@christopher_dondici/mcp-gen 2.1.2

package/dist/core/security.js

@@ -0,0 +1,150 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateOutputPath = validateOutputPath;
+exports.validatePluginPath = validatePluginPath;
+exports.validateRemoteUrl = validateRemoteUrl;
+exports.validateContentSize = validateContentSize;
+exports.validateContentType = validateContentType;
+exports.sanitizeInput = sanitizeInput;
+exports.isPluginWhitelisted = isPluginWhitelisted;
+exports.validatePluginModule = validatePluginModule;
+const path_1 = __importDefault(require("path"));
+const fs_1 = __importDefault(require("fs"));
+/**
+ * Validates that a file path is within an allowed directory.
+ * Prevents path traversal attacks (e.g., ../../../etc/passwd).
+ */
+function validateOutputPath(filePath, baseDir) {
+    const resolvedPath = path_1.default.resolve(filePath);
+    const resolvedBase = path_1.default.resolve(baseDir);
+    if (!resolvedPath.startsWith(resolvedBase + path_1.default.sep) && resolvedPath !== resolvedBase) {
+        throw new Error(`Security error: Output path is outside the allowed directory. Path: ${filePath}, Base: ${baseDir}`);
+    }
+}
+/**
+ * Validates that a plugin path exists and is a directory.
+ * Prevents loading arbitrary code from unexpected locations.
+ */
+function validatePluginPath(pluginPath) {
+    const resolvedPath = path_1.default.resolve(pluginPath);
+    if (!fs_1.default.existsSync(resolvedPath)) {
+        throw new Error(`Plugin path does not exist: ${pluginPath}`);
+    }
+    const stat = fs_1.default.lstatSync(resolvedPath);
+    // Reject symbolic links to prevent symlink attacks
+    if (stat.isSymbolicLink()) {
+        throw new Error(`Security error: Plugin path is a symbolic link: ${pluginPath}`);
+    }
+    if (!stat.isDirectory()) {
+        throw new Error(`Plugin path must be a directory: ${pluginPath}`);
+    }
+}
+/**
+ * Validates a remote URL for fetching OpenAPI specs.
+ * Only allows HTTPS and known safe domains.
+ */
+function validateRemoteUrl(urlString) {
+    try {
+        const url = new URL(urlString);
+        // Only allow HTTPS (enforce encrypted transport)
+        if (url.protocol !== "https:") {
+            throw new Error("Only HTTPS URLs are allowed for remote specs");
+        }
+        // Blacklist localhost and private IPs to prevent SSRF attacks
+        let hostname = url.hostname;
+        // Handle IPv6 format - URL.hostname returns it without brackets and normalized
+        const privatePatterns = [
+            /^localhost$/i,
+            /^127\./,
+            /^192\.168\./,
+            /^10\./,
+            /^172\.(1[6-9]|2[0-9]|3[01])\./,
+            /^::1$/i,
+            /^fc00:/i,
+            /^fe80:/i,
+            /^169\.254\./,
+        ];
+        for (const pattern of privatePatterns) {
+            if (pattern.test(hostname)) {
+                throw new Error(`Security error: Private or local URLs are not allowed: ${urlString}`);
+            }
+        }
+    }
+    catch (err) {
+        if (err instanceof Error) {
+            throw err;
+        }
+        throw new Error(`Invalid URL: ${urlString}`);
+    }
+}
+/**
+ * Validates the size of remote content to prevent DoS attacks.
+ * Max size: 50MB
+ */
+function validateContentSize(size, maxBytes = 50 * 1024 * 1024) {
+    if (size > maxBytes) {
+        throw new Error(`Security error: Content size (${size} bytes) exceeds maximum allowed (${maxBytes} bytes)`);
+    }
+}
+/**
+ * Validates Content-Type of remote response.
+ * Only allows JSON and YAML for OpenAPI specs.
+ */
+function validateContentType(contentType) {
+    if (!contentType) {
+        throw new Error("Security error: Content-Type header is missing");
+    }
+    const validTypes = ["application/json", "application/yaml", "text/yaml", "text/plain"];
+    const baseType = contentType.split(";")[0].toLowerCase();
+    if (!validTypes.includes(baseType)) {
+        throw new Error(`Security error: Invalid Content-Type for OpenAPI spec: ${contentType}`);
+    }
+}
+/**
+ * Sanitizes user input to prevent injection attacks.
+ * Removes/escapes potentially dangerous characters.
+ */
+function sanitizeInput(input, maxLength = 256) {
+    if (typeof input !== "string") {
+        throw new Error("Input must be a string");
+    }
+    if (input.length > maxLength) {
+        throw new Error(`Input exceeds maximum length of ${maxLength} characters`);
+    }
+    // Remove null bytes and control characters
+    return input.replace(/[\x00-\x08\x0b-\x0c\x0e-\x1f\x7f]/g, "");
+}
+/**
+ * Creates a whitelist of allowed plugin modules.
+ * Returns true if plugin is in the whitelist.
+ */
+function isPluginWhitelisted(pluginName, whitelist) {
+    return whitelist.includes(pluginName);
+}
+/**
+ * Validates that the plugin module exports a valid structure.
+ * Prevents malicious modules from executing arbitrary code.
+ */
+function validatePluginModule(module) {
+    if (typeof module !== "object" || module === null) {
+        return false;
+    }
+    const moduleObj = module;
+    // Only allow specific exported functions
+    const allowedExports = ["registerHandlebars"];
+    const exportedKeys = Object.keys(moduleObj);
+    for (const key of exportedKeys) {
+        if (!allowedExports.includes(key) && !key.startsWith("_")) {
+            console.warn(`Warning: Plugin exports unexpected key: ${key}`);
+        }
+    }
+    // If registerHandlebars exists, it must be a function
+    if ("registerHandlebars" in moduleObj && typeof moduleObj.registerHandlebars !== "function") {
+        throw new Error("Plugin exports invalid registerHandlebars: must be a function");
+    }
+    return true;
+}
+//# sourceMappingURL=security.js.map

