@rockhopper-co/mcp-server 2.0.1 → 2.1.1

package/dist/tools/drive-search-lanes.js

@@ -0,0 +1,95 @@
+/**
+ * ENG-2204 — how the confirmation question reaches a human, given a client
+ * that may support one, two or three ways of asking one.
+ *
+ * There are three lanes and they are not alternatives to pick between — they
+ * are a ladder, and every client can climb at least the bottom rung:
+ *
+ * 1. **The tool result** (universal). The answer says "ask the user which one,
+ *    then call again with their number". Works on every client that has ever
+ *    spoken MCP, because it is just text.
+ * 2. **`elicitation/create`** (2025-era sessions that advertise it). The client
+ *    renders a real picker; the server waits for the answer inside the call.
+ * 3. **`InputRequiredResult`** (2026-07-28 sessions). Elicitation is gone from
+ *    that revision as a server→client request; the same question rides back as
+ *    a result the client fulfils and retries.
+ *
+ * The ladder matters more than any one rung. A client that supports none of
+ * the richer lanes still gets a usable question — it does NOT get an enrolment
+ * it never confirmed, and it does not get an error. Degrading is the design.
+ */
+import { CLIENT_CAPABILITIES_META_KEY, PROTOCOL_VERSION_META_KEY, } from '@modelcontextprotocol/server';
+/** The protocol revision on which lane 3 is the only richer lane there is. */
+const MRTR_PROTOCOL_VERSION = '2026-07-28';
+/** The key both richer lanes carry the confirmation under. */
+export const CONFIRM_KEY = 'confirm_file';
+/** Read one key off the per-request envelope, which is typed as an open bag. */
+function envelopeValue(ctx, key) {
+    const envelope = ctx?.mcpReq?.envelope;
+    return envelope?.[key];
+}
+/**
+ * Whether this REQUEST is on the 2026-07-28 wire.
+ *
+ * Read off the request envelope rather than off the connection, because that
+ * is where the SDK puts it: `_meta['io.modelcontextprotocol/protocolVersion']`
+ * arrives on every modern request, and `stdio-2026-07-28.e2e.test.ts` drives
+ * exactly that shape.
+ */
+export function isModernEra(ctx) {
+    return envelopeValue(ctx, PROTOCOL_VERSION_META_KEY) === MRTR_PROTOCOL_VERSION;
+}
+/**
+ * Whether the client said it can render an elicitation.
+ *
+ * Two sources, checked in this order and for different reasons. A modern
+ * request carries the client's capabilities in its own envelope, which is the
+ * authority for THAT request. A 2025-era session declared them once at
+ * `initialize`, and the connection is the only place that survives.
+ *
+ * ABSENT means NO. A client that never said it can ask a question is not
+ * assumed to be able to — the cost of guessing wrong is a call that hangs
+ * waiting for an answer nobody will ever be shown.
+ */
+export function advertisesElicitation(ctx, connectionCapabilities) {
+    const fromEnvelope = envelopeValue(ctx, CLIENT_CAPABILITIES_META_KEY);
+    if (fromEnvelope && typeof fromEnvelope === 'object') {
+        return 'elicitation' in fromEnvelope;
+    }
+    return !!connectionCapabilities && 'elicitation' in connectionCapabilities;
+}
+/**
+ * The best rung this request can climb.
+ *
+ * Lane 2 is deliberately unreachable on the modern era even when the client
+ * advertises `elicitation`: the SDK's `ctx.mcpReq.elicitInput` THROWS on a
+ * 2026-07-28 request, so treating the capability as sufficient would turn the
+ * richest client into the only one that fails.
+ */
+export function selectLane(ctx, connectionCapabilities) {
+    if (isModernEra(ctx))
+        return 'input_required';
+    if (advertisesElicitation(ctx, connectionCapabilities))
+        return 'elicitation';
+    return 'tool_result';
+}
+/**
+ * The nonce a retried modern request is echoing back.
+ *
+ * Untrusted by construction — it round-trips through the client, nothing signs
+ * it, and the SDK hands back whatever arrived. It is used as a Map key and for
+ * nothing else: an unrecognised one finds no candidate set, which is the same
+ * answer as a malicious one.
