@uluops/registry-mcp 0.1.0 → 0.2.4

package/dist/client/sdk-error-mapper.js

@@ -23,11 +23,41 @@ function getErrorMessage(error, fallback) {
 }
 /** Extract HTTP status code from SDK errors when available */
 function getStatusCode(error) {
-    if (error && typeof error === 'object' && 'statusCode' in error) {
+    if (error !== null && typeof error === 'object' && 'statusCode' in error) {
         return error.statusCode;
     }
     return undefined;
 }
+/**
+ * Validate that a server-supplied URL is safe to embed in MCP responses.
+ *
+ * The 402 handler embeds `upgradeUrl` from the API response into MCP text
+ * that AI agents read as context. A compromised or attacker-controlled API
+ * could emit `javascript:`, `data:`, or untrusted-host URLs as prompt-
+ * injection bait. This guard restricts the embedded URL to:
+ *   - https:// only (no javascript:/data:/file:/http:)
+ *   - hosts ending in `.uluops.ai` or the apex `uluops.ai`
+ *
+ * Mirrors the SSRF defense in config/index.ts for symmetry — outgoing
+ * payload URLs face the same trust constraints as incoming registry URLs.
+ */
+function isSafeUpgradeUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return false;
+    }
+    if (parsed.protocol !== 'https:')
+        return false;
+    const hostname = parsed.hostname.toLowerCase();
+    if (hostname === 'uluops.ai')
+        return true;
+    if (hostname.endsWith('.uluops.ai'))
+        return true;
+    return false;
+}
 /** Build a structured error response with optional metadata */
 function buildErrorResponse(message, metadata) {
     const payload = { error: message };
@@ -39,6 +69,65 @@ function buildErrorResponse(message, metadata) {
         isError: true,
     };
 }
+/**
+ * Extract the same structured-error fields as `mapSdkErrorToMcp` produces,
+ * but without wrapping them in an `McpToolResponse`. Useful inside batch
+ * loops where each per-item failure should embed the rich error context
+ * (402 upgrade URL, 429 retry-after, 409 nextAvailable) into the parent
+ * response rather than producing one MCP error envelope per failure.
+ */
+export function extractErrorContext(error) {
+    const status = getStatusCode(error);
+    if (status === 402) {
+        const details = error.details ?? {};
+        const requiredTier = typeof details['requiredTier'] === 'string' ? details['requiredTier'] : undefined;
+        const currentTier = typeof details['currentTier'] === 'string' ? details['currentTier'] : undefined;
+        const def = (details['definition'] !== null && typeof details['definition'] === 'object')
+            ? details['definition']
+            : undefined;
+        const rawUpgradeUrl = typeof details['upgradeUrl'] === 'string' ? details['upgradeUrl'] : undefined;
+        // Drop server-supplied URLs that don't pass the protocol/host guard.
+        // A compromised or attacker-controlled API could emit javascript:/data:
+        // or off-domain URLs as prompt-injection bait for the consuming agent.
+        const safeUpgradeUrl = rawUpgradeUrl !== undefined && isSafeUpgradeUrl(rawUpgradeUrl)
+            ? rawUpgradeUrl
+            : undefined;
+        const sep = safeUpgradeUrl?.includes('?') === true ? '&' : '?';
+        const trackedUrl = safeUpgradeUrl !== undefined ? `${safeUpgradeUrl}${sep}source=mcp` : undefined;
+        return {
+            message: sanitizeErrorMessage(getErrorMessage(error, 'Subscription required')),
+            status,
+            ...(requiredTier !== undefined ? { required_tier: requiredTier } : {}),
+            ...(currentTier !== undefined ? { current_tier: currentTier } : {}),
+            ...(def !== undefined ? { definition: def } : {}),
+            ...(trackedUrl !== undefined ? { upgrade_url: trackedUrl } : {}),
+        };
+    }
+    if (isRateLimitError(error)) {
+        const details = error.details ?? {};
+        const retryAfter = typeof details['retryAfter'] === 'number' ? details['retryAfter'] : undefined;
+        return {
+            message: sanitizeErrorMessage(getErrorMessage(error, 'Rate limit exceeded')),
+            status,
+            ...(retryAfter !== undefined ? { retry_after: retryAfter } : {}),
+        };
+    }
+    if (isConflictError(error)) {
+        const details = 'details' in error
+            ? error.details
+            : undefined;
+        const nextAvailable = details?.['nextAvailable'];
+        return {
+            message: sanitizeErrorMessage(getErrorMessage(error, 'Resource conflict')),
+            ...(status !== undefined ? { status } : {}),
+            ...(nextAvailable !== undefined ? { nextAvailable } : {}),
+        };
+    }
+    return {
+        message: sanitizeErrorMessage(getErrorMessage(error, 'Unknown error')),
+        ...(status !== undefined ? { status } : {}),
+    };
+}
 /**
  * Map an SDK error to an MCP tool response.
  *
@@ -51,16 +140,17 @@ function buildErrorResponse(message, metadata) {
 export function mapSdkErrorToMcp(error) {
     const statusCode = getStatusCode(error);
     if (isNotFoundError(error)) {
-        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Resource not found')), statusCode ? { status: statusCode } : undefined);
+        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Resource not found')), statusCode !== undefined ? { status: statusCode } : undefined);