package/dist/core/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/core/security.ts"],"names":[],"mappings":";;;;;AAOA,gDASC;AAMD,gDAiBC;AAMD,8CAoCC;AAMD,kDAMC;AAMD,kDAWC;AAMD,sCAWC;AAMD,kDAEC;AAMD,oDAuBC;AApKD,gDAAwB;AACxB,4CAAoB;AAEpB;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,QAAgB,EAAE,OAAe;IAClE,MAAM,YAAY,GAAG,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,GAAG,cAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CACb,uEAAuE,QAAQ,WAAW,OAAO,EAAE,CACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,UAAkB;IACnD,MAAM,YAAY,GAAG,cAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE9C,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,IAAI,GAAG,YAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAExC,mDAAmD;IACnD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAE/B,iDAAiD;QACjD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,8DAA8D;QAC9D,IAAI,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAE5B,+EAA+E;QAC/E,MAAM,eAAe,GAAG;YACtB,cAAc;YACd,QAAQ;YACR,aAAa;YACb,OAAO;YACP,+BAA+B;YAC/B,QAAQ;YACR,SAAS;YACT,SAAS;YACT,aAAa;SACd,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,0DAA0D,SAAS,EAAE,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,IAAY,EAAE,WAAmB,EAAE,GAAG,IAAI,GAAG,IAAI;IACnF,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,oCAAoC,QAAQ,SAAS,CAC3F,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,WAA0B;IAC5D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAEzD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,0DAA0D,WAAW,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,KAAa,EAAE,YAAoB,GAAG;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,aAAa,CAAC,CAAC;IAC7E,CAAC;IAED,2CAA2C;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,oCAAoC,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,UAAkB,EAAE,SAAmB;IACzE,OAAO,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAAC,MAAe;IAClD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,MAAiC,CAAC;IAEpD,yCAAyC;IACzC,MAAM,cAAc,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE5C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,oBAAoB,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/templating.d.ts

