npm - fa-mcp-sdk - Versions diffs - 0.4.95 → 0.4.97 - Mend

fa-mcp-sdk 0.4.95 → 0.4.97

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11) hide show

package/cli-template/.claude/skills/upgrade-sdk/SKILL.md +554 -0
package/cli-template/package.json +1 -1
package/dist/core/auth/admin-auth.d.ts.map +1 -1
package/dist/core/auth/admin-auth.js +26 -4
package/dist/core/auth/admin-auth.js.map +1 -1
package/dist/core/web/static/styles.css +23 -0
package/dist/core/web/static/token-gen/index.html +7 -1
package/dist/core/web/static/token-gen/script.js +5 -0
package/package.json +1 -1
package/scripts/update-sdk.js +16 -0
package/cli-template/.claude/skills/upgrade-guide/SKILL.md +0 -456

package/cli-template/.claude/skills/upgrade-sdk/SKILL.md ADDED Viewed

@@ -0,0 +1,554 @@
+---
+name: upgrade-sdk
+description: "Upgrade fa-mcp-sdk in the current project end-to-end: analyze the version diff, present an actionable execution plan, get user confirmation, then apply the upgrade automatically (deps, configs, code) — asking the user inline for any choices or values it needs. Falls back to a manual checklist only for items the LLM genuinely cannot perform. Use when user asks to upgrade/update fa-mcp-sdk, mentions 'обновить sdk', 'upgrade sdk', 'обновление fa-mcp-sdk', 'обнови sdk', or supplies versions to upgrade between."
+disable-model-invocation: true
+allowed-tools: Bash(yarn *) Bash(npm *) Bash(node *) Bash(git *) Bash(cat *) Bash(diff *) Bash(ls *) Bash(find *) Bash(mkdir *) Bash(cp *) Bash(mv *) Bash(rm *) Read Write Edit MultiEdit Glob Grep WebFetch Agent
+argument-hint: "[from-version] [to-version] [language hint]"
+---
+# FA-MCP-SDK Upgrader
+Execute an end-to-end upgrade of the `fa-mcp-sdk` dependency in the current project: analyze the diff between two
+versions, present an actionable execution plan, get user confirmation, apply the changes automatically (asking for any
+inputs needed along the way), verify, and report.
+## Operating principle
+**Maximize automation.** Do as much as possible inside this skill. The only items that should end up on a "manual"
+checklist are those the LLM genuinely cannot perform from within this session (e.g. they depend on production secrets it
+has no way to obtain, or on coordination with humans in external systems). When the LLM **can** perform a step but needs
+information from the user — a credential, a config value with no sensible default, a choice between alternatives,
+confirmation about overwriting a locally-customized file — it must **ask the user inline** rather than punt the task
+to the manual list.
+The user expects: confirm the plan → upgrade is fully done by the time the skill finishes. Failures must be reported
+with concrete next-step options (retry, fix, roll back, leave-as-is) — never silently swallowed.
+## Workflow at a glance
+```
+1. Parse arguments           → resolve FROM/TO refs
+2. Validate refs             → fail fast on bogus versions
+3. Preflight safety          → branch + uncommitted-changes check
+4. Install TO into project   → `yarn add fa-mcp-sdk@<TO>` (first mutation)
+5. Analyze diff              → categorize every change as Auto / Needs-Input / Manual
+6. Build execution plan
+7. PRESENT PLAN + CONFIRM    ← blocking gate; nothing else mutates until user says go
+8. Execute Auto items, ask user inline for Needs-Input items as we reach them
+9. Verify (build, lint, typecheck, tests, clean startup)
+10. Report (chat + claudedocs/upgrade-sdk-<FROM>-to-<TO>.md)
+```
+## Step 1: Argument parsing
+Parse `$ARGUMENTS` to extract a target version and an optional language hint.
+### Language detection
+Look anywhere in the arguments for a natural-language phrase indicating the desired output language:
+- "на русском", "по-русски", "in Russian", "ru" → Russian
+- "in English", "en" → English
+- Any similar phrase or ISO 639-1 code.
+Strip the language hint from the arguments before parsing versions. **Default: English** if no hint is found.
+The detected language controls ALL human-readable text in the plan and the report (headings, prose, recommendations).
+Technical content (file paths, YAML keys, code snippets, shell commands) stays as-is regardless of language.
+### Version/commit references
+After stripping the language hint, the remaining arguments are version or commit references.
+An argument is a **commit hash** if it contains 7+ hex characters and does not match a semver pattern. Otherwise it is
+a **version** (with or without `v` prefix — `0.4.30` and `v0.4.30` are equivalent).
+#### Scope of references: PROJECT (default) vs SDK
+**By default, versions and commit hashes refer to THIS project** (the repository where the skill is invoked), NOT to
+fa-mcp-sdk. A reference is SDK-scoped ONLY if the user's phrasing explicitly says so. Trigger phrases (case-insensitive,
+English or Russian):
+- "sdk", "fa-mcp-sdk", "of sdk", "sdk commit", "sdk version"
+- "sdk", "fa-mcp-sdk", "версия sdk", "комит sdk", "коммит sdk", "хеш sdk"
+Examples:
+- `/upgrade-sdk 1.2.3 1.2.7` → project versions (look up the SDK version pinned in each)
+- `/upgrade-sdk от версии 0.2.3 SDK до 0.4.5 SDK` → SDK versions directly
+- `/upgrade-sdk от комита sdk abc1234 до комита sdk def5678` → SDK commits directly
+- `/upgrade-sdk abc1234 def5678` → project commits (look up the SDK version pinned in each)
+#### Resolving PROJECT references to SDK versions
+When a reference is PROJECT-scoped (the default), resolve it to an SDK version/commit before computing the diff:
+1. **Project commit hash** — run `git show <hash>:package.json` and extract `fa-mcp-sdk` from `dependencies`.
+2. **Project version** (e.g. `1.2.3`) — find the project git tag (`v1.2.3` or `1.2.3`), then `git show <tag>:package.json`.
+3. If the dependency value is semver (`^0.4.30`, `~0.4.30`, `0.4.30`), strip range operators → exact SDK version.
+4. If the dependency value is a git URL with a commit hash (e.g. `github:Bazilio-san/fa-mcp-sdk#abc1234`), extract the
+   commit hash as the SDK ref.
+5. If the project tag/commit cannot be found, report and stop.
+Show the resolution result before proceeding:
+```
+Resolved project references to SDK:
+  FROM: project <ref> → SDK <version-or-commit>
+  TO:   project <ref> → SDK <version-or-commit>
+```
+#### Argument count
+**Two arguments** — explicit FROM and TO (resolved per scope rules above).
+**One argument** — it is treated as **FROM**; TO defaults to the **latest published fa-mcp-sdk** (fetched via
+`yarn info fa-mcp-sdk version` or `npm view fa-mcp-sdk version`). Goal: upgrade to the newest existing release.
+**Alternative TO=HEAD mode.** If the user explicitly says "to HEAD", "до HEAD", "до последнего коммита SDK",
+"to latest commit", "до master", or supplies the literal `HEAD`/`master` as the second argument, TO becomes the
+**tip of `master` on `Bazilio-san/fa-mcp-sdk`** (resolved via
+`https://api.github.com/repos/Bazilio-san/fa-mcp-sdk/commits/master`) instead of the latest **published** version.
+In this mode `yarn add` must use the git-URL form with the resolved commit hash (see Step 4).
+**No arguments** — FROM is the currently installed SDK version (from the project's current `package.json`); TO is the
+latest published SDK version.
+## Step 2: Validate refs (fail fast)
+Read the project's `package.json` for the default FROM, fetch the latest published version for the default TO, then
+apply argument-parsing rules to determine FROM and TO. Before any analysis or mutation, **validate both SDK refs
+actually exist** — fail fast with a clear message rather than letting a later GitHub API call return 404. For each ref:
+- If it's a **version** (`0.4.30` / `v0.4.30`) — probe
+  `https://api.github.com/repos/Bazilio-san/fa-mcp-sdk/git/refs/tags/v<version>` (also try without `v`).
+  Fall back to `yarn info fa-mcp-sdk@<version> version` — if that also fails, report
+  `Cannot resolve SDK version <X>: not found on GitHub or npm` and stop.
+- If it's a **commit hash** — probe `https://api.github.com/repos/Bazilio-san/fa-mcp-sdk/commits/<hash>`.
+  On 404, report `Cannot resolve SDK commit <hash>: not found in repo` and stop.
+- If GitHub API is rate-limited, fall back to `git ls-remote https://github.com/Bazilio-san/fa-mcp-sdk.git` for
+  tag/branch existence, and skip commit-hash validation with a warning.
+If FROM == TO, inform the user (e.g. "Both project commits pin the same SDK version X.Y.Z — nothing to do") and stop.
+Display:
+```
+From: <project or SDK ref> → SDK <version-or-commit>  ✓ validated
+To:   <project or SDK ref> → SDK <version-or-commit>  ✓ validated
+```
+## Step 3: Preflight safety
+This is the last point before mutating the project. Run these checks and **ask the user inline** when relevant:
+1. **Branch check.** Run `git rev-parse --abbrev-ref HEAD`. If the user is on `main`/`master`/`prod`/`production`, ask:
+   "You're on `<branch>`. I recommend creating `upgrade/sdk-<TO>` before mutating anything. Create it? (yes/no)"
+   On yes, run `git checkout -b upgrade/sdk-<TO>`. On no, proceed but note it in the report so rollback expectations
+   are clear.
+2. **Uncommitted changes.** Run `git status --short`. If non-empty, ask:
+   "I see N uncommitted changes. To stay safe I can: (1) stash them, (2) require you to commit first, (3) proceed
+   anyway (rollback will affect your in-flight work). Pick one." Apply the user's choice.
+3. **Capture rollback info.** Record:
+   - current commit hash: `git rev-parse HEAD`
+   - prior installed SDK version: from the current `package.json`
+   These go into the final report's rollback section regardless of outcome.
+## Step 4: Install the target SDK version
+This is the first mutating action. From here on, we're committed to either finishing the upgrade or rolling back.
+If TO is a published version:
+```bash
+yarn add fa-mcp-sdk@<TO-version>
+```
+If TO is a commit hash:
+```bash
+yarn add fa-mcp-sdk@https://github.com/Bazilio-san/fa-mcp-sdk#<TO-commit>
+```
