flowpad-mcp 0.1.0 → 0.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "flowpad-mcp",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "MCP server for Flowpad — lets an external AI (Claude Desktop, Cursor, Claude Code) find projects and edit canvas nodes through flowpad-be.",
   "license": "UNLICENSED",
   "private": false,
@@ -12,13 +12,13 @@
     "flowpad-mcp": "dist/index.js"
   },
   "files": [
-    "dist"
+    "dist/index.js"
   ],
   "scripts": {
     "build": "tsc",
     "build:bundle": "esbuild src/index.ts --bundle --minify --platform=node --format=esm --target=node18 --outfile=dist/index.js",
-    "prepare": "husky && tsc",
-    "prepublishOnly": "yarn build:bundle",
+    "prepare": "husky",
+    "prepack": "yarn build:bundle",
     "dev": "tsx src/index.ts",
     "start": "node dist/index.js",
     "typecheck": "tsc --noEmit",
@@ -33,28 +33,28 @@
   "engines": {
     "node": ">=18"
   },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.0",
-    "dotenv": "^17.4.2",
-    "flowpad-core": "git+https://github.com/demirsefa/flowpad-core.git#semver:^0.1.0",
-    "zod": "^3.23.8"
-  },
+  "comment": "No runtime dependencies on purpose: esbuild (prepack) inlines everything into dist/index.js, so the published npx tool installs nothing and never tries to fetch the PRIVATE flowpad-core. All deps below are BUILD-time (devDependencies). Hosted HTTP deploy uses `yarn build` (tsc) + a normal install, which gets devDeps too.",
+  "dependencies": {},
   "resolutions": {
     "//": "Force a single zod across the tree. The MCP SDK allows zod ^3.25 || ^4.0; without this, yarn installs a separate zod@4 under the SDK, so app zod@3 schemas mismatch the SDK's .tool() types (TS2589 / heap OOM in tsc). npm deduped to one zod; this makes yarn do the same.",
     "zod": "3.25.76"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
+    "@modelcontextprotocol/sdk": "^1.12.0",
     "@types/node": "^22.10.0",
+    "dotenv": "^17.4.2",
     "esbuild": "^0.24.0",
     "eslint": "^10.5.0",
+    "flowpad-core": "git+https://github.com/demirsefa/flowpad-core.git#semver:^0.1.0",
     "husky": "^9.1.7",
     "lint-staged": "^17.0.7",
     "prettier": "^3.8.4",
     "ts-unused-exports": "^11.0.1",
     "tsx": "^4.19.0",
     "typescript": "^5.7.0",
-    "typescript-eslint": "^8.61.0"
+    "typescript-eslint": "^8.61.0",
+    "zod": "^3.23.8"
   },
   "lint-staged": {
     "*.ts": [

package/dist/client.js

@@ -1,281 +0,0 @@
-import { MCP_VERSION } from './version.js';
-/** Hard upper bound for every backend call. Node's built-in fetch has no default
- *  timeout; without this a stalled/dropped connection hangs the agent forever. */
-const REQUEST_TIMEOUT_MS = 30_000;
-export function isProposedEdit(result) {
-    return result?.proposed === true;
-}
-// Thrown internally by FlowpadClient; not exported (nothing outside this module
-// consumes it). Re-export if a consumer ever needs `instanceof` checks.
-class FlowpadError extends Error {
-    status;
-    constructor(message, status) {
-        super(message);
-        this.name = 'FlowpadError';
-        this.status = status;
-    }
-}
-/**
- * Thin HTTP client over flowpad-be's `/mcp/*` facade.
- *
- * Auth mirrors the in-app user auth, with its own entry point: the
- * `FLOWPAD_API_KEY` is exchanged at `POST /mcp/auth/login` (sent as `x-mcp-key`)
- * for a standard, expiring user JWT, which is then cached and sent as a Bearer
- * token on every call — re-logging in once on a 401. No account password lives in
- * this process; the key is the credential, the JWT is the session token.
- *
- * All canvas retrieval and analysis is computed server-side; this client just
- * relays compact text. The raw node list is fetched (cached by revision) only
- * for edit operations, where the diff must be merged against current state.
