@bugboom/mcp 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 BugBoom
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,202 @@
-# Temporary Holding Version
+# @bugboom/mcp
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+An [MCP](https://modelcontextprotocol.io) server for [BugBoom](https://bugboom.io): AI agents (Claude Code,
+Cursor, Claude Desktop and other MCP clients) read, write, run and fix BugBoom end-to-end tests. When a step
+fails the agent gets the error, the screenshot, a DOM snapshot of the page as it was and the console errors
+and failed requests of that step, finds a working selector or the right expected value, edits the step and
+runs the test again.
+
+Two ways in:
+
+- **Hosted, with a sign-in** — nothing to install and no key: add the server by its URL, and the client opens
+  BugBoom in the browser the first time; you sign in, pick the organization and allow access (read only, or
+  editing tests and starting runs too). The dev stand serves it at `https://mcp.bugboom.dev/mcp`.
+- **Local, with an API key** — Node.js 20 or newer, one file, no dependencies: `npx -y @bugboom/mcp` with an
+  organization API key (BugBoom → Organization settings → API keys): `api:read` for the read tools, `api:full`
+  to edit tests and start runs.
+
+Either way the tools work on the tests, components, suites and variables of one organization, with the rights
+of the member who signed in or made the key.
+
+## Connect the hosted server
+
+```bash
+claude mcp add --transport http bugboom https://mcp.bugboom.dev/mcp     # then /mcp in Claude Code → bugboom → Authenticate
+```
+
+- **Cursor** (`.cursor/mcp.json`): `{ "mcpServers": { "bugboom": { "url": "https://mcp.bugboom.dev/mcp" } } }`
+- **VS Code** (`.vscode/mcp.json`): `{ "servers": { "bugboom": { "type": "http", "url": "https://mcp.bugboom.dev/mcp" } } }`
+- **claude.ai, Claude Desktop**: Settings → Connectors → Add custom connector, the URL above.
+
+The agents you connected are listed in BugBoom (project → Settings → Integrations → MCP), where you disconnect
+them; an agent also loses access when you leave the organization.
+
+## Connect with an API key
+
+### Claude Code
+
+```bash
+claude mcp add bugboom -e BUGBOOM_API_KEY=bb_… -- npx -y @bugboom/mcp
+# for every project of yours: --scope user; shared with the repository (.mcp.json): --scope project
+```
+
+### Cursor
+
+`~/.cursor/mcp.json` (all projects) or `.cursor/mcp.json` (one project):
+
+```json
+{
+  "mcpServers": {
+    "bugboom": {
+      "command": "npx",
+      "args": ["-y", "@bugboom/mcp"],
+      "env": { "BUGBOOM_API_KEY": "bb_…" }
+    }
+  }
+}
+```
+
+### Claude Desktop
+
+Settings → Developer → Edit Config (`~/Library/Application Support/Claude/claude_desktop_config.json` on
+macOS, `%APPDATA%\Claude\claude_desktop_config.json` on Windows), then restart Claude Desktop:
+
+```json
+{
+  "mcpServers": {
+    "bugboom": {
+      "command": "npx",
+      "args": ["-y", "@bugboom/mcp"],
+      "env": { "BUGBOOM_API_KEY": "bb_…" }
+    }
+  }
+}
+```
+
+### A local or self-hosted BugBoom
+
+Add `BUGBOOM_API_URL` next to the key, e.g. `http://localhost:8280/api/public/v1` (default
+`https://app.bugboom.io/api/public/v1`); with Claude Code: `-e BUGBOOM_API_URL=…`.
+
+### HTTP mode
+
+One server for several clients or people: Streamable HTTP at `/mcp`, stateless; every request brings its
+own key in `Authorization: Bearer <key>` (or `X-API-Key`), `BUGBOOM_API_KEY` is not used — or, hosted (below),
+an OAuth access token.
+
+```bash
+npx -y @bugboom/mcp --http --port 8310            # http://127.0.0.1:8310/mcp
+npx -y @bugboom/mcp --http --host 0.0.0.0         # other machines too (put TLS in front of it)
+```
+
+```bash
+claude mcp add --transport http bugboom http://localhost:8310/mcp --header "Authorization: Bearer bb_…"
+```
+
+```json
+{ "mcpServers": { "bugboom": { "url": "http://localhost:8310/mcp", "headers": { "Authorization": "Bearer bb_…" } } } }
+```
+
+`GET /health` answers `{status: "ok", version}`. Bound to a loopback address the server only answers
+requests addressed to localhost (no DNS rebinding); a request without a key gets `401`.
