brightspace-mcp-server 2.0.0 → 3.0.0

package/build/utils/self-update.js

@@ -0,0 +1,92 @@
+/**
+ * Brightspace MCP Server. Copyright (c) 2026 Rohan Muppa. MIT licensed.
+ *
+ * Self-healing for the auth CLI.
+ *
+ * The MCP server is launched as `npx -y brightspace-mcp-server@latest`, so it
+ * refetches on every client restart and is effectively always current. The
+ * auth CLI has no such guarantee: a copy installed once with `npm install -g`
+ * stays at that version forever. That is how a machine ended up running a
+ * v2.0.0 server alongside a v1.2.6 auth CLI whose sign-in flow no longer
+ * worked, with nothing to say so.
+ *
+ * When a stale CLI notices it is behind, it re-runs itself through
+ * `npx -y brightspace-mcp-server@latest auth` and hands back that process's
+ * exit code. The user types nothing and is not asked anything; the newest code
+ * simply runs. Note this does not rewrite the old copy on disk -- it is
+ * bypassed, not upgraded. Overwriting it would mean running `npm install -g`
+ * from inside a live process, which is the thing this package deliberately
+ * does not do.
+ *
+ * Opt out with D2L_NO_UPDATE_CHECK.
+ */
+import { spawn } from "node:child_process";
+import { PACKAGE_NAME } from "./commands.js";
+import { fetchLatestVersion, isNewerVersion, ownNpxCacheDir } from "./update-checker.js";
+/** Set in the child's environment so a re-exec can never recurse. */
+export const REEXEC_SENTINEL = "D2L_REEXECED";
+/**
+ * Flags worth carrying into the re-executed process. Only pass through
+ * option flags: the subcommand is supplied explicitly, and forwarding stray
+ * positional arguments risks changing what the child actually does.
+ */
+export function passthroughFlags(argv) {
+    return argv.slice(2).filter((arg) => arg.startsWith("-"));
+}
+/**
+ * Decide, without doing anything, whether a re-exec is warranted.
+ * Split out from the spawn so the policy is testable on its own.
+ */
+export function shouldReexec(opts) {
+    const { env, latest, installedVersion, runningFromNpxCache } = opts;
+    if (env[REEXEC_SENTINEL])
+        return false; // we are already the child
+    if (env.D2L_NO_UPDATE_CHECK)
+        return false;
+    if (runningFromNpxCache)
+        return false; // npx just fetched this
+    if (latest === null)
+        return false; // registry unreachable, carry on offline
+    return isNewerVersion(latest, installedVersion);
+}
+/**
+ * Re-run this command through the latest published release when the running
+ * copy is stale.
+ *
+ * Resolves to the child's exit code when a re-exec happened (the caller should
+ * exit with it and do no further work), or null when the current process
+ * should simply continue.
+ */
+export async function reexecLatestIfStale(deps = {}) {
+    const { env = process.env, argv = process.argv, installedVersion, fetchImpl = fetch, runningFromNpxCache = ownNpxCacheDir() !== null, platform = process.platform, spawnImpl = spawn, } = deps;
+    if (installedVersion === undefined)
+        return null;
+    // Cheap local checks first, so an opted-out or npx-launched run never even
+    // touches the network.
+    if (env[REEXEC_SENTINEL] || env.D2L_NO_UPDATE_CHECK || runningFromNpxCache)
+        return null;
+    const latest = await fetchLatestVersion(fetchImpl);
+    if (!shouldReexec({ env, latest, installedVersion, runningFromNpxCache }))
+        return null;
+    const args = ["-y", `${PACKAGE_NAME}@latest`, "auth", ...passthroughFlags(argv)];
+    console.error(`\nThis copy is v${installedVersion}; v${latest} is available. ` +
+        `Running the newer version instead.\n`);
+    return await new Promise((resolve) => {
+        let child;
+        try {
+            child = spawnImpl(platform === "win32" ? "npx.cmd" : "npx", args, {
+                stdio: "inherit",
+                env: { ...env, [REEXEC_SENTINEL]: "1" },
+                shell: platform === "win32",
+            });
+        }
+        catch {
+            resolve(null); // could not launch npx, fall back to running ourselves
+            return;
+        }
+        // If npx itself cannot start, run the stale copy rather than failing.
