@bevel-software/platform-mcp-core 0.26.0 → 0.27.0

package/dist/call-guards.d.ts

@@ -0,0 +1,47 @@
+import type { CodeModeUtcpClient } from '@utcp/code-mode';
+/**
+ * The refusal a call that does not match its tool gets: a 400 carrying
+ * `arguments-do-not-match`, the mismatches, the tool's interface and the call
+ * example.
+ *
+ * Shaped like the typed refusals the platform's REST tools return, so it
+ * reaches an agent the same way they do: `response.data` is what
+ * `describeToolFailure` reads, and the enumerable `status` / `data` are what a
+ * chain sees on the thrown error.
+ */
+export declare class ArgumentsDoNotMatchError extends Error {
+    readonly status = 400;
+    readonly kind = "arguments-do-not-match";
+    readonly data: {
+        error: string;
+        kind: string;
+        status: number;
+    };
+    readonly response: {
+        status: number;
+        data: {
+            error: string;
+            kind: string;
+            status: number;
+        };
+    };
+    constructor(message: string);
+}
+/**
+ * Check `args` against the tool registered as `toolName`, returning the
+ * refusal message when they do not match and `null` when they do (or when the
+ * tool's schema cannot be used for checking, which is logged once).
+ *
+ * Exported for the surfaces' tests; the guards below are the only caller in
+ * production.
+ */
+export declare function argumentRefusal(client: CodeModeUtcpClient, toolName: string, args: Record<string, unknown>): Promise<string | null>;
+/**
+ * Install the guards on `client`. Idempotent per client, and ORDER-PROOF: when
+ * another layer (the downstream router, session recovery, the audit
+ * instrumentation) has re-wrapped the call methods since, the guards are
+ * wrapped around that one too, so they stay outermost and a routed call cannot
+ * slip past them. Checking twice is free — the check is pure and compiled once.
+ */
+export declare function installCallGuards(client: CodeModeUtcpClient): void;
+//# sourceMappingURL=call-guards.d.ts.map

package/dist/call-guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-guards.d.ts","sourceRoot":"","sources":["../src/call-guards.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAoC1D;;;;;;;;;GASG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,MAAM,OAAO;IACtB,QAAQ,CAAC,IAAI,4BAA+B;IAC5C,QAAQ,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,QAAQ,CAAC,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;gBAEjF,OAAO,EAAE,MAAM;CAM5B;AAgED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,kBAAkB,EAC1B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA6BxB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAyDlE"}

