@togglhq/mcp 1.12.7 → 1.13.0

package/build/{src-RGqqLBRK.js → src-Wi0RVSpx.js}

@@ -10865,7 +10865,7 @@ var require_localDisplayPath = /* @__PURE__ */ __commonJSMin$1(((exports, module
 	module.exports = localDisplayPath;
 }));
 //#endregion
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/chunk-Br0eD_fh.mjs
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.3.0/node_modules/@modelcontextprotocol/server/dist/chunk-Br0eD_fh.mjs
 var import_main = /* @__PURE__ */ __toESM$1((/* @__PURE__ */ __commonJSMin$1(((exports, module) => {
 	const path$1 = __require("path");
 	const { setLogLevel, setLogName, setLogVersion, logger } = require_logger();
@@ -11078,7 +11078,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/dialects-DoSzNhcb.mjs
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.3.0/node_modules/@modelcontextprotocol/server/dist/dialects-DoSzNhcb.mjs
 /**
 * Canonical `$schema` URIs per supported dialect (http + https variants, trailing-`#` stripped).
 */
@@ -16852,7 +16852,8 @@ const OAuthMetadataSchema = looseObject$1({
 	introspection_endpoint_auth_signing_alg_values_supported: array$2(string$2()).optional(),
 	code_challenge_methods_supported: array$2(string$2()).optional(),
 	client_id_metadata_document_supported: boolean$2().optional(),
-	authorization_response_iss_parameter_supported: boolean$2().optional().catch(void 0)
+	authorization_response_iss_parameter_supported: boolean$2().optional().catch(void 0),
+	dpop_signing_alg_values_supported: array$2(string$2()).optional()
 });
 /**
 * OpenID Connect Discovery 1.0 Provider Metadata
@@ -16916,7 +16917,8 @@ const OAuthTokensSchema = object$1({
 	token_type: string$2(),
 	expires_in: number$1().optional(),
 	scope: string$2().optional(),
-	refresh_token: string$2().optional()
+	refresh_token: string$2().optional(),
+	issuer: string$2().optional().catch(void 0)
 }).strip();
 /**
 * RFC 8693 §2.2.1 Token Exchange response for ID-JAG tokens.
@@ -16973,7 +16975,8 @@ const OAuthClientInformationSchema = object$1({
 	client_id: string$2(),
 	client_secret: string$2().optional(),
 	client_id_issued_at: number$3().optional(),
-	client_secret_expires_at: number$3().optional()
+	client_secret_expires_at: number$3().optional(),
+	issuer: string$2().optional().catch(void 0)
 }).strip();
 /**
 * RFC 7591 OAuth 2.0 Dynamic Client Registration full response (client information plus metadata)
@@ -16994,7 +16997,7 @@ const OAuthTokenRevocationRequestSchema = object$1({
 	token_type_hint: string$2().optional()
 }).strip();
 //#endregion
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/src-CX2iR2pK.mjs
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.3.0/node_modules/@modelcontextprotocol/server/dist/src-Cqbh3MYc.mjs
 /**
 * Cross-bundle `instanceof` support for the SDK error classes.
 *
@@ -17259,8 +17262,18 @@ var SdkError = class extends Error {
 		if (typeof this !== "function") throw new TypeError("isInstance must be called on the class (e.g. `SdkError.isInstance(value)`); for callbacks use `v => SdkError.isInstance(v)`");
 		return brandedHasInstance(this, value);
 	}
-	constructor(code, message, data) {
-		super(message);
+	/**
+	* @param code - Stable string code identifying the failure ({@linkcode SdkErrorCode}).
+	* @param message - Human-readable description.
+	* @param data - Optional structured payload (for example the HTTP status carried by
+	* {@linkcode SdkHttpError}). Opaque to the SDK: a `cause` key inside `data` is not
+	* promoted to `Error.cause`.
+	* @param options - Standard `ErrorOptions`, forwarded to `Error`. Pass the underlying
+	* failure as `{ cause }` so it is reachable through the `Error.cause` chain that
+	* loggers and error trackers walk.
+	*/
+	constructor(code, message, data, options) {
+		super(message, options);
 		this.code = code;
 		this.data = data;
 		this.name = "SdkError";
@@ -17271,8 +17284,11 @@ var SdkError = class extends Error {
 	static {
 		Object.defineProperty(this, "mcpBrand", { value: "mcp.SdkHttpError" });
 	}
-	constructor(code, message, data) {
-		super(code, message, data);
+	/**
+	* @param options - Standard `ErrorOptions`, forwarded to `Error` (see {@linkcode SdkError}).
+	*/
+	constructor(code, message, data, options) {
+		super(code, message, data, options);
 		this.name = "SdkHttpError";
 	}
 	get status() {
@@ -19930,7 +19946,7 @@ function build() {
 	const subscriptionsListenParamsShape = { notifications: SubscriptionFilterSchema$1 };
 	const SubscriptionsListenRequestSchema$1 = wireRequest("subscriptions/listen", subscriptionsListenParamsShape);
 	/**
-	* Anchor SubscriptionsListenResultMeta — required subscriptionId stamp on
+	* Anchor SubscriptionsListenResultMetaObject — required subscriptionId stamp on
 	* the graceful-close result. Extends `ResultMetaObject` since spec PR
 	* #3002 (composed, so the serverInfo key and its leniency stay single-sourced).
