huly-mcp-selfhost 3.3.0 → 3.5.0

package/dist/setup.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+'use strict'
+process.argv.splice(2, 0, 'setup')
+require('./index.js')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "huly-mcp-selfhost",
-  "version": "3.3.0",
+  "version": "3.5.0",
   "description": "MCP server for Huly (self-hosted and Huly Cloud): 224 tools for Claude and other AI agents — issues, epics, documents, chat, planner, test management — with toolsets for low token use, an agent workflow and a Claude Code plugin.",
   "keywords": [
     "huly",
@@ -21,7 +21,7 @@
     "type": "git",
     "url": "git+https://github.com/JoKeks2023/huly-mcp.git"
   },
-  "mcpName": "io.github.jokeks2023/huly-mcp-selfhost",
+  "mcpName": "io.github.JoKeks2023/huly-mcp-selfhost",
   "license": "EPL-2.0",
   "author": "Joris Conrad (https://github.com/JoKeks2023)",
   "contributors": [
@@ -30,11 +30,10 @@
   "bin": {
     "huly-mcp": "dist/index.js",
     "huly-mcp-selfhost": "dist/index.js",
-    "huly-mcp-setup": "scripts/setup.js"
+    "huly-mcp-setup": "dist/setup.js"
   },
   "files": [
     "dist/",
-    "scripts/",
     ".env.example",
     "README.md",
     "CHANGELOG.md"
@@ -43,14 +42,15 @@
     "node": ">=20"
   },
   "scripts": {
-    "build": "node -e \"require('fs').rmSync('dist', { recursive: true, force: true })\" && node --max-old-space-size=4096 node_modules/typescript/bin/tsc && node scripts/copy-guides.js",
+    "build": "node --max-old-space-size=4096 node_modules/typescript/bin/tsc --noEmit && node scripts/build.js",
     "dev": "tsx watch src/index.ts",
     "start": "node dist/index.js",
     "setup": "node scripts/setup.js",
     "prepublishOnly": "npm run build",
     "test": "node --import tsx --test test/*.test.ts"
   },
-  "dependencies": {
+  "dependencies": {},
+  "devDependencies": {
     "@hcengineering/account-client": "^0.7.0",
     "@hcengineering/attachment": "0.7.0",
     "@hcengineering/chunter": "^0.7.0",
@@ -64,14 +64,15 @@
     "@hcengineering/task": "^0.7.0",
     "@hcengineering/tracker": "^0.7.0",
     "@modelcontextprotocol/sdk": "^1.32.2",
-    "ws": "^8.22.1",
-    "zod": "^4.6.7"
-  },
-  "devDependencies": {
+    "@types/express": "^5.0.6",
     "@types/node": "^22.0.0",
     "@types/ws": "^8.5.0",
+    "esbuild": "^0.28.2",
+    "express": "^5.3.0",
     "tsx": "^4.19.0",
-    "typescript": "^7.0.2"
+    "typescript": "^7.0.2",
+    "ws": "^8.22.1",
+    "zod": "^4.6.7"
   },
   "overrides": {
     "dompurify": "^3.4.17",

package/dist/connection.d.ts

@@ -1,78 +0,0 @@
-import { type AccountClient } from '@hcengineering/account-client';
-import { TxOperations, type PersonId } from '@hcengineering/core';
-export interface WorkspaceRef {
-    uuid: string;
-    /** Workspace slug, as in huly.app/<slug>. Passed to selectWorkspace(). */
-    url: string;
-    name: string;
-    mode?: string;
-    isDisabled?: boolean;
-}
-export interface WorkspaceConnection {
-    workspace: WorkspaceRef;
-    client: TxOperations;
-    /** Workspace-scoped account client (token carries the workspace) — e.g. getWorkspaceMembers(). */
-    accountClient: AccountClient;
-    wsToken: string;
-    workspaceUuid: string;
-}
-interface OpenConnection {
-    client: TxOperations;
-    close: () => Promise<void>;
-}
-export interface ConnectionManagerOptions {
-    accountsUrl: string;
-    email?: string;
-    password?: string;
-    token?: string;
-    /** Legacy HULY_WORKSPACE: restricts this server to that single workspace. */
-    restrictTo?: string;
-    /** HULY_TRANSACTOR_URL: use this transactor instead of the one the account service names (e.g. an internal address). */
-    transactorUrl?: string;
-    createAccountClient?: (accountsUrl: string, token?: string) => AccountClient;
-    openConnection?: (endpoint: string, token: string, socialId: PersonId) => Promise<OpenConnection>;
-}
-export declare class WorkspaceConnectionManager {
-    private readonly opts;
-    private readonly createAccountClient;
-    private readonly openConnection;
-    private session;
-    private workspaces;
-    private generation;
-    private readonly connections;
-    constructor(opts: ConnectionManagerOptions);
-    /** All workspaces this account can use (after the optional legacy HULY_WORKSPACE restriction). */
-    listWorkspaces(): Promise<WorkspaceRef[]>;
-    /**
-     * Resolve user input (slug, name or UUID; case-insensitive) to a workspace.