+ */
+export function readRequestState(ctx) {
+    try {
+        const state = ctx?.mcpReq?.requestState?.();
+        return typeof state === 'string' ? state : null;
+    }
+    catch {
+        // A configured verify hook rejecting the state is a refusal, not a crash:
+        // the caller treats "no usable nonce" and "a nonce we do not know" alike.
+        return null;
+    }
+}
+//# sourceMappingURL=drive-search-lanes.js.map

package/dist/tools/drive-search-lanes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drive-search-lanes.js","sourceRoot":"","sources":["../../src/tools/drive-search-lanes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,GAE1B,MAAM,8BAA8B,CAAC;AAEtC,8EAA8E;AAC9E,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAE3C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,cAAc,CAAC;AAI1C,gFAAgF;AAChF,SAAS,aAAa,CAAC,GAA8B,EAAE,GAAW;IAChE,MAAM,QAAQ,GAAG,GAAG,EAAE,MAAM,EAAE,QAA+C,CAAC;IAC9E,OAAO,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,GAA8B;IACxD,OAAO,aAAa,CAAC,GAAG,EAAE,yBAAyB,CAAC,KAAK,qBAAqB,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAA8B,EAC9B,sBAA2D;IAE3D,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACtE,IAAI,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,aAAa,IAAI,YAAY,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,CAAC,sBAAsB,IAAI,aAAa,IAAI,sBAAsB,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,GAA8B,EAC9B,sBAA2D;IAE3D,IAAI,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC9C,IAAI,qBAAqB,CAAC,GAAG,EAAE,sBAAsB,CAAC;QAAE,OAAO,aAAa,CAAC;IAC7E,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAA8B;IAC7D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC;QAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,0EAA0E;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/tools/drive-search.contract.d.ts

@@ -0,0 +1,94 @@
+/**
+ * ENG-2204 — everything `search_drive_files` SAYS, split from everything it
+ * DOES (`drive-search.ts`), on the seam ENG-2200 cut for `enroll_file`.
+ *
+ * This half is the only interface a language model ever sees: it cannot read
+ * the handler, so the tool description and the schema descriptions ARE the
+ * contract, and a wrong word here is a behaviour bug no type checks. Keeping
+ * it apart means a person can review it as prose — deciding whether a model
+ * would do the right thing — without the lane branching in the way.
+ */
+import type { ElicitRequestFormParams } from '@modelcontextprotocol/server';
+import { z } from 'zod';
+import { type Candidate, type DriveSearchOutcome } from '../drive-search.js';
+export declare const DRIVE_SEARCH_INPUT_SCHEMA: z.ZodObject<{
+    query: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        search: "search";
+        recent: "recent";
+    }>>;
+    limit: z.ZodOptional<z.ZodNumber>;
+    confirm_index: z.ZodOptional<z.ZodNumber>;
+    confirm_token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const DRIVE_SEARCH_DESCRIPTION: string;
+export declare const DRIVE_SEARCH_ANNOTATIONS: {
+    readonly readOnlyHint: true;
+    readonly openWorldHint: true;
+};
+/** The machine-readable half of every answer, so a model can branch on it. */
+export interface DriveSearchAnswer {
+    outcome: DriveSearchOutcome;
+    text: string;
+    isError?: boolean;
+    detail?: Record<string, unknown>;
+}
+/**
+ * Render an answer as a tool result: prose for the human, then one JSON line
+ * for the model. Both, because prose alone invites the model to paraphrase a
+ * refusal into a success, and JSON alone gives the user nothing to read.
+ * Same shape as `enroll_file`'s, so the two tools read alike in a transcript.