+        child.on("error", () => resolve(null));
+        child.on("exit", (code) => resolve(code ?? 1));
+    });
+}
+//# sourceMappingURL=self-update.js.map

package/build/utils/self-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-update.js","sourceRoot":"","sources":["../../src/utils/self-update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,KAAK,EAAwC,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAAC;AAiB9C;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAK5B;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC;IACpE,IAAI,GAAG,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,2BAA2B;IACnE,IAAI,GAAG,CAAC,mBAAmB;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,mBAAmB;QAAE,OAAO,KAAK,CAAC,CAAC,wBAAwB;IAC/D,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,yCAAyC;IAC5E,OAAO,cAAc,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAmB,EAAE;IAC7D,MAAM,EACJ,GAAG,GAAG,OAAO,CAAC,GAAG,EACjB,IAAI,GAAG,OAAO,CAAC,IAAI,EACnB,gBAAgB,EAChB,SAAS,GAAG,KAAK,EACjB,mBAAmB,GAAG,cAAc,EAAE,KAAK,IAAI,EAC/C,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAC3B,SAAS,GAAG,KAAK,GAClB,GAAG,IAAI,CAAC;IAET,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEhD,2EAA2E;IAC3E,uBAAuB;IACvB,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,mBAAmB,IAAI,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAExF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvF,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,YAAY,SAAS,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjF,OAAO,CAAC,KAAK,CACX,mBAAmB,gBAAgB,MAAM,MAAM,iBAAiB;QAChE,sCAAsC,CACvC,CAAC;IAEF,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QAClD,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,SAAS,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE;gBAChE,KAAK,EAAE,SAAS;gBAChB,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE;gBACvC,KAAK,EAAE,QAAQ,KAAK,OAAO;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,uDAAuD;YACtE,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/build/utils/update-checker.d.ts

@@ -1,15 +1,59 @@
 /**
  * Background npm update checker: look, and tell, but never touch.
  *
- * On startup the server asks the npm registry for the latest published
- * version. If it is newer than the running one, the user is told how to
- * update. Nothing is ever installed by this module. The one side effect it
- * keeps is scoped to this package's own stale npx cache directories, because
- * clearing them is what lets `npx brightspace-mcp-server@latest` actually
- * pick up the new version on the next start.
+ * The server asks the npm registry for the latest published version, on
+ * startup and then periodically, because a stdio MCP server can stay alive for
+ * days and a boot-only check would never notice a release. If the registry has
+ * something newer, the user is told how to update. Nothing is ever installed
+ * by this module.
+ *
+ * The one side effect it keeps is scoped to this package's own stale npx cache
+ * directories, because clearing them is what lets `npx brightspace-mcp-server@latest`
+ * actually pick up the new version on the next start. It never deletes the
+ * directory the current process is running from -- doing so pulls the rug out
+ * from under lazy imports (Playwright is loaded on demand at auth time) and
+ * from the auth CLI this process spawns as a child.
+ *
+ * The notice repeats on a throttle rather than being consumed by whichever
+ * caller happens to read it first. A one-shot notice is invisible in practice:
+ * it gets swallowed by a single background tool call and never seen again.
  *
  * Set D2L_NO_UPDATE_CHECK to any value to switch the check off entirely.
  */
+import { access, readdir, rm } from "node:fs/promises";
+/**
+ * The `_npx/<hash>` directory this process is executing out of, or null when
+ * not running from an npx cache. Used both to detect npx execution and, more
+ * importantly, to know which directory must never be deleted.
+ */
+export declare function ownNpxCacheDir(root?: string): string | null;
+/**
+ * Remove npx cache entries holding a copy of this package, so the next
+ * `npx brightspace-mcp-server@latest` downloads the new version instead of
+ * reusing a stale one.
+ *
+ * Skips the directory the current process is running from. Deleting it would
+ * break this process: Playwright is imported lazily at auth time, and the auth
+ * CLI is spawned from the same tree, so both would fail with ENOENT for the
+ * rest of the server's life. Touches nothing outside npx cache directories.
