obsidian-mcp-server 3.2.8 → 3.2.10

package/AGENTS.md

@@ -1,10 +1,10 @@
 # Agent Protocol
 
 **Server:** obsidian-mcp-server
-**Version:** 3.2.8
-**Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.10.9`
-**Engines:** Bun ≥1.3.11, Node ≥24.0.0
-**MCP SDK:** `@modelcontextprotocol/sdk` ^1.29.0
+**Version:** 3.2.10
+**Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.11.1`
+**Engines:** Bun ≥1.3.0, Node ≥24.0.0
+**MCP SDK:** `@modelcontextprotocol/sdk` ^1.30.0
 **Zod:** ^4.4.3
 
 > **Read the framework docs first:** `node_modules/@cyanheads/mcp-ts-core/CLAUDE.md` contains the full API reference — builders, Context, error codes, exports, patterns. This file covers server-specific conventions only.
@@ -296,7 +296,6 @@ Available skills:
 | `security-pass` | Audit server for MCP-flavored security gaps: output injection, scope blast radius, input sinks, tenant isolation |
 | `tool-defs-analysis` | Read-only audit of MCP definition language across the surface — voice, leaks, defaults, recovery hints, output descriptions |
 | `code-simplifier` | Post-session cleanup against `git diff` — modernize syntax, consolidate duplication, align with the codebase |
-| `devcheck` | Lint, format, typecheck, audit |
 | `polish-docs-meta` | Finalize docs, README, metadata, and agent protocol for shipping |
 | `git-wrapup` | Land working-tree changes as a versioned commit + annotated tag — version bump, changelog, verify, tag. Local only. |
 | `release-and-publish` | Ship a release end-to-end across npm, MCP Registry, GitHub Releases (`.mcpb`), and GHCR |
@@ -304,12 +303,14 @@ Available skills:
 | `orchestrations` | Chain task skills into a gated multi-phase pipeline — build-out, QA-fix, update-ship — when you can spawn sub-agents |
 | `report-issue-framework` | File a bug or feature request against `@cyanheads/mcp-ts-core` via `gh` CLI |
 | `report-issue-local` | File a bug or feature request against this server's own repo via `gh` CLI |
+| `techniques` | Catalog of response/data-shaping techniques — overflow handling, payload shaping, retrieval patterns |
 | `api-auth` | Auth modes, scopes, JWT/OAuth |
 | `api-canvas` | DataCanvas: register tabular data, run SQL, export, plus the `spillover()` helper for big result sets — Tier 3 opt-in |
 | `api-config` | AppConfig, parseConfig, env vars |
 | `api-context` | Context interface, logger, state, progress |
 | `api-errors` | McpError, JsonRpcErrorCode, error patterns |
 | `api-linter` | Definition linter rule catalog — invoked by `bun run lint:mcp` and `devcheck` |
+| `api-mirror` | MirrorService: persistent self-refreshing local mirror (embedded SQLite + FTS5) of a bulk upstream dataset — Tier 3 opt-in |
 | `api-services` | LLM, Speech, Graph services |
 | `api-telemetry` | OTel catalog: spans, metrics, completion logs, env config, cardinality rules |
 | `api-testing` | createMockContext, test patterns |
@@ -324,7 +325,7 @@ When you complete a skill's checklist, check the boxes and add a completion time
 
 ## Commands
 
-**Runtime:** Scripts use `tsx` — both `bun run <cmd>` and `npm run <cmd>` work. `bun` is preferred (faster startup, native TS).
+**Runtime:** Scripts use Bun's native TypeScript execution — `bun run <cmd>` is the standard invocation. `npm run <cmd>` also works (npm delegates to bun).
 
 | Command | Purpose |
 |:--------|:--------|
@@ -340,7 +341,7 @@ When you complete a skill's checklist, check the boxes and add a completion time
 | `bun run lint:mcp` | Validate MCP definitions against the linter rules |
 | `bun run lint:packaging` | Validate env var alignment between `manifest.json` and `server.json` |
 | `bun run bundle` | Build, pack, and clean a `.mcpb` for one-click Claude Desktop install |
-| `bun run test` | Run Vitest tests |
+| `bun run test` | Run tests (Vitest — use `bun run test`, not `bun test`) |
 | `bun run start:stdio` | Production mode (stdio) — requires `bun run build` first |
 | `bun run start:http` | Production mode (HTTP) — requires `bun run build` first |
 | `bun run changelog:build` | Regenerate `CHANGELOG.md` rollup from `changelog/<minor>.x/*.md` |
@@ -350,7 +351,7 @@ When you complete a skill's checklist, check the boxes and add a completion time
 
 ## Bundling
 
-`bun run bundle` produces a `.mcpb` extension bundle for one-click install in Claude Desktop. The pack step is followed by `scripts/clean-mcpb.ts`, which prunes dev dependencies (`mcpb clean`) and strips dependency-shipped agent docs (`node_modules/**` `skills/`, `.claude/`, `.agents/`, `SKILL.md`) that root-anchored `.mcpbignore` patterns cannot reach. MCPB is stdio-only — HTTP deployments are unaffected. Delete `manifest.json` and `.mcpbignore` if not shipping MCPB bundles; `lint:packaging` skips cleanly.
+`bun run bundle` produces a `.mcpb` extension bundle for one-click install in Claude Desktop. The pack step is followed by `scripts/clean-mcpb.ts`, which prunes dev dependencies (`mcpb clean`) and strips two classes of `node_modules/**` content that root-anchored `.mcpbignore` patterns cannot reach: dependency-shipped agent docs (`skills/`, `.claude/`, `.agents/`, `SKILL.md`) and platform-specific native bindings, which would otherwise lock the bundle to the platform it was packed on. MCPB is stdio-only — HTTP deployments are unaffected. Delete `manifest.json` and `.mcpbignore` if not shipping MCPB bundles; `lint:packaging` skips cleanly.
 