@@ -0,0 +1,5 @@
+export declare function compileTemplate(templatePath: string): HandlebarsTemplateDelegate;
+export declare function renderTemplate(templatePath: string, context: Record<string, unknown>): string;
+/** Load all .hbs files in a directory as named partials */
+export declare function registerPartials(partialsDir: string): void;
+//# sourceMappingURL=templating.d.ts.map

package/dist/core/templating.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templating.d.ts","sourceRoot":"","sources":["../../src/core/templating.ts"],"names":[],"mappings":"AAgMA,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,0BAA0B,CAQhF;AAED,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,CAGR;AAED,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAQ1D"}

package/dist/core/templating.js

@@ -0,0 +1,211 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileTemplate = compileTemplate;
+exports.renderTemplate = renderTemplate;
+exports.registerPartials = registerPartials;
+const handlebars_1 = __importDefault(require("handlebars"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+// Register helpers used across templates
+handlebars_1.default.registerHelper("eq", (a, b) => a === b);
+handlebars_1.default.registerHelper("ne", (a, b) => a !== b);
+handlebars_1.default.registerHelper("and", (a, b) => Boolean(a && b));
+handlebars_1.default.registerHelper("or", (a, b) => Boolean(a || b));
+handlebars_1.default.registerHelper("not", (a) => !a);
+handlebars_1.default.registerHelper("gt", (a, b) => a > b);
+/** snake_case → PascalCase */
+handlebars_1.default.registerHelper("pascal", (str) => {
+    if (typeof str !== "string")
+        return str;
+    return str
+        .split(/[_\-\s]+/)
+        .map((w) => w.charAt(0).toUpperCase() + w.slice(1))
+        .join("");
+});
+/** PascalCase or snake_case → camelCase */
+handlebars_1.default.registerHelper("camel", (str) => {
+    if (typeof str !== "string")
+        return str;
+    const pascal = str
+        .split(/[_\-\s]+/)
+        .map((w) => w.charAt(0).toUpperCase() + w.slice(1))
+        .join("");
+    return pascal.charAt(0).toLowerCase() + pascal.slice(1);
+});
+/** Stringify a value as JSON for example responses */
+handlebars_1.default.registerHelper("json", (val) => JSON.stringify(val, null, 2));
+/** Render a literal: strings get quoted+escaped, everything else is JSON. */
+handlebars_1.default.registerHelper("literal", (val) => {
+    if (typeof val === "string") {
+        return '"' + val.replace(/\\/g, "\\\\").replace(/"/g, '\\"') + '"';
+    }
+    return JSON.stringify(val);
+});
+/** Filter params by required/optional */
+handlebars_1.default.registerHelper("requiredParams", (params) => (params ?? []).filter((p) => p.required));
+/** Collect unique header parameters across all tools (used to render the client's buildHeaders once). */
+handlebars_1.default.registerHelper("allHeaderParams", (tools) => {
+    const seen = new Set();
+    const out = [];
+    for (const tool of tools ?? []) {
+        for (const p of tool.params ?? []) {
+            if (p.in === "header" && !seen.has(p.name)) {
+                seen.add(p.name);
+                out.push({ name: p.name });
+            }
+        }
+    }
+    return out;
+});
+handlebars_1.default.registerHelper("optionalParams", (params) => (params ?? []).filter((p) => !p.required));
+/** Map MCP type to TypeScript type string */
+handlebars_1.default.registerHelper("tsType", (type) => {
+    switch (type) {
+        case "number":
+            return "number";
+        case "boolean":
+            return "boolean";
+        case "object":
+            return "Record<string, unknown>";
+        case "array":
+            return "unknown[]";
+        default:
+            return "string";
+    }
+});
+/** Map MCP type to Go type string */
+handlebars_1.default.registerHelper("goType", (type) => {
+    switch (type) {
+        case "number":
+            return "float64";
+        case "boolean":
+            return "bool";
+        case "array":
+            return "[]any";
+        case "object":
+            return "map[string]any";
+        default:
+            return "string";
+    }
+});
+/** Type name → Go type constructor for mcp-go's With<Type> option (String from "string", Number from "number"...). */
+handlebars_1.default.registerHelper("pascalGoType", (type) => {
+    switch (type) {
+        case "number":
+            return "Number";
+        case "boolean":
+            return "Boolean";
+        case "object":
+            return "Object";
+        case "array":
+            return "Array";
+        default:
+            return "String";
+    }
+});
+/** typeof helper so Go enum literals can quote strings vs leave numbers raw. */
+handlebars_1.default.registerHelper("typeof", (val) => typeof val);
+/** Escape a string for a Go double-quoted string literal (\\ \n \r \t \"). */
+handlebars_1.default.registerHelper("escapeLiteral", (val) => {
+    if (val === null || val === undefined)
+        return "";
+    const out = [];
+    for (const ch of String(val)) {
+        const code = ch.charCodeAt(0);
+        if (ch === '"')
+            out.push('\\"');
+        else if (ch === "\\")
+            out.push("\\\\");
+        else if (ch === "\n")
+            out.push("\\n");
+        else if (ch === "\r")
+            out.push("\\r");
+        else if (ch === "\t")
+            out.push("\\t");
+        else if (code < 0x20 || code === 0x7f)
+            out.push("\\u%04x".replace("%04x", code.toString(16).padStart(4, "0")));
+        else
+            out.push(ch);
+    }
+    return out.join("");
+});
+/** Map MCP type to Python type annotation. */
+handlebars_1.default.registerHelper("pyType", (prop) => {
+    const base = prop.ref ?? (() => {
+        switch (prop.type) {
+            case "number": return "float";
+            case "boolean": return "bool";
+            case "object": return "dict";
+            case "array": return "List[Any]";
+            default: return "str";
+        }
+    })();
+    return prop.isArray ? `List[${base}]` : base;
+});
+/** Escape a string for safe embedding inside a double-quoted string literal.
+ *  Escapes backslashes, double quotes, control chars and newlines so arbitrary
+ *  OpenAPI descriptions cannot break or inject into generated code. */
+handlebars_1.default.registerHelper("escapeText", (val) => {
+    if (val === null || val === undefined)
+        return "";
+    const out = [];
+    for (const ch of String(val)) {
+        const code = ch.charCodeAt(0);
+        if (ch === '"')
+            out.push('\\"');
+        else if (ch === "\\")
+            out.push("\\\\");
+        else if (ch === "\n")
+            out.push("\\n");
+        else if (ch === "\r")
+            out.push("\\r");
+        else if (ch === "\t")
+            out.push("\\t");
+        else if (code < 0x20 || code === 0x7f) {
+            out.push("\\u" + code.toString(16).padStart(4, "0"));
+        }
+        else {
+            out.push(ch);
+        }
+    }
+    return out.join("");
+});
+/** Indent a block of text by N spaces */
+handlebars_1.default.registerHelper("indent", (text, spaces) => {
+    if (typeof text !== "string")
+        return text;
+    const pad = " ".repeat(spaces);
+    return text
+        .split("\n")
+        .map((line) => (line ? pad + line : line))
+        .join("\n");
+});
+const templateCache = new Map();
+function compileTemplate(templatePath) {
+    if (templateCache.has(templatePath)) {
+        return templateCache.get(templatePath);
+    }
+    const source = fs_1.default.readFileSync(templatePath, "utf-8");
+    const compiled = handlebars_1.default.compile(source, { noEscape: true });
+    templateCache.set(templatePath, compiled);
+    return compiled;
+}
+function renderTemplate(templatePath, context) {
+    const fn = compileTemplate(templatePath);
+    return fn(context);
+}
+/** Load all .hbs files in a directory as named partials */
+function registerPartials(partialsDir) {
+    if (!fs_1.default.existsSync(partialsDir))
+        return;
+    const files = fs_1.default.readdirSync(partialsDir).filter((f) => f.endsWith(".hbs"));
+    for (const file of files) {
+        const name = path_1.default.basename(file, ".hbs");
+        const source = fs_1.default.readFileSync(path_1.default.join(partialsDir, file), "utf-8");
+        handlebars_1.default.registerPartial(name, source);
+    }
+}
+//# sourceMappingURL=templating.js.map