+Wait for completion. If `yarn add` fails, show the error verbatim and ask the user how to proceed (retry, switch to a
+different TO ref, or abort).
+Then run:
+```bash
+node ./node_modules/fa-mcp-sdk/scripts/update-sdk.js
+```
+This copies the latest `FA-MCP-SDK-DOC/` and `.claude/` content from the SDK into the project. Pinned folders (any
+folder under the project's `.claude/` containing a direct file named `pin`) are preserved by the script as-is.
+## Step 5: Analyze the diff
+Use `https://github.com/Bazilio-san/fa-mcp-sdk` (public repo) to inspect what changed between FROM and TO. **Read
+actual content — do not guess.**
+### 5.1 Commit log
+Fetch:
+```
+https://api.github.com/repos/Bazilio-san/fa-mcp-sdk/compare/<FROM-ref>...<TO-ref>
+```
+The `commits[]` array carries the **why** of each change (motivation, fixed issue) that file diffs alone don't show.
+Extract `commit.message` (subject + body) for every commit. Use these to:
+- Spot intent — flag any conventional-commit `BREAKING CHANGE:` markers prominently.
+- Group related file changes under a single narrative.
+- Note "rationale unclear — check commit `<hash>` directly" for non-obvious diffs with terse messages.
+If the compare endpoint is rate-limited, fall back to paged commits:
+`https://api.github.com/repos/Bazilio-san/fa-mcp-sdk/commits?sha=<TO>&since=<FROM-date>&until=<TO-date>`.
+Include a "Changelog" list (short hash + first line) in the report.
+### 5.2 Config files
+These SDK config files may have changed and require corresponding updates in the project:
+- `config/default.yaml` — main configuration defaults
+- `config/_local.yaml` — template for the project's `config/_local.yaml` (CLI derives `config/local.yaml` from this
+  with `{{param}}` substitutions)
+- `config/custom-environment-variables.yaml` — env var mappings
+- `config/development.yaml`, `config/production.yaml` — env overrides
+- `config/local.yaml` (SDK's own) — reference only, not shipped
+For each, compare the SDK's version (`node_modules/fa-mcp-sdk/config/<file>`) with the project's version
+(`config/<file>`). Identify: new keys, removed keys, changed defaults, new sections.
+**Correlate `default.yaml` ⇄ `_local.yaml`.** When `default.yaml` has structural changes (new keys, restructured
+sections, changed defaults), also check `_local.yaml` for analogous changes — `_local.yaml` mirrors `default.yaml`'s
+structure with override values. If `default.yaml` changed but `_local.yaml` did NOT, flag this: the project's
+`config/_local.yaml` may need manual updates to stay consistent.
+**Config file mapping (SDK source → project destination):**
+| SDK source (in `config/`)                  | Project destination                          | Action |
+|--------------------------------------------|----------------------------------------------|--------|
+| `config/default.yaml`                      | `config/default.yaml`                        | Add new keys; do NOT remove existing keys the project may have customized |
+| `config/_local.yaml`                       | `config/_local.yaml`                         | Update to match SDK — this is the template `local.yaml` is derived from |
+| `config/_local.yaml` (via CLI)             | `config/local.yaml`                          | Derived by CLI from `_local.yaml` with `{{param}}` substitutions |
+| `config/custom-environment-variables.yaml` | `config/custom-environment-variables.yaml`   | Add new env var mappings |
+| `config/local.yaml` (SDK's own)            | *(not shipped — reference only)*             | Use as reference for what the SDK itself overrides locally |
+### 5.3 cli-template files
+After `yarn add fa-mcp-sdk@<TO>`, the SDK ships its template at `node_modules/fa-mcp-sdk/cli-template/`. This is the
+canonical source for any template files in the project.
+| Template (source of truth)                                       | Project (destination)         | Notes |
+|------------------------------------------------------------------|-------------------------------|-------|
+| `node_modules/fa-mcp-sdk/cli-template/package.json`              | `package.json`                | **Merge carefully** — see rule below |
+| `node_modules/fa-mcp-sdk/cli-template/tsconfig.json`             | `tsconfig.json`               | Overwrite unless customized |
+| `node_modules/fa-mcp-sdk/cli-template/.oxlintrc.json`            | `.oxlintrc.json`              | Overwrite unless customized |
+| `node_modules/fa-mcp-sdk/cli-template/.oxfmtrc.json`             | `.oxfmtrc.json`               | Overwrite unless customized |
+| `node_modules/fa-mcp-sdk/cli-template/CLAUDE.md`                 | `CLAUDE.md`                   | Merge — project may add custom sections |
+| `node_modules/fa-mcp-sdk/cli-template/jest.config.js`            | `jest.config.js`              | Overwrite unless customized |
+| `node_modules/fa-mcp-sdk/cli-template/deploy/`                   | `deploy/`                     | Merge per file |
+| `node_modules/fa-mcp-sdk/cli-template/.claude/skills/<skill>/`   | `.claude/skills/<skill>/`     | Overwrite unless locally customized |
+| `node_modules/fa-mcp-sdk/cli-template/r/<name>.xml`              | `.run/<name>.run.xml`         | **Renamed** — see rule below |
+| `node_modules/fa-mcp-sdk/cli-template/gitignore`                 | `.gitignore`                  | Source has no leading dot |
+| `node_modules/fa-mcp-sdk/cli-template/FA-MCP-SDK-DOC/`           | `FA-MCP-SDK-DOC/`             | Auto-updated by `update-sdk.js` in Step 4 |
+#### Rule: `package.json` — ADD ONLY new dependencies
+The project's `package.json` has evolved since generation (project-specific name, version, scripts, team-added deps).
+When the SDK's template `package.json` changes:
+1. Diff `node_modules/fa-mcp-sdk/cli-template/package.json` (TO) against the same file at the FROM version.
+2. Identify ONLY dependencies/devDependencies that were **added** (not version-changed, not removed).
+3. Apply additions to the project's `package.json` under the matching section.
+4. Do NOT touch `name`, `version`, `scripts`, `engines`, `type`, or any other field.
+5. If a dep was **removed** from the template, mention it in the report as informational only — do not delete it from
+   the project (it may still be in use).
+#### Rule: `r/` → `.run/` with filename transformation
+The project has no `r/` directory — it was renamed to `.run/` at generation, and each `<name>.xml` was renamed to
+`<name>.run.xml`. For new or changed files in `cli-template/r/`:
+- Source: `node_modules/fa-mcp-sdk/cli-template/r/<name>.xml`
+- Destination: `.run/<name>.run.xml`
+- NEW file → copy with rename.
+- CHANGED file → if the project's existing `.run.xml` is untouched (matches the FROM template), overwrite. If it has
+  local customizations, treat as Needs-Input (ask the user: overwrite / merge / skip).
+- REMOVED file → informational only; do not delete the project's `.run/<name>.run.xml`.
+#### Rule: `.claude/` files — use fcp.js
+`.claude/**` is denied for direct `Write`/`Edit` in the project's `settings.json`. To update any file under
+`.claude/` (skills, scripts, hooks, agents, settings.json) use the project's `scripts/fcp.js` workflow described in
+the `edit-claude-files` skill — write the new content to a temp file, then
+`node scripts/fcp.js .claude/<path> <temp-file>` to install it atomically. This applies to every cli-template
+`.claude/` entry being copied into the project.
+For any other changed template file: source path under `node_modules/fa-mcp-sdk/cli-template/...`, destination in the
+project, action = overwrite or merge (depending on local customization).
+### 5.4 Scripts
+The CLI copies scripts from `node_modules/fa-mcp-sdk/scripts/` (NOT from `cli-template/scripts/`) into the project's
+`scripts/`, then removes `copy-static.js`, `publish.js`, and `scripts/publish-README.md` (SDK-internal, not shipped).
+- Canonical source: `node_modules/fa-mcp-sdk/scripts/<name>.js`
+- Project destination: `scripts/<name>.js`
+- Exclude: `copy-static.js`, `publish.js`, `publish-README.md`
+### 5.5 Core library exports
+**Prefer the TypeScript source over compiled output.** Fetch `src/core/index.ts` (and any re-exported `_types_/`
+files it references) at both FROM and TO via GitHub raw:
+```
+https://raw.githubusercontent.com/Bazilio-san/fa-mcp-sdk/<FROM-ref>/src/core/index.ts
+https://raw.githubusercontent.com/Bazilio-san/fa-mcp-sdk/<TO-ref>/src/core/index.ts
+```
+Compare to identify: new exports, removed/renamed exports, changed type signatures, type-level changes (generics,
+conditional types, union narrowing) that don't survive `.d.ts` emission cleanly.
+Why source over `dist/`:
+- Original JSDoc comments and inline rationale preserved in `.ts`, stripped/compressed in `dist/*.js`.
+- Renames visible as renames in source diff; in `dist/` they may appear as unrelated add+remove pairs.
+- `export *` chains resolve naturally in source; in `.d.ts` they may be flattened.
+**Fallback** — if GitHub raw is unavailable, use `node_modules/fa-mcp-sdk/dist/core/index.js` and the matching `.d.ts`.
+State explicitly in the report that analysis was made from compiled artifacts and double-check via the GitHub source
+viewer for any flagged change.
+### 5.6 Project code scan
+Scan the project's `src/`, `config/`, and `tests/` for:
+- Imports from `fa-mcp-sdk` referencing removed/renamed exports
+- Usage of deprecated APIs
+- Config keys that were renamed or restructured
+For each hit, capture file:line and the exact replacement plan — needed for Step 6 categorization.
+## Step 6: Categorize and build the execution plan
+For every change found in Step 5, assign one of three categories:
+### Auto — LLM applies without asking
+- `yarn add fa-mcp-sdk@<TO>` (already done in Step 4)
+- `node ./node_modules/fa-mcp-sdk/scripts/update-sdk.js` (already done in Step 4)
+- Adding a brand-new config key to `config/default.yaml` when the project doesn't override it