+ */
+export declare function toolResult(answer: DriveSearchAnswer): {
+    isError?: true | undefined;
+    content: {
+        type: "text";
+        text: string;
+    }[];
+};
+/** How one candidate reads to a user, without its identifiers. */
+export declare function candidateLabel(candidate: Candidate): string;
+/** The numbered list the user picks from, and the model quotes back. */
+export declare function renderCandidates(candidates: readonly Candidate[]): string;
+/** The question the model puts to the user when no richer lane exists. */
+export declare function confirmationPrompt(candidates: readonly Candidate[], token: string): string;
+/** The elicitation form both richer lanes send. */
+export declare function confirmationForm(candidates: readonly Candidate[]): Omit<ElicitRequestFormParams, 'mode'>;
+/** The answer that means "none of these" rather than a position. */
+export declare const DECLINE_CHOICE = "none";
+/**
+ * The answer once a specific candidate has been confirmed by a human.
+ *
+ * It hands over identifiers and stops. Enrolling here would mean a second copy
+ * of `enroll_file`'s logic — the share_with question, the hidden-file restore
+ * — living in a read tool, and two copies of a rule is how the two answers
+ * start to differ.
+ */
+export declare function confirmedAnswer(candidate: Candidate): {
+    isError?: true | undefined;
+    content: {
+        type: "text";
+        text: string;
+    }[];
+};
+/** The answer when the user was asked and said none of these. */
+export declare function declinedAnswer(): {
+    isError?: true | undefined;
+    content: {
+        type: "text";
+        text: string;
+    }[];
+};
+/** The answer when a confirmation names something this session never offered. */
+export declare function unknownCandidateAnswer(): {
+    isError?: true | undefined;
+    content: {
+        type: "text";
+        text: string;
+    }[];
+};
+/** Told to the model when the session has searched as much as it may. */
+export declare const BUDGET_EXHAUSTED_TEXT: string;
+/** Told to the model when the user has no delegated Microsoft grant. */
+export declare function connectPrompt(authorizeUrl: string, expiresAt: string): string;
+//# sourceMappingURL=drive-search.contract.d.ts.map

package/dist/tools/drive-search.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drive-search.contract.d.ts","sourceRoot":"","sources":["../../src/tools/drive-search.contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,kBAAkB,EACxB,MAAM,oBAAoB,CAAC;AAE5B,eAAO,MAAM,yBAAyB;;;;;;;;;iBAsDpC,CAAC;AAEH,eAAO,MAAM,wBAAwB,QAeQ,CAAC;AAE9C,eAAO,MAAM,wBAAwB;;;CAI3B,CAAC;AAEX,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,iBAAiB;;;;;;EAWnD;AAED,kEAAkE;AAClE,wBAAgB,cAAc,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAQ3D;AAgBD,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,GAAG,MAAM,CAIzE;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,SAAS,SAAS,EAAE,EAChC,KAAK,EAAE,MAAM,GACZ,MAAM,CAUR;AAED,mDAAmD;AACnD,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,SAAS,SAAS,EAAE,GAC/B,IAAI,CAAC,uBAAuB,EAAE,MAAM,CAAC,CA4BvC;AAED,oEAAoE;AACpE,eAAO,MAAM,cAAc,SAAS,CAAC;AAErC;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS;;;;;;EA0BnD;AAED,iEAAiE;AACjE,wBAAgB,cAAc;;;;;;EAQ7B;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB;;;;;;EASrC;AAED,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,QAIqC,CAAC;AAExE,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAS7E"}

package/dist/tools/drive-search.contract.js

@@ -0,0 +1,235 @@
+/**
+ * ENG-2204 — everything `search_drive_files` SAYS, split from everything it
+ * DOES (`drive-search.ts`), on the seam ENG-2200 cut for `enroll_file`.
+ *
+ * This half is the only interface a language model ever sees: it cannot read
+ * the handler, so the tool description and the schema descriptions ARE the
+ * contract, and a wrong word here is a behaviour bug no type checks. Keeping
+ * it apart means a person can review it as prose — deciding whether a model
+ * would do the right thing — without the lane branching in the way.