package/dist/call-guards.js

@@ -0,0 +1,215 @@
+import { ARGUMENTS_DO_NOT_MATCH_KIND, argumentsDoNotMatchMessage, checkFor } from './tool-interface.js';
+import { NOT_JSON_KIND, pageInsteadOfJson } from './results.js';
+import { isPlatformHostedUrl } from './utcp-namespace.js';
+/**
+ * The guards the tool client puts in front of a call to a tool THIS SERVER DOES
+ * NOT HOST: its arguments are checked against the tool's own input schema before
+ * anything leaves, and an answer that is a web page where JSON was expected is
+ * cut to something an agent can read.
+ *
+ * The check lives where the tool lives. A tool the platform (or a deployment)
+ * hosts as a route of its own is checked IN THAT ROUTE's handler, so every
+ * caller gets the same answer — an agent over MCP, a chain, and a script
+ * calling `POST /api/agent/tools/<name>` with a connection key alike. What is
+ * left for the client are the tools with no route here: a connected server's
+ * tools, and an http tool that calls another service directly. Those are
+ * checked here, before the call leaves, and route-hosted tools are skipped so
+ * they are not checked twice and so the route's own answer is what comes back.
+ *
+ * Installed on the UTCP client, which is the one place both of ITS call paths
+ * meet: `callToolStreaming` is the MCP dispatch path and `callTool` is what
+ * `call_tool_chain` bridges every in-isolate tool function to.
+ *
+ * Nothing here changes a call. A call that matches its schema is passed on with
+ * exactly the arguments that were given — no argument is added, removed,
+ * renamed or coerced — because a checker that repaired calls would hide the
+ * mistake it was built to report, and would be wrong for at least one protocol.
+ */
+/** Marks the client's call methods as already wrapped by THESE guards. */
+const GUARDED = Symbol.for('bevel.mcp-core.callGuards');
+/** Tools whose schema could not be used for checking, so the reason is logged once each. */
+const unchecked = new Set();
+/**
+ * The refusal a call that does not match its tool gets: a 400 carrying
+ * `arguments-do-not-match`, the mismatches, the tool's interface and the call
+ * example.
+ *
+ * Shaped like the typed refusals the platform's REST tools return, so it
+ * reaches an agent the same way they do: `response.data` is what
+ * `describeToolFailure` reads, and the enumerable `status` / `data` are what a
+ * chain sees on the thrown error.
+ */
+export class ArgumentsDoNotMatchError extends Error {
+    status = 400;
+    kind = ARGUMENTS_DO_NOT_MATCH_KIND;
+    data;
+    response;
+    constructor(message) {
+        super(message);
+        this.name = 'ArgumentsDoNotMatchError';
+        this.data = { error: message, kind: ARGUMENTS_DO_NOT_MATCH_KIND, status: 400 };
+        this.response = { status: 400, data: this.data };
+    }
+}
+/** The error a tool's non-JSON answer becomes: short, with the page left behind. */
+class NotJsonError extends Error {
+    kind = NOT_JSON_KIND;
+    data;
+    response;
+    constructor(message) {
+        super(message);
+        this.name = 'NotJsonError';
+        this.data = { error: message, kind: NOT_JSON_KIND };
+        this.response = { data: this.data };
+    }
+}
+/** The protocols whose answer is an HTTP response, and so can be a web page. */
+const HTTP_PROTOCOLS = new Set(['http', 'streamable_http', 'sse']);
+/**
+ * Where this server mounts the tools it hosts itself: one route per tool, under
+ * one prefix, which is what `toolDef` builds every platform (and deployment)
+ * tool's URL from.
+ */
+const AGENT_TOOL_ROUTE_PREFIX = '/api/agent/tools/';
+/** The length of the `${API_URL}` origin template, so the path can be read past it. */
+const PLATFORM_ORIGIN_TEMPLATE_LENGTH = '${API_URL}'.length;
+/**
+ * Is this tool a route THIS server hosts? Such a tool is checked by its own
+ * route handler — which sees the flat arguments the handler really takes and
+ * answers every caller, not only the ones that came through a client — so the
+ * client must leave it alone: checking it here would check it twice, and the
+ * first refusal would replace the route's answer with one of our own.
+ *
+ * Decided on two things together: `${API_URL}` as the template's ORIGIN, which
+ * expands to this server's own loopback and which a tool definition cannot fake
+ * (a third-party `.tool` can put that literal in a path or a query but cannot
+ * make it the authority without pointing the request back at us — the same rule
+ * as the credential seeding in `utcp-namespace.ts`), AND the agent-tool route
+ * prefix every such tool is served under. Both are needed: a `.tool` an
+ * administrator wrote may legitimately point at some OTHER endpoint of this
+ * same backend, and that one has no tool handler to check it, so the client
+ * must.
+ */
+function isHostedAsARouteHere(tool) {
+    const template = tool.tool_call_template;
+    if (!template)
+        return false;
+    const type = typeof template.call_template_type === 'string' ? template.call_template_type : '';
+    if (!HTTP_PROTOCOLS.has(type))
+        return false;
+    const url = template.url;
+    if (typeof url !== 'string' || !isPlatformHostedUrl(url))
+        return false;
+    return url.slice(PLATFORM_ORIGIN_TEMPLATE_LENGTH).startsWith(AGENT_TOOL_ROUTE_PREFIX);
+}
+/**
+ * Check `args` against the tool registered as `toolName`, returning the
+ * refusal message when they do not match and `null` when they do (or when the
+ * tool's schema cannot be used for checking, which is logged once).
+ *
+ * Exported for the surfaces' tests; the guards below are the only caller in
+ * production.
+ */
+export async function argumentRefusal(client, toolName, args) {
+    const tool = (await client.config.tool_repository.getTool(toolName));
+    // Not registered: the client's own "not found in the repository" is the
+    // honest answer, and inventing a mismatch for a tool that does not exist
+    // would bury it.
+    if (!tool)
+        return null;
+    // Hosted here as a route: its handler does the checking, and its answer is
+    // what the caller must get (see `isHostedAsARouteHere`).
+    if (isHostedAsARouteHere(tool))
+        return null;
+    const check = checkFor(tool.inputs);
+    if (!check.checkable) {
+        // Once per tool, not once per call: a tool with an unusable schema is
+        // called on every turn, and the reason is a property of the schema.
+        if (!unchecked.has(toolName)) {
+            unchecked.add(toolName);
+            console.warn(`[mcp] calling "${toolName}" without checking its arguments — ${check.reason}. ` +
+                'Its calls are passed through as they are.');
+        }
+        return null;
+    }
+    const mismatches = check.check(args ?? {});
+    if (mismatches.length === 0)
+        return null;
+    // The name the agent used is the bare tool name, not the `<manual>.<tool>`
+    // the registry keys on — but the call example has to show the namespace, so
+    // both go in: the sentence names the tool, the example names the call.
+    const bare = toolName.includes('.') ? toolName.slice(toolName.lastIndexOf('.') + 1) : toolName;
+    return argumentsDoNotMatchMessage(bare, toolName, tool.inputs, mismatches);
+}
+/**
+ * Install the guards on `client`. Idempotent per client, and ORDER-PROOF: when
+ * another layer (the downstream router, session recovery, the audit
+ * instrumentation) has re-wrapped the call methods since, the guards are
+ * wrapped around that one too, so they stay outermost and a routed call cannot
+ * slip past them. Checking twice is free — the check is pure and compiled once.
+ */
+export function installCallGuards(client) {
+    // Each call method is guarded on its own: a client with only one of them
+    // can still call tools through it, and that one path is checked all the
+    // same. A client with neither cannot call a tool, so there is nothing to
+    // guard. (A test double that only registers manuals is exactly that.)
+    const hasCallTool = typeof client.callTool === 'function';
+    const hasStreaming = typeof client.callToolStreaming === 'function';
+    if (!hasCallTool && !hasStreaming)
+        return;
+    const repositoryTool = async (toolName) => (await client.config.tool_repository.getTool(toolName));
+    const guardResult = async (toolName, value) => {
+        if (typeof value !== 'string')
+            return;
+        const short = pageInsteadOfJson(value);
+        if (!short)
+            return;
+        const tool = await repositoryTool(toolName);
+        const type = tool?.tool_call_template?.call_template_type;
+        if (!HTTP_PROTOCOLS.has(typeof type === 'string' ? type : ''))
+            return;
+        // A tool that DECLARES a string answer may answer with markup: by the
+        // time the value is here the transport has decoded it, and a JSON string
+        // that holds a page looks exactly like a page. Only a tool that promised
+        // structured data is held to it.
+        if (declaresStringOutput(tool?.outputs))
+            return;
+        const bare = toolName.includes('.') ? toolName.slice(toolName.lastIndexOf('.') + 1) : toolName;
+        throw new NotJsonError(`The "${bare}" tool answered with a page, not JSON: ${short}`);
+    };
+    if (hasCallTool && client.callTool[GUARDED] !== true) {
+        const callTool = client.callTool.bind(client);
+        const guarded = async function guardedCallTool(toolName, toolArgs) {
+            const refusal = await argumentRefusal(client, toolName, toolArgs);
+            if (refusal)
+                throw new ArgumentsDoNotMatchError(refusal);
+            const result = await callTool(toolName, toolArgs);
+            await guardResult(toolName, result);
+            return result;
+        };
+        guarded[GUARDED] = true;
+        client.callTool = guarded;
+    }
+    if (hasStreaming && client.callToolStreaming[GUARDED] !== true) {
+        const callToolStreaming = client.callToolStreaming.bind(client);
+        const guardedStreaming = async function* guardedCallToolStreaming(toolName, toolArgs) {
+            const refusal = await argumentRefusal(client, toolName, toolArgs);
+            if (refusal)
+                throw new ArgumentsDoNotMatchError(refusal);
+            for await (const chunk of callToolStreaming(toolName, toolArgs)) {
+                await guardResult(toolName, chunk);
+                yield chunk;
+            }
+        };
+        guardedStreaming[GUARDED] = true;
+        client.callToolStreaming = guardedStreaming;
+    }
+}
+/** Does this output schema say the tool answers with a string? */
+function declaresStringOutput(outputs) {
+    if (typeof outputs !== 'object' || outputs === null)
+        return false;
+    const type = outputs.type;
+    return type === 'string' || (Array.isArray(type) && type.includes('string'));
+}
+//# sourceMappingURL=call-guards.js.map