 **Adding an env var requires both files:** `server.json` (`environmentVariables[]`) and `manifest.json` (`mcp_config.env` + `user_config`). `lint:packaging` (run by `devcheck`) verifies the env var names match.
 
@@ -364,16 +365,22 @@ Each per-version file opens with YAML frontmatter:
 
 ```markdown
 ---
-summary: One-line headline, ≤350 chars  # required — powers the rollup index
-breaking: false                          # optional — true flags breaking changes
-security: false                          # optional — true flags security fixes
+summary: "One-line headline, ≤350 chars"  # required — powers the rollup index
+breaking: false                            # optional — true flags breaking changes
+security: false                            # optional — true ONLY for a source-code security fix, never a dependency CVE bump
 ---
 
 # 0.1.0 — YYYY-MM-DD
 ...
 ```
 
-`breaking: true` renders a `· ⚠️ Breaking` badge — use it when consumers must update code on upgrade (signature changes, removed APIs, config renames). `security: true` renders a `· 🛡️ Security` badge and pairs with a `## Security` body section. When both are set, badges render `· ⚠️ Breaking · 🛡️ Security`.
+`breaking: true` renders a `· ⚠️ Breaking` badge — use it when consumers must update code on upgrade (signature changes, removed APIs, config renames). `security: true` renders a `· 🛡️ Security` badge and pairs with a `## Security` body section — set it only for a security fix in this server's *own source code*, never for a routine dependency or transitive CVE bump (record those under `## Dependencies`). When both are set, badges render `· ⚠️ Breaking · 🛡️ Security`.
+
+`agent-notes` is an optional free-form field for maintenance agents processing the release downstream. Content here won't appear in the rendered CHANGELOG — it's consumed by agents running the `maintenance` skill. Use it for adoption instructions that don't fit the human-facing sections: new files to create, fields to populate, one-time migration steps. Omit entirely when there's nothing to say.
+
+**Section order** (Keep a Changelog): Added, Changed, Deprecated, Removed, Fixed, Security. Include only sections with entries — don't ship empty headers.
+
+**Tag annotations** render as GitHub Release bodies via `--notes-from-tag`. They must be structured markdown — never a flat comma-separated string. Subject omits the version number (GitHub prepends it). See `changelog/template.md` for the full format reference.
 
 ---
 

package/CLAUDE.md

@@ -1,10 +1,10 @@
 # Agent Protocol
 
 **Server:** obsidian-mcp-server
-**Version:** 3.2.8
-**Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.10.9`
-**Engines:** Bun ≥1.3.11, Node ≥24.0.0
-**MCP SDK:** `@modelcontextprotocol/sdk` ^1.29.0
+**Version:** 3.2.10
+**Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.11.1`
+**Engines:** Bun ≥1.3.0, Node ≥24.0.0
+**MCP SDK:** `@modelcontextprotocol/sdk` ^1.30.0
 **Zod:** ^4.4.3
 
 > **Read the framework docs first:** `node_modules/@cyanheads/mcp-ts-core/CLAUDE.md` contains the full API reference — builders, Context, error codes, exports, patterns. This file covers server-specific conventions only.
@@ -296,7 +296,6 @@ Available skills:
 | `security-pass` | Audit server for MCP-flavored security gaps: output injection, scope blast radius, input sinks, tenant isolation |
 | `tool-defs-analysis` | Read-only audit of MCP definition language across the surface — voice, leaks, defaults, recovery hints, output descriptions |
 | `code-simplifier` | Post-session cleanup against `git diff` — modernize syntax, consolidate duplication, align with the codebase |
-| `devcheck` | Lint, format, typecheck, audit |
 | `polish-docs-meta` | Finalize docs, README, metadata, and agent protocol for shipping |
 | `git-wrapup` | Land working-tree changes as a versioned commit + annotated tag — version bump, changelog, verify, tag. Local only. |
 | `release-and-publish` | Ship a release end-to-end across npm, MCP Registry, GitHub Releases (`.mcpb`), and GHCR |
@@ -304,12 +303,14 @@ Available skills:
 | `orchestrations` | Chain task skills into a gated multi-phase pipeline — build-out, QA-fix, update-ship — when you can spawn sub-agents |
 | `report-issue-framework` | File a bug or feature request against `@cyanheads/mcp-ts-core` via `gh` CLI |
 | `report-issue-local` | File a bug or feature request against this server's own repo via `gh` CLI |
+| `techniques` | Catalog of response/data-shaping techniques — overflow handling, payload shaping, retrieval patterns |
 | `api-auth` | Auth modes, scopes, JWT/OAuth |
 | `api-canvas` | DataCanvas: register tabular data, run SQL, export, plus the `spillover()` helper for big result sets — Tier 3 opt-in |
 | `api-config` | AppConfig, parseConfig, env vars |
 | `api-context` | Context interface, logger, state, progress |
 | `api-errors` | McpError, JsonRpcErrorCode, error patterns |
 | `api-linter` | Definition linter rule catalog — invoked by `bun run lint:mcp` and `devcheck` |
+| `api-mirror` | MirrorService: persistent self-refreshing local mirror (embedded SQLite + FTS5) of a bulk upstream dataset — Tier 3 opt-in |
 | `api-services` | LLM, Speech, Graph services |
 | `api-telemetry` | OTel catalog: spans, metrics, completion logs, env config, cardinality rules |
 | `api-testing` | createMockContext, test patterns |
@@ -324,7 +325,7 @@ When you complete a skill's checklist, check the boxes and add a completion time
 
