fields as Record<string, unknown>));\n      const verb = method ?? (fields.present ? \"POST\" : \"GET\");\n      const carriesBody = ![\"GET\", \"HEAD\", \"DELETE\"].includes(verb);\n\n      let path = substitutePlaceholders(normalizePath(raw), ctx.placeholders());\n      let body: string | undefined;\n      if (fields.present) {\n        if (carriesBody) body = JSON.stringify(fields.params);\n        else {\n          const query = paramsToQuery(fields.params);\n          if (query) path += (path.includes(\"?\") ? \"&\" : \"?\") + query;\n        }\n      }\n\n      const apiKey = ctx.apiKey();\n      const external = isExternalSurface(path);\n      const response = await request({\n        target: ctx.target(),\n        path,\n        method: verb,\n        body,\n        bearer: external && apiKey ? ctx.maybeBearer() : ctx.bearer(),\n        apiKey\n      });\n\n      if (response.status < 200 || response.status >= 300) {\n        // The STATUS and the body, not a thrown error: the model can act on\n        // \"403, here is what the server said\" and cannot act on a transport\n        // exception. It is marked `isError` so the runtime shows it as one.\n        return text(`HTTP ${response.status} ${response.statusText}\\n${response.body}`, true);\n      }\n\n      if (response.body.trim() === \"null\") {\n        return text(\n          \"null\\n\\n(NOTE: a 200 with a null body can mean an expired session on this API, \" +\n            \"not 'no such thing'. Call oxy_whoami to tell them apart.)\"\n        );\n      }\n\n      const jq = args.jq as string | undefined;\n      if (jq) return text(runJq(response.body, jq));\n      return text(response.body);\n    }\n\n    case \"oxy_whoami\": {\n      const target = ctx.target();\n      const response = await request({\n        target,\n        path: \"/api/user\",\n        method: \"GET\",\n        bearer: ctx.bearer()\n      });\n      const payload = parseJson(response.body);\n      if (payload === null || payload === undefined) {\n        return text(\n          `target: ${target}\\nThe token no longer resolves to a user — the session has expired. ` +\n            `Ask the human to run \\`oxyc login\\`.`,\n          true\n        );\n      }\n      return text(JSON.stringify({ target, user: payload }, null, 2));\n    }\n\n    default:\n      return text(`unknown tool: ${name}`, true);\n  }\n}\n\n/**\n * Serve MCP on stdio until the client disconnects.