     }
     if (isRateLimitError(error)) {
         const retryAfter = error.retryAfter;
-        return buildErrorResponse(retryAfter
+        const hasRetryAfter = typeof retryAfter === 'number' && retryAfter > 0;
+        return buildErrorResponse(hasRetryAfter
             ? `Rate limit exceeded. Retry after ${String(retryAfter)} seconds.`
-            : 'Rate limit exceeded, please retry later.', { status: 429, ...(retryAfter ? { retry_after_seconds: retryAfter } : {}) });
+            : 'Rate limit exceeded, please retry later.', { status: 429, ...(hasRetryAfter ? { retry_after_seconds: retryAfter } : {}) });
     }
     if (isValidationError(error)) {
-        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Invalid request parameters')), statusCode ? { status: statusCode } : undefined);
+        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Invalid request parameters')), statusCode !== undefined ? { status: statusCode } : undefined);
     }
     if (error instanceof UnauthorizedError) {
         return buildErrorResponse('Authentication required. Verify ULUOPS_API_KEY is set to a valid ulr_* key.', { status: 401 });
@@ -74,19 +164,30 @@ export function mapSdkErrorToMcp(error) {
         const requiredTier = details.requiredTier;
         const currentTier = details.currentTier;
         const def = details.definition;
-        const upgradeUrl = details.upgradeUrl;
-        const sep = upgradeUrl?.includes('?') ? '&' : '?';
-        const trackedUrl = upgradeUrl ? `${upgradeUrl}${sep}source=mcp` : undefined;
-        const defLabel = def?.name ? `${def.type ?? 'definition'}/${def.name}` : 'this definition';
-        const tierLabel = requiredTier ? ` Requires ${requiredTier} tier or higher.` : '';
-        const currentLabel = currentTier ? ` Your current tier: ${currentTier}.` : '';
+        const rawUpgradeUrl = details.upgradeUrl;
+        // Restrict the embedded URL to https://*.uluops.ai to prevent
+        // server-controlled prompt-injection bait reaching the agent's context.
+        const safeUpgradeUrl = rawUpgradeUrl !== undefined && isSafeUpgradeUrl(rawUpgradeUrl)
+            ? rawUpgradeUrl
+            : undefined;
+        const sep = safeUpgradeUrl?.includes('?') === true ? '&' : '?';
+        const trackedUrl = safeUpgradeUrl !== undefined ? `${safeUpgradeUrl}${sep}source=mcp` : undefined;
+        const defLabel = def?.name !== undefined && def.name !== ''
+            ? `${def.type ?? 'definition'}/${def.name}`
+            : 'this definition';
+        const tierLabel = requiredTier !== undefined && requiredTier !== ''
+            ? ` Requires ${requiredTier} tier or higher.`
+            : '';
+        const currentLabel = currentTier !== undefined && currentTier !== ''
+            ? ` Your current tier: ${currentTier}.`
+            : '';
         return buildErrorResponse(`Subscription required to access ${defLabel}.${tierLabel}${currentLabel}` +
-            (trackedUrl ? ` Upgrade: ${trackedUrl}` : ''), {
+            (trackedUrl !== undefined ? ` Upgrade: ${trackedUrl}` : ''), {
             status: 402,
-            ...(requiredTier ? { required_tier: requiredTier } : {}),
-            ...(currentTier ? { current_tier: currentTier } : {}),
-            ...(def ? { definition: def } : {}),
-            ...(trackedUrl ? { upgrade_url: trackedUrl } : {}),
+            ...(requiredTier !== undefined && requiredTier !== '' ? { required_tier: requiredTier } : {}),
+            ...(currentTier !== undefined && currentTier !== '' ? { current_tier: currentTier } : {}),
+            ...(def !== undefined ? { definition: def } : {}),
+            ...(trackedUrl !== undefined ? { upgrade_url: trackedUrl } : {}),
         });
     }
     if (isConflictError(error)) {
@@ -94,16 +195,17 @@ export function mapSdkErrorToMcp(error) {
         const details = 'details' in error
             ? error.details
             : undefined;
+        const nextAvailable = details?.nextAvailable;
         return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Resource conflict')), {
-            ...(statusCode ? { status: statusCode } : {}),
-            ...(details?.nextAvailable ? { nextAvailable: details.nextAvailable } : {}),
+            ...(statusCode !== undefined ? { status: statusCode } : {}),
+            ...(nextAvailable !== undefined && nextAvailable !== null ? { nextAvailable } : {}),
         });
     }
     if (isUnprocessableError(error)) {
-        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Unprocessable request')), statusCode ? { status: statusCode } : undefined);
+        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Unprocessable request')), statusCode !== undefined ? { status: statusCode } : undefined);
     }
     if (isRegistryApiError(error)) {
-        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Internal server error')), statusCode ? { status: statusCode } : undefined);
+        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Internal server error')), statusCode !== undefined ? { status: statusCode } : undefined);
     }
     if (error instanceof Error) {
         return buildErrorResponse(sanitizeErrorMessage(error.message));

