@remnux/mcp-server 0.1.66 → 0.1.68

package/dist/handlers/run-tool.js

@@ -6,6 +6,8 @@ import { parseToolOutput, hasParser } from "../parsers/index.js";
 import { toolRegistry } from "../tools/registry.js";
 import { filterStderrNoise } from "../utils/stderr-filter.js";
 import { OUTPUT_SENTINEL } from "../tools/invoker.js";
+import { createHash } from "crypto";
+import { saveOversizedOutput } from "./output-spill.js";
 const DISCOURAGED_PATTERNS = [
     {
         pattern: /^yara\s/,
@@ -32,9 +34,218 @@ const ADVISORY_PATTERNS = [
             "Other files → also run 'strings -el <file>' for Unicode (little-endian 16-bit).",
     },
 ];
+/**
+ * Split a shell command on unquoted, unescaped single `|` characters (pipe
+ * stages). `||` is a control operator, not a pipe, and `|` inside quotes or
+ * after a backslash is literal text, so none of those split. This is not a
+ * full shell parser; it only needs to find the pipeline's last stage.
+ */
+function splitPipeline(command) {
+    const stages = [];
+    let current = "";
+    let quote = null;
+    for (let i = 0; i < command.length; i++) {
+        const ch = command[i];
+        if (quote) {
+            current += ch;
+            if (ch === "\\" && quote === '"' && i + 1 < command.length) {
+                current += command[++i];
+            }
+            else if (ch === quote) {
+                quote = null;
+            }
+            continue;
+        }
+        if (ch === "\\" && i + 1 < command.length) {
+            current += ch + command[++i];
+            continue;
+        }
+        if (ch === "'" || ch === '"') {
+            quote = ch;
+            current += ch;
+            continue;
+        }
+        if (ch === "#" && (i === 0 || /\s/.test(command[i - 1]))) {
+            break; // the rest of the line is a shell comment
+        }
+        if (ch === "|") {
+            if (command[i + 1] === "|") {
+                current += "||";
+                i++;
+                continue;
+            }
+            if (command[i + 1] === "&")
+                i++; // `|&` pipes stderr too; still a pipe
+            stages.push(current);
+            current = "";
+            continue;
+        }
+        current += ch;
+    }
+    stages.push(current);
+    return stages;
+}
+/**
+ * Detect a `head` or `tail` stage that reads from a pipe (any stage after the
+ * first; `tail -n 50 file` with no pipe before it is deliberate paging).
+ * Excluded: `tail -f/-F/--follow` (streams rather than limits) and
+ * `tail -n +1` (returns every line). Such a stage discards producer output the
+ * server would otherwise have returned whole, with exit 0 and no other
+ * signal — the model-side mirror of server truncation, and an upstream
+ * `head -500 | grep` caps the producer just as a terminal one does. Returns
+ * the first such stage's text (whitespace-normalized, trailing redirects and
+ * operators dropped, length-capped) and which limiter it is, or undefined.
+ */
+export function detectPipedLimiter(command) {
+    const stages = splitPipeline(command);
+    for (let n = 1; n < stages.length; n++) {
+        // Keep only the command word and its arguments: drop anything after a
+        // redirect or control operator that follows the limiter.
+        const text = stages[n].trim().split(/\s*(?:\d*[<>]|&&|;)/)[0].trim();
+        const words = text.split(/\s+/).filter(Boolean);
+        if (words.length === 0)
+            continue;
+        const cmd = words[0].replace(/^.*\//, "");
+        if (cmd !== "head" && cmd !== "tail")
+            continue;
+        if (cmd === "tail") {
+            const args = words.slice(1);
+            const follows = args.some((w) => w === "--follow" || w.startsWith("--follow=") || /^-[A-Za-z]*[fF][A-Za-z]*$/.test(w));
+            if (follows)
+                continue;
+            // `tail -n +1` / `tail +1` / `--lines=+1` print from line 1: nothing is dropped
+            const fromStart = args.some((w, k) => w === "+1" || w === "--lines=+1" || (w === "-n" && args[k + 1] === "+1"));
+            if (fromStart)
+                continue;
+        }
+        return { limiter: cmd, stage: text.replace(/\s+/g, " ").slice(0, 60) };
+    }
+    return undefined;
+}
+// Response budgets (JS string length): 100 KiB of stdout, 50 KiB of stderr.
+const STDOUT_CAP_CHARS = 100 * 1024;
+const MAX_STDERR_RESPONSE = 50 * 1024;
+// Parsers run on captured stdout (not just the returned slice) up to this
+// bound, mirroring analyze_file's IOC_SCAN_CAP, so a finding past the response
+// cap is still reported rather than silently lost.
+const PARSE_CAP_CHARS = 512 * 1024;
+// Parsers can emit one finding per line, so the response carries at most this
+// many; findings_total reports the parsed count when capped.
+const MAX_FINDINGS = 500;
+function limiterAdvisory(l) {
+    const part = l.limiter === "head" ? "leading" : "trailing";
+    return (`PARTIAL: the pipeline stage '${l.stage}' keeps only the ${part} part of its input; anything past that ` +
+        `point is discarded with no signal, and a pipeline's exit status is its last stage's, not the producer's. ` +
+        `run_tool returns stdout whole up to ${STDOUT_CAP_CHARS.toLocaleString("en-US")} characters and says so when ` +
+        `it has to cut, so drop the ${l.limiter} stage, or select by content with grep.`);
+}
+/**
+ * Collect every matching command advisory (newline-joined) so a command like
+ * `strings x | head` carries both the INCOMPLETE and the PARTIAL guidance.