+- Adding new env var mappings to `config/custom-environment-variables.yaml`
+- Adding a missing dependency to `package.json` under `dependencies`/`devDependencies`
+- Copying a new template file the project doesn't have yet (scripts, `.run/` entries, new skill folders)
+- Applying a mechanical rename of a renamed SDK export across the project's `src/` when there's exactly one
+  unambiguous replacement
+- Updating SDK-shipped skill files via the `.claude/` fcp.js protocol when the project hasn't customized them
+### Needs-Input — LLM applies, but needs user input
+- A locally-customized file conflicts with the new template — ask: overwrite / merge / skip
+- A new config key has no sensible default — ask for the value
+- A breaking change has multiple plausible API replacements — ask which one fits the project's intent
+- A `BREAKING CHANGE:` marker that the LLM can apply mechanically but wants explicit confirmation
+- The project's `config/local.yaml` has stale overrides for keys that changed structure — ask whether to drop them,
+  port to the new structure, or leave them and warn
+### Manual — LLM cannot perform
+Reserve this only for things the LLM truly cannot do in this session. Examples:
+- Rotating production secrets in a secrets manager outside this repo
+- Deploying to staging/production environments
+- Communicating with third-party services or teammates
+**If a step could be automated in principle but requires human judgment, prefer Needs-Input over Manual.**
+Build the plan as three lists with item counts and concrete actions.
+## Step 7: Present the plan and ASK FOR CONFIRMATION
+Render the plan in the conversation in the detected language:
+```markdown
+## Upgrade plan: fa-mcp-sdk v<FROM> → v<TO>
+### 🤖 I will do automatically (N items)
+1. ✅ yarn add fa-mcp-sdk@<TO>                     [already done]
+2. ✅ node ./node_modules/fa-mcp-sdk/scripts/update-sdk.js  [already done]
+3. Add new key `webServer.foo` (default `bar`) to `config/default.yaml`
+4. Copy new template file `.run/new-task.run.xml` (renamed from `r/new-task.xml`)
+5. Add dep `some-pkg@^1.2.3` to package.json `dependencies`
+6. Apply rename `oldFn` → `newFn` in src/foo.ts:42, src/bar.ts:17, src/baz.ts:55
+7. Run verification: `oxlint --fix . && oxfmt . && rimraf dist && tsc` + project tests + clean startup
+### ❓ I need your input on (M items)
+1. `config/local.yaml` overrides `webServer.auth` which restructured in v<TO>. Options:
+   (a) port overrides to new structure  (b) drop overrides  (c) leave + warn
+2. New config key `someService.apiKey` has no default. What value should I set?
+3. Project's `.claude/skills/upgrade-sdk/SKILL.md` is locally customized. Overwrite with new template,
+   merge non-conflicting parts only, or skip?
+### 👋 You'll need to do manually (K items)
+- [empty if everything is in Auto or Needs-Input]
+### Rollback info
+- Pre-upgrade commit: <hash>
+- Prior SDK version: v<FROM>
+- Branch: <branch>
+```
+Then ask **explicitly**:
+> "Confirm — apply the Auto items now and prompt you inline for the Needs-Input items as I reach them? (yes/no)"
+Wait for explicit confirmation. If the user declines, stop and leave the project as it is after Step 4 (note this in
+the final report). If the user confirms, proceed to Step 8.
+## Step 8: Execute
+Apply each Auto item in order. For each Needs-Input item, ask the user **at the moment you reach it** (one question
+at a time so the user can reason — don't batch). Apply with the answer, then move on.
+Be transparent about state — after each item is applied, output a one-line acknowledgment so the user can follow
+along, e.g. `✓ Added webServer.foo to config/default.yaml`.
+When touching files under `.claude/`, always use the project's `scripts/fcp.js` workflow (see Step 5.3 → "Rule:
+`.claude/` files — use fcp.js" and the project's `edit-claude-files` skill).
+Maintain an in-memory execution log so the final report can list exactly what was done and what required input.
+## Step 9: Verify
+After all items are applied, run the verification chain in this exact order. Record pass/fail for each step.
+### 9.1 Lint + format + clean build (fixed chain)
+Run this single command chain — same shape regardless of project:
+```bash
+npx oxlint --fix . && npx oxfmt . && npx rimraf dist && npx tsc
+```
+(Use `npx` to invoke the tools directly so the chain doesn't depend on yarn script wrappers, which may differ between
+projects. If the project clearly pins these tools as direct `node_modules/.bin/` binaries, those work too.)
+- `oxlint --fix .` — auto-fix lint issues across the whole project
+- `oxfmt .` — format the whole project
+- `rimraf dist` — wipe stale build output
+- `tsc` — typecheck + compile
+If any step fails, stop the chain and trigger the failure-handling flow below.
+### 9.2 Project tests (whatever is wired in `package.json`)
+**Do not hard-code a test command.** Read the project's `package.json` `scripts` section and run whatever test scripts
+the project actually defines. Common patterns to look for, in order of preference:
+1. `test:mcp`, `test:mcp-http`, `test:mcp-sse`, `test:mcp-streamable` — MCP transport tests (run all that exist)
+2. `test` — top-level test runner (usually `jest`)
+3. Any other script whose name starts with `test:` or contains `test`
+Run all relevant test scripts; the project may need just one of them or several. Record pass/fail per script.
+If no test scripts are defined, note it in the report ("project has no test scripts — verification skipped tests").
+### 9.3 Clean startup
+Briefly start the server, confirm it boots without errors, then stop it:
+```bash
+yarn start &              # or `npm start` — match the project
+# wait ~3-5s for startup logs
+node scripts/kill-port.js <port>   # port from config/default.yaml → webServer.port
+```
+A "clean startup" means: no exceptions in logs, server reports it's listening on the configured port. If startup
+fails, treat it as a verification failure.
+### On verification failure
+Do NOT silently proceed and do NOT silently roll back. Present the failing step, the error output, and the diff of
+the likely-causing file(s), then ask the user to choose:
+> "Verification failed at <step>. Options:
+>  - **fix**: I diagnose the root cause and fix it (may need more input from you)
+>  - **retry**: just rerun the verification step (useful for flaky tests)
+>  - **rollback**: revert to the pre-upgrade state (commit `<hash>`, SDK v`<FROM>`) and stop
+>  - **leave-as-is**: keep current state, surface the failure in the final report, and stop
+>  Pick one."
+Apply the user's choice:
+- **fix** → diagnose, apply a fix (asking inline for any info needed), re-run verification. Loop if it fails again.
+- **retry** → rerun the failing step once. If it fails again, present the same four options.
+- **rollback** → run `yarn add fa-mcp-sdk@<FROM>` (or git-URL form), `git checkout <pre-upgrade-hash> -- .`,
+  `node ./node_modules/fa-mcp-sdk/scripts/update-sdk.js` if needed. If the user stashed changes in Step 3, restore
+  them with `git stash pop`. Report what was rolled back.
+- **leave-as-is** → no further changes. Final report will clearly mark the failure and what remains unverified.
+## Step 10: Report
+Produce a final report in **two places**:
+1. **In the chat**, immediately at the end of the skill run.
+2. **In a file** at `claudedocs/upgrade-sdk-<FROM>-to-<TO>.md` (overwrite if it exists from a previous run).
+Both copies use this structure (in the detected language):
+```markdown
+# Upgrade report: fa-mcp-sdk v<FROM> → v<TO>
+Generated: <ISO timestamp>
+Branch: <branch>
+Pre-upgrade commit: <hash>
+## Outcome
+<one of: ✅ completed | ⚠️ completed with issues | ❌ rolled back | ⏸ stopped at user request>
+## Changelog (commits between FROM and TO)
+- `<short-hash>` <first line>
+- ...
+## ✓ Done automatically
+- Item 1
+- Item 2
+- ...
+## ✓ Done with your input
+- `config/local.yaml`: chose (a) port to new structure — applied N keys
+- `someService.apiKey`: set to `<value-you-provided>`
+- `oldFn` → `newFn` rename: applied to src/foo.ts:42, src/bar.ts:17, src/baz.ts:55
+- ...
+## 👋 Still on your plate
+- [empty if nothing manual remains]
+## Verification
+- `oxlint --fix .`:            ✅ / ❌ (<error excerpt>)
+- `oxfmt .`:                   ✅ / ❌
+- `rimraf dist`:               ✅ / ❌
+- `tsc`:                       ✅ / ❌ (<error excerpt>)
+- tests (<list scripts run>):  ✅ / ❌ (<n>/<m> passed)
+- clean startup:               ✅ / ❌
+## Rollback info
+- Pre-upgrade commit: `<hash>`
+- Prior SDK version: `v<FROM>`
+- To roll back manually:
+  ```bash
+  yarn add fa-mcp-sdk@<FROM>
+  git checkout <hash> -- .
+  node ./node_modules/fa-mcp-sdk/scripts/update-sdk.js
+  ```
+## Notes
+<anything noteworthy: rate limits hit, fallbacks used, files with rationale-unclear diffs flagged for review, etc.>
+```
+Make sure `claudedocs/` exists (`mkdir -p claudedocs`) before writing.
+## Important rules
+- Always read actual files; never guess what changed.
+- Treat user customizations as inviolable unless the user explicitly says "overwrite" in response to a Needs-Input
+  prompt.
+- Never modify `package.json` other than to ADD new deps; do not change `name`, `version`, `scripts`, `engines`,
+  `type`, or any other field.
+- Don't skip verification. If it fails, surface it via the 4-option prompt — don't smuggle failures past the user.
+- All `.claude/` writes go through `scripts/fcp.js` (per the `edit-claude-files` protocol).
+- Write all human-readable text in the detected language (default: English). Keep paths, YAML keys, and shell
+  commands in English regardless.
+- Correlate config files: when `default.yaml` changes, always check `_local.yaml` for analogous changes and flag
+  stale `local.yaml` overrides explicitly.
+- If GitHub API is unavailable or rate-limited, fall back to comparing files directly from `node_modules/fa-mcp-sdk/`
+  against project files, and note the fallback in the report.