+
+### Hosting it with the OAuth sign-in
+
+`--public-url` (or `BUGBOOM_MCP_PUBLIC_URL`) is the address the clients reach the server at; with it the server
+is an OAuth protected resource (RFC 9728) of BugBoom's authorization server — the issuer is
+`--authorization-server` / `BUGBOOM_AUTHORIZATION_SERVER`, by default the origin of the API URL:
+
+```bash
+BUGBOOM_API_URL=https://app.bugboom.dev/api/public/v1 \
+  npx -y @bugboom/mcp --http --host 0.0.0.0 --public-url https://mcp.bugboom.dev   # TLS in front of it
+```
+
+- `GET /.well-known/oauth-protected-resource/mcp` (and without `/mcp`): the resource metadata —
+  `{resource: "https://mcp.bugboom.dev/mcp", authorization_servers: ["https://app.bugboom.dev"], scopes_supported:
+  ["api:read", "api:full"]}`. BugBoom's metadata (`/.well-known/oauth-authorization-server`) names the rest:
+  dynamic client registration, the consent page, the token endpoint (authorization code with PKCE S256,
+  refresh tokens), the JWKS.
+- A request without a credential: `401` with `WWW-Authenticate: Bearer resource_metadata="…", scope="…"` — what
+  the clients start the sign-in from.
+- An access token (a JWT) is checked here first — the RS256 signature against BugBoom's JWKS, its lifetime,
+  a public API scope — so that an expired one is a `401 error="invalid_token"` the client refreshes; then it goes
+  to the public API, which checks it again (revoked, the member gone). A token is refused 2 minutes before its
+  `exp`, so that it never expires during a call: the public API's 401 would reach the client as a tool error, not
+  as a 401 it refreshes on. API keys work as before.
+- Public by design: any origin (CORS), no DNS rebinding check, and `wait_for_run` waits at most 90 s per call
+  (proxies such as Cloudflare drop a request that stays silent for 100 s; the agent calls it again).
+- Docker: `packages/mcp/Dockerfile` (from the repository root), port 8310, `/health`.
+
+## Tools
+
+| Tool | |
+|---|---|
+| `get_settings` | the test settings of the key's organization (home URL, browser, timeouts, waiting conditions, selectors, capture of DOM and logs, visual regression, the country cloud runs start from…), counts, test folders and run profiles |
+| `list_tests`, `get_test` | tests (`externalId`: the tests with exactly this id of another system); a test by id or exact name with its groups and steps (compact; `raw: true` for the API answer) |
+| `list_components`, `list_suites`, `list_variables` | components, suites, variables (secrets without values) |
+| `create_variable`, `update_variable` | saved variables |
+| `create_test`, `update_test`, `delete_test` | tests (`labelIds`: the labels a test carries; an update replaces them; `externalId`: its id in another system, also on steps) |
+| `list_test_folders`, `create_test_folder`, `update_test_folder`, `delete_test_folder` | test folders: the tree, a new one, rename / move / reorder, delete (its tests and subfolders move up, no test is deleted) |
+| `list_labels`, `create_label`, `update_label`, `delete_label` | labels of the tests: by name with `testsCount`, a new one, rename / recolour, delete (taken off its tests, no test is deleted); `list_tests` `labelIds` finds the tests with any of them |
+| `add_group`, `insert_component`, `update_test_group`, `remove_group`, `convert_group_to_component` | groups of a test and components |
+| `create_steps`, `update_step`, `move_step`, `delete_step` | steps; a `selector` (CSS or XPath) is enough for the element, `selectorsPresets` for the full form |
+| `run_test`, `run_suite` | start a cloud run (profile, variables) |
+| `get_run`, `wait_for_run`, `stop_run` | a run's state; wait for the end with progress notifications (default 300 s, then `timedOut: true`) |
+| `get_failed_step` | error, computed expected / actual values, conditions, whether there is a DOM snapshot and a screenshot |
+| `query_dom_snapshot` | CSS / XPath against the page of the failed step: up to 20 matches with their XPath and HTML; or the HTML itself |
+| `get_step_screenshot` | the screenshot after the step, as an image |
+| `get_run_emails` | the emails the run's inbox received (`{{inboxEmail}}`): from, subject, text and links |
+| `get_run_logs` | the run's browser console (`console.*`, uncaught errors, browser messages) or network log (method, URL, status, type, duration, size, failure; headers with `includeHeaders`), by step (`stepRunId`), console `level` or `failedOnly` requests; each entry has the `stepIndex` and `tabNo` it happened in |
+
+Writes are sent with `X-BugBoom-Source: agent`: BugBoom shows the steps as made by an agent. Runs started by
+the server are sent with `triggeredBy: "agent"` and show as started by an agent. Tool errors (a refused key, a missing scope, a validation error with
+its fields, a name matching several tests) come back as tool results the agent can act on.
+
+**Resources:** `bugboom://docs/steps` — the 31 step types with their params, selectors, waiting conditions,
+assertions, HTTP requests and error codes; `bugboom://docs/steps/{type}` — the JSON Schema of a type's params;
+`bugboom://docs/schemas/{selectors-presets|waiting-conditions|step-frame}`. The schemas are the backend's,
+copied into the package when it is built.
+
+**Prompt:** `fix-failed-test` (`runId` or `test`) — find why a test failed (the error, the DOM snapshot, the
+screenshot, the console errors and failed requests of the step), fix the selector, the waiting or the
+expectation (or report a real bug), run it again.