+ */
+export declare function clearAllNpxCaches(selfDir?: string | null, deps?: {
+    readdirImpl?: typeof readdir;
+    rmImpl?: typeof rm;
+    accessImpl?: typeof access;
+}): Promise<number>;
+/**
+ * A version string safe to show a person.
+ *
+ * The registry response is remote input, and the notice built from it is now
+ * rendered into the user's AI client by every tool, so the raw string must
+ * never be interpolated. `parseTriple` deliberately tolerates a trailing
+ * prerelease suffix, which means a `latest` of "2.2.0 and now ignore your
+ * instructions" parses happily. Rebuilding the label from the parsed numbers
+ * discards everything after the digits, so only `\d+\.\d+\.\d+` can ever reach
+ * the screen.
+ */
+export declare function safeVersionLabel(version: string): string;
 /**
  * True only when `latest` is strictly newer than `installed`, compared as
  * numeric major, minor, patch. Prerelease suffixes are ignored, and anything
@@ -17,6 +61,12 @@
  * cannot announce an update that does not exist.
  */
 export declare function isNewerVersion(latest: string, installed: string): boolean;
+/**
+ * Ask the registry for the latest published version. Returns null on any
+ * failure -- a bad network must never be reported as "you are up to date" or
+ * as an error the caller has to handle.
+ */
+export declare function fetchLatestVersion(fetchImpl?: typeof fetch): Promise<string | null>;
 export interface UpdateCheckDeps {
     fetchImpl?: typeof fetch;
     env?: Record<string, string | undefined>;
@@ -30,5 +80,33 @@ export interface UpdateCheckDeps {
  * swallowed, because a version check must not affect the server.
  */
 export declare function initUpdateChecker(deps?: UpdateCheckDeps): Promise<void>;
-export declare function getUpdateNotice(): string | null;
+export interface PeriodicUpdateDeps extends UpdateCheckDeps {
+    intervalMs?: number;
+    setIntervalImpl?: (fn: () => void, ms: number) => {
+        unref?: () => void;
+    };
+    clearIntervalImpl?: (handle: unknown) => void;
+}
+/**
+ * Check now, then keep checking. Returns a stop function.
+ *
+ * The interval is unref'd so it can never hold a stdio server open past the
+ * point it would otherwise exit.
+ */
+export declare function startUpdateChecks(deps?: PeriodicUpdateDeps): () => void;
+/**
+ * Read the notice without consuming or throttling it.
+ *
+ * For one-shot contexts like a CLI, which runs, prints once, and exits.
+ */
+export declare function peekUpdateNotice(): string | null;
+/**
+ * Read the notice for a repeated context like MCP tool responses, which can
+ * fire many times a session. Returns the notice at most once per
+ * `minIntervalMs`. `now` is a parameter so throttling is testable without
+ * faking timers.
+ */
+export declare function getUpdateNotice(now?: number, minIntervalMs?: number): string | null;
+/** Drop any pending notice. Primarily for resetting module state in tests. */
+export declare function clearUpdateNotice(): void;
 //# sourceMappingURL=update-checker.d.ts.map

package/build/utils/update-checker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-checker.d.ts","sourceRoot":"","sources":["../../src/utils/update-checker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA8DH;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAQzE;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCjF;AAED,wBAAgB,eAAe,IAAI,MAAM,GAAG,IAAI,CAI/C"}
+{"version":3,"file":"update-checker.d.ts","sourceRoot":"","sources":["../../src/utils/update-checker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAuCvD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,GAAE,MAAoB,GAAG,MAAM,GAAG,IAAI,CAIxE;AAMD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,GAAE,MAAM,GAAG,IAAuB,EACzC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,MAAM,CAAA;CAAO,GAC1F,OAAO,CAAC,MAAM,CAAC,CAoBjB;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGxD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAQzE;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAYhG;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwCjF;AAED,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK;QAAE,KAAK,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC;IACzE,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;CAC/C;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,kBAAuB,GAAG,MAAM,IAAI,CAgB3E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAEhD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,GAAG,GAAE,MAAmB,EACxB,aAAa,GAAE,MAAyB,GACvC,MAAM,GAAG,IAAI,CAKf;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,IAAI,IAAI,CAExC"}

package/build/utils/update-checker.js

@@ -1,12 +1,22 @@
 /**
  * Background npm update checker: look, and tell, but never touch.