 	*/
@@ -20203,7 +20219,8 @@ function build() {
 		ListResourceTemplatesResultResponseSchema: wireResultResponse(ListResourceTemplatesResultSchema$1),
 		ReadResourceResultResponseSchema: wireResultResponse(union$2([ReadResourceResultSchema$1, InputRequiredResultSchema])),
 		CompleteResultResponseSchema: wireResultResponse(CompleteResultSchema$1),
-		DiscoverResultResponseSchema: wireResultResponse(DiscoverResultSchema$1)
+		DiscoverResultResponseSchema: wireResultResponse(DiscoverResultSchema$1),
+		SubscriptionsListenResultResponseSchema: wireResultResponse(SubscriptionsListenResultSchema$1)
 	};
 }
 let memo;
@@ -20834,6 +20851,8 @@ const rev2026Codec = {
 			const rawInputRequests = raw["inputRequests"];
 			const inputRequests = isPlainObject$4(rawInputRequests) ? rawInputRequests : {};
 			const requestState = raw["requestState"];
+			const metaParse = raw["_meta"] === void 0 ? void 0 : buildSchemas2026().ResultMetaSchema.safeParse(raw["_meta"]);
+			const meta = metaParse?.success ? metaParse.data : void 0;
 			if (Object.keys(inputRequests).length === 0 && typeof requestState !== "string") return {
 				kind: "invalid",
 				error: new SdkError(SdkErrorCode.InvalidResult, `Invalid result for ${method}: input_required carries neither inputRequests nor requestState (every input_required result must include at least one of the two)`, {
@@ -20844,7 +20863,8 @@ const rev2026Codec = {
 			return {
 				kind: "input_required",
 				inputRequests,
-				...typeof requestState === "string" && { requestState }
+				...typeof requestState === "string" && { requestState },
+				...meta !== void 0 && { _meta: meta }
 			};
 		}
 		if (rawResultType !== "complete") return {
@@ -20942,6 +20962,10 @@ function isSpecRequestMethod(method) {
 function isSpecNotificationMethod(method) {
 	return ALL_CODECS.some((codec) => codec.hasNotificationMethod(method));
 }
+/** The names SEP-2663 re-defines for the Tasks extension on the era that removed them from core. */
+function isExtensionReusedRequestMethod(method) {
+	return method === "tasks/get" || method === "tasks/cancel";
+}
 const ALL_CODECS = [rev2025Codec, rev2026Codec];
 /**
 * Per-request `_meta` envelope claim helpers (protocol revision 2026-07-28).
@@ -22111,6 +22135,8 @@ var Protocol = class {
 	_transport;
 	_requestMessageId = 0;
 	_requestHandlers = /* @__PURE__ */ new Map();
+	/** Methods registered with an explicit schema; the era gate in `_onrequest` reads it for the Tasks extension names. */
+	_customSchemaRequestMethods = /* @__PURE__ */ new Set();
 	_requestHandlerAbortControllers = /* @__PURE__ */ new Map();
 	_notificationHandlers = /* @__PURE__ */ new Map();
 	_responseHandlers = /* @__PURE__ */ new Map();
@@ -22245,7 +22271,7 @@ var Protocol = class {
 		return this._requestHandlers.get(method);
 	}
 	async _oncancel(notification) {
-		if (!notification.params.requestId) return;
+		if (notification.params.requestId === void 0) return;
 		this._requestHandlerAbortControllers.get(notification.params.requestId)?.abort(notification.params.reason);
 	}
 	_setupTimeout(messageId, timeout, maxTotalTimeout, onTimeout, resetTimeoutOnProgress = false) {
@@ -22392,7 +22418,7 @@ var Protocol = class {
 				return;
 			}
 		}
-		if (isSpecRequestMethod(request.method) && !codec.hasRequestMethod(request.method)) {
+		if (isSpecRequestMethod(request.method) && !codec.hasRequestMethod(request.method) && !(isExtensionReusedRequestMethod(request.method) && this._customSchemaRequestMethods.has(request.method))) {
 			sendErrorResponse(ProtocolErrorCode.MethodNotFound, "Method not found");
 			return;
 		}
@@ -22525,8 +22551,11 @@ var Protocol = class {
 	}
 	request(request, schemaOrOptions, maybeOptions) {
 		const codec = this._resolveOutboundCodec(request.method);
+		if (isStandardSchema(schemaOrOptions)) {
+			if (!isExtensionReusedRequestMethod(request.method)) this._assertOutboundRequestInEra(codec, request.method);
+			return this._requestWithSchemaViaCodec(codec, request, schemaOrOptions, maybeOptions);
+		}
 		this._assertOutboundRequestInEra(codec, request.method);
-		if (isStandardSchema(schemaOrOptions)) return this._requestWithSchemaViaCodec(codec, request, schemaOrOptions, maybeOptions);
 		const validate = codecResultValidator(codec, request.method);
 		if (validate === void 0) throw new TypeError(`'${request.method}' is not a spec method; pass a result schema as the second argument to request().`);
 		return this._requestWithSchemaViaCodec(codec, request, validate, schemaOrOptions);
@@ -22644,19 +22673,20 @@ var Protocol = class {
 			const cancel = (reason) => {
 				if (responseReceived) return;
 				this._progressHandlers.delete(messageId);
-				if (requestAbort === void 0) this._transport?.send(this._envelopeOutbound({
-					jsonrpc: "2.0",
-					method: "notifications/cancelled",
-					params: {
-						requestId: messageId,
-						reason: String(reason)
-					}
-				}), {
-					relatedRequestId,
-					resumptionToken,
-					onresumptiontoken
-				}).catch((error) => this._onerror(/* @__PURE__ */ new Error(`Failed to send cancellation: ${error}`)));
-				else requestAbort.abort();
+				if (requestAbort === void 0) {
+					if (request.method !== "initialize") this._transport?.send(this._envelopeOutbound({
+						jsonrpc: "2.0",
+						method: "notifications/cancelled",
+						params: {
+							requestId: messageId,
+							reason: String(reason)
+						}
+					}), {
+						relatedRequestId,
+						resumptionToken,
+						onresumptiontoken
+					}).catch((error) => this._onerror(/* @__PURE__ */ new Error(`Failed to send cancellation: ${error}`)));
+				} else requestAbort.abort();
 				reject(reason instanceof SdkError ? reason : new SdkError(SdkErrorCode.RequestTimeout, String(reason)));
 			};
 			this._responseHandlers.set(messageId, (response) => {
@@ -22718,7 +22748,7 @@ var Protocol = class {
 	* Emits a notification, which is a one-way message that does not expect a response.
 	*/
 	async notification(notification, options) {
-		return this._notificationViaCodec(this._resolveOutboundCodec(notification.method), notification, options);
+		return await this._notificationViaCodec(this._resolveOutboundCodec(notification.method), notification, options);
 	}
 	/**
 	* The notification funnel proper, keyed by the resolved era codec —
@@ -22736,7 +22766,7 @@ var Protocol = class {
 			jsonrpc: "2.0",
 			...notification
 		});
-		if ((this._options?.debouncedNotificationMethods ?? []).includes(notification.method) && !notification.params && !options?.relatedRequestId) {
+		if ((this._options?.debouncedNotificationMethods ?? []).includes(notification.method) && !notification.params && options?.relatedRequestId === void 0) {
 			if (this._pendingDebouncedNotifications.has(notification.method)) return;
 			this._pendingDebouncedNotifications.add(notification.method);
 			Promise.resolve().then(() => {
@@ -22769,6 +22799,8 @@ var Protocol = class {
 			return maybeHandler(parsed.data, ctx);
 		};
 		else throw new TypeError("setRequestHandler: handler is required");
+		if (typeof schemasOrHandler === "function") this._customSchemaRequestMethods.delete(method);
+		else this._customSchemaRequestMethods.add(method);
 		this._requestHandlers.set(method, this._wrapHandler(method, stored));
 	}
 	/**
@@ -22797,6 +22829,7 @@ var Protocol = class {
 	*/
 	removeRequestHandler(method) {
 		this._requestHandlers.delete(method);
+		this._customSchemaRequestMethods.delete(method);
 	}
 	/**
 	* Asserts that a request handler has not already been set for the given method, in preparation for a new one being automatically installed.