 ## Commands
 
-**Runtime:** Scripts use `tsx` — both `bun run <cmd>` and `npm run <cmd>` work. `bun` is preferred (faster startup, native TS).
+**Runtime:** Scripts use Bun's native TypeScript execution — `bun run <cmd>` is the standard invocation. `npm run <cmd>` also works (npm delegates to bun).
 
 | Command | Purpose |
 |:--------|:--------|
@@ -340,7 +341,7 @@ When you complete a skill's checklist, check the boxes and add a completion time
 | `bun run lint:mcp` | Validate MCP definitions against the linter rules |
 | `bun run lint:packaging` | Validate env var alignment between `manifest.json` and `server.json` |
 | `bun run bundle` | Build, pack, and clean a `.mcpb` for one-click Claude Desktop install |
-| `bun run test` | Run Vitest tests |
+| `bun run test` | Run tests (Vitest — use `bun run test`, not `bun test`) |
 | `bun run start:stdio` | Production mode (stdio) — requires `bun run build` first |
 | `bun run start:http` | Production mode (HTTP) — requires `bun run build` first |
 | `bun run changelog:build` | Regenerate `CHANGELOG.md` rollup from `changelog/<minor>.x/*.md` |
@@ -350,7 +351,7 @@ When you complete a skill's checklist, check the boxes and add a completion time
 
 ## Bundling
 
-`bun run bundle` produces a `.mcpb` extension bundle for one-click install in Claude Desktop. The pack step is followed by `scripts/clean-mcpb.ts`, which prunes dev dependencies (`mcpb clean`) and strips dependency-shipped agent docs (`node_modules/**` `skills/`, `.claude/`, `.agents/`, `SKILL.md`) that root-anchored `.mcpbignore` patterns cannot reach. MCPB is stdio-only — HTTP deployments are unaffected. Delete `manifest.json` and `.mcpbignore` if not shipping MCPB bundles; `lint:packaging` skips cleanly.
+`bun run bundle` produces a `.mcpb` extension bundle for one-click install in Claude Desktop. The pack step is followed by `scripts/clean-mcpb.ts`, which prunes dev dependencies (`mcpb clean`) and strips two classes of `node_modules/**` content that root-anchored `.mcpbignore` patterns cannot reach: dependency-shipped agent docs (`skills/`, `.claude/`, `.agents/`, `SKILL.md`) and platform-specific native bindings, which would otherwise lock the bundle to the platform it was packed on. MCPB is stdio-only — HTTP deployments are unaffected. Delete `manifest.json` and `.mcpbignore` if not shipping MCPB bundles; `lint:packaging` skips cleanly.
 
 **Adding an env var requires both files:** `server.json` (`environmentVariables[]`) and `manifest.json` (`mcp_config.env` + `user_config`). `lint:packaging` (run by `devcheck`) verifies the env var names match.
 
@@ -364,16 +365,22 @@ Each per-version file opens with YAML frontmatter:
 
 ```markdown
 ---
-summary: One-line headline, ≤350 chars  # required — powers the rollup index
-breaking: false                          # optional — true flags breaking changes
-security: false                          # optional — true flags security fixes
+summary: "One-line headline, ≤350 chars"  # required — powers the rollup index
+breaking: false                            # optional — true flags breaking changes
+security: false                            # optional — true ONLY for a source-code security fix, never a dependency CVE bump
 ---
 
 # 0.1.0 — YYYY-MM-DD
 ...
 ```
 
-`breaking: true` renders a `· ⚠️ Breaking` badge — use it when consumers must update code on upgrade (signature changes, removed APIs, config renames). `security: true` renders a `· 🛡️ Security` badge and pairs with a `## Security` body section. When both are set, badges render `· ⚠️ Breaking · 🛡️ Security`.
+`breaking: true` renders a `· ⚠️ Breaking` badge — use it when consumers must update code on upgrade (signature changes, removed APIs, config renames). `security: true` renders a `· 🛡️ Security` badge and pairs with a `## Security` body section — set it only for a security fix in this server's *own source code*, never for a routine dependency or transitive CVE bump (record those under `## Dependencies`). When both are set, badges render `· ⚠️ Breaking · 🛡️ Security`.
+
+`agent-notes` is an optional free-form field for maintenance agents processing the release downstream. Content here won't appear in the rendered CHANGELOG — it's consumed by agents running the `maintenance` skill. Use it for adoption instructions that don't fit the human-facing sections: new files to create, fields to populate, one-time migration steps. Omit entirely when there's nothing to say.
+
+**Section order** (Keep a Changelog): Added, Changed, Deprecated, Removed, Fixed, Security. Include only sections with entries — don't ship empty headers.
+
+**Tag annotations** render as GitHub Release bodies via `--notes-from-tag`. They must be structured markdown — never a flat comma-separated string. Subject omits the version number (GitHub prepends it). See `changelog/template.md` for the full format reference.
 
