mcp-dataverse 0.3.8 → 0.3.9

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 MCP Dataverse Contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 MCP Dataverse Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,105 +1,114 @@
-# MCP Dataverse
-
-<div align="center">
-
-<img src="assets/logo.webp" alt="MCP Dataverse" width="180" />
-
-**The most complete MCP server for Microsoft Dataverse.**
-
-63 tools · 4 resources · 10 guided workflows · Zero config auth
-
-[![npm](https://img.shields.io/npm/v/mcp-dataverse)](https://www.npmjs.com/package/mcp-dataverse)
-[![npm downloads](https://img.shields.io/npm/dm/mcp-dataverse)](https://www.npmjs.com/package/mcp-dataverse)
-[![Node 20+](https://img.shields.io/badge/Node.js-20%2B-green)](https://nodejs.org)
-[![TypeScript](https://img.shields.io/badge/TypeScript-5.4-blue)](https://www.typescriptlang.org)
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow)](LICENSE)
-
-**[→ Full Documentation](https://codeurali.github.io/mcp-dataverse)**
-
-</div>
-
----
-
-## Why MCP Dataverse?
-
-AI agents hallucinate schema, guess column names, and build broken OData queries. This server gives them **real-time access** to your Dataverse environment — schema, records, metadata, solutions — through the [Model Context Protocol](https://modelcontextprotocol.io).
-
-- **No Azure AD app registration** — device code flow, zero pre-configuration
-- **Works with any MCP client** — VS Code, Claude, Cursor, Windsurf, Gemini, Codex CLI
-- **Atomic tools** — each tool does one thing well; the AI picks the right one
-- **Structured outputs** — every response returns `{summary, data, suggestions}`
-- **Guardrails** — destructive operations require explicit confirmation
-- **Encrypted tokens** — AES-256-GCM cached credentials, never logged
-
----
-
-## Install
-
-```bash
-npx mcp-dataverse install
-```
-
-The interactive wizard configures your environment, registers the server in VS Code, and authenticates your Microsoft account in under 2 minutes.
-
-> Requires Node.js 20+. For other clients (Claude, Cursor, Windsurf…) see [Multi-Client Setup](https://codeurali.github.io/mcp-dataverse/multi-client-setup).
-
----
-
-## Authentication
-
-**No PAC CLI, no app registration, no client secret.** Uses Microsoft's device code flow (MSAL):
-
-1. **First tool call** → a sign-in code appears in the MCP Output panel (`View → Output → MCP`)
-2. Open `https://microsoft.com/devicelogin` → enter the code → sign in with your work account
-3. **Done.** Token is cached encrypted — all future starts are silent
-
-Re-authenticate after ~90 days of inactivity: `npx mcp-dataverse-auth`
-
----
-
-## Capabilities
-
-| Category                | Count | Description                                                    |
-| ----------------------- | ----- | -------------------------------------------------------------- |
-| **Metadata**            | 8     | Tables, schema, relationships, option sets, entity keys        |
-| **Query**               | 3     | OData, FetchXML, paginated retrieval                           |
-| **CRUD**                | 6     | Get, create, update, delete, upsert, assign                    |
-| **Actions & Functions** | 6     | Bound/unbound Dataverse actions and functions                  |
-| **Batch**               | 1     | Up to 1000 operations atomically                               |
-| **Solutions**           | 3     | List solutions, components, publish customizations             |
-| **Search**              | 1     | Full-text Relevance Search                                     |
-| **Users & Teams**       | 3     | Users, roles, teams                                            |
-| **Files**               | 2     | Upload/download file and image columns                         |
-| **+ more**              | …     | Audit, trace logs, delta tracking, impersonation, annotations… |
-| **Assistance**          | 4     | Tool router, workflow guide                                    |
-
-[→ Full Capabilities Reference](https://codeurali.github.io/mcp-dataverse/capabilities)
-
----
-
-## Troubleshooting
-
-| Symptom                            | Fix                                                                |
-| ---------------------------------- | ------------------------------------------------------------------ |
-| No sign-in prompt                  | Open **View → Output → MCP** — the device code is displayed there  |
-| `No MSAL accounts found`           | Run `npx mcp-dataverse-auth` then restart the server               |
-| `Authentication timed out`         | Restart the MCP server — a fresh code is generated automatically   |
-| Server not appearing in Agent mode | Run `npx mcp-dataverse install` or `npx mcp-dataverse doctor`      |
-| HTTP errors                        | Run `npx mcp-dataverse doctor` to diagnose config and connectivity |
-
----
-
-## Roadmap
-
-| Version | Feature | Status |
-| ------- | ------- | ------ |
-| **v0.4** | HTTP transport + schema consistency + new auth methods | 🟢 In progress |
-| **v0.5** | MCP Prompts — workflow templates | 🔴 Planned |
-
-[→ Full Roadmap](https://codeurali.github.io/mcp-dataverse/roadmap)
-
----
-
-## License
-
-[MIT](LICENSE) © [Ali Taggaz](https://www.linkedin.com/in/alitaggaz/)
+# MCP Dataverse
+
+<div align="center">
+
+<img src="assets/logo.webp" alt="MCP Dataverse" width="180" />
+
+**The most complete MCP server for Microsoft Dataverse.**
+