package/cli-template/package.json CHANGED Viewed

@@ -54,7 +54,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "dotenv": "^17.4.1",
-    "fa-mcp-sdk": "^0.4.93"
+    "fa-mcp-sdk": "^0.4.97"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",

package/dist/core/auth/admin-auth.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"admin-auth.d.ts","sourceRoot":"","sources":["../../../src/core/auth/admin-auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAmC,cAAc,EAAE,MAAM,SAAS,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAarD,YAAY,EAAE,aAAa,EAAE,CAAC;AAI9B;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,aAAa,EAAE,CAOnD;AA6CD;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAavD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAe9C;AAkED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,EAAE,~~CAqEpD~~"}
1	+ {"version":3,"file":"admin-auth.d.ts","sourceRoot":"","sources":["../../../src/core/auth/admin-auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAmC,cAAc,EAAE,MAAM,SAAS,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAarD,YAAY,EAAE,aAAa,EAAE,CAAC;AAI9B;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,aAAa,EAAE,CAOnD;AA6CD;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAavD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAe9C;AAkED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,EAAE,CA0FpD"}

package/dist/core/auth/admin-auth.js CHANGED Viewed

@@ -207,10 +207,16 @@ export function createAdminAuthMW() {
             if (!credentials) {
                 return sendAuthRequired(res, standardTypes);
             }
-            // Try each configured auth type in order
+            // Try each configured auth type in order; collect per-type errors so the
+            // user sees the most relevant reason (JWT-specific for JWT-shaped tokens,
+            // Basic-specific for basic-scheme requests) instead of a generic 401.
+            const errors = {};
             for (const authType of standardTypes) {
                 const result = tryAuthType(authType, scheme || '', credentials);
-                if (result && result.success) {
+                if (!result) {
+                    continue;
+                }
+                if (result.success) {
                     req.ntlm = {
                         isAuthenticated: true,
                         username: result.username || 'Authenticated',
@@ -221,9 +227,25 @@ export function createAdminAuthMW() {
                     }
                     return next();
                 }
+                if (result.error) {
+                    errors[authType] = result.error;
+                }
+            }
+            // Pick the most relevant error: JWT error when token looks like JWT,
+            // basic error for basic scheme, otherwise fall back to a generic message.
+            let specificError;
+            if (looksLikeJwt && errors.jwtToken) {
+                specificError = errors.jwtToken;
+            }
+            else if (scheme === 'basic' && errors.basic) {
+                specificError = errors.basic;
+            }
+            else if (errors.permanentServerTokens) {
+                specificError = errors.permanentServerTokens;
             }
-            logger.debug('Admin auth failed: no matching auth type');
-            return sendAuthRequired(res, standardTypes, buildAuthFailureMessage(scheme || '', !!looksLikeJwt, standardTypes));
+            logger.debug(`Admin auth failed: ${specificError || 'no matching auth type'}`);
+            const message = specificError || buildAuthFailureMessage(scheme || '', !!looksLikeJwt, standardTypes);
+            return sendAuthRequired(res, standardTypes, message);
         },
     ];
 }