- */
-export class FlowpadClient {
-    cfg;
-    token;
-    /** Per-project cache of the full project keyed by its revision. */
-    cache = new Map();
-    /**
-     * The MCP host that initialized this session (e.g. `cursor-vscode`,
-     * `claude-ai`, `cli`), captured from the protocol `clientInfo` handshake and
-     * forwarded to the backend as `x-mcp-client` so audit/presence can attribute
-     * each write to the hand that drove it. Undefined until `initialize` lands.
-     */
-    clientName;
-    /**
-     * Set when the backend's soft version gate (Faz 2) reports a newer tool exists
-     * — the latest version string from the `x-flowpad-mcp-update` response headers.
-     * createServer folds this into the MCP `instructions` so the agent nudges the
-     * user to update. Advisory only; never blocks a call.
-     */
-    updateAdvisory;
-    constructor(cfg) {
-        this.cfg = cfg;
-        if (cfg.token) {
-            // OAuth path: use the provided JWT directly; no login exchange needed.
-            this.token = cfg.token;
-        }
-        else if (!cfg.mcpKey) {
-            throw new FlowpadError('Missing credential: provide an OAuth access token, or a FLOWPAD_API_KEY (Settings → Integrations) for the MCP server env.');
-        }
-    }
-    url(path) {
-        return `${this.cfg.baseUrl.replace(/\/$/, '')}${path}`;
-    }
-    /**
-     * Record the initializing host's identity from the MCP `clientInfo`. Called
-     * once per session when the protocol `initialize` completes (see
-     * `createServer`'s `oninitialized`). Best-effort attribution only — a missing
-     * or malformed name simply leaves writes unattributed.
-     */
-    setClientName(name) {
-        const trimmed = name?.trim();
-        this.clientName = trimmed ? trimmed.slice(0, 64) : undefined;
-    }
-    /** Latest tool version the backend advertised (soft version gate), or undefined
-     *  if up to date. Read after the first call (e.g. the guidance fetch). */
-    getUpdateAdvisory() {
-        return this.updateAdvisory;
-    }
-    /** Exchange the static MCP key for a user JWT (separate from panel login). */
-    async login() {
-        if (!this.cfg.mcpKey) {
-            throw new FlowpadError('Access token rejected and no MCP key to re-authenticate — the OAuth token is likely expired; reconnect the connector.', 401);
-        }
-        let res;
-        try {
-            res = await fetch(this.url('/mcp/auth/login'), {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                    'x-mcp-key': this.cfg.mcpKey,
-                    // Every call carries the tool version so be can advise/require an update
-                    // (the version gate). See src/version.ts.
-                    'X-Flowpad-MCP-Version': MCP_VERSION,
-                },
-                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
-            });
-        }
-        catch (err) {
-            if (err instanceof Error && err.name === 'TimeoutError') {
-                throw new FlowpadError('Backend timed out — retry');
-            }
-            throw err;
-        }
-        if (!res.ok) {
-            throw new FlowpadError(`MCP login failed (${res.status}): ${await res.text()}. Check FLOWPAD_API_KEY is a valid, non-revoked key and FLOWPAD_API_URL points at the right backend.`, res.status);
-        }
-        const data = (await res.json());
-        if (!data.access_token) {
-            throw new FlowpadError('MCP login response did not contain access_token.');
-        }
-        this.token = data.access_token;
-    }
-    /**
-     * Fetch the server-side design guidance (the MCP instructions). Served from be
-     * via GET /mcp/guidance so the contract is never bundled into the published tool;
-     * authed like every other call (lazy-login happens inside `request`).
-     */
-    async guidance() {
-        const res = await this.request('/mcp/guidance');
-        return res.instructions;
-    }
-    async request(path, init = {}, allowRetry = true) {
-        if (!this.token)
-            await this.login();
-        let res;
-        try {
-            res = await fetch(this.url(path), {
-                ...init,
-                headers: {
-                    'Content-Type': 'application/json',
-                    'X-Flowpad-MCP-Version': MCP_VERSION,
-                    ...(this.clientName ? { 'x-mcp-client': this.clientName } : {}),
-                    ...(init.headers ?? {}),
-                    Authorization: `Bearer ${this.token}`,
-                },
-                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
-            });
-        }
-        catch (err) {
-            if (err instanceof Error && err.name === 'TimeoutError') {
-                throw new FlowpadError('Backend timed out — retry');
-            }
-            throw err;
-        }
-        // Soft version gate (Faz 2): the backend flags an available update via headers.