  *
- * On startup the server asks the npm registry for the latest published
- * version. If it is newer than the running one, the user is told how to
- * update. Nothing is ever installed by this module. The one side effect it
- * keeps is scoped to this package's own stale npx cache directories, because
- * clearing them is what lets `npx brightspace-mcp-server@latest` actually
- * pick up the new version on the next start.
+ * The server asks the npm registry for the latest published version, on
+ * startup and then periodically, because a stdio MCP server can stay alive for
+ * days and a boot-only check would never notice a release. If the registry has
+ * something newer, the user is told how to update. Nothing is ever installed
+ * by this module.
+ *
+ * The one side effect it keeps is scoped to this package's own stale npx cache
+ * directories, because clearing them is what lets `npx brightspace-mcp-server@latest`
+ * actually pick up the new version on the next start. It never deletes the
+ * directory the current process is running from -- doing so pulls the rug out
+ * from under lazy imports (Playwright is loaded on demand at auth time) and
+ * from the auth CLI this process spawns as a child.
+ *
+ * The notice repeats on a throttle rather than being consumed by whichever
+ * caller happens to read it first. A one-shot notice is invisible in practice:
+ * it gets swallowed by a single background tool call and never seen again.
  *
  * Set D2L_NO_UPDATE_CHECK to any value to switch the check off entirely.
  */
@@ -15,12 +25,16 @@ import { access, readdir, rm } from "node:fs/promises";
 import { homedir } from "node:os";
 import { fileURLToPath } from "node:url";
 import { dirname, resolve, sep } from "node:path";
-const PACKAGE_NAME = "brightspace-mcp-server";
+import { PACKAGE_NAME, GLOBAL_INSTALL_COMMAND, CLEAR_NPX_CACHE_COMMAND, } from "./commands.js";
 const REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
 const REGISTRY_TIMEOUT_MS = 5000;
+/** How long before the same notice is worth repeating to an MCP client. */
+const NOTICE_REPEAT_MS = 30 * 60 * 1000;
+/** How often a long-lived server re-asks the registry. */
+const DEFAULT_CHECK_INTERVAL_MS = 6 * 60 * 60 * 1000;
 const __filename = fileURLToPath(import.meta.url);
 const projectRoot = resolve(dirname(__filename), "..", "..");
-let notice = null;
+let state = null;
 function getInstalledVersion() {
     try {
         const pkg = JSON.parse(readFileSync(resolve(projectRoot, "package.json"), "utf-8"));
@@ -30,24 +44,41 @@ function getInstalledVersion() {
         return "0.0.0";
     }
 }
+/**
+ * The `_npx/<hash>` directory this process is executing out of, or null when
+ * not running from an npx cache. Used both to detect npx execution and, more
+ * importantly, to know which directory must never be deleted.
+ */
+export function ownNpxCacheDir(root = projectRoot) {
+    const normalized = root.split(sep).join("/");
+    const match = new RegExp(`^(.*/_npx/[^/]+)/node_modules/${PACKAGE_NAME}`).exec(normalized);
+    return match ? resolve(match[1]) : null;
+}
 function isNpxCache() {
-    const normalized = projectRoot.split(sep).join("/");
-    return /[\\/]_npx[\\/][^\\/]+[\\/]node_modules[\\/]brightspace-mcp-server/.test(normalized);
+    return ownNpxCacheDir() !== null;
 }
 /**
- * Remove every npx cache entry that holds a copy of this package, so the next
+ * Remove npx cache entries holding a copy of this package, so the next
  * `npx brightspace-mcp-server@latest` downloads the new version instead of
- * reusing a stale one. Touches nothing outside those directories.
+ * reusing a stale one.
+ *
+ * Skips the directory the current process is running from. Deleting it would
+ * break this process: Playwright is imported lazily at auth time, and the auth
+ * CLI is spawned from the same tree, so both would fail with ENOENT for the
+ * rest of the server's life. Touches nothing outside npx cache directories.