package/dist/core/auth/admin-auth.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"admin-auth.js","sourceRoot":"","sources":["../../../src/core/auth/admin-auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,MAAM,IAAI,GAAG,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAGtE,MAAM,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;AACjC,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;AAE3C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,UAAU,EAAE,QAAQ,CAAC;IACjC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAsB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,QAAuB;IACrD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,EAAE,qBAAqB,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC7D,OAAO,wBAAwB,QAAQ,wEAAwE,CAAC;YAClH,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC;YAC1B,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;gBACzC,OAAO,wBAAwB,QAAQ,+DAA+D,CAAC;YACzG,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC3B,IAAI,CAAC,GAAG,EAAE,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,OAAO,wBAAwB,QAAQ,qEAAqE,CAAC;YAC/G,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,wBAAwB,QAAQ,kEAAkE,CAAC;YAC5G,CAAC;YACD,MAAM;QACR,CAAC;QAED;YACE,OAAO,gCAAgC,QAAQ,mEAAmE,CAAC;IACvH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAChD,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,uBAAuB,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QACD,mEAAmE;IACrE,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,MAAc,EAAE,YAAqB,EAAE,YAA6B;IACnG,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE3E,IAAI,MAAM,KAAK,QAAQ,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9E,OAAO,oHAAoH,OAAO,IAAI,CAAC;IACzI,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,OAAO,wFAAwF,OAAO,IAAI,CAAC;IAC7G,CAAC;IACD,OAAO,+CAA+C,OAAO,GAAG,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,QAAuB,EACvB,MAAc,EACd,WAAmB;IAEnB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,qBAAqB;YACvB,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;YAChD,OAAO,MAAM,CAAC,WAAW;gBACvB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC/C,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;QACjD,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,iBAAiB;YACnB,OAAO,cAAc,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,qBAAqB;YACvB,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;YACvD,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mEAAmE,EAAE,CAAC;YACxG,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAClG,CAAC;QAED;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAElC,8EAA8E;IAC9E,+EAA+E;IAC/E,kDAAkD;IAClD,IAAI,CAAC,UAAU,EAAE,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,UAAU,EAAE,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAClD,CAAC;QACD,OAAO;YACL,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;gBAClD,GAAG,CAAC,IAAI,GAAG;oBACT,eAAe,EAAE,KAAK;oBACtB,QAAQ,EAAE,WAAW;oBACrB,MAAM,EAAE,QAAQ;iBACjB,CAAC;gBACF,IAAI,EAAE,CAAC;YACT,CAAC;SACF,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC9C,OAAO,uBAAuB,EAAE,CAAC;IACnC,CAAC;IAED,gFAAgF;IAChF,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IAExD,6CAA6C;IAC7C,OAAO;QACL,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAClD,yEAAyE;YACzE,GAAG,CAAC,IAAI,GAAG;gBACT,eAAe,EAAE,KAAK;gBACtB,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,SAAS;aAClB,CAAC;YAEF,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAE1E,qDAAqD;YACrD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YAC9C,CAAC;YAED,~~yCAAyC~~;~~YACzC~~,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;gBAChE,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;~~oBAC7B~~,GAAG,CAAC,IAAI,GAAG;wBACT,eAAe,EAAE,IAAI;wBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,eAAe;wBAC5C,MAAM,EAAE,QAAQ;qBACjB,CAAC;oBACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBAClB,GAAW,CAAC,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC;oBAC5C,CAAC;oBACD,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,MAAM,CAAC,~~KAAK~~,CAAC,~~0CAA0C~~,CAAC,CAAC;~~YACzD~~,OAAO,~~gBAAgB~~,CAAC,GAAG,EAAE,aAAa,EAAE,uBAAuB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;~~QACpH~~,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,GAAa,EAAE,SAA0B,EAAE,OAAgB;IACnF,MAAM,YAAY,GAAG,OAAO,IAAI,yBAAyB,CAAC;IAE1D,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAEhG,yDAAyD;IACzD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,SAAS,EAAE,CAAC;QACd,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,YAAY;QACnB,gBAAgB,EAAE,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC"}
1	+ {"version":3,"file":"admin-auth.js","sourceRoot":"","sources":["../../../src/core/auth/admin-auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,MAAM,IAAI,GAAG,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAGtE,MAAM,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;AACjC,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;AAE3C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,UAAU,EAAE,QAAQ,CAAC;IACjC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAsB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,QAAuB;IACrD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,EAAE,qBAAqB,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC7D,OAAO,wBAAwB,QAAQ,wEAAwE,CAAC;YAClH,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC;YAC1B,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;gBACzC,OAAO,wBAAwB,QAAQ,+DAA+D,CAAC;YACzG,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC3B,IAAI,CAAC,GAAG,EAAE,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,OAAO,wBAAwB,QAAQ,qEAAqE,CAAC;YAC/G,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,wBAAwB,QAAQ,kEAAkE,CAAC;YAC5G,CAAC;YACD,MAAM;QACR,CAAC;QAED;YACE,OAAO,gCAAgC,QAAQ,mEAAmE,CAAC;IACvH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAChD,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,uBAAuB,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QACD,mEAAmE;IACrE,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,MAAc,EAAE,YAAqB,EAAE,YAA6B;IACnG,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE3E,IAAI,MAAM,KAAK,QAAQ,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9E,OAAO,oHAAoH,OAAO,IAAI,CAAC;IACzI,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,OAAO,wFAAwF,OAAO,IAAI,CAAC;IAC7G,CAAC;IACD,OAAO,+CAA+C,OAAO,GAAG,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,QAAuB,EACvB,MAAc,EACd,WAAmB;IAEnB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,qBAAqB;YACvB,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;YAChD,OAAO,MAAM,CAAC,WAAW;gBACvB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC/C,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;QACjD,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,iBAAiB;YACnB,OAAO,cAAc,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,qBAAqB;YACvB,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;YACvD,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mEAAmE,EAAE,CAAC;YACxG,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAClG,CAAC;QAED;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAElC,8EAA8E;IAC9E,+EAA+E;IAC/E,kDAAkD;IAClD,IAAI,CAAC,UAAU,EAAE,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,UAAU,EAAE,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAClD,CAAC;QACD,OAAO;YACL,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;gBAClD,GAAG,CAAC,IAAI,GAAG;oBACT,eAAe,EAAE,KAAK;oBACtB,QAAQ,EAAE,WAAW;oBACrB,MAAM,EAAE,QAAQ;iBACjB,CAAC;gBACF,IAAI,EAAE,CAAC;YACT,CAAC;SACF,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC9C,OAAO,uBAAuB,EAAE,CAAC;IACnC,CAAC;IAED,gFAAgF;IAChF,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IAExD,6CAA6C;IAC7C,OAAO;QACL,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAClD,yEAAyE;YACzE,GAAG,CAAC,IAAI,GAAG;gBACT,eAAe,EAAE,KAAK;gBACtB,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,SAAS;aAClB,CAAC;YAEF,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAE1E,qDAAqD;YACrD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YAC9C,CAAC;YAED,yEAAyE;YACzE,0EAA0E;YAC1E,sEAAsE;YACtE,MAAM,MAAM,GAA2C,EAAE,CAAC;YAC1D,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;gBAChE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,GAAG,CAAC,IAAI,GAAG;wBACT,eAAe,EAAE,IAAI;wBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,eAAe;wBAC5C,MAAM,EAAE,QAAQ;qBACjB,CAAC;oBACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBAClB,GAAW,CAAC,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC;oBAC5C,CAAC;oBACD,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;gBAClC,CAAC;YACH,CAAC;YAED,qEAAqE;YACrE,0EAA0E;YAC1E,IAAI,aAAiC,CAAC;YACtC,IAAI,YAAY,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC;YAClC,CAAC;iBAAM,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC9C,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;YAC/B,CAAC;iBAAM,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;gBACxC,aAAa,GAAG,MAAM,CAAC,qBAAqB,CAAC;YAC/C,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,sBAAsB,aAAa,IAAI,uBAAuB,EAAE,CAAC,CAAC;YAC/E,MAAM,OAAO,GAAG,aAAa,IAAI,uBAAuB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YACtG,OAAO,gBAAgB,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,GAAa,EAAE,SAA0B,EAAE,OAAgB;IACnF,MAAM,YAAY,GAAG,OAAO,IAAI,yBAAyB,CAAC;IAE1D,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAEhG,yDAAyD;IACzD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,SAAS,EAAE,CAAC;QACd,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,YAAY;QACnB,gBAAgB,EAAE,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC"}

package/dist/core/web/static/styles.css CHANGED Viewed

@@ -331,6 +331,29 @@ input::placeholder, textarea::placeholder {
   border-color: #bf2600;
 }
+.checkbox-label {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  font-weight: normal;
+  cursor: pointer;
+  user-select: none;
+}
+.checkbox-label input[type='checkbox'] {
+  width: auto;
+  margin: 0;
+  cursor: pointer;
+}
+.checkbox-label code {
+  font-family: 'SFMono-Regular', Consolas, 'Liberation Mono', Menlo, monospace;
+  font-size: 12px;
+  background: #f4f5f7;
+  padding: 1px 4px;
+  border-radius: 3px;
+}
 .add-btn {
   background: #d7ffd4;
   color: #089300;

package/dist/core/web/static/token-gen/index.html CHANGED Viewed

@@ -29,7 +29,7 @@
       <form id="tokenAuthForm">
         <div class="form-group">
           <label for="authTokenInput">Access Token:</label>
-          <textarea id="authTokenInput" name="authToken" rows="3" required
+          <textarea id="authTokenInput" name="authToken" rows="9" required
                     placeholder="Paste your JWT or server token here..."></textarea>
         </div>
         <div id="tokenAuthError" class="result error" style="display: none; margin-top: 12px; margin-bottom: 12px;"></div>
@@ -106,6 +106,12 @@
               Leave empty to allow any IP.
             </small>
           </div>
+          <div class="form-group">
+            <label class="checkbox-label">
+              <input type="checkbox" id="allowAdminPanel" name="allowAdminPanel" checked>
+              <span>Allow admin panel access (adds <code>allow: gen-token</code> claim)</span>
+            </label>
+          </div>
           <div class="form-group">
             <label>Additional data (key-value):</label>
             <div id="keyValuePairs"></div>

package/dist/core/web/static/token-gen/script.js CHANGED Viewed

@@ -520,6 +520,11 @@ document.getElementById('generateForm').addEventListener('submit', async (e) =>
     payload.ip = ipValue;
   }
+  const allowAdminEl = document.getElementById('allowAdminPanel');
+  if (allowAdminEl && allowAdminEl.checked) {
+    payload.allow = 'gen-token';
+  }
   const requestData = {
     user: formData.get('user'),
     timeValue: parseInt(formData.get('timeValue')),