-        if (res.headers.get('x-flowpad-mcp-update') === 'available') {
-            this.updateAdvisory = res.headers.get('x-flowpad-mcp-latest') ?? 'newer';
-        }
-        // Token expired/invalid → re-login once and retry. Only possible in key mode;
-        // in OAuth-token mode there is no key to re-login with, so the 401 surfaces.
-        if (res.status === 401 && allowRetry && this.cfg.mcpKey) {
-            this.token = undefined;
-            await this.login();
-            return this.request(path, init, false);
-        }
-        if (!res.ok) {
-            throw new FlowpadError(`${init.method ?? 'GET'} ${path} failed (${res.status}): ${await res.text()}`, res.status);
-        }
-        if (res.status === 204)
-            return undefined;
-        return (await res.json());
-    }
-    // ── Discovery ────────────────────────────────────────────────
-    async listProjects(query) {
-        const qs = query ? `?query=${encodeURIComponent(query)}` : '';
-        return this.request(`/mcp/projects${qs}`);
-    }
-    /** Full project incl. latestData — used to build/merge edits and reserve ids. */
-    async getProjectRaw(id) {
-        return this.request(`/mcp/projects/${id}/raw`);
-    }
-    async getRevision(id) {
-        return this.request(`/mcp/projects/${id}/revision`);
-    }
-    /**
-     * Returns the full project, reusing a cached copy when the server revision is
-     * unchanged. A cheap revision check avoids re-downloading a large latestData
-     * on every edit-tool call.
-     */
-    async getProjectRawCached(id) {
-        const cached = this.cache.get(id);
-        if (cached) {
-            try {
-                const { revision } = await this.getRevision(id);
-                if (revision === cached.version)
-                    return cached.project;
-            }
-            catch {
-                // fall through to a full fetch
-            }
-        }
-        const project = await this.getProjectRaw(id);
-        this.cache.set(id, { version: project.version, project });
-        return project;
-    }
-    invalidate(id) {
-        this.cache.delete(id);
-    }
-    // ── Retrieval / analysis (server-computed compact text) ──────
-    async outline(id, maxDepth) {
-        const qs = maxDepth !== undefined ? `?maxDepth=${maxDepth}` : '';
-        const { text } = await this.request(`/mcp/projects/${id}/outline${qs}`);
-        return text;
-    }
-    async searchNodes(id, args) {
-        const params = new URLSearchParams();
-        for (const [k, v] of Object.entries(args)) {
-            if (v !== undefined && v !== '')
-                params.set(k, String(v));
-        }
-        const qs = params.toString() ? `?${params.toString()}` : '';
-        const { text } = await this.request(`/mcp/projects/${id}/search${qs}`);
-        return text;
-    }
-    async getNode(id, nodeId, depth) {
-        const qs = depth !== undefined ? `?depth=${depth}` : '';
-        const { text } = await this.request(`/mcp/projects/${id}/nodes/${encodeURIComponent(nodeId)}${qs}`);
-        return text;
-    }
-    async analyze(id) {
-        const { text } = await this.request(`/mcp/projects/${id}/analyze`);
-        return text;
-    }
-    async connections(id, opts = {}) {
-        const params = new URLSearchParams();
-        if (opts.nodeId)
-            params.set('nodeId', opts.nodeId);
-        if (opts.nodeName)
-            params.set('nodeName', opts.nodeName);
-        const qs = params.toString() ? `?${params.toString()}` : '';
-        const { text } = await this.request(`/mcp/projects/${id}/connections${qs}`);
-        return text;
-    }
-    // ── Edits ────────────────────────────────────────────────────
-    async updateProject(id, body) {
-        const saved = await this.request(`/mcp/projects/${id}`, {
-            method: 'PUT',
-            body: JSON.stringify(body),
-        });
-        // When the owner is viewing the project the backend turns the edit into a
-        // proposal (no apply yet), so there is no new state to cache — drop the
-        // stale copy. Otherwise keep the cache warm with the freshly-saved state.