package/dist/core/templating.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templating.js","sourceRoot":"","sources":["../../src/core/templating.ts"],"names":[],"mappings":";;;;;AAgMA,0CAQC;AAED,wCAMC;AAGD,4CAQC;AA3ND,4DAAoC;AACpC,4CAAoB;AACpB,gDAAwB;AAExB,yCAAyC;AAEzC,oBAAU,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACrE,oBAAU,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACrE,oBAAU,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9E,oBAAU,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7E,oBAAU,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,oBAAU,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAEjE,8BAA8B;AAC9B,oBAAU,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,GAAW,EAAE,EAAE;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,OAAO,GAAG;SACP,KAAK,CAAC,UAAU,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAClD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC,CAAC,CAAC;AAEH,2CAA2C;AAC3C,oBAAU,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE;IACjD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,MAAM,GAAG,GAAG;SACf,KAAK,CAAC,UAAU,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAClD,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,sDAAsD;AACtD,oBAAU,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,EAAE,CACjD,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAC7B,CAAC;AAEF,6EAA6E;AAC7E,oBAAU,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,GAAY,EAAU,EAAE;IAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEH,yCAAyC;AACzC,oBAAU,CAAC,cAAc,CACvB,gBAAgB,EAChB,CAAC,MAAoC,EAAE,EAAE,CACvC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC3C,CAAC;AAEF,yGAAyG;AACzG,oBAAU,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAC,KAA6D,EAAE,EAAE;IAC7G,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC,CAAC;AAEH,oBAAU,CAAC,cAAc,CACvB,gBAAgB,EAChB,CAAC,MAAoC,EAAE,EAAE,CACvC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC5C,CAAC;AAEF,6CAA6C;AAC7C,oBAAU,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,IAAY,EAAU,EAAE;IAC3D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,yBAAyB,CAAC;QACnC,KAAK,OAAO;YACV,OAAO,WAAW,CAAC;QACrB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,qCAAqC;AACrC,oBAAU,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,IAAY,EAAU,EAAE;IAC3D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,gBAAgB,CAAC;QAC1B;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,sHAAsH;AACtH,oBAAU,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC,IAAY,EAAU,EAAE;IACjE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,oBAAU,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,GAAY,EAAU,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC;AAE1E,8EAA8E;AAC9E,oBAAU,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC,GAAY,EAAU,EAAE;IAClE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,EAAE,KAAK,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aAC3B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;aAClC,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACjC,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACjC,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACjC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;;YAC1G,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,8CAA8C;AAC9C,oBAAU,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,IAAsD,EAAU,EAAE;IACrG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE;QAC7B,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC;YAC9B,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,CAAC;YAC9B,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,CAAC;YAC7B,KAAK,OAAO,CAAC,CAAC,OAAO,WAAW,CAAC;YACjC,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH;;uEAEuE;AACvE,oBAAU,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,GAAY,EAAU,EAAE;IAC/D,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,EAAE,KAAK,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aAC3B,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;aAClC,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACjC,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACjC,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACjC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,yCAAyC;AACzC,oBAAU,CAAC,cAAc,CACvB,QAAQ,EACR,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACzC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC,CACF,CAAC;AAEF,MAAM,aAAa,GAA4C,IAAI,GAAG,EAAE,CAAC;AAEzE,SAAgB,eAAe,CAAC,YAAoB;IAClD,IAAI,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,OAAO,aAAa,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,YAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,oBAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,cAAc,CAC5B,YAAoB,EACpB,OAAgC;IAEhC,MAAM,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,2DAA2D;AAC3D,SAAgB,gBAAgB,CAAC,WAAmB;IAClD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO;IACxC,MAAM,KAAK,GAAG,YAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,cAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACtE,oBAAU,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/dist/core/types.d.ts

