@christopher_dondici/mcp-gen 2.1.2

package/dist/core/parser.js

@@ -0,0 +1,372 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseOpenAPI = parseOpenAPI;
+const swagger_parser_1 = __importDefault(require("@apidevtools/swagger-parser"));
+const TS_RESERVED = new Set([
+    "break", "case", "catch", "class", "const", "continue", "debugger",
+    "default", "delete", "do", "else", "enum", "export", "extends", "false",
+    "finally", "for", "function", "if", "import", "in", "instanceof", "new",
+    "null", "return", "super", "switch", "this", "throw", "true", "try",
+    "typeof", "var", "void", "while", "with", "implements", "interface",
+    "let", "package", "private", "protected", "public", "static", "yield",
+]);
+const PY_RESERVED = new Set([
+    "and", "as", "assert", "async", "await", "break", "class", "continue",
+    "def", "del", "elif", "else", "except", "finally", "for", "from",
+    "global", "if", "import", "in", "is", "lambda", "nonlocal", "not", "or",
+    "pass", "raise", "return", "try", "while", "with", "yield",
+]);
+const GO_RESERVED = new Set([
+    "break", "case", "chan", "const", "continue", "default", "defer", "else",
+    "fallthrough", "for", "func", "go", "goto", "if", "import", "interface",
+    "map", "package", "range", "return", "select", "struct", "switch", "type",
+    "var",
+]);
+const ALL_RESERVED = new Set([...TS_RESERVED, ...PY_RESERVED, ...GO_RESERVED]);
+// Resolve a $ref string to its component name: "#/components/schemas/User" → "User"
+function refToName(ref) {
+    return ref.split("/").pop() ?? ref;
+}
+function openapiTypeToTS(type) {
+    switch (type) {
+        case "integer":
+        case "number":
+            return "number";
+        case "boolean":
+            return "boolean";
+        case "object":
+            return "object";
+        case "array":
+            return "array";
+        default:
+            return "string";
+    }
+}
+/** Map an OpenAPI schema to an MCP tool-argument type, honoring enums. */
+function schemaToParamType(schema) {
+    if (!schema)
+        return { type: "string" };
+    if ("$ref" in schema) {
+        // We don't resolve refs here — the template layer uses `schema` when available.
+        return { type: "object" };
+    }
+    const s = schema;
+    const t = openapiTypeToTS(s.type ?? "string");
+    return { type: t, format: s.format, enum: s.enum };
+}
+function resolveSchemaProperties(schema, components, visited = new Set()) {
+    // Guard against circular $ref chains (e.g. TreeNode -> children: TreeNode[])
+    if (visited.has(schema))
+        return [];
+    visited.add(schema);
+    const props = [];
+    if (!schema.properties)
+        return props;
+    for (const [name, rawProp] of Object.entries(schema.properties)) {
+        const prop = rawProp;
+        if ("$ref" in prop) {
+            props.push({
+                name,
+                type: refToName(prop.$ref),
+                description: "",
+                nullable: false,
+                isArray: false,
+                ref: refToName(prop.$ref),
+            });
+            continue;
+        }
+        const isArray = prop.type === "array";
+        let itemRef;
+        let type = prop.type ? openapiTypeToTS(prop.type) : "string";
+        if (isArray && prop.items) {
+            const items = prop.items;
+            if ("$ref" in items) {
+                itemRef = refToName(items.$ref);
+                type = itemRef;
+            }
+            else {
+                type = items.type ?? "string";
+            }
+        }
+        props.push({
+            name,
+            type: isArray ? `${type}[]` : type,
+            description: prop.description ?? "",
+            nullable: prop.nullable ?? false,
+            isArray,
+            ref: itemRef,
+        });
+    }
+    return props;
+}
+function extractExampleResponse(operation) {
+    const responses = operation.responses;
+    if (!responses)
+        return null;
+    const successCode = Object.keys(responses).find((c) => c.startsWith("2") || c === "default");
+    if (!successCode)
+        return null;
+    const response = responses[successCode];
+    if (!response?.content)
+        return null;
+    const jsonContent = response.content["application/json"];
+    if (!jsonContent)
+        return null;
+    // Try example first, then schema example
+    if (jsonContent.example)
+        return jsonContent.example;
+    if (jsonContent.schema && !("$ref" in jsonContent.schema)) {
+        return jsonContent.schema.example ?? null;
+    }
+    return null;
+}
+/** Build a unique, valid identifier for a tool from method + path.