+Give your AI agents real-time access to Dataverse — query records with OData & FetchXML, manage metadata, inspect solutions, run batch operations, audit changes, and more. Zero-config auth via Microsoft device code flow.
+
+63 tools · 4 resources · 10 guided workflows · Zero config auth
+
+[![npm](https://img.shields.io/npm/v/mcp-dataverse)](https://www.npmjs.com/package/mcp-dataverse)
+[![npm downloads](https://img.shields.io/npm/dm/mcp-dataverse)](https://www.npmjs.com/package/mcp-dataverse)
+[![CI](https://github.com/codeurali/mcp-dataverse/actions/workflows/ci.yml/badge.svg)](https://github.com/codeurali/mcp-dataverse/actions/workflows/ci.yml)
+[![Node 20+](https://img.shields.io/badge/Node.js-20%2B-green)](https://nodejs.org)
+[![TypeScript](https://img.shields.io/badge/TypeScript-5.4-blue)](https://www.typescriptlang.org)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow)](LICENSE)
+
+**[→ Full Documentation](https://codeurali.github.io/mcp-dataverse)**
+
+</div>
+
+---
+
+## Why MCP Dataverse?
+
+AI agents hallucinate schema, guess column names, and build broken OData queries. This server gives them **real-time access** to your Dataverse environment — schema, records, metadata, solutions — through the [Model Context Protocol](https://modelcontextprotocol.io).
+
+- **No Azure AD app registration** — device code flow, zero pre-configuration
+- **Works with any MCP client** — VS Code, Claude, Cursor, Windsurf, Gemini, Codex CLI
+- **Atomic tools** — each tool does one thing well; the AI picks the right one
+- **Structured outputs** — every response returns `{summary, data, suggestions}`
+- **Guardrails** — destructive operations require explicit confirmation
+- **Encrypted tokens** — AES-256-GCM cached credentials, never logged
+
+---
+
+## Install
+
+```bash
+npx mcp-dataverse install
+```
+
+The interactive wizard configures your environment, registers the server in VS Code, and authenticates your Microsoft account in under 2 minutes.
+
+> Requires Node.js 20+. For other clients (Claude, Cursor, Windsurf…) see [Multi-Client Setup](https://codeurali.github.io/mcp-dataverse/multi-client-setup).
+
+---
+
+## Authentication
+
+**No PAC CLI, no app registration, no client secret.** Uses Microsoft's device code flow (MSAL):
+
+1. **First tool call** → a sign-in code appears in the MCP Output panel (`View → Output → MCP`)
+2. Open `https://microsoft.com/devicelogin` → enter the code → sign in with your work account
+3. **Done.** Token is cached encrypted — all future starts are silent
+
+Re-authenticate after ~90 days of inactivity: `npx mcp-dataverse-auth`
+
+---
+
+## Capabilities
+
+| Category                | Count | Description                                                    |
+| ----------------------- | ----- | -------------------------------------------------------------- |
+| **Metadata**            | 8     | Tables, schema, relationships, option sets, entity keys        |
+| **Query**               | 3     | OData, FetchXML, paginated retrieval                           |
+| **CRUD**                | 6     | Get, create, update, delete, upsert, assign                    |
+| **Actions & Functions** | 6     | Bound/unbound Dataverse actions and functions                  |
+| **Batch**               | 1     | Up to 1000 operations atomically                               |
+| **Solutions**           | 3     | List solutions, components, publish customizations             |
+| **Search**              | 1     | Full-text Relevance Search                                     |
+| **Users & Teams**       | 3     | Users, roles, teams                                            |
+| **Files**               | 2     | Upload/download file and image columns                         |
+| **+ more**              | …     | Audit, trace logs, delta tracking, impersonation, annotations… |
+| **Assistance**          | 4     | Tool router, workflow guide                                    |
+
+[→ Full Capabilities Reference](https://codeurali.github.io/mcp-dataverse/capabilities)
+
+---
+
+## Troubleshooting
+
+| Symptom                            | Fix                                                                |
+| ---------------------------------- | ------------------------------------------------------------------ |
+| No sign-in prompt                  | Open **View → Output → MCP** — the device code is displayed there  |
+| `No MSAL accounts found`           | Run `npx mcp-dataverse-auth` then restart the server               |
+| `Authentication timed out`         | Restart the MCP server — a fresh code is generated automatically   |
+| Server not appearing in Agent mode | Run `npx mcp-dataverse install` or `npx mcp-dataverse doctor`      |
+| HTTP errors                        | Run `npx mcp-dataverse doctor` to diagnose config and connectivity |
+
+---
+
+## Performance Tip
+
+MCP Dataverse is designed to be comprehensive, but most AI models work best with fewer tools in context. **Deselect the tools you don't need** in your client's tool picker (e.g. VS Code Chat panel) to keep the agent focused and responsive.
+
+---
+
+## Roadmap
+
+| Version | Feature | Status |
+| ------- | ------- | ------ |
+| **v0.4** | HTTP transport + schema consistency + new auth methods | 🟢 In progress |
+| **v0.5** | MCP Prompts — workflow templates | 🔴 Planned |
+
+[→ Full Roadmap](https://codeurali.github.io/mcp-dataverse/roadmap)
+
+---
+
+## License
+
+[MIT](LICENSE) © [Ali Taggaz](https://www.linkedin.com/in/alitaggaz/)