package/dist/call-guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-guards.js","sourceRoot":"","sources":["../src/call-guards.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACxG,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,0EAA0E;AAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAExD,4FAA4F;AAC5F,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;AAEpC;;;;;;;;;GASG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,MAAM,GAAG,GAAG,CAAC;IACb,IAAI,GAAG,2BAA2B,CAAC;IACnC,IAAI,CAAkD;IACtD,QAAQ,CAA4E;IAE7F,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC/E,IAAI,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;CACF;AAED,oFAAoF;AACpF,MAAM,YAAa,SAAQ,KAAK;IACrB,IAAI,GAAG,aAAa,CAAC;IACrB,IAAI,CAAkC;IACtC,QAAQ,CAA4C;IAE7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;AAExF;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAEpD,uFAAuF;AACvF,MAAM,+BAA+B,GAAG,YAAY,CAAC,MAAM,CAAC;AAU5D;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,oBAAoB,CAAC,IAAoB;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC;IACzC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,IAAI,GAAG,OAAO,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,GAAG,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA0B,EAC1B,QAAgB,EAChB,IAA6B;IAE7B,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAA+B,CAAC;IACnG,wEAAwE;IACxE,yEAAyE;IACzE,iBAAiB;IACjB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,2EAA2E;IAC3E,yDAAyD;IACzD,IAAI,oBAAoB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,sEAAsE;QACtE,oEAAoE;QACpE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CACV,kBAAkB,QAAQ,sCAAsC,KAAK,CAAC,MAAM,IAAI;gBAC9E,2CAA2C,CAC9C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/F,OAAO,0BAA0B,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA0B;IAC1D,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,MAAM,CAAC,iBAAiB,KAAK,UAAU,CAAC;IACpE,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY;QAAE,OAAO;IAE1C,MAAM,cAAc,GAAG,KAAK,EAAE,QAAgB,EAAuC,EAAE,CACrF,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAA+B,CAAC;IAExF,MAAM,WAAW,GAAG,KAAK,EAAE,QAAgB,EAAE,KAAc,EAAiB,EAAE;QAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QACtC,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,EAAE,kBAAkB,EAAE,kBAAkB,CAAC;QAC1D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO;QACtE,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,iCAAiC;QACjC,IAAI,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO;QAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/F,MAAM,IAAI,YAAY,CAAC,QAAQ,IAAI,0CAA0C,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC;IAEF,IAAI,WAAW,IAAK,MAAM,CAAC,QAA+C,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7F,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,QAAiC;YAChG,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAClE,IAAI,OAAO;gBAAE,MAAM,IAAI,wBAAwB,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAClD,MAAM,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACD,OAA8C,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QAChE,MAAM,CAAC,QAAQ,GAAG,OAAiC,CAAC;IACtD,CAAC;IAED,IAAI,YAAY,IAAK,MAAM,CAAC,iBAAwD,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACvG,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,gBAAgB,GAAG,KAAK,SAAS,CAAC,CAAC,wBAAwB,CAC/D,QAAgB,EAChB,QAAiC;YAEjC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAClE,IAAI,OAAO;gBAAE,MAAM,IAAI,wBAAwB,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAChE,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACnC,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACD,gBAAuD,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACzE,MAAM,CAAC,iBAAiB,GAAG,gBAAmD,CAAC;IACjF,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,SAAS,oBAAoB,CAAC,OAAgB;IAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,IAAI,GAAI,OAA8B,CAAC,IAAI,CAAC;IAClD,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC/E,CAAC"}

