@ganju/utils 0.0.11 → 0.0.13

package/dist/constants.d.ts

@@ -392,6 +392,9 @@ export declare const constants: {
     TOOL_CONFIRMATION_FALLBACK_QUESTION: string;
     TOOL_CONFIRMATION_ASK_INSTRUCTION: string;
     TOOL_CONFIRMATION_SYSTEM_NOTE: string;
+    MCP_TOOL_CONFIRMATION_TTL_MS: number;
+    MCP_TOOL_CONFIRMATION_ARG: string;
+    MCP_TOOL_CONFIRMATION_ARG_DESCRIPTION: string;
     CHANNEL_DEBOUNCE_DEFAULT_MS: number;
     CHANNEL_DEBOUNCE_MIN_MS: number;
     CHANNEL_DEBOUNCE_MAX_MS: number;

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AA6JA,QAAA,MAAM,yBAAyB,EAAiB,UAAU,CAAC;AAC3D,QAAA,MAAM,+BAA+B,EAAuB,gBAAgB,CAAC;AAC7E,QAAA,MAAM,8BAA8B,EAAsB,eAAe,CAAC;AAC1E,QAAA,MAAM,wBAAwB,EAAgB,SAAS,CAAC;AAuCxD,QAAA,MAAM,sBAAsB,EAAiB,UAAU,CAAC;AACxD,QAAA,MAAM,4BAA4B,EAAuB,gBAAgB,CAAC;AAC1E,QAAA,MAAM,oBAAoB,EAAe,QAAQ,CAAC;AAClD,QAAA,MAAM,oBAAoB,EAAe,QAAQ,CAAC;AAoFlD,QAAA,MAAM,4BAA4B,EAAc,OAAO,CAAC;AACxD,QAAA,MAAM,6BAA6B,EAAe,QAAQ,CAAC;AAmV3D,QAAA,MAAM,sBAAsB,EAAkB,WAAW,CAAC;AAC1D,QAAA,MAAM,mBAAmB,EAAe,QAAQ,CAAC;AAGjD,QAAA,MAAM,mBAAmB,EAAe,QAAQ,CAAC;AAyYjD,MAAM,MAAM,mBAAmB,GAC3B;IACE,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GACD;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D;IACE,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GACD;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AA0+BpE,UAAU,UAAU;IAElB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAMjC,sBAAsB,EAAE,MAAM,CAAC;IAM/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IAKnB,eAAe,EAAE,OAAO,CAAC;IAOzB,gBAAgB,EAAE,OAAO,CAAC;IAK1B,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;IAQ3C,iBAAiB,EAAE,MAAM,CAAC;IAM1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAG/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAI9B,iBAAiB,EAAE,aAAa,CAC9B,OAAO,4BAA4B,GAAG,OAAO,6BAA6B,CAC3E,CAAC;CACH;AA2PD,YAAY,EAAE,UAAU,EAAE,CAAC;AAE3B,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA5oEhB,OAAO,yBAAyB,GAChC,OAAO,+BAA+B,GACtC,OAAO,8BAA8B,GACrC,OAAO,wBAAwB;eAC5B,MAAM;;;;;;;;;;;;;;;;;;eAsCT,OAAO,sBAAsB,GAC7B,OAAO,4BAA4B,GACnC,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB;eACxB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAkbT,OAAO,mBAAmB,GAC1B,OAAO,mBAAmB,GAC1B,OAAO,sBAAsB;eAC1B,MAAM;eACN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAoTwB,MAAM,GAAG,MAAM;cAAQ,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAm9DnE,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AA6JA,QAAA,MAAM,yBAAyB,EAAiB,UAAU,CAAC;AAC3D,QAAA,MAAM,+BAA+B,EAAuB,gBAAgB,CAAC;AAC7E,QAAA,MAAM,8BAA8B,EAAsB,eAAe,CAAC;AAC1E,QAAA,MAAM,wBAAwB,EAAgB,SAAS,CAAC;AAuCxD,QAAA,MAAM,sBAAsB,EAAiB,UAAU,CAAC;AACxD,QAAA,MAAM,4BAA4B,EAAuB,gBAAgB,CAAC;AAC1E,QAAA,MAAM,oBAAoB,EAAe,QAAQ,CAAC;AAClD,QAAA,MAAM,oBAAoB,EAAe,QAAQ,CAAC;AAoFlD,QAAA,MAAM,4BAA4B,EAAc,OAAO,CAAC;AACxD,QAAA,MAAM,6BAA6B,EAAe,QAAQ,CAAC;AAmV3D,QAAA,MAAM,sBAAsB,EAAkB,WAAW,CAAC;AAC1D,QAAA,MAAM,mBAAmB,EAAe,QAAQ,CAAC;AAGjD,QAAA,MAAM,mBAAmB,EAAe,QAAQ,CAAC;AAmZjD,MAAM,MAAM,mBAAmB,GAC3B;IACE,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GACD;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D;IACE,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GACD;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AA0+BpE,UAAU,UAAU;IAElB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAMjC,sBAAsB,EAAE,MAAM,CAAC;IAM/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IAKnB,eAAe,EAAE,OAAO,CAAC;IAOzB,gBAAgB,EAAE,OAAO,CAAC;IAK1B,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;IAQ3C,iBAAiB,EAAE,MAAM,CAAC;IAM1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAG/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAI9B,iBAAiB,EAAE,aAAa,CAC9B,OAAO,4BAA4B,GAAG,OAAO,6BAA6B,CAC3E,CAAC;CACH;AA2PD,YAAY,EAAE,UAAU,EAAE,CAAC;AAE3B,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAtpEhB,OAAO,yBAAyB,GAChC,OAAO,+BAA+B,GACtC,OAAO,8BAA8B,GACrC,OAAO,wBAAwB;eAC5B,MAAM;;;;;;;;;;;;;;;;;;eAsCT,OAAO,sBAAsB,GAC7B,OAAO,4BAA4B,GACnC,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB;eACxB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAkbT,OAAO,mBAAmB,GAC1B,OAAO,mBAAmB,GAC1B,OAAO,sBAAsB;eAC1B,MAAM;eACN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA8TwB,MAAM,GAAG,MAAM;cAAQ,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAs9DnE,CAAC"}