+ */
+import { z } from 'zod';
+import { DRIVE_SEARCH_SESSION_BUDGET, } from '../drive-search.js';
+export const DRIVE_SEARCH_INPUT_SCHEMA = z.object({
+    query: z
+        .string()
+        .optional()
+        .describe('Part of the file name to look for, in the user\'s own words — "Q3 ' +
+        'forecast", "Becklar model". Required unless `scope` is "recent".'),
+    scope: z
+        .enum(['search', 'recent'])
+        .optional()
+        .describe('"search" (default) looks across everything the user can reach in ' +
+        'OneDrive and SharePoint. "recent" lists the workbooks they have ' +
+        'worked on lately and needs no `query` — use it when the user cannot ' +
+        'remember the name.'),
+    limit: z
+        .number()
+        .int()
+        .min(1)
+        .max(50)
+        .optional()
+        .describe('How many candidates to return. Default 10, maximum 50.'),
+    /**
+     * The confirmation lane every client has. `confirm_index` is how a client
+     * with no elicitation and no multi-round-trip support closes the loop: the
+     * model puts the question to the user in the conversation, and calls again
+     * carrying the number the user chose.
+     *
+     * It is an INDEX into a set this session offered, not a file identifier, and
+     * that is the whole point. A model that has read a malicious file name
+     * cannot invent a `driveMsId` here and have the tool bless it: the index is
+     * resolved against server memory, and an index into a set that was never
+     * offered resolves to nothing.
+     */
+    confirm_index: z
+        .number()
+        .int()
+        .optional()
+        .describe('The number of the candidate the USER picked from a previous ' +
+        '`search_drive_files` answer, after you asked them which file they ' +
+        'meant. Send it together with `confirm_token` from that same answer. ' +
+        'Send 0 if they said none of them is the right file. ' +
+        'Never guess it and never pick on the user\'s behalf.'),
+    confirm_token: z
+        .string()
+        .optional()
+        .describe('The `confirm_token` from the answer whose list the user picked from. ' +
+        'Pass it back exactly as it was given.'),
+});
+export const DRIVE_SEARCH_DESCRIPTION = "Find a Microsoft Excel workbook in the user's own OneDrive or SharePoint — " +
+    'including files Rockhopper has never seen. Each candidate comes back marked ' +
+    'as already in Rockhopper or not. ' +
+    'USE THIS when the user names a workbook that `search_files` and ' +
+    '`list_files` cannot find: those two see only files already added to ' +
+    'Rockhopper, so "no match" there means "never added", not "no such file". ' +
+    'YOU MUST CONFIRM THE FILE WITH THE USER before enrolling it. Show them the ' +
+    'candidates, ask which one they mean, then call this tool again with their ' +
+    'pick as `confirm_index` plus the `confirm_token`; the answer carries the ' +
+    'identifiers to hand to `enroll_file`. Never enroll a file the user has not ' +
+    'named, and never claim a file is already in Rockhopper because one search ' +
+    'result looked similar. ' +
+    'Searching is capped per session, so search deliberately rather than ' +
+    'browsing. Requires a connected Microsoft account — if none is connected, ' +
+    'this returns the link the user must open.';
+export const DRIVE_SEARCH_ANNOTATIONS = {
+    readOnlyHint: true,
+    // It reaches SharePoint / OneDrive through Rockhopper.
+    openWorldHint: true,
+};
+/**
+ * Render an answer as a tool result: prose for the human, then one JSON line
+ * for the model. Both, because prose alone invites the model to paraphrase a
+ * refusal into a success, and JSON alone gives the user nothing to read.
+ * Same shape as `enroll_file`'s, so the two tools read alike in a transcript.
+ */
+export function toolResult(answer) {
+    const payload = { outcome: answer.outcome, ...(answer.detail ?? {}) };
+    return {
+        content: [
+            {
+                type: 'text',
+                text: `${answer.text}\n${JSON.stringify(payload)}`,
+            },
+        ],
+        ...(answer.isError ? { isError: true } : {}),
+    };
+}
+/** How one candidate reads to a user, without its identifiers. */
+export function candidateLabel(candidate) {
+    const parts = [candidate.name];
+    if (candidate.parentPath)
+        parts.push(candidate.parentPath);
+    if (candidate.lastModifiedAt) {
+        parts.push(`modified ${candidate.lastModifiedAt}`);
+    }
+    parts.push(ENROLLMENT_NOTE[candidate.enrollmentState]);
+    return parts.join(' · ');
+}
+/**
+ * What each enrolment state MEANS to the person choosing, in their words.