package/dist/dispatch.d.ts

@@ -40,5 +40,9 @@ export declare function registerManual(client: CodeModeUtcpClient, manual: CallT
  * MCP `arguments`), and the advertised schema is the tool's UTCP `inputs`
  * verbatim too, so any reshaping here would be wrong for at least one protocol.
  */
-export declare function dispatchToolCall(client: CodeModeUtcpClient, tool: ProxiedTool, args: Record<string, unknown>, onProgress?: (progress: number, message: string) => Promise<void>): Promise<CallToolResult>;
+export declare function dispatchToolCall(client: CodeModeUtcpClient, tool: ProxiedTool, args: Record<string, unknown>, onProgress?: (progress: number, message: string) => Promise<void>, 
+/** See {@link toCallToolResult}'s `structured`. */
+options?: {
+    structured?: boolean;
+}): Promise<CallToolResult>;
 //# sourceMappingURL=dispatch.d.ts.map

package/dist/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD;;;;;;;;;;;;GAYG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAWtD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAChE,OAAO,CAAC,cAAc,CAAC,CA4BzB"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKrD;;;;;;;;;;;;GAYG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAwBtD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC;AACjE,mDAAmD;AACnD,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GACjC,OAAO,CAAC,cAAc,CAAC,CA4BzB"}

package/dist/dispatch.js

@@ -1,4 +1,6 @@
 import { toCallToolResult, toolError, describeToolFailure, renderProgress } from './results.js';
+import { installCallGuards } from './call-guards.js';
+import { installGetHasNoBody } from './get-has-no-body.js';
 /**
  * Register one manual on a client, reduced to a verdict.
  *
@@ -13,6 +15,19 @@ import { toCallToolResult, toolError, describeToolFailure, renderProgress } from
  * here — so it comes back as `{ ok: false }` for the caller to police.
  */
 export async function registerManual(client, manual) {
+    // A tool must be registered before it can be called, so registration is the
+    // one point every tool of every surface passes through — and therefore where
+    // the client's guards are installed. A deployment that registers manuals of
+    // its own gets the argument check and the GET-sends-no-body rule for its
+    // tools without writing a line for either. Both are idempotent.
+    //
+    // The client checks the tools with no route HERE — a connected server's, and
+    // an http tool that calls another service. A tool this server hosts as a
+    // route is checked in that route's own handler instead, so every caller gets
+    // the same answer and the route's answer is what comes back
+    // (`call-guards.ts`).
+    installGetHasNoBody();
+    installCallGuards(client);
     try {
         const result = await client.registerManual(manual);
         if (result && result.success === false) {
@@ -44,7 +59,9 @@ export async function registerManual(client, manual) {
  * MCP `arguments`), and the advertised schema is the tool's UTCP `inputs`
  * verbatim too, so any reshaping here would be wrong for at least one protocol.
  */
-export async function dispatchToolCall(client, tool, args, onProgress) {
+export async function dispatchToolCall(client, tool, args, onProgress, 
+/** See {@link toCallToolResult}'s `structured`. */
+options) {
     let prev;
     let hasPrev = false;
     let progress = 0;
@@ -67,6 +84,6 @@ export async function dispatchToolCall(client, tool, args, onProgress) {
     if (!hasPrev) {
         return toolError(`The "${tool.mcpName}" tool produced no output: its stream ended without a result.`);
     }
-    return toCallToolResult(prev);
+    return toCallToolResult(prev, options);
 }
 //# sourceMappingURL=dispatch.js.map