\n *\n * STDIO IS THE WHOLE TRANSPORT, deliberately. An HTTP/SSE server would need a\n * port, a lifetime and an auth story of its own; stdio is what every agent\n * runtime already launches, and the process inherits the caller's environment\n * — which is where the token and the target come from.\n *\n * NOTHING MAY BE WRITTEN TO STDOUT except protocol frames. `log.info` and\n * friends already go to stderr, which is why this can share the CLI's own\n * plumbing without corrupting the stream.\n */\nexport async function runMcp(ctx: Context): Promise<void> {\n  const server = new Server({ name: \"oxyc\", version: VERSION }, { capabilities: { tools: {} } });\n\n  server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));\n\n  server.setRequestHandler(CallToolRequestSchema, async (req) => {\n    try {\n      return await callTool(\n        ctx,\n        req.params.name,\n        (req.params.arguments ?? {}) as Record<string, unknown>\n      );\n    } catch (cause) {\n      // A throw here would kill the session. The model can act on a message;\n      // it cannot act on a dead transport.\n      const message = (cause as Error).message ?? String(cause);\n      // BOTH CHANNELS. A model gets one string, so there is no marker to\n      // distinguish them — but reading `hint` alone drops the one line that\n      // says what to DO, which is the half a model can act on.\n      const { hint, remedy } = cause as { hint?: string; remedy?: string };\n      // Blank line between them, the way every other renderer of these two\n      // separates them — a model given two consecutive imperatives with no\n      // boundary loses the distinction the second field exists to make.\n      // `!== undefined` for the narrowing TS gives it, and a length check\n      // because an empty string would open the block with a blank line —\n      // `filter(Boolean)` covered that and cost the narrowing, so both.\n      const extra = [hint, remedy].filter((line) => line !== undefined && line !== \"\").join(\"\\n\\n\");\n      return text(extra ? `${message}\\n\\n${extra}` : message, true);\n    }\n  });\n\n  await server.connect(new StdioServerTransport());\n\n  // `connect` returns once the transport is wired; the process must stay up\n  // until the client closes stdin.