@@ -22887,7 +22920,8 @@ function manualInputRequiredValue(decoded) {
 	return {
 		resultType: "input_required",
 		inputRequests: decoded.inputRequests,
-		...decoded.requestState !== void 0 && { requestState: decoded.requestState }
+		...decoded.requestState !== void 0 && { requestState: decoded.requestState },
+		...decoded._meta !== void 0 && { _meta: decoded._meta }
 	};
 }
 (/* @__PURE__ */ __commonJSMin(((exports) => {
@@ -23134,7 +23168,7 @@ function normalizeRawShapeSchema(schema) {
 	return schema;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/ajvProvider-CEoC__sr.mjs
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.3.0/node_modules/@modelcontextprotocol/server/dist/ajvProvider-CEoC__sr.mjs
 var require_code$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
 	exports.regexpCode = exports.getEsmExportName = exports.getProperty = exports.safeStringify = exports.stringify = exports.strConcat = exports.addCodeArg = exports.str = exports._ = exports.nil = exports._Code = exports.Name = exports.IDENTIFIER = exports._CodeOrName = void 0;
@@ -30269,7 +30303,7 @@ var AjvJsonSchemaValidator = class {
 };
 import_ajv.Ajv;
 //#endregion
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/mcp-DXXb3Vv3.mjs
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.3.0/node_modules/@modelcontextprotocol/server/dist/mcp-DIH4cS6P.mjs
 const COMPLETABLE_SYMBOL = Symbol.for("mcp.completable");
 /**
 * Checks if a schema is completable (has completion metadata).
@@ -30379,7 +30413,7 @@ var StdioListenRouter = class {
 	_serverCapabilities;
 	/**
 	* The serving instance's identity, stamped onto the graceful-close
-	* results' `_meta` (the spec's `SubscriptionsListenResultMeta` extends
+	* results' `_meta` (the spec's `SubscriptionsListenResultMetaObject` extends
 	* `ResultMetaObject`). Handed over together with the capabilities.
 	*/
 	_serverInfo;
@@ -30503,6 +30537,10 @@ function notificationToServerEvent(method, uri) {
 		};
 	}
 }
+/** @internal */
+function supportsScopeChallengeResolver(transport) {
+	return typeof transport === "object" && transport !== null && "setScopeChallengeResolver" in transport && typeof transport.setScopeChallengeResolver === "function";
+}
 /**
 * Default handler re-entries per originating request — tighter than the
 * client driver's 10 because the shim holds a live wire request open.
@@ -30675,7 +30713,7 @@ function installModernOnlyHandlers(server, servedModernVersions) {
 * Package-internal: the instance's implementation identity, for the serving
 * entries to stamp onto entry-built results (the `subscriptions/listen`
 * graceful-close result — built outside the encode seam, but the spec's
-* `SubscriptionsListenResultMeta` extends `ResultMetaObject`, so it carries
+* `SubscriptionsListenResultMetaObject` extends `ResultMetaObject`, so it carries
 * the serverInfo SHOULD like every other result). Not public API.
 */
 function serverIdentityOf(server) {
@@ -30742,6 +30780,11 @@ var Server = class extends Protocol {
 		if (modernProtocolVersions(this._supportedProtocolVersions).length > 0) this.setRequestHandler("server/discover", () => this._ondiscover());
 		if (this._capabilities.logging) this._registerLoggingHandler();
 	}
+	/** Attaches to the given transport; rejects while this instance is connected to another one. */
+	async connect(transport) {
+		if (this.transport !== void 0) throw new SdkError(SdkErrorCode.AlreadyConnected, "Use a separate Server instance per connection: this instance is already connected to a transport. To connect it to a new transport, call close() first.");
+		await super.connect(transport);
+	}
 	/**
 	* Registers the built-in `logging/setLevel` request handler.
 	*
@@ -31300,6 +31343,30 @@ var Server = class extends Protocol {
 function discoverAdvertisedCapabilities(capabilities) {
 	return { ...capabilities };
 }
+function toolInputElementCount(value, max) {
+	let count = 0;
+	const stack = [value];
+	while (stack.length > 0) {
+		const node = stack.pop();
+		if (node === null || typeof node !== "object") continue;
+		if (Array.isArray(node)) for (const child of node) {
+			if (++count > max) return count;
+			if (child !== null && typeof child === "object") stack.push(child);
+		}
+		else for (const key in node) {
+			if (!Object.prototype.hasOwnProperty.call(node, key)) continue;
+			if (++count > max) return count;
+			const child = node[key];
+			if (child !== null && typeof child === "object") stack.push(child);
+		}
+	}
+	return count;
+}
+function resolveMaxToolInputElements(value) {
+	if (value === void 0 || value === Infinity) return void 0;
+	if (typeof value !== "number" || Number.isNaN(value) || value < 1) throw new RangeError(`maxToolInputElements must be a number of at least 1, or Infinity, got ${String(value)}`);
+	return value;
+}
 /**
 * High-level MCP server that provides a simpler API for working with resources, tools, and prompts.
 * For advanced usage (like sending notifications or setting custom request handlers), use the underlying
@@ -31318,16 +31385,12 @@ var McpServer = class {
 	* The underlying {@linkcode Server} instance, useful for advanced operations like sending notifications.
 	*/
 	server;
+	_maxToolInputElements;
 	_registeredResources = {};
 	_registeredResourceTemplates = {};
 	_registeredTools = {};
 	_registeredPrompts = {};
-	/**
-	* Per-tool JSON-converted `inputSchema`, memoized so the SEP-2243
-	* registration-time scan and the pre-dispatch validation step share one
-	* conversion instead of paying it twice per request under the
-	* per-request-factory `createMcpHandler` model.