package/dist/client/sdk-error-mapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-error-mapper.js","sourceRoot":"","sources":["../../src/client/sdk-error-mapper.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAIlD;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAEnD,2DAA2D;AAC3D,SAAS,eAAe,CAAC,KAAc,EAAE,QAAgB;IACvD,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACtE,OAAO,MAAM,CAAE,KAA8B,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8DAA8D;AAC9D,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,IAAI,KAAK,EAAE,CAAC;QAChE,OAAQ,KAAgC,CAAC,UAAU,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+DAA+D;AAC/D,SAAS,kBAAkB,CACzB,OAAe,EACf,QAAkC;IAElC,MAAM,OAAO,GAA4B,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAExC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,EAClE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAI,KAAiC,CAAC,UAAU,CAAC;QACjE,OAAO,kBAAkB,CACvB,UAAU;YACR,CAAC,CAAC,oCAAoC,MAAM,CAAC,UAAU,CAAC,WAAW;YACnE,CAAC,CAAC,0CAA0C,EAC9C,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;IAED,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC,EAC1E,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,OAAO,kBAAkB,CACvB,6EAA6E,EAC7E,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,EAC7D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAI,KAA+C,CAAC,OAAO,IAAI,EAAE,CAAC;QAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAkC,CAAC;QAChE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAiC,CAAC;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,UAA0D,CAAC;QAC/E,MAAM,UAAU,GAAG,OAAO,CAAC,UAAgC,CAAC;QAC5D,MAAM,GAAG,GAAG,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAClD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5E,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,YAAY,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC3F,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,aAAa,YAAY,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,uBAAuB,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9E,OAAO,kBAAkB,CACvB,mCAAmC,QAAQ,IAAI,SAAS,GAAG,YAAY,EAAE;YACzE,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC7C;YACE,MAAM,EAAE,GAAG;YACX,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CACF,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,sEAAsE;QACtE,MAAM,OAAO,GAAG,SAAS,IAAI,KAAK;YAChC,CAAC,CAAE,KAA+C,CAAC,OAAO;YAC1D,CAAC,CAAC,SAAS,CAAC;QACd,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,EACjE;YACE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CACF,CAAC;IACJ,CAAC;IAED,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC,EACrE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC,EACrE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,kBAAkB,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,kBAAkB,CAAC,8BAA8B,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,GAAG,0BAA0B,CAAC;IAEzC,IAAI,KAAK,YAAY,KAAK,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,KAA0B,CAAC;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM;aAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QACrC,OAAO,GAAG,sBAAsB,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,OAAO,EAAE,CAAC;IAC5F,CAAC;IAED,OAAO,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACtD,CAAC"}
+{"version":3,"file":"sdk-error-mapper.js","sourceRoot":"","sources":["../../src/client/sdk-error-mapper.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAIlD;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAEnD,2DAA2D;AAC3D,SAAS,eAAe,CAAC,KAAc,EAAE,QAAgB;IACvD,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACtE,OAAO,MAAM,CAAE,KAA8B,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8DAA8D;AAC9D,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,IAAI,KAAK,EAAE,CAAC;QACzE,OAAQ,KAAgC,CAAC,UAAU,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,QAAQ,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+DAA+D;AAC/D,SAAS,kBAAkB,CACzB,OAAe,EACf,QAAkC;IAElC,MAAM,OAAO,GAA4B,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAqBD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAEpC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,OAAO,GAAI,KAA+C,CAAC,OAAO,IAAI,EAAE,CAAC;QAC/E,MAAM,YAAY,GAAG,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvG,MAAM,WAAW,GAAG,OAAO,OAAO,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpG,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC;YACvF,CAAC,CAAC,OAAO,CAAC,YAAY,CAAqC;YAC3D,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,aAAa,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpG,qEAAqE;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,cAAc,GAAG,aAAa,KAAK,SAAS,IAAI,gBAAgB,CAAC,aAAa,CAAC;YACnF,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GAAG,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/D,MAAM,UAAU,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,cAAc,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,OAAO;YACL,OAAO,EAAE,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;YAC9E,MAAM;YACN,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAI,KAA+C,CAAC,OAAO,IAAI,EAAE,CAAC;QAC/E,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjG,OAAO;YACL,OAAO,EAAE,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YAC5E,MAAM;YACN,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,SAAS,IAAK,KAAgB;YAC5C,CAAC,CAAE,KAA+C,CAAC,OAAO;YAC1D,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,aAAa,GAAG,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;YAC1E,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QACtE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAExC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,EAClE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAI,KAAiC,CAAC,UAAU,CAAC;QACjE,MAAM,aAAa,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,GAAG,CAAC,CAAC;QACvE,OAAO,kBAAkB,CACvB,aAAa;YACX,CAAC,CAAC,oCAAoC,MAAM,CAAC,UAAU,CAAC,WAAW;YACnE,CAAC,CAAC,0CAA0C,EAC9C,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IAED,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC,EAC1E,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,OAAO,kBAAkB,CACvB,6EAA6E,EAC7E,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,EAC7D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAI,KAA+C,CAAC,OAAO,IAAI,EAAE,CAAC;QAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAkC,CAAC;QAChE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAiC,CAAC;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,UAA0D,CAAC;QAC/E,MAAM,aAAa,GAAG,OAAO,CAAC,UAAgC,CAAC;QAC/D,8DAA8D;QAC9D,wEAAwE;QACxE,MAAM,cAAc,GAAG,aAAa,KAAK,SAAS,IAAI,gBAAgB,CAAC,aAAa,CAAC;YACnF,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GAAG,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/D,MAAM,UAAU,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,cAAc,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAElG,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE;YACzD,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,YAAY,IAAI,GAAG,CAAC,IAAI,EAAE;YAC3C,CAAC,CAAC,iBAAiB,CAAC;QACtB,MAAM,SAAS,GAAG,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,EAAE;YACjE,CAAC,CAAC,aAAa,YAAY,kBAAkB;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,YAAY,GAAG,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE;YAClE,CAAC,CAAC,uBAAuB,WAAW,GAAG;YACvC,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,kBAAkB,CACvB,mCAAmC,QAAQ,IAAI,SAAS,GAAG,YAAY,EAAE;YACzE,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC3D;YACE,MAAM,EAAE,GAAG;YACX,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CACF,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,sEAAsE;QACtE,MAAM,OAAO,GAAG,SAAS,IAAI,KAAK;YAChC,CAAC,CAAE,KAA+C,CAAC,OAAO;YAC1D,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,CAAC;QAC7C,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,EACjE;YACE,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF,CACF,CAAC;IACJ,CAAC;IAED,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC,EACrE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC,EACrE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,kBAAkB,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,kBAAkB,CAAC,8BAA8B,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,GAAG,0BAA0B,CAAC;IAEzC,IAAI,KAAK,YAAY,KAAK,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,KAA0B,CAAC;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM;aAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QACrC,OAAO,GAAG,sBAAsB,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,OAAO,EAAE,CAAC;IAC5F,CAAC;IAED,OAAO,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACtD,CAAC"}

