@studiometa/forge-mcp 0.4.3 → 0.4.5

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","names":[],"sources":["../src/server.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/**\n * Forge MCP Server - HTTP Transport (Streamable HTTP)\n *\n * Implements the official MCP Streamable HTTP transport specification.\n * Supports both raw Bearer tokens and OAuth 2.1 with PKCE for\n * Claude Desktop compatibility.\n *\n * Token formats:\n *   - Raw Forge API token (Bearer <token>)\n *   - Base64-encoded token from OAuth flow (Bearer base64(<token>))\n *\n * Environment variables:\n *   PORT          - HTTP port (default: 3000)\n *   HOST          - Bind address (default: 0.0.0.0)\n *   FORGE_READ_ONLY - Disable write operations (default: false)\n *   OAUTH_SECRET  - AES-256-GCM encryption key for OAuth tokens.\n *                   Required in production. A default is used if unset.\n *\n * Usage:\n *   forge-mcp-server\n *   forge-mcp-server --read-only\n *   OAUTH_SECRET=my-secret forge-mcp-server\n *   PORT=3000 forge-mcp-server\n *\n * Endpoints:\n *   POST /mcp    - MCP Streamable HTTP (JSON-RPC messages)\n *   GET  /mcp    - MCP Streamable HTTP (SSE stream for server notifications)\n *   DELETE /mcp  - MCP Streamable HTTP (session termination)\n *   GET  /       - Service info\n *   GET  /health - Health check\n *\n * OAuth 2.1 endpoints (for Claude Desktop):\n *   GET  /.well-known/oauth-authorization-server - OAuth metadata (RFC 8414)\n *   GET  /.well-known/oauth-protected-resource   - Protected resource (RFC 9728)\n *   POST /register  - Dynamic client registration (RFC 7591)\n *   GET  /authorize - Login form\n *   POST /authorize - Process login\n *   POST /token     - Token exchange (PKCE)\n */\n\nimport { toNodeHandler } from \"h3/node\";\nimport { createServer, type Server } from \"node:http\";\n\nimport { createHealthApp, createMcpRequestHandler } from \"./http.ts\";\nimport { parseReadOnlyFlag } from \"./flags.ts\";\nimport { SessionManager } from \"./sessions.ts\";\nimport { VERSION } from \"./version.ts\";\n\nconst DEFAULT_PORT = 3000;\nconst DEFAULT_HOST = \"0.0.0.0\";\n\n/**\n * Options for the HTTP server.\n */\nexport interface HttpStartOptions {\n  /** When true, forge_write tool is not registered. */\n  readOnly?: boolean;\n}\n\n/**\n * Start the HTTP server with Streamable HTTP transport.\n */\nexport function startHttpServer(\n  port: number = DEFAULT_PORT,\n  host: string = DEFAULT_HOST,\n  options?: HttpStartOptions,\n): Promise<Server> {\n  return new Promise((resolve) => {\n    const readOnly = options?.readOnly ?? false;\n    const sessions = new SessionManager();\n    const handleMcp = createMcpRequestHandler(sessions, { readOnly });\n    const healthApp = createHealthApp();\n    const healthHandler = toNodeHandler(healthApp);\n\n    const server = createServer(async (req, res) => {\n      const url = req.url ?? \"/\";\n\n      // Route /mcp to MCP Streamable HTTP transport\n      if (url === \"/mcp\" || url.startsWith(\"/mcp?