@cyanheads/mcp-ts-core 0.12.6 → 0.12.8

package/dist/utils/types/guards.d.ts

@@ -54,56 +54,6 @@ export declare function isRecord(value: unknown): value is Record<string, unknow
  * ```
  */
 export declare function hasProperty<K extends PropertyKey>(obj: unknown, key: K): obj is Record<K, unknown>;
-/**
- * Type guard to check if an object has a property of a specific type.
- *
- * @param obj - Object to check
- * @param key - Property key to look for
- * @param typeGuard - Type guard function for the property value
- * @returns True if object has the property and it matches the type
- *
- * @example
- * ```typescript
- * if (hasPropertyOfType(obj, 'count', (v): v is number => typeof v === 'number')) {
- *   // obj.count is now typed as number
- *   console.log(obj.count + 1);
- * }
- * ```
- */
-export declare function hasPropertyOfType<K extends PropertyKey, T>(obj: unknown, key: K, typeGuard: (value: unknown) => value is T): obj is Record<K, T>;
-/**
- * Type guard to check if a value is a string.
- *
- * @param value - Value to check
- * @returns True if value is a string
- *
- * @example
- * ```typescript
- * if (isString(value)) {
- *   // value is now typed as string
- *   console.log(value.toUpperCase());
- * }
- * ```
- */
-export declare function isString(value: unknown): value is string;
-/**
- * Type guard to check if a value is a number.
- *
- * `NaN` is explicitly excluded — `typeof NaN === 'number'` is true in JavaScript,
- * but `NaN` is almost never a valid value in the contexts where this guard is used.
- *
- * @param value - Value to check
- * @returns True if value is a finite or infinite number (excluding NaN)
- *
- * @example
- * ```typescript
- * if (isNumber(value)) {
- *   // value is now typed as number (NaN excluded)
- *   console.log(value.toFixed(2));
- * }
- * ```
- */
-export declare function isNumber(value: unknown): value is number;
 /**
  * Type guard to check if an error is an AggregateError.
  *
@@ -140,22 +90,6 @@ export declare function isAggregateError(error: unknown): error is Error & {
 export declare function isErrorWithCode(error: unknown): error is Error & {
     code: unknown;
 };
-/**
- * Type guard to check if an error has a status property.
- *
- * @param error - Error to check
- * @returns True if error has a status property
- *
- * @example
- * ```typescript
- * if (isErrorWithStatus(error)) {
- *   console.log(`HTTP status: ${error.status}`);
- * }
- * ```
- */
-export declare function isErrorWithStatus(error: unknown): error is Error & {
-    status: unknown;
-};
 /**
  * Safely get a property from an object if it exists.
  *
@@ -170,40 +104,4 @@ export declare function isErrorWithStatus(error: unknown): error is Error & {
  * ```
  */
 export declare function getProperty<K extends PropertyKey>(obj: unknown, key: K): unknown;
-/**
- * Safely get a string property from an object.
- *
- * @param obj - Object to get property from
- * @param key - Property key
- * @returns String value or undefined if property doesn't exist or is not a string
- *
- * @example
- * ```typescript
- * const traceId = getStringProperty(context, 'traceId');
- * if (traceId) {
- *   // traceId is typed as string
- *   console.log(traceId.toUpperCase());
- * }
- * ```
- */
-export declare function getStringProperty<K extends PropertyKey>(obj: unknown, key: K): string | undefined;
-/**
- * Safely get a number property from an object.
- *
- * Returns `undefined` if the property is absent, not a number, or is `NaN`.
- *
- * @param obj - Object to get property from
- * @param key - Property key
- * @returns Number value or undefined if property doesn't exist, is not a number, or is NaN
- *
- * @example
- * ```typescript
- * const retries = getNumberProperty(config, 'maxRetries');
- * if (retries !== undefined) {
- *   // retries is typed as number
- *   console.log(`Max retries: ${retries}`);
- * }
- * ```
- */
-export declare function getNumberProperty<K extends PropertyKey>(obj: unknown, key: K): number | undefined;
 //# sourceMappingURL=guards.d.ts.map