package/dist/config/index.d.ts

@@ -12,6 +12,12 @@ export declare const VERSION: string;
 export declare function loadConfig(): RegistryMcpConfig;
 /**
  * Validate that required configuration is present and well-formed.
+ *
+ * Returns a list of non-fatal warnings (e.g., custom registry URL accepted
+ * via escape hatch) that the caller should log so the user sees what
+ * happened during startup.
  */
-export declare function validateConfig(config: RegistryMcpConfig): void;
+export declare function validateConfig(config: RegistryMcpConfig): {
+    warnings: string[];
+};
 //# sourceMappingURL=index.d.ts.map

package/dist/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAY,MAAM,mBAAmB,CAAC;AAKrE,kEAAkE;AAClE,eAAO,MAAM,OAAO,QAAa,CAAC;AA0BlC;;GAEG;AACH,wBAAgB,UAAU,IAAI,iBAAiB,CA2B9C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CA4B9D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAY,MAAM,mBAAmB,CAAC;AAKrE,kEAAkE;AAClE,eAAO,MAAM,OAAO,QAAa,CAAC;AAyBlC;;GAEG;AACH,wBAAgB,UAAU,IAAI,iBAAiB,CA6B9C;AAwCD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,iBAAiB,GAAG;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAqEhF"}

package/dist/config/index.js

@@ -8,7 +8,6 @@ const require = createRequire(import.meta.url);
 const { version: pkgVersion } = require('../../package.json');
 /** Package version read from package.json at module load time. */
 export const VERSION = pkgVersion;
-const DEFAULT_BASE_URL = 'https://api.uluops.ai/api/v1/registry';
 const DEFAULT_TIMEOUT = 30000;
 const DEFAULT_RETRIES = 3;
 const DEFAULT_LOG_LEVEL = 'info';
@@ -34,9 +33,11 @@ function parseInteger(value, defaultValue) {
  * Load configuration from environment variables.
  */
 export function loadConfig() {
-    // Treat both unset (undefined) and empty string as "use default" — the test
-    // suite documents this intent. `??` alone would keep empty string as a value.
-    const apiUrl = process.env['ULUOPS_REGISTRY_URL'] || DEFAULT_BASE_URL; // eslint-disable-line @typescript-eslint/prefer-nullish-coalescing
+    // ULUOPS_REGISTRY_URL is optional. When unset or empty, RegistryClient falls
+    // back to @uluops/registry-sdk's DEFAULT_BASE_URL (prod by default,
+    // localhost when NODE_ENV=development).
+    const rawUrl = process.env['ULUOPS_REGISTRY_URL'];
+    const apiUrl = rawUrl !== undefined && rawUrl !== '' ? rawUrl : undefined;
     const apiKey = process.env['ULUOPS_API_KEY'];
     const orgSlug = process.env['ULUOPS_ORG_SLUG'];
     return {
@@ -60,24 +61,99 @@ export function loadConfig() {
         },
     };
 }
+/**
+ * Hosts allowlisted for the registry URL by default. Anything else must
+ * be explicitly opted into via ULUOPS_ALLOW_ANY_REGISTRY_HOST=1.
+ * Loopback names (localhost, 127.x.x.x, ::1) are also accepted to support
+ * local development against a self-hosted instance.
+ *
+ * Suffix check requires the leading dot — `endsWith('uluops.ai')` without
+ * the dot would accept attacker-controlled `eviluluops.ai`. The exact-
+ * match branch covers the bare apex.
+ */
+function isAllowedRegistryHost(hostname) {
+    if (hostname === 'localhost')
+        return true;
+    if (hostname === '127.0.0.1' || hostname.startsWith('127.'))
+        return true;
+    if (hostname === '::1' || hostname === '[::1]')
+        return true;
+    if (hostname === 'uluops.ai')
+        return true;
+    if (hostname.endsWith('.uluops.ai'))
+        return true;
+    return false;
+}
+/**
+ * RFC-1918, IMDS, and link-local addresses that should never receive the
+ * API key by accident. Even with ULUOPS_ALLOW_ANY_REGISTRY_HOST=1, these
+ * hosts require an explicit ULUOPS_ALLOW_PRIVATE_REGISTRY=1 second escape
+ * hatch — the typical AI-agent-driven misconfiguration we are defending
+ * against would not set both env vars.
+ */
+function isPrivateOrMetadataHost(hostname) {
+    // AWS / GCP / Azure instance metadata service
+    if (hostname === '169.254.169.254')
+        return true;
+    // RFC-1918 ranges (rough prefix match; sufficient for defense-in-depth)
+    if (hostname.startsWith('10.'))
+        return true;
+    if (hostname.startsWith('192.168.'))
+        return true;
+    if (/^172\.(1[6-9]|2\d|3[01])\./.test(hostname))
+        return true;
+    // Link-local
+    if (hostname.startsWith('169.254.'))
+        return true;
+    return false;
+}
 /**
  * Validate that required configuration is present and well-formed.
+ *
+ * Returns a list of non-fatal warnings (e.g., custom registry URL accepted
+ * via escape hatch) that the caller should log so the user sees what
+ * happened during startup.
  */
 export function validateConfig(config) {
-    if (!config.api.baseUrl) {
-        throw new Error('Registry API base URL is required');
-    }
-    try {
-        const parsed = new URL(config.api.baseUrl);
+    const warnings = [];
+    // baseUrl is optional. When undefined, RegistryClient falls back to the
+    // SDK's DEFAULT_BASE_URL — a trusted compile-time constant, so the SSRF
+    // defense below only runs when the operator explicitly set a URL.
+    if (config.api.baseUrl !== undefined) {
+        let parsed;
+        try {
+            parsed = new URL(config.api.baseUrl);
+        }
+        catch {
+            throw new Error(`Invalid Registry API URL: ${config.api.baseUrl}`);
+        }
         if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
             throw new Error(`Registry API URL must use http or https scheme, got: ${parsed.protocol}`);
         }
-    }
-    catch (error) {
-        if (error instanceof Error && error.message.includes('scheme')) {
-            throw error;
+        // SSRF defense (CWE-918). The URL receives ULUOPS_API_KEY as a Bearer
+        // header on every request. By default only *.uluops.ai (the canonical
+        // host) and loopback (localhost dev) are allowed without opt-in.
+        const allowAnyHost = process.env['ULUOPS_ALLOW_ANY_REGISTRY_HOST'] === '1';
+        const allowPrivate = process.env['ULUOPS_ALLOW_PRIVATE_REGISTRY'] === '1';
+        const hostname = parsed.hostname.toLowerCase();
+        if (isPrivateOrMetadataHost(hostname) && !allowPrivate) {
+            throw new Error(`Registry API URL host '${hostname}' is a private or instance-metadata address. ` +
+                `If you really intend this, set ULUOPS_ALLOW_PRIVATE_REGISTRY=1 to acknowledge the risk.`);
+        }
+        if (!isAllowedRegistryHost(hostname) && !allowAnyHost) {
+            throw new Error(`Registry API URL host '${hostname}' is not on the default allowlist. ` +
+                `By default only *.uluops.ai and loopback are accepted to prevent the ` +
+                `API key from being forwarded to untrusted hosts. If you are pointing ` +
+                `at a non-production endpoint, set ULUOPS_ALLOW_ANY_REGISTRY_HOST=1 to ` +
+                `acknowledge the risk.`);
+        }
+        if (allowAnyHost && !isAllowedRegistryHost(hostname)) {
+            warnings.push(`Registry API URL host '${hostname}' accepted via ULUOPS_ALLOW_ANY_REGISTRY_HOST=1. ` +
+                `Every API call will forward ULUOPS_API_KEY as a Bearer header to this host.`);
+        }
+        if (parsed.username !== '' || parsed.password !== '') {
+            throw new Error('Registry API URL must not include userinfo (user:pass@). Set ULUOPS_API_KEY instead.');
         }
-        throw new Error(`Invalid Registry API URL: ${config.api.baseUrl}`);
     }
     if (config.api.apiKey === undefined || config.api.apiKey === '') {
         throw new Error('API key is required. Set ULUOPS_API_KEY');
@@ -88,5 +164,6 @@ export function validateConfig(config) {
     if (config.api.retries < 0) {
         throw new Error('Retries must be a non-negative number');
     }
+    return { warnings };
 }
 //# sourceMappingURL=index.js.map