-     * Without input, succeeds only if exactly one workspace is available.
-     */
-    resolveWorkspace(input?: string): Promise<WorkspaceRef>;
-    /** Cached connection for the given workspace (see resolveWorkspace for the input rules). */
-    getWorkspace(input?: string): Promise<WorkspaceConnection>;
-    closeAll(): Promise<void>;
-    private match;
-    private getSession;
-    private login;
-    private discover;
-    private connect;
-}
-/**
- * The account service answers with the public transactor address (e.g. wss://huly.example.com/_transactor).
- * Next to Huly — same Docker network — that detour goes out through the uplink and a tunnel and back in.
- * HULY_TRANSACTOR_URL replaces it, e.g. ws://huly/_transactor or ws://transactor:3333.
- */
-export declare function transactorEndpoint(endpoint: string, override: string | undefined): string;
-export declare function getConnectionManager(): WorkspaceConnectionManager;
-/** Replace the process-wide manager (tests). */
-export declare function setConnectionManager(next: WorkspaceConnectionManager | null): void;
-export declare function listWorkspaces(): Promise<WorkspaceRef[]>;
-export declare function getWorkspace(workspace?: string): Promise<WorkspaceConnection>;
-export declare function getConnection(workspace?: string): Promise<TxOperations>;
-export declare function getAccountClient(workspace?: string): Promise<AccountClient>;
-export declare function getWorkspaceInfo(workspace?: string): Promise<{
-    wsToken: string;
-    workspaceUuid: string;
-}>;
-export declare function closeConnection(): Promise<void>;
-export {};

package/dist/connection.js

@@ -1,271 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkspaceConnectionManager = void 0;
-exports.transactorEndpoint = transactorEndpoint;
-exports.getConnectionManager = getConnectionManager;
-exports.setConnectionManager = setConnectionManager;
-exports.listWorkspaces = listWorkspaces;
-exports.getWorkspace = getWorkspace;
-exports.getConnection = getConnection;
-exports.getAccountClient = getAccountClient;
-exports.getWorkspaceInfo = getWorkspaceInfo;
-exports.closeConnection = closeConnection;
-const account_client_1 = require("@hcengineering/account-client");
-const core_1 = require("@hcengineering/core");
-const server_client_1 = require("@hcengineering/server-client");
-async function defaultOpenConnection(endpoint, token, socialId) {
-    const raw = await (0, server_client_1.createClient)(endpoint, token);
-    return { client: new core_1.TxOperations(raw, socialId), close: async () => await raw.close() };
-}
-function toRef(ws) {
-    return {
-        uuid: String(ws.uuid),
-        url: ws.url,
-        name: ws.name ?? ws.url,
-        mode: ws.mode != null ? String(ws.mode) : undefined,
-        isDisabled: ws.isDisabled
-    };
-}
-function describe(ws) {
-    return ws.name !== ws.url ? `${ws.url} (${ws.name})` : ws.url;
-}
-class WorkspaceConnectionManager {
-    opts;
-    createAccountClient;
-    openConnection;
-    session = null;
-    workspaces = null;
-    // Bumped by closeAll() so calls that were in flight don't hand out or register connections afterwards.