package/dist/dispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEhG;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAA0B,EAC1B,MAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;YACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAChF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAA0B,EAC1B,IAAiB,EACjB,IAA6B,EAC7B,UAAiE;IAEjE,IAAI,IAAa,CAAC;IAClB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YACxE,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC1B,QAAQ,IAAI,CAAC,CAAC;gBACd,MAAM,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7D,OAAO,CAAC,IAAI,CAAC,qCAAqC,EAAE,GAAG,CAAC,CACzD,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,KAAK,CAAC;YACb,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,QAAQ,IAAI,CAAC,OAAO,kBAAkB,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,0EAA0E;IAC1E,8EAA8E;IAC9E,0EAA0E;IAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,QAAQ,IAAI,CAAC,OAAO,+DAA+D,CAAC,CAAC;IACxG,CAAC;IAED,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC"}
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAA0B,EAC1B,MAAoB;IAEpB,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,gEAAgE;IAChE,EAAE;IACF,6EAA6E;IAC7E,yEAAyE;IACzE,6EAA6E;IAC7E,4DAA4D;IAC5D,sBAAsB;IACtB,mBAAmB,EAAE,CAAC;IACtB,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;YACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAChF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAA0B,EAC1B,IAAiB,EACjB,IAA6B,EAC7B,UAAiE;AACjE,mDAAmD;AACnD,OAAkC;IAElC,IAAI,IAAa,CAAC;IAClB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YACxE,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC1B,QAAQ,IAAI,CAAC,CAAC;gBACd,MAAM,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7D,OAAO,CAAC,IAAI,CAAC,qCAAqC,EAAE,GAAG,CAAC,CACzD,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,KAAK,CAAC;YACb,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,QAAQ,IAAI,CAAC,OAAO,kBAAkB,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,0EAA0E;IAC1E,8EAA8E;IAC9E,0EAA0E;IAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,QAAQ,IAAI,CAAC,OAAO,+DAA+D,CAAC,CAAC;IACxG,CAAC;IAED,OAAO,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC"}

package/dist/get-has-no-body.d.ts

@@ -0,0 +1,49 @@
+/**
+ * A GET tool never sends a request body — whatever it is called with, and
+ * whoever registered it.
+ *
+ * A UTCP http tool sends the one argument named by its template's `body_field`
+ * (which DEFAULTS to `body`) as the request body, for any method. So a flat GET
+ * tool called with its arguments wrapped in `body` — the shape the platform's
+ * own tools take, and the mistake an agent makes most often — sends a GET with
+ * a body. Services answer that with whatever their edge does: three users of
+ * the enterprise deployment got an HTML error page where a search result was
+ * expected.
+ *
+ * The fix is in the request client rather than in each tool's definition,
+ * because the definitions come from three places (the platform's own
+ * `toolDef`, a deployment's tools, and an administrator's tool manual) and a
+ * rule enforced in three places is a rule that holds in two. Here, the
+ * protocol that would send the body is handed a template whose `body_field`
+ * names an argument no tool declares, so there is nothing to put in the body;
+ * the argument itself is untouched and travels as a query parameter, exactly as
+ * every other argument does.
+ */
+/**
+ * The `body_field` a GET template is given. Deliberately not a name any schema
+ * would declare: the leading `__` and the markers make it unreachable from a
+ * generated call example or a described interface, so no agent is ever told to
+ * send it. The tail is drawn once per process, so a manual cannot write the
+ * name into its own template and have an argument of that name sent as the
+ * body after all: the name it would have to guess does not exist until the
+ * server starts.
+ */
+export declare const NO_BODY_FIELD: string;
+/**
+ * The template a GET tool is actually called with. Returns the template
+ * unchanged for anything that is not an http-family GET, so a POST tool, an
+ * `mcp` tool and a template with no method at all all pass through untouched.
+ */
+export declare function withoutBodyOnGet<T>(template: T): T;
+/**
+ * Install the guard over every communication protocol registered in this
+ * process, instances and factories alike — the registry the UTCP SDK documents
+ * as "the right home for a registry a decorator writes into".
+ *
+ * Process-wide and idempotent, so every client built afterwards is covered
+ * without being told to be: the hosted proxy's per-request clients, the pooled
+ * downstream clients, the local server's client, and a client a deployment
+ * builds on top of Hexis.
+ */
+export declare function installGetHasNoBody(): void;
+//# sourceMappingURL=get-has-no-body.d.ts.map

package/dist/get-has-no-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-has-no-body.d.ts","sourceRoot":"","sources":["../src/get-has-no-body.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,QAAiE,CAAC;AAU5F;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAOlD;AA2BD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAgB1C"}