package/dist/constants.js

@@ -666,6 +666,15 @@ const TOOL_CONFIRMATION_ASK_INSTRUCTION = 'IMPORTANT: these actions have NOT bee
     'waiting for the user to confirm them. Your reply must ask the user to ' +
     'confirm, and must not say or suggest that they were done, nor describe ' +
     'or make up any result from them.';
+// For MCP clients, whose chat the server can't see: a sensitive call without a
+// valid confirmation isn't run, and the model is told to ask the user and call
+// again with a token that binds the second call to these exact arguments.
+// How long that token stays good, and the argument that carries it.
+const MCP_TOOL_CONFIRMATION_TTL_MS = 10 * 60 * 1000;
+const MCP_TOOL_CONFIRMATION_ARG = 'confirmation';
+const MCP_TOOL_CONFIRMATION_ARG_DESCRIPTION = "Leave out on the first call. This action needs the user's yes: the " +
+    'first call returns a token; after the user says yes, call again with the ' +
+    'same arguments and that token here.';
 // The question when the model wrote none, above the runner's own summary.
 const TOOL_CONFIRMATION_FALLBACK_QUESTION = 'Before I do this, please confirm. Reply yes to go ahead, or no to cancel.';
 const TELEGRAM_SECRET_HEADER = 'x-telegram-bot-api-secret-token';
@@ -2297,6 +2306,9 @@ exports.constants = {
     TOOL_CONFIRMATION_FALLBACK_QUESTION,
     TOOL_CONFIRMATION_ASK_INSTRUCTION,
     TOOL_CONFIRMATION_SYSTEM_NOTE,
+    MCP_TOOL_CONFIRMATION_TTL_MS,
+    MCP_TOOL_CONFIRMATION_ARG,
+    MCP_TOOL_CONFIRMATION_ARG_DESCRIPTION,
     CHANNEL_DEBOUNCE_DEFAULT_MS,
     CHANNEL_DEBOUNCE_MIN_MS,
     CHANNEL_DEBOUNCE_MAX_MS,