package/dist/config/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAGvC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAwB,CAAC;AAErF,kEAAkE;AAClE,MAAM,CAAC,MAAM,OAAO,GAAG,UAAU,CAAC;AAElC,MAAM,gBAAgB,GAAG,uCAAuC,CAAC;AACjE,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,iBAAiB,GAAa,MAAM,CAAC;AAE3C,SAAS,aAAa,CAAC,KAAyB;IAC9C,MAAM,WAAW,GAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAiB,CAAC,EAAE,CAAC;QACnF,OAAO,KAAiB,CAAC;IAC3B,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,YAAqB;IACpE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IAC7C,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,YAAoB;IACnE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,gBAAgB,CAAC,CAAC,mEAAmE;IAC1I,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAE/C,OAAO;QACL,GAAG,EAAE;YACH,OAAO,EAAE,MAAM;YACf,MAAM;YACN,OAAO;YACP,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,eAAe,CAAC;YAC9E,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,eAAe,CAAC;SAC/E;QACD,MAAM,EAAE;YACN,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,UAAU;SACpB;QACD,QAAQ,EAAE;YACR,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACjD,aAAa,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,KAAK,CAAC;YACtE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YAC9B,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC;YACnE,qBAAqB,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,KAAK,CAAC;SACnF;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB;IACtD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,wDAAwD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAGvC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAwB,CAAC;AAErF,kEAAkE;AAClE,MAAM,CAAC,MAAM,OAAO,GAAG,UAAU,CAAC;AAElC,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,iBAAiB,GAAa,MAAM,CAAC;AAE3C,SAAS,aAAa,CAAC,KAAyB;IAC9C,MAAM,WAAW,GAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAiB,CAAC,EAAE,CAAC;QACnF,OAAO,KAAiB,CAAC;IAC3B,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,YAAqB;IACpE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IAC7C,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,YAAoB;IACnE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,6EAA6E;IAC7E,oEAAoE;IACpE,wCAAwC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAE/C,OAAO;QACL,GAAG,EAAE;YACH,OAAO,EAAE,MAAM;YACf,MAAM;YACN,OAAO;YACP,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,eAAe,CAAC;YAC9E,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,eAAe,CAAC;SAC/E;QACD,MAAM,EAAE;YACN,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,UAAU;SACpB;QACD,QAAQ,EAAE;YACR,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACjD,aAAa,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,KAAK,CAAC;YACtE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YAC9B,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC;YACnE,qBAAqB,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,KAAK,CAAC;SACnF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,IAAI,QAAQ,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,QAAQ,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,8CAA8C;IAC9C,IAAI,QAAQ,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAChD,wEAAwE;IACxE,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,aAAa;IACb,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB;IACtD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,wEAAwE;IACxE,wEAAwE;IACxE,kEAAkE;IAClE,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,wDAAwD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,sEAAsE;QACtE,sEAAsE;QACtE,iEAAiE;QACjE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,KAAK,GAAG,CAAC;QAC3E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,KAAK,GAAG,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE/C,IAAI,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,+CAA+C;gBACjF,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,qCAAqC;gBACvE,uEAAuE;gBACvE,uEAAuE;gBACvE,wEAAwE;gBACxE,uBAAuB,CACxB,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CACX,0BAA0B,QAAQ,mDAAmD;gBACrF,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC"}

package/dist/config/tool-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-registry.d.ts","sourceRoot":"","sources":["../../src/config/tool-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAKlD,eAAO,MAAM,YAAY,EAAE,QAAQ,EA6XlC,CAAC"}
+{"version":3,"file":"tool-registry.d.ts","sourceRoot":"","sources":["../../src/config/tool-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAKlD,eAAO,MAAM,YAAY,EAAE,QAAQ,EAqXlC,CAAC"}