+ */
 function getCommandAdvisory(command) {
-    const matched = ADVISORY_PATTERNS.find((p) => p.match(command));
-    return matched?.advisory;
+    const advisories = ADVISORY_PATTERNS.filter((p) => p.match(command)).map((p) => p.advisory);
+    const limiter = detectPipedLimiter(command);
+    if (limiter)
+        advisories.push(limiterAdvisory(limiter));
+    return advisories.length > 0 ? advisories.join("\n") : undefined;
+}
+/** Count lines the way `wc -l` would, plus one for a final unterminated line. */
+function countLines(text) {
+    if (text.length === 0)
+        return 0;
+    let n = 0;
+    for (let i = 0; i < text.length; i++)
+        if (text.charCodeAt(i) === 10)
+            n++;
+    return text.endsWith("\n") ? n : n + 1;
+}
+/**
+ * Deterministic, sanitized filename for the redirect-to-file recovery recipe:
+ * derived only from the registry tool name (or the sanitized command word) and
+ * a hash of the full command, so re-running the same command maps to the same
+ * file and no untrusted text reaches the filename.
+ */
+function suggestedOutputFilename(fullCommand, toolName) {
+    const firstWord = fullCommand.trim().split(/\s/)[0]?.replace(/^.*\//, "") ?? "";
+    const base = (toolName ?? firstWord).replace(/[^A-Za-z0-9._-]/g, "_").slice(0, 32) || "cmd";
+    const hash = createHash("sha256").update(fullCommand).digest("hex").slice(0, 12);
+    return `run_tool-${base}-${hash}.stdout.txt`;
+}
+/**
+ * Per-stream truncation notice. Names the omitted line range with
+ * server-computed integers and gives a recovery recipe that can actually reach
+ * the tail; `head` is never offered as a remedy (it returns another prefix).
+ */
+function buildTruncationNotice(args) {
+    const parts = [];
+    const fmt = (n) => String(n); // raw integers: copy-safe into sed ranges
+    const cap = STDOUT_CAP_CHARS.toLocaleString("en-US");
+    // Quoted so an output directory with spaces still resolves (substitution is textual).
+    const outPath = `'${OUTPUT_SENTINEL}${args.outFile}'`;
+    const errPath = `'${OUTPUT_SENTINEL}${args.outFile.replace(/\.stdout\.txt$/, ".stderr.txt")}'`;
+    if (args.stdoutTruncated && args.stdoutReturnedLines === 0) {
+        // Not even one complete line fits: line ranges cannot help, so offer
+        // content and chunking recipes instead. (`cut -c` slices per line, not
+        // the stream, so it is not offered.)
+        parts.push(`stdout: ${fmt(args.stdoutCapturedLines)} line(s) captured (${fmt(args.stdoutCapturedLength)} characters); ` +
+            `the first line alone fills the ${cap}-character limit, so line ranges cannot help. Narrow by content ` +
+            `(e.g. \`<command> | grep -oE '<pattern>'\`) or chunk it: ` +
+            (args.savedFile
+                ? `the captured stdout is saved as ${outPath}; run_tool \`fold -w 1000 ${outPath} | sed -n '103,$p'\` ` +
+                    `(chunks of 1000 characters from character 102001 to the end; repeat with a later start if still cut). `
+                : args.outputDirSet
+                    ? `re-run with \` > ${outPath}\` appended, then \`fold -w 1000 ${outPath} | sed -n '103,$p'\` ` +
+                        `(chunks of 1000 characters from character 102001 to the end; repeat with a later start if still cut). `
+                    : `\`<command> | fold -w 1000 | sed -n '103,$p'\` (chunks of 1000 characters from character 102001; ` +
+                        `repeat with a later start if still cut). `) +
+            "'head' returns another prefix and cannot recover the omitted part.");
+    }
+    else if (args.stdoutTruncated) {
+        const from = args.stdoutReturnedLines + 1;
+        // Open-ended range: the line count describes captured stdout, which the
+        // connector trims and caps (10 MiB), so a fixed end could miss the tail.
+        const range = `${from},$p`;
+        let msg = `stdout: ${fmt(args.stdoutCapturedLines)} lines captured (${fmt(args.stdoutCapturedLength)} characters); ` +
+            `lines 1-${fmt(args.stdoutReturnedLines)} returned in full, the rest omitted (the cut can fall mid-line, ` +
+            `so the range below re-reads the cut line whole). `;
+        if (args.savedFile) {
+            msg +=
+                `The captured stdout is saved as ${outPath} (the server resolves %OUTPUT% to the output directory): ` +
+                    `read the omitted part with run_tool \`sed -n '${range}' ${outPath}\`, grep that file for specifics, ` +
+                    `or fetch it with download_file '${args.outFile}'. `;
+        }
+        else if (args.outputDirSet) {
+            msg +=
+                `To read the omitted part: re-run the same command with \` > ${outPath}\` appended ` +
+                    `(the server resolves %OUTPUT% to the output directory), then run_tool \`sed -n '${range}' ${outPath}\` ` +
+                    `(grep that file for specifics; download_file fetches '${args.outFile}'). If re-running is cheap, ` +
+                    `\`<command> | sed -n '${range}'\` does it in one call. `;
+        }
+        else {
+            msg +=
+                `To read the omitted part, re-run as \`<command> | sed -n '${range}'\` (repeat with a later start if that ` +