\")) {\n        await handleMcp(req, res);\n        return;\n      }\n\n      // Everything else goes to h3 (health checks, service info)\n      healthHandler(req, res);\n    });\n\n    server.listen(port, host, () => {\n      const displayHost = host === \"0.0.0.0\" ? \"localhost\" : host;\n      const mode = readOnly ? \" (read-only)\" : \"\";\n      console.log(`Forge MCP server v${VERSION}${mode}`);\n      console.log(`Node.js ${process.version}`);\n      console.log(\"\");\n      console.log(`Running at http://${displayHost}:${port}`);\n      console.log(\"\");\n      console.log(\"Endpoints:\");\n      console.log(\n        `  POST/GET/DELETE http://${displayHost}:${port}/mcp - MCP Streamable HTTP endpoint`,\n      );\n      console.log(`  GET  http://${displayHost}:${port}/health - Health check`);\n      console.log(\"\");\n      console.log(\"Authentication:\");\n      console.log(\"  Bearer token in Authorization header\");\n      console.log(\"  Token format: raw Forge API token or OAuth 2.1 access token\");\n      console.log(\"\");\n      console.log(\"OAuth 2.1 (Claude Desktop):\");\n      console.log(`  GET  http://${displayHost}:${port}/.well-known/oauth-authorization-server`);\n      console.log(`  POST http://${displayHost}:${port}/register`);\n      console.log(`  GET  http://${displayHost}:${port}/authorize`);\n      console.log(`  POST http://${displayHost}:${port}/token`);\n      if (readOnly) {\n        console.log(\"\");\n        console.log(\"Mode: READ-ONLY (write operations disabled)\");\n      }\n      console.log(\"\");\n      resolve(server);\n    });\n  });\n}\n\n// Start server when run directly\nconst isMainModule =\n  import.meta.url === `file://${process.argv[1]}` ||\n  process.argv[1]?.endsWith(\"/forge-mcp-server\") ||\n  process.argv[1]?.endsWith(\"\\\\forge-mcp-server\");\n\nif (isMainModule) {\n  const port = Number.parseInt(process.env.PORT || String(DEFAULT_PORT), 10);\n  const host = process.env.HOST || DEFAULT_HOST;\n  const readOnly = parseReadOnlyFlag();\n\n  startHttpServer(port, host, { readOnly }).catch((error) => {\n    console.error(\"Fatal error:\", error);\n    process.exit(1);\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,IAAM,eAAe;AACrB,IAAM,eAAe;;;;AAarB,SAAgB,gBACd,OAAe,cACf,OAAe,cACf,SACiB;AACjB,QAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,WAAW,SAAS,YAAY;EAEtC,MAAM,YAAY,wBADD,IAAI,gBAAgB,EACe,EAAE,UAAU,CAAC;EAEjE,MAAM,gBAAgB,cADJ,iBAAiB,CACW;EAE9C,MAAM,SAAS,aAAa,OAAO,KAAK,QAAQ;GAC9C,MAAM,MAAM,IAAI,OAAO;AAGvB,OAAI,QAAQ,UAAU,IAAI,WAAW,QAAQ,EAAE;AAC7C,UAAM,UAAU,KAAK,IAAI;AACzB;;AAIF,iBAAc,KAAK,IAAI;IACvB;AAEF,SAAO,OAAO,MAAM,YAAY;GAC9B,MAAM,cAAc,SAAS,YAAY,cAAc;GACvD,MAAM,OAAO,WAAW,iBAAiB;AACzC,WAAQ,IAAI,qBAAqB,UAAU,OAAO;AAClD,WAAQ,IAAI,WAAW,QAAQ,UAAU;AACzC,WAAQ,IAAI,GAAG;AACf,WAAQ,IAAI,qBAAqB,YAAY,GAAG,OAAO;AACvD,WAAQ,IAAI,GAAG;AACf,WAAQ,IAAI,aAAa;AACzB,WAAQ,IACN,4BAA4B,YAAY,GAAG,KAAK,qCACjD;AACD,WAAQ,IAAI,iBAAiB,YAAY,GAAG,KAAK,wBAAwB;AACzE,WAAQ,IAAI,GAAG;AACf,WAAQ,IAAI,kBAAkB;AAC9B,WAAQ,IAAI,yCAAyC;AACrD,WAAQ,IAAI,gEAAgE;AAC5E,WAAQ,IAAI,GAAG;AACf,WAAQ,IAAI,8BAA8B;AAC1C,WAAQ,IAAI,iBAAiB,YAAY,GAAG,KAAK,yCAAyC;AAC1F,WAAQ,IAAI,iBAAiB,YAAY,GAAG,KAAK,WAAW;AAC5D,WAAQ,IAAI,iBAAiB,YAAY,GAAG,KAAK,YAAY;AAC7D,WAAQ,IAAI,iBAAiB,YAAY,GAAG,KAAK,QAAQ;AACzD,OAAI,UAAU;AACZ,YAAQ,IAAI,GAAG;AACf,YAAQ,IAAI,8CAA8C;;AAE5D,WAAQ,IAAI,GAAG;AACf,WAAQ,OAAO;IACf;GACF;;AASJ,IAJE,OAAO,KAAK,QAAQ,UAAU,QAAQ,KAAK,QAC3C,QAAQ,KAAK,IAAI,SAAS,oBAAoB,IAC9C,QAAQ,KAAK,IAAI,SAAS,qBAAqB,CAO/C,iBAJa,OAAO,SAAS,QAAQ,IAAI,QAAQ,OAAO,aAAa,EAAE,GAAG,EAC7D,QAAQ,IAAI,QAAQ,cAGL,EAAE,UAFb,mBAAmB,EAEI,CAAC,CAAC,OAAO,UAAU;AACzD,SAAQ,MAAM,gBAAgB,MAAM;AACpC,SAAQ,KAAK,EAAE;EACf"}