package/package.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "name": "fa-mcp-sdk",
   "productName": "FA MCP SDK",
-  "version": "0.4.95",
+  "version": "0.4.97",
   "description": "Core infrastructure and templates for building Model Context Protocol (MCP) servers with TypeScript",
   "type": "module",
   "main": "dist/core/index.js",

package/scripts/update-sdk.js CHANGED Viewed

@@ -131,3 +131,19 @@ for (const { name, src, dest, preserve = [], respectPin = false } of targets) {
     console.log(`${name} updated`);
   }
 }
+const scriptsSrcDir = join(cwd, './node_modules/fa-mcp-sdk/scripts');
+const scriptsDestDir = join(cwd, 'scripts');
+const individualScripts = ['generate-jwt.js'];
+for (const file of individualScripts) {
+  const src = join(scriptsSrcDir, file);
+  const dest = join(scriptsDestDir, file);
+  if (!existsSync(src)) {
+    console.error('Source not found:', src);
+    process.exit(1);
+  }
+  mkdirSync(dirname(dest), { recursive: true });
+  cpSync(src, dest);
+  console.log(`scripts/${file} updated`);
+}

package/cli-template/.claude/skills/upgrade-guide/SKILL.md DELETED Viewed

@@ -1,456 +0,0 @@
----
-name: upgrade-guide
-description: "Generate a migration guide for upgrading fa-mcp-sdk to the latest version. Use when user asks to upgrade/update fa-mcp-sdk, mentions 'обновить sdk', 'upgrade sdk', 'migration guide', 'обновление fa-mcp-sdk', or wants to see what changed between SDK versions."
-disable-model-invocation: true
-allowed-tools: Bash(yarn *) Bash(npm *) Bash(node *) Bash(git *) Bash(cat *) Bash(diff *) Bash(ls *) Bash(find *) Bash(mkdir *) Read Write Glob Grep WebFetch Agent
-argument-hint: "[from-version] [to-version] [language hint]"
----
-# FA-MCP-SDK Upgrade Guide Generator
-Generate a comprehensive migration guide for upgrading the fa-mcp-sdk dependency in the current project.
-## Overview
-This skill analyzes the differences between the currently installed version of `fa-mcp-sdk` and the latest (or specified) version, then produces a detailed migration guide as a markdown file.
-## Argument Parsing
-Parse `$ARGUMENTS` to extract a target version and an optional language hint.
-### Language detection
-Look for a natural-language phrase anywhere in the arguments that indicates the desired output language. Examples:
-- "на русском", "по-русски", "in Russian", "ru" → Russian
-- "in English", "en" → English
-- Any similar phrase or ISO 639-1 code
-Remove the language hint from the arguments before parsing the target version.
-**Default: English** if no language hint is found.
-The detected language determines ALL human-readable text in the generated guide (headings, descriptions, recommendations).
-Technical content (file paths, YAML keys, code snippets, commands) stays as-is regardless of language.
-### Version/commit references
-After stripping the language hint, the remaining arguments are version or commit references.
-An argument is a **commit hash** if it contains 7+ hex characters and does not match semver pattern.
-Otherwise it is treated as a **version** (with or without `v` prefix — `0.4.30` and `v0.4.30` are equivalent).
-#### Scope of references: PROJECT (default) vs SDK
-**By default, all versions and commit hashes refer to THIS project** (the repository where the skill is invoked), NOT to fa-mcp-sdk.
-A reference is treated as referring to **fa-mcp-sdk** ONLY if the user's phrasing explicitly says so. Trigger phrases for SDK scope (case-insensitive, English or Russian):
-- "sdk", "fa-mcp-sdk", "of sdk", "sdk commit", "sdk version"
-- "sdk", "fa-mcp-sdk", "версия sdk", "комит sdk", "коммит sdk", "хеш sdk"
-Examples:
-- `/upgrade-guide 1.2.3 1.2.7` → project versions (look up which SDK version was used in each)
-- `/upgrade-guide от версии 0.2.3 SDK до 0.4.5 SDK` → SDK versions directly
-- `/upgrade-guide от комита sdk abc1234 до комита sdk def5678` → SDK commits directly
-- `/upgrade-guide abc1234 def5678` → project commits (look up which SDK version was pinned in each)
-#### Resolving PROJECT references to SDK versions
-When a reference is PROJECT-scoped (the default), resolve it to an SDK version/commit before computing the diff:
-1. **Project commit hash** — run `git show <hash>:package.json` and extract the `fa-mcp-sdk` dependency value.
-2. **Project version** (e.g. `1.2.3`) — find the project git tag (`v1.2.3` or `1.2.3`), then `git show <tag>:package.json` and extract the `fa-mcp-sdk` value.
-3. If the dependency value is a semver (e.g. `^0.4.30`, `~0.4.30`, `0.4.30`), strip range operators to get the exact SDK version.
-4. If the dependency value is a git URL with a commit hash (e.g. `github:Bazilio-san/fa-mcp-sdk#abc1234`), extract the commit hash as the SDK ref.
-5. If the project tag/commit cannot be found, report an error and stop.
-Show the user the resolution result before proceeding:
-```
-Resolved project references to SDK:
-  FROM: project <ref> → SDK <version-or-commit>
-  TO:   project <ref> → SDK <version-or-commit>
-```
-#### Argument count
-**Two arguments** — explicit FROM and TO (resolved per scope rules above).
-**One argument** — it is treated as **FROM**; TO defaults to the **latest published fa-mcp-sdk version** (fetched via `yarn info fa-mcp-sdk version` / `npm view fa-mcp-sdk version`). The point is to upgrade to the newest existing SDK release.
-**Alternative TO=HEAD mode.** If the user explicitly says "to HEAD", "до HEAD", "до последнего коммита SDK", "to latest commit", "до master", or supplies the literal `HEAD`/`master` as the second argument, TO becomes the **tip of `master` on `Bazilio-san/fa-mcp-sdk`** (resolved via `https://api.github.com/repos/Bazilio-san/fa-mcp-sdk/commits/master`), not the latest **published** version. This is useful for diffing against unreleased commits. In this mode `yarn add` must use the git-URL form with the resolved commit hash (see Step 2).
-**No arguments** — FROM is the current installed SDK version (from the project's current `package.json`); TO is the latest published SDK version.
-## Step 1: Determine SDK Versions
-1. Read the current project's `package.json` and extract the installed `fa-mcp-sdk` version — this is the **default FROM (SDK)**.
-2. Run `yarn info fa-mcp-sdk version` (or `npm view fa-mcp-sdk version`) to get the latest published version — this is the **default TO (SDK)**.
-3. Apply argument parsing rules above (scope, count) to determine FROM and TO.
-4. If any argument is PROJECT-scoped, resolve it to an SDK version/commit by reading the project's git history (see "Resolving PROJECT references to SDK versions").
-5. **Validate that both SDK refs actually exist** before doing any diff work — fail fast with a clear message instead of letting a later GitHub API call return 404. For each of FROM-SDK and TO-SDK:
-   - If it's a **version** (e.g. `0.4.30` / `v0.4.30`) — probe the GitHub tag endpoint:
-     `https://api.github.com/repos/Bazilio-san/fa-mcp-sdk/git/refs/tags/v<version>` (also try without
-     the `v` prefix). Fall back to `yarn info fa-mcp-sdk@<version> version` — if that also fails,
-     report `Cannot resolve SDK version <X>: not found on GitHub or npm` and stop.
-   - If it's a **commit hash** — probe `https://api.github.com/repos/Bazilio-san/fa-mcp-sdk/commits/<hash>`.
-     If it returns 404, report `Cannot resolve SDK commit <hash>: not found in repo` and stop.
-   - If GitHub API is rate-limited, fall back to `git ls-remote https://github.com/Bazilio-san/fa-mcp-sdk.git`
-     for tag/branch existence, and skip commit-hash validation with a warning.
-6. If FROM-SDK equals TO-SDK — inform the user (e.g. "Both project commits pin the same SDK version X.Y.Z — nothing to diff") and stop.
-Display to the user:
-```
-From: <project or SDK ref> → SDK <version-or-commit>  ✓ validated
-To:   <project or SDK ref> → SDK <version-or-commit>  ✓ validated
-```
-## Step 2: Upgrade the Dependency
-If TO is a published version (not a commit hash), run:
-```bash
-yarn add fa-mcp-sdk@<TO-version>
-```
-If TO is a commit hash, run:
-```bash
-yarn add fa-mcp-sdk@https://github.com/Bazilio-san/fa-mcp-sdk#<TO-commit>
-```
-Wait for completion. If it fails, report the error and stop.
-## Step 3: Update SDK Documentation
-Run:
-```bash
-node ./node_modules/fa-mcp-sdk/scripts/update-sdk.js
-```
-This copies the latest `FA-MCP-SDK-DOC/` and `.claude/` from the SDK into the project.
-**Pinned folders.** Any folder under the project's `.claude/` that contains a direct file named
-`pin` is preserved as-is — the script neither deletes it nor overwrites it with template content.
-Drop a `pin` file into `.claude/skills/<your-skill>/` (or any other `.claude/` subdirectory) to
-protect local customizations from being reset on upgrade.
-## Step 4: Analyze Changes in SDK Between Versions
-Use the public GitHub repository `https://github.com/Bazilio-san/fa-mcp-sdk` to analyze what changed.
-### 4.1 Get the commit log between versions
-Fetch the GitHub compare URL to understand what changed:
-```