+ *
+ * `hidden` is spelled out rather than folded into "already added" because the
+ * two lead to different conversations: one is done, and the other needs the
+ * user to say whether they want a file they removed put back. Collapsing them
+ * is the ENG-1647 answer — "already enrolled" about a file the user cannot see.
+ */
+const ENROLLMENT_NOTE = {
+    enrolled: 'already in Rockhopper',
+    hidden: 'previously removed from Rockhopper',
+    not_enrolled: 'not in Rockhopper yet',
+};
+/** The numbered list the user picks from, and the model quotes back. */
+export function renderCandidates(candidates) {
+    return candidates
+        .map((c, index) => `${index + 1}. **${c.name}** — ${candidateLabel(c)}`)
+        .join('\n');
+}
+/** The question the model puts to the user when no richer lane exists. */
+export function confirmationPrompt(candidates, token) {
+    return (`Found ${candidates.length} possible file(s). ` +
+        'DO NOT enroll any of these yet.\n\n' +
+        `${renderCandidates(candidates)}\n\n` +
+        'Ask the user which one they meant — quote the names, do not choose for ' +
+        'them. When they answer, call `search_drive_files` again with ' +
+        `confirm_index: <their number> and confirm_token: "${token}", or ` +
+        'confirm_index: 0 if none of these is the file.');
+}
+/** The elicitation form both richer lanes send. */
+export function confirmationForm(candidates) {
+    return {
+        message: 'Which workbook did you mean? Rockhopper will not add anything until ' +
+            'you pick one.',
+        requestedSchema: {
+            type: 'object',
+            properties: {
+                // The values are POSITIONS, never identifiers. A client (or anything
+                // steering it) can only send back a number, and a number that does not
+                // index a set this session offered resolves to nothing.
+                choice: {
+                    type: 'string',
+                    enum: [
+                        ...candidates.map((_, index) => String(index + 1)),
+                        DECLINE_CHOICE,
+                    ],
+                    enumNames: [
+                        ...candidates.map((c) => candidateLabel(c)),
+                        'None of these',
+                    ],
+                    title: 'File',
+                    description: 'The workbook to add to Rockhopper.',
+                },
+            },
+            required: ['choice'],
+        },
+    };
+}
+/** The answer that means "none of these" rather than a position. */
+export const DECLINE_CHOICE = 'none';
+/**
+ * The answer once a specific candidate has been confirmed by a human.
+ *
+ * It hands over identifiers and stops. Enrolling here would mean a second copy
+ * of `enroll_file`'s logic — the share_with question, the hidden-file restore
+ * — living in a read tool, and two copies of a rule is how the two answers
+ * start to differ.
+ */
+export function confirmedAnswer(candidate) {
+    if (!candidate.driveMsId) {
+        return toolResult({
+            outcome: 'unknown_candidate',
+            isError: true,
+            text: `Microsoft did not say which drive "${candidate.name}" lives in, so ` +
+                'it cannot be added from the search result. Ask the user to open the ' +
+                'workbook and paste the address from their browser bar, then call ' +
+                '`enroll_file` with that `url`.',
+        });
+    }
+    return toolResult({
+        outcome: 'confirmed',
+        text: `The user confirmed "${candidate.name}" (${candidateLabel(candidate)}). ` +
+            'Now call `enroll_file` with the `driveMsId` and `msId` below. ' +
+            '`enroll_file` will ask who may see the file — put that question to the ' +
+            'user too, and never answer it yourself.',
+        detail: {
+            name: candidate.name,
+            driveMsId: candidate.driveMsId,
+            msId: candidate.msId,
+            enrollmentState: candidate.enrollmentState,
+        },