+{"version":3,"file":"server.js","names":[],"sources":["../src/server.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/**\n * Forge MCP Server - HTTP Transport (Streamable HTTP)\n *\n * Implements the official MCP Streamable HTTP transport specification.\n * Supports both raw Bearer tokens and OAuth 2.1 with PKCE for\n * Claude Desktop compatibility.\n *\n * Token formats:\n *   - Raw Forge API token (Bearer <token>)\n *   - Base64-encoded token from OAuth flow (Bearer base64(<token>))\n *\n * Environment variables:\n *   PORT          - HTTP port (default: 3000)\n *   HOST          - Bind address (default: 0.0.0.0)\n *   FORGE_READ_ONLY - Disable write operations (default: false)\n *   OAUTH_SECRET  - AES-256-GCM encryption key for OAuth tokens.\n *                   Required in production. A default is used if unset.\n *\n * Usage:\n *   forge-mcp-server\n *   forge-mcp-server --read-only\n *   OAUTH_SECRET=my-secret forge-mcp-server\n *   PORT=3000 forge-mcp-server\n *\n * Endpoints:\n *   POST /mcp    - MCP Streamable HTTP (JSON-RPC messages)\n *   GET  /mcp    - MCP Streamable HTTP (SSE stream for server notifications)\n *   DELETE /mcp  - MCP Streamable HTTP (session termination)\n *   GET  /       - Service info\n *   GET  /health - Health check\n *\n * OAuth 2.1 endpoints (for Claude Desktop):\n *   GET  /.well-known/oauth-authorization-server - OAuth metadata (RFC 8414)\n *   GET  /.well-known/oauth-protected-resource   - Protected resource (RFC 9728)\n *   POST /register  - Dynamic client registration (RFC 7591)\n *   GET  /authorize - Login form\n *   POST /authorize - Process login\n *   POST /token     - Token exchange (PKCE)\n */\n\nimport { toNodeHandler } from \"h3/node\";\nimport { createServer, type Server } from \"node:http\";\n\nimport { createHealthApp, createMcpRequestHandler } from \"./http.ts\";\nimport { parseReadOnlyFlag } from \"./flags.ts\";\nimport { SessionManager } from \"./sessions.ts\";\nimport { VERSION } from \"./version.ts\";\n\nconst DEFAULT_PORT = 3000;\nconst DEFAULT_HOST = \"0.0.0.0\";\n\n/**\n * Options for the HTTP server.\n */\nexport interface HttpStartOptions {\n  /** When true, forge_write tool is not registered. */\n  readOnly?: boolean;\n}\n\n/**\n * Start the HTTP server with Streamable HTTP transport.\n */\nexport function startHttpServer(\n  port: number = DEFAULT_PORT,\n  host: string = DEFAULT_HOST,\n  options?: HttpStartOptions,\n): Promise<Server> {\n  return new Promise((resolve) => {\n    const readOnly = options?.readOnly ?? false;\n    const sessions = new SessionManager();\n    const handleMcp = createMcpRequestHandler(sessions, { readOnly });\n    const healthApp = createHealthApp();\n    const healthHandler = toNodeHandler(healthApp);\n\n    const server = createServer(async (req, res) => {\n      const url = req.url ?? \"/\";\n\n      // Route /mcp to MCP Streamable HTTP transport\n      if (url === \"/mcp\" || url.startsWith(\"/mcp?\")) {\n        await handleMcp(req, res);\n        return;\n      }\n\n      // Everything else goes to h3 (health checks, service info)\n      healthHandler(req, res);\n    });\n\n    server.listen(port, host, () => {\n      const displayHost = host === \"0.0.0.0\" ? \"localhost\" : host;\n      const mode = readOnly ? \" (read-only)\" : \"\";\n      console.log(`Forge MCP server v${VERSION}${mode}`);\n      console.log(`Node.js ${process.version}`);\n      console.log(\"\");\n      console.log(`Running at http://${displayHost}:${port}`);\n      console.log(\"\");\n      console.log(\"Endpoints:\");\n      console.log(\n        `  POST/GET/DELETE