+                    `is still over the limit), or narrow by content with grep. `;
+        }
+        msg += "'head' returns another prefix and cannot recover the omitted tail.";
+        parts.push(msg);
+    }
+    if (args.stderrTruncated) {
+        let msg = `stderr: ${fmt(args.stderrCapturedLength)} characters captured (after noise filtering), the first ` +
+            `${fmt(MAX_STDERR_RESPONSE)} returned` +
+            (args.stdoutTruncated ? ". " : "; stdout is complete. ");
+        if (args.outputDirSet) {
+            msg +=
+                `To keep all of stderr, re-run as \`( <command> ) 2> ${errPath}\` (the parentheses matter for a pipeline: ` +
+                    `a bare 2> covers only its last stage; use \`( <command> ) > ${outPath} 2>&1\` for both streams) and ` +
+                    `query that file with grep or sed -n.`;
+        }
+        else {
+            msg += "To see more of it, re-run as `( <command> ) 2>&1 | grep -i error` or with a similar filter.";
+        }
+        parts.push(msg);
+    }
+    return parts.join("\n");
 }
 // An actual js_unshroud capture invocation: the executable (wrapper, full or
 // quoted path, or raw js_unshroud-linux-x64 binary) followed by the `run`
@@ -142,8 +353,7 @@ export async function handleRunTool(deps, args) {
             }, startTime);
         }
     }
-    const MAX_STDOUT_RESPONSE = 100 * 1024; // 100KB — fits in LLM context
-    const MAX_STDERR_RESPONSE = 50 * 1024;
+    const MAX_STDOUT_RESPONSE = STDOUT_CAP_CHARS; // 100KB — fits in LLM context
     try {
         const execOptions = {
             timeout: (args.timeout || config.timeout) * 1000,
@@ -156,27 +366,67 @@ export async function handleRunTool(deps, args) {
         let stdout = result.stdout || "";
         let stderr = result.stderr || "";
         stderr = filterStderrNoise(stderr);
-        let truncated = false;
         const fullStdoutLength = stdout.length;
-        if (stdout.length > MAX_STDOUT_RESPONSE) {
+        const stderrCapturedLength = stderr.length; // after noise filtering
+        const stdoutTruncated = stdout.length > MAX_STDOUT_RESPONSE;
+        const stderrTruncated = stderr.length > MAX_STDERR_RESPONSE;
+        const truncated = stdoutTruncated || stderrTruncated;
+        // Line accounting only on the (rare) truncated path; the returned stdout
+        // stays an exact slice with nothing appended, so a forged marker inside
+        // the sample's output cannot masquerade as server metadata.
+        let stdoutCapturedLines = 0;
+        let stdoutReturnedLines = 0;
+        if (stdoutTruncated) {
+            stdoutCapturedLines = countLines(stdout);
             stdout = stdout.slice(0, MAX_STDOUT_RESPONSE);
-            truncated = true;
+            // complete lines inside the slice; a trailing partial line is re-read by the recipe
+            for (let i = 0; i < stdout.length; i++)
+                if (stdout.charCodeAt(i) === 10)
+                    stdoutReturnedLines++;
         }
-        if (stderr.length > MAX_STDERR_RESPONSE) {
+        if (stderrTruncated) {
             stderr = stderr.slice(0, MAX_STDERR_RESPONSE);
-            truncated = true;
         }
-        // Auto-parse output if command matches a known tool with a parser
+        // Auto-parse output if command matches a known tool with a parser. Parse
+        // the CAPTURED stdout (bounded), not just the returned slice, so a finding
+        // past the response cap is still reported; findings_scope says which.
         let findings;
+        let findingsTotal;
         let parsedMetadata;
+        let findingsScope;
         const toolName = detectToolName(fullCommand);
-        if (toolName && hasParser(toolName) && stdout) {
-            const parsed = parseToolOutput(toolName, stdout);
+        const capturedStdout = result.stdout || "";
+        if (toolName && hasParser(toolName) && capturedStdout) {
+            const parseInput = stdoutTruncated ? capturedStdout.slice(0, PARSE_CAP_CHARS) : stdout;
+            const parsed = parseToolOutput(toolName, parseInput);
             if (parsed.parsed) {
                 findings = parsed.findings;
                 parsedMetadata = parsed.metadata;
+                if (findings.length > MAX_FINDINGS) {
+                    findingsTotal = findings.length;
+                    findings = findings.slice(0, MAX_FINDINGS);
+                }
+                // The agent's own head/tail limited the producer: that loss is
+                // upstream of anything the server captured, so it takes precedence.
+                if (detectPipedLimiter(fullCommand)) {
+                    findingsScope = "pipeline_limited";
+                }
+                else if (stdoutTruncated) {
+                    findingsScope = capturedStdout.length > PARSE_CAP_CHARS ? "captured_prefix" : "captured_stdout";
+                }
             }
         }
+        // Spill the captured stdout to the output directory (bounded, hash-named,
+        // idempotent per command) so the omitted tail can be read without
+        // re-running the tool. Non-fatal: on failure the notice carries the
+        // re-run recipe instead.
