@qase/mcp-server 1.1.8 → 2.0.1

package/build/utils/response-shape.js

@@ -0,0 +1,73 @@
+/**
+ * Recursively strip `null`, `undefined`, empty arrays, and empty objects
+ * from API responses before sending them to the LLM.
+ *
+ * Zero, false, and empty strings are preserved — they carry signal (e.g.
+ * `"description": ""` is different from missing description when the user
+ * asked about it).
+ *
+ * Returns `undefined` only when the input itself is `null` or `undefined`.
+ * For objects that collapse to zero kept fields, returns `{}` (an empty
+ * object) — callers should test with `Object.keys(result).length === 0` if
+ * they want to detect collapse, not `result === undefined`. Arrays that
+ * become empty are returned as `[]`.
+ */
+export function compactResponse(value) {
+    if (value === null || value === undefined)
+        return undefined;
+    if (typeof value !== 'object')
+        return value;
+    if (Array.isArray(value)) {
+        const compactedItems = [];
+        for (const item of value) {
+            const c = compactResponse(item);
+            if (c !== undefined)
+                compactedItems.push(c);
+        }
+        return compactedItems;
+    }
+    const record = value;
+    const out = {};
+    let kept = 0;
+    for (const key of Object.keys(record)) {
+        const c = compactResponse(record[key]);
+        if (c === undefined)
+            continue;
+        if (Array.isArray(c) && c.length === 0)
+            continue;
+        if (isPlainObject(c) && Object.keys(c).length === 0)
+            continue;
+        out[key] = c;
+        kept += 1;
+    }
+    return kept === 0 ? {} : out;
+}
+/**
+ * Keep only the listed top-level fields on an object, or apply the same
+ * projection to each element of an array.
+ *
+ * Special case: `['*']` returns the input unchanged.
+ */
+export function projectFields(value, fields) {
+    if (fields.length === 1 && fields[0] === '*')
+        return value;
+    if (Array.isArray(value)) {
+        return value.map((item) => projectSingle(item, fields));
+    }
+    return projectSingle(value, fields);
+}
+function projectSingle(obj, fields) {
+    if (!isPlainObject(obj))
+        return obj;
+    const src = obj;
+    const out = {};
+    for (const f of fields) {
+        if (f in src)
+            out[f] = src[f];
+    }
+    return out;
+}
+function isPlainObject(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+//# sourceMappingURL=response-shape.js.map

package/build/utils/response-shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-shape.js","sourceRoot":"","sources":["../../src/utils/response-shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,cAAc,GAAc,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,SAAS;gBAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjD,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC9D,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACb,IAAI,IAAI,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAI,KAAQ,EAAE,MAAgB;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;IAC1E,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,CAAM,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,MAAgB;IACnD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACpC,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/build/utils/rich-response.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Rich Response Utilities
+ *
+ * Helpers for building multi-block MCP tool responses with audience annotations.
+ * Tools that return RichToolResult bypass the default JSON.stringify wrapping
+ * and deliver content blocks directly to the client.
+ *
+ * - summaryBlock: human-readable markdown for the user (audience: ['user'])
+ * - dataBlock: structured JSON for the assistant (audience: ['assistant'])
+ */
+/** Symbol marker to distinguish rich results from plain handler returns */
+declare const RICH_MARKER: unique symbol;
+/** A single content block in a rich tool result */
+export interface ContentBlock {
+    type: 'text';
+    text: string;
+    annotations?: {
+        audience?: Array<'user' | 'assistant'>;
+        priority?: number;
+    };
+}
+/** Pre-formatted tool result with multiple content blocks */
+export interface RichToolResult {
+    [RICH_MARKER]: true;
+    content: ContentBlock[];
+    /** Machine-readable data for programmatic processing by MCP clients */
+    structuredContent?: Record<string, unknown>;
+}
+/**
+ * Type guard: returns true if the value is a RichToolResult.
+ */
+export declare function isRichResult(value: unknown): value is RichToolResult;
+/**
+ * Build a rich tool result from content blocks.
+ * @param content - Content blocks for display
+ * @param structuredContent - Machine-readable data for programmatic client processing
+ */
+export declare function richResult(content: ContentBlock[], structuredContent?: Record<string, unknown>): RichToolResult;
+/**
+ * Create a user-facing summary block (markdown).
+ * Shown to the user with highest priority.
+ */
+export declare function summaryBlock(text: string): ContentBlock;
+/**
+ * Create an assistant-facing data block (JSON).
+ * Consumed by the LLM for further reasoning.
+ */
+export declare function dataBlock(data: unknown): ContentBlock;
+/**
+ * Build a markdown table with properly padded columns.
+ *
+ * @param headers - Column header labels
+ * @param rows - Array of row data (same length as headers)
+ * @param align - Per-column alignment: 'l' (left, default), 'r' (right), 'c' (center)
+ */
+export declare function markdownTable(headers: string[], rows: string[][], align?: string[]): string;
+export {};
+//# sourceMappingURL=rich-response.d.ts.map