+
+## A session
+
+```
+get_test {name: "Signup form — wrong title"} → run_test → wait_for_run   (failed)
+get_failed_step   → ASSERTION_FAILED: pageTitle equal "Not the title", got "BugBoom Fixture — Form"
+get_run_logs {kind: "console", level: "error", stepRunId} → nothing: the page itself is fine
+query_dom_snapshot {query: "title"} → <title>BugBoom Fixture — Form</title>
+update_step {params: {property: "pageTitle", operator: "equal", expected: "BugBoom Fixture — Form", caseInsensitive: false}}
+run_test → wait_for_run   (passed)
+```
+
+**Emails.** Every run has its own address, `{{inboxEmail}}` in steps. A test types it into the app's form and
+an `openInbox` step opens the run's inbox in a new tab, where the next steps click the email and its link;
+`get_run_emails` lets the agent read the same emails (e.g. to check a confirmation link or why none came).
+
+## Security
+
+The key — or the access token of a signed-in client — stays in the client's configuration or request: the
+server keeps it in memory only, never writes it to disk or to its log (stderr), and sends it only to the BugBoom
+API (step screenshots are fetched from their presigned URL without it). An access token lives an hour; the
+client renews it with its refresh token (rotated on every use) until the member disconnects it in BugBoom or
+leaves the organization. DOM snapshots are taken by the runner without scripts, styles, event
+handlers, `javascript:` URLs and plugins, with password fields, inputs that look secret and secret variables
+blanked. Run logs never hold request or response bodies; `Authorization`, `Cookie`, `Set-Cookie`,
+`Proxy-Authorization` and headers with token, secret or key in their name are `<redacted>`, and the values of
+secret variables are removed from console texts, URLs and headers.
+
+## Development
+
+```bash
+npm run build -w @bugboom/mcp        # dist/bugboom-mcp.mjs (+ THIRD-PARTY-LICENSES.txt)
+npm run sync-step-schemas -w @bugboom/mcp   # src/schemas.json from ../bugboom-back-end (the build does it too)
+npx vitest run --project mcp         # tools against a mock API; the built server over stdio and HTTP
+BUGBOOM_API_KEY=bb_… BUGBOOM_API_URL=http://localhost:8280/api/public/v1 npx @modelcontextprotocol/inspector node packages/mcp/dist/bugboom-mcp.mjs
+```
+
+## License
+
+MIT, see [LICENSE](LICENSE).

package/dist/THIRD-PARTY-LICENSES.txt

@@ -0,0 +1,289 @@
+Packages bundled into bugboom-mcp.mjs:
+
+@hono/node-server@2.1.5 (MIT)
+
+MIT License
+
+Copyright (c) 2022 - present, Yusuke Wada and Hono contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+------------------------------------------------------------------------
+
+@modelcontextprotocol/sdk@1.32.1 (MIT)
+
+MIT License
+
+Copyright (c) 2024 Anthropic, PBC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+------------------------------------------------------------------------
+
+ajv@8.20.0 (MIT)
+
+The MIT License (MIT)
+
+Copyright (c) 2015-2021 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+------------------------------------------------------------------------
+
+ajv-formats@3.0.1 (MIT)
+
+MIT License
+
+Copyright (c) 2020 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+------------------------------------------------------------------------
+
+content-type@1.0.5 (MIT)
+
+(The MIT License)
+
+Copyright (c) 2015 Douglas Christopher Wilson
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+------------------------------------------------------------------------
+
+fast-deep-equal@3.1.3 (MIT)
+
+MIT License
+
+Copyright (c) 2017 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+------------------------------------------------------------------------
+
+fast-uri@3.1.9 (BSD-3-Clause)
+
+Copyright (c) 2011-2021, Gary Court until https://github.com/garycourt/uri-js/commit/a1acf730b4bba3f1097c9f52e7d9d3aba8cdcaae
+Copyright (c) 2021-present The Fastify team <https://github.com/fastify/fastify#team>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+    * The names of any contributors may not be used to endorse or promote
+      products derived from this software without specific prior written
+      permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS AND CONTRIBUTORS BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+                                  *   *   *
+
+The complete list of contributors can be found at:
+- https://github.com/garycourt/uri-js/graphs/contributors
+
+------------------------------------------------------------------------
+
+hono@4.13.13 (MIT)
+
+MIT License
+
+Copyright (c) 2021 - present, Yusuke Wada and Hono contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+------------------------------------------------------------------------
+
+json-schema-traverse@1.0.0 (MIT)
+
+MIT License
+
+Copyright (c) 2017 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+------------------------------------------------------------------------
+
+zod@4.6.7 (MIT)
+
+MIT License
+
+Copyright (c) 2025 Colin McDonnell
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+------------------------------------------------------------------------
+
+zod-to-json-schema@3.25.2 (ISC)
+
+ISC License
+
+Copyright (c) 2020, Stefan Terdell
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.