-https://api.github.com/repos/Bazilio-san/fa-mcp-sdk/compare/<FROM-ref>...<TO-ref>
-```
-Where `<FROM-ref>` and `<TO-ref>` are version tags (try both `v0.4.30` and `0.4.30` formats) or commit hashes.
-If version tags don't exist, use the commits API to find commits between versions, or search `git log` for version bump commit messages.
-Alternative approach — use the npm registry to get git metadata, or simply read the changelog if available.
-**Explicit commit-message review.** The compare endpoint returns a `commits[]` array — extract `commit.message` (subject + body) for **every** commit in the range, not just the file diffs. Commit messages capture the **why** of each change (motivation, fixed issue, design rationale) which is invisible from file diffs alone. In the generated guide, include a "Changelog" subsection that lists each commit's short hash + first line of its message in chronological order. Use these messages to:
-- Spot intent (e.g. "fix: ...", "BREAKING CHANGE: ...", "refactor: ...") — flag any conventional-commit BREAKING markers prominently in the Breaking Changes section.
-- Group related file changes under a single narrative ("These three files changed because of <reason from commit>").
-- Reach out for missing context: if a file diff is non-obvious and the commit message is terse, note it in the guide as "rationale unclear — check commit `<hash>` directly".
-If the compare API is rate-limited, fall back to fetching commits one page at a time via
-`https://api.github.com/repos/Bazilio-san/fa-mcp-sdk/commits?sha=<TO>&until=<TO-date>&since=<FROM-date>`.
-### 4.2 Analyze changes in config files
-These config files in the SDK may have changed and require corresponding updates in the project:
-- `config/default.yaml` — main configuration defaults
-- `config/_local.yaml` — local config template (the CLI scaffolder copies this to the project's `config/_local.yaml` and derives `config/local.yaml` from it with `{{param}}` substitutions)
-- `config/custom-environment-variables.yaml` — env var mappings
-- `config/development.yaml` — dev overrides
-- `config/production.yaml` — production overrides
-- `config/local.yaml` (SDK's own) — reference only, not shipped to projects
-For each config file, compare the SDK's version (at `node_modules/fa-mcp-sdk/config/<file>`) with the project's version (at `config/<file>`).
-Identify:
-- **New keys** added in the SDK that are missing in the project
-- **Removed keys** that existed in the old SDK but are gone now
-- **Changed defaults** where the SDK's default value has changed
-- **New sections** that represent new features
-**Correlate changes across config files.** When `config/default.yaml` has changes (new keys, restructured sections, changed defaults), you MUST also check `config/_local.yaml` for analogous changes. The `_local.yaml` file mirrors the structure of `default.yaml` but contains local-override values — if a section was added or restructured in `default.yaml`, the same section likely needs updating in `_local.yaml`.
-Compare both files in the SDK's `node_modules/fa-mcp-sdk/config/`:
-- `node_modules/fa-mcp-sdk/config/default.yaml` — the canonical defaults
-- `node_modules/fa-mcp-sdk/config/_local.yaml` — the template that was used to generate the project's `config/local.yaml`
-If `default.yaml` changed but `_local.yaml` did NOT, explicitly note this in the guide: the project's `config/_local.yaml` may still need manual updates to stay consistent with the new `default.yaml` structure.
-**Config file mapping (SDK source → project destination):**
-| SDK source (in `config/`)            | Project destination             | Action |
-|--------------------------------------|---------------------------------|--------|
-| `config/default.yaml`                | `config/default.yaml`           | Add new keys; do NOT remove existing keys the project may have customized |
-| `config/_local.yaml`                 | `config/_local.yaml`            | Update to match SDK — this is the template users derive their `local.yaml` from |
-| `config/_local.yaml` (via CLI)       | `config/local.yaml`             | Derived by CLI from `_local.yaml` with `{{param}}` substitutions — check for needed adjustments |
-| `config/custom-environment-variables.yaml` | `config/custom-environment-variables.yaml` | Add new env var mappings |
-| `config/local.yaml` (SDK's own)      | *(not shipped — reference only)* | Use as reference for what the SDK itself overrides locally |
-### 4.3 Analyze changes in cli-template files
-The SDK ships a project template at `node_modules/fa-mcp-sdk/cli-template/` (after `yarn add fa-mcp-sdk@<TO>`). This is the **canonical source** for any template files in the project — when generating instructions for the user, always point to this path as the place to copy the latest version from.
-Map of template file → project file (the CLI `bin/fa-mcp.js` applies these transformations when creating new projects — upgrades must respect the same mapping):
-| Template (source of truth)                                        | Project (destination)                       | Notes |
-|-------------------------------------------------------------------|---------------------------------------------|-------|
-| `node_modules/fa-mcp-sdk/cli-template/package.json`               | `package.json`                              | **Merge carefully** — see rule below |
-| `node_modules/fa-mcp-sdk/cli-template/tsconfig.json`              | `tsconfig.json`                             | overwrite (unless customized) |
-| `node_modules/fa-mcp-sdk/cli-template/.oxlintrc.json`             | `.oxlintrc.json`                            | overwrite (unless customized) |
-| `node_modules/fa-mcp-sdk/cli-template/.oxfmtrc.json`              | `.oxfmtrc.json`                             | overwrite (unless customized) |
-| `node_modules/fa-mcp-sdk/cli-template/CLAUDE.md`                  | `CLAUDE.md`                                 | merge — project may add custom sections |
-| `node_modules/fa-mcp-sdk/cli-template/jest.config.js`             | `jest.config.js`                            | overwrite (unless customized) |
-| `node_modules/fa-mcp-sdk/cli-template/deploy/`                    | `deploy/`                                   | merge per file |
-| `node_modules/fa-mcp-sdk/cli-template/.claude/skills/<skill>/`    | `.claude/skills/<skill>/`                   | overwrite unless locally customized |
-| `node_modules/fa-mcp-sdk/cli-template/r/<name>.xml`               | `.run/<name>.run.xml`                       | **Renamed** — see rule below |
-| `node_modules/fa-mcp-sdk/cli-template/gitignore`                  | `.gitignore`                                | source has no leading dot |
-| `node_modules/fa-mcp-sdk/cli-template/FA-MCP-SDK-DOC/`            | `FA-MCP-SDK-DOC/`                           | auto-updated by `update-sdk.js` |
-#### Rule: package.json — ADD ONLY new dependencies, do NOT touch anything else
-The project's `package.json` has evolved since generation (project-specific name, version, scripts, dependencies the team has added). When the SDK's template `package.json` changes:
-1. Diff `node_modules/fa-mcp-sdk/cli-template/package.json` (TO) against the same file at the FROM version.
-2. Identify ONLY dependencies/devDependencies that were **added** (not changed versions of existing ones, not removed).
-3. The generated guide must instruct the user: "Add these NEW entries to your `package.json` `dependencies`/`devDependencies` sections. Do NOT touch any other field — name, version, scripts, existing deps stay as they are."
-4. If a dep was **removed** from the template, mention it as informational only — do not instruct deletion from the project (it may still be in use).
-5. Do NOT suggest overwriting `scripts`, `engines`, `type`, or any other field.
-Provide a copy-pasteable JSON snippet with only the new keys:
-```json
-{
-  "dependencies": {
-    "<new-dep>": "<version>"
-  }
-}
-```
-#### Rule: `r/` → `.run/` with filename transformation
-The project has no `r/` directory — it was renamed to `.run/` at project generation, and each `<name>.xml` inside was
-renamed to `<name>.run.xml`. When the SDK template ships new or changed files in `cli-template/r/`:
-- Source: `node_modules/fa-mcp-sdk/cli-template/r/<name>.xml`
-- Destination: `.run/<name>.run.xml`
-- Action for NEW files: copy `<name>.xml` → `.run/<name>.run.xml`
-- Action for CHANGED files: copy with the same rename, overwriting the existing `.run.xml` file (warn the user to back up any customizations)
-- Action for REMOVED files: informational only — do not delete the project's `.run/<name>.run.xml` automatically
-The generated guide must show the exact source → destination mapping for each changed file, with the filename transformation applied.
-#### Rule: `.claude/skills/<skill>/SKILL.md`
-This is a Claude Code skill that the project owns a copy of. If the SDK ships an updated version, instruct the user to
-overwrite their local copy from `node_modules/fa-mcp-sdk/cli-template/.claude/skills/<skill>/SKILL.md` — unless they've