package/dist/auth-provider.factory-MSMLSOX3.js

@@ -0,0 +1 @@
+import{a}from"./chunk-PAX4NW5B.js";import"./chunk-24RDOMG4.js";export{a as createAuthProvider};

package/dist/chunk-24RDOMG4.js

@@ -0,0 +1,29 @@
+import{PublicClientApplication as p}from"@azure/msal-node";import{existsSync as d,mkdirSync as m,readFileSync as f,writeFileSync as g}from"fs";import{homedir as v}from"os";import{join as u}from"path";import{exec as y}from"child_process";import{platform as c}from"process";import{createCipheriv as w,createDecipheriv as C,createHash as k,randomBytes as T}from"crypto";function A(n){let e=c==="win32"?`echo|set /p="${n}"| clip`:c==="darwin"?`printf '%s' '${n}' | pbcopy`:`printf '%s' '${n}' | xclip -selection clipboard 2>/dev/null || printf '%s' '${n}' | xsel --clipboard 2>/dev/null`;y(e,()=>{})}var E="1950a258-227b-4e31-a9cf-717495945fc2",h=u(v(),".mcp-dataverse"),a=u(h,"msal-cache.json"),S=300*1e3;function l(){let n=[process.env.COMPUTERNAME??process.env.HOSTNAME??"",process.env.USERNAME??process.env.USER??"","mcp-dataverse-cache-v1"].join(".");return k("sha256").update(n).digest()}function P(n){let e=l(),t=T(16),r=w("aes-256-gcm",e,t),i=Buffer.concat([r.update(n,"utf-8"),r.final()]);return JSON.stringify({v:1,iv:t.toString("hex"),tag:r.getAuthTag().toString("hex"),d:i.toString("hex")})}function x(n){let e=JSON.parse(n);if(e.v!==1)throw new Error("Unknown cache format version");let t=Buffer.from(e.iv,"hex"),r=Buffer.from(e.tag,"hex"),i=Buffer.from(e.d,"hex"),o=C("aes-256-gcm",l(),t);return o.setAuthTag(r),o.update(i).toString("utf-8")+o.final("utf-8")}function b(){return{beforeCacheAccess:async n=>{if(d(a))try{let e=f(a,"utf-8"),t;try{t=x(e)}catch{t=e}n.tokenCache.deserialize(t)}catch{}},afterCacheAccess:async n=>{n.cacheHasChanged&&(m(h,{recursive:!0}),g(a,P(n.tokenCache.serialize()),{encoding:"utf-8",mode:384}))}}}var s=class{environmentUrl;pca;cachedToken=null;tokenExpiresAt=0;pendingAuth=null;constructor(e){this.environmentUrl=e.replace(/\/$/,""),this.pca=new p({auth:{clientId:E,authority:"https://login.microsoftonline.com/common"},cache:{cachePlugin:b()}})}async getToken(){let e=Date.now();return this.cachedToken!==null&&this.tokenExpiresAt>e+6e4?this.cachedToken:this.pendingAuth!==null?this.pendingAuth:(this.pendingAuth=this.refreshToken().finally(()=>{this.pendingAuth=null}),this.pendingAuth)}invalidateToken(){this.cachedToken=null,this.tokenExpiresAt=0}async isAuthenticated(){try{return await this.getToken(),!0}catch{return!1}}async setupViaDeviceCode(){await this.runDeviceCodeFlow()}async refreshToken(){if((await this.pca.getAllAccounts()).length===0){process.stderr.write(`
+[mcp-dataverse] First-time authentication required.
+Environment: ${this.environmentUrl}
+Open the URL below in your browser to sign in.
+
+`);try{return await this.runDeviceCodeFlow(),await this.acquireSilently()}catch(t){let r=t instanceof Error?t.message:String(t);throw new Error(`Authentication setup failed: ${r}
+
+You can also authenticate manually:
+  npx mcp-dataverse-auth ${this.environmentUrl}
+Then restart the MCP server in VS Code.`)}}try{return await this.acquireSilently()}catch{process.stderr.write(`
+[mcp-dataverse] Session expired \u2014 re-authenticating.
+Open the URL below in your browser to sign in again.
+
+`);try{return await this.runDeviceCodeFlow(),await this.acquireSilently()}catch(t){this.cachedToken=null;let r=t instanceof Error?t.message:String(t);throw new Error(`Re-authentication failed: ${r}
+
+To authenticate manually:
+  npx mcp-dataverse-auth ${this.environmentUrl}
+Then restart the MCP server in VS Code.`)}}}async acquireSilently(){let e=await this.pca.getAllAccounts();if(e.length===0)throw new Error("No account found in cache after authentication.");let t=await this.pca.acquireTokenSilent({scopes:[`${this.environmentUrl}/.default`],account:e[0]});if(!t?.accessToken)throw new Error("Token acquisition returned an empty access token.");return this.cacheResult(t),t.accessToken}async runDeviceCodeFlow(){let e=await Promise.race([this.pca.acquireTokenByDeviceCode({scopes:[`${this.environmentUrl}/.default`],deviceCodeCallback:t=>{A(t.userCode),process.stderr.write(`
+[mcp-dataverse] Sign in required
+
+  1. Open ${t.verificationUri} in your browser
+     (use the browser profile linked to your Power Platform account)
+  2. Paste the code: ${t.userCode}  (already copied to your clipboard)
+  3. Sign in with your work account
+
+`)}}),new Promise((t,r)=>setTimeout(()=>r(new Error("Authentication timed out after 5 minutes. Please try again.")),S))]);e&&(this.cacheResult(e),process.stderr.write(`
+[mcp-dataverse] Authenticated \u2713  Token cached \u2014 no sign-in needed next time.
+
+`))}cacheResult(e){this.cachedToken=e.accessToken,this.tokenExpiresAt=e.expiresOn?.getTime()??Date.now()+3300*1e3}};export{s as a};