package/dist/config/tool-registry.js

@@ -275,14 +275,6 @@ export const toolRegistry = [
         quotaPerMinute: 240,
         quotaPerHour: 5000,
     },
-    {
-        name: 'sync_models',
-        sideEffects: 'write',
-        maxArgsSize: 10 * KB,
-        maxEgressBytes: 200 * KB,
-        quotaPerMinute: 10,
-        quotaPerHour: 50,
-    },
     {
         name: 'get_user',
         sideEffects: 'read',

package/dist/config/tool-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-registry.js","sourceRoot":"","sources":["../../src/config/tool-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,EAAE,GAAG,IAAI,CAAC;AAChB,MAAM,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,YAAY,GAAe;IACtC,+EAA+E;IAC/E,qBAAqB;IACrB,+EAA+E;IAC/E;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,GAAG;QAChB,cAAc,EAAE,GAAG;QACnB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IAED,+EAA+E;IAC/E,gBAAgB;IAChB,+EAA+E;IAC/E;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,CAAC,GAAG,EAAE;QACtB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,CAAC,GAAG,EAAE;QACtB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,GAAG,GAAG,EAAE;QACrB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IAED,+EAA+E;IAC/E,oBAAoB;IACpB,+EAA+E;IAC/E;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,CAAC,GAAG,EAAE;QACtB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,CAAC,GAAG,EAAE;QACtB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,CAAC,GAAG,EAAE;QACtB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IAED,+EAA+E;IAC/E,6BAA6B;IAC7B,+EAA+E;IAC/E;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,GAAG,GAAG,EAAE;QACrB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,EAAE;KACjB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IAED;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,GAAG;QAChB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IAED,+EAA+E;IAC/E,eAAe;IACf,+EAA+E;IAC/E;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,GAAG;QAChB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;CACF,CAAC"}
+{"version":3,"file":"tool-registry.js","sourceRoot":"","sources":["../../src/config/tool-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,EAAE,GAAG,IAAI,CAAC;AAChB,MAAM,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,YAAY,GAAe;IACtC,+EAA+E;IAC/E,qBAAqB;IACrB,+EAA+E;IAC/E;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,GAAG;QAChB,cAAc,EAAE,GAAG;QACnB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IAED,+EAA+E;IAC/E,gBAAgB;IAChB,+EAA+E;IAC/E;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,CAAC,GAAG,EAAE;QACtB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,CAAC,GAAG,EAAE;QACtB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,GAAG,GAAG,EAAE;QACrB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IAED,+EAA+E;IAC/E,oBAAoB;IACpB,+EAA+E;IAC/E;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,CAAC,GAAG,EAAE;QACtB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,CAAC,GAAG,EAAE;QACtB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,CAAC,GAAG,EAAE;QACtB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IAED,+EAA+E;IAC/E,6BAA6B;IAC7B,+EAA+E;IAC/E;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,GAAG,GAAG,EAAE;QACrB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,EAAE,GAAG,EAAE;QACpB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IAED;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,GAAG;QAChB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,GAAG;QACnB,YAAY,EAAE,IAAI;KACnB;IAED,+EAA+E;IAC/E,eAAe;IACf,+EAA+E;IAC/E;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,GAAG;QAChB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,GAAG,GAAG,EAAE;QACxB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,CAAC,GAAG,EAAE;QACnB,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,GAAG;KAClB;CACF,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAYH,iBAAe,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAuJnC;AAED,OAAO,EAAE,IAAI,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAaH,iBAAe,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CA4JnC;AAED,OAAO,EAAE,IAAI,EAAE,CAAC"}