+ *  Handles reserved words and name collisions by appending an index. */
+function pathToToolName(method, path, used) {
+    let name = `${method.toLowerCase()}_${path
+        .replace(/\//g, "_")
+        .replace(/[{}]/g, "")
+        .replace(/[^a-zA-Z0-9_]/g, "")
+        .replace(/^_/, "")
+        .replace(/_+/g, "_")
+        .toLowerCase()}`;
+    name = name.replace(/-+$/g, "");
+    if (ALL_RESERVED.has(name) || name === "")
+        name = `${name || "tool"}_handler`;
+    let candidate = name;
+    let i = 2;
+    while (used.has(candidate)) {
+        candidate = `${name}_${i}`;
+        i += 1;
+    }
+    used.add(candidate);
+    return candidate;
+}
+function collectParameters(pathItem, operation) {
+    const out = [];
+    const seen = new Set();
+    const all = [...(pathItem.parameters ?? []), ...(operation.parameters ?? [])];
+    for (const raw of all) {
+        if ("$ref" in raw)
+            continue;
+        const p = raw;
+        const key = `${p.in}:${p.name}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push(p);
+    }
+    return out;
+}
+function buildTools(paths, components) {
+    const tools = [];
+    const usedNames = new Set();
+    const METHODS = ["get", "post", "put", "patch", "delete", "head", "options"];
+    const REF_SCHEMAS = components?.schemas ?? {};
+    for (const [path, pathItem] of Object.entries(paths)) {
+        if (!pathItem)
+            continue;
+        for (const method of METHODS) {
+            const operation = pathItem[method];
+            if (!operation)
+                continue;
+            const params = [];
+            // Path + query + header + cookie parameters (path-level merged, deduped)
+            for (const rawParam of collectParameters(pathItem, operation)) {
+                const param = rawParam;
+                const schema = (param.schema ?? { type: "string" });
+                const typed = schemaToParamType(schema);
+                params.push({
+                    name: param.name,
+                    description: param.description ?? `${param.in} parameter`,
+                    type: typed.type,
+                    required: param.required ?? param.in === "path",
+                    in: (["path", "query", "header", "cookie"].includes(param.in)
+                        ? param.in
+                        : "query"),
+                    schema,
+                    format: typed.format,
+                    enum: typed.enum,
+                });
+            }
+            // Request body (resolving $ref) → add as "body" param
+            let requestBody;
+            const rawBody = operation.requestBody;
+            if (rawBody) {
+                if ("$ref" in rawBody) {
+                    const refName = refToName(rawBody.$ref);
+                    requestBody = REF_SCHEMAS[refName] ??
+                        undefined;
+                }
+                else {
+                    requestBody = rawBody;
+                }
+            }
+            if (requestBody) {
+                const jsonSchema = requestBody.content?.["application/json"]?.schema;
+                if (jsonSchema) {
+                    // If body schema is a $ref, use a "body" object whose schema points at the ref name.
+                    let bodySchema;
+                    let bodyEnum;
+                    let bodyFormat;
+                    if ("$ref" in jsonSchema) {
+                        bodySchema = { type: "object" };
+                        const refName = refToName(jsonSchema.$ref);
+                        // remember ref via format-less trick: store name in description? No — use enum-free schema.
+                        bodySchema.mcpRef = refName;
+                    }
+                    else {
+                        bodySchema = jsonSchema;
+                        bodyEnum = bodySchema.enum;
+                        bodyFormat = bodySchema.format;
+                    }
+                    params.push({
+                        name: "body",
+                        description: requestBody.description ?? "Request body",
+                        type: "object",
+                        required: requestBody.required ?? false,
+                        in: "body",
+                        schema: bodySchema,
+                        format: bodyFormat,
+                        enum: bodyEnum,
+                    });
+                }
+            }
+            tools.push({
+                name: pathToToolName(method, path, usedNames),
+                description: operation.summary ??
+                    operation.description ??