+    });
+}
+/** The answer when the user was asked and said none of these. */
+export function declinedAnswer() {
+    return toolResult({
+        outcome: 'declined',
+        text: 'The user did not pick any of those files, so nothing was added. Ask ' +
+            'them to describe the workbook differently and search again, or to ' +
+            'paste its SharePoint or OneDrive link for `enroll_file`.',
+    });
+}
+/** The answer when a confirmation names something this session never offered. */
+export function unknownCandidateAnswer() {
+    return toolResult({
+        outcome: 'unknown_candidate',
+        isError: true,
+        text: 'That pick does not match any file this search offered, so nothing was ' +
+            'added. Run `search_drive_files` again and confirm against the list it ' +
+            'returns. Never enroll a file that did not come back from a search.',
+    });
+}
+/** Told to the model when the session has searched as much as it may. */
+export const BUDGET_EXHAUSTED_TEXT = `This session has used all ${DRIVE_SEARCH_SESSION_BUDGET} of its file ` +
+    'searches. This is a fixed limit and waiting does not restore it. Stop ' +
+    "searching and ask the user to paste the workbook's SharePoint or OneDrive " +
+    'link, then call `enroll_file` with that link. Nothing was searched.';
+/** Told to the model when the user has no delegated Microsoft grant. */
+export function connectPrompt(authorizeUrl, expiresAt) {
+    return ('Rockhopper cannot look at this user\'s Microsoft files until they ' +
+        'connect their Microsoft account. Give them this link to open ' +
+        `themselves — it expires at ${expiresAt}:\n\n${authorizeUrl}\n\n` +
+        'Rockhopper asks only to READ their files. Once they have approved, call ' +
+        '`microsoft_link_status` to confirm, then search again. Do not compose a ' +
+        'sign-in link yourself; this one is the only valid one.');
+}
+//# sourceMappingURL=drive-search.contract.js.map

package/dist/tools/drive-search.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drive-search.contract.js","sourceRoot":"","sources":["../../src/tools/drive-search.contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,2BAA2B,GAG5B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,oEAAoE;QAClE,kEAAkE,CACrE;IACH,KAAK,EAAE,CAAC;SACL,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;SAC1B,QAAQ,EAAE;SACV,QAAQ,CACP,mEAAmE;QACjE,kEAAkE;QAClE,sEAAsE;QACtE,oBAAoB,CACvB;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;SACV,QAAQ,CAAC,wDAAwD,CAAC;IACrE;;;;;;;;;;;OAWG;IACH,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,8DAA8D;QAC5D,oEAAoE;QACpE,sEAAsE;QACtE,sDAAsD;QACtD,sDAAsD,CACzD;IACH,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,uEAAuE;QACrE,uCAAuC,CAC1C;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GACnC,6EAA6E;IAC7E,8EAA8E;IAC9E,mCAAmC;IACnC,kEAAkE;IAClE,sEAAsE;IACtE,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,yBAAyB;IACzB,sEAAsE;IACtE,2EAA2E;IAC3E,2CAA2C,CAAC;AAE9C,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,YAAY,EAAE,IAAI;IAClB,uDAAuD;IACvD,aAAa,EAAE,IAAI;CACX,CAAC;AAUX;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,MAAyB;IAClD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IACtE,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;aACnD;SACF;QACD,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,SAAoB;IACjD,MAAM,KAAK,GAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,SAAS,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,YAAY,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,eAAe,GAAiD;IACpE,QAAQ,EAAE,uBAAuB;IACjC,MAAM,EAAE,oCAAoC;IAC5C,YAAY,EAAE,uBAAuB;CACtC,CAAC;AAEF,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,UAAgC;IAC/D,OAAO,UAAU;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,QAAQ,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAChC,UAAgC,EAChC,KAAa;IAEb,OAAO,CACL,SAAS,UAAU,CAAC,MAAM,qBAAqB;QAC/C,qCAAqC;QACrC,GAAG,gBAAgB,CAAC,UAAU,CAAC,MAAM;QACrC,yEAAyE;QACzE,+DAA+D;QAC/D,qDAAqD,KAAK,QAAQ;QAClE,gDAAgD,CACjD,