-customized it locally, in which case manual merge.
-For any other changed template file, the generated guide must include:
-- The exact source path under `node_modules/fa-mcp-sdk/cli-template/...`
-- The exact destination path in the project
-- Whether to **overwrite** or **merge carefully** (because the project may have local customizations)
-### 4.4 Analyze changes in scripts
-The CLI copies scripts from `node_modules/fa-mcp-sdk/scripts/` (NOT from `cli-template/scripts/`) into the project's
-`scripts/` directory, and then removes `copy-static.js`, `publish.js`, `scripts/publish-README.md` (SDK-internal, not needed in downstream projects).
-- Canonical source: `node_modules/fa-mcp-sdk/scripts/<name>.js`
-- Project destination: `scripts/<name>.js`
-- Exclude from upgrade suggestions: `copy-static.js`, `publish.js`, `scripts/publish-README.md` (SDK-only)
-The generated guide must specify the exact source path under `node_modules/fa-mcp-sdk/scripts/...` for any script the
-user should copy into their project's `scripts/` directory, and skip the excluded SDK-only scripts.
-### 4.5 Analyze changes in core library exports
-**Prefer the TypeScript source over the compiled output.** Fetch `src/core/index.ts` (and any
-re-exported `_types_/` files it references) at both FROM and TO via GitHub raw:
-```
-https://raw.githubusercontent.com/Bazilio-san/fa-mcp-sdk/<FROM-ref>/src/core/index.ts
-https://raw.githubusercontent.com/Bazilio-san/fa-mcp-sdk/<TO-ref>/src/core/index.ts
-```
-Compare them to identify:
-- New exports that may be useful
-- Removed/renamed exports that may break existing code
-- Changed type signatures
-- Type-level changes (generics, conditional types, union narrowing) that don't survive `.d.ts`
-  emission cleanly
-Why source over `dist/`:
-- Original JSDoc comments and inline rationale are preserved in `.ts` but stripped/compressed in `dist/*.js`.
-- Renames are visible as renames in the source diff; in `dist/` they may appear as unrelated
-  add+remove pairs because of import-order shuffling or minification.
-- TS `export *` chains resolve naturally in source; in `.d.ts` they may be flattened, hiding which
-  module a symbol came from originally.
-**Fallback** — if GitHub raw is unavailable (rate-limited, network blocked), use
-`node_modules/fa-mcp-sdk/dist/core/index.js` and the matching `.d.ts`. State explicitly in the
-generated guide that the analysis was made from the compiled artifacts and recommend that the user
-double-check via the GitHub source viewer for any flagged change.
-### 4.6 Check project code for breaking changes
-Scan the project's `src/` directory for:
-- Imports from `fa-mcp-sdk` that reference removed/renamed exports
-- Usage of deprecated APIs
-- Config keys that have been renamed or restructured
-## Step 5: Generate Migration Guide
-Write ALL headings, descriptions, and prose in the detected language (default: English).
-Technical content (file paths, YAML keys, code blocks, shell commands) is always in English.
-Create a file `upgrade-guide-<old>-to-<new>.md` in the project root with the following structure:
-```markdown
-# FA-MCP-SDK Migration Guide: v<old> -> v<new>
-Generated: <timestamp>
-## Summary
-<Brief overview of what changed and the scope of required updates>
-## Breaking Changes
-<List any breaking changes that MUST be addressed. For each:>
-- What changed
-- What code/config is affected
-- Exact fix with code snippets
-## Config Changes
-### New Configuration Keys
-<For each new key, provide:>
-- Key path (e.g., `webServer.auth.enabled`)
-- Default value
-- Description
-- Whether it needs to be added to the project's config
-### Changed Defaults
-<Keys where default values changed>
-### Removed Keys
-<Keys that were removed>
-### Recommended config/default.yaml additions
-    ```yaml
-    # Add these sections to your config/default.yaml:
-    <actual YAML snippets to add>
-    ```
-### config/_local.yaml
-<If `default.yaml` changed, check whether `_local.yaml` in the SDK also changed. If it did: describe what changed. If it did NOT but the `default.yaml` changes affect keys that also exist in `_local.yaml` (because `_local.yaml` overrides those keys), explicitly warn that the project's `config/_local.yaml` may need manual updates to stay consistent with the new `default.yaml` structure.>
-### config/local.yaml (project-local overrides)
-<Check whether the project's `config/local.yaml` overrides keys that changed in `default.yaml` or `_local.yaml`. This is especially important when: a new key is added to `default.yaml` that the project's `local.yaml` doesn't override (user just needs to know it exists); a key's meaning or structure changed and `local.yaml` has a stale override; `local.yaml` was derived from the old `_local.yaml` and needs re-derivation from the updated template.>
-### Recommended config/custom-environment-variables.yaml additions
-    ```yaml
-    # Add these mappings:
-    <actual YAML snippets>
-    ```
-## Template File Changes
-> **Source of truth**: all updated template files live under `node_modules/fa-mcp-sdk/cli-template/` (after `yarn add fa-mcp-sdk@<TO>`). Copy from there into the project.
-### package.json
-> **Only ADD new dependencies. Do NOT touch anything else** (name, version, scripts, existing deps — all stay untouched). Source: `node_modules/fa-mcp-sdk/cli-template/package.json`.
-<List only dependencies/devDependencies that were newly added in the SDK template. Provide a copy-pasteable JSON snippet
-with only the new keys. Mention removed deps as informational only — do not instruct deletion.>
-### `.run/` (from `cli-template/r/`)
-<For each changed `cli-template/r/<name>.xml`, show the mapping:>
-- Source: `node_modules/fa-mcp-sdk/cli-template/r/<name>.xml`
-- Destination: `.run/<name>.run.xml` (note the rename)
-- Action: copy + rename (overwrite, warn about local customizations)
-### Claude Code Skills (`.claude/skills/`)
-<For each updated skill, e.g. `upgrade-guide`:>
-- Source: `node_modules/fa-mcp-sdk/cli-template/.claude/skills/<skill-name>/SKILL.md`
-- Destination: `.claude/skills/<skill-name>/SKILL.md`
-- Action: overwrite (unless locally customized — then manual merge)
-### Other Template Files
-<For each: source path under `node_modules/fa-mcp-sdk/cli-template/...`, destination, overwrite or merge.>
-## New Features
-<New SDK features that the project can now use>
-## New/Updated Scripts
-<Scripts that should be copied or updated>
-## Code Changes Required
-<Specific code changes needed in the project's src/ files, with before/after examples>
-## Recommended Actions
-<Ordered checklist of actions to complete the upgrade>
-1. [ ] ...
-2. [ ] ...
-```
-## Step 6: Assess Impact on the Project
-After generating the guide, scan the current project's source code (`src/`, `config/`, `tests/`) to evaluate how the
-changes specifically affect THIS project. Add a section to the guide:
-```markdown
-## Impact Assessment for This Project
-### Affected Files
-<List of project files that need modification, with specific changes>
-### Risk Level
-<Low / Medium / High — based on the number and nature of breaking changes>
-### Estimated Effort
-<Brief assessment of the work required>
-```
-## Step 7: Present Results
-1. Display a summary of the key findings to the user.
-2. Tell the user the full guide has been saved to `upgrade-guide-<old>-to-<new>.md`.
-3. Ask if they want you to apply any of the recommended changes automatically.
-## Important Rules
-- ALWAYS read the actual files to compare — do not guess or assume what changed.
-- When comparing YAML configs, preserve comments and structure.
-- **Correlate config file changes**: when `config/default.yaml` changes, ALWAYS also check `config/_local.yaml` in the SDK. Report whether `_local.yaml` has analogous changes or needs manual updates. Also advise checking the project's `config/local.yaml` for stale overrides that may conflict with the new defaults.
-- **Do not forget `config/local.yaml` in the project**: the project's `config/local.yaml` overrides `config/default.yaml`. When new keys are added or sections restructured in `default.yaml`, explicitly instruct the user to verify that their `config/local.yaml` doesn't have stale overrides that conflict with the new structure, and to add any new keys there too if they want non-default values.
-- Do not modify project files other than `package.json` (via yarn add) and `FA-MCP-SDK-DOC/` (via update-sdk.js) unless the user explicitly asks.
-- The migration guide must contain ACTIONABLE instructions with exact code/config snippets — not vague recommendations.
-- If GitHub API is unavailable or rate-limited, fall back to comparing files directly from `node_modules/fa-mcp-sdk/` against project files.
-- Write the guide in the language detected from the user's arguments (default: **English**). Translate all headings, prose, and descriptions. Keep file paths, YAML keys, code blocks, and shell commands in English.