+                    `${method.toUpperCase()} ${path}`,
+                method: method.toUpperCase(),
+                path,
+                params,
+                security: operation.security,
+                exampleResponse: extractExampleResponse(operation),
+                tags: operation.tags ?? [],
+            });
+        }
+    }
+    return tools;
+}
+function buildModels(components) {
+    if (!components?.schemas)
+        return [];
+    const models = [];
+    for (const [name, rawSchema] of Object.entries(components.schemas)) {
+        if ("$ref" in rawSchema)
+            continue;
+        const schema = rawSchema;
+        // Enums become real model types (string/number unions)
+        if (schema.enum) {
+            models.push({
+                name,
+                description: schema.description ?? "",
+                properties: [],
+                required: [],
+                isEnum: true,
+                enumValues: schema.enum,
+            });
+            continue;
+        }
+        // Handle allOf (simple merge, no polymorphism in MVP)
+        let resolvedSchema = schema;
+        if (schema.allOf) {
+            const merged = {
+                type: "object",
+                properties: {},
+                required: [],
+            };
+            for (const sub of schema.allOf) {
+                if ("$ref" in sub)
+                    continue;
+                Object.assign(merged.properties, sub.properties ?? {});
+                merged.required = [
+                    ...(merged.required ?? []),
+                    ...(sub.required ?? []),
+                ];
+            }
+            resolvedSchema = merged;
+        }
+        // Handle oneOf / anyOf by recording referenced component names
+        const oneOf = schema.oneOf
+            ? schema.oneOf
+                .map((s) => {
+                if ("$ref" in s)
+                    return refToName(s.$ref);
+                return undefined;
+            })
+                .filter(Boolean)
+            : undefined;
+        const anyOf = schema.anyOf
+            ? schema.anyOf
+                .map((s) => {
+                if ("$ref" in s)
+                    return refToName(s.$ref);
+                return undefined;
+            })
+                .filter(Boolean)
+            : undefined;
+        models.push({
+            name,
+            description: schema.description ?? "",
+            properties: resolveSchemaProperties(resolvedSchema, components),
+            required: schema.required ?? [],
+            isEnum: false,
+            oneOf,
+            anyOf,
+            discriminator: schema.discriminator ?? null,
+        });
+    }
+    return models;
+}
+async function parseOpenAPI(inputPath) {
+    let api;
+    let raw;
+    try {
+        // parse returns the original document with $ref intact
+        raw = (await swagger_parser_1.default.parse(inputPath));
+        // dereference resolves $refs inline; circular:"ignore" prevents infinite loops
+        // on self-referential schemas (e.g. TreeNode { children: TreeNode[] })
+        api = (await swagger_parser_1.default.dereference(inputPath, {
+            dereference: { circular: "ignore" },
+        }));
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`OpenAPI validation failed: ${message}`);
+    }
+    if (!("openapi" in api) || !api.openapi.startsWith("3")) {
+        throw new Error(`Only OpenAPI v3.x is supported. Got: ${"swagger" in api ? api.swagger : "unknown"}`);
+    }
+    const tools = buildTools(api.paths ?? {}, api.components);
+    // Build models from the raw (non-dereferenced) components so $ref targets
+    // like oneOf/anyOf remain as ReferenceObjects and we can extract names.