package/dist/utils/types/guards.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../../src/utils/types/guards.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,WAAW,EAC/C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,CAAC,GACL,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAE3B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,WAAW,EAAE,CAAC,EACxD,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,CAAC,EACN,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,CAAC,GACxC,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAErB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG;IAAE,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAEvF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAElF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAEtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAEhF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,MAAM,GAAG,SAAS,CAGjG;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,MAAM,GAAG,SAAS,CAGjG"}
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../../src/utils/types/guards.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,WAAW,EAC/C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,CAAC,GACL,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAE3B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG;IAAE,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAEvF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAElF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAEhF"}

package/dist/utils/types/guards.js

@@ -60,62 +60,6 @@ export function isRecord(value) {
 export function hasProperty(obj, key) {
     return isObject(obj) && key in obj;
 }
-/**
- * Type guard to check if an object has a property of a specific type.
- *
- * @param obj - Object to check
- * @param key - Property key to look for
- * @param typeGuard - Type guard function for the property value
- * @returns True if object has the property and it matches the type
- *
- * @example
- * ```typescript
- * if (hasPropertyOfType(obj, 'count', (v): v is number => typeof v === 'number')) {
- *   // obj.count is now typed as number
- *   console.log(obj.count + 1);
- * }
- * ```
- */
-export function hasPropertyOfType(obj, key, typeGuard) {
-    return hasProperty(obj, key) && typeGuard(obj[key]);
-}
-/**
- * Type guard to check if a value is a string.
- *
- * @param value - Value to check
- * @returns True if value is a string
- *
- * @example
- * ```typescript
- * if (isString(value)) {
- *   // value is now typed as string
- *   console.log(value.toUpperCase());
- * }
- * ```
- */
-export function isString(value) {
-    return typeof value === 'string';
-}
-/**
- * Type guard to check if a value is a number.
- *
- * `NaN` is explicitly excluded — `typeof NaN === 'number'` is true in JavaScript,
- * but `NaN` is almost never a valid value in the contexts where this guard is used.
- *
- * @param value - Value to check
- * @returns True if value is a finite or infinite number (excluding NaN)
- *
- * @example
- * ```typescript
- * if (isNumber(value)) {
- *   // value is now typed as number (NaN excluded)
- *   console.log(value.toFixed(2));
- * }
- * ```
- */
-export function isNumber(value) {
-    return typeof value === 'number' && !Number.isNaN(value);
-}
 /**
  * Type guard to check if an error is an AggregateError.
  *
@@ -152,22 +96,6 @@ export function isAggregateError(error) {
 export function isErrorWithCode(error) {
     return error instanceof Error && hasProperty(error, 'code');
 }
-/**
- * Type guard to check if an error has a status property.
- *
- * @param error - Error to check
- * @returns True if error has a status property
- *
- * @example
- * ```typescript
- * if (isErrorWithStatus(error)) {
- *   console.log(`HTTP status: ${error.status}`);
- * }
- * ```
- */
-export function isErrorWithStatus(error) {
-    return error instanceof Error && hasProperty(error, 'status');
-}
 /**
  * Safely get a property from an object if it exists.
  *
@@ -184,46 +112,4 @@ export function isErrorWithStatus(error) {
 export function getProperty(obj, key) {
     return hasProperty(obj, key) ? obj[key] : undefined;
 }
-/**
- * Safely get a string property from an object.
- *
- * @param obj - Object to get property from
- * @param key - Property key
- * @returns String value or undefined if property doesn't exist or is not a string
- *
- * @example
- * ```typescript
- * const traceId = getStringProperty(context, 'traceId');
- * if (traceId) {
- *   // traceId is typed as string
- *   console.log(traceId.toUpperCase());
- * }
- * ```
- */
-export function getStringProperty(obj, key) {
-    const value = getProperty(obj, key);
-    return isString(value) ? value : undefined;
-}
-/**
- * Safely get a number property from an object.
- *
- * Returns `undefined` if the property is absent, not a number, or is `NaN`.
- *
- * @param obj - Object to get property from
- * @param key - Property key
- * @returns Number value or undefined if property doesn't exist, is not a number, or is NaN
- *
- * @example
- * ```typescript
- * const retries = getNumberProperty(config, 'maxRetries');
- * if (retries !== undefined) {
- *   // retries is typed as number
- *   console.log(`Max retries: ${retries}`);
- * }
- * ```
- */
-export function getNumberProperty(obj, key) {
-    const value = getProperty(obj, key);
-    return isNumber(value) ? value : undefined;
-}
 //# sourceMappingURL=guards.js.map