\n  await new Promise<void>((resolve) => {\n    process.stdin.on(\"close\", resolve);\n    server.onclose = resolve;\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,MAAM,iBAAyB;CAC7B,IAAI;EACF,MAAM,OAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;EACnD,KAAK,MAAM,aAAa,CACtB,QAAQ,MAAM,MAAM,cAAc,GAClC,QAAQ,MAAM,MAAM,MAAM,cAAc,CAC1C,GACE,IAAI,WAAW,SAAS,GACtB,OACG,KAAK,MAAM,aAAa,WAAW,MAAM,CAAC,CAAC,CAA0B,WAAW;CAIzF,QAAQ,CAGR;CACA,OAAO;AACT,EAAC,CAAE;;;;;AAMH,SAAS,KAAK,MAAc,UAAU,OAAO;CAC3C,OAAO;EAAE,SAAS,CAAC;GAAE,MAAM;GAAiB,MAAM;EAAK,CAAC;EAAG;CAAQ;AACrE;AAEA,MAAM,QAAQ;CACZ;EACE,MAAM;EACN,aACE;EAMF,aAAa;GACX,MAAM;GACN,YAAY;IACV,QAAQ;KACN,MAAM;KACN,aAAa;IACf;IACA,KAAK;KACH,MAAM;KACN,aACE;IAEJ;GACF;EACF;CACF;CACA;EACE,MAAM;EACN,aACE;EAGF,aAAa;GACX,MAAM;GACN,YAAY;IACV,MAAM;KAAE,MAAM;KAAU,aAAa;IAA+C;IACpF,QAAQ;KAAE,MAAM;KAAU,aAAa;IAA6B;GACtE;GACA,UAAU,CAAC,MAAM;EACnB;CACF;CACA;EACE,MAAM;EACN,aACE;EAIF,aAAa;GACX,MAAM;GACN,YAAY;IACV,MAAM;KAAE,MAAM;KAAU,aAAa;IAAkD;IACvF,QAAQ;KACN,MAAM;KACN,aAAa;IACf;IACA,QAAQ;KACN,MAAM;KACN,aACE;IAEJ;IACA,IAAI;KACF,MAAM;KACN,aACE;IAEJ;GACF;GACA,UAAU,CAAC,MAAM;EACnB;CACF;CACA;EACE,MAAM;EACN,aACE;EAGF,aAAa;GAAE,MAAM;GAAU,YAAY,CAAC;EAAE;CAChD;AACF;;;;;;;;;;;;;;;;AAiBA,MAAM,uBAAuB;;;;;;;;AAS7B,MAAM,wBAAwB;;AAG9B,SAAS,WAAW,QAAuD;CACzE,IAAI,CAAC,QAAQ,OAAO,CAAC;CACrB,OAAO,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,GAAG,KAAK,UAAU,CAAC,GAAG;AAC3E;;;;;;;;;AAUA,SAAS,YAAY,MAAc,MAA+B,UAA0B;CAC1F,MAAM,UAAU,SAAS,QAAQ,MAAM;EACrC,MAAM,IAAI,KAAK;EACf,OAAO,MAAM,UAAa,MAAM,QAAS,OAAO,MAAM,YAAY,EAAE,KAAK,MAAM;CACjF,CAAC;CACD,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,SAAS,GAAG,KAAK,SAAS,QAAQ,KAAK,IAAI,KAAK,EAAE,MAAM,SAAS,MAAM,CAAC;AAEtF;AAEA,eAAe,SAAS,KAAc,MAAc,MAA+B;CACjF,QAAQ,MAAR;EACE,KAAK,cAAc;GACjB,MAAM,UAAU,MAAM,YAAY;IAAE,QAAQ,IAAI,OAAO;IAAG,QAAQ,IAAI,YAAY;GAAE,CAAC;GACrF,MAAM,SAAU,KAAK,QAA+B,KAAK;GACzD,IAAI,UAAU,aAAa,SAAS,UAAU,MAAS;GACvD,IAAI,CAAC,KAAK,KAAK,UAAU,QAAQ,QAAQ,MAAM,EAAE,SAAS,UAAU;GAIpE,MAAM,YAAY,QAAQ,QACtB,8FACA;GAEJ,MAAM,QAAQ,SAAS,IAAI,KAAK,UAAU,MAAM,MAAM;GAMtD,IAAI,QAAQ,SAAS,uBACnB,OAAO,KACL,GAAG,YAAY,QAAQ,OAAO,eAAe,MAAM,qMAGnD,IACF;GAGF,IAAI,QAAQ,WAAW,GAIrB,OAAO,KACL,GAAG,UAAU,mBAAmB,KAAK,UAAU,UAAU,EAAE,EAAE,uFAE7D,IACF;GAKF,MAAM,YAAY,QAAQ,UAAU;GAOpC,MAAM,UAAU,QAAQ,KAAK,MAC3B,YACI;IAAE,QAAQ,EAAE;IAAQ,MAAM,EAAE;IAAM,YAAY,EAAE;IAAY,aAAa,EAAE;GAAY,IACvF;IAAE,QAAQ,EAAE;IAAQ,MAAM,EAAE;IAAM,YAAY,EAAE;GAAW,CACjE;GAUA,OAAO,KAAK,GAAG,YALE,YACb,KACA,SAAS,QAAQ,OAAO,eAAe,MAAM,wHAE1C,qBAAqB,uDACU,KAAK,UAAU,OAAO,GAAG;EACjE;EAEA,KAAK,cAAc;GACjB,YAAY,cAAc,MAAM,CAAC,MAAM,CAAC;GACxC,MAAM,MAAO,MAAM,YAAY;IAAE,QAAQ,IAAI,OAAO;IAAG,QAAQ,IAAI,YAAY;GAAE,CAAC;GAIlF,MAAM,SAAS,OAAO,KAAK,QAAQ,EAAE;GACrC,MAAM,SAAS,KAAK;GAKpB,MAAM,QAAQ,OAAO,QAAQ,IAAI,SAAS,CAAC,CAAC;GAC5C,MAAM,QAAQ,MAAM,QAAQ,CAAC,OAAO,eAAe,CAAC,MAAM,eAAe,MAAM,CAAC;GAChF,MAAM,MACJ,MAAM,SAAS,IACX,QACA,MAAM,QAAQ,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,SAAS,eAAe,MAAM,CAAC,CAAC;GAC9E,IAAI,IAAI,WAAW,GACjB,OAAO,KACL,4BAA4B,OAAO,oHAEnC,IACF;GAEF,MAAM,WAAW,OAAO,YACtB,IAAI,KAAK,CAAC,GAAG,SAAS,CACpB,GACA,SACI,OAAO,YACL,OAAO,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,KAAK,YAAY,MAAM,OAAO,YAAY,CAAC,CACpF,IACA,GACN,CAAC,CACH;GACA,OAAO,KAAK,KAAK,UAAU;IAAE,OAAO;IAAU,YAAY,IAAI;GAAW,GAAG,MAAM,CAAC,CAAC;EACtF;EAEA,KAAK,eAAe;GAClB,YAAY,eAAe,MAAM,CAAC,MAAM,CAAC;GACzC,MAAM,MAAM,OAAO,KAAK,QAAQ,EAAE;GAClC,MAAM,SAAS,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,YAAY,KAAK;GAC1D,MAAM,SAAS,YAAY,CAAC,GAAG,WAAW,KAAK,MAAiC,CAAC;GACjF,MAAM,OAAO,WAAW,OAAO,UAAU,SAAS;GAClD,MAAM,cAAc,CAAC;IAAC;IAAO;IAAQ;GAAQ,CAAC,CAAC,SAAS,IAAI;GAE5D,IAAI,OAAO,uBAAuB,cAAc,GAAG,GAAG,IAAI,aAAa,CAAC;GACxE,IAAI;GACJ,IAAI,OAAO,SAAS;IAClB,IAAI,aAAa,OAAO,KAAK,UAAU,OAAO,MAAM;SAC/C;KACH,MAAM,QAAQ,cAAc,OAAO,MAAM;KACzC,IAAI,OAAO,SAAS,KAAK,SAAS,GAAG,IAAI,MAAM,OAAO;IACxD;GACF;GAEA,MAAM,SAAS,IAAI,OAAO;GAC1B,MAAM,WAAW,kBAAkB,IAAI;GACvC,MAAM,WAAW,MAAM,QAAQ;IAC7B,QAAQ,IAAI,OAAO;IACnB;IACA,QAAQ;IACR;IACA,QAAQ,YAAY,SAAS,IAAI,YAAY,IAAI,IAAI,OAAO;IAC5D;GACF,CAAC;GAED,IAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAI9C,OAAO,KAAK,QAAQ,SAAS,OAAO,GAAG,SAAS,WAAW,IAAI,SAAS,QAAQ,IAAI;GAGtF,IAAI,SAAS,KAAK,KAAK,MAAM,QAC3B,OAAO,KACL,0IAEF;GAGF,MAAM,KAAK,KAAK;GAChB,IAAI,IAAI,OAAO,KAAK,MAAM,SAAS,MAAM,EAAE,CAAC;GAC5C,OAAO,KAAK,SAAS,IAAI;EAC3B;EAEA,KAAK,cAAc;GACjB,MAAM,SAAS,IAAI,OAAO;GAC1B,MAAM,WAAW,MAAM,QAAQ;IAC7B;IACA,MAAM;IACN,QAAQ;IACR,QAAQ,IAAI,OAAO;GACrB,CAAC;GACD,MAAM,UAAU,UAAU,SAAS,IAAI;GACvC,IAAI,YAAY,QAAQ,YAAY,QAClC,OAAO,KACL,WAAW,OAAO,2GAElB,IACF;GAEF,OAAO,KAAK,KAAK,UAAU;IAAE;IAAQ,MAAM;GAAQ,GAAG,MAAM,CAAC,CAAC;EAChE;EAEA,SACE,OAAO,KAAK,iBAAiB,QAAQ,IAAI;CAC7C;AACF;;;;;;;;;;;;;AAcA,eAAsB,OAAO,KAA6B;CACxD,MAAM,SAAS,IAAI,OAAO;EAAE,MAAM;EAAQ,SAAS;CAAQ,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;CAE7F,OAAO,kBAAkB,wBAAwB,aAAa,EAAE,OAAO,MAAM,EAAE;CAE/E,OAAO,kBAAkB,uBAAuB,OAAO,QAAQ;EAC7D,IAAI;GACF,OAAO,MAAM,SACX,KACA,IAAI,OAAO,MACV,IAAI,OAAO,aAAa,CAAC,CAC5B;EACF,SAAS,OAAO;GAGd,MAAM,UAAW,MAAgB,WAAW,OAAO,KAAK;GAIxD,MAAM,EAAE,MAAM,WAAW;GAOzB,MAAM,QAAQ,CAAC,MAAM,MAAM,CAAC,CAAC,QAAQ,SAAS,SAAS,UAAa,SAAS,EAAE,CAAC,CAAC,KAAK,MAAM;GAC5F,OAAO,KAAK,QAAQ,GAAG,QAAQ,MAAM,UAAU,SAAS,IAAI;EAC9D;CACF,CAAC;CAED,MAAM,OAAO,QAAQ,IAAI,qBAAqB,CAAC;CAI/C,MAAM,IAAI,SAAe,YAAY;EACnC,QAAQ,MAAM,GAAG,SAAS,OAAO;EACjC,OAAO,UAAU;CACnB,CAAC;AACH"}