package/build/utils/rich-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rich-response.d.ts","sourceRoot":"","sources":["../../src/utils/rich-response.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,2EAA2E;AAC3E,QAAA,MAAM,WAAW,eAAiC,CAAC;AAEnD,mDAAmD;AACnD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE;QACZ,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;QACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,6DAA6D;AAC7D,MAAM,WAAW,cAAc;IAC7B,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;IACpB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAMpE;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,YAAY,EAAE,EACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,cAAc,CAMhB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAMvD;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY,CAMrD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAgC3F"}

package/build/utils/rich-response.js

@@ -0,0 +1,93 @@
+/**
+ * Rich Response Utilities
+ *
+ * Helpers for building multi-block MCP tool responses with audience annotations.
+ * Tools that return RichToolResult bypass the default JSON.stringify wrapping
+ * and deliver content blocks directly to the client.
+ *
+ * - summaryBlock: human-readable markdown for the user (audience: ['user'])
+ * - dataBlock: structured JSON for the assistant (audience: ['assistant'])
+ */
+/** Symbol marker to distinguish rich results from plain handler returns */
+const RICH_MARKER = Symbol.for('qase.rich_result');
+/**
+ * Type guard: returns true if the value is a RichToolResult.
+ */
+export function isRichResult(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        value[RICH_MARKER] === true);
+}
+/**
+ * Build a rich tool result from content blocks.
+ * @param content - Content blocks for display
+ * @param structuredContent - Machine-readable data for programmatic client processing
+ */
+export function richResult(content, structuredContent) {
+    return {
+        [RICH_MARKER]: true,
+        content,
+        ...(structuredContent && { structuredContent }),
+    };
+}
+/**
+ * Create a user-facing summary block (markdown).
+ * Shown to the user with highest priority.
+ */
+export function summaryBlock(text) {
+    return {
+        type: 'text',
+        text,
+        annotations: { audience: ['user'], priority: 1 },
+    };
+}
+/**
+ * Create an assistant-facing data block (JSON).
+ * Consumed by the LLM for further reasoning.
+ */
+export function dataBlock(data) {
+    return {
+        type: 'text',
+        text: JSON.stringify(data),
+        annotations: { audience: ['assistant'], priority: 0 },
+    };
+}
+/**
+ * Build a markdown table with properly padded columns.
+ *
+ * @param headers - Column header labels
+ * @param rows - Array of row data (same length as headers)
+ * @param align - Per-column alignment: 'l' (left, default), 'r' (right), 'c' (center)
+ */
+export function markdownTable(headers, rows, align) {
+    // Compute max width per column
+    const widths = headers.map((h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? '').length)));
+    const pad = (s, w, a) => {
+        const gap = w - s.length;
+        if (gap <= 0)
+            return s;
+        if (a === 'r')
+            return ' '.repeat(gap) + s;
+        if (a === 'c')
+            return ' '.repeat(Math.floor(gap / 2)) + s + ' '.repeat(Math.ceil(gap / 2));
+        return s + ' '.repeat(gap);
+    };
+    const aligns = align ?? headers.map(() => 'l');
+    const headerRow = '| ' + headers.map((h, i) => pad(h, widths[i], aligns[i])).join(' | ') + ' |';
+    const sepRow = '| ' +
+        widths
+            .map((w, i) => {
+            const a = aligns[i];
+            const bar = '-'.repeat(w);
+            if (a === 'r')
+                return bar.slice(0, -1) + ':';
+            if (a === 'c')
+                return ':' + bar.slice(1, -1) + ':';
+            return bar;
+        })
+            .join(' | ') +
+        ' |';
+    const dataRows = rows.map((r) => '| ' + r.map((c, i) => pad(c ?? '', widths[i], aligns[i])).join(' | ') + ' |');
+    return [headerRow, sepRow, ...dataRows].join('\n');
+}
+//# sourceMappingURL=rich-response.js.map