-    generation = 0;
-    // Keyed by workspace UUID — never by user input, so "acme" and its UUID share one connection.
-    connections = new Map();
-    constructor(opts) {
-        this.opts = opts;
-        this.createAccountClient = opts.createAccountClient ?? ((url, token) => (0, account_client_1.getClient)(url, token));
-        this.openConnection = opts.openConnection ?? defaultOpenConnection;
-    }
-    /** All workspaces this account can use (after the optional legacy HULY_WORKSPACE restriction). */
-    async listWorkspaces() {
-        if (this.workspaces === null) {
-            const pending = this.discover();
-            this.workspaces = pending;
-            pending.catch(() => { if (this.workspaces === pending)
-                this.workspaces = null; });
-        }
-        return await this.workspaces;
-    }
-    /**
-     * Resolve user input (slug, name or UUID; case-insensitive) to a workspace.
-     * Without input, succeeds only if exactly one workspace is available.
-     */
-    async resolveWorkspace(input) {
-        let available = await this.listWorkspaces();
-        if (input != null && input.trim() === '') {
-            // Blank is not "omitted" — never let it fall through to a default workspace.
-            throw new Error('Workspace must not be empty (see list_workspaces).');
-        }
-        if (input == null) {
-            if (available.length === 1)
-                return available[0];
-            if (available.length === 0)
-                throw new Error('No Huly workspaces are accessible with these credentials.');
-            throw new Error(`Multiple workspaces available — pass 'workspace' explicitly (see list_workspaces). Available: ${available.map(describe).join(', ')}`);
-        }
-        let match = this.match(available, input);
-        if (match === undefined) {
-            // The account may have joined a workspace since discovery — refresh once.
-            this.workspaces = null;
-            available = await this.listWorkspaces();
-            match = this.match(available, input);
-        }
-        if (match === undefined) {
-            throw new Error(`Unknown workspace '${input}'. Available: ${available.map(describe).join(', ') || '(none)'}`);
-        }
-        return match;
-    }
-    /** Cached connection for the given workspace (see resolveWorkspace for the input rules). */
-    async getWorkspace(input) {
-        const generation = this.generation;
-        const ws = await this.resolveWorkspace(input);
-        if (generation !== this.generation)
-            throw new Error('Huly connections were closed.');
-        let pending = this.connections.get(ws.uuid);
-        if (pending === undefined) {
-            pending = this.connect(ws);
-            this.connections.set(ws.uuid, pending);
-            const current = pending;
-            current.catch(() => { if (this.connections.get(ws.uuid) === current)
-                this.connections.delete(ws.uuid); });
-        }
-        const { close, ...conn } = await pending;
-        if (generation !== this.generation)
-            throw new Error('Huly connections were closed.');
-        return conn;
-    }
-    async closeAll() {
-        this.generation++;
-        const pending = [...this.connections.values()];
-        this.connections.clear();
-        this.workspaces = null;
-        this.session = null;
-        const results = await Promise.allSettled(pending);
-        await Promise.allSettled(results.map(async (r) => { if (r.status === 'fulfilled')
-            await r.value.close(); }));
-    }
-    match(available, input) {
-        const needle = input.trim().toLowerCase();
-        const byId = available.find((w) => w.uuid.toLowerCase() === needle || w.url.toLowerCase() === needle);
-        if (byId !== undefined)
-            return byId;
-        const byName = available.filter((w) => w.name.toLowerCase() === needle);
-        if (byName.length > 1) {
-            throw new Error(`Workspace name '${input}' is ambiguous — use the slug or ID instead: ${byName.map((w) => `${w.url} / ${w.uuid}`).join(', ')}`);
-        }
-        return byName[0];
-    }
-    async getSession() {
-        if (this.session === null) {
-            const pending = this.login();
-            this.session = pending;
-            pending.catch(() => { if (this.session === pending)
-                this.session = null; });
-        }
-        return await this.session;
-    }
-    async login() {
-        const { accountsUrl, email, password, token } = this.opts;
-        if (token != null && token !== '') {
-            // Token auth — for SSO accounts (Google/GitHub login on huly.app).