+        const outFile = suggestedOutputFilename(fullCommand, toolName);
+        let stdoutSavedFile;
+        if (stdoutTruncated) {
+            const spill = await saveOversizedOutput(connector, config.outputDir, outFile, capturedStdout);
+            if (spill.saved)
+                stdoutSavedFile = outFile;
+        }
         // Check for advisory (non-blocking guidance)
         const advisory = getCommandAdvisory(fullCommand);
         // Output-conditioned advisory (tools that exit 0 on failure); scans the
@@ -194,10 +444,31 @@ export async function handleRunTool(deps, args) {
             exit_code: result.exitCode,
             truncated,
             ...(truncated && {
-                truncation_notice: "Output exceeded response size limit. Use 'run_tool' with '| head -N' or redirect to a file for full output.",
-                full_stdout_length: fullStdoutLength,
+                truncation_notice: buildTruncationNotice({
+                    stdoutTruncated,
+                    stderrTruncated,
+                    stdoutCapturedLength: fullStdoutLength,
+                    stdoutCapturedLines,
+                    stdoutReturnedLines,
+                    stderrCapturedLength,
+                    outputDirSet: Boolean(config.outputDir),
+                    outFile,
+                    savedFile: Boolean(stdoutSavedFile),
+                }),
+                full_stdout_length: fullStdoutLength, // legacy alias of stdout_captured_length
+                stdout_truncated: stdoutTruncated,
+                stderr_truncated: stderrTruncated,
+                stdout_captured_length: fullStdoutLength,
+                stderr_captured_length: stderrCapturedLength,
+                ...(stdoutTruncated && {
+                    stdout_captured_lines: stdoutCapturedLines,
+                    stdout_returned_lines: stdoutReturnedLines,
+                }),
+                ...(stdoutSavedFile && { stdout_saved_file: stdoutSavedFile }),
             }),
             ...(findings && { findings, parsed_metadata: parsedMetadata }),
+            ...(findingsTotal !== undefined && { findings_total: findingsTotal }),
+            ...(findings && findingsScope && { findings_scope: findingsScope }),
             ...(advisory && { advisory }),
             ...(outputAdvisory && { output_advisory: outputAdvisory }),
         }, startTime);

package/dist/handlers/run-tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-tool.js","sourceRoot":"","sources":["../../src/handlers/run-tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAYtD,MAAM,oBAAoB,GAAyB;IACjD;QACE,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,4BAA4B;QACrC,UAAU,EACR,0FAA0F;YAC1F,+DAA+D;YAC/D,6EAA6E;KAChF;CACF,CAAC;AAWF,MAAM,iBAAiB,GAAsB;IAC3C;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjE,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC1C,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,EACN,yEAAyE;YACzE,qFAAqF;YACrF,iFAAiF;KACpF;CACF,CAAC;AAEF,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,OAAO,OAAO,EAAE,QAAQ,CAAC;AAC3B,CAAC;AAoBD,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,sDAAsD,CAAC;AAEnF,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,sCAAsC;AACtC,MAAM,0BAA0B,GAC9B,yKAAyK,CAAC;AAE5K,MAAM,wBAAwB,GAA4B;IACxD;QACE,0EAA0E;QAC1E,qEAAqE;QACrE,qBAAqB;QACrB,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CACvC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;gBACtC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,QAAQ,EACN,iFAAiF;YACjF,iFAAiF;YACjF,8EAA8E;YAC9E,8EAA8E;YAC9E,iFAAiF;YACjF,gFAAgF;YAChF,4EAA4E;KAC/E;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAA0B;IACnD,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,OAAe;IAEf,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,oFAAoF;IACpF,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,wFAAwF;IACxF,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAiB,EACjB,IAAiB;IAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEnC,sEAAsE;IACtE,4EAA4E;IAC5E,0EAA0E;IAC1E,oEAAoE;IACpE,8EAA8E;IAC9E,+EAA+E;IAC/E,wEAAwE;IACxE,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG,UAAU,KAAK,EAAE,CAAC;QAC9C,OAAO,GAAG,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,yEAAyE;IACzE,8EAA8E;IAC9E,mFAAmF;IACnF,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACxE,CAAC;IAED,qBAAqB;IACrB,IAAI,WAAW,GAAG,OAAO,CAAC;IAC1B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,mDAAmD;QACnD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBACzB,OAAO,WAAW,CAAC,UAAU,EAAE,IAAI,WAAW,CAC5C,cAAc,CAAC,KAAK,IAAI,yBAAyB,EACjD,cAAc,EACd,YAAY,EACZ,kDAAkD,CACnD,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,6EAA6E;QAC7E,0FAA0F;QAC1F,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC;QAC7I,WAAW,GAAG,GAAG,OAAO,KAAK,iBAAiB,GAAG,CAAC;IACpD,CAAC;IAED,+CAA+C;IAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO,WAAW,CAAC,UAAU,EAAE,IAAI,WAAW,CAC5C,UAAU,CAAC,KAAK,IAAI,iBAAiB,EACrC,iBAAiB,EACjB,UAAU,EACV,4EAA4E,CAC7E,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,cAAc,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9E,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,cAAc,CACnB,UAAU,EACV;gBACE,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,IAAI;gBACrB,IAAI,EAAE,2FAA2F;aAClG,EACD,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,8BAA8B;IACtE,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,WAAW,GAAsC;YACrD,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI;SACjD,CAAC;QAEF,iEAAiE;QACjE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,WAAW,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAEtE,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QACjC,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QAEjC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAEnC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;QAEvC,IAAI,MAAM,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC9C,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC9C,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAED,kEAAkE;QAClE,IAAI,QAAQ,CAAC;QACb,IAAI,cAAc,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBAC3B,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;YACnC,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAEjD,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,cAAc,GAAG,iBAAiB,CAAC;YACvC,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,OAAO,cAAc,CAAC,UAAU,EAAE;YAChC,OAAO,EAAE,WAAW;YACpB,MAAM;YACN,MAAM;YACN,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,SAAS;YACT,GAAG,CAAC,SAAS,IAAI;gBACf,iBAAiB,EAAE,6GAA6G;gBAChI,kBAAkB,EAAE,gBAAgB;aACrC,CAAC;YACF,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;YAC9D,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC7B,GAAG,CAAC,cAAc,IAAI,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;SAC3D,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,UAAU,EAAE,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,8DAA8D;IAC9D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAEpE,gDAAgD;IAChD,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,GAAG,CAAC,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,iEAAiE;IACjE,IAAI,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"run-tool.js","sourceRoot":"","sources":["../../src/handlers/run-tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAYxD,MAAM,oBAAoB,GAAyB;IACjD;QACE,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,4BAA4B;QACrC,UAAU,EACR,0FAA0F;YAC1F,+DAA+D;YAC/D,6EAA6E;KAChF;CACF,CAAC;AAWF,MAAM,iBAAiB,GAAsB;IAC3C;QACE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjE,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC1C,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,EACN,yEAAyE;YACzE,qFAAqF;YACrF,iFAAiF;KACpF;CACF,CAAC;AAEF;;;;;GAKG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAqB,IAAI,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,EAAE,CAAC;YACd,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC3D,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC;iBAAM,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBACxB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1C,OAAO,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,KAAK,GAAG,EAAE,CAAC;YACX,OAAO,IAAI,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,0CAA0C;QACnD,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC3B,OAAO,IAAI,IAAI,CAAC;gBAChB,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC,CAAC,sCAAsC;YACvE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe;IAEf,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM;YAAE,SAAS;QAC/C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAC5F,CAAC;YACF,IAAI,OAAO;gBAAE,SAAS;YACtB,gFAAgF;YAChF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YAChH,IAAI,SAAS;gBAAE,SAAS;QAC1B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACpC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,0EAA0E;AAC1E,+EAA+E;AAC/E,mDAAmD;AACnD,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC;AACnC,8EAA8E;AAC9E,6DAA6D;AAC7D,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,SAAS,eAAe,CAAC,CAA8C;IACrE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAC3D,OAAO,CACL,gCAAgC,CAAC,CAAC,KAAK,oBAAoB,IAAI,yCAAyC;QACxG,2GAA2G;QAC3G,uCAAuC,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC,+BAA+B;QAC9G,8BAA8B,CAAC,CAAC,OAAO,yCAAyC,CACjF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,OAAO;QAAE,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,CAAC,EAAE,CAAC;IACzE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,WAAmB,EAAE,QAA4B;IAChF,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAChF,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC;IAC5F,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,OAAO,YAAY,IAAI,IAAI,IAAI,aAAa,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,IAW9B;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,0CAA0C;IAChF,MAAM,GAAG,GAAG,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACrD,sFAAsF;IACtF,MAAM,OAAO,GAAG,IAAI,eAAe,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC,GAAG,CAAC;IAC/F,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,mBAAmB,KAAK,CAAC,EAAE,CAAC;QAC3D,qEAAqE;QACrE,uEAAuE;QACvE,qCAAqC;QACrC,KAAK,CAAC,IAAI,CACR,WAAW,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,gBAAgB;YAC5G,kCAAkC,GAAG,kEAAkE;YACvG,2DAA2D;YAC3D,CAAC,IAAI,CAAC,SAAS;gBACb,CAAC,CAAC,mCAAmC,OAAO,6BAA6B,OAAO,uBAAuB;oBACrG,wGAAwG;gBAC1G,CAAC,CAAC,IAAI,CAAC,YAAY;oBACnB,CAAC,CAAC,oBAAoB,OAAO,oCAAoC,OAAO,uBAAuB;wBAC7F,wGAAwG;oBAC1G,CAAC,CAAC,mGAAmG;wBACnG,2CAA2C,CAAC;YAChD,oEAAoE,CACrE,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC1C,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,KAAK,GAAG,GAAG,IAAI,KAAK,CAAC;QAC3B,IAAI,GAAG,GACL,WAAW,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,oBAAoB,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,gBAAgB;YAC1G,WAAW,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,kEAAkE;YAC1G,mDAAmD,CAAC;QACtD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG;gBACD,mCAAmC,OAAO,2DAA2D;oBACrG,iDAAiD,KAAK,KAAK,OAAO,oCAAoC;oBACtG,mCAAmC,IAAI,CAAC,OAAO,KAAK,CAAC;QACzD,CAAC;aAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,GAAG;gBACD,+DAA+D,OAAO,cAAc;oBACpF,mFAAmF,KAAK,KAAK,OAAO,KAAK;oBACzG,yDAAyD,IAAI,CAAC,OAAO,8BAA8B;oBACnG,yBAAyB,KAAK,2BAA2B,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,GAAG;gBACD,6DAA6D,KAAK,yCAAyC;oBAC3G,4DAA4D,CAAC;QACjE,CAAC;QACD,GAAG,IAAI,oEAAoE,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,IAAI,GAAG,GACL,WAAW,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,0DAA0D;YACnG,GAAG,GAAG,CAAC,mBAAmB,CAAC,WAAW;YACtC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,GAAG;gBACD,uDAAuD,OAAO,6CAA6C;oBAC3G,+DAA+D,OAAO,gCAAgC;oBACtG,sCAAsC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,6FAA6F,CAAC;QACvG,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAoBD,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,sDAAsD,CAAC;AAEnF,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,sCAAsC;AACtC,MAAM,0BAA0B,GAC9B,yKAAyK,CAAC;AAE5K,MAAM,wBAAwB,GAA4B;IACxD;QACE,0EAA0E;QAC1E,qEAAqE;QACrE,qBAAqB;QACrB,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CACvC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;gBACtC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,QAAQ,EACN,iFAAiF;YACjF,iFAAiF;YACjF,8EAA8E;YAC9E,8EAA8E;YAC9E,iFAAiF;YACjF,gFAAgF;YAChF,4EAA4E;KAC/E;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAA0B;IACnD,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,OAAe;IAEf,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,oFAAoF;IACpF,