package/dist/index.d.ts

@@ -27,6 +27,7 @@ import type { ExtractedDocument, ExtractedDocumentMetadata, ExtractedDocumentSou
 import type { ChannelNotifier, ToolStatusEvent } from './channelNotifier';
 import type { BufferedChannelMessage, BufferedChannelCommand, ChannelBufferEnvelope, ChannelBufferFlush } from './channelDebounce';
 import type { PendingToolConfirmation, PendingToolConfirmations, ToolEffect } from './toolConfirmation';
+import type { LintableTool, ToolLintFinding, ToolLintOptions, ToolLintRule } from './toolLint';
 import type { Source, ResourceUrlContext, SourceButton } from './sources';
 import { OAuthReauthRequiredError } from './oauth';
 import type { RefreshOAuthTokenInput, RefreshedOAuthToken } from './oauth';
@@ -2157,6 +2158,9 @@ export declare const utils: {
         TOOL_CONFIRMATION_FALLBACK_QUESTION: string;
         TOOL_CONFIRMATION_ASK_INSTRUCTION: string;
         TOOL_CONFIRMATION_SYSTEM_NOTE: string;
+        MCP_TOOL_CONFIRMATION_TTL_MS: number;
+        MCP_TOOL_CONFIRMATION_ARG: string;
+        MCP_TOOL_CONFIRMATION_ARG_DESCRIPTION: string;
         CHANNEL_DEBOUNCE_DEFAULT_MS: number;
         CHANNEL_DEBOUNCE_MIN_MS: number;
         CHANNEL_DEBOUNCE_MAX_MS: number;
@@ -3071,6 +3075,15 @@ export declare const utils: {
         destructiveHint: boolean;
     };
     TOOL_EFFECTS: readonly ["read", "write", "sensitive"];
+    isSensitiveTool: (annotations: {
+        readOnlyHint?: boolean;
+        destructiveHint?: boolean;
+    } | null | undefined) => boolean;
+    stableJson: (value: unknown) => string;
+    lintTools: (tools: LintableTool[], options?: ToolLintOptions) => ToolLintFinding[];
+    TOOL_LINT_RULES: readonly ["missing-description", "short-description", "no-usage-guidance", "missing-annotations", "undescribed-input", "overlapping-tools", "too-many-tools"];
+    TOOL_LINT_MAX_TOOLS: number;
+    TOOL_LINT_MIN_DESCRIPTION_LENGTH: number;
     isResourceSourceEnabled: (resource: {
         showSource?: string | null;
     } | null | undefined) => boolean;
@@ -3095,5 +3108,5 @@ export declare const utils: {
     PlanLimitError: typeof PlanLimitError;
     isPlanLimitError: (error: unknown) => error is PlanLimitError;
 };
-export type { MintedAccessToken, CustomCodeProject, ProjectPathIssue, CatalogGroup, CatalogTool, CatalogToolDescriptor, ToolAnnotations, PendingToolConfirmation, PendingToolConfirmations, ToolEffect, ToolGroupKey, ToolKey, CalendarConfigField, JsonSchema, SchemaViolation, MimeAttachment, MimeMessageInput, GmailOperation, GmailSendRequest, GmailSendResponse, OutlookOperation, OutlookSendRequest, OutlookSendResponse, SlackOperation, SlackSendRequest, SlackSendResponse, SlackSendRemoteResourceRequest, TelegramSendRequest, TelegramSendResponse, TelegramSendRemoteResourceRequest, DiscordSendRequest, DiscordSendResponse, DiscordSendRemoteResourceRequest, WhatsappSendRequest, WhatsappSendResponse, WhatsappSendRemoteResourceRequest, EnvSource, Separator, ChunkMetadata, PreparedChunk, ExtractedDocument, ExtractedDocumentMetadata, ExtractedDocumentSource, RateLimitRetryOptions, RerankAiBinding, QueueBatchLike, QueueMessageLike, ProcessQueueBatchHandlers, ChannelNotifier, ToolStatusEvent, BufferedChannelMessage, BufferedChannelCommand, ChannelBufferEnvelope, ChannelBufferFlush, Source, ResourceUrlContext, SourceButton, RefreshOAuthTokenInput, RefreshedOAuthToken, HttpEndpointToolConfig, McpProxyToolConfig, McpProxyDiscoveredTool, McpProxyDiscoveredResource, McpProxyDiscoveredPrompt, McpProxyDiscovery, CustomCodeToolConfig, CustomCodeToolManifest, CustomCodeManifest, CustomCodeSendFile, CustomCodeCreateResource, CustomCodeTokenPayload, ContainmentTokenPayload, OAuthProviderConfig, AttachmentResource, ResolvedAttachment, ResolveAttachmentResult, ExposableResource, SyncableResource, ResourceSyncProvider, PlanLimitDetails, PlanLimits };
+export type { MintedAccessToken, CustomCodeProject, ProjectPathIssue, CatalogGroup, CatalogTool, CatalogToolDescriptor, ToolAnnotations, PendingToolConfirmation, PendingToolConfirmations, ToolEffect, LintableTool, ToolLintFinding, ToolLintOptions, ToolLintRule, ToolGroupKey, ToolKey, CalendarConfigField, JsonSchema, SchemaViolation, MimeAttachment, MimeMessageInput, GmailOperation, GmailSendRequest, GmailSendResponse, OutlookOperation, OutlookSendRequest, OutlookSendResponse, SlackOperation, SlackSendRequest, SlackSendResponse, SlackSendRemoteResourceRequest, TelegramSendRequest, TelegramSendResponse, TelegramSendRemoteResourceRequest, DiscordSendRequest, DiscordSendResponse, DiscordSendRemoteResourceRequest, WhatsappSendRequest, WhatsappSendResponse, WhatsappSendRemoteResourceRequest, EnvSource, Separator, ChunkMetadata, PreparedChunk, ExtractedDocument, ExtractedDocumentMetadata, ExtractedDocumentSource, RateLimitRetryOptions, RerankAiBinding, QueueBatchLike, QueueMessageLike, ProcessQueueBatchHandlers, ChannelNotifier, ToolStatusEvent, BufferedChannelMessage, BufferedChannelCommand, ChannelBufferEnvelope, ChannelBufferFlush, Source, ResourceUrlContext, SourceButton, RefreshOAuthTokenInput, RefreshedOAuthToken, HttpEndpointToolConfig, McpProxyToolConfig, McpProxyDiscoveredTool, McpProxyDiscoveredResource, McpProxyDiscoveredPrompt, McpProxyDiscovery, CustomCodeToolConfig, CustomCodeToolManifest, CustomCodeManifest, CustomCodeSendFile, CustomCodeCreateResource, CustomCodeTokenPayload, ContainmentTokenPayload, OAuthProviderConfig, AttachmentResource, ResolvedAttachment, ResolveAttachmentResult, ExposableResource, SyncableResource, ResourceSyncProvider, PlanLimitDetails, PlanLimits };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,EACxB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,UAAU,CAAC;AAElB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAyCvD,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EAClC,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,gCAAgC,EACjC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EAClC,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EACL,UAAU,EAGX,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAU9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAKhE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAG5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAM3D,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAW5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,cAAc,CAAC;AAmBtB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AASvD,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,eAAe,EACf,YAAY,EACZ,OAAO,EACR,MAAM,eAAe,CAAC;AAiBvB,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAI1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAErD,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EACV,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAO1E,OAAO,KAAK,EACV,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAW3B,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACxB,UAAU,EACX,MAAM,oBAAoB,CAAC;AAS5B,OAAO,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAEL,wBAAwB,EAIzB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAS3E,OAAO,EAAE,cAAc,EAAoB,MAAM,kBAAkB,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAzJI,CAAC;;;;;;;;;;;;;;;qBA3BF,CAAC;;;;;;;;;;;;;;;;;;;;;;kBAvFD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAkGT,CAAC;oBACH,CAAC;;;;aAsIP,CAAC;mBACgB,CAAC;WACL,CAAC;gBAEd,CAAC;gBACF,CAAC;;;mBA2CK,CAAC;oBAET,CAAA;gBAUG,CAAC;gBACO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAnPZ,CAAC;;;;;;;sBAoCgB,CAAC;;;;;;;;;;;;;;;CA6TnB,CAAC;AAEF,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,eAAe,EACf,uBAAuB,EACvB,wBAAwB,EACxB,UAAU,EACV,YAAY,EACZ,OAAO,EACP,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EACjC,kBAAkB,EAClB,mBAAmB,EACnB,gCAAgC,EAChC,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EACjC,SAAS,EACT,SAAS,EACT,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,MAAM,EACN,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,EACxB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACX,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,EACxB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,UAAU,CAAC;AAElB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAyCvD,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EAClC,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,gCAAgC,EACjC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EAClC,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EACL,UAAU,EAGX,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAU9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAKhE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAG5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAM3D,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAW5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,cAAc,CAAC;AAmBtB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AASvD,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,eAAe,EACf,YAAY,EACZ,OAAO,EACR,MAAM,eAAe,CAAC;AAiBvB,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAI1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAErD,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EACV,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAO1E,OAAO,KAAK,EACV,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAa3B,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACxB,UAAU,EACX,MAAM,oBAAoB,CAAC;AAO5B,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,eAAe,EACf,YAAY,EACb,MAAM,YAAY,CAAC;AASpB,OAAO,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAEL,wBAAwB,EAIzB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAS3E,OAAO,EAAE,cAAc,EAAoB,MAAM,kBAAkB,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAvKI,CAAC;;;;;;;;;;;;;;;qBA3BF,CAAC;;;;;;;;;;;;;;;;;;;;;;kBAvFD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAkGT,CAAC;oBACH,CAAC;;;;aAuIV,CAAA;mBACC,CAAC;WACQ,CAAC;gBACA,CAAC;gBAEd,CAAC;;;mBA0CE,CAAC;oBACG,CAAC;gBAUK,CAAC;gBACY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBA+BzB,CAAD;uBAA0B,CAAC;;;;;;;;kBAjR1B,CAAC;;;;;;;sBAoCgB,CAAC;;;;;;;;;;;;;;;CAiVnB,CAAC;AAEF,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,eAAe,EACf,uBAAuB,EACvB,wBAAwB,EACxB,UAAU,EACV,YAAY,EACZ,eAAe,EACf,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,OAAO,EACP,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EACjC,kBAAkB,EAClB,mBAAmB,EACnB,gCAAgC,EAChC,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EACjC,SAAS,EACT,SAAS,EACT,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,MAAM,EACN,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,EACxB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACX,CAAC"}

package/dist/index.js

@@ -48,6 +48,7 @@ const processQueueBatch_1 = require("./processQueueBatch");
 const channelNotifier_1 = require("./channelNotifier");
 const channelDebounce_1 