package/build/utils/rich-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rich-response.js","sourceRoot":"","sources":["../../src/utils/rich-response.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,2EAA2E;AAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAoBnD;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAAiC,CAAC,WAAW,CAAC,KAAK,IAAI,CACzD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,OAAuB,EACvB,iBAA2C;IAE3C,OAAO;QACL,CAAC,WAAW,CAAC,EAAE,IAAI;QACnB,OAAO;QACP,GAAG,CAAC,iBAAiB,IAAI,EAAE,iBAAiB,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI;QACJ,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;KACjD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;KACtD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,OAAiB,EAAE,IAAgB,EAAE,KAAgB;IACjF,+BAA+B;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAElG,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;IAE/C,MAAM,SAAS,GAAG,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAChG,MAAM,MAAM,GACV,IAAI;QACJ,MAAM;aACH,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACZ,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YAC7C,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YACnD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;aACD,IAAI,CAAC,KAAK,CAAC;QACd,IAAI,CAAC;IACP,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CACrF,CAAC;IAEF,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC"}

package/build/utils/server-context.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Server Context
+ *
+ * Provides access to the MCP Server instance within tool handlers
+ * via AsyncLocalStorage, following the same pattern as auth-context.ts.
+ *
+ * This enables features that require server-level access (elicitation,
+ * tool list notifications) without passing the server through handler signatures.
+ */
+import { AsyncLocalStorage } from 'async_hooks';
+import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
+/**
+ * Per-request server storage.
+ * Holds the Server instance for the current request context.
+ */
+export declare const serverStorage: AsyncLocalStorage<Server<{
+    method: string;
+    params?: {
+        [x: string]: unknown;
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    method: string;
+    params?: {
+        [x: string]: unknown;
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    [x: string]: unknown;
+    _meta?: {
+        [x: string]: unknown;
+        progressToken?: string | number | undefined;
+        "io.modelcontextprotocol/related-task"?: {
+            taskId: string;
+        } | undefined;
+    } | undefined;
+}>>;
+/**
+ * Get the Server instance from the current async context.
+ * Returns undefined if called outside of a serverStorage.run() scope.
+ */
+export declare function getServer(): Server | undefined;
+/**
+ * Ask the user to confirm a destructive action via MCP elicitation.
+ *
+ * Graceful degradation:
+ * - No server in context → proceed (return true)
+ * - Client doesn't support elicitation → proceed
+ * - elicitInput() throws → proceed (log error)
+ * - User declines or cancels → return false
+ */
+export declare function confirmDestructiveAction(toolName: string, args: Record<string, unknown>): Promise<boolean>;
+//# sourceMappingURL=server-context.d.ts.map

package/build/utils/server-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-context.d.ts","sourceRoot":"","sources":["../../src/utils/server-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAAkC,CAAC;AAE7D;;;GAGG;AACH,wBAAgB,SAAS,IAAI,MAAM,GAAG,SAAS,CAE9C;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,OAAO,CAAC,CAmClB"}

package/build/utils/server-context.js

@@ -0,0 +1,67 @@
+/**
+ * Server Context
+ *
+ * Provides access to the MCP Server instance within tool handlers
+ * via AsyncLocalStorage, following the same pattern as auth-context.ts.
+ *
+ * This enables features that require server-level access (elicitation,
+ * tool list notifications) without passing the server through handler signatures.
+ */
+import { AsyncLocalStorage } from 'async_hooks';
+/**
+ * Per-request server storage.
+ * Holds the Server instance for the current request context.
+ */
+export const serverStorage = new AsyncLocalStorage();
+/**
+ * Get the Server instance from the current async context.
+ * Returns undefined if called outside of a serverStorage.run() scope.
+ */
+export function getServer() {
+    return serverStorage.getStore();
+}
+/**
+ * Ask the user to confirm a destructive action via MCP elicitation.
+ *
+ * Graceful degradation:
+ * - No server in context → proceed (return true)
+ * - Client doesn't support elicitation → proceed
+ * - elicitInput() throws → proceed (log error)
+ * - User declines or cancels → return false
+ */
+export async function confirmDestructiveAction(toolName, args) {
+    const server = getServer();
+    if (!server)
+        return true;
+    // Check if the client supports elicitation
+    const caps = server.getClientCapabilities();
+    if (!caps?.elicitation)
+        return true;
+    try {
+        const argsPreview = Object.entries(args)
+            .map(([k, v]) => `  ${k}: ${JSON.stringify(v)}`)
+            .join('\n');
+        const result = await server.elicitInput({
+            message: `Confirm destructive action: ${toolName}\n\n${argsPreview}`,
+            requestedSchema: {
+                type: 'object',
+                properties: {
+                    confirm: {
+                        type: 'boolean',
+                        title: 'Confirm deletion',
+                        description: 'This will permanently delete the resource. Proceed?',
+                        default: false,
+                    },
+                },
+                required: ['confirm'],
+            },
+        });
+        return result.action === 'accept' && result.content?.confirm === true;
+    }
+    catch (error) {
+        // Elicitation failed — graceful degradation: proceed without confirmation
+        console.error('[Server] Elicitation failed, proceeding without confirmation:', error);
+        return true;
+    }
+}
+//# sourceMappingURL=server-context.js.map