package/dist/utils/types/guards.js.map

@@ -1 +1 @@
-{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../../src/utils/types/guards.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CACzB,GAAY,EACZ,GAAM;IAEN,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAY,EACZ,GAAM,EACN,SAAyC;IAEzC,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,OAAO,KAAK,YAAY,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAwB,GAAY,EAAE,GAAM;IACrE,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAwB,GAAY,EAAE,GAAM;IAC3E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAwB,GAAY,EAAE,GAAM;IAC3E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../../src/utils/types/guards.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CACzB,GAAY,EACZ,GAAM;IAEN,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAwB,GAAY,EAAE,GAAM;IACrE,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@cyanheads/mcp-ts-core",
-  "version": "0.12.6",
+  "version": "0.12.8",
   "mcpName": "io.github.cyanheads/mcp-ts-core",
-  "description": "Agent-native TypeScript framework for building MCP servers. Build tools, not infrastructure. Declarative definitions with auth, multi-backend storage, OpenTelemetry, and first-class support for Bun/Node/Cloudflare Workers.",
+  "description": "Agent-native TypeScript framework for MCP servers. Includes runtime infrastructure and agent skills for building, testing, and shipping servers.",
   "files": [
     "changelog/",
     "dist/",
@@ -164,6 +164,7 @@
     "format:unsafe": "biome check --write --unsafe .",
     "typecheck": "bunx tsc --noEmit",
     "typecheck:scripts": "bunx tsc --project tsconfig.scripts.json --noEmit",
+    "typecheck:worker": "bunx tsc --project tsconfig.worker.json --noEmit",
     "list-skills": "bun run scripts/list-skills.ts",
     "tree": "bun run scripts/tree.ts",
     "fetch-spec": "bun run scripts/fetch-openapi-spec.ts",
@@ -196,23 +197,23 @@
     "publish-mcp": "mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.5.11",
+    "@biomejs/biome": "2.5.12",
     "@cloudflare/vitest-pool-workers": "^0.22.0",
-    "@cloudflare/workers-types": "5.20260730.1",
+    "@cloudflare/workers-types": "5.20260905.1",
     "@duckdb/node-api": "^1.5.5-r.4",
     "@hono/otel": "^1.1.2",
-    "@opentelemetry/exporter-metrics-otlp-http": "^0.221.0",
-    "@opentelemetry/exporter-trace-otlp-http": "^0.221.0",
-    "@opentelemetry/instrumentation-http": "^0.221.0",
-    "@opentelemetry/instrumentation-pino": "^0.67.0",
-    "@opentelemetry/resources": "^2.10.0",
-    "@opentelemetry/sdk-metrics": "^2.10.0",
-    "@opentelemetry/sdk-node": "^0.221.0",
-    "@opentelemetry/sdk-trace-node": "^2.10.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.222.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.222.0",
+    "@opentelemetry/instrumentation-http": "^0.222.0",
+    "@opentelemetry/instrumentation-pino": "^0.68.0",
+    "@opentelemetry/resources": "^2.11.0",
+    "@opentelemetry/sdk-metrics": "^2.11.0",
+    "@opentelemetry/sdk-node": "^0.222.0",
+    "@opentelemetry/sdk-trace-node": "^2.11.0",
     "@opentelemetry/semantic-conventions": "^1.43.0",