-            const accountClient = this.createAccountClient(accountsUrl, token);
-            const info = await accountClient.getLoginInfoByToken();
-            if (info == null) {
-                throw new Error('HULY_TOKEN is invalid or expired. Please get a fresh token (npm run setup).');
-            }
-            if (!('socialId' in info) || info.socialId == null) {
-                throw new Error('Token auth: no socialId returned for HULY_TOKEN.');
-            }
-            const session = { accountClient, socialId: info.socialId };
-            if ('endpoint' in info && info.endpoint != null && info.token != null) {
-                // Workspace-scoped token: its own workspace is usable directly.
-                session.preselected = {
-                    workspace: { uuid: String(info.workspace), url: info.workspaceUrl, name: info.workspaceUrl },
-                    endpoint: info.endpoint,
-                    token: info.token
-                };
-            }
-            return session;
-        }
-        if (email == null || email === '' || password == null || password === '') {
-            throw new Error('Missing credentials. Provide HULY_TOKEN (for SSO accounts) or both HULY_EMAIL and HULY_PASSWORD.');
-        }
-        const loginInfo = await this.createAccountClient(accountsUrl).login(email, password);
-        if (loginInfo.token == null)
-            throw new Error('Login failed: no token returned. Check credentials.');
-        if (loginInfo.socialId == null)
-            throw new Error('Login failed: no socialId returned.');
-        return { accountClient: this.createAccountClient(accountsUrl, loginInfo.token), socialId: loginInfo.socialId };
-    }
-    async discover() {
-        const session = await this.getSession();
-        let all;
-        try {
-            all = (await session.accountClient.getUserWorkspaces()).map(toRef);
-        }
-        catch (err) {
-            // A workspace-scoped HULY_TOKEN may not be allowed to enumerate — fall back to its own workspace.
-            if (session.preselected === undefined)
-                throw err;
-            all = [session.preselected.workspace];
-        }
-        const restrictTo = this.opts.restrictTo;
-        if (restrictTo == null || restrictTo === '')
-            return all;
-        const pinned = this.match(all, restrictTo);
-        if (pinned === undefined) {
-            throw new Error(`HULY_WORKSPACE='${restrictTo}' is not accessible. Available: ${all.map(describe).join(', ') || '(none)'}`);
-        }
-        return [pinned];
-    }
-    async connect(ws) {
-        const session = await this.getSession();
-        let endpoint;
-        let wsToken;
-        let workspaceUuid;
-        if (session.preselected !== undefined && session.preselected.workspace.uuid === ws.uuid) {
-            ({ endpoint, token: wsToken } = session.preselected);
-            workspaceUuid = ws.uuid;
-        }
-        else {
-            const wsInfo = await session.accountClient.selectWorkspace(ws.url, 'external');
-            if (wsInfo?.endpoint == null || wsInfo.token == null) {
-                throw new Error(`Workspace '${ws.url}' not found or not accessible.`);
-            }
-            if (wsInfo.workspace != null && String(wsInfo.workspace) !== ws.uuid) {
-                throw new Error(`selectWorkspace('${ws.url}') returned workspace ${String(wsInfo.workspace)}, expected ${ws.uuid}.`);
-            }
-            endpoint = wsInfo.endpoint;
-            wsToken = wsInfo.token;
-            workspaceUuid = String(wsInfo.workspace ?? ws.uuid);
-        }
-        endpoint = transactorEndpoint(endpoint, this.opts.transactorUrl);
-        const { client, close } = await this.openConnection(endpoint, wsToken, session.socialId);
-        return {
-            workspace: ws,
-            client,
-            accountClient: this.createAccountClient(this.opts.accountsUrl, wsToken),
-            wsToken,
-            workspaceUuid,
-            close
-        };
-    }
-}
-exports.WorkspaceConnectionManager = WorkspaceConnectionManager;
-/**
- * The account service answers with the public transactor address (e.g. wss://huly.example.com/_transactor).