package/build/utils/server-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-context.js","sourceRoot":"","sources":["../../src/utils/server-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,iBAAiB,EAAU,CAAC;AAE7D;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,aAAa,CAAC,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAgB,EAChB,IAA6B;IAE7B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,2CAA2C;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,WAAW;QAAE,OAAO,IAAI,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;aACrC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;YACtC,OAAO,EAAE,+BAA+B,QAAQ,OAAO,WAAW,EAAE;YACpE,eAAe,EAAE;gBACf,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE;wBACP,IAAI,EAAE,SAAS;wBACf,KAAK,EAAE,kBAAkB;wBACzB,WAAW,EAAE,qDAAqD;wBAClE,OAAO,EAAE,KAAK;qBACf;iBACF;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;aACtB;SACF,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,OAAO,CAAC,KAAK,CAAC,+DAA+D,EAAE,KAAK,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/build/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "1.1.8";
+export declare const VERSION = "2.0.1";
 //# sourceMappingURL=version.d.ts.map

package/build/version.js

@@ -1,3 +1,3 @@
 // Auto-generated by prebuild script — do not edit manually
-export const VERSION = '1.1.8';
+export const VERSION = '2.0.1';
 //# sourceMappingURL=version.js.map

package/docs/connect.md

@@ -0,0 +1,81 @@
+# Connect to the hosted Qase MCP
+
+The quickest way to use Qase — no install and no API token. Connect to the Qase-hosted MCP server at `https://mcp.qase.io/mcp` and sign in with your Qase account. Any MCP client that supports remote servers (OAuth 2.1) works; the client handles the OAuth flow for you — Claude, Cursor, Codex, and VS Code are shown below.
+
+> **Note:** The hosted Qase MCP is available on the **Enterprise** plan in Qase. On other plans you'll be denied access when connecting — [run the server yourself](self-run.md) with your own API token instead.
+
+Prefer to run the server yourself with your own `QASE_API_TOKEN`? See [Self-Run Guide (Local / stdio)](self-run.md).
+
+## Claude
+
+Qase publishes an official **Qase Test Management** connector in Claude's directory:
+
+1. In Claude, open **Settings → Connectors** and find **Qase Test Management**.
+2. Click **Connect** and complete the Qase sign-in when prompted.
+
+## Cursor
+
+Add the hosted server by URL in `~/.cursor/mcp.json` (global) or `.cursor/mcp.json` (project):
+
+```json
+{
+  "mcpServers": {
+    "qase": {
+      "url": "https://mcp.qase.io/mcp"
+    }
+  }
+}
+```
+
+Cursor opens your browser to sign in to Qase; the tools appear once you've authorized.
+
+## Codex
+
+**ChatGPT / Codex app** — open **Settings → MCPs → Add server**, enter the URL `https://mcp.qase.io/mcp`, and click **Authenticate**.
+
+**Codex CLI** — add to `~/.codex/config.toml`:
+
+```toml
+[mcp_servers.qase]
+url = "https://mcp.qase.io/mcp"
+auth = "oauth"
+```
+
+Then run `codex mcp login qase` and complete the Qase sign-in in your browser.
+
+> **Note:** Enter the URL exactly as shown — without surrounding quotes. A stray quote (or its encoded form, `%22`) in the server URL breaks OAuth; if a connection ever fails to authenticate, remove the server entry and re-add it, typing the URL by hand.
+
+## VS Code
+
+Add the hosted server to `.vscode/mcp.json` (workspace-scoped):
+
+```json
+{
+  "servers": {
+    "qase": {
+      "type": "http",
+      "url": "https://mcp.qase.io/mcp"
+    }
+  }
+}
+```
+
+Or run **MCP: Add Server** from the Command Palette (`⇧⌘P` / `Ctrl+Shift+P`), choose **HTTP**, and enter the URL. VS Code opens your browser to sign in to Qase; the tools appear once you've authorized.
+
+## Other remote clients
+
+Any MCP client that supports remote (HTTP) servers with OAuth 2.1 can connect the same way — point it at:
+
+```
+https://mcp.qase.io/mcp
+```
+
+In every case the hosted server authenticates via your Qase login (OAuth) — no local installation or `QASE_API_TOKEN` needed.
+
+## Active workspace
+
+The connector operates on the workspace currently selected in your Qase UI. To work in a different workspace, just switch it in Qase — the connector automatically routes subsequent requests to the newly selected workspace, with no need to reconnect or re-authorize.
+
+## Troubleshooting
+
+Connector not appearing, empty tool list, or OAuth sign-in failing? See [Troubleshooting](troubleshooting.md).