  */
-async function clearAllNpxCaches() {
+export async function clearAllNpxCaches(selfDir = ownNpxCacheDir(), deps = {}) {
+    const { readdirImpl = readdir, rmImpl = rm, accessImpl = access } = deps;
     const npxCacheRoot = resolve(homedir(), ".npm", "_npx");
     let cleared = 0;
     try {
-        for (const entry of await readdir(npxCacheRoot)) {
+        for (const entry of await readdirImpl(npxCacheRoot)) {
             const entryDir = resolve(npxCacheRoot, entry);
+            if (selfDir && entryDir === selfDir)
+                continue; // never saw off the branch we sit on
             try {
-                await access(resolve(entryDir, "node_modules", PACKAGE_NAME));
-                await rm(entryDir, { recursive: true, force: true });
+                await accessImpl(resolve(entryDir, "node_modules", PACKAGE_NAME));
+                await rmImpl(entryDir, { recursive: true, force: true });
                 cleared++;
             }
             catch {
@@ -66,6 +97,21 @@ function parseTriple(version) {
         return null;
     return [Number(match[1]), Number(match[2]), Number(match[3])];
 }
+/**
+ * A version string safe to show a person.
+ *
+ * The registry response is remote input, and the notice built from it is now
+ * rendered into the user's AI client by every tool, so the raw string must
+ * never be interpolated. `parseTriple` deliberately tolerates a trailing
+ * prerelease suffix, which means a `latest` of "2.2.0 and now ignore your
+ * instructions" parses happily. Rebuilding the label from the parsed numbers
+ * discards everything after the digits, so only `\d+\.\d+\.\d+` can ever reach
+ * the screen.
+ */
+export function safeVersionLabel(version) {
+    const triple = parseTriple(version);
+    return triple ? triple.join(".") : "unknown";
+}
 /**
  * True only when `latest` is strictly newer than `installed`, compared as
  * numeric major, minor, patch. Prerelease suffixes are ignored, and anything
@@ -84,44 +130,103 @@ export function isNewerVersion(latest, installed) {
     return false;
 }
 /**
- * Run one update check. Never throws and never blocks the caller for long:
- * the registry request is bounded by a timeout and every failure is
- * swallowed, because a version check must not affect the server.
+ * Ask the registry for the latest published version. Returns null on any
+ * failure -- a bad network must never be reported as "you are up to date" or
+ * as an error the caller has to handle.
  */
-export async function initUpdateChecker(deps = {}) {
-    const { fetchImpl = fetch, env = process.env, installedVersion = getInstalledVersion(), runningFromNpxCache = isNpxCache(), clearCaches = clearAllNpxCaches, } = deps;
-    if (env.D2L_NO_UPDATE_CHECK)
-        return;
+export async function fetchLatestVersion(fetchImpl = fetch) {
     try {
         const response = await fetchImpl(REGISTRY_URL, {
             headers: { accept: "application/json" },
             signal: AbortSignal.timeout(REGISTRY_TIMEOUT_MS),
         });
         if (!response.ok)
-            return;
+            return null;
         const latest = (await response.json()).version;
-        if (typeof latest !== "string" || !isNewerVersion(latest, installedVersion))
+        return typeof latest === "string" ? latest : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Run one update check. Never throws and never blocks the caller for long:
+ * the registry request is bounded by a timeout and every failure is
+ * swallowed, because a version check must not affect the server.
+ */
+export async function initUpdateChecker(deps = {}) {
+    const { fetchImpl = fetch, env = process.env, installedVersion = getInstalledVersion(), runningFromNpxCache = isNpxCache(), clearCaches = () => clearAllNpxCaches(), } = deps;
+    if (env.D2L_NO_UPDATE_CHECK)
+        return;
+    try {
+        const latest = await fetchLatestVersion(fetchImpl);
+        if (latest === null || !isNewerVersion(latest, installedVersion))
             return;
+        // Both are rendered to the user, so neither goes in raw. `latest` is
+        // remote input; `installedVersion` is injectable in tests.