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,gBAAgB,CAC9B,UAAgC;IAEhC,OAAO;QACL,OAAO,EACL,sEAAsE;YACtE,eAAe;QACjB,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,qEAAqE;gBACrE,uEAAuE;gBACvE,wDAAwD;gBACxD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE;wBACJ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;wBAClD,cAAc;qBACf;oBACD,SAAS,EAAE;wBACT,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;wBAC3C,eAAe;qBAChB;oBACD,KAAK,EAAE,MAAM;oBACb,WAAW,EAAE,oCAAoC;iBAClD;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,SAAoB;IAClD,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QACzB,OAAO,UAAU,CAAC;YAChB,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE,IAAI;YACb,IAAI,EACF,sCAAsC,SAAS,CAAC,IAAI,iBAAiB;gBACrE,sEAAsE;gBACtE,mEAAmE;gBACnE,gCAAgC;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,WAAW;QACpB,IAAI,EACF,uBAAuB,SAAS,CAAC,IAAI,MAAM,cAAc,CAAC,SAAS,CAAC,KAAK;YACzE,gEAAgE;YAChE,yEAAyE;YACzE,yCAAyC;QAC3C,MAAM,EAAE;YACN,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,eAAe,EAAE,SAAS,CAAC,eAAe;SAC3C;KACF,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc;IAC5B,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,UAAU;QACnB,IAAI,EACF,sEAAsE;YACtE,oEAAoE;YACpE,0DAA0D;KAC7D,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,sBAAsB;IACpC,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EAAE,IAAI;QACb,IAAI,EACF,wEAAwE;YACxE,wEAAwE;YACxE,oEAAoE;KACvE,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAChC,6BAA6B,2BAA2B,eAAe;IACvE,wEAAwE;IACxE,4EAA4E;IAC5E,qEAAqE,CAAC;AAExE,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,YAAoB,EAAE,SAAiB;IACnE,OAAO,CACL,oEAAoE;QACpE,+DAA+D;QAC/D,8BAA8B,SAAS,QAAQ,YAAY,MAAM;QACjE,0EAA0E;QAC1E,0EAA0E;QAC1E,wDAAwD,CACzD,CAAC;AACJ,CAAC"}

package/dist/tools/drive-search.d.ts

@@ -0,0 +1,31 @@
+import { type InputRequiredResult, type McpServer } from '@modelcontextprotocol/server';
+import type { ApiClient } from '../api-client.js';
+import { CandidateRegistry, SearchBudget } from '../drive-search.js';
+/**
+ * ENG-2204 (SP08) — the half of ENG-1647 that ENG-2200 did not fix.
+ *
+ * ENG-2200 built the enroll tool the customer could not find. This finds the
+ * FILE: a workbook Rockhopper has never seen, in the user's own OneDrive or
+ * SharePoint, confirmed with them before anything is written.
+ *
+ * Three things here are load-bearing and none is obvious from the happy path:
+ *
+ * 1. **The search set IS the permission trim.** Every candidate came back from
+ *    a delegated Microsoft call made as this user. Nothing is added to it,
+ *    nothing is inferred into it, and no file outside it is ever offered.
+ * 2. **A confirmation resolves against SERVER memory, never against what the
+ *    client sent.** The confirmation carries a position and a nonce; the file
+ *    it names is looked up in the set this session actually returned. A model
+ *    that has read a hostile file name cannot conjure a `driveMsId` and have
+ *    the tool bless it.
+ * 3. **The budget is claimed BEFORE the network call.** A cap that discards an
+ *    answer already fetched has not capped anything — the enumeration already
+ *    happened, and Microsoft already answered it.
+ */
+export declare function registerDriveSearchTool(server: McpServer, api: ApiClient, session?: {
+    budget?: SearchBudget;
+    registry?: CandidateRegistry;
+}): void;
+/** Re-exported so `InputRequiredResult` is nameable where the tool is used. */
+export type { InputRequiredResult };
+//# sourceMappingURL=drive-search.d.ts.map

package/dist/tools/drive-search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drive-search.d.ts","sourceRoot":"","sources":["../../src/tools/drive-search.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,SAAS,EAEf,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,iBAAiB,EACjB,YAAY,EAOb,MAAM,oBAAoB,CAAC;AAsB5B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,SAAS,EACjB,GAAG,EAAE,SAAS,EACd,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAAE,GAChE,IAAI,CA8KN;AAiCD,+EAA+E;AAC/E,YAAY,EAAE,mBAAmB,EAAE,CAAC"}