 ---
 

package/Dockerfile

@@ -4,15 +4,17 @@
 # This stage installs all dependencies (including dev), builds the TypeScript
 # source code into JavaScript, and prepares the production assets.
 # ==============================================================================
-FROM oven/bun:1.3 AS build
+FROM oven/bun:1.3.14 AS build
 
 WORKDIR /usr/src/app
 
 # Copy dependency manifests for optimized layer caching
 COPY package.json bun.lock ./
 
-# Install all dependencies (including dev dependencies for building)
-RUN bun install --frozen-lockfile
+# Install all dependencies (including dev dependencies for building).
+# The BuildKit cache mount persists Bun's global package cache across builds.
+RUN --mount=type=cache,target=/root/.bun/install/cache \
+    bun install --frozen-lockfile --ignore-scripts
 
 # Copy the rest of the source code
 COPY . .
@@ -28,7 +30,7 @@ RUN bun run build
 # application. It uses a slim base image and only includes production
 # dependencies and build artifacts.
 # ==============================================================================
-FROM oven/bun:1.3-slim AS production
+FROM oven/bun:1.3.14-slim AS production
 
 WORKDIR /usr/src/app
 
@@ -47,14 +49,16 @@ COPY package.json bun.lock ./
 
 # Install only production dependencies, ignoring any lifecycle scripts (like 'prepare')
 # that are not needed in the final production image.
-RUN bun install --production --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,target=/root/.bun/install/cache \
+    bun install --production --frozen-lockfile --ignore-scripts
 
 # Conditionally install OpenTelemetry optional peer dependencies (Tier 3).
 # These are not bundled by default to keep the base image lean. Enable at build time
 # with: docker build --build-arg OTEL_ENABLED=true
 ARG OTEL_ENABLED=true
-RUN if [ "$OTEL_ENABLED" = "true" ]; then \
-      bun add @hono/otel \
+RUN --mount=type=cache,target=/root/.bun/install/cache \
+    if [ "$OTEL_ENABLED" = "true" ]; then \
+      bun add --omit=dev --ignore-scripts @hono/otel \
         @opentelemetry/instrumentation-http \
         @opentelemetry/exporter-metrics-otlp-http \
         @opentelemetry/exporter-trace-otlp-http \

package/README.md

@@ -7,7 +7,7 @@
 
 <div align="center">
 
-[![Version](https://img.shields.io/badge/Version-3.2.8-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/obsidian-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/obsidian-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/obsidian-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^6.0.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.11-blueviolet.svg?style=flat-square)](https://bun.sh/)
+[![Version](https://img.shields.io/badge/Version-3.2.10-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/obsidian-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.30.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/obsidian-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/obsidian-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^7.0.2-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.0-blueviolet.svg?style=flat-square)](https://bun.sh/)
 
 </div>
 
@@ -98,6 +98,8 @@ Surgical edits at a single document target.
 - `operation: "replace"` swaps it out
 - Targets: heading path, block reference ID, or frontmatter field
 
+Heading targets accept either the full `Parent::Child` path or a bare leaf name. A bare leaf that matches exactly one heading is expanded to its full path before the write, and the response echoes the locator the edit landed on; a leaf matching several headings is rejected with `ambiguous_section`, whose error data lists the candidate paths. The same resolution applies to `obsidian_write_note` and `obsidian_append_to_note` with `section`.
+
 Use `obsidian_get_note` with `format: "document-map"` to discover what targets exist before patching.
 
 ---
@@ -252,8 +254,9 @@ MCP_TRANSPORT_TYPE=http OBSIDIAN_API_KEY=... bun run start:http
 
 ### Prerequisites
 
-- [Bun v1.3.11](https://bun.sh/) or higher (or Node.js v24+).
-- The [Obsidian Local REST API](https://github.com/coddingtonbear/obsidian-local-rest-api) plugin **v4.0.0 or later** installed and enabled in your vault. Generate an API key in **Settings → Community Plugins → Local REST API** and copy it into `OBSIDIAN_API_KEY`.
+- [Bun v1.3.0](https://bun.sh/) or higher (or Node.js v24+).
+- The [Obsidian Local REST API](https://github.com/coddingtonbear/obsidian-local-rest-api) plugin, **v4.0.0 through v5.x**, installed and enabled in your vault. Generate an API key in **Settings → Community Plugins → Local REST API** and copy it into `OBSIDIAN_API_KEY`. Plugin v6.0 removes the markdown-patch 1.x wire format this server pins for section-targeted writes and the document map.
+- Periodic-note targets (`target: { "type": "periodic" }`) additionally need plugin **v5.0.1 or earlier** — v5.0.2 removed the built-in `/periodic/` routes. Every other target type is unaffected.
 - This server defaults to `http://127.0.0.1:27123` for simplicity. Enable **"Non-encrypted (HTTP) Server"** in the plugin settings to use it. To use the always-on HTTPS port instead, set `OBSIDIAN_BASE_URL=https://127.0.0.1:27124`; the plugin's self-signed cert is handled by `OBSIDIAN_VERIFY_SSL=false` (the default).
 