+    const models = buildModels(raw.components);
+    const serverName = (api.info.title ?? "mcp-server")
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-|-$/g, "");
+    const baseUrl = api.servers?.[0]?.url ?? "https://api.example.com";
+    const requiresAuth = tools.some((t) => t.security && t.security.length > 0) ||
+        Boolean(api.components?.securitySchemes &&
+            Object.keys(api.components.securitySchemes).length > 0);
+    return {
+        serverName,
+        serverVersion: api.info.version ?? "1.0.0",
+        generatorVersion: "",
+        tools,
+        models,
+        info: {
+            title: api.info.title ?? "MCP Server",
+            description: api.info.description ?? "",
+            version: api.info.version ?? "1.0.0",
+        },
+        baseUrl,
+        requiresAuth,
+        securitySchemes: api.components?.securitySchemes,
+    };
+}
+//# sourceMappingURL=parser.js.map

package/dist/core/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/core/parser.ts"],"names":[],"mappings":";;;;;AAiXA,oCA2DC;AA5aD,iFAAwD;AAUxD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU;IAClE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO;IACvE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK;IACvE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;IACnE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW;IACnE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;CACtE,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU;IACrE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM;IAChE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI;IACvE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO;CAC3D,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM;IACxE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW;IACvE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM;IACzE,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,WAAW,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;AAE/E,oFAAoF;AACpF,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC;AACrC,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAS,iBAAiB,CACxB,MAAsE;IAEtE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACvC,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QACrB,gFAAgF;QAChF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,CAAC,GAAG,MAAgC,CAAC;IAC3C,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAyB,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAuC,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAA8B,EAC9B,UAAkD,EAClD,UAAuC,IAAI,GAAG,EAAE;IAEhD,6EAA6E;IAC7E,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEpB,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAErC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,OAA6D,CAAC;QAE3E,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC1B,WAAW,EAAE,EAAE;gBACf,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,KAAK;gBACd,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;aAC1B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;QACtC,IAAI,OAA2B,CAAC;QAChC,IAAI,IAAI,GAAW,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAErE,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAA2D,CAAC;YAC/E,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;gBACpB,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,GAAG,OAAO,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAI,KAAgC,CAAC,IAAI,IAAI,QAAQ,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CAAC;YACT,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;YAClC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;YAChC,OAAO;YACP,GAAG,EAAE,OAAO;SACb,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAC7B,SAAoC;IAEpC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,CAC5C,CAAC;IACF,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAA6B,CAAC;IACpE,IAAI,CAAC,QAAQ,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,yCAAyC;IACzC,IAAI,WAAW,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC,OAAO,CAAC;IACpD,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,OAAQ,WAAW,CAAC,MAAiC,CAAC,OAAO,IAAI,IAAI,CAAC;IACxE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;wEACwE;AACxE,SAAS,cAAc,CAAC,MAAc,EAAE,IAAY,EAAE,IAAiB;IACrE,IAAI,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI;SACvC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC7B,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,WAAW,EAAE,EAAE,CAAC;IACnB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE;QAAE,IAAI,GAAG,GAAG,IAAI,IAAI,MAAM,UAAU,CAAC;IAC9E,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,GAAG,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;QAC3B,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAkC,EAClC,SAAoC;IAEpC,MAAM,GAAG,GAAgC,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,IAAI,MAAM,IAAI,GAAG;YAAE,SAAS;QAC5B,MAAM,CAAC,GAAG,GAAgC,CAAC;QAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CACjB,KAA4B,EAC5B,UAAkD;IAElD,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;IACtF,MAAM,WAAW,GAAG,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC;IAE9C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAI,QAAoC,CAAC,MAAM,CAEjD,CAAC;YACd,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,MAAM,MAAM,GAAmB,EAAE,CAAC;YAElC,yEAAyE;YACzE,KAAK,MAAM,QAAQ,IAAI,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC9D,MAAM,KAAK,GAAG,QAAqC,CAAC;gBACpD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAA2B,CAAC;gBAC9E,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAExC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,GAAG,KAAK,CAAC,EAAE,YAAY;oBACzD,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,KAAK,MAAM;oBAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC3D,CAAC,CAAC,KAAK,CAAC,EAAE;wBACV,CAAC,CAAC,OAAO,CAAuB;oBAClC,MAAM;oBACN,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,sDAAsD;YACtD,IAAI,WAAoD,CAAC;YACzD,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC;YACtC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;oBACtB,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACxC,WAAW,GAAI,WAAW,CAAC,OAAO,CAAiC;wBACjE,SAAS,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACN,WAAW,GAAG,OAAO,CAAC;gBACxB,CAAC;YACH,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;gBACrE,IAAI,UAAU,EAAE,CAAC;oBACf,qFAAqF;oBACrF,IAAI,UAAkC,CAAC;oBACvC,IAAI,QAAyC,CAAC;oBAC9C,IAAI,UAA8B,CAAC;oBACnC,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;wBACzB,UAAU,GAAG,EAAE,IAAI,EAAE,QAAQ,EAA4B,CAAC;wBAC1D,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;wBAC3C,4FAA4F;wBAC3F,UAA2D,CAAC,MAAM,GAAG,OAAO,CAAC;oBAChF,CAAC;yBAAM,CAAC;wBACN,UAAU,GAAG,UAAoC,CAAC;wBAClD,QAAQ,GAAG,UAAU,CAAC,IAAuC,CAAC;wBAC9D,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;oBACjC,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,MAAM;wBACZ,WAAW,EAAE,WAAW,CAAC,WAAW,IAAI,cAAc;wBACtD,IAAI,EAAE,QAAQ;wBACd,QAAQ,EAAE,WAAW,CAAC,QAAQ,IAAI,KAAK;wBACvC,EAAE,EAAE,MAAM;wBACV,MAAM,EAAE,UAAU;wBAClB,MAAM,EAAE,UAAU;wBAClB,IAAI,EAAE,QAAQ;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC;gBAC7C,WAAW,EACT,SAAS,CAAC,OAAO;oBACjB,SAAS,CAAC,WAAW;oBACrB,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE;gBACnC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC5B,IAAI;gBACJ,MAAM;gBACN,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,eAAe,EAAE,sBAAsB,CAAC,SAAS,CAAC;gBAClD,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,EAAE;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAClB,UAAkD;IAElD,IAAI,CAAC,UAAU,EAAE,OAAO;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,IAAI,MAAM,IAAI,SAAS;YAAE,SAAS;QAClC,MAAM,MAAM,GAAG,SAAmC,CAAC;QAEnD,uDAAuD;QACvD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;gBACrC,UAAU,EAAE,EAAE;gBACd,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,MAAM,CAAC,IAA2B;aAC/C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,sDAAsD;QACtD,IAAI,cAAc,GAAG,MAAM,CAAC;QAC5B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,MAAM,GAA2B;gBACrC,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE;gBACd,QAAQ,EAAE,EAAE;aACb,CAAC;YACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,MAAM,IAAI,GAAG;oBAAE,SAAS;gBAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAW,EAAG,GAA8B,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;gBACpF,MAAM,CAAC,QAAQ,GAAG;oBAChB,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;oBAC1B,GAAG,CAAE,GAA8B,CAAC,QAAQ,IAAI,EAAE,CAAC;iBACpD,CAAC;YACJ,CAAC;YACD,cAAc,GAAG,MAAM,CAAC;QAC1B,CAAC;QAED,+DAA+D;QAC/D,MAAM,KAAK,GAAyB,MAAM,CAAC,KAAK;YAC9C,CAAC,CAAE,MAAM,CAAC,KAAK;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,IAAI,MAAM,IAAI,CAAC;oBAAE,OAAO,SAAS,CAAE,CAA+B,CAAC,IAAI,CAAC,CAAC;gBACzE,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;iBACD,MAAM,CAAC,OAAO,CAAc;YACjC,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,KAAK,GAAyB,MAAM,CAAC,KAAK;YAC9C,CAAC,CAAE,MAAM,CAAC,KAAK;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,IAAI,MAAM,IAAI,CAAC;oBAAE,OAAO,SAAS,CAAE,CAA+B,CAAC,IAAI,CAAC,CAAC;gBACzE,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;iBACD,MAAM,CAAC,OAAO,CAAc;YACjC,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,UAAU,EAAE,uBAAuB,CAAC,cAAc,EAAE,UAAU,CAAC;YAC/D,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;YAC/B,MAAM,EAAE,KAAK;YACb,KAAK;YACL,KAAK;YACL,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,IAAI,GAAuB,CAAC;IAC5B,IAAI,GAAuB,CAAC;IAE5B,IAAI,CAAC;QACH,uDAAuD;QACvD,GAAG,GAAG,CAAC,MAAM,wBAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAuB,CAAC;QAEnE,+EAA+E;QAC/E,uEAAuE;QACvE,GAAG,GAAG,CAAC,MAAM,wBAAa,CAAC,WAAW,CAAC,SAAS,EAAE;YAChD,WAAW,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;SACpC,CAAC,CAAuB,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,wCACE,SAAS,IAAI,GAAG,CAAC,CAAC,CAAE,GAA8B,CAAC,OAAO,CAAC,CAAC,CAAC,SAC/D,EAAE,CACH,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1D,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAE3C,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;SAChD,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAEzB,MAAM,OAAO,GACX,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,yBAAyB,CAAC;IAErD,MAAM,YAAY,GAChB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe;YACrC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE5D,OAAO;QACL,UAAU;QACV,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO;QAC1C,gBAAgB,EAAE,EAAE;QACpB,KAAK;QACL,MAAM;QACN,IAAI,EAAE;YACJ,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY;YACrC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE;YACvC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO;SACrC;QACD,OAAO;QACP,YAAY;QACZ,eAAe,EAAE,GAAG,CAAC,UAAU,EAAE,eAAe;KACjD,CAAC;AACJ,CAAC"}

package/dist/core/registry.d.ts

@@ -0,0 +1,13 @@
+export declare const KNOWN_SPECS: Record<string, {
+    url: string;
+    filename?: string;
+    description?: string;
+}>;
+export declare function fetchSpecToCwd(key: string, targetPath?: string): Promise<string>;
+export declare function listKnownSpecs(): string[];
+export declare function getSpecInfo(key: string): {
+    url: string;
+    filename?: string;
+    description?: string;
+} | null;
+//# sourceMappingURL=registry.d.ts.map

package/dist/core/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAmDhG,CAAC;AAEF,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA0CtF;AAED,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAExG"}

package/dist/core/registry.js

@@ -0,0 +1,107 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KNOWN_SPECS = void 0;
+exports.fetchSpecToCwd = fetchSpecToCwd;
+exports.listKnownSpecs = listKnownSpecs;
+exports.getSpecInfo = getSpecInfo;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const security_1 = require("./security");
+exports.KNOWN_SPECS = {
+    stripe: {
+        url: "https://raw.githubusercontent.com/stripe/openapi/master/openapi/spec3.json",
+        filename: "openapi.stripe.json",
+        description: "Stripe Payment API — comprehensive payment processing"
+    },
+    github: {
+        url: "https://raw.githubusercontent.com/github/rest-api-description/main/descriptions/api.github.com/api.github.com.json",
+        filename: "openapi.github.json",
+        description: "GitHub REST API — version control and collaboration platform"
+    },
+    slack: {
+        url: "https://raw.githubusercontent.com/slackapi/slack-api-specs/master/web-api/slack_web_openapi_v2.json",
+        filename: "openapi.slack.json",
+        description: "Slack Web API — messaging and workspace automation"
+    },
+    openai: {
+        url: "https://raw.githubusercontent.com/openai/openai-openapi/master/openapi.yaml",
+        filename: "openapi.openai.yaml",
+        description: "OpenAI API — GPT models, embeddings, and completion endpoints"
+    },
+    petstore: {
+        url: "https://petstore3.swagger.io/api/v3/openapi.json",
+        filename: "openapi.petstore.json",
+        description: "Swagger Petstore — example API for testing"
+    },
+    twilio: {
+        url: "https://raw.githubusercontent.com/twilio/twilio-oai/main/spec/json/twilio_openapi_v1.json",
+        filename: "openapi.twilio.json",
+        description: "Twilio Communications API — SMS, voice, video, messaging"
+    },