package/dist/index.js

@@ -5,6 +5,7 @@
  * Thin protocol adapter that enables Claude Code to interact with
  * the UluOps Registry API via MCP, using @uluops/registry-sdk.
  */
+import { fileURLToPath } from 'node:url';
 import { SecureMcpServer } from 'mcp-secure-server';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { RegistryClient } from '@uluops/registry-sdk';
@@ -20,21 +21,26 @@ async function main() {
         process.exit(0);
     }
     const config = loadConfig();
-    validateConfig(config);
+    const { warnings: configWarnings } = validateConfig(config);
     const logger = createLogger({
         level: config.security.logLevel,
         enableFileLogging: config.security.enableLogging,
         logDir: config.security.logDir,
     });
+    for (const warning of configWarnings) {
+        logger.warn(warning);
+    }
     logger.info('Starting UluOps Registry MCP client', {
         version: config.server.version,
-        apiUrl: config.api.baseUrl,
+        apiUrl: config.api.baseUrl ?? '(SDK default)',
     });
     // Retry config applies to all requests including writes. This is safe because:
     // - The SDK only retries on network errors and 5xx responses (not 4xx)
     // - Registry API write operations are idempotent (create returns existing on conflict)
-    // Detect auth type: ulr_ prefix = API key, otherwise = session token
-    const isApiKey = config.api.apiKey?.startsWith('ulr_');
+    // Detect auth type: ulr_ prefix = API key, otherwise = session token.
+    // Explicit `=== true` to handle the nullable-boolean case from optional
+    // chaining (undefined apiKey → undefined isApiKey, falls to session-token).
+    const isApiKey = config.api.apiKey?.startsWith('ulr_') === true;
     const registryClient = new RegistryClient({
         baseUrl: config.api.baseUrl,
         ...(isApiKey ? { apiKey: config.api.apiKey } : { sessionToken: config.api.apiKey }),
@@ -133,7 +139,6 @@ async function main() {
                 'list_providers',
                 'list_aliases',
                 'get_translator_version',
-                'sync_models',
                 'get_user',
                 'batch_users',
                 'list_languages',
@@ -149,7 +154,15 @@ async function main() {
     });
 }
 export { main };
-if (process.env.NODE_ENV !== 'test') {
+// Auto-run main() only when this module is the program entry point.
+// Tests import `{ main }` directly and call it themselves; they do not
+// need (and previously relied on a fragile `NODE_ENV=test` guard to
+// suppress) auto-execution. The ESM-standard entry-point check below is
+// stable across NODE_ENV values, so a stray `NODE_ENV=test` in the user's
+// shell no longer silently stops the server from starting.
+const isEntryPoint = typeof process.argv[1] === 'string' &&
+    process.argv[1] === fileURLToPath(import.meta.url);
+if (isEntryPoint) {
     main().catch((error) => {
         // console.error is intentional here — logger may not be initialized yet at startup
         const message = error instanceof Error ? error.message : String(error);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,uFAAuF;QACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;QAC/B,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa;QAChD,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;KAC/B,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;QACjD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;QAC9B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;KAC3B,CAAC,CAAC;IAEH,+EAA+E;IAC/E,uEAAuE;IACvE,uFAAuF;IACvF,qEAAqE;IACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACnF,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;KAC5B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;QACzD,aAAa,EAAE,OAAO;QACtB,oBAAoB,EAAE,GAAG;QACzB,cAAc,EAAE,GAAG,GAAG,IAAI;QAC1B,aAAa,EAAE,GAAG;QAElB,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,IAAI;QACnB,6EAA6E;QAC7E,uDAAuD;QACvD,mBAAmB,EAAE;YACnB,OAAO,EAAE,KAAK;SACf;QAED,YAAY;QAEZ,aAAa,EAAE;YACb,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI;SACnB;QAED,cAAc,EAAE;YACd,cAAc,EAAE,CAAC,UAAU,CAAC;SAC7B;QAED,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa;QAC5C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;QAC9C,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,qBAAqB;KAC7D,CAAC,CAAC;IAEH,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAQ,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,4BAA4B,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QACxC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;YACjC,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,iFAAiF;IACjF,uFAAuF;IACvF,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAiD,CAAC,CAAC;IAExE,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;QAC5C,KAAK,EAAE;YACL,OAAO,EAAE,CAAC,kBAAkB,CAAC;YAC7B,OAAO,EAAE;gBACP,kBAAkB;gBAClB,gBAAgB;gBAChB,oBAAoB;gBACpB,aAAa;gBACb,eAAe;gBACf,qBAAqB;gBACrB,mBAAmB;aACpB;YACD,WAAW,EAAE;gBACX,mBAAmB;gBACnB,mBAAmB;gBACnB,oBAAoB;gBACpB,sBAAsB;gBACtB,mBAAmB;gBACnB,oBAAoB;gBACpB,eAAe;gBACf,eAAe;gBACf,eAAe;gBACf,kBAAkB;gBAClB,gBAAgB;gBAChB,qBAAqB;gBACrB,YAAY;aACb;YACD,QAAQ,EAAE;gBACR,iBAAiB;gBACjB,aAAa;gBACb,kBAAkB;gBAClB,kBAAkB;gBAClB,wBAAwB;gBACxB,oBAAoB;gBACpB,WAAW;gBACX,gBAAgB;gBAChB,cAAc;gBACd,wBAAwB;gBACxB,aAAa;gBACb,UAAU;gBACV,aAAa;gBACb,gBAAgB;gBAChB,cAAc;aACf;SACF;QACD,SAAS,EAAE;YACT,wBAAwB;YACxB,mBAAmB;YACnB,6BAA6B;YAC7B,sBAAsB;SACvB;KACF,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,IAAI,EAAE,CAAC;AAEhB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;IACpC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9B,mFAAmF;QACnF,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,uFAAuF;QACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;QAC/B,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa;QAChD,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;KAC/B,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;QACjD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;QAC9B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe;KAC9C,CAAC,CAAC;IAEH,+EAA+E;IAC/E,uEAAuE;IACvE,uFAAuF;IACvF,sEAAsE;IACtE,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAChE,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACnF,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC3B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;KAC5B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;QACzD,aAAa,EAAE,OAAO;QACtB,oBAAoB,EAAE,GAAG;QACzB,cAAc,EAAE,GAAG,GAAG,IAAI;QAC1B,aAAa,EAAE,GAAG;QAElB,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,IAAI;QACnB,6EAA6E;QAC7E,uDAAuD;QACvD,mBAAmB,EAAE;YACnB,OAAO,EAAE,KAAK;SACf;QAED,YAAY;QAEZ,aAAa,EAAE;YACb,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI;SACnB;QAED,cAAc,EAAE;YACd,cAAc,EAAE,CAAC,UAAU,CAAC;SAC7B;QAED,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa;QAC5C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;QAC9C,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,qBAAqB;KAC7D,CAAC,CAAC;IAEH,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAQ,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,4BAA4B,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QACxC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;YACjC,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,iFAAiF;IACjF,uFAAuF;IACvF,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAiD,CAAC,CAAC;IAExE,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;QAC5C,KAAK,EAAE;YACL,OAAO,EAAE,CAAC,kBAAkB,CAAC;YAC7B,OAAO,EAAE;gBACP,kBAAkB;gBAClB,gBAAgB;gBAChB,oBAAoB;gBACpB,aAAa;gBACb,eAAe;gBACf,qBAAqB;gBACrB,mBAAmB;aACpB;YACD,WAAW,EAAE;gBACX,mBAAmB;gBACnB,mBAAmB;gBACnB,oBAAoB;gBACpB,sBAAsB;gBACtB,mBAAmB;gBACnB,oBAAoB;gBACpB,eAAe;gBACf,eAAe;gBACf,eAAe;gBACf,kBAAkB;gBAClB,gBAAgB;gBAChB,qBAAqB;gBACrB,YAAY;aACb;YACD,QAAQ,EAAE;gBACR,iBAAiB;gBACjB,aAAa;gBACb,kBAAkB;gBAClB,kBAAkB;gBAClB,wBAAwB;gBACxB,oBAAoB;gBACpB,WAAW;gBACX,gBAAgB;gBAChB,cAAc;gBACd,wBAAwB;gBACxB,UAAU;gBACV,aAAa;gBACb,gBAAgB;gBAChB,cAAc;aACf;SACF;QACD,SAAS,EAAE;YACT,wBAAwB;YACxB,mBAAmB;YACnB,6BAA6B;YAC7B,sBAAsB;SACvB;KACF,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,IAAI,EAAE,CAAC;AAEhB,oEAAoE;AACpE,uEAAuE;AACvE,oEAAoE;AACpE,wEAAwE;AACxE,0EAA0E;AAC1E,2DAA2D;AAC3D,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErD,IAAI,YAAY,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9B,mFAAmF;QACnF,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/batch-publish.js