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,wFAAwF;IACxF,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAiB,EACjB,IAAiB;IAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEnC,sEAAsE;IACtE,4EAA4E;IAC5E,0EAA0E;IAC1E,oEAAoE;IACpE,8EAA8E;IAC9E,+EAA+E;IAC/E,wEAAwE;IACxE,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG,UAAU,KAAK,EAAE,CAAC;QAC9C,OAAO,GAAG,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,yEAAyE;IACzE,8EAA8E;IAC9E,mFAAmF;IACnF,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACxE,CAAC;IAED,qBAAqB;IACrB,IAAI,WAAW,GAAG,OAAO,CAAC;IAC1B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,mDAAmD;QACnD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBACzB,OAAO,WAAW,CAAC,UAAU,EAAE,IAAI,WAAW,CAC5C,cAAc,CAAC,KAAK,IAAI,yBAAyB,EACjD,cAAc,EACd,YAAY,EACZ,kDAAkD,CACnD,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,6EAA6E;QAC7E,0FAA0F;QAC1F,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC;QAC7I,WAAW,GAAG,GAAG,OAAO,KAAK,iBAAiB,GAAG,CAAC;IACpD,CAAC;IAED,+CAA+C;IAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO,WAAW,CAAC,UAAU,EAAE,IAAI,WAAW,CAC5C,UAAU,CAAC,KAAK,IAAI,iBAAiB,EACrC,iBAAiB,EACjB,UAAU,EACV,4EAA4E,CAC7E,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,cAAc,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9E,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,cAAc,CACnB,UAAU,EACV;gBACE,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,IAAI;gBACrB,IAAI,EAAE,2FAA2F;aAClG,EACD,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,CAAC,8BAA8B;IAE5E,IAAI,CAAC;QACH,MAAM,WAAW,GAAsC;YACrD,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI;SACjD,CAAC;QAEF,iEAAiE;QACjE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,WAAW,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAEtE,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QACjC,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QAEjC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAEnC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;QACvC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,wBAAwB;QACpE,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,GAAG,mBAAmB,CAAC;QAC5D,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,GAAG,mBAAmB,CAAC;QAC5D,MAAM,SAAS,GAAG,eAAe,IAAI,eAAe,CAAC;QAErD,yEAAyE;QACzE,wEAAwE;QACxE,4DAA4D;QAC5D,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAC5B,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAC5B,IAAI,eAAe,EAAE,CAAC;YACpB,mBAAmB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC9C,oFAAoF;YACpF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;oBAAE,mBAAmB,EAAE,CAAC;QACjG,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAChD,CAAC;QAED,yEAAyE;QACzE,2EAA2E;QAC3E,sEAAsE;QACtE,IAAI,QAAQ,CAAC;QACb,IAAI,aAAiC,CAAC;QACtC,IAAI,cAAc,CAAC;QACnB,IAAI,aAAqF,CAAC;QAC1F,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QAC3C,IAAI,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC;YACtD,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACvF,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBAC3B,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;oBACnC,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;oBAChC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;gBAC7C,CAAC;gBACD,+DAA+D;gBAC/D,oEAAoE;gBACpE,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;oBACpC,aAAa,GAAG,kBAAkB,CAAC;gBACrC,CAAC;qBAAM,IAAI,eAAe,EAAE,CAAC;oBAC3B,aAAa,GAAG,cAAc,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;gBAClG,CAAC;YACH,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,kEAAkE;QAClE,oEAAoE;QACpE,yBAAyB;QACzB,MAAM,OAAO,GAAG,uBAAuB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,eAAmC,CAAC;QACxC,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;YAC9F,IAAI,KAAK,CAAC,KAAK;gBAAE,eAAe,GAAG,OAAO,CAAC;QAC7C,CAAC;QAED,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAEjD,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,cAAc,GAAG,iBAAiB,CAAC;YACvC,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,OAAO,cAAc,CAAC,UAAU,EAAE;YAChC,OAAO,EAAE,WAAW;YACpB,MAAM;YACN,MAAM;YACN,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,SAAS;YACT,GAAG,CAAC,SAAS,IAAI;gBACf,iBAAiB,EAAE,qBAAqB,CAAC;oBACvC,eAAe;oBACf,eAAe;oBACf,oBAAoB,EAAE,gBAAgB;oBACtC,mBAAmB;oBACnB,mBAAmB;oBACnB,oBAAoB;oBACpB,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;oBACvC,OAAO;oBACP,SAAS,EAAE,OAAO,CAAC,eAAe,CAAC;iBACpC,CAAC;gBACF,kBAAkB,EAAE,gBAAgB,EAAE,yCAAyC;gBAC/E,gBAAgB,EAAE,eAAe;gBACjC,gBAAgB,EAAE,eAAe;gBACjC,sBAAsB,EAAE,gBAAgB;gBACxC,sBAAsB,EAAE,oBAAoB;gBAC5C,GAAG,CAAC,eAAe,IAAI;oBACrB,qBAAqB,EAAE,mBAAmB;oBAC1C,qBAAqB,EAAE,mBAAmB;iBAC3C,CAAC;gBACF,GAAG,CAAC,eAAe,IAAI,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC;aAC/D,CAAC;YACF,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;YAC9D,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;YACrE,GAAG,CAAC,QAAQ,IAAI,aAAa,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;YACnE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC7B,GAAG,CAAC,cAAc,IAAI,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;SAC3D,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,UAAU,EAAE,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,8DAA8D;IAC9D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAEpE,gDAAgD;IAChD,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,GAAG,CAAC,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,iEAAiE;IACjE,IAAI,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { OAuthTokenVerifier } from "@modelcontextprotocol/sdk/server/auth/provider.js";
 import { type ConnectorConfig } from "./connectors/index.js";
 export interface ServerConfig extends ConnectorConfig {
     samplesDir: string;
@@ -14,4 +15,15 @@ export interface ServerConfig extends ConnectorConfig {
 }
 export declare function createServer(config: ServerConfig): Promise<McpServer>;
 export declare function startServer(config: ServerConfig): Promise<void>;
+/**
+ * Bearer-token verifier for the HTTP transport.
+ *
+ * Exported so tests exercise the real verifier rather than a copy — a duplicated
+ * verifier in the test helper cannot catch a defect in this one.
+ *
+ * Throws InvalidTokenError, not a bare Error: requireBearerAuth maps
+ * InvalidTokenError to 401 and *anything else* to 500, so a bare Error reports a
+ * wrong token as a server fault.