 ### Installation

package/changelog/3.2.x/3.2.10.md

@@ -0,0 +1,47 @@
+---
+summary: "Markdown-Patch-Version: 1 pinned on every PATCH and document-map fetch, restoring section-targeted writes against Local REST API v5.x (#94); bare heading leaves resolve to a unique full path or reject as ambiguous_section (#75); bunfig.toml gains a 3-day release-age guard and Socket scanner; mcp-ts-core ^0.11.1"
+breaking: false
+security: true
+---
+
+# 3.2.10 — 2026-08-02
+
+## Added
+
+- **`ambiguous_section` error** on `obsidian_patch_note`, `obsidian_append_to_note`, and `obsidian_write_note` — a bare heading leaf matching several headings in a note is rejected with a `Conflict`, `error.data.candidates` listing every matching full path.
+- **`sectionTarget` output field** on `obsidian_append_to_note` and `obsidian_write_note`; `obsidian_patch_note`'s `section` output now echoes the resolved locator. All three surface where a bare leaf write actually landed.
+
+## Changed
+
+- **`ObsidianService.patchNote`** resolves a heading target against the note's document map before writing: an exact map entry is used as-is, a leaf matching exactly one heading expands to its full `Parent::Child` path, an unmatched leaf passes through untouched so `createTargetIfMissing` still creates it.
+- **README** documents the supported Local REST API plugin range (v4.0.0 through v5.x — v6.0 removes the markdown-patch 1.x format this server pins, tracked in #102) and that periodic-note targets additionally need plugin v5.0.1 or earlier (v5.0.2 removed the `/periodic/` routes).
+- **`.mcpbignore`-unreachable bundle strip** (`scripts/clean-mcpb.ts`, `scripts/lint-packaging.ts` check 8) now also removes platform-specific `@duckdb/node-bindings-*` native binaries, not just dependency-shipped agent docs — an unstripped binding locked a bundle to its build platform and could push it past the 25 MB registry cap (#274).
+- **`scripts/check-dependency-specifiers.ts`** now scans `overrides` for floating specifiers, alongside the existing four `package.json` dependency sections.
+- **`scripts/devcheck.ts`** Outdated check no longer flags a row held at its current version by `bunfig.toml`'s `minimumReleaseAge` guard, or a `peerDependencies` range (a floor, not a version to track).
+- **`.gitignore`** anchors `data/` to the repo root (`/data/`) so a nested `data/` directory elsewhere in the tree isn't inadvertently ignored.
+- **`package.json`** author field normalized to `Casey Hand <casey@caseyjhand.com> (https://caseyjhand.com)`.
+
+### Dependency bumps
+
+- `@cyanheads/mcp-ts-core` ^0.10.10 → ^0.11.1
+- `@modelcontextprotocol/sdk` (transitive) ^1.29.0 → ^1.30.0
+- `typescript` ^6.0.3 → ^7.0.2
+- `@biomejs/biome` ^2.5.1 → ^2.5.6
+- `undici` ^8.5.0 → ^8.9.0
+- `js-yaml` ^5.2.0 → ^5.2.2
+- `tsc-alias` ^1.8.17 → ^1.9.1
+- `@types/node` ^26.0.1 → ^26.1.2
+- `vitest` ^4.1.9 → ^4.1.10
+- `ignore` ^7.0.5 → ^7.0.6
+- `@socketsecurity/bun-security-scanner` ^1.1.2 (new dev dependency, backs the Socket scanner below)
+- `bun` packageManager 1.3.11 → 1.3.14; `engines.bun` floor relaxed `>=1.3.11` → `>=1.3.0`
+
+## Fixed
+
+- **Section-targeted writes against Local REST API v5.x** ([#94](https://github.com/cyanheads/obsidian-mcp-server/issues/94)) — `ObsidianService` now sends `Markdown-Patch-Version: 1` on every PATCH and on the document-map fetch. Plugin v5.0.0 made format 2.0 the default and rejects header-driven PATCH targeting outright without a pinned version; plugin v4.x only reads headers it knows by name, so the pin is inert there and one unconditional value covers v4.0.0 through v5.x.
+- **Bare heading-leaf writes reach the section a matching read would** ([#75](https://github.com/cyanheads/obsidian-mcp-server/issues/75)) — `obsidian_get_note` with `format: "section"` matches a heading leaf at any depth, but PATCH targeting wanted the full `Parent::Child` chain, so a write built from a read's locator could silently create a new top-level heading via `createTargetIfMissing` instead of touching the existing one. Resolution now runs before the write, not as a retry after failure.
+
+## Security
+
+- **`bunfig.toml` supply-chain guard** — `minimumReleaseAge = 259200` (3 days) blocks installing a package version published within the last 3 days, with `@cyanheads/mcp-ts-core` excluded for same-day framework adoption. Versions already in `bun.lock` are unaffected.
+- **Socket scanner** — `[install.security] scanner = "@socketsecurity/bun-security-scanner"` scans every package for malware, typosquats, and known CVEs before install.