-        if (isProposedEdit(saved)) {
-            this.invalidate(id);
-        }
-        else if (saved && typeof saved.version === 'number' && saved.latestData) {
-            this.cache.set(id, { version: saved.version, project: saved });
-        }
-        else {
-            this.invalidate(id);
-        }
-        return saved;
-    }
-    /** Create a fresh, empty project. Returns `{ proposed: true }` when the user
-     *  has a live client (a name-confirm surfaces on their screen) or the created
-     *  Project when applied directly (no live client to confirm on). */
-    async createProject(body) {
-        return this.request('/mcp/projects', {
-            method: 'POST',
-            body: JSON.stringify(body),
-        });
-    }
-    /** Delete a project. Returns `{ proposed: true }` if the owner is viewing it
-     *  (routed to their confirm overlay) or `{ deleted: true }` if applied. */
-    async deleteProject(id) {
-        return this.request(`/mcp/projects/${id}`, { method: 'DELETE' });
-    }
-    /** Install a template project into `id`. Returns `{ proposed: true }` if the
-     *  owner is viewing (routed to their template-confirm) or `{ bound: true }`. */
-    async bindTemplate(id, templateProjectId) {
-        return this.request(`/mcp/projects/${id}/bind-template`, {
-            method: 'POST',
-            body: JSON.stringify({ templateProjectId }),
-        });
-    }
-    /** The bindable template catalog: bundled built-ins + the user's own template
-     *  projects. Each item's `id` is what bind_template's templateProjectId wants. */
-    async listTemplates() {
-        return this.request('/mcp/templates');
-    }
-}
-//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C;kFACkF;AAClF,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAYlC,MAAM,UAAU,cAAc,CAC5B,MAA8B;IAE9B,OAAQ,MAAuB,EAAE,QAAQ,KAAK,IAAI,CAAC;AACrD,CAAC;AAgBD,gFAAgF;AAChF,wEAAwE;AACxE,MAAM,YAAa,SAAQ,KAAK;IAC9B,MAAM,CAAU;IAChB,YAAY,OAAe,EAAE,MAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,aAAa;IAmBK;IAlBrB,KAAK,CAAU;IACvB,mEAAmE;IAC3D,KAAK,GAAG,IAAI,GAAG,EAAiD,CAAC;IACzE;;;;;OAKG;IACK,UAAU,CAAU;IAC5B;;;;;OAKG;IACK,cAAc,CAAU;IAEhC,YAA6B,GAAkB;QAAlB,QAAG,GAAH,GAAG,CAAe;QAC7C,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,uEAAuE;YACvE,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACzB,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,IAAI,YAAY,CACpB,2HAA2H,CAC5H,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,GAAG,CAAC,IAAY;QACtB,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,IAAwB;QACpC,MAAM,OAAO,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAED;8EAC0E;IAC1E,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,YAAY,CACpB,uHAAuH,EACvH,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE;gBAC7C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,MAAgB;oBACtC,yEAAyE;oBACzE,0CAA0C;oBAC1C,uBAAuB,EAAE,WAAW;iBACrC;gBACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACxD,MAAM,IAAI,YAAY,CAAC,2BAA2B,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,YAAY,CACpB,qBAAqB,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,sGAAsG,EAC3J,GAAG,CAAC,MAAM,CACX,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8B,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,YAAY,CACpB,kDAAkD,CACnD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAA2B,eAAe,CAAC,CAAC;QAC1E,OAAO,GAAG,CAAC,YAAY,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,OAAoB,EAAE,EACtB,UAAU,GAAG,IAAI;QAEjB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAEpC,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBAChC,GAAG,IAAI;gBACP,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,uBAAuB,EAAE,WAAW;oBACpC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/D,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;oBACvB,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;iBACtC;gBACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACxD,MAAM,IAAI,YAAY,CAAC,2BAA2B,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,gFAAgF;QAChF,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,KAAK,WAAW,EAAE,CAAC;YAC5D,