http://${displayHost}:${port}/mcp - MCP Streamable HTTP endpoint`,\n      );\n      console.log(`  GET  http://${displayHost}:${port}/health - Health check`);\n      console.log(\"\");\n      console.log(\"Authentication:\");\n      console.log(\"  Bearer token in Authorization header\");\n      console.log(\"  Token format: raw Forge API token or OAuth 2.1 access token\");\n      console.log(\"\");\n      console.log(\"OAuth 2.1 (Claude Desktop):\");\n      console.log(`  GET  http://${displayHost}:${port}/.well-known/oauth-authorization-server`);\n      console.log(`  POST http://${displayHost}:${port}/register`);\n      console.log(`  GET  http://${displayHost}:${port}/authorize`);\n      console.log(`  POST http://${displayHost}:${port}/token`);\n      if (readOnly) {\n        console.log(\"\");\n        console.log(\"Mode: READ-ONLY (write operations disabled)\");\n      }\n      console.log(\"\");\n      resolve(server);\n    });\n  });\n}\n\n// Start server when run directly\nconst isMainModule =\n  import.meta.url === `file://${process.argv[1]}` ||\n  process.argv[1]?.endsWith(\"/forge-mcp-server\") ||\n  process.argv[1]?.endsWith(\"\\\\forge-mcp-server\");\n\nif (isMainModule) {\n  const port = Number.parseInt(process.env.PORT || String(DEFAULT_PORT), 10);\n  const host = process.env.HOST || DEFAULT_HOST;\n  const readOnly = parseReadOnlyFlag();\n\n  startHttpServer(port, host, { readOnly }).catch((error) => {\n    console.error(\"Fatal error:\", error);\n    process.exit(1);\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,IAAM,eAAe;AACrB,IAAM,eAAe;;;;AAarB,SAAgB,gBACd,OAAe,cACf,OAAe,cACf,SACiB;CACjB,OAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,WAAW,SAAS,YAAY;EAEtC,MAAM,YAAY,wBAAwB,IADrB,eACqB,GAAU,EAAE,SAAS,CAAC;EAEhE,MAAM,gBAAgB,cADJ,gBACkB,CAAS;EAE7C,MAAM,SAAS,aAAa,OAAO,KAAK,QAAQ;GAC9C,MAAM,MAAM,IAAI,OAAO;GAGvB,IAAI,QAAQ,UAAU,IAAI,WAAW,OAAO,GAAG;IAC7C,MAAM,UAAU,KAAK,GAAG;IACxB;GACF;GAGA,cAAc,KAAK,GAAG;EACxB,CAAC;EAED,OAAO,OAAO,MAAM,YAAY;GAC9B,MAAM,cAAc,SAAS,YAAY,cAAc;GAEvD,QAAQ,IAAI,qBAAqB,UADpB,WAAW,iBAAiB,IACQ;GACjD,QAAQ,IAAI,WAAW,QAAQ,SAAS;GACxC,QAAQ,IAAI,EAAE;GACd,QAAQ,IAAI,qBAAqB,YAAY,GAAG,MAAM;GACtD,QAAQ,IAAI,EAAE;GACd,QAAQ,IAAI,YAAY;GACxB,QAAQ,IACN,4BAA4B,YAAY,GAAG,KAAK,oCAClD;GACA,QAAQ,IAAI,iBAAiB,YAAY,GAAG,KAAK,uBAAuB;GACxE,QAAQ,IAAI,EAAE;GACd,QAAQ,IAAI,iBAAiB;GAC7B,QAAQ,IAAI,wCAAwC;GACpD,QAAQ,IAAI,+DAA+D;GAC3E,QAAQ,IAAI,EAAE;GACd,QAAQ,IAAI,6BAA6B;GACzC,QAAQ,IAAI,iBAAiB,YAAY,GAAG,KAAK,wCAAwC;GACzF,QAAQ,IAAI,iBAAiB,YAAY,GAAG,KAAK,UAAU;GAC3D,QAAQ,IAAI,iBAAiB,YAAY,GAAG,KAAK,WAAW;GAC5D,QAAQ,IAAI,iBAAiB,YAAY,GAAG,KAAK,OAAO;GACxD,IAAI,UAAU;IACZ,QAAQ,IAAI,EAAE;IACd,QAAQ,IAAI,6CAA6C;GAC3D;GACA,QAAQ,IAAI,EAAE;GACd,QAAQ,MAAM;EAChB,CAAC;CACH,CAAC;AACH;AAQA,IAJE,OAAO,KAAK,QAAQ,UAAU,QAAQ,KAAK,QAC3C,QAAQ,KAAK,EAAE,EAAE,SAAS,mBAAmB,KAC7C,QAAQ,KAAK,EAAE,EAAE,SAAS,oBAAoB,GAO9C,gBAJa,OAAO,SAAS,QAAQ,IAAI,QAAQ,OAAO,YAAY,GAAG,EAIvD,GAHH,QAAQ,IAAI,QAAQ,cAGL,EAAE,UAFb,kBAEa,EAAS,CAAC,CAAC,CAAC,OAAO,UAAU;CACzD,QAAQ,MAAM,gBAAgB,KAAK;CACnC,QAAQ,KAAK,CAAC;AAChB,CAAC"}

package/dist/{version-brWM16Jb.js → version-BdjPN_IX.js}

@@ -3,6 +3,7 @@ import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { HttpClient, isForgeApiError } from "@studiometa/forge-api";