     "@socketsecurity/bun-security-scanner": "^1.1.2",
-    "@supabase/supabase-js": "^2.112.4",
-    "@types/bun": "^1.4.0",
+    "@supabase/supabase-js": "^2.115.0",
+    "@types/bun": "^1.4.1",
     "@types/node": "26.4.0",
     "@types/papaparse": "^5.5.2",
     "@types/sanitize-html": "^2.16.1",
@@ -220,7 +221,7 @@
     "@vitest/coverage-istanbul": "4.1.11",
     "@vitest/ui": "4.1.11",
     "better-sqlite3": "^13.0.3",
-    "bun-types": "^1.4.0",
+    "bun-types": "^1.4.2",
     "chrono-node": "^2.10.1",
     "clipboardy": "^5.3.2",
     "defuddle": "^0.19.3",
@@ -229,18 +230,18 @@
     "execa": "^10.0.1",
     "fast-check": "^4.9.0",
     "fast-xml-parser": "^5.11.1",
-    "ignore": "^7.0.7",
+    "ignore": "^7.0.8",
     "js-yaml": "^5.4.1",
     "linkedom": "^0.18.13",
     "node-cron": "^4.6.0",
-    "openai": "^7.8.0",
+    "openai": "^7.10.0",
     "papaparse": "^5.7.0",
     "partial-json": "^0.1.7",
     "pdf-lib": "^1.17.1",
     "pino-pretty": "^13.1.3",
     "repomix": "^1.18.0",
     "sanitize-html": "^2.17.7",
-    "tsc-alias": "^1.9.2",
+    "tsc-alias": "^1.9.4",
     "typedoc": "^0.28.20",
     "typescript": "^7.0.2",
     "typescript-v6": "npm:typescript@^6.0.3",
@@ -305,21 +306,21 @@
     "@modelcontextprotocol/server": "^2.0.0",
     "@opentelemetry/api": "^1.9.1",
     "dotenv": "^17.4.2",
-    "hono": "^4.13.5",
-    "jose": "^6.2.10",
+    "hono": "^4.13.7",
+    "jose": "^6.2.12",
     "pino": "^10.3.1",
     "zod": "^4.5.4"
   },
   "peerDependencies": {
     "@duckdb/node-api": "^1.5.5-r.1",
     "@hono/otel": "^1.1.2",
-    "@opentelemetry/instrumentation-http": "^0.221.0",
-    "@opentelemetry/exporter-metrics-otlp-http": "^0.221.0",
-    "@opentelemetry/exporter-trace-otlp-http": "^0.221.0",
-    "@opentelemetry/instrumentation-pino": "^0.66.0",
+    "@opentelemetry/instrumentation-http": "^0.222.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.222.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.222.0",
+    "@opentelemetry/instrumentation-pino": "^0.68.0",
     "@opentelemetry/resources": "^2.10.0",
     "@opentelemetry/sdk-metrics": "^2.10.0",
-    "@opentelemetry/sdk-node": "^0.221.0",
+    "@opentelemetry/sdk-node": "^0.222.0",
     "@opentelemetry/sdk-trace-node": "^2.10.0",
     "@opentelemetry/semantic-conventions": "^1.43.0",
     "@supabase/supabase-js": "^2.110.8",

package/scripts/check-framework-antipatterns.ts

@@ -15,7 +15,10 @@
  *      `tools/list`, so `z.unknown()` / `z.any()` / `.passthrough()` breaks
  *      schema advertising. Consumer-side `.passthrough()` on output schemas
  *      is a documented escape hatch and stays legal (rule is scoped to
- *      `src/mcp-server/tools/`).
+ *      `src/mcp-server/tools/`). The one sanctioned substitution is
+ *      `deferInputValidation()` (#377): it projects the same JSON Schema and
+ *      moves only *where* a rejection is reported. Anything that widens what
+ *      is advertised is still a violation.
  *   2. Mutating `RegisteredTool.inputSchema` after register breaks
  *      `tools/list` the same way — the SDK reads the stored Zod object at list
  *      time.