+ */
+export declare function createTokenVerifier(token: string): OAuthTokenVerifier;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAOtF,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA6C9E,MAAM,WAAW,YAAa,SAAQ,eAAe;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,YAAY,sBAmbtD;AAED,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,iBAqCrD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAMtF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AAE5F,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA+C9E,MAAM,WAAW,YAAa,SAAQ,eAAe;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,YAAY,sBAoctD;AAED,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,iBAqCrD;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,CAYrE"}

package/dist/index.js

@@ -5,8 +5,9 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import { createMcpExpressApp } from "@modelcontextprotocol/sdk/server/express.js";
 import { requireBearerAuth } from "@modelcontextprotocol/sdk/server/auth/middleware/bearerAuth.js";
+import { InvalidTokenError } from "@modelcontextprotocol/sdk/server/auth/errors.js";
 import { createConnector } from "./connectors/index.js";
-import { runToolSchema, getFileInfoSchema, listFilesSchema, extractArchiveSchema, uploadFromHostSchema, downloadFromUrlSchema, downloadFileSchema, analyzeFileSchema, suggestToolsSchema, extractIOCsSchema, checkToolsSchema, getToolHelpSchema, getReportTemplateSchema, getReportGuidanceSchema, getOsintGuidanceSchema, checkBehaviorPrerequisitesSchema, verifyStringUsageSchema, compareFilesSchema, } from "./schemas/tools.js";
+import { runToolSchema, getFileInfoSchema, listFilesSchema, extractArchiveSchema, uploadFromHostSchema, downloadFromUrlSchema, downloadFileSchema, analyzeFileSchema, suggestToolsSchema, extractIOCsSchema, checkToolsSchema, getServerInfoSchema, getToolHelpSchema, getReportTemplateSchema, getReportGuidanceSchema, getOsintGuidanceSchema, checkBehaviorPrerequisitesSchema, verifyStringUsageSchema, compareFilesSchema, } from "./schemas/tools.js";
 import { SessionState, DEFAULT_ARCHIVE_PASSWORD } from "./state/session.js";
 import { handleRunTool } from "./handlers/run-tool.js";
 import { handleGetFileInfo } from "./handlers/get-file-info.js";
@@ -18,6 +19,7 @@ import { handleDownloadFile } from "./handlers/download-file.js";
 import { handleAnalyzeFile } from "./handlers/analyze-file.js";
 import { handleExtractIOCs } from "./handlers/extract-iocs.js";
 import { handleCheckTools } from "./handlers/check-tools.js";
+import { handleGetServerInfo } from "./handlers/get-server-info.js";
 import { handleSuggestTools } from "./handlers/suggest-tools.js";
 import { handleGetToolHelp } from "./handlers/get-tool-help.js";
 import { handleGetReportTemplate, handleGetReportGuidance } from "./handlers/report.js";
@@ -73,7 +75,10 @@ export async function createServer(config) {
         sessionState,
     };
     // Tool: run_tool - Execute a command in REMnux
-    server.tool("run_tool", "Execute a command in REMnux. Supports piped commands (e.g., 'oledump.py sample.doc | grep VBA'). " +
+    server.tool("run_tool", "Execute a command in REMnux. Supports piped commands (e.g., 'oledump.py /home/remnux/files/samples/sample.doc | grep VBA'; " +
+        "use input_file for a single-tool command, or an absolute path inline when piping). " +
+        "stdout is returned whole up to 102,400 characters (see the command parameter for the truncation contract), " +
+        "so do not pre-cap output with '| head'; filter by content with grep instead. " +
         "String extraction: For PE files use 'pestr'; for non-PE use 'strings' (ASCII) and 'strings -el' (Unicode). " +
         "Note: capa matches under namespaces like collection/* or data-manipulation/* can be artifact-level (matched " +
         "on strings/data) rather than behavioral; a behavioral capability requires the corresponding APIs to be " +
@@ -125,10 +130,12 @@ export async function createServer(config) {
         "Returns file metadata (hashes, type, size). Supports custom HTTP headers " +
         "and an optional thug mode for sites requiring JavaScript execution.", downloadFromUrlSchema.shape, (args) => handleDownloadFromUrl(deps, args));
     // Tool: download_file - Download a file from the output directory
-    server.tool("download_file", "Download a file from the output directory (returns base64-encoded content). Use this to retrieve analysis results. " +
+    server.tool("download_file", "Download a file from the output directory to a directory on the host (output_path); returns the host path. " +
+        "Use this to retrieve analysis results, including the text files the server saves when tool output exceeds " +
+        "a response budget (run_tool: stdout_saved_file, e.g. run_tool-<tool>-<hash>.stdout.txt; analyze_file: " +
+        "<tool>-<sample>.txt). To read such a file in-session instead, use run_tool with grep/sed -n on %OUTPUT%/<file>. " +
         "Files are wrapped in a password-protected archive by default to prevent AV/EDR triggers. " +
-        "Pass archive: false for harmless files like text reports. " +
-        "Provide output_path to save directly to the host filesystem.", downloadFileSchema.shape, (args) => handleDownloadFile(deps, args));
+        "Pass archive: false for harmless files like text reports.", downloadFileSchema.shape, (args) => handleDownloadFile(deps, args));
     // Tool: analyze_file - Auto-analyze a file using appropriate REMnux tools
     server.tool("analyze_file", "Auto-analyze a file using REMnux tools appropriate for the detected file type. Runs `file` to detect type, then executes matching tools (e.g., PE → peframe/capa, PDF → pdfid/pdf-parser, Office → olevba/oleid). Use `depth` to control analysis intensity: 'quick' (triage only), 'standard' (default), 'deep' (includes expensive tools). Note: 'standard' is sufficient for most files; use 'deep' only when standard doesn't reveal enough. Output includes a capability_evidence field (behavior_capable vs artifact_only) and per-capa evidence_types tags so you can tell code-backed capabilities from data-only artifacts — an artifact_only match means the data is present, not that the behavior executes.", analyzeFileSchema.shape, (args) => handleAnalyzeFile(deps, args));