+    shopify: {
+        url: "https://shopify.dev/api/admin-rest/2024-01/openapi.json",
+        filename: "openapi.shopify.json",
+        description: "Shopify Admin API — e-commerce platform management"
+    },
+    kubernetes: {
+        url: "https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/swagger.json",
+        filename: "openapi.kubernetes.json",
+        description: "Kubernetes API — container orchestration platform"
+    },
+    digitalocean: {
+        url: "https://raw.githubusercontent.com/digitalocean/openapi/main/specification/DigitalOcean-public.v2.json",
+        filename: "openapi.digitalocean.json",
+        description: "DigitalOcean API — cloud infrastructure management"
+    },
+    azure: {
+        url: "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v3/types.json",
+        filename: "openapi.azure.json",
+        description: "Azure Resource Manager API — cloud resource management"
+    }
+};
+async function fetchSpecToCwd(key, targetPath) {
+    const entry = exports.KNOWN_SPECS[key];
+    if (!entry)
+        throw new Error(`Unknown registry key: ${key}`);
+    // Security: validate URL
+    (0, security_1.validateRemoteUrl)(entry.url);
+    // Create abort controller for timeout
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), 30000); // 30 seconds
+    try {
+        const res = await fetch(entry.url, {
+            signal: controller.signal,
+        });
+        if (!res.ok)
+            throw new Error(`Failed to fetch ${entry.url}: ${res.status} ${res.statusText}`);
+        // Security: validate Content-Type
+        const contentType = res.headers.get("content-type");
+        (0, security_1.validateContentType)(contentType);
+        // Security: validate content size before reading
+        const contentLength = res.headers.get("content-length");
+        if (contentLength) {
+            (0, security_1.validateContentSize)(parseInt(contentLength, 10));
+        }
+        const content = await res.text();
+        // Security: ensure content size after reading (in case header was missing/wrong)
+        (0, security_1.validateContentSize)(Buffer.byteLength(content, "utf-8"));
+        const filename = entry.filename ?? (path_1.default.basename(new URL(entry.url).pathname) || "openapi.json");
+        const outPath = path_1.default.resolve(targetPath ? targetPath : path_1.default.join(process.cwd(), filename));
+        fs_1.default.mkdirSync(path_1.default.dirname(outPath), { recursive: true });
+        fs_1.default.writeFileSync(outPath, content, "utf-8");
+        return outPath;
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
+function listKnownSpecs() {
+    return Object.keys(exports.KNOWN_SPECS);
+}
+function getSpecInfo(key) {
+    return exports.KNOWN_SPECS[key] ?? null;
+}
+//# sourceMappingURL=registry.js.map

package/dist/core/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":";;;;;;AAyDA,wCA0CC;AAED,wCAEC;AAED,kCAEC;AA3GD,4CAAoB;AACpB,gDAAwB;AACxB,yCAAyF;AAE5E,QAAA,WAAW,GAA6E;IACnG,MAAM,EAAE;QACN,GAAG,EAAE,4EAA4E;QACjF,QAAQ,EAAE,qBAAqB;QAC/B,WAAW,EAAE,uDAAuD;KACrE;IACD,MAAM,EAAE;QACN,GAAG,EAAE,oHAAoH;QACzH,QAAQ,EAAE,qBAAqB;QAC/B,WAAW,EAAE,8DAA8D;KAC5E;IACD,KAAK,EAAE;QACL,GAAG,EAAE,qGAAqG;QAC1G,QAAQ,EAAE,oBAAoB;QAC9B,WAAW,EAAE,oDAAoD;KAClE;IACD,MAAM,EAAE;QACN,GAAG,EAAE,6EAA6E;QAClF,QAAQ,EAAE,qBAAqB;QAC/B,WAAW,EAAE,+DAA+D;KAC7E;IACD,QAAQ,EAAE;QACR,GAAG,EAAE,kDAAkD;QACvD,QAAQ,EAAE,uBAAuB;QACjC,WAAW,EAAE,4CAA4C;KAC1D;IACD,MAAM,EAAE;QACN,GAAG,EAAE,2FAA2F;QAChG,QAAQ,EAAE,qBAAqB;QAC/B,WAAW,EAAE,0DAA0D;KACxE;IACD,OAAO,EAAE;QACP,GAAG,EAAE,yDAAyD;QAC9D,QAAQ,EAAE,sBAAsB;QAChC,WAAW,EAAE,oDAAoD;KAClE;IACD,UAAU,EAAE;QACV,GAAG,EAAE,8FAA8F;QACnG,QAAQ,EAAE,yBAAyB;QACnC,WAAW,EAAE,mDAAmD;KACjE;IACD,YAAY,EAAE;QACZ,GAAG,EAAE,uGAAuG;QAC5G,QAAQ,EAAE,2BAA2B;QACrC,WAAW,EAAE,oDAAoD;KAClE;IACD,KAAK,EAAE;QACL,GAAG,EAAE,gIAAgI;QACrI,QAAQ,EAAE,oBAAoB;QAC9B,WAAW,EAAE,wDAAwD;KACtE;CACF,CAAC;AAEK,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,UAAmB;IACnE,MAAM,KAAK,GAAG,mBAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;IAE5D,yBAAyB;IACzB,IAAA,4BAAiB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE7B,sCAAsC;IACtC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa;IAE5E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAE9F,kCAAkC;QAClC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACpD,IAAA,8BAAmB,EAAC,WAAW,CAAC,