package/dist/get-has-no-body.js

@@ -0,0 +1,104 @@
+import { randomUUID } from 'node:crypto';
+import { CommunicationProtocol } from '@utcp/sdk';
+/**
+ * A GET tool never sends a request body — whatever it is called with, and
+ * whoever registered it.
+ *
+ * A UTCP http tool sends the one argument named by its template's `body_field`
+ * (which DEFAULTS to `body`) as the request body, for any method. So a flat GET
+ * tool called with its arguments wrapped in `body` — the shape the platform's
+ * own tools take, and the mistake an agent makes most often — sends a GET with
+ * a body. Services answer that with whatever their edge does: three users of
+ * the enterprise deployment got an HTML error page where a search result was
+ * expected.
+ *
+ * The fix is in the request client rather than in each tool's definition,
+ * because the definitions come from three places (the platform's own
+ * `toolDef`, a deployment's tools, and an administrator's tool manual) and a
+ * rule enforced in three places is a rule that holds in two. Here, the
+ * protocol that would send the body is handed a template whose `body_field`
+ * names an argument no tool declares, so there is nothing to put in the body;
+ * the argument itself is untouched and travels as a query parameter, exactly as
+ * every other argument does.
+ */
+/**
+ * The `body_field` a GET template is given. Deliberately not a name any schema
+ * would declare: the leading `__` and the markers make it unreachable from a
+ * generated call example or a described interface, so no agent is ever told to
+ * send it. The tail is drawn once per process, so a manual cannot write the
+ * name into its own template and have an argument of that name sent as the
+ * body after all: the name it would have to guess does not exist until the
+ * server starts.
+ */
+export const NO_BODY_FIELD = `__utcp_get_sends_no_body_${randomUUID().replace(/-/g, '')}__`;
+/** Marks a protocol instance as already decorated, so installing twice is free. */
+const GUARDED = Symbol.for('bevel.mcp-core.getHasNoBody');
+/**
+ * The template a GET tool is actually called with. Returns the template
+ * unchanged for anything that is not an http-family GET, so a POST tool, an
+ * `mcp` tool and a template with no method at all all pass through untouched.
+ */
+export function withoutBodyOnGet(template) {
+    const t = template;
+    if (!t || typeof t !== 'object')
+        return template;
+    const method = typeof t.http_method === 'string' ? t.http_method.toUpperCase() : undefined;
+    if (method !== 'GET')
+        return template;
+    if (t.body_field === NO_BODY_FIELD)
+        return template;
+    return { ...template, body_field: NO_BODY_FIELD };
+}
+/** Decorate one protocol instance in place. Returns it, decorated or already so. */
+function decorate(protocol) {
+    const p = protocol;
+    if (!p || p[GUARDED] === true)
+        return protocol;
+    p[GUARDED] = true;
+    // The template is the LAST argument of both methods (`caller, toolName,
+    // toolArgs, toolCallTemplate`), already variable-substituted by the client.
+    // Replacing it here is the last moment before the request is built, and the
+    // only one where every registration path has converged.
+    for (const name of ['callTool', 'callToolStreaming']) {
+        const original = p[name];
+        if (typeof original !== 'function')
+            continue;
+        p[name] = function guardedCall(...args) {
+            if (args.length > 0)
+                args[args.length - 1] = withoutBodyOnGet(args[args.length - 1]);
+            return original.apply(this, args);
+        };
+    }
+    return protocol;
+}
+/**
+ * Install the guard over every communication protocol registered in this
+ * process, instances and factories alike — the registry the UTCP SDK documents
+ * as "the right home for a registry a decorator writes into".
+ *
+ * Process-wide and idempotent, so every client built afterwards is covered
+ * without being told to be: the hosted proxy's per-request clients, the pooled
+ * downstream clients, the local server's client, and a client a deployment
+ * builds on top of Hexis.
+ */
+export function installGetHasNoBody() {
+    const instances = CommunicationProtocol.communicationProtocols;
+    for (const type of Object.keys(instances)) {
+        const instance = instances[type];
+        if (instance)
+            decorate(instance);
+    }
+    const factories = CommunicationProtocol.communicationProtocolFactories;
+    for (const type of Object.keys(factories)) {
+        const factory = factories[type];
+        if (!factory)
+            continue;
+        const marked = factory;
+        if (marked[GUARDED] === true)
+            continue;
+        const wrapped = (() => decorate(factory()));
+        wrapped[GUARDED] = true;
+        factories[type] = wrapped;
+    }
+}
+//# sourceMappingURL=get-has-no-body.js.map