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,OAAO,CAAC;QAC3E,CAAC;QAED,8EAA8E;QAC9E,6EAA6E;QAC7E,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACxD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YACvB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,YAAY,CACpB,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,YAAY,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,EAC7E,GAAG,CAAC,MAAM,CACX,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,YAAY,CAChB,KAAc;QAEd,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,aAAa,CAAC,EAAU;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,EAAU;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBAChD,IAAI,QAAQ,KAAK,MAAM,CAAC,OAAO;oBAAE,OAAO,MAAM,CAAC,OAAO,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,+BAA+B;YACjC,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,QAAiB;QACzC,MAAM,EAAE,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iBAAiB,EAAE,WAAW,EAAE,EAAE,CACnC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CACf,EAAU,EACV,IAQC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iBAAiB,EAAE,UAAU,EAAE,EAAE,CAClC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,MAAc,EAAE,KAAc;QACtD,MAAM,EAAE,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iBAAiB,EAAE,UAAU,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAC/D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iBAAiB,EAAE,UAAU,CAC9B,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CACf,EAAU,EACV,OAA+C,EAAE;QAEjD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iBAAiB,EAAE,eAAe,EAAE,EAAE,CACvC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,aAAa,CACjB,EAAU,EACV,IAAgE;QAEhE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAC9B,iBAAiB,EAAE,EAAE,EACrB;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CACF,CAAC;QACF,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YAC1E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;wEAEoE;IACpE,KAAK,CAAC,aAAa,CAAC,IAGnB;QACC,OAAO,IAAI,CAAC,OAAO,CAA+B,eAAe,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;IAED;+EAC2E;IAC3E,KAAK,CAAC,aAAa,CACjB,EAAU;QAEV,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;oFACgF;IAChF,KAAK,CAAC,YAAY,CAChB,EAAU,EACV,iBAAyB;QAEzB,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,gBAAgB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED;sFACkF;IAClF,KAAK,CAAC,aAAa;QASjB,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/diff.js

@@ -1,58 +0,0 @@
-import { randomUUID } from 'node:crypto';
-/**
- * Fresh, collision-free node id (UUID). Node ids are UUID strings across
- * flowpad — two concurrent sessions (and server/AI/MCP-generated nodes) never
- * produce the same id, so there is no "next id" to compute anymore.
- */
-export function newNodeId() {
-    return randomUUID();
-}
-/**
- * Build a single new node for the deterministic `add_node` tool (no AI).
- * Defaults follow engine-base bounds rules (positive width/height).
- */
-export function buildSimpleNode(params) {
-    const bounds = {
-        x: params.bounds?.x ?? 0,
-        y: params.bounds?.y ?? 0,
-        width: params.bounds?.width ?? 240,
-        height: params.bounds?.height ?? 120,
-    };
-    return rescueTextContent({
-        id: params.id,
-        bounds,
-        children: [],
-        parent: params.parentId ?? null,
-        edges: [],
-        ...(params.type ? { type: params.type } : {}),
-        ...(params.name ? { name: params.name } : {}),
-        ...(params.description ? { description: params.description } : {}),
-        ...(params.isAutoLayout != null
-            ? { isAutoLayout: params.isAutoLayout }
-            : {}),
-        ...(params.layout ? { layout: params.layout } : {}),
-        ...(params.style ?? {}),
-    });
-}
-/**
- * A text node paints `content`, NOT name/description (those are metadata, never
- * drawn). The `description` field is labelled "Node body" in the tool schema, so
- * agents routinely put the visible string there (or in `name`) and the node
- * renders blank on canvas. Rescue: a text node lacking `content` inherits it
- * from description, then name. No-op for every other type or when content is set.