-	*/
+	/** Per-tool JSON-converted `inputSchema`, filled on first use by `toolInputSchemaJson()`. */
 	_toolInputSchemaJson = {};
 	/**
 	* The JSON-serialized `inputSchema` of a registered tool, or `undefined`
@@ -31352,6 +31415,7 @@ var McpServer = class {
 	}
 	constructor(serverInfo, options) {
 		this.server = new Server(serverInfo, options);
+		this._maxToolInputElements = resolveMaxToolInputElements(options?.maxToolInputElements);
 		if (options?.capabilities?.tools) this.setToolRequestHandlers();
 		if (options?.capabilities?.resources) this.setResourceRequestHandlers();
 		if (options?.capabilities?.prompts) this.setPromptRequestHandlers();
@@ -31369,6 +31433,7 @@ var McpServer = class {
 	* ```
 	*/
 	async connect(transport) {
+		if (supportsScopeChallengeResolver(transport)) transport.setScopeChallengeResolver((context) => this.resolveScopeChallenge(context));
 		return await this.server.connect(transport);
 	}
 	/**
@@ -31377,6 +31442,40 @@ var McpServer = class {
 	async close() {
 		await this.server.close();
 	}
+	/** @internal */
+	resolveScopeChallenge = (context) => {
+		switch (context.request.method) {
+			case "tools/call": {
+				const toolName = context.request.params?.name;
+				if (typeof toolName !== "string") return;
+				const tool = this._registeredTools[toolName];
+				if (tool === void 0 || !tool.enabled) return;
+				return tool.scopeChallenge?.(context);
+			}
+			case "resources/read": {
+				const resourceUri = context.request.params?.uri;
+				if (typeof resourceUri !== "string") return;
+				let uri;
+				try {
+					uri = new URL(resourceUri);
+				} catch {
+					return;
+				}
+				const resource = this._registeredResources[uri.toString()];
+				if (resource !== void 0) return resource.enabled ? resource.scopeChallenge?.(context) : void 0;
+				for (const template of Object.values(this._registeredResourceTemplates)) if (template.resourceTemplate.uriTemplate.match(uri.toString())) return template.enabled ? template.scopeChallenge?.(context) : void 0;
+				return;
+			}
+			case "prompts/get": {
+				const promptName = context.request.params?.name;
+				if (typeof promptName !== "string") return;
+				const prompt = this._registeredPrompts[promptName];
+				if (prompt === void 0 || !prompt.enabled) return;
+				return prompt.scopeChallenge?.(context);
+			}
+			default: return;
+		}
+	};
 	_toolHandlersInitialized = false;
 	setToolRequestHandlers() {
 		if (this._toolHandlersInitialized) return;
@@ -31388,7 +31487,7 @@ var McpServer = class {
 				name,
 				title: tool.title,
 				description: tool.description,
-				inputSchema: tool.inputSchema ? standardSchemaToJsonSchema(tool.inputSchema, "input") : EMPTY_OBJECT_JSON_SCHEMA,
+				inputSchema: tool.inputSchema ? convertListedInputSchema(name, tool.inputSchema) : EMPTY_OBJECT_JSON_SCHEMA,
 				annotations: tool.annotations,
 				icons: tool.icons,
 				execution: tool.execution,
@@ -31433,6 +31532,7 @@ var McpServer = class {
 	* Validates tool input arguments against the tool's input schema.
 	*/
 	async validateToolInput(tool, args, toolName) {
+		if (this._maxToolInputElements !== void 0 && toolInputElementCount(args, this._maxToolInputElements) > this._maxToolInputElements) throw new ProtocolError(ProtocolErrorCode.InvalidParams, `Invalid arguments for tool ${toolName}: arguments contain more than the maximum of ${this._maxToolInputElements} elements`);
 		if (!tool.inputSchema) return;
 		const parseResult = await validateStandardSchema(tool.inputSchema, args ?? {});
 		if (!parseResult.success) throw new ProtocolError(ProtocolErrorCode.InvalidParams, `Input validation error: Invalid arguments for tool ${toolName}: ${parseResult.error}`);
@@ -31542,7 +31642,10 @@ var McpServer = class {
 			}
 			for (const template of Object.values(this._registeredResourceTemplates)) {
 				const variables = template.resourceTemplate.uriTemplate.match(uri.toString());
-				if (variables) return attachCacheHintFallback(await template.readCallback(uri, variables, ctx), template.cacheHint);
+				if (variables) {
+					if (!template.enabled) throw new ProtocolError(ProtocolErrorCode.InvalidParams, `Resource template ${template.resourceTemplate.uriTemplate} disabled`);
+					return attachCacheHintFallback(await template.readCallback(uri, variables, ctx), template.cacheHint);
+				}
 			}
 			throw new ResourceNotFoundError(request.params.uri);
 		});
@@ -31573,36 +31676,32 @@ var McpServer = class {
 		this._promptHandlersInitialized = true;
 	}
 	registerResource(name, uriOrTemplate, config, readCallback) {
-		const cacheHint = config.cacheHint;
-		let metadata = config;
-		if (cacheHint !== void 0) {
-			assertValidCacheHint(cacheHint, `resource ${name}`);
-			const rest = { ...config };
-			delete rest.cacheHint;
-			metadata = rest;
-		}
+		const { cacheHint, scopeChallenge, ...resourceMetadata } = config;
+		const metadata = resourceMetadata;
+		if (cacheHint !== void 0) assertValidCacheHint(cacheHint, `resource ${name}`);
 		if (typeof uriOrTemplate === "string") {
 			if (this._registeredResources[uriOrTemplate]) throw new Error(`Resource ${uriOrTemplate} is already registered`);
-			const registeredResource = this._createRegisteredResource(name, config.title, uriOrTemplate, metadata, readCallback);
+			const registeredResource = this._createRegisteredResource(name, config.title, uriOrTemplate, metadata, scopeChallenge, readCallback);
 			if (cacheHint !== void 0) registeredResource.cacheHint = cacheHint;
 			this.setResourceRequestHandlers();
 			this.sendResourceListChanged();
 			return registeredResource;
 		} else {
 			if (this._registeredResourceTemplates[name]) throw new Error(`Resource template ${name} is already registered`);
-			const registeredResourceTemplate = this._createRegisteredResourceTemplate(name, config.title, uriOrTemplate, metadata, readCallback);
+			const registeredResourceTemplate = this._createRegisteredResourceTemplate(name, config.title, uriOrTemplate, metadata, scopeChallenge, readCallback);