package/dist/get-has-no-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-has-no-body.js","sourceRoot":"","sources":["../src/get-has-no-body.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,4BAA4B,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;AAE5F,mFAAmF;AACnF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAO1D;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAI,QAAW;IAC7C,MAAM,CAAC,GAAG,QAAkC,CAAC;IAC7C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IACtC,IAAI,CAAC,CAAC,UAAU,KAAK,aAAa;QAAE,OAAO,QAAQ,CAAC;IACpD,OAAO,EAAE,GAAI,QAAmB,EAAE,UAAU,EAAE,aAAa,EAAO,CAAC;AACrE,CAAC;AAOD,oFAAoF;AACpF,SAAS,QAAQ,CAAC,QAA+B;IAC/C,MAAM,CAAC,GAAG,QAAyD,CAAC;IACpE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC/C,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAClB,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,wDAAwD;IACxD,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAU,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,OAAO,QAAQ,KAAK,UAAU;YAAE,SAAS;QAC7C,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,WAAW,CAAgB,GAAG,IAAe;YAC9D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACrF,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,SAAS,GAAG,qBAAqB,CAAC,sBAAsB,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,QAAQ;YAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,SAAS,GAAG,qBAAqB,CAAC,8BAA8B,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,MAAM,GAAG,OAAmD,CAAC;QACnE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI;YAAE,SAAS;QACvC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAA6C,CAAC;QACxF,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -27,15 +27,19 @@
  */
 export { type ProxiedTool, toListedTool, sanitizeInputSchema, flattenManualTool, flattenDiscoveredTool, } from './proxied-tool.js';
 export { type SchemaDefect, inputSchemaDefect, schemaDefectMarker, } from './schema-validity.js';
-export { describeToolFailure, withTransportDetail, toCallToolResult, renderProgress, toolError, needsAuthorizationResult, MCP_IMAGE_RESULT_KIND, type McpImageResult, mcpImageResult, isMcpImageResult, omitImagePayloads, } from './results.js';
+export { MCP_APP_UI_META_KEY, MCP_APP_MIME_TYPE, MCP_APP_URI_SCHEME, type McpAppToolUi, type McpAppResourceUi, type McpAppResource, type McpAppManifest, toolUiMeta, resourceUiMeta, toListedResource, toReadResourceResult, parseMcpAppManifest, } from './mcp-app.js';
+export { describeToolFailure, withTransportDetail, toCallToolResult, renderProgress, toolError, needsAuthorizationResult, MCP_IMAGE_RESULT_KIND, type McpImageResult, mcpImageResult, isMcpImageResult, omitImagePayloads, NOT_JSON_KIND, pageInsteadOfJson, } from './results.js';
 export { codeModeMetaTools, chainNamespaceExample, META_TOOL_NAMES, CALL_TOOL_CHAIN_MAX_OUTPUT, CALL_TOOL_CHAIN_NAME, CHAIN_FAILURES_RULE, CHAIN_LARGE_RESULTS_RULE, type CodeModeMetaToolsOptions, type SpillPort, dispatchMetaTool, } from './meta-tools.js';
 export { CHAIN_RUNTIME_PRELUDE, CHAIN_TIMEOUT_DEFAULT_MS, CHAIN_TIMEOUT_MAX_MS, CHAIN_TIMEOUT_MIN_MS, type ChainNamespaces, type ToolChainOutcome, chainNamespaces, chainOutOfMemoryMessage, chainTimeoutMessage, describeChainFailure, runToolChain, unknownNamespaceMessage, withChainRuntime, } from './chain-runtime.js';
 export { type ChainExample, type ChainExampleTool, chainExample, } from './chain-example.js';
 export { registerManual, dispatchToolCall } from './dispatch.js';
+export { CALL_LINE_PREFIX, ARGUMENTS_DO_NOT_MATCH_KIND, BODY_AT_TOP_LEVEL_LINE, ARGS_UNDER_BODY_LINE, callExample, exampleArguments, callLine, withCallExample, splitCallLine, describeInterface, argumentsDoNotMatchMessage, compileCheck, checkFor, type CompiledCheck, } from './tool-interface.js';
+export { installCallGuards, argumentRefusal, ArgumentsDoNotMatchError } from './call-guards.js';
+export { installGetHasNoBody, withoutBodyOnGet, NO_BODY_FIELD } from './get-has-no-body.js';
 export { RETIRED_TOOL_MESSAGES, RETIRED_TOOL_NAMES, retiredToolMessage, retiredToolInFailure, } from './retired-tools.js';
 export { isSessionLoss, installSessionRecovery, noteManualReregistered, type SessionRecoveryOptions, } from './session-recovery.js';
 export { type SkillSummary, type LoadedSkill, skillPromptText, } from './skills.js';
-export { utcpNamespacePrefix, utcpNamespacedKey, seedBevelHostedManualVars, } from './utcp-namespace.js';
+export { utcpNamespacePrefix, utcpNamespacedKey, seedBevelHostedManualVars, isPlatformHostedUrl, } from './utcp-namespace.js';
 export { sanitizeIdentifier, utcpNameToTsInterfaceName, findToolByName, findToolsByNames, AmbiguousToolNameError, } from './code-mode-names.js';
 export { printable } from './printable.js';
 export { GOOGLE_SERVICE_ACCOUNT_AUTH_TYPE, GOOGLE_TOKEN_URL, GoogleAuthHttpProtocol, GoogleServiceAccountTokenSource, ServiceAccountAuthError, findUnservedGoogleServiceAccountAuth, holdsLiteralGoogleServiceAccountKey, installGoogleServiceAccountAuth, isGoogleServiceAccountAuth, type GoogleServiceAccountAuth, type IServiceAccountTokenSource, } from './google-service-account/index.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EACL,KAAK,WAAW,EAChB,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,KAAK,YAAY,EACjB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,wBAAwB,EACxB,qBAAqB,EACrB,KAAK,cAAc,EACnB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,SAAS,EACd,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,eAAe,EACf,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAM3C,OAAO,EACL,gCAAgC,EAChC,gBAAgB,EAChB,sBAAsB,EACtB,+BAA+B,EAC/B,uBAAuB,EACvB,oCAAoC,EACpC,mCAAmC,EACnC,+BAA+B,EAC/B,0BAA0B,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,GAChC,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EACL,KAAK,WAAW,EAChB,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,KAAK,YAAY,EACjB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,wBAAwB,EACxB,qBAAqB,EACrB,KAAK,cAAc,EACnB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,SAAS,EACd,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,eAAe,EACf,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjE,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,WAAW,EACX,gBAAgB,EAChB,QAAQ,EACR,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,YAAY,EACZ,QAAQ,EACR,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAEhG,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE5F,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAM3C,OAAO,EACL,gCAAgC,EAChC,gBAAgB,EAChB,sBAAsB,EACtB,+BAA+B,EAC/B,uBAAuB,EACvB,oCAAoC,EACpC,mCAAmC,EACnC,+BAA+B,EAC/B,0BAA0B,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,GAChC,MAAM,mCAAmC,CAAC"}