package/dist/chunk-OXKMMPM3.js

@@ -0,0 +1,37 @@
+var y=class extends Error{constructor(e,n,s,i,r={}){super(e);this.status=n;this.data=s;this.code=i;this.responseHeaders=r;this.name="HttpError"}},R=class{baseURL;timeoutMs;defaultHeaders;tokenProvider;constructor(t){this.baseURL=t.baseURL.endsWith("/")?t.baseURL:t.baseURL+"/",this.timeoutMs=t.timeout??3e4,this.defaultHeaders={...t.headers},this.tokenProvider=t.tokenProvider??void 0}async get(t,e){return this.request("GET",t,void 0,e)}async post(t,e,n){return this.request("POST",t,e,n)}async patch(t,e,n){return this.request("PATCH",t,e,n)}async put(t,e,n){return this.request("PUT",t,e,n)}async delete(t,e){return this.request("DELETE",t,void 0,e)}resolveUrl(t){if(!t.startsWith("http"))return this.baseURL+t;let e=new URL(t),n=new URL(this.baseURL);if(e.origin!==n.origin)throw new y(`SSRF protection: request to '${e.origin}' blocked; only '${n.origin}' is permitted`,0,void 0,"SSRF_BLOCKED");return t}async request(t,e,n,s){let i=this.resolveUrl(e),r={...this.defaultHeaders,...s?.headers};this.tokenProvider&&(r.Authorization=`Bearer ${await this.tokenProvider()}`);let a=s?.timeoutMs??this.timeoutMs,u=new AbortController,c=setTimeout(()=>u.abort(),a);try{let o={method:t,headers:r,signal:u.signal};n!==void 0&&(o.body=typeof n=="string"?n:JSON.stringify(n));let d=await fetch(i,o),p={};if(d.headers.forEach((g,f)=>{p[f]=g}),!d.ok){let g=await d.text(),f;try{f=JSON.parse(g)}catch{f=g||void 0}throw new y(`Request failed with status ${d.status}`,d.status,f,void 0,p)}let m;if(s?.responseType==="text")m=await d.text();else{let g=await d.text();m=g?JSON.parse(g):{}}return{data:m,status:d.status,headers:p}}catch(o){throw o instanceof y?o:o instanceof DOMException&&o.name==="AbortError"?new y("Request timed out",0,void 0,"ECONNABORTED"):o}finally{clearTimeout(c)}}};function v(h){let t=h.indexOf(`\r
+\r
+`),e=h.indexOf(`
+
+`);return t!==-1&&(e===-1||t<=e)?t+4:e!==-1?e+2:-1}function O(h,t){let e=[],n=h.split(`--${t}`);for(let s of n){let i=s.trim();if(!i||i==="--")continue;let r=v(s);if(r===-1)continue;let a=s.slice(r),u=v(a);if(u===-1)continue;let o=(a.trimStart().split(/\r?\n/)[0]??"").match(/^HTTP\/\d+\.\d+\s+(\d{3})/),d=o?parseInt(o[1],10):0,p=d>=200&&d<300,m=a.slice(u).trim();if(!m){e.push(p?null:{error:"Empty response body",status:d});continue}try{let g=JSON.parse(m);e.push(p?g:{error:g,status:d})}catch{e.push({error:m,status:d})}}return e}function l(h){return h.replace(/'/g,"''")}var P="9.2",q={opportunities:"opportunityid",territories:"territoryid",categories:"categoryid",activityparties:"activitypartyid",activitymimeattachments:"activitymimeattachmentid",queues:"queueid",queueitems:"queueitemid"},$=class{http;authProvider;maxRetries;constructor(t,e=3,n=3e4){this.authProvider=t,this.maxRetries=e,this.http=new R({baseURL:`${t.environmentUrl}/api/data/v${P}/`,timeout:n,headers:{"OData-MaxVersion":"4.0","OData-Version":"4.0",Accept:"application/json","Content-Type":"application/json; charset=utf-8"},tokenProvider:()=>t.getToken()})}async requestWithRetry(t,e=0){try{return await t()}catch(n){if(n instanceof y){if(n.status===401&&e===0)return this.authProvider.invalidateToken(),this.requestWithRetry(t,e+1);if([429,503,504].includes(n.status)&&e<this.maxRetries){let i=n.responseHeaders["retry-after"],r=i?parseInt(i,10)*1e3:Math.pow(2,e)*1e3;return await new Promise(a=>setTimeout(a,r)),this.requestWithRetry(t,e+1)}}throw this.formatError(n)}}formatError(t){if(t instanceof y){let e=t.data?.error;return e?new Error(`Dataverse error ${e.code??""}: ${e.message??"Unknown error"}`):t.code==="ECONNABORTED"?new Error("Request timed out. Check your Dataverse environment URL."):t}return t instanceof Error?t:new Error(String(t))}async whoAmI(){return this.requestWithRetry(async()=>{let t=await this.http.get("WhoAmI"),{UserId:e,BusinessUnitId:n,OrganizationId:s}=t.data,i="";try{i=(await this.http.get(`organizations(${s})?$select=name`)).data.name??""}catch{i=""}let r=this.authProvider.environmentUrl;return{UserId:e,BusinessUnitId:n,OrganizationId:s,OrganizationName:i,EnvironmentUrl:r}})}async listTables(t=!1){let s=["$select=LogicalName,SchemaName,DisplayName,EntitySetName,PrimaryIdAttribute,PrimaryNameAttribute,IsCustomEntity",t?"$filter=IsCustomEntity eq true":""].filter(Boolean).join("&");return this.requestWithRetry(()=>this.http.get(`EntityDefinitions?${s}`).then(i=>i.data.value))}async getTableMetadata(t,e=!0){let n=e?"$expand=Attributes":"",s=`EntityDefinitions(LogicalName='${l(t)}')${n?"?"+n:""}`;return this.requestWithRetry(()=>this.http.get(s).then(i=>i.data))}async getRelationships(t){let e=l(t),[n,s,i]=await Promise.all([this.requestWithRetry(()=>this.http.get(`EntityDefinitions(LogicalName='${e}')/OneToManyRelationships`).then(r=>r.data.value)),this.requestWithRetry(()=>this.http.get(`EntityDefinitions(LogicalName='${e}')/ManyToOneRelationships`).then(r=>r.data.value)),this.requestWithRetry(()=>this.http.get(`EntityDefinitions(LogicalName='${e}')/ManyToManyRelationships`).then(r=>r.data.value))]);return[...n,...s,...i]}async query(t,e={}){let n=a=>encodeURIComponent(a).replace(/%28/g,"(").replace(/%29/g,")").replace(/%2C/g,",").replace(/%27/g,"'").replace(/%40/g,"@"),s=[];e.select?.length&&s.push(`$select=${e.select.join(",")}`),e.filter&&s.push(`$filter=${n(e.filter)}`),e.orderby&&s.push(`$orderby=${n(e.orderby)}`),e.top&&s.push(`$top=${e.top}`),e.expand&&s.push(`$expand=${e.expand}`),e.count&&s.push("$count=true"),e.apply&&s.push(`$apply=${n(e.apply)}`);let i=`${t}${s.length?"?"+s.join("&"):""}`,r=e.formattedValues?{headers:{Prefer:'odata.include-annotations="OData.Community.Display.V1.FormattedValue"'}}:void 0;return this.requestWithRetry(()=>this.http.get(i,r).then(a=>a.data))}async executeFetchXml(t,e,n){let s=encodeURIComponent(e),i=n?