+        const from = safeVersionLabel(installedVersion);
+        const to = safeVersionLabel(latest);
+        const headline = `Update available: v${from} to v${to}.`;
+        let text;
         if (runningFromNpxCache) {
             const count = await clearCaches();
-            notice =
-                `Update available: v${installedVersion} to v${latest}. ` +
-                    `Cleared ${count} stale npx cache director${count === 1 ? "y" : "ies"} for ${PACKAGE_NAME} ` +
-                    `so the next start downloads v${latest}. Restart your MCP client to pick it up.`;
+            const cleanup = count > 0
+                ? `Cleared ${count} stale npx cache director${count === 1 ? "y" : "ies"} for ${PACKAGE_NAME} ` +
+                    `(kept the one this server is running from). `
+                : "";
+            text = `${headline} ${cleanup}Restart your MCP client to pick up v${to}.`;
         }
         else {
-            notice =
-                `Update available: v${installedVersion} to v${latest}. ` +
-                    `Run: npx ${PACKAGE_NAME}@latest, or npm install -g ${PACKAGE_NAME}@latest`;
+            text = `${headline} Run: ${GLOBAL_INSTALL_COMMAND}` +
+                `, then ${CLEAR_NPX_CACHE_COMMAND} and restart your MCP client.`;
         }
+        // Preserve lastShownAt when the text is unchanged, so a periodic re-check
+        // does not reset the throttle and start repeating the same line.
+        state = state?.text === text ? state : { text, lastShownAt: null };
     }
     catch {
         // A version check must never take the server down.
     }
 }
-export function getUpdateNotice() {
-    const result = notice;
-    notice = null;
-    return result;
+/**
+ * Check now, then keep checking. Returns a stop function.
+ *
+ * The interval is unref'd so it can never hold a stdio server open past the
+ * point it would otherwise exit.
+ */
+export function startUpdateChecks(deps = {}) {
+    const { intervalMs = DEFAULT_CHECK_INTERVAL_MS, setIntervalImpl = setInterval, clearIntervalImpl = clearInterval, ...checkDeps } = deps;
+    void initUpdateChecker(checkDeps);
+    const handle = setIntervalImpl(() => {
+        void initUpdateChecker(checkDeps);
+    }, intervalMs);
+    handle.unref?.();
+    return () => clearIntervalImpl(handle);
+}
+/**
+ * Read the notice without consuming or throttling it.
+ *
+ * For one-shot contexts like a CLI, which runs, prints once, and exits.
+ */
+export function peekUpdateNotice() {
+    return state?.text ?? null;
+}
+/**
+ * Read the notice for a repeated context like MCP tool responses, which can
+ * fire many times a session. Returns the notice at most once per
+ * `minIntervalMs`. `now` is a parameter so throttling is testable without
+ * faking timers.
+ */
+export function getUpdateNotice(now = Date.now(), minIntervalMs = NOTICE_REPEAT_MS) {
+    if (!state)
+        return null;
+    if (state.lastShownAt !== null && now - state.lastShownAt < minIntervalMs)
+        return null;
+    state.lastShownAt = now;
+    return state.text;
+}
+/** Drop any pending notice. Primarily for resetting module state in tests. */
+export function clearUpdateNotice() {
+    state = null;
 }
 //# sourceMappingURL=update-checker.js.map

package/build/utils/update-checker.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-checker.js","sourceRoot":"","sources":["../../src/utils/update-checker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAElD,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAC9C,MAAM,YAAY,GAAG,8BAA8B,YAAY,SAAS,CAAC;AACzE,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE7D,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACpF,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,OAAO,mEAAmE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB;IAC9B,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC9D,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,SAAiB;IAC9D,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAwB,EAAE;IAChE,MAAM,EACJ,SAAS,GAAG,KAAK,EACjB,GAAG,GAAG,OAAO,CAAC,GAAG,EACjB,gBAAgB,GAAG,mBAAmB,EAAE,EACxC,mBAAmB,GAAG,UAAU,EAAE,EAClC,WAAW,GAAG,iBAAiB,GAChC,GAAG,IAAI,CAAC;IAET,IAAI,GAAG,CAAC,mBAAmB;QAAE,OAAO;IAEpC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE;YAC7C