 import { RESOURCES, activateCertificate, createAuditLogger, createBackupConfig, createCertificate, createCommand, createDaemon, createDatabase, createDatabaseUser, createFirewallRule, createMonitor, createNginxTemplate, createRecipe, createRedirectRule, createScheduledJob, createSecurityRule, createServer, createSite, createSshKey, deleteBackupConfig, deleteCertificate, deleteDaemon, deleteDatabase, deleteDatabaseUser, deleteFirewallRule, deleteMonitor, deleteNginxTemplate, deleteRecipe, deleteRedirectRule, deleteScheduledJob, deleteSecurityRule, deleteServer, deleteSite, deleteSshKey, deploySiteAndWait, getBackupConfig, getCertificate, getCommand, getDaemon, getDatabase, getDatabaseUser, getDeploymentLog, getDeploymentScript, getEnv, getFirewallRule, getMonitor, getNginxConfig, getNginxTemplate, getRecipe, getRedirectRule, getScheduledJob, getSecurityRule, getServer, getSite, getSshKey, getUser, listBackupConfigs, listCommands, listDaemons, listDatabaseUsers, listDatabases, listDeployments, listFirewallRules, listMonitors, listNginxTemplates, listRecipes, listRedirectRules, listScheduledJobs, listSecurityRules, listServers, listSites, listSshKeys, rebootServer, resolveServers, resolveSites, restartDaemon, runRecipe, updateBackupConfig, updateDaemon, updateDatabaseUser, updateDeploymentScript, updateEnv, updateNginxConfig, updateNginxTemplate, updateRecipe, updateSecurityRule, updateSite } from "@studiometa/forge-core";
+//#region src/instructions.ts
 /**
 * MCP Server Instructions
 *
@@ -24,7 +25,9 @@ function loadInstructions() {
 		return "Laravel Forge MCP Server - Use the forge tool with resource and action parameters. Call action=\"help\" for documentation.";
 	}
 }
-const INSTRUCTIONS = loadInstructions();
+var INSTRUCTIONS = loadInstructions();
+//#endregion
+//#region ../../node_modules/valibot/dist/index.mjs
 var store$4;
 /**
 * Returns the global configuration.
@@ -417,6 +420,8 @@ function safeParse(schema, input, config$1) {
 		issues: dataset.issues
 	};
 }
+//#endregion
+//#region src/formatters.ts
 /**
 * Format a list of servers.
 */
@@ -740,6 +745,8 @@ function formatUser(user) {
 		`Created: ${user.created_at}`
 	].join("\n");
 }
+//#endregion
+//#region src/errors.ts
 /**
 * Custom error classes for MCP server
 *
@@ -774,6 +781,8 @@ var UserInputError = class extends Error {
 function isUserInputError(error) {
 	return error instanceof UserInputError;
 }
+//#endregion
+//#region src/handlers/utils.ts
 /**
 * Create a successful result with both human-readable text and structured content.
 *
@@ -818,6 +827,8 @@ function errorResult(message) {
 		isError: true
 	};
 }
+//#endregion
+//#region src/handlers/factory.ts
 /**
 * Factory for creating Forge resource handlers.
 *
@@ -875,7 +886,9 @@ function createResourceHandler(config) {
 		return jsonResult(result.data);
 	};
 }
-const handleBackups = createResourceHandler({
+//#endregion
+//#region src/handlers/backups.ts
+var handleBackups = createResourceHandler({
 	resource: "backups",
 	actions: [
 		"list",
@@ -931,14 +944,17 @@ const handleBackups = createResourceHandler({
 			case "create": return "Done.";
 			case "update": return "Done.";
 			case "delete": return `Backup config ${args.id} deleted.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
+//#endregion
+//#region src/tools.ts
 /**
 * Read-only actions — safe operations that don't modify server state.
 */
-const READ_ACTIONS = [
+var READ_ACTIONS = [
 	"list",
 	"get",
 	"resolve",
@@ -950,7 +966,7 @@ const READ_ACTIONS = [
 * Write actions — operations that modify server state.
 * These are separated into the `forge_write` tool for safety.