- */
-export function rescueTextContent(node) {
-    if (node.type !== 'text')
-        return node;
-    const content = node.content;
-    if (typeof content === 'string' && content.length > 0)
-        return node;
-    const fallback = node.description ?? node.name;
-    if (!fallback)
-        return node;
-    return { ...node, content: fallback };
-}
-export function diffIsEmpty(diff) {
-    return (!diff.added?.length && !diff.updated?.length && !diff.removedIds?.length);
-}
-//# sourceMappingURL=diff.js.map

package/dist/diff.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"diff.js","sourceRoot":"","sources":["../src/diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;;;GAIG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAW/B;IACC,MAAM,MAAM,GAAS;QACnB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QACxB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,GAAG;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,GAAG;KACrC,CAAC;IACF,OAAO,iBAAiB,CAAC;QACvB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM;QACN,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QAC/B,KAAK,EAAE,EAAE;QACT,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI;YAC7B,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE;YACvC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;KACxB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;IAC/C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,OAAO,CACL,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CACzE,CAAC;AACJ,CAAC"}

package/dist/http.js

@@ -1,174 +0,0 @@
-import { createServer as createHttpServer, } from 'node:http';
-import { randomUUID } from 'node:crypto';
-import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import { isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
-import { FlowpadClient } from './client.js';
-import { createServer } from './server.js';
-const SESSION_HEADER = 'mcp-session-id';
-const FP_KEY_PREFIX = 'fp_live_';
-const PROTECTED_RESOURCE_PATH = '/.well-known/oauth-protected-resource';
-/**
- * Pull the acting user's credential off an incoming request.
- *
- * Two shapes, both via `Authorization: Bearer …` (or `x-mcp-key`):
- *  - `fp_live_…` → a raw per-user MCP key (local/stdio bridge; exchanged for a JWT).
- *  - anything else → an OAuth 2.1 access token (Faz B), which IS an mcp-scoped
- *    flowpad JWT and is used directly.
- */
-function extractCredential(req) {
-    const headerKey = req.headers['x-mcp-key'];
-    const rawKey = Array.isArray(headerKey) ? headerKey[0] : headerKey;
-    if (typeof rawKey === 'string' && rawKey.startsWith(FP_KEY_PREFIX)) {
-        return { mcpKey: rawKey };
-    }
-    const auth = req.headers['authorization'];
-    if (typeof auth === 'string' && auth.toLowerCase().startsWith('bearer ')) {
-        const value = auth.slice(7).trim();
-        if (!value)
-            return {};
-        return value.startsWith(FP_KEY_PREFIX)
-            ? { mcpKey: value }
-            : { token: value };
-    }
-    return {};
-}
-function readJsonBody(req) {
-    return new Promise((resolve, reject) => {
-        const chunks = [];
-        req.on('data', (c) => chunks.push(c));
-        req.on('end', () => {
-            const text = Buffer.concat(chunks).toString('utf8');
-            if (!text)
-                return resolve(undefined);
-            try {
-                resolve(JSON.parse(text));
-            }
-            catch (e) {
-                reject(e instanceof Error ? e : new Error(String(e)));
-            }
-        });
-        req.on('error', reject);
-    });
-}
-function sendJson(res, status, body) {
-    res.writeHead(status, { 'Content-Type': 'application/json' });
-    res.end(JSON.stringify(body));
-}
-// JSON-RPC error shaped so MCP hosts surface it (id null = no request context).
-function rpcError(res, status, message) {
-    sendJson(res, status, {
-        jsonrpc: '2.0',
-        error: { code: -32000, message },
-        id: null,
-    });
-}
-/** `${proto}://${host}` for the incoming request, honoring an nginx proxy. */
-function requestOrigin(req) {
-    const proto = req.headers['x-forwarded-proto']?.split(',')[0] ||
-        'http';
-    const host = req.headers['x-forwarded-host'] ?? req.headers.host ?? 'localhost';
-    return `${proto}://${Array.isArray(host) ? host[0] : host}`;
-}
-/**
- * Start the multi-tenant Streamable HTTP transport (resource server).
- *
- * Stateful session pattern (SDK canonical): an `initialize` POST with no session
- * id and a valid credential mints a fresh session — its OWN McpServer +
- * FlowpadClient bound to the caller's token. A request with no credential gets a
- * 401 whose `WWW-Authenticate` points at the protected-resource metadata, which
- * is what triggers a host's OAuth discovery + authorization (Faz B).