package/dist/index.js

@@ -27,15 +27,19 @@
  */
 export { toListedTool, sanitizeInputSchema, flattenManualTool, flattenDiscoveredTool, } from './proxied-tool.js';
 export { inputSchemaDefect, schemaDefectMarker, } from './schema-validity.js';
-export { describeToolFailure, withTransportDetail, toCallToolResult, renderProgress, toolError, needsAuthorizationResult, MCP_IMAGE_RESULT_KIND, mcpImageResult, isMcpImageResult, omitImagePayloads, } from './results.js';
+export { MCP_APP_UI_META_KEY, MCP_APP_MIME_TYPE, MCP_APP_URI_SCHEME, toolUiMeta, resourceUiMeta, toListedResource, toReadResourceResult, parseMcpAppManifest, } from './mcp-app.js';
+export { describeToolFailure, withTransportDetail, toCallToolResult, renderProgress, toolError, needsAuthorizationResult, MCP_IMAGE_RESULT_KIND, mcpImageResult, isMcpImageResult, omitImagePayloads, NOT_JSON_KIND, pageInsteadOfJson, } from './results.js';
 export { codeModeMetaTools, chainNamespaceExample, META_TOOL_NAMES, CALL_TOOL_CHAIN_MAX_OUTPUT, CALL_TOOL_CHAIN_NAME, CHAIN_FAILURES_RULE, CHAIN_LARGE_RESULTS_RULE, dispatchMetaTool, } from './meta-tools.js';
 export { CHAIN_RUNTIME_PRELUDE, CHAIN_TIMEOUT_DEFAULT_MS, CHAIN_TIMEOUT_MAX_MS, CHAIN_TIMEOUT_MIN_MS, chainNamespaces, chainOutOfMemoryMessage, chainTimeoutMessage, describeChainFailure, runToolChain, unknownNamespaceMessage, withChainRuntime, } from './chain-runtime.js';
 export { chainExample, } from './chain-example.js';
 export { registerManual, dispatchToolCall } from './dispatch.js';
+export { CALL_LINE_PREFIX, ARGUMENTS_DO_NOT_MATCH_KIND, BODY_AT_TOP_LEVEL_LINE, ARGS_UNDER_BODY_LINE, callExample, exampleArguments, callLine, withCallExample, splitCallLine, describeInterface, argumentsDoNotMatchMessage, compileCheck, checkFor, } from './tool-interface.js';
+export { installCallGuards, argumentRefusal, ArgumentsDoNotMatchError } from './call-guards.js';
+export { installGetHasNoBody, withoutBodyOnGet, NO_BODY_FIELD } from './get-has-no-body.js';
 export { RETIRED_TOOL_MESSAGES, RETIRED_TOOL_NAMES, retiredToolMessage, retiredToolInFailure, } from './retired-tools.js';
 export { isSessionLoss, installSessionRecovery, noteManualReregistered, } from './session-recovery.js';
 export { skillPromptText, } from './skills.js';
-export { utcpNamespacePrefix, utcpNamespacedKey, seedBevelHostedManualVars, } from './utcp-namespace.js';
+export { utcpNamespacePrefix, utcpNamespacedKey, seedBevelHostedManualVars, isPlatformHostedUrl, } from './utcp-namespace.js';
 export { sanitizeIdentifier, utcpNameToTsInterfaceName, findToolByName, findToolsByNames, AmbiguousToolNameError, } from './code-mode-names.js';
 export { printable } from './printable.js';
 // Loading this package teaches UTCP `auth_type: google_service_account`, on

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAEL,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,wBAAwB,EACxB,qBAAqB,EAErB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EAGxB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EAGpB,eAAe,EACf,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAGL,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAGL,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,yDAAyD;AACzD,OAAO,EACL,gCAAgC,EAChC,gBAAgB,EAChB,sBAAsB,EACtB,+BAA+B,EAC/B,uBAAuB,EACvB,oCAAoC,EACpC,mCAAmC,EACnC,+BAA+B,EAC/B,0BAA0B,GAG3B,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAEL,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAKlB,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,wBAAwB,EACxB,qBAAqB,EAErB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EAGxB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EAGpB,eAAe,EACf,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAGL,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjE,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,WAAW,EACX,gBAAgB,EAChB,QAAQ,EACR,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,YAAY,EACZ,QAAQ,GAET,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAEhG,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE5F,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAGL,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,yDAAyD;AACzD,OAAO,EACL,gCAAgC,EAChC,gBAAgB,EAChB,sBAAsB,EACtB,+BAA+B,EAC/B,uBAAuB,EACvB,oCAAoC,EACpC,mCAAmC,EACnC,+BAA+B,EAC/B,0BAA0B,GAG3B,MAAM,mCAAmC,CAAC"}