package/changelog/3.2.x/3.2.9.md

@@ -0,0 +1,30 @@
+---
+summary: "ReDoS guards reject catastrophic-backtracking regex on obsidian_list_notes and obsidian_replace_in_note (#88); obsidian_manage_frontmatter / obsidian_manage_tags edits preserve comments, quoting, and plain dates (#89); tool description polish (#86); mcp-ts-core ^0.10.10"
+breaking: false
+security: true
+---
+
+# 3.2.9 — 2026-06-30
+
+## Changed
+
+- **Tool descriptions tightened** ([#86](https://github.com/cyanheads/obsidian-mcp-server/issues/86)) — `obsidian_patch_note` `applyIfContentPreexists` ("idempotent against retries", "Replace operations are never rejected") and `obsidian_search_notes` `query` / `logic` / `pathPrefix` wording (`pathPrefix` now states it filters after matching and does not narrow the search).
+- **`obsidian_get_note` `format()`** ([#86](https://github.com/cyanheads/obsidian-mcp-server/issues/86)) — the section line drops the `(valueText/valueJson)` suffix and labels the rendered body with `**Value:**`.
+
+### Dependency bumps
+
+- `@cyanheads/mcp-ts-core` ^0.10.9 → ^0.10.10
+- `js-yaml` ^4.2.0 → ^5.2.0
+- `@types/js-yaml` ^4.0.9 → removed (v5 ships its own types)
+- `yaml` → ^2.9.0 (new — backs the #89 fix)
+- `@biomejs/biome` ^2.5.0 → ^2.5.1
+- `@types/node` ^26.0.0 → ^26.0.1
+
+## Fixed
+
+- **Surgical frontmatter edits preserve formatting** ([#89](https://github.com/cyanheads/obsidian-mcp-server/issues/89)) — `obsidian_manage_frontmatter` key deletes and `obsidian_manage_tags` reconciles now parse the block with the `yaml` package's CST-backed `parseDocument` and edit nodes in place, instead of round-tripping through `js-yaml` `load`/`dump`. Comments, quoting, and scalar formatting on untouched keys survive verbatim — a plain `date: 2026-06-29` is no longer rewritten to an ISO timestamp.
+
+## Security
+
+- **ReDoS guard on user-supplied regex** ([#88](https://github.com/cyanheads/obsidian-mcp-server/issues/88)) — `obsidian_list_notes` (`nameRegex`, ≤256 chars) and `obsidian_replace_in_note` (`useRegex` search, ≤1024 chars) statically reject patterns that exceed the length cap or contain nested quantifiers (e.g. `(a+)+`) before compiling, throwing a `regex_unsafe` `ValidationError`. The shared `nameRegexSafetyIssue` helper gained a `maxLength` parameter so `obsidian_replace_in_note` rejects before the pattern runs over the note body.
+- **`bun.lock` refreshed** — `bun audit` reports clean.

package/changelog/template.md

@@ -15,9 +15,11 @@ summary: ""
 # usage. Flagged as `Breaking` in the rollup.
 breaking: false
 
-# Set `true` if this release contains any security fix. Pairs with the
-# `## Security` section below. Flagged as `Security` in the rollup so
-# users can triage upgrade urgency at a glance.
+# Set `true` ONLY for a security fix in THIS project's own source code — a
+# vulnerability or hardening in code you ship. A dependency or transitive CVE
+# bump is routine maintenance, NOT a security release: record it under
+# `## Dependencies` (with the advisory ID) and leave this `false`. When true,
+# pairs with the `## Security` section below and flags `Security` in the rollup.
 security: false
 
 # Optional free-form notes for maintenance agents processing this release.

package/dist/mcp-server/resources/definitions/index.d.ts

@@ -2,25 +2,7 @@
  * @fileoverview Resource registration barrel for obsidian-mcp-server.
  * @module mcp-server/resources/definitions/index
  */
-export declare const allResourceDefinitions: (import("@cyanheads/mcp-ts-core").ResourceDefinition<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
-    status: import("zod").ZodString;
-    service: import("zod").ZodString;
-    authenticated: import("zod").ZodBoolean;
-    versions: import("zod").ZodOptional<import("zod").ZodObject<{
-        obsidian: import("zod").ZodOptional<import("zod").ZodString>;
-        self: import("zod").ZodOptional<import("zod").ZodString>;
-    }, import("zod/v4/core").$strip>>;
-    manifest: import("zod").ZodOptional<import("zod").ZodObject<{
-        id: import("zod").ZodString;
-        name: import("zod").ZodString;
-        version: import("zod").ZodString;
-    }, import("zod/v4/core").$strip>>;
-}, import("zod/v4/core").$strip>, undefined> | import("@cyanheads/mcp-ts-core").ResourceDefinition<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
-    tags: import("zod").ZodArray<import("zod").ZodObject<{
-        name: import("zod").ZodString;
-        count: import("zod").ZodNumber;
-    }, import("zod/v4/core").$strip>>;
-}, import("zod/v4/core").$strip>, undefined> | import("@cyanheads/mcp-ts-core").ResourceDefinition<import("zod").ZodObject<{
+export declare const allResourceDefinitions: (import("@cyanheads/mcp-ts-core").ResourceDefinition<import("zod").ZodObject<{
     path: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     path: import("zod").ZodString;
@@ -42,5 +24,23 @@ export declare const allResourceDefinitions: (import("@cyanheads/mcp-ts-core").R
     readonly code: import("@cyanheads/mcp-ts-core/errors").JsonRpcErrorCode.NotFound;
     readonly when: "The vault path does not resolve to an existing note.";
     readonly recovery: "Verify the path with obsidian_list_notes or use obsidian_search_notes to locate the note.";
-}]>)[];
+}]> | import("@cyanheads/mcp-ts-core").ResourceDefinition<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    tags: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        count: import("zod").ZodNumber;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, undefined> | import("@cyanheads/mcp-ts-core").ResourceDefinition<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    status: import("zod").ZodString;
+    service: import("zod").ZodString;
+    authenticated: import("zod").ZodBoolean;
+    versions: import("zod").ZodOptional<import("zod").ZodObject<{
+        obsidian: import("zod").ZodOptional<import("zod").ZodString>;
+        self: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+    manifest: import("zod").ZodOptional<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        name: import("zod").ZodString;
+        version: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, undefined>)[];
 //# sourceMappingURL=index.d.ts.map

package/dist/mcp-server/resources/definitions/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/mcp-server/resources/definitions/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAAoD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/mcp-server/resources/definitions/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+CAAoD,CAAC"}