 */
-const WRITE_ACTIONS = [
+var WRITE_ACTIONS = [
 	"create",
 	"update",
 	"delete",
@@ -1042,7 +1058,7 @@ var SHARED_INPUT_PROPERTIES = {
 * - `forge` — read-only operations (auto-approvable by MCP clients)
 * - `forge_write` — write operations (always requires confirmation)
 */
-const TOOLS = [{
+var TOOLS = [{
 	name: "forge",
 	title: "Laravel Forge",
 	description: [
@@ -1227,7 +1243,7 @@ function getTools(options) {
 /**
 * Additional tools only available in stdio mode.
 */
-const STDIO_ONLY_TOOLS = [{
+var STDIO_ONLY_TOOLS = [{
 	name: "forge_configure",
 	title: "Configure Forge",
 	description: "Configure Laravel Forge API credentials. The token is stored locally in the XDG config directory.",
@@ -1300,6 +1316,8 @@ const STDIO_ONLY_TOOLS = [{
 		required: ["configured"]
 	}
 }];
+//#endregion
+//#region src/handlers/batch.ts
 var MAX_OPERATIONS = 10;
 /**
 * Validate and narrow an array element to a BatchOperation.
@@ -1392,6 +1410,8 @@ async function handleBatch(action, args, ctx, routeToHandler) {
 		results
 	});
 }
+//#endregion
+//#region src/hints.ts
 /**
 * Hints after getting a server.
 */
@@ -1755,7 +1775,9 @@ function getNginxTemplateHints(serverId, templateId) {
 		}]
 	};
 }
-const handleCertificates = createResourceHandler({
+//#endregion
+//#region src/handlers/certificates.ts
+var handleCertificates = createResourceHandler({
 	resource: "certificates",
 	actions: [
 		"get",
@@ -1799,11 +1821,14 @@ const handleCertificates = createResourceHandler({
 			case "create": return formatCertificate(data);
 			case "delete": return `Certificate for domain ${String(args.domain_id)} deleted.`;
 			case "activate": return `Certificate for domain ${String(args.domain_id)} activated.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
-const handleCommands = createResourceHandler({
+//#endregion
+//#region src/handlers/commands.ts
+var handleCommands = createResourceHandler({
 	resource: "commands",
 	actions: [
 		"list",
@@ -1836,11 +1861,14 @@ const handleCommands = createResourceHandler({
 			case "list": return formatCommandList(data);
 			case "get": return formatCommand(data);
 			case "create": return "Done.";
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
-const handleDaemons = createResourceHandler({
+//#endregion
+//#region src/handlers/daemons.ts
+var handleDaemons = createResourceHandler({
 	resource: "daemons",
 	actions: [
 		"list",
@@ -1892,11 +1920,14 @@ const handleDaemons = createResourceHandler({
 			case "update": return formatDaemon(data);
 			case "delete": return `Daemon ${args.id} deleted.`;
 			case "restart": return `Daemon ${args.id} restarted.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
-const handleDatabases = createResourceHandler({
+//#endregion
+//#region src/handlers/databases.ts
+var handleDatabases = createResourceHandler({
 	resource: "databases",
 	actions: [
 		"list",
@@ -1932,11 +1963,14 @@ const handleDatabases = createResourceHandler({
 			case "get": return formatDatabase(data);
 			case "create": return formatDatabase(data);
 			case "delete": return `Database ${args.id} deleted.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
-const handleDatabaseUsers = createResourceHandler({
+//#endregion
+//#region src/handlers/database-users.ts
+var handleDatabaseUsers = createResourceHandler({
 	resource: "database-users",
 	actions: [
 		"list",
@@ -1982,10 +2016,13 @@ const handleDatabaseUsers = createResourceHandler({
 			case "create": return formatDatabaseUser(data);
 			case "update": return formatDatabaseUser(data);
 			case "delete": return `Database user ${args.id} deleted.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
+//#endregion
+//#region src/handlers/deployments.ts
 /**
 * Handle deployment resource actions.