 			if (cacheHint !== void 0) registeredResourceTemplate.cacheHint = cacheHint;
 			this.setResourceRequestHandlers();
 			this.sendResourceListChanged();
 			return registeredResourceTemplate;
 		}
 	}
-	_createRegisteredResource(name, title, uri, metadata, readCallback) {
+	_createRegisteredResource(name, title, uri, metadata, scopeChallenge, readCallback) {
 		const registeredResource = {
 			name,
 			title,
 			metadata,
 			readCallback,
+			scopeChallenge,
 			enabled: true,
 			disable: () => registeredResource.update({ enabled: false }),
 			enable: () => registeredResource.update({ enabled: true }),
@@ -31616,6 +31715,7 @@ var McpServer = class {
 				if (updates.title !== void 0) registeredResource.title = updates.title;
 				if (updates.metadata !== void 0) registeredResource.metadata = updates.metadata;
 				if (updates.callback !== void 0) registeredResource.readCallback = updates.callback;
+				if (updates.scopeChallenge !== void 0) registeredResource.scopeChallenge = updates.scopeChallenge === null ? void 0 : updates.scopeChallenge;
 				if (updates.enabled !== void 0) registeredResource.enabled = updates.enabled;
 				this.sendResourceListChanged();
 			}
@@ -31623,12 +31723,13 @@ var McpServer = class {
 		this._registeredResources[uri] = registeredResource;
 		return registeredResource;
 	}
-	_createRegisteredResourceTemplate(name, title, template, metadata, readCallback) {
+	_createRegisteredResourceTemplate(name, title, template, metadata, scopeChallenge, readCallback) {
 		const registeredResourceTemplate = {
 			resourceTemplate: template,
 			title,
 			metadata,
 			readCallback,
+			scopeChallenge,
 			enabled: true,
 			disable: () => registeredResourceTemplate.update({ enabled: false }),
 			enable: () => registeredResourceTemplate.update({ enabled: true }),
@@ -31642,6 +31743,7 @@ var McpServer = class {
 				if (updates.template !== void 0) registeredResourceTemplate.resourceTemplate = updates.template;
 				if (updates.metadata !== void 0) registeredResourceTemplate.metadata = updates.metadata;
 				if (updates.callback !== void 0) registeredResourceTemplate.readCallback = updates.callback;
+				if (updates.scopeChallenge !== void 0) registeredResourceTemplate.scopeChallenge = updates.scopeChallenge === null ? void 0 : updates.scopeChallenge;
 				if (updates.enabled !== void 0) registeredResourceTemplate.enabled = updates.enabled;
 				this.sendResourceListChanged();
 			}
@@ -31651,7 +31753,7 @@ var McpServer = class {
 		if (Array.isArray(variableNames) && variableNames.some((v) => !!template.completeCallback(v))) this.setCompletionRequestHandler();
 		return registeredResourceTemplate;
 	}
-	_createRegisteredPrompt(name, title, description, argsSchema, callback, icons, _meta) {
+	_createRegisteredPrompt(name, title, description, argsSchema, callback, icons, scopeChallenge, _meta) {
 		let currentArgsSchema = argsSchema;
 		let currentCallback = callback;
 		const registeredPrompt = {
@@ -31659,6 +31761,7 @@ var McpServer = class {
 			description,
 			argsSchema,
 			icons,
+			scopeChallenge,
 			_meta,
 			handler: createPromptHandler(name, argsSchema, callback),
 			enabled: true,
@@ -31673,6 +31776,7 @@ var McpServer = class {
 				if (updates.title !== void 0) registeredPrompt.title = updates.title;
 				if (updates.description !== void 0) registeredPrompt.description = updates.description;
 				if (updates.icons !== void 0) registeredPrompt.icons = updates.icons;
+				if (updates.scopeChallenge !== void 0) registeredPrompt.scopeChallenge = updates.scopeChallenge === null ? void 0 : updates.scopeChallenge;
 				if (updates._meta !== void 0) registeredPrompt._meta = updates._meta;
 				let needsHandlerRegen = false;
 				if (updates.argsSchema !== void 0) {
@@ -31700,24 +31804,25 @@ var McpServer = class {
 		}
 		return registeredPrompt;
 	}
-	_createRegisteredTool(name, title, description, inputSchema, outputSchema, annotations, icons, execution, _meta, handler) {
+	_createRegisteredTool(name, title, description, inputSchema, outputSchema, annotations, icons, execution, scopeChallenge, _meta, handler) {
 		validateAndWarnToolName(name);
-		if (inputSchema !== void 0) try {
-			const json = standardSchemaToJsonSchema(inputSchema, "input");
-			this._toolInputSchemaJson[name] = json;
-			const scan = scanXMcpHeaderDeclarations(json);
-			if (!scan.valid) console.warn(`[mcp-sdk] tool '${name}' carries an invalid x-mcp-header declaration and will be excluded by conforming Streamable HTTP clients: ${scan.reason}`);
-		} catch {}
 		let currentHandler = handler;
+		let outputSchemaJson;
 		const registeredTool = {
 			title,
 			description,
 			inputSchema,
 			outputSchema,
-			outputSchemaJson: convertOutputSchemaJson(outputSchema),
+			get outputSchemaJson() {
+				return outputSchemaJson ??= convertOutputSchemaJson(registeredTool.outputSchema);
+			},
+			set outputSchemaJson(value) {
+				outputSchemaJson = value;
+			},
 			annotations,
 			icons,
 			execution,
+			scopeChallenge,
 			_meta,
 			handler,
 			executor: createToolExecutor(inputSchema, handler),
@@ -31756,6 +31861,7 @@ var McpServer = class {
 				}
 				if (updates.annotations !== void 0) registeredTool.annotations = updates.annotations;
 				if (updates.icons !== void 0) registeredTool.icons = updates.icons;
+				if (updates.scopeChallenge !== void 0) registeredTool.scopeChallenge = updates.scopeChallenge === null ? void 0 : updates.scopeChallenge;
 				if (updates._meta !== void 0) registeredTool._meta = updates._meta;
 				if (updates.enabled !== void 0) registeredTool.enabled = updates.enabled;
 				this.sendToolListChanged();
@@ -31768,13 +31874,13 @@ var McpServer = class {
 	}
 	registerTool(name, config, cb) {
 		if (this._registeredTools[name]) throw new Error(`Tool ${name} is already registered`);
-		const { title, description, inputSchema, outputSchema, annotations, icons, _meta } = config;
-		return this._createRegisteredTool(name, title, description, normalizeRawShapeSchema(inputSchema), normalizeRawShapeSchema(outputSchema), annotations, icons, void 0, _meta, cb);