     // Tool: suggest_tools - Get tool recommendations for a file
@@ -139,7 +146,9 @@ export async function createServer(config) {
         "static analysis — plan for emulation (speakeasy) or sandbox detonation when a behavioral claim is needed.", suggestToolsSchema.shape, (args) => handleSuggestTools(deps, args));
     // Tool: extract_iocs - Extract IOCs from text
     server.tool("extract_iocs", "Extract IOCs (IPs, domains, URLs, hashes, registry keys, etc.) from text. " +
-        "Pass output from run_tool or analyze_file to identify indicators. " +
+        "Pass output from run_tool or analyze_file to identify indicators. If that output was truncated " +
+        "(truncated: true), first read the saved file via run_tool (e.g. grep -iE 'https?://|[0-9]+\\.[0-9]+\\.' on " +
+        "%OUTPUT%/<stdout_saved_file>) and pass that output, or the IOCs past the cut are missed. " +
         "Works well with Volatility 3 plugin output (netscan, cmdline, filescan). " +
         "Returns deduplicated IOCs with confidence scores. " +
         "Note: an IOC extracted from a binary's strings is an artifact (present in the file) — not evidence the " +
@@ -172,6 +181,10 @@ export async function createServer(config) {
         "so you can understand available flags, options, and usage patterns.", getToolHelpSchema.shape, (args) => handleGetToolHelp(deps, args));
     // Tool: check_tools - Check tool availability
     server.tool("check_tools", "Check which REMnux analysis tools are installed and available. Returns a summary of installed vs missing tools across all file type categories.", checkToolsSchema.shape, () => handleCheckTools(deps));
+    // Tool: get_server_info - Server version, connector mode, REMnux version
+    server.tool("get_server_info", "Report the remnux-mcp-server version, how it reaches REMnux (connector mode and transport), " +
+        "and the REMnux distro version on the target. Use for diagnostics and when documenting which " +
+        "server/REMnux versions produced an analysis.", getServerInfoSchema.shape, () => handleGetServerInfo(deps, pkgVersion));
     // Tool: get_report_template - Bundled malware analysis report template (offline)
     server.tool("get_report_template", "Get a malware analysis report template (Markdown) bundled locally for offline use. " +
         "Created by Lenny Zeltser, licensed CC BY 4.0. Use it to structure a report after analyzing a sample. " +
@@ -340,6 +353,29 @@ export async function startServer(config) {
         console.error(`REMnux MCP server started${warnings}`);
     }
 }
+/**
+ * Bearer-token verifier for the HTTP transport.
+ *
+ * Exported so tests exercise the real verifier rather than a copy — a duplicated
+ * verifier in the test helper cannot catch a defect in this one.
+ *
+ * Throws InvalidTokenError, not a bare Error: requireBearerAuth maps
+ * InvalidTokenError to 401 and *anything else* to 500, so a bare Error reports a
+ * wrong token as a server fault.
+ */
+export function createTokenVerifier(token) {
+    const tokenBuf = Buffer.from(token);
+    return {
+        async verifyAccessToken(t) {
+            const inputBuf = Buffer.from(t);
+            const match = inputBuf.length === tokenBuf.length && timingSafeEqual(inputBuf, tokenBuf);
+            if (!match) {
+                throw new InvalidTokenError("Invalid token");
+            }
+            return { token: t, clientId: "remnux-client", scopes: [], expiresAt: Math.floor(Date.now() / 1000) + 86400 };
+        },
+    };
+}
 async function startHttpServer(config) {
     const host = config.httpHost ?? "127.0.0.1";
     const port = config.httpPort ?? 3000;
@@ -357,18 +393,7 @@ async function startHttpServer(config) {
     const app = createMcpExpressApp({ host });
     // Bearer token auth middleware
     if (token) {
-        const tokenBuf = Buffer.from(token);
-        const verifier = {
-            async verifyAccessToken(t) {
-                const inputBuf = Buffer.from(t);
-                const match = inputBuf.length === tokenBuf.length && timingSafeEqual(inputBuf, tokenBuf);
-                if (!match) {
-                    throw new Error("Invalid token");
-                }
-                return { token: t, clientId: "remnux-client", scopes: [], expiresAt: Math.floor(Date.now() / 1000) + 86400 };
-            },
-        };
-        app.use("/mcp", requireBearerAuth({ verifier }));
+        app.use("/mcp", requireBearerAuth({ verifier: createTokenVerifier(token) }));
     }
     else {
         console.error("WARNING: No auth token configured. Set --http-token or MCP_TOKEN env var for production use.");
@@ -436,6 +461,25 @@ async function startHttpServer(config) {
             }
         }
     });
+    // Express's default error handler renders an HTML page. On a JSON-RPC endpoint
+    // that breaks any conforming client, which parses the response as JSON — most
+    // visibly for body-parser's 413 (request entity too large) and its 400 on
+    // malformed JSON. Answer in JSON-RPC instead.
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    app.use("/mcp", (err, _req, res, next) => {
+        if (res.headersSent)
+            return next(err);
+        const status = typeof err?.status === "number" ? err.status : 500;
+        const code = status === 413 ? -32600 : status === 400 ? -32700 : -32603;
+        // Name the recovery path on 413 so an AI client self-heals instead of
+        // dead-ending: the limit is body-parser's 100kb default, applied inside the
+        // SDK's createMcpExpressApp, and large text belongs in a file rather than in
+        // a request body (or the model's context) anyway.
+        const message = status === 413 ? "Request entity too large. Write the text to a file in the samples directory, then process it with run_tool instead of sending it inline."
+            : status === 400 ? "Parse error"
+                : "Internal error";
+        res.status(status).json({ jsonrpc: "2.0", error: { code, message }, id: null });
+    });
     const warnings = !(config.noSandbox ?? false)
         ? ` (upload_from_host confined to ${config.ingestRoot ?? config.samplesDir})`
         : " (WARNING: sandbox disabled)";