@@ -6,7 +6,7 @@
  */
 import { z } from 'zod';
 import { DefinitionTypeSchema, createSuccessResponse } from '../types/index.js';
-import { mapSdkErrorToMcp, mapZodErrorToMcp, sanitizeErrorMessage } from '../client/sdk-error-mapper.js';
+import { mapSdkErrorToMcp, mapZodErrorToMcp, extractErrorContext } from '../client/sdk-error-mapper.js';
 import { trimDefinitionResponse } from '../utils/trim-definition.js';
 const DefinitionRefSchema = z.object({
     type: DefinitionTypeSchema,
@@ -32,18 +32,18 @@ export function registerBatchPublishTool(server, registryClient) {
                     published.push({ ...trimmed, warnings });
                 }
                 catch (error) {
-                    const message = error instanceof Error
-                        ? sanitizeErrorMessage(error.message)
-                        : 'Unknown error';
-                    const statusCode = error && typeof error === 'object' && 'statusCode' in error
-                        ? error.statusCode
-                        : undefined;
+                    // Route per-item failures through extractErrorContext so the
+                    // batch response surfaces the same rich error metadata that
+                    // single-call tools get via mapSdkErrorToMcp: 402 upgradeUrl
+                    // and tier info, 429 retry_after, 409 nextAvailable.
+                    const ctx = extractErrorContext(error);
+                    const { message, ...rest } = ctx;
                     failed.push({
                         type: def.type,
                         name: def.name,
                         version: def.version,
                         error: message,
-                        ...(statusCode ? { status: statusCode } : {}),
+                        ...rest,
                     });
                 }
             }

package/dist/tools/batch-publish.js.map

@@ -1 +1 @@
-{"version":3,"file":"batch-publish.js","sourceRoot":"","sources":["../../src/tools/batch-publish.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAkC,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChH,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACzG,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACzD,CAAC,CAAC;AAEH,MAAM,UAAU,wBAAwB,CACtC,MAAiC,EACjC,cAA8B;IAE9B,MAAM,CAAC,IAAI,CACT,eAAe,EACf,oHAAoH,EACpH,uBAAuB,CAAC,KAAK,EAC7B,KAAK,EAAE,IAAa,EAAE,EAAE;QACtB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElD,MAAM,SAAS,GAA8B,EAAE,CAAC;YAChD,MAAM,MAAM,GAA8B,EAAE,CAAC;YAE7C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;oBAC3G,MAAM,OAAO,GAAG,sBAAsB,CAAC,UAAU,CAA4B,CAAC;oBAC9E,qEAAqE;oBACrE,yEAAyE;oBACzE,0EAA0E;oBAC1E,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC3C,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK;wBACpC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC;wBACrC,CAAC,CAAC,eAAe,CAAC;oBACpB,MAAM,UAAU,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,IAAI,KAAK;wBAC5E,CAAC,CAAE,KAAgC,CAAC,UAAU;wBAC9C,CAAC,CAAC,SAAS,CAAC;oBACd,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,OAAO,EAAE,GAAG,CAAC,OAAO;wBACpB,KAAK,EAAE,OAAO;wBACd,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC9C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,qBAAqB,CAAC;gBAC3B,SAAS;gBACT,MAAM;gBACN,OAAO,EAAE,aAAa,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc;aACpG,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAChC,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"batch-publish.js","sourceRoot":"","sources":["../../src/tools/batch-publish.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAkC,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChH,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACxG,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACzD,CAAC,CAAC;AAEH,MAAM,UAAU,wBAAwB,CACtC,MAAiC,EACjC,cAA8B;IAE9B,MAAM,CAAC,IAAI,CACT,eAAe,EACf,oHAAoH,EACpH,uBAAuB,CAAC,KAAK,EAC7B,KAAK,EAAE,IAAa,EAAE,EAAE;QACtB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElD,MAAM,SAAS,GAA8B,EAAE,CAAC;YAChD,MAAM,MAAM,GAA8B,EAAE,CAAC;YAE7C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;oBAC3G,MAAM,OAAO,GAAG,sBAAsB,CAAC,UAAU,CAA4B,CAAC;oBAC9E,qEAAqE;oBACrE,yEAAyE;oBACzE,0EAA0E;oBAC1E,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC3C,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,6DAA6D;oBAC7D,4DAA4D;oBAC5D,6DAA6D;oBAC7D,qDAAqD;oBACrD,MAAM,GAAG,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;oBACvC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,OAAO,EAAE,GAAG,CAAC,OAAO;wBACpB,KAAK,EAAE,OAAO;wBACd,GAAG,IAAI;qBACR,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,qBAAqB,CAAC;gBAC3B,SAAS;gBACT,MAAM;gBACN,OAAO,EAAE,aAAa,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc;aACpG,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAChC,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/index.d.ts

@@ -4,7 +4,7 @@
 import type { RegistryClient } from '@uluops/registry-sdk';
 import type { McpServerToolRegistration } from '../types/index.js';
 /**
- * Register all 45 MCP tools with the server.
+ * Register all 44 MCP tools with the server.
  * @param server - MCP server instance to register tools on.
  * @param registryClient - Registry SDK client for API calls.
  */