package/dist/mcp-server/tools/definitions/_shared/regex-safety.d.ts

@@ -2,17 +2,22 @@
  * @fileoverview Static safety guards for user-supplied `nameRegex` filters.
  * JavaScript's RegExp engine has no native execution timeout, so we statically
  * reject the textbook catastrophic-backtracking shapes before calling
- * `new RegExp(...)`. Shared by tools that post-filter upstream listings by
- * name (`obsidian_list_tags`, `obsidian_list_commands`).
+ * `new RegExp(...)`. Shared by every tool that compiles a user-supplied regex:
+ * the name filters on `obsidian_list_tags` / `obsidian_list_commands` /
+ * `obsidian_list_notes`, and the `useRegex` search patterns on
+ * `obsidian_replace_in_note` (which raises the length cap for note-body input).
  * @module mcp-server/tools/definitions/_shared/regex-safety
  */
 /** Maximum allowed pattern length — bounds compile cost and AST surface. */
 export declare const NAME_REGEX_MAX_LENGTH = 256;
 /**
  * Returns a human-readable reason string when the pattern is unsafe, or
- * `undefined` when it passes the static guards. Callers compile with
- * `new RegExp(pattern)` after this returns `undefined` and surface the
- * returned reason via the tool's `regex_unsafe` error.
+ * `undefined` when it passes the static guards. `maxLength` defaults to
+ * {@link NAME_REGEX_MAX_LENGTH}; callers running patterns over larger input
+ * (e.g. a full note body) may raise it. The nested-quantifier check is applied
+ * unchanged regardless of the cap. Callers compile with `new RegExp(pattern)`
+ * after this returns `undefined` and surface the returned reason via the
+ * tool's `regex_unsafe` error.
  */
-export declare function nameRegexSafetyIssue(pattern: string): string | undefined;
+export declare function nameRegexSafetyIssue(pattern: string, maxLength?: number): string | undefined;
 //# sourceMappingURL=regex-safety.d.ts.map

package/dist/mcp-server/tools/definitions/_shared/regex-safety.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"regex-safety.d.ts","sourceRoot":"","sources":["../../../../../src/mcp-server/tools/definitions/_shared/regex-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAWzC;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQxE"}
+{"version":3,"file":"regex-safety.d.ts","sourceRoot":"","sources":["../../../../../src/mcp-server/tools/definitions/_shared/regex-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAWzC;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,SAAS,SAAwB,GAChC,MAAM,GAAG,SAAS,CAQpB"}

package/dist/mcp-server/tools/definitions/_shared/regex-safety.js

@@ -2,8 +2,10 @@
  * @fileoverview Static safety guards for user-supplied `nameRegex` filters.
  * JavaScript's RegExp engine has no native execution timeout, so we statically
  * reject the textbook catastrophic-backtracking shapes before calling
- * `new RegExp(...)`. Shared by tools that post-filter upstream listings by
- * name (`obsidian_list_tags`, `obsidian_list_commands`).
+ * `new RegExp(...)`. Shared by every tool that compiles a user-supplied regex:
+ * the name filters on `obsidian_list_tags` / `obsidian_list_commands` /
+ * `obsidian_list_notes`, and the `useRegex` search patterns on
+ * `obsidian_replace_in_note` (which raises the length cap for note-body input).
  * @module mcp-server/tools/definitions/_shared/regex-safety
  */
 /** Maximum allowed pattern length — bounds compile cost and AST surface. */
@@ -18,13 +20,16 @@ export const NAME_REGEX_MAX_LENGTH = 256;
 const NESTED_QUANTIFIER = /[+*}]\)[*+{]/;
 /**
  * Returns a human-readable reason string when the pattern is unsafe, or
- * `undefined` when it passes the static guards. Callers compile with
- * `new RegExp(pattern)` after this returns `undefined` and surface the
- * returned reason via the tool's `regex_unsafe` error.
+ * `undefined` when it passes the static guards. `maxLength` defaults to
+ * {@link NAME_REGEX_MAX_LENGTH}; callers running patterns over larger input
+ * (e.g. a full note body) may raise it. The nested-quantifier check is applied
+ * unchanged regardless of the cap. Callers compile with `new RegExp(pattern)`
+ * after this returns `undefined` and surface the returned reason via the
+ * tool's `regex_unsafe` error.
  */
-export function nameRegexSafetyIssue(pattern) {
-    if (pattern.length > NAME_REGEX_MAX_LENGTH) {
-        return `pattern exceeds ${NAME_REGEX_MAX_LENGTH}-character limit`;
+export function nameRegexSafetyIssue(pattern, maxLength = NAME_REGEX_MAX_LENGTH) {
+    if (pattern.length > maxLength) {
+        return `pattern exceeds ${maxLength}-character limit`;
     }
     if (NESTED_QUANTIFIER.test(pattern)) {
         return 'pattern contains nested quantifiers (catastrophic-backtracking risk)';

package/dist/mcp-server/tools/definitions/_shared/regex-safety.js.map

@@ -1 +1 @@
-{"version":3,"file":"regex-safety.js","sourceRoot":"","sources":["../../../../../src/mcp-server/tools/definitions/_shared/regex-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,OAAO,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QAC3C,OAAO,mBAAmB,qBAAqB,kBAAkB,CAAC;IACpE,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,sEAAsE,CAAC;IAChF,CAAC;IACD,OAAO;AACT,CAAC"}
+{"version":3,"file":"regex-safety.js","sourceRoot":"","sources":["../../../../../src/mcp-server/tools/definitions/_shared/regex-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,SAAS,GAAG,qBAAqB;IAEjC,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC/B,OAAO,mBAAmB,SAAS,kBAAkB,CAAC;IACxD,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,sEAAsE,CAAC;IAChF,CAAC;IACD,OAAO;AACT,CAAC"}