- * Next to Huly — same Docker network — that detour goes out through the uplink and a tunnel and back in.
- * HULY_TRANSACTOR_URL replaces it, e.g. ws://huly/_transactor or ws://transactor:3333.
- */
-function transactorEndpoint(endpoint, override) {
-    const o = override?.trim();
-    return o != null && o !== '' ? o.replace(/\/+$/, '') : endpoint;
-}
-// ── Process-wide manager (configured from env) ──────────────────────────────
-let manager = null;
-function getConnectionManager() {
-    if (manager === null) {
-        manager = new WorkspaceConnectionManager({
-            accountsUrl: process.env.HULY_ACCOUNTS_URL ?? 'https://account.huly.app',
-            email: process.env.HULY_EMAIL,
-            password: process.env.HULY_PASSWORD,
-            token: process.env.HULY_TOKEN,
-            restrictTo: process.env.HULY_WORKSPACE,
-            transactorUrl: process.env.HULY_TRANSACTOR_URL
-        });
-    }
-    return manager;
-}
-/** Replace the process-wide manager (tests). */
-function setConnectionManager(next) {
-    manager = next;
-}
-async function listWorkspaces() {
-    return await getConnectionManager().listWorkspaces();
-}
-async function getWorkspace(workspace) {
-    return await getConnectionManager().getWorkspace(workspace);
-}
-async function getConnection(workspace) {
-    return (await getWorkspace(workspace)).client;
-}
-async function getAccountClient(workspace) {
-    return (await getWorkspace(workspace)).accountClient;
-}
-async function getWorkspaceInfo(workspace) {
-    const { wsToken, workspaceUuid } = await getWorkspace(workspace);
-    return { wsToken, workspaceUuid };
-}
-async function closeConnection() {
-    if (manager !== null)
-        await manager.closeAll();
-}
-//# sourceMappingURL=connection.js.map

package/dist/connection.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connection.js","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,kEAAoG;AACpG,8CAA4G;AAC5G,gEAA2D;AA2D3D,KAAK,UAAU,qBAAqB,CAAE,QAAgB,EAAE,KAAa,EAAE,QAAkB;IACvF,MAAM,GAAG,GAAW,MAAM,IAAA,4BAAY,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACvD,OAAO,EAAE,MAAM,EAAE,IAAI,mBAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,EAAE,CAAA;AAC1F,CAAC;AAED,SAAS,KAAK,CAAE,EAA2B;IACzC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;QACrB,GAAG,EAAE,EAAE,CAAC,GAAG;QACX,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG;QACvB,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QACnD,UAAU,EAAE,EAAE,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAE,EAAgB;IACjC,OAAO,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAA;AAC/D,CAAC;AAED;IAUgC,IAAI;IATjB,mBAAmB,CAAwD;IAC3E,cAAc,CAAkF;IACzG,OAAO,GAAmC,IAAI,CAAA;IAC9C,UAAU,GAAmC,IAAI,CAAA;IACzD,uGAAuG;IAC/F,UAAU,GAAG,CAAC,CAAA;IACtB,8FAA8F;IAC7E,WAAW,GAAG,IAAI,GAAG,EAAyE,CAAA;IAE/G,YAA8B,IAA8B;oBAA9B,IAAI;QAChC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,0BAAmB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;QACxG,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,qBAAqB,CAAA;IACpE,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,cAAc;QAClB,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAA;YAC/B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAA;YACzB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO;gBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA,CAAC,CAAC,CAAC,CAAA;QAClF,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,UAAU,CAAA;IAC9B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAE,KAAc;QACpC,IAAI,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAE3C,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACzC,6EAA6E;YAC7E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QACD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAA;YAC/C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;YACxG,MAAM,IAAI,KAAK,CACb,iGAAiG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtI,CAAA;QACH,CAAC;QAED,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,0EAA0E;YAC1E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;YACtB,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;YACvC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACtC,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,iBAAiB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAA;QAC/G,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,YAAY,CAAE,KAAc;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QAClC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAC7C,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QACpF,IAAI,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC1B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACtC,MAAM,OAAO,GAAG,OAAO,CAAA;YACvB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,OAAO;gBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QAC1G,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,OAAO,CAAA;QACxC,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QACpF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAA;QAC9C,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;QACxB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QACtB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACjD,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;YAAE,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7G,CAAC;IAEO,KAAK,CAAE,SAAyB,EAAE,KAAa;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACzC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAA;QACrG,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QACnC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAA;QACvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,gDAAgD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjJ,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;IAClB,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;YAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;YACtB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;gBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA,CAAC,CAAC,CAAC,CAAA;QAC5E,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAA;IAC3B,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;QAEzD,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAClC,mEAAmE;YACnE,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YAClE,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,mBAAmB,EAAE,CAAA;YACtD,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;YAChG,CAAC;YACD,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;YACrE,CAAC;YACD,MAAM,OAAO,GAAmB,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;YAC1E,IAAI,UAAU,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;gBACtE,gEAAgE;gBAChE,OAAO,CAAC,WAAW,GAAG;oBACpB,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE;oBAC5F,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAA;YACH,CAAC;YACD,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAA;QACrH,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QACpF,IAAI,SAAS,CAAC,KAAK,IAAI,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACnG,IAAI,SAAS,CAAC,QAAQ,IAAI,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACtF,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAA;IAChH,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACvC,IAAI,GAAmB,CAAA;QACvB,IAAI,CAAC;YACH,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,kGAAkG;YAClG,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;gBAAE,MAAM,GAAG,CAAA;YAChD,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;QACvC,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAA;QACvC,IAAI,UAAU,IAAI,IAAI,IAAI,UAAU,KAAK,EAAE;YAAE,OAAO,GAAG,CAAA;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;QAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,mBAAmB,UAAU,mCAAmC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAA;QAC7H,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,CAAA;IACjB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAE,EAAgB;QACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QAEvC,IAAI,QAAgB,CAAA;QACpB,IAAI,OAAe,CAAA;QACnB,IAAI,aAAqB,CAAA;QACzB,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YACxF,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;YACpD,aAAa,GAAG,EAAE,CAAC,IAAI,CAAA;QACzB,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;YAC9E,IAAI,MAAM,EAAE,QAAQ,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC,GAAG,gCAAgC,CAAC,CAAA;YACvE,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC,GAAG,yBAAyB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,IAAI,GAAG,CAAC,CAAA;YACtH,CAAC;YACD,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;YAC1B,OAAO,GAAG,MAAM,CAAC,KAAK,CAAA;YACtB,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,CAAC,CAAA;QACrD,CAAC;QAED,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAChE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QACxF,OAAO;YACL,SAAS,EAAE,EAAE;YACb,MAAM;YACN,aAAa,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;YACvE,OAAO;YACP,aAAa;YACb,KAAK;SACN,CAAA;IACH,CAAC;CACF;;AAED;;;;GAIG;AACH,4BAAoC,QAAgB,EAAE,QAA4B;IAChF,MAAM,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAA;IAC1B,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AACjE,CAAC;AAED,+EAA+E;AAE/E,IAAI,OAAO,GAAsC,IAAI,CAAA;AAErD;IACE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,GAAG,IAAI,0BAA0B,CAAC;YACvC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,0BAA0B;YACxE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;YAC7B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;YACnC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;YAC7B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;YACtC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;SAC/C,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,gDAAgD;AAChD,8BAAsC,IAAuC;IAC3E,OAAO,GAAG,IAAI,CAAA;AAChB,CAAC;AAEM,KAAK;IACV,OAAO,MAAM,oBAAoB,EAAE,CAAC,cAAc,EAAE,CAAA;AACtD,CAAC;AAEM,KAAK,uBAAwB,SAAkB;IACpD,OAAO,MAAM,oBAAoB,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;AAC7D,CAAC;AAEM,KAAK,wBAAyB,SAAkB;IACrD,OAAO,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;AAC/C,CAAC;AAEM,KAAK,2BAA4B,SAAkB;IACxD,OAAO,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAA;AACtD,CAAC;AAEM,KAAK,2BAA4B,SAAkB;IACxD,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAA;IAChE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;AACnC,CAAC;AAEM,KAAK;IACV,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAA;AAChD,CAAC"}

package/dist/env.d.ts

@@ -1 +0,0 @@
-export declare function normalizeEnv(env?: NodeJS.ProcessEnv): void;

package/dist/env.js

@@ -1,17 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.normalizeEnv = normalizeEnv;
-// Clients such as Claude Code plugins pass every configured variable, also the ones the user
-// left empty (or as an unresolved "${…}" placeholder). Treat those as not set, so defaults apply.