@@ -0,0 +1,104 @@
+import type { OpenAPIV3 } from "openapi-types";
+export type Lang = "typescript" | "python" | "go";
+export interface GeneratorOptions {
+    input: string;
+    lang: Lang;
+    out: string;
+    force: boolean;
+    incremental: boolean;
+    /** When true, generated handlers call the real API (HTTP) instead of returning example stubs. */
+    http: boolean;
+    /** Load an .env style file for the generated server's credentials. */
+    envFile?: string;
+    /** Paths to plugin folders or modules that can provide templates/helpers. */
+    plugins?: string[];
+    /** Optional directory to discover plugins (scanned before core templates). */
+    pluginsDir?: string;
+    serverName?: string;
+    serverVersion?: string;
+}
+export interface MCPToolParam {
+    name: string;
+    description: string;
+    type: "string" | "number" | "boolean" | "object" | "array";
+    /** Where the param lives: path | query | header | cookie | body */
+    in: "path" | "query" | "header" | "cookie" | "body";
+    required: boolean;
+    schema: OpenAPIV3.SchemaObject;
+    /** OpenAPI format hint (date-time, uuid, email, int32, ...) used for typing. */
+    format?: string;
+    /** Populated when the parameter schema is an enum. */
+    enum?: (string | number)[];
+}
+export interface MCPTool {
+    name: string;
+    description: string;
+    method: string;
+    path: string;
+    params: MCPToolParam[];
+    security?: OpenAPIV3.SecurityRequirementObject[];
+    exampleResponse: unknown | null;
+    tags: string[];
+}
+export interface MCPModel {
+    name: string;
+    description: string;
+    properties: MCPModelProperty[];
+    required: string[];
+    /** True when the schema is a plain enum (no object properties). */
+    isEnum: boolean;
+    enumValues?: (string | number)[];
+    oneOf?: string[];
+    anyOf?: string[];
+    discriminator?: {
+        propertyName: string;
+        mapping?: Record<string, string>;
+    } | null;
+}
+export interface MCPModelProperty {
+    name: string;
+    type: string;
+    description: string;
+    nullable: boolean;
+    isArray: boolean;
+    ref?: string;
+}
+export interface MCPAuth {
+    baseUrl: string;
+    /** Non-empty when any operation requires security. Maps scheme name → info. */
+    schemes: Record<string, string>;
+}
+export interface MCPServerAST {
+    serverName: string;
+    serverVersion: string;
+    /** mcp-gen version, injected at render time by the generator. */
+    generatorVersion: string;
+    tools: MCPTool[];
+    models: MCPModel[];
+    info: {
+        title: string;
+        description: string;
+        version: string;
+    };
+    baseUrl: string;
+    /** True when any route declares security requirements. */
+    requiresAuth: boolean;
+    securitySchemes?: Record<string, OpenAPIV3.SecuritySchemeObject | OpenAPIV3.ReferenceObject>;
+}
+export interface GenerationResult {
+    success: boolean;
+    outputDir: string;
+    filesCreated: string[];
+    filesPreserved: string[];
+    errors: string[];
+    warnings: string[];
+}
+export interface ValidateResult {
+    valid: boolean;
+    tools: number;
+    models: number;
+    baseUrl: string;
+    errors: string[];
+    warnings: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,MAAM,IAAI,GAAG,YAAY,GAAG,QAAQ,GAAG,IAAI,CAAC;AAElD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,iGAAiG;IACjG,IAAI,EAAE,OAAO,CAAC;IACd,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC3D,mEAAmE;IACnE,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpD,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,SAAS,CAAC,YAAY,CAAC;IAC/B,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,SAAS,CAAC,yBAAyB,EAAE,CAAC;IACjD,eAAe,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mEAAmE;IACnE,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAEjC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAClC,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnB,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,oBAAoB,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;CAC9F;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}