 *
@@ -2031,7 +2068,9 @@ async function handleDeployments(action, args, ctx) {
 		default: return errorResult(`Unknown action "${action}" for deployments. Valid actions: list, deploy, get, update.`);
 	}
 }
-const handleEnv = createResourceHandler({
+//#endregion
+//#region src/handlers/env.ts
+var handleEnv = createResourceHandler({
 	resource: "env",
 	actions: ["get", "update"],
 	inputSchemas: {
@@ -2058,11 +2097,14 @@ const handleEnv = createResourceHandler({
 		switch (action) {
 			case "get": return formatEnv(data);
 			case "update": return "Environment variables updated.";
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
-const handleFirewallRules = createResourceHandler({
+//#endregion
+//#region src/handlers/firewall-rules.ts
+var handleFirewallRules = createResourceHandler({
 	resource: "firewall-rules",
 	actions: [
 		"list",
@@ -2099,10 +2141,13 @@ const handleFirewallRules = createResourceHandler({
 			case "get": return formatFirewallRule(data);
 			case "create": return "Done.";
 			case "delete": return `Firewall rule ${args.id} deleted.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
+//#endregion
+//#region src/handlers/help.ts
 var RESOURCE_HELP = {
 	servers: {
 		description: "Manage Laravel Forge servers — provisioned cloud instances (DigitalOcean, AWS, Hetzner, etc.)",
@@ -2893,7 +2938,9 @@ function handleHelpOverview() {
 		_tip: "Always call { action: 'help', resource: '<name>' } before your first interaction with any resource to learn required fields and examples."
 	});
 }
-const handleMonitors = createResourceHandler({
+//#endregion
+//#region src/handlers/monitors.ts
+var handleMonitors = createResourceHandler({
 	resource: "monitors",
 	actions: [
 		"list",
@@ -2931,11 +2978,14 @@ const handleMonitors = createResourceHandler({
 			case "get": return formatMonitor(data);
 			case "create": return formatMonitor(data);
 			case "delete": return `Monitor ${args.id} deleted.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
-const handleNginxConfig = createResourceHandler({
+//#endregion
+//#region src/handlers/nginx-config.ts
+var handleNginxConfig = createResourceHandler({
 	resource: "nginx",
 	actions: ["get", "update"],
 	inputSchemas: {
@@ -2962,11 +3012,14 @@ const handleNginxConfig = createResourceHandler({
 		switch (action) {
 			case "get": return formatNginxConfig(data);
 			case "update": return "Nginx configuration updated.";
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
-const handleNginxTemplates = createResourceHandler({
+//#endregion
+//#region src/handlers/nginx-templates.ts
+var handleNginxTemplates = createResourceHandler({
 	resource: "nginx-templates",
 	actions: [
 		"list",
@@ -3010,11 +3063,14 @@ const handleNginxTemplates = createResourceHandler({
 			case "create": return formatNginxTemplate(data);
 			case "update": return formatNginxTemplate(data);
 			case "delete": return `Nginx template ${args.id} deleted.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
-const handleRecipes = createResourceHandler({
+//#endregion
+//#region src/handlers/recipes.ts
+var handleRecipes = createResourceHandler({
 	resource: "recipes",
 	actions: [
 		"list",
@@ -3063,11 +3119,14 @@ const handleRecipes = createResourceHandler({
 				const count = Array.isArray(servers) ? servers.length : 1;
 				return `Recipe ${args.id} run on ${count} server(s).`;
 			}
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
-const handleRedirectRules = createResourceHandler({
+//#endregion
+//#region src/handlers/redirect-rules.ts
+var handleRedirectRules = createResourceHandler({
 	resource: "redirect-rules",
 	actions: [
 		"list",
@@ -3109,11 +3168,14 @@ const handleRedirectRules = createResourceHandler({
 			case "get": return formatRedirectRule(data);
 			case "create": return "Done.";
 			case "delete": return `Redirect rule ${args.id} deleted.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
-const handleScheduledJobs = createResourceHandler({
+//#endregion
+//#region src/handlers/scheduled-jobs.ts
+var handleScheduledJobs = createResourceHandler({
 	resource: "scheduled-jobs",
 	actions: [
 		"list",
@@ -3154,10 +3216,13 @@ const handleScheduledJobs = createResourceHandler({
 			case "get": return formatScheduledJob(data);
 			case "create": return formatScheduledJob(data);
 			case "delete": return `Scheduled job ${args.id} deleted.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
+//#endregion
+//#region src/handlers/schema.ts
 var RESOURCE_SCHEMAS = {
 	servers: {
 		actions: [
@@ -3851,7 +3916,9 @@ function handleSchemaOverview() {
 		}))
 	});
 }
-const handleSecurityRules = createResourceHandler({
+//#endregion
+//#region src/handlers/security-rules.ts