-function normalizeEnv(env = process.env) {
-    for (const [key, value] of Object.entries(env)) {
-        if (!key.startsWith('HULY_') || value == null)
-            continue;
-        const v = value.trim();
-        if (v === '' || /^\$\{[^}]*\}$/.test(v))
-            delete env[key];
-        else if (v !== value)
-            env[key] = v;
-    }
-}
-//# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":";;;AAAA,6FAA6F;AAC7F,kGAAkG;AAClG,sBAA8B,GAAG,GAAsB,OAAO,CAAC,GAAG;IAChE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI;YAAE,SAAQ;QACvD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QACtB,IAAI,CAAC,KAAK,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAA;aACnD,IAAI,CAAC,KAAK,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACpC,CAAC;AACH,CAAC"}

package/dist/guard.d.ts

@@ -1,39 +0,0 @@
-import type { ToolDef } from './registry';
-/** A tool changes data when its workspace argument is mandatory (reads may omit it). */
-export declare function isMutation(tool: ToolDef): boolean;
-/** Project keys an argument object refers to: project fields plus every "PROJ-12"-style value. */
-export declare function projectsIn(args: unknown, key?: string): Set<string>;
-export declare function parseWriteProjects(value: string | undefined): Set<string> | undefined;
-export declare function assertWriteAllowed(tool: ToolDef, args: unknown, allowed: Set<string> | undefined): void;
-export declare function audit(path: string | undefined, tool: ToolDef, args: unknown, outcome: {
-    ok: boolean;
-    text: string;
-}): void;
-/** Deletes and bulk/structural changes that are hard to undo. */
-export declare function isRisky(name: string): boolean;
-/**
- * MCP tool annotations: reads are read-only; deletes, removals and the risky tools above are
- * destructive; every other change (create, add, update, set, …) is marked non-destructive —
- * the MCP default for a write tool is "destructive", which would over-warn.
- * Off by default (HULY_ANNOTATIONS=1): they add ~16% to tools/list in every session.
- */
-export declare function toolAnnotations(tool: ToolDef): {
-    title: string;
-    readOnlyHint?: boolean;
-    destructiveHint?: boolean;
-};
-export type ConfirmMode = 'auto' | 'off' | 'strict';
-export declare function parseConfirmMode(value: string | undefined): ConfirmMode;
-/** What the confirm callback can do with the connected client. */
-export interface Asker {
-    /** True when the client can show a form (MCP elicitation). */
-    canAsk: () => boolean;
-    /** Shows the question; resolves true only on an explicit yes. */
-    ask: (message: string) => Promise<boolean>;
-}
-/** One readable line per argument, without the workspace and with long values cut. */
-export declare function describeCall(tool: ToolDef, args: Record<string, unknown>): string;
-/** MCP elicitation on top of an McpServer. */
-export declare function elicitationAsker(server: any): Asker;
-/** Wraps a handler with the write scope check, the confirmation for risky tools and the audit log. */
-export declare function guard(tool: ToolDef, env?: NodeJS.ProcessEnv, asker?: Asker): ToolDef['handler'];