+		const { title, description, inputSchema, outputSchema, annotations, icons, scopeChallenge, _meta } = config;
+		return this._createRegisteredTool(name, title, description, normalizeRawShapeSchema(inputSchema), normalizeRawShapeSchema(outputSchema), annotations, icons, void 0, scopeChallenge, _meta, cb);
 	}
 	registerPrompt(name, config, cb) {
 		if (this._registeredPrompts[name]) throw new Error(`Prompt ${name} is already registered`);
-		const { title, description, argsSchema, icons, _meta } = config;
-		const registeredPrompt = this._createRegisteredPrompt(name, title, description, normalizeRawShapeSchema(argsSchema), cb, icons, _meta);
+		const { title, description, argsSchema, icons, scopeChallenge, _meta } = config;
+		const registeredPrompt = this._createRegisteredPrompt(name, title, description, normalizeRawShapeSchema(argsSchema), cb, icons, scopeChallenge, _meta);
 		this.setPromptRequestHandlers();
 		this.sendPromptListChanged();
 		return registeredPrompt;
@@ -31844,6 +31950,13 @@ const EMPTY_OBJECT_JSON_SCHEMA = {
 	type: "object",
 	properties: {}
 };
+/** Converts a tool's `inputSchema` for `tools/list` and warns on an invalid SEP-2243 `x-mcp-header` declaration. */
+function convertListedInputSchema(name, inputSchema) {
+	const json = standardSchemaToJsonSchema(inputSchema, "input");
+	const scan = scanXMcpHeaderDeclarations(json);
+	if (!scan.valid) console.warn(`[mcp-sdk] tool '${name}' carries an invalid x-mcp-header declaration and will be excluded by conforming Streamable HTTP clients: ${scan.reason}`);
+	return json;
+}
 /**
 * Convert a registered `outputSchema` to JSON Schema, memoised on {@link RegisteredTool.outputSchemaJson}
 * so `tools/call` passes the SAME advertised schema to the wire codec's `projectCallToolResult` that
@@ -31866,7 +31979,7 @@ function createPromptHandler(name, argsSchema, callback) {
 	if (argsSchema) {
 		const typedCallback = callback;
 		return async (args, ctx) => {
-			const parseResult = await validateStandardSchema(argsSchema, args);
+			const parseResult = await validateStandardSchema(argsSchema, args ?? {});
 			if (!parseResult.success) throw new ProtocolError(ProtocolErrorCode.InvalidParams, `Invalid arguments for prompt ${name}: ${parseResult.error}`);
 			return typedCallback(parseResult.data, ctx);
 		};
@@ -31903,12 +32016,27 @@ function unwrapOptionalSchema(schema) {
 	return schema.def?.innerType ?? schema;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/stdio.mjs
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.3.0/node_modules/@modelcontextprotocol/server/dist/stdio.mjs
+/**
+* Marks a stdout `'error'` listener that a closed transport left attached purely to
+* swallow late write failures (see {@link StdioServerTransport.close}). A fresh
+* transport taking over the same stream removes listeners carrying this tag in
+* `start()`, so repeated create→close cycles on the process-global `process.stdout`
+* don't accumulate listeners.
+*/
+const swallowsErrorsAfterClose = Symbol("swallowsErrorsAfterClose");
 /**
 * Server transport for stdio: this communicates with an MCP client by reading from the current process' `stdin` and writing to `stdout`.
 *
 * This transport is only available in Node.js environments.
 *
+* When the client closes its end of the pipe (stdin reaches end-of-file), the transport
+* closes itself and fires `onclose`, per the MCP stdio binding's guidance that servers
+* should exit promptly when their standard input is closed. A server that holds no other
+* keep-alive handles will then exit naturally. Requests still in flight when stdin ends are
+* aborted and not answered; a client that expects responses keeps stdin open until it has
+* read them.
+*
 * @example
 * ```ts source="./stdio.examples.ts#StdioServerTransport_basicUsage"
 * const server = new McpServer({ name: 'my-server', version: '1.0.0' });
@@ -31941,17 +32069,25 @@ var StdioServerTransport = class {
 		this.onerror?.(error);
 	};
 	_onstdouterror = (error) => {
+		if (this._closed) return;
 		this.onerror?.(error);
 		this.close().catch(() => {});
 	};
+	_onstdinclose = () => {
+		this.close().catch(() => {});
+	};
 	/**
 	* Starts listening for messages on `stdin`.
 	*/
 	async start() {
 		if (this._started) throw new Error("StdioServerTransport already started! If using Server class, note that connect() calls start() automatically.");
 		this._started = true;
+		for (const listener of this._stdout.listeners("error")) if (listener[swallowsErrorsAfterClose]) this._stdout.off("error", listener);
+		if (this._stdin.readableEnded || this._stdin.destroyed) setImmediate(this._onstdinclose);
 		this._stdin.on("data", this._ondata);
 		this._stdin.on("error", this._onerror);
+		this._stdin.on("end", this._onstdinclose);
+		this._stdin.on("close", this._onstdinclose);
 		this._stdout.on("error", this._onstdouterror);
 	}
 	processReadBuffer() {
@@ -31968,7 +32104,9 @@ var StdioServerTransport = class {
 		this._closed = true;
 		this._stdin.off("data", this._ondata);
 		this._stdin.off("error", this._onerror);
-		this._stdout.off("error", this._onstdouterror);
+		this._stdin.off("end", this._onstdinclose);
+		this._stdin.off("close", this._onstdinclose);
+		this._onstdouterror[swallowsErrorsAfterClose] = true;
 		if (this._stdin.listenerCount("data") === 0) this._stdin.pause();
 		this._readBuffer.clear();
 		this.onclose?.();
@@ -32305,6 +32443,7 @@ function serveStdio(factory, options = {}) {
 				return;
 			}
 			if (state.era === "modern" && await tryServeListen(message)) return;
+			if (isTornDown()) return;
 			state.instance.channel.deliver(message);
 			return;
 		}
@@ -32371,6 +32510,7 @@ function serveStdio(factory, options = {}) {
 					};
 				}
 				if (await tryServeListen(message)) return;
+				if (isTornDown()) return;
 				state.instance.channel.deliver(message, { classification: opening.classification });
 				return;
 			case "legacy": {
@@ -55539,6 +55679,28 @@ Call the auth tool to authenticate (or run ${npxMcpAuthCommand()} manually).