+var handleSecurityRules = createResourceHandler({
 	resource: "security-rules",
 	actions: [
 		"list",
@@ -3904,10 +3971,13 @@ const handleSecurityRules = createResourceHandler({
 			case "create": return formatSecurityRule(data);
 			case "update": return formatSecurityRule(data);
 			case "delete": return `Security rule ${args.id} deleted.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
+//#endregion
+//#region src/handlers/context.ts
 /**
 * Handle server context action — fetches server details plus all sub-resources
 * (sites, databases, database users, daemons, firewall rules, scheduled jobs)
@@ -3973,6 +4043,8 @@ async function handleSiteContext(args, ctx) {
 		security_rules: securityRules.data
 	});
 }
+//#endregion
+//#region src/handlers/servers.ts
 var _handleServers = createResourceHandler({
 	resource: "servers",
 	actions: [
@@ -4011,9 +4083,12 @@ var _handleServers = createResourceHandler({
 			case "reboot": return { server_id: args.id };
 			case "create": return {
 				provider: args.provider,
+				/* v8 ignore next */
 				credential_id: Number(args.credential_id) || 0,
 				name: args.name,
+				/* v8 ignore next */
 				type: args.type ?? "app",
+				/* v8 ignore next */
 				size: args.size ?? "",
 				region: args.region
 			};
@@ -4034,6 +4109,7 @@ var _handleServers = createResourceHandler({
 				const lines = result.matches.map((m) => `• ${m.name} (ID: ${m.id})`);
 				return `${result.total} server(s) matching "${result.query}":\n${lines.join("\n")}`;
 			}
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
@@ -4046,6 +4122,8 @@ async function handleServers(action, args, ctx) {
 	if (action === "context") return handleServerContext(args, ctx);
 	return _handleServers(action, args, ctx);
 }
+//#endregion
+//#region src/handlers/sites.ts
 var _handleSites = createResourceHandler({
 	resource: "sites",
 	actions: [
@@ -4119,6 +4197,7 @@ var _handleSites = createResourceHandler({
 				server_id: args.server_id,
 				query: args.query
 			};
+			/* v8 ignore next */
 			default: return {};
 		}
 	},
@@ -4135,6 +4214,7 @@ var _handleSites = createResourceHandler({
 				const lines = result.matches.map((m) => `• ${m.name} (ID: ${m.id})`);
 				return `${result.total} site(s) matching "${result.query}" on server ${args.server_id}:\n${lines.join("\n")}`;
 			}
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
@@ -4147,7 +4227,9 @@ async function handleSites(action, args, ctx) {
 	if (action === "context") return handleSiteContext(args, ctx);
 	return _handleSites(action, args, ctx);
 }
-const handleSshKeys = createResourceHandler({
+//#endregion
+//#region src/handlers/ssh-keys.ts
+var handleSshKeys = createResourceHandler({
 	resource: "ssh-keys",
 	actions: [
 		"list",
@@ -4184,11 +4266,14 @@ const handleSshKeys = createResourceHandler({
 			case "get": return formatSshKey(data);
 			case "create": return "Done.";
 			case "delete": return `SSH key ${args.id} deleted.`;
+			/* v8 ignore next */
 			default: return "Done.";
 		}
 	}
 });
-const handleUser = createResourceHandler({
+//#endregion
+//#region src/handlers/user.ts
+var handleUser = createResourceHandler({
 	resource: "user",
 	actions: ["get"],
 	executors: { get: getUser },
@@ -4196,6 +4281,8 @@ const handleUser = createResourceHandler({
 		return formatUser(data);
 	}
 });
+//#endregion
+//#region src/handlers/auto-resolve.ts
 /**
 * Check if a value is a numeric ID.
 */
@@ -4258,6 +4345,8 @@ async function autoResolveIds(args, executorContext) {
 		args: resolved
 	};
 }
+//#endregion
+//#region src/handlers/index.ts
 /** Valid resources derived from core constants */
 var VALID_RESOURCES = [...RESOURCES];
 var _auditLogger = null;
@@ -4291,6 +4380,7 @@ function routeToHandler(resource, action, args, ctx) {
 		case "scheduled-jobs": return handleScheduledJobs(action, args, ctx);
 		case "user": return handleUser(action, args, ctx);
 		case "batch": return handleBatch(action, args, ctx, routeToHandler);
+		/* v8 ignore next 6 -- all valid resources are handled above; unreachable in practice */
 		default: return Promise.resolve(errorResult(`Unknown resource "${resource}". Valid resources: ${VALID_RESOURCES.join(", ")}. Use action="help" for documentation.`));
 	}
 }
@@ -4375,7 +4465,10 @@ async function executeToolWithCredentials(name, args, credentials) {
 		return errorResult(errorMessage);
 	}
 }
-const VERSION = "0.4.3";
+//#endregion
+//#region src/version.ts
+var VERSION = "0.4.5";
+//#endregion
 export { INSTRUCTIONS as a, getTools as i, executeToolWithCredentials as n, STDIO_ONLY_TOOLS as r, VERSION as t };
 
-//# sourceMappingURL=version-brWM16Jb.js.map
+//# sourceMappingURL=version-BdjPN_IX.js.map