package/dist/mcp-server/tools/definitions/_shared/schemas.d.ts

@@ -15,9 +15,9 @@ export declare const TargetSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"periodic">;
     period: z.ZodEnum<{
         daily: "daily";
-        weekly: "weekly";
         monthly: "monthly";
         quarterly: "quarterly";
+        weekly: "weekly";
         yearly: "yearly";
     }>;
     date: z.ZodOptional<z.ZodString>;
@@ -25,9 +25,9 @@ export declare const TargetSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
 /** Sub-document target inside a note. */
 export declare const SectionSchema: z.ZodObject<{
     type: z.ZodEnum<{
-        heading: "heading";
         block: "block";
         frontmatter: "frontmatter";
+        heading: "heading";
     }>;
     target: z.ZodString;
 }, z.core.$strip>;
@@ -37,8 +37,8 @@ export declare const PatchOptionsSchema: z.ZodOptional<z.ZodObject<{
     trimTargetWhitespace: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>>;
 export declare const ContentTypeSchema: z.ZodDefault<z.ZodEnum<{
-    markdown: "markdown";
     json: "json";
+    markdown: "markdown";
 }>>;
 export type ToolTarget = z.infer<typeof TargetSchema>;
 export type ToolSection = z.infer<typeof SectionSchema>;

package/dist/mcp-server/tools/definitions/_shared/schemas.js

@@ -43,7 +43,7 @@ export const SectionSchema = z.object({
     target: z
         .string()
         .min(1)
-        .describe('Heading name (use "::" for nested headings), block reference without leading caret (e.g. "2d9b4a", not "^2d9b4a"), or frontmatter field name.'),
+        .describe('Heading name — either the full path (`"Parent::Child"`) or a bare leaf name that matches exactly one heading — a block reference without the leading caret (e.g. "2d9b4a", not "^2d9b4a"), or a frontmatter field name.'),
 });
 export const PatchOptionsSchema = z
     .object({
@@ -54,7 +54,7 @@ export const PatchOptionsSchema = z
     applyIfContentPreexists: z
         .boolean()
         .default(false)
-        .describe('When false (default), the patch is rejected if the supplied content already appears in the target — idempotent against agent retries. Set to true to force-apply even when it would duplicate. Replace operations are unaffected (the plugin exempts them).'),
+        .describe('When false (default), the patch is rejected if the supplied content already appears in the target — idempotent against retries. Set to true to force-apply even when it would duplicate. Replace operations are never rejected.'),
     trimTargetWhitespace: z
         .boolean()
         .default(false)

package/dist/mcp-server/tools/definitions/_shared/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../../../src/mcp-server/tools/definitions/_shared/schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,wBAAwB,CAAC;AAE3C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACvD,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACnE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kEAAkE,CAAC;KAChF,CAAC;SACD,QAAQ,CAAC,4CAA4C,CAAC;IACzD,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;KACnF,CAAC;SACD,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;QAC1F,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;aAC3D,QAAQ,CAAC,4BAA4B,CAAC;QACzC,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,KAAK,CAAC,qBAAqB,CAAC;aAC5B,QAAQ,EAAE;aACV,QAAQ,CAAC,mDAAmD,CAAC;KACjE,CAAC;SACD,QAAQ,CAAC,6CAA6C,CAAC;CAC3D,CAAC,CAAC;AAEH,yCAAyC;AACzC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;SACzC,QAAQ,CAAC,mEAAmE,CAAC;IAChF,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,+IAA+I,CAChJ;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,qBAAqB,EAAE,CAAC;SACrB,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,yEAAyE,CAAC;IACtF,uBAAuB,EAAE,CAAC;SACvB,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,6PAA6P,CAC9P;IACH,oBAAoB,EAAE,CAAC;SACpB,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;KAC1B,OAAO,CAAC,UAAU,CAAC;KACnB,QAAQ,CACP,qPAAqP,CACtP,CAAC"}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../../../src/mcp-server/tools/definitions/_shared/schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,wBAAwB,CAAC;AAE3C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACvD,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACnE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kEAAkE,CAAC;KAChF,CAAC;SACD,QAAQ,CAAC,4CAA4C,CAAC;IACzD,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;KACnF,CAAC;SACD,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;QAC1F,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;aAC3D,QAAQ,CAAC,4BAA4B,CAAC;QACzC,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,KAAK,CAAC,qBAAqB,CAAC;aAC5B,QAAQ,EAAE;aACV,QAAQ,CAAC,mDAAmD,CAAC;KACjE,CAAC;SACD,QAAQ,CAAC,6CAA6C,CAAC;CAC3D,CAAC,CAAC;AAEH,yCAAyC;AACzC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;SACzC,QAAQ,CAAC,mEAAmE,CAAC;IAChF,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,yNAAyN,CAC1N;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,qBAAqB,EAAE,CAAC;SACrB,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,yEAAyE,CAAC;IACtF,uBAAuB,EAAE,CAAC;SACvB,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,iOAAiO,CAClO;IACH,oBAAoB,EAAE,CAAC;SACpB,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;KAC1B,OAAO,CAAC,UAAU,CAAC;KACnB,QAAQ,CACP,qPAAqP,CACtP,CAAC"}