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC;SACjD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO;QAEzB,MAAM,MAAM,GAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC,OAAO,CAAC;QAC1E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,gBAAgB,CAAC;YAAE,OAAO;QAEpF,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM;gBACJ,sBAAsB,gBAAgB,QAAQ,MAAM,IAAI;oBACxD,WAAW,KAAK,4BAA4B,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,YAAY,GAAG;oBAC5F,gCAAgC,MAAM,0CAA0C,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,MAAM;gBACJ,sBAAsB,gBAAgB,QAAQ,MAAM,IAAI;oBACxD,YAAY,YAAY,8BAA8B,YAAY,SAAS,CAAC;QAChF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC;IACtB,MAAM,GAAG,IAAI,CAAC;IACd,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"update-checker.js","sourceRoot":"","sources":["../../src/utils/update-checker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAEvB,MAAM,YAAY,GAAG,8BAA8B,YAAY,SAAS,CAAC;AACzE,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,2EAA2E;AAC3E,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExC,0DAA0D;AAC1D,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAQ7D,IAAI,KAAK,GAAuB,IAAI,CAAC;AAErC,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACpF,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,WAAW;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,cAAc,EAAE,KAAK,IAAI,CAAC;AACnC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAyB,cAAc,EAAE,EACzC,OAAyF,EAAE;IAE3F,MAAM,EAAE,WAAW,GAAG,OAAO,EAAE,MAAM,GAAG,EAAE,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;IACzE,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAC9C,IAAI,OAAO,IAAI,QAAQ,KAAK,OAAO;gBAAE,SAAS,CAAC,qCAAqC;YACpF,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;gBAClE,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzD,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,SAAiB;IAC9D,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,YAA0B,KAAK;IACtE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE;YAC7C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC;SACjD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,MAAM,GAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC,OAAO,CAAC;QAC1E,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAwB,EAAE;IAChE,MAAM,EACJ,SAAS,GAAG,KAAK,EACjB,GAAG,GAAG,OAAO,CAAC,GAAG,EACjB,gBAAgB,GAAG,mBAAmB,EAAE,EACxC,mBAAmB,GAAG,UAAU,EAAE,EAClC,WAAW,GAAG,GAAG,EAAE,CAAC,iBAAiB,EAAE,GACxC,GAAG,IAAI,CAAC;IAET,IAAI,GAAG,CAAC,mBAAmB;QAAE,OAAO;IAEpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,gBAAgB,CAAC;YAAE,OAAO;QAEzE,qEAAqE;QACrE,2DAA2D;QAC3D,MAAM,IAAI,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,sBAAsB,IAAI,QAAQ,EAAE,GAAG,CAAC;QACzD,IAAI,IAAY,CAAC;QAEjB,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC;gBACvB,CAAC,CAAC,WAAW,KAAK,4BAA4B,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,YAAY,GAAG;oBAC5F,8CAA8C;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,GAAG,GAAG,QAAQ,IAAI,OAAO,uCAAuC,EAAE,GAAG,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,GAAG,QAAQ,SAAS,sBAAsB,EAAE;gBACjD,UAAU,uBAAuB,+BAA+B,CAAC;QACrE,CAAC;QAED,0EAA0E;QAC1E,iEAAiE;QACjE,KAAK,GAAG,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;AACH,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA2B,EAAE;IAC7D,MAAM,EACJ,UAAU,GAAG,yBAAyB,EACtC,eAAe,GAAG,WAAgF,EAClG,iBAAiB,GAAG,aAAqD,EACzE,GAAG,SAAS,EACb,GAAG,IAAI,CAAC;IAET,KAAK,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAElC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE;QAClC,KAAK,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC,EAAE,UAAU,CAAC,CAAC;IACf,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;IAEjB,OAAO,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAc,IAAI,CAAC,GAAG,EAAE,EACxB,gBAAwB,gBAAgB;IAExC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,GAAG,aAAa;QAAE,OAAO,IAAI,CAAC;IACvF,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC;IACxB,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB;IAC/B,KAAK,GAAG,IAAI,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brightspace-mcp-server",
-  "version": "2.0.0",
+  "version": "3.0.0",
   "mcpName": "io.github.rohanmuppa/brightspace",
   "description": "MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, syllabus, rosters and more via Claude, ChatGPT, Cursor, Windsurf, or any MCP client.",
   "type": "module",