 ${core}`;
 }
 //#endregion
+//#region src/utils.ts
+function mcpJson(value) {
+	const text = JSON.stringify(value ?? null, null, 2);
+	const structuredContent = JSON.parse(text);
+	return {
+		content: [{
+			type: "text",
+			text
+		}],
+		structuredContent
+	};
+}
+function mcpFailure(text) {
+	return {
+		content: [{
+			type: "text",
+			text
+		}],
+		isError: true
+	};
+}
+//#endregion
 //#region ../../node_modules/.pnpm/@valibot+to-json-schema@1.6.0_valibot@1.3.1_typescript@6.0.3_/node_modules/@valibot/to-json-schema/dist/index.mjs
 /**
 * Adds an error message to the errors array.
@@ -56139,23 +56301,6 @@ function optionalDescString(description) {
 }
 const optionalConfirmToken = /* @__PURE__ */ optional(/* @__PURE__ */ pipe(/* @__PURE__ */ string(), /* @__PURE__ */ description("Mutation confirmation token from previous call")));
 //#endregion
-//#region src/utils.ts
-function mcpText(text) {
-	return { content: [{
-		type: "text",
-		text
-	}] };
-}
-function mcpFailure(text) {
-	return {
-		content: [{
-			type: "text",
-			text
-		}],
-		isError: true
-	};
-}
-//#endregion
 //#region src/runtime/safety/mutation-gate.ts
 var MutationConfirmationRequired = class extends Error {
 	confirmToken;
@@ -56229,7 +56374,7 @@ function createMutationApprovalScope(confirmToken) {
 //#endregion
 //#region src/tools/focus-tool-utils.ts
 function apiResult(response) {
-	if (response.ok) return mcpText(JSON.stringify(response.data, null, 2));
+	if (response.ok) return mcpJson(response.data);
 	return {
 		content: [{
 			type: "text",
@@ -56240,13 +56385,13 @@ function apiResult(response) {
 }
 function withMutationApproval(params, run) {
 	return run(createMutationApprovalScope(params.confirm_token)).catch((err) => {
-		if (err instanceof MutationConfirmationRequired) return mcpText(JSON.stringify({
+		if (err instanceof MutationConfirmationRequired) return mcpJson({
 			confirm_required: true,
 			confirm_token: err.confirmToken,
 			operation: err.operation,
 			summary: err.summary,
 			hint: "Call this tool again with the same arguments and confirm_token to execute once."
-		}, null, 2));
+		});
 		return {
 			content: [{
 				type: "text",
@@ -56310,40 +56455,34 @@ function registerWorkspaceTools(server) {
 				continuation
 			});
 			pendingAuthContext = null;
-			return { content: [{
-				type: "text",
-				text: JSON.stringify({
-					authenticated: true,
-					requires_workspace_selection: false,
-					workspace: {
-						workspace_id: authResult.config.workspace_id,
-						workspace_name: authResult.config.workspace_name,
-						organization_id: authResult.config.organization_id
-					},
-					user_id: authResult.config.user_id,
-					available_workspaces: authResult.workspaces.map((workspace) => ({
+			return mcpJson({
+				authenticated: true,
+				requires_workspace_selection: false,
+				workspace: {
+					workspace_id: authResult.config.workspace_id,
+					workspace_name: authResult.config.workspace_name,
+					organization_id: authResult.config.organization_id
+				},
+				user_id: authResult.config.user_id,
+				available_workspaces: authResult.workspaces.map((workspace) => ({
+					workspace_id: workspace.workspace_id,
+					workspace_name: workspace.workspace_name,
+					organization_name: workspace.organization_name
+				}))
+			});
+		} catch (error) {
+			if (error instanceof WorkspaceSelectionRequiredError) {
+				pendingAuthContext = error.context;
+				return mcpJson({
+					authenticated: false,
+					requires_workspace_selection: true,
+					message: "Multiple workspaces found. Call auth again with workspace_id to complete authentication.",
+					available_workspaces: error.workspaces.map((workspace) => ({
 						workspace_id: workspace.workspace_id,
 						workspace_name: workspace.workspace_name,
 						organization_name: workspace.organization_name
 					}))
-				}, null, 2)
-			}] };
-		} catch (error) {
-			if (error instanceof WorkspaceSelectionRequiredError) {
-				pendingAuthContext = error.context;
-				return { content: [{
-					type: "text",
-					text: JSON.stringify({
-						authenticated: false,
-						requires_workspace_selection: true,
-						message: "Multiple workspaces found. Call auth again with workspace_id to complete authentication.",
-						available_workspaces: error.workspaces.map((workspace) => ({
-							workspace_id: workspace.workspace_id,
-							workspace_name: workspace.workspace_name,
-							organization_name: workspace.organization_name
-						}))
-					}, null, 2)
-				}] };
+				});
 			}
 			pendingAuthContext = null;
 			return {
@@ -56364,14 +56503,11 @@ function registerWorkspaceTools(server) {
 			message: "This server authenticates with TOGGL_API_TOKEN, so there is no stored session to clear. Remove TOGGL_API_TOKEN from the MCP server config to sign out. Saved OAuth profiles were left untouched."
 		}, null, 2));
 		const removed = clearConfig();
-		return { content: [{
-			type: "text",
-			text: JSON.stringify({
-				logged_out: true,
-				removed_config: removed,
-				message: removed ? "Authentication config cleared. Call auth to authenticate again." : "No auth config existed. Call auth to authenticate."
-			}, null, 2)
-		}] };
+		return mcpJson({
+			logged_out: true,
+			removed_config: removed,
+			message: removed ? "Authentication config cleared. Call auth to authenticate again." : "No auth config existed. Call auth to authenticate."