- */
-export async function startHttpServer(opts) {
-    const mcpPath = opts.path ?? '/mcp';
-    const transports = new Map();
-    const resourceUrl = (req) => opts.publicResourceUrl ?? `${requestOrigin(req)}${mcpPath}`;
-    const metadataUrl = (req) => {
-        const origin = opts.publicResourceUrl
-            ? new URL(opts.publicResourceUrl).origin
-            : requestOrigin(req);
-        return `${origin}${PROTECTED_RESOURCE_PATH}`;
-    };
-    const httpServer = createHttpServer((req, res) => {
-        void handle(req, res).catch((e) => {
-            console.error('Unhandled request error:', e);
-            if (!res.headersSent)
-                rpcError(res, 500, 'Internal server error');
-        });
-    });
-    function challenge(req, res) {
-        res.setHeader('WWW-Authenticate', `Bearer resource_metadata="${metadataUrl(req)}"`);
-        rpcError(res, 401, 'Authorization required. Connect via OAuth.');
-    }
-    async function handle(req, res) {
-        const url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
-        // RFC 9728 protected-resource metadata — tells the host which AS to use.
-        if (url.pathname === PROTECTED_RESOURCE_PATH) {
-            sendJson(res, 200, {
-                resource: resourceUrl(req),
-                authorization_servers: opts.authorizationServers ?? [],
-            });
-            return;
-        }
-        if (url.pathname !== mcpPath) {
-            rpcError(res, 404, `Not found. MCP endpoint is ${mcpPath}.`);
-            return;
-        }
-        const sessionId = req.headers[SESSION_HEADER];
-        const sid = Array.isArray(sessionId) ? sessionId[0] : sessionId;
-        // Reuse an existing session.
-        if (sid && transports.has(sid)) {
-            const transport = transports.get(sid);
-            const body = req.method === 'POST' ? await readJsonBody(req) : undefined;
-            await transport.handleRequest(req, res, body);
-            return;
-        }
-        // A session id we DON'T know (server restarted / it was GC'd) → 404, the
-        // MCP spec's signal for "session gone, re-initialize". Without this, every
-        // deploy/restart would strand connected hosts on a dead session (they'd get
-        // 400 and not auto-reconnect). 404 makes hosts transparently re-handshake.
-        if (sid) {
-            rpcError(res, 404, 'Session not found or expired — reinitialize.');
-            return;
-        }
-        if (req.method !== 'POST') {
-            rpcError(res, 400, 'Missing mcp-session-id.');
-            return;
-        }
-        const body = await readJsonBody(req);
-        // A non-initialize POST without a known session is invalid.
-        if (!isInitializeRequest(body)) {
-            rpcError(res, 400, 'Bad Request: no valid session id, and not an initialize request.');
-            return;
-        }
-        // New session: a credential must be present (OAuth token or fp_live_ key).
-        const cred = extractCredential(req);
-        if (!cred.token && !cred.mcpKey) {
-            challenge(req, res);
-            return;
-        }
-        const client = new FlowpadClient({
-            baseUrl: opts.baseUrl,
-            token: cred.token,
-            mcpKey: cred.mcpKey,
-        });
-        const transport = new StreamableHTTPServerTransport({
-            sessionIdGenerator: () => randomUUID(),
-            onsessioninitialized: (newId) => {
-                transports.set(newId, transport);
-            },
-        });
-        transport.onclose = () => {
-            if (transport.sessionId)
-                transports.delete(transport.sessionId);
-        };
-        const server = await createServer(client);
-        await server.connect(transport);
-        await transport.handleRequest(req, res, body);
-    }
-    await new Promise((resolve) => {
-        httpServer.listen(opts.port, () => resolve());
-    });
-    // stderr keeps stdout clean (stdio transport contract); harmless over HTTP.