package/dist/core/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { generate, validateSpec } from "./core/generator";
+export { parseOpenAPI } from "./core/parser";
+export { extractHandlers, injectHandlers } from "./core/incremental";
+export { listKnownSpecs, getSpecInfo, fetchSpecToCwd, KNOWN_SPECS } from "./core/registry";
+export { scanProject, formatReport, type SecurityRule, type SecurityReport } from "./core/security-lint";
+export type { GeneratorOptions, GenerationResult, ValidateResult, MCPServerAST, MCPTool, MCPToolParam, MCPModel, Lang, } from "./core/types";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACzG,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,IAAI,GACL,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatReport = exports.scanProject = exports.KNOWN_SPECS = exports.fetchSpecToCwd = exports.getSpecInfo = exports.listKnownSpecs = exports.injectHandlers = exports.extractHandlers = exports.parseOpenAPI = exports.validateSpec = exports.generate = void 0;
+var generator_1 = require("./core/generator");
+Object.defineProperty(exports, "generate", { enumerable: true, get: function () { return generator_1.generate; } });
+Object.defineProperty(exports, "validateSpec", { enumerable: true, get: function () { return generator_1.validateSpec; } });
+var parser_1 = require("./core/parser");
+Object.defineProperty(exports, "parseOpenAPI", { enumerable: true, get: function () { return parser_1.parseOpenAPI; } });
+var incremental_1 = require("./core/incremental");
+Object.defineProperty(exports, "extractHandlers", { enumerable: true, get: function () { return incremental_1.extractHandlers; } });
+Object.defineProperty(exports, "injectHandlers", { enumerable: true, get: function () { return incremental_1.injectHandlers; } });
+var registry_1 = require("./core/registry");
+Object.defineProperty(exports, "listKnownSpecs", { enumerable: true, get: function () { return registry_1.listKnownSpecs; } });
+Object.defineProperty(exports, "getSpecInfo", { enumerable: true, get: function () { return registry_1.getSpecInfo; } });
+Object.defineProperty(exports, "fetchSpecToCwd", { enumerable: true, get: function () { return registry_1.fetchSpecToCwd; } });
+Object.defineProperty(exports, "KNOWN_SPECS", { enumerable: true, get: function () { return registry_1.KNOWN_SPECS; } });
+var security_lint_1 = require("./core/security-lint");
+Object.defineProperty(exports, "scanProject", { enumerable: true, get: function () { return security_lint_1.scanProject; } });
+Object.defineProperty(exports, "formatReport", { enumerable: true, get: function () { return security_lint_1.formatReport; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,8CAA0D;AAAjD,qGAAA,QAAQ,OAAA;AAAE,yGAAA,YAAY,OAAA;AAC/B,wCAA6C;AAApC,sGAAA,YAAY,OAAA;AACrB,kDAAqE;AAA5D,8GAAA,eAAe,OAAA;AAAE,6GAAA,cAAc,OAAA;AACxC,4CAA2F;AAAlF,0GAAA,cAAc,OAAA;AAAE,uGAAA,WAAW,OAAA;AAAE,0GAAA,cAAc,OAAA;AAAE,uGAAA,WAAW,OAAA;AACjE,sDAAyG;AAAhG,4GAAA,WAAW,OAAA;AAAE,6GAAA,YAAY,OAAA"}