+		});
 	};
 	server.registerTool("workspace-list", {
 		title: "List Workspaces",
@@ -56414,7 +56550,7 @@ function registerWorkspaceTools(server) {
 			}],
 			isError: true
 		};
-		const result = (config.workspaces ?? [{
+		return mcpJson((config.workspaces ?? [{
 			workspace_id: config.workspace_id,
 			workspace_name: config.workspace_name,
 			organization_id: config.organization_id,
@@ -56424,11 +56560,7 @@ function registerWorkspaceTools(server) {
 			workspace_name: w.workspace_name,
 			organization_name: w.organization_name,
 			active: w.workspace_id === config.workspace_id
-		}));
-		return { content: [{
-			type: "text",
-			text: JSON.stringify(result, null, 2)
-		}] };
+		})));
 	});
 	server.registerTool("workspace-switch", {
 		title: "Switch Workspace",
@@ -56486,7 +56618,7 @@ function registerWorkspaceTools(server) {
 				message: API_TOKEN_PROFILES_MESSAGE
 			}, null, 2));
 		}
-		const payload = listMcpProfiles().map((row) => ({
+		return mcpJson(listMcpProfiles().map((row) => ({
 			name: row.name,
 			active_for_mcp: row.active,
 			environment: row.environment,
@@ -56496,11 +56628,7 @@ function registerWorkspaceTools(server) {
 			organization_id: row.organization_id,
 			organization_name: row.organization_name,
 			token_expired: row.token_expired
-		}));
-		return { content: [{
-			type: "text",
-			text: JSON.stringify(payload, null, 2)
-		}] };
+		})));
 	});
 	server.registerTool("profile-switch", {
 		title: "Switch MCP profile",
@@ -56516,15 +56644,12 @@ function registerWorkspaceTools(server) {
 		if (isApiTokenMode()) return mcpFailure(API_TOKEN_PROFILES_MESSAGE);
 		try {
 			const row = switchMcpProfile(params.profile_name);
-			return { content: [{
-				type: "text",
-				text: JSON.stringify({
-					switched_to: row.name,
-					workspace_id: row.workspace_id,
-					workspace_name: row.workspace_name,
-					environment: row.environment
-				}, null, 2)
-			}] };
+			return mcpJson({
+				switched_to: row.name,
+				workspace_id: row.workspace_id,
+				workspace_name: row.workspace_name,
+				environment: row.environment
+			});
 		} catch (error) {
 			return {
 				content: [{
@@ -56551,13 +56676,10 @@ function registerWorkspaceTools(server) {
 			approvalScope.requireMutationApproval("profile-remove", mutationFingerprint({ profile_name: params.profile_name }), () => JSON.stringify({ profile_name: params.profile_name }));
 			try {
 				const removed = removeMcpProfile(params.profile_name);
-				return { content: [{
-					type: "text",
-					text: JSON.stringify({
-						removed_profile: removed.name,
-						had_been_active_for_mcp: removed.active
-					}, null, 2)
-				}] };
+				return mcpJson({
+					removed_profile: removed.name,
+					had_been_active_for_mcp: removed.active
+				});
 			} catch (error) {
 				return {
 					content: [{
@@ -56599,7 +56721,7 @@ function registerWorkspaceTools(server) {
 //#region src/package-version.ts
 function mcpPackageVersion() {
 	try {
-		return "1.12.7";
+		return "1.13.0";
 	} catch {
 		return "unknown";
 	}
@@ -56718,11 +56840,11 @@ async function runOperation(operation, data, client, confirmToken, dryRun) {
 	const parseResult = /* @__PURE__ */ safeParse(operation.inputSchema, coercePayload(data) ?? {});
 	if (!parseResult.success) return mcpFailure(`Invalid input: ${formatValibotError(parseResult.issues)}`);
 	const input = parseResult.output;
-	if (dryRun) return mcpText(JSON.stringify({
+	if (dryRun) return mcpJson({
 		dry_run: true,
 		operation: operation.id,
 		input
-	}, null, 2));
+	});
 	if (isApiTokenMode()) try {
 		await apiTokenIdentity().resolve();
 	} catch (error) {
@@ -56780,7 +56902,9 @@ import_main.default.config({
 	quiet: true,
 	ignore: ["MISSING_ENV_FILE"]
 });
-const packageVersion = "1.12.7";
+const packageVersion = "1.13.0";
+const MCP_CACHE_TTL_MS = 300 * 1e3;
+const MCP_MAX_TOOL_INPUT_ELEMENTS = 1e4;
 function resolvePublicUrls() {
 	return {
 		focusApiUrl: process.env.TOGGL_FOCUS_API_URL ?? "https://focus.toggl.com",
@@ -56862,12 +56986,25 @@ function bootstrapServer(options = {}) {
 			const rawServer = new McpServer({
 				name: "toggl-focus",
 				version: packageVersion
-			}, { instructions: buildMcpServerInstructions({
-				authenticated,
-				workspaceLabel,
-				authMode: tokenMode ? "api_token" : "oauth",
-				apiTokenError
-			}) });
+			}, {
+				instructions: buildMcpServerInstructions({
+					authenticated,
+					workspaceLabel,
+					authMode: tokenMode ? "api_token" : "oauth",
+					apiTokenError
+				}),
+				cacheHints: {
+					"server/discover": {
+						ttlMs: MCP_CACHE_TTL_MS,
+						cacheScope: "private"
+					},
+					"tools/list": {
+						ttlMs: MCP_CACHE_TTL_MS,
+						cacheScope: "private"
+					}
+				},
+				maxToolInputElements: MCP_MAX_TOOL_INPUT_ELEMENTS
+			});
 			const server = options.beforeRegister?.(rawServer) ?? rawServer;
 			registerWorkspaceTools(server);
 			registerGeneratedEntityTools(server, client);
@@ -56883,6 +57020,6 @@ function bootstrapServer(options = {}) {
 	if (options.beforeExit) process.on("beforeExit", async () => await options.beforeExit?.());
 }
 //#endregion
-export { getProductAnalyticsDistinctId as a, resolvePublicSentryDsn as c, captureToolInvocation as i, shutdownProductAnalytics as l, runMcpCli as n, initProductAnalytics as o, PUBLIC_SENTRY_PRIVACY_OPTIONS as r, resolveProductAnalyticsDistinctId as s, bootstrapServer as t };
+export { PUBLIC_SENTRY_PRIVACY_OPTIONS as a, initProductAnalytics as c, shutdownProductAnalytics as d, runMcpCli as i, resolveProductAnalyticsDistinctId as l, MCP_MAX_TOOL_INPUT_ELEMENTS as n, captureToolInvocation as o, bootstrapServer as r, getProductAnalyticsDistinctId as s, MCP_CACHE_TTL_MS as t, resolvePublicSentryDsn as u };
 
-//# sourceMappingURL=src-RGqqLBRK.js.map
+//# sourceMappingURL=src-Wi0RVSpx.js.map