-    console.error(`flowpad-mcp HTTP transport listening on :${opts.port}${mcpPath}`);
-}
-//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,IAAI,gBAAgB,GAGjC,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,aAAa,GAAG,UAAU,CAAC;AACjC,MAAM,uBAAuB,GAAG,uCAAuC,CAAC;AAuBxE;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,GAAoB;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;YACpC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;YACnB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,GAAoB;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI;gBAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,gFAAgF;AAChF,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,OAAe;IACpE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE;QACpB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE;QAChC,EAAE,EAAE,IAAI;KACT,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAS,aAAa,CAAC,GAAoB;IACzC,MAAM,KAAK,GACR,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAwB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC;IACT,MAAM,IAAI,GACR,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACrE,OAAO,GAAG,KAAK,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyC,CAAC;IAEpE,MAAM,WAAW,GAAG,CAAC,GAAoB,EAAU,EAAE,CACnD,IAAI,CAAC,iBAAiB,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,EAAE,CAAC;IAC9D,MAAM,WAAW,GAAG,CAAC,GAAoB,EAAU,EAAE;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB;YACnC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM;YACxC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,GAAG,MAAM,GAAG,uBAAuB,EAAE,CAAC;IAC/C,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YAChC,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,SAAS,SAAS,CAAC,GAAoB,EAAE,GAAmB;QAC1D,GAAG,CAAC,SAAS,CACX,kBAAkB,EAClB,6BAA6B,WAAW,CAAC,GAAG,CAAC,GAAG,CACjD,CAAC;QACF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,4CAA4C,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,UAAU,MAAM,CACnB,GAAoB,EACpB,GAAmB;QAEnB,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,GAAG,CAAC,GAAG,IAAI,GAAG,EACd,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC5C,CAAC;QAEF,yEAAyE;QACzE,IAAI,GAAG,CAAC,QAAQ,KAAK,uBAAuB,EAAE,CAAC;YAC7C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC;gBAC1B,qBAAqB,EAAE,IAAI,CAAC,oBAAoB,IAAI,EAAE;aACvD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC7B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,8BAA8B,OAAO,GAAG,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEhE,6BAA6B;QAC7B,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YACvC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzE,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,GAAG,EAAE,CAAC;YACR,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,8CAA8C,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAErC,4DAA4D;QAC5D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,QAAQ,CACN,GAAG,EACH,GAAG,EACH,kEAAkE,CACnE,CAAC;YACF,OAAO;QACT,CAAC;QAED,2EAA2E;QAC3E,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;YACtC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC9B,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACnC,CAAC;SACF,CAAC,CAAC;QACH,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;YACvB,IAAI,SAAS,CAAC,SAAS;gBAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAClE,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,4EAA4E;IAC5E,OAAO,CAAC,KAAK,CACX,4CAA4C,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,CAClE,CAAC;AACJ,CAAC"}

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,kFAAkF;AAClF,kFAAkF;AAClF,gFAAgF;AAChF,wBAAwB;AACxB,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AACjD,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,sFAAsF;AACtF,SAAS,SAAS;IAChB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,+DAA+D;IAC/D,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,gBAAgB;QACxD,2EAA2E;QAC3E,kDAAkD;QAClD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;KAC/D,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,wDAAwD;IACxD,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC;IAC/D,2EAA2E;IAC3E,kEAAkE;IAClE,gFAAgF;IAChF,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC;SACvD,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,eAAe,CAAC;QACpB,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,gBAAgB;QACxD,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM;QACpC,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC7C,oBAAoB,EAAE,WAAW;KAClC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,SAAS,EAAE,EAAE,CAAC;QAChB,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/lib.js

@@ -1,10 +0,0 @@
-// Library entry — lets flowpad-mcp-local (the bundled PUBLIC stdio tool) reuse the
-// server + client WITHOUT copying any logic. flowpad-mcp-local imports these, attaches
-// a StdioServerTransport, and esbuild-bundles the whole tree (this + flowpad-core) into
-// one self-contained minified file. The CLI entry (index.ts / bin) stays the
-// hosted-HTTP + local-dev runner.
-// ts-unused-exports:disable-next-line
-export { createServer } from './server.js';
-// ts-unused-exports:disable-next-line
-export { FlowpadClient } from './client.js';
-//# sourceMappingURL=lib.js.map

package/dist/lib.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"lib.js","sourceRoot":"","sources":["../src/lib.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,uFAAuF;AACvF,wFAAwF;AACxF,6EAA6E;AAC7E,kCAAkC;AAClC,sCAAsC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,sCAAsC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}