{headers:{Prefer:'odata.include-annotations="OData.Community.Display.V1.FormattedValue"'}}:void 0;return this.requestWithRetry(()=>this.http.get(`${t}?fetchXml=${s}`,i).then(r=>r.data))}async getRecord(t,e,n,s){let i=[];n?.length&&i.push(`$select=${n.join(",")}`),s&&i.push(`$expand=${s}`);let r=i.length?`?${i.join("&")}`:"";return this.requestWithRetry(async()=>{let a=await this.http.get(`${t}(${e})${r}`,{headers:{Prefer:'odata.include-annotations="*"'}}),u=a.headers["odata-etag"]??a.data["@odata.etag"]??null;return{record:a.data,etag:u}})}async createRecord(t,e){return this.requestWithRetry(async()=>{let n=await this.http.post(t,e,{headers:{Prefer:"return=representation"}}),i=n.headers["odata-entityid"]?.match(/\(([^)]+)\)/)?.[1];if(i)return i;let r=n.data,a=r["@odata.id"]?.match(/\(([^)]+)\)/)?.[1];if(a)return a;let u=q[t]??t.replace(/s$/,"")+"id",c=r[u];return c||(n.headers.location?.match(/\(([^)]+)\)/)?.[1]??"")})}async updateRecord(t,e,n,s){await this.requestWithRetry(()=>this.http.patch(`${t}(${e})`,n,{headers:{"If-Match":s??"*"}}))}async deleteRecord(t,e){await this.requestWithRetry(()=>this.http.delete(`${t}(${e})`))}async upsertRecord(t,e,n,s,i="upsert",r){return this.requestWithRetry(async()=>{let a=r?`${t}(${r})`:`${t}(${l(e)}='${l(n)}')`,u={Prefer:"return=representation"};i==="createOnly"&&(u["If-None-Match"]="*"),i==="updateOnly"&&(u["If-Match"]="*");try{let c=await this.http.put(a,s,{headers:u}),o=c.status===201?"created":"updated",p=c.headers["odata-entityid"]?.match(/\(([^)]+)\)/)?.[1],m=c.data,g=q[t]??t.replace(/s$/,"")+"id",f=p??m?.[g]??n;return{operation:o,id:f}}catch(c){if(c instanceof y&&c.status===412){if(i==="createOnly")throw new Error("Record already exists");if(i==="updateOnly")throw new Error("Record not found")}throw c}})}async associate(t,e,n,s,i){let r=`${this.authProvider.environmentUrl}/api/data/v${P}/${s}(${i})`;await this.requestWithRetry(()=>this.http.post(`${t}(${e})/${n}/$ref`,{"@odata.id":r}))}async disassociate(t,e,n,s,i){let r=s?`?$id=${this.authProvider.environmentUrl}/api/data/v${P}/${i??t}(${s})`:"";await this.requestWithRetry(()=>this.http.delete(`${t}(${e})/${n}/$ref${r}`))}};var w=class extends ${async executeAction(t,e={}){return this.requestWithRetry(()=>this.http.post(t,e).then(n=>n.data))}async executeFunction(t,e={}){let n=Object.entries(e).map(([i,r])=>`${l(i)}='${l(r)}'`).join(","),s=n?`${t}(${n})`:`${t}()`;return this.requestWithRetry(()=>this.http.get(s).then(i=>i.data))}async executeBoundAction(t,e,n,s={}){return this.requestWithRetry(()=>this.http.post(`${t}(${e})/Microsoft.Dynamics.CRM.${n}`,s).then(i=>i.data))}};var b=class extends w{async listDependencies(t,e){return this.requestWithRetry(()=>this.http.get(`RetrieveDependenciesForDelete(ComponentType=${t},ObjectId=${e})`).then(n=>n.data.value))}async listTableDependencies(t,e){let n={0:"Workflow",1:"Dialog",2:"BusinessRule",3:"Action",4:"BusinessProcessFlow",5:"Flow"},s={0:"Draft",1:"Active",2:"Inactive"},r=(await this.requestWithRetry(()=>this.http.get(`workflows?$filter=primaryentity eq '${l(t)}' and statecode ne 2&$select=name,workflowid,statecode,category,triggeroncreate,triggerondelete,triggeronupdateattributelist`).then(o=>o.data))).value.map(o=>{let d=[];return o.triggeroncreate&&d.push("Create"),o.triggerondelete&&d.push("Delete"),o.triggeronupdateattributelist&&d.push("Update"),{componentType:n[o.category]??`Category${o.category}`,name:o.name,id:o.workflowid,state:s[o.statecode]??`State${o.statecode}`,triggerEvent:d.length?d.join(","):null,solutionName:null}}),a=e?.length?r.filter(o=>e.includes(o.componentType)):r,c=e?.some(o=>o==="Plugin"||o==="CustomAPI")?"Plugin and CustomAPI types require additional SDK message queries and are not yet implemented. Results show Workflow/BusinessRule/Flow/Action dependencies only.":null;return{tableName:t,dependencies:a,count:a.length,warning:c}}async listGlobalOptionSets(){return this.requestWithRetry(()=>this.http.get("GlobalOptionSetDefinitions").then(t=>t.data.value))}async getOptionSet(t){return this.requestWithRetry(()=>this.http.get(`GlobalOptionSetDefinitions(Name='${l(t)}')`).then(e=>e.data))}async getAttributeOptionSet(t,e){let n=["PicklistAttributeMetadata","StatusAttributeMetadata","StateAttributeMetadata"];for(let s of n)try{let i=`EntityDefinitions(LogicalName='${l(t)}')/Attributes(LogicalName='${l(e)}')/Microsoft.Dynamics.CRM.${s}?$select=LogicalName,DisplayName&$expand=OptionSet`,c=((await this.requestWithRetry(()=>this.http.get(i).then(o=>o.data))).OptionSet?.Options??[]).map(o=>({label:o.Label?.UserLocalizedLabel?.Label??"",value:o.Value}));return{entityLogicalName:t,attributeLogicalName:e,attributeType:s.replace("AttributeMetadata",""),options:c}}catch{continue}throw new Error(`Attribute '${e}' on entity '${t}' is not a Picklist, Status, or State attribute, or does not exist.`)}async getEntityKeys(t){return this.requestWithRetry(async()=>(await this.http.get(`EntityDefinitions(LogicalName='${l(t)}')/Keys?$select=SchemaName,LogicalName,KeyAttributes,IsCustomizable,EntityKeyIndexStatus`)).data.value.map(n=>({schemaName:n.SchemaName,logicalName:n.LogicalName,keyAttributes:n.KeyAttributes,isCustomizable:n.IsCustomizable?.Value??!1,indexStatus:n.EntityKeyIndexStatus})))}async updateEntityDefinition(t,e){await this.requestWithRetry(()=>this.http.patch(`EntityDefinitions(LogicalName='${l(t)}')`,e,{headers:{"If-Match":"*"}}))}async createAttribute(t,e){return this.requestWithRetry(async()=>(await this.http.post(`EntityDefinitions(LogicalName='${l(t)}')/Attributes`,e,{headers:{Prefer:"return=representation"}})).data.MetadataId??"")}async updateAttribute(t,e,n){await this.requestWithRetry(()=>this.http.put(`EntityDefinitions(LogicalName='${l(t)}')/Attributes(LogicalName='${l(e)}')`,n))}async deleteAttribute(t,e){await this.requestWithRetry(()=>this.http.delete(`EntityDefinitions(LogicalName='${l(t)}')/Attributes(LogicalName='${l(e)}')`))}};var T=class extends b{async batchExecute(t,e=!1){let n=`batch_${Date.now()}`,s="";if(e){let r=`changeset_${Date.now()+1}`,a=t.filter(c=>c.method==="GET"),u=t.filter(c=>c.method!=="GET");for(let c of a)s+=`--${n}