package/dist/templates/go/Dockerfile.hbs

@@ -0,0 +1,16 @@
+FROM golang:1.22-alpine AS builder
+
+WORKDIR /app
+COPY go.mod ./
+RUN go mod download
+COPY . .
+RUN CGO_ENABLED=0 GOOS=linux go build -o /server .
+
+FROM alpine:3.20 AS runtime
+
+WORKDIR /app
+COPY --from=builder /server /server
+
+ENV TOKEN=""
+
+CMD ["/server"]

package/dist/templates/go/README.md.hbs

@@ -0,0 +1,77 @@
+# {{info.title}} — MCP Server
+
+> Generated by [mcp-gen](https://github.com/ChristopherDond/MCP-Generator)
+> OpenAPI version: {{info.version}}
+
+{{info.description}}
+
+## Setup
+
+```bash
+go mod tidy
+```
+
+## Run
+
+```bash
+go run .
+```
+
+## Connect to Claude Desktop
+
+Add to your `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "{{serverName}}": {
+      "command": "go",
+      "args": ["run", "/absolute/path/to/main.go"]
+    }
+  }
+}
+```
+
+## Available Tools ({{tools.length}})
+
+{{#each tools}}
+### `{{name}}`
+> {{description}}
+
+**`{{method}} {{path}}`**
+
+{{#if params}}
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+{{#each params}}
+| `{{name}}` | `{{goType type}}` | {{#if required}}✓{{else}}—{{/if}} | {{description}} |
+{{/each}}
+{{/if}}
+
+{{/each}}
+
+---
+
+## Security
+
+### Default `authContext` Contract
+
+The generated tools expect **scoped authorization metadata** (not raw credentials), for example:
+
+```json
+{
+  "tokenId": "tok_abc123",
+  "principal": "user:42",
+  "expiresAt": "2026-05-11T14:00:00Z",
+  "allowedTools": ["get_orders"],
+  "endpointAllowlist": ["GET /orders"],
+  "spendLimitUsd": 5,
+  "spendUsedUsd": 1.2,
+  "revoked": false,
+  "requestId": "req_01J..."
+}
+```
+
+The scaffold blocks arguments like `token`, `authorization`, `api_key`, `client_secret` by default.
+
+*Generated by mcp-gen — edit handlers, not the scaffold.*