CAAC;QAEjC,iDAAiD;QACjD,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACxD,IAAI,aAAa,EAAE,CAAC;YAClB,IAAA,8BAAmB,EAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAEjC,iFAAiF;QACjF,IAAA,8BAAmB,EAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,cAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,CAAC;QAClG,MAAM,OAAO,GAAG,cAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE3F,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,YAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,mBAAW,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,WAAW,CAAC,GAAW;IACrC,OAAO,mBAAW,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAClC,CAAC"}

package/dist/core/security-lint.d.ts

@@ -0,0 +1,53 @@
+import { OpenAPIV3 } from "openapi-types";
+/**
+ * MCP Security & Lint Layer
+ *
+ * Provides:
+ * - Credential scanning (detect raw secrets in specs/handlers)
+ * - authContext contract validation
+ * - Tool policy enforcement
+ * - Lint rules (naming, descriptions, schemas, incremental markers)
+ */
+export interface SecurityRule {
+    id: string;
+    severity: "error" | "warning" | "info";
+    category: "credentials" | "authcontext" | "policy" | "lint";
+    message: string;
+    file?: string;
+    line?: number;
+    suggestion?: string;
+}
+export interface SecurityReport {
+    rules: SecurityRule[];
+    summary: {
+        errors: number;
+        warnings: number;
+        info: number;
+    };
+    passed: boolean;
+}
+/** Keywords that indicate raw credentials (blocked by default) */
+export declare const RAW_CREDENTIAL_KEYWORDS: string[];
+/** Reserved words that shouldn't be tool names */
+export declare const RESERVED_TOOL_NAMES: string[];
+/** Expected authContext fields */
+export declare const EXPECTED_AUTH_CONTEXT_FIELDS: string[];
+/** Scan a string for credential-like patterns */
+export declare function scanForCredentials(content: string, filePath?: string): SecurityRule[];
+/** Validate authContext structure in generated code */
+export declare function validateAuthContext(content: string, filePath?: string): SecurityRule[];
+/** Validate tool policies are defined */
+export declare function validateToolPolicies(content: string, filePath?: string): SecurityRule[];
+/** Lint naming conventions */
+export declare function lintNaming(content: string, filePath?: string): SecurityRule[];
+/** Lint descriptions */
+export declare function lintDescriptions(content: string, filePath?: string): SecurityRule[];
+/** Lint incremental markers */
+export declare function lintIncrementalMarkers(content: string, filePath?: string): SecurityRule[];
+/** Lint schema usage */
+export declare function lintSchemas(spec: OpenAPIV3.Document, filePath?: string): SecurityRule[];
+/** Main security/lint scan for a generated project */
+export declare function scanProject(projectPath: string): Promise<SecurityReport>;
+/** Format report for console output */
+export declare function formatReport(report: SecurityReport): string;
+//# sourceMappingURL=security-lint.d.ts.map

package/dist/core/security-lint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-lint.d.ts","sourceRoot":"","sources":["../../src/core/security-lint.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C;;;;;;;;GAQG;AAEH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,QAAQ,EAAE,aAAa,GAAG,aAAa,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,UAkBnC,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,mBAAmB,UAS/B,CAAC;AAEF,kCAAkC;AAClC,eAAO,MAAM,4BAA4B,UAUxC,CAAC;AAEF,iDAAiD;AACjD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAkB,GAC3B,YAAY,EAAE,CAgEhB;AAED,uDAAuD;AACvD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAkB,GAC3B,YAAY,EAAE,CAkChB;AAED,yCAAyC;AACzC,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAkB,GAC3B,YAAY,EAAE,CA0ChB;AAED,8BAA8B;AAC9B,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAkB,GAC3B,YAAY,EAAE,CAwChB;AAED,wBAAwB;AACxB,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAkB,GAC3B,YAAY,EAAE,CAsChB;AAED,+BAA+B;AAC/B,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAkB,GAC3B,YAAY,EAAE,CAuDhB;AAED,wBAAwB;AACxB,wBAAgB,WAAW,CACzB,IAAI,EAAE,SAAS,CAAC,QAAQ,EACxB,QAAQ,GAAE,MAAe,GACxB,YAAY,EAAE,CAmDhB;AAED,sDAAsD;AACtD,wBAAsB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAwD9E;AA6BD,uCAAuC;AACvC,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAwC3D"}