+`,s+=`Content-Type: application/http
+`,s+=`Content-Transfer-Encoding: binary
+
+`,s+=`${c.method} ${this.http.baseURL}${c.url} HTTP/1.1
+`,s+=`Accept: application/json
+
+
+`;if(u.length>0){s+=`--${n}
+`,s+=`Content-Type: multipart/mixed; boundary=${r}
+
+`;let c=1;for(let o of u)s+=`--${r}
+`,s+=`Content-Type: application/http
+`,s+=`Content-Transfer-Encoding: binary
+`,s+=`Content-ID: ${o.contentId??c++}
+
+`,s+=`${o.method} ${this.http.baseURL}${o.url} HTTP/1.1
+`,s+=`Content-Type: application/json
+
+`,o.body&&(s+=JSON.stringify(o.body)),s+=`
+
+`;s+=`--${r}--
+`}}else t.forEach(r=>{s+=`--${n}
+`,s+=`Content-Type: application/http
+`,s+=`Content-Transfer-Encoding: binary
+
+`,s+=`${r.method} ${this.http.baseURL}${r.url} HTTP/1.1
+`,s+=`Content-Type: application/json
+
+`,r.body&&(s+=JSON.stringify(r.body)),s+=`
+`});s+=`--${n}--`;let i=await this.requestWithRetry(()=>this.http.post("$batch",s,{headers:{"Content-Type":`multipart/mixed;boundary=${n}`},responseType:"text"}));try{let a=(i.headers["content-type"]??"").match(/boundary=(?:"([^"]+)"|([^;"\s]+))/),u=a?.[1]??a?.[2];return u?O(i.data,u):(process.stderr.write(`[batchExecute] No multipart boundary in response Content-Type; returning raw data.
+`),[i.data])}catch(r){return process.stderr.write(`[batchExecute] Failed to parse multipart response; returning raw data. ${String(r)}
+`),[i.data]}}};var x={1:"Entity",2:"Attribute",3:"Relationship",9:"OptionSet",29:"Workflow",61:"SystemForm",71:"SiteMap",90:"PluginAssembly",92:"PluginType",97:"WebResource",95:"ServiceEndpoint",79:"ConnectionRole"};function k(h){return h.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}var E=class extends T{async executeBoundFunction(t,e,n,s={}){let i=Object.entries(s).map(([a,u])=>`${l(a)}='${l(u)}'`).join(","),r=`${t}(${e})/${n}(${i})`;return this.requestWithRetry(()=>this.http.get(r).then(a=>a.data))}async queryWithPaging(t,e={}){let n=Math.min(e.maxTotal??5e3,5e4),s=[],i=0,r={};e.select!==void 0&&(r.select=e.select),e.filter!==void 0&&(r.filter=e.filter),e.orderby!==void 0&&(r.orderby=e.orderby),e.expand!==void 0&&(r.expand=e.expand);let a=await this.query(t,r);for(s.push(...a.value),i++;a["@odata.nextLink"]&&s.length<n;){let c=a["@odata.nextLink"];a=await this.requestWithRetry(()=>this.http.get(c).then(o=>o.data)),s.push(...a.value),i++}let u=s.slice(0,n);return{records:u,totalRetrieved:u.length,pageCount:i}}async getChangedRecords(t,e,n){let s,i={};if(e===null){let p=n?.length?`?$select=${n.join(",")}`:"";s=`${t}${p}`,i.Prefer="odata.track-changes"}else{let p=n?.length?`&$select=${n.join(",")}`:"";s=`${t}?$deltatoken=${e}${p}`}let r=await this.requestWithRetry(()=>this.http.get(s,{headers:i}).then(p=>p.data)),a=r.value??[],u=[],c=[];for(let p of a)if("@removed"in p){let m=String(p["@id"]??""),g=m.match(/\(([^)]+)\)$/);c.push({id:g?g[1]:m})}else u.push(p);let o=r["@odata.deltaLink"],d=null;if(o){let p=o.match(/\$deltatoken=([^&]+)/);d=p?decodeURIComponent(p[1]):null}return{newAndModified:u,deleted:c,nextDeltaToken:d}}async getSolutionComponents(t,e,n=200){return this.requestWithRetry(async()=>{let i=(await this.http.get(`solutions?$filter=uniquename eq '${l(t)}'&$select=solutionid,uniquename,friendlyname,version&$top=1`)).data.value;if(!i.length)throw new Error(`Solution '${t}' not found`);let r=i[0],a=r.solutionid,u=`_solutionid_value eq ${a}`;e!==void 0&&(u+=` and componenttype eq ${e}`);let o=(await this.http.get(`solutioncomponents?$filter=${u}&$select=componenttype,objectid&$top=${n}&$orderby=componenttype`)).data.value.map(d=>({componentType:d.componenttype,componentTypeName:x[d.componenttype]??`Type${d.componenttype}`,objectId:d.objectid}));return{solutionName:r.uniquename,solutionId:a,friendlyName:r.friendlyname,version:r.version,components:o,count:o.length}})}async publishCustomizations(t){return this.requestWithRetry(async()=>{if(!(t&&((t.entities?.length??0)>0||(t.webResources?.length??0)>0||(t.optionSets?.length??0)>0)))return await this.http.post("PublishAllXml",{},{timeoutMs:12e4}),{published:!0,message:"All customizations published successfully"};let n="<importexportxml>";return t.entities?.length&&(n+="<entities>"+t.entities.map(s=>`<entity>${k(s)}</entity>`).join("")+"</entities>"),t.webResources?.length&&(n+="<webresources>"+t.webResources.map(s=>`<webresource>${k(s)}</webresource>`).join("")+"</webresources>"),t.optionSets?.length&&(n+="<optionsets>"+t.optionSets.map(s=>`<optionset>${k(s)}</optionset>`).join("")+"</optionsets>"),n+="</importexportxml>",await this.http.post("PublishXml",{ParameterXml:n},{timeoutMs:12e4}),{published:!0,message:"Selected customizations published successfully"}})}async listDataverseWorkflows(t){return this.requestWithRetry(async()=>{let e=[];t.category!==void 0&&e.push(`category eq ${t.category}`),t.nameContains&&e.push(`contains(name,'${l(t.nameContains)}')`);let n=`workflows?$select=workflowid,name,description,category,statecode,statuscode,type,modifiedon&$orderby=name asc&$top=${t.top??50}`;return e.length>0&&(n+=`&$filter=${e.join(" and ")}`),(await this.http.get(n)).data.value??[]})}async getDataverseWorkflow(t){return this.requestWithRetry(()=>this.http.get(`workflows(${t})?$select=workflowid,name,description,category,statecode,statuscode,type,modifiedon`).then(e=>e.data))}};export{l as a,E as b};

package/dist/chunk-PAX4NW5B.js

@@ -0,0 +1 @@
+import{a as r}from"./chunk-24RDOMG4.js";function i(e){return new r(e.environmentUrl)}export{i as a};

package/dist/chunk-SUDI4JM6.js

@@ -0,0 +1,3 @@
+import{readFileSync as v,existsSync as f}from"fs";import{join as u}from"path";import{homedir as g}from"os";import{z as t}from"zod";var c=t.object({environmentUrl:t.string().url("Must be a valid Dataverse environment URL").refine(e=>e.startsWith("https://"),{message:"Dataverse environment URL must use HTTPS"}).refine(e=>{try{return new URL(e).hostname.toLowerCase().endsWith(".dynamics.com")}catch{return!1}},{message:"environmentUrl must be a *.dynamics.com host"}),requestTimeoutMs:t.number().positive().default(3e4),maxRetries:t.number().min(0).max(10).default(3)});var p="config.json";function S(){let e=u(g(),".mcp-dataverse",p),o=process.env.MCP_CONFIG_PATH??(f(e)?e:u(process.cwd(),p)),n={};if(f(o)){let r=v(o,"utf-8");try{n=JSON.parse(r)}catch{throw new Error(`Invalid JSON in ${o}. Check for syntax errors (trailing commas, missing quotes).`)}}let i=process.env.DATAVERSE_ENV_URL??process.env.environmentUrl;i&&(n.environmentUrl=i);let a=process.env.REQUEST_TIMEOUT_MS??process.env.requestTimeoutMs;a&&(n.requestTimeoutMs=Number(a));let m=process.env.MAX_RETRIES??process.env.maxRetries;m&&(n.maxRetries=Number(m));let s=c.safeParse(n);if(!s.success)throw new Error(`Invalid configuration:
+${s.error.issues.map(r=>`  - ${r.path.join(".")}: ${r.message}`).join(`
+`)}`);return s.data}export{S as a};

package/dist/config.loader-VTIKUDN7.js

@@ -0,0 +1 @@
+import{a}from"./chunk-SUDI4JM6.js";export{a as loadConfig};

package/dist/dataverse-client-advanced-T5ZJMRLK.js

@@ -0,0 +1 @@
+import{b as a}from"./chunk-OXKMMPM3.js";export{a as DataverseAdvancedClient};

package/dist/doctor.js

@@ -1,103 +1,3 @@
 #!/usr/bin/env node
-/**
- * Diagnostic CLI command for mcp-dataverse.
- * Usage: npx mcp-dataverse doctor
- */
-export async function runDoctor() {
-    const out = (msg) => process.stdout.write(msg + "\n");
-    const ok = (msg) => out(`  ✅ ${msg}`);
-    const fail = (msg) => out(`  ❌ ${msg}`);
-    out("");
-    out("🏥 mcp-dataverse doctor");
-    out("─".repeat(50));
-    out("");
-    let allPassed = true;
-    // 1. Node.js version check
-    out("📋 Environment");
-    const nodeVersion = process.version;
-    const major = parseInt(nodeVersion.slice(1).split(".")[0], 10);
-    if (major >= 20) {
-        ok(`Node.js ${nodeVersion}`);
-    }
-    else {
-        fail(`Node.js ${nodeVersion} — requires v20+`);
-        allPassed = false;
-    }
-    out("");
-    // 2. Configuration check
-    out("⚙️  Configuration");
-    try {
-        const { loadConfig } = await import("./config/config.loader.js");
-        const config = loadConfig();
-        ok(`Environment URL: ${config.environmentUrl}`);
-        ok(`Timeout: ${config.requestTimeoutMs}ms, Retries: ${config.maxRetries}`);
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        fail(`Configuration error: ${msg}`);
-        allPassed = false;
-        // Can't proceed without config
-        out("");
-        out(allPassed ? "✅ All checks passed!" : "❌ Some checks failed.");
-        process.exit(allPassed ? 0 : 1);
-    }
-    out("");
-    // 3. Authentication check
-    out("🔑 Authentication");
-    try {
-        const { loadConfig } = await import("./config/config.loader.js");
-        const config = loadConfig();
-        const { createAuthProvider } = await import("./auth/auth-provider.factory.js");
-        const authProvider = createAuthProvider(config);
-        const token = await authProvider.getToken();
-        if (token) {
-            ok("Token acquired successfully");
-            const parts = token.split(".");
-            if (parts.length === 3) {
-                ok("Valid JWT token format");
-            }
-        }
-        else {
-            fail("No token returned");
-            allPassed = false;
-        }
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        fail(`Auth failed: ${msg}`);
-        allPassed = false;
-    }
-    out("");
-    // 4. API Connectivity (WhoAmI)
-    out("🌐 Dataverse API");
-    try {
-        const { loadConfig } = await import("./config/config.loader.js");
-        const config = loadConfig();
-        const { createAuthProvider } = await import("./auth/auth-provider.factory.js");
-        const { DataverseAdvancedClient } = await import("./dataverse/dataverse-client-advanced.js");
-        const authProvider = createAuthProvider(config);
-        const client = new DataverseAdvancedClient(authProvider, config.maxRetries, config.requestTimeoutMs);
-        const result = await client.whoAmI();
-        ok(`Organization: ${result.OrganizationName || "N/A"}`);
-        ok(`User ID: ${result.UserId || "N/A"}`);
-        ok(`Business Unit: ${result.BusinessUnitId || "N/A"}`);
-        ok(`Environment: ${result.EnvironmentUrl || config.environmentUrl}`);
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        fail(`API call failed: ${msg}`);
-        allPassed = false;
-    }
-    out("");
-    // Summary
-    out("─".repeat(50));
-    if (allPassed) {
-        out("✅ All checks passed! Your mcp-dataverse setup is healthy.");
-    }
-    else {
-        out("❌ Some checks failed. Review the errors above.");
-    }
-    out("");
-    process.exit(allPassed ? 0 : 1);
-}
-//# sourceMappingURL=doctor.js.map
+async function f(){let t=e=>process.stdout.write(e+`
+`),o=e=>t(`  \u2705 ${e}`),n=e=>t(`  \u274C ${e}`);t(""),t("\u{1F3E5} mcp-dataverse doctor"),t("\u2500".repeat(50)),t("");let r=!0;t("\u{1F4CB} Environment");let c=process.version;parseInt(c.slice(1).split(".")[0],10)>=20?o(`Node.js ${c}`):(n(`Node.js ${c} \u2014 requires v20+`),r=!1),t(""),t("\u2699\uFE0F  Configuration");try{let{loadConfig:e}=await import("./config.loader-VTIKUDN7.js"),s=e();o(`Environment URL: ${s.environmentUrl}`),o(`Timeout: ${s.requestTimeoutMs}ms, Retries: ${s.maxRetries}`)}catch(e){let s=e instanceof Error?e.message:String(e);n(`Configuration error: ${s}`),r=!1,t(""),t(r?"\u2705 All checks passed!":"\u274C Some checks failed."),process.exit(r?0:1)}t(""),t("\u{1F511} Authentication");try{let{loadConfig:e}=await import("./config.loader-VTIKUDN7.js"),s=e(),{createAuthProvider:l}=await import("./auth-provider.factory-MSMLSOX3.js"),i=await l(s).getToken();i?(o("Token acquired successfully"),i.split(".").length===3&&o("Valid JWT token format")):(n("No token returned"),r=!1)}catch(e){let s=e instanceof Error?e.message:String(e);n(`Auth failed: ${s}`),r=!1}t(""),t("\u{1F310} Dataverse API");try{let{loadConfig:e}=await import("./config.loader-VTIKUDN7.js"),s=e(),{createAuthProvider:l}=await import("./auth-provider.factory-MSMLSOX3.js"),{DataverseAdvancedClient:m}=await import("./dataverse-client-advanced-T5ZJMRLK.js"),i=l(s),a=await new m(i,s.maxRetries,s.requestTimeoutMs).whoAmI();o(`Organization: ${a.OrganizationName||"N/A"}`),o(`User ID: ${a.UserId||"N/A"}`),o(`Business Unit: ${a.BusinessUnitId||"N/A"}`),o(`Environment: ${a.EnvironmentUrl||s.environmentUrl}`)}catch(e){let s=e instanceof Error?e.message:String(e);n(`API call failed: ${s}`),r=!1}t(""),t("\u2500".repeat(50)),t(r?"\u2705 All checks passed! Your mcp-dataverse setup is healthy.":"\u274C Some checks failed. Review the errors above."),t(""),process.exit(r?0:1)}export{f as runDoctor};

package/dist/http-server.js

@@ -1,61 +1,3 @@
-import { createServer } from "http";
-import { randomUUID } from "crypto";
-import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
-export async function startHttpTransport(server, port, version, toolCount) {
-    const transport = new StreamableHTTPServerTransport({
-        sessionIdGenerator: () => randomUUID(),
-        enableJsonResponse: true,
-    });
-    await server.connect(transport);
-    const httpServer = createServer(async (req, res) => {
-        // CORS headers for browser-based clients
-        res.setHeader("Access-Control-Allow-Origin", "*");
-        res.setHeader("Access-Control-Allow-Methods", "GET, POST, DELETE, OPTIONS");
-        res.setHeader("Access-Control-Allow-Headers", "Content-Type, mcp-session-id");
-        if (req.method === "OPTIONS") {
-            res.writeHead(204);
-            res.end();
-            return;
-        }
-        const url = new URL(req.url ?? "/", `http://localhost:${port}`);
-        if (url.pathname === "/health" && req.method === "GET") {
-            res.writeHead(200, { "Content-Type": "application/json" });
-            res.end(JSON.stringify({ status: "ok", version, tools: toolCount }));
-            return;
-        }
-        if (url.pathname === "/mcp") {
-            try {
-                await transport.handleRequest(req, res);
-            }
-            catch {
-                if (!res.headersSent) {
-                    res.writeHead(500, { "Content-Type": "application/json" });
-                    res.end(JSON.stringify({ error: "Internal server error" }));
-                }
-            }
-            return;
-        }
-        res.writeHead(404, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ error: "Not found" }));
-    });
-    await new Promise((resolve) => {
-        httpServer.listen(port, () => {
-            process.stderr.write(`MCP Dataverse HTTP server listening on http://localhost:${port}/mcp\n`);
-            resolve();
-        });
-    });
-    // Keep the process alive; clean shutdown on signals
-    const shutdown = async () => {
-        process.stderr.write("Shutting down HTTP server...\n");
-        await transport.close();
-        httpServer.close();
-        process.exit(0);
-    };
-    process.on("SIGINT", shutdown);
-    process.on("SIGTERM", shutdown);
-    // Block until server closes
-    await new Promise((resolve) => {
-        httpServer.on("close", resolve);
-    });
-}
-//# sourceMappingURL=http-server.js.map
+import{createServer as m}from"http";import{randomUUID as f}from"crypto";import{StreamableHTTPServerTransport as T}from"@modelcontextprotocol/sdk/server/streamableHttp.js";async function u(c,o,p,l){let t=new Map,r=m(async(n,s)=>{if(s.setHeader("Access-Control-Allow-Origin","*"),s.setHeader("Access-Control-Allow-Methods","GET, POST, DELETE, OPTIONS"),s.setHeader("Access-Control-Allow-Headers","Content-Type, mcp-session-id"),n.method==="OPTIONS"){s.writeHead(204),s.end();return}let a=new URL(n.url??"/",`http://localhost:${o}`);if(a.pathname==="/health"&&n.method==="GET"){s.writeHead(200,{"Content-Type":"application/json"}),s.end(JSON.stringify({status:"ok",version:p,tools:l}));return}if(a.pathname==="/mcp"){try{let d=n.headers["mcp-session-id"];if(d){let e=t.get(d);if(!e){s.writeHead(404,{"Content-Type":"application/json"}),s.end(JSON.stringify({error:"Session not found. Please reinitialize."}));return}await e.handleRequest(n,s)}else{let e=new T({sessionIdGenerator:()=>f(),enableJsonResponse:!0});e.sessionId&&(t.set(e.sessionId,e),e.onclose=()=>{e.sessionId&&t.delete(e.sessionId)}),await c().connect(e),await e.handleRequest(n,s),e.sessionId&&(t.has(e.sessionId)||(t.set(e.sessionId,e),e.onclose=()=>{e.sessionId&&t.delete(e.sessionId)}))}}catch{s.headersSent||(s.writeHead(500,{"Content-Type":"application/json"}),s.end(JSON.stringify({error:"Internal server error"})))}return}s.writeHead(404,{"Content-Type":"application/json"}),s.end(JSON.stringify({error:"Not found"}))});await new Promise(n=>{r.listen(o,()=>{process.stderr.write(`MCP Dataverse HTTP server listening on http://localhost:${o}/mcp
+`),n()})});let i=async()=>{process.stderr.write(`Shutting down HTTP server...
+`);for(let n of t.values())await n.close();r.close(),process.exit(0)};process.on("SIGINT",i),process.on("SIGTERM",i),await new Promise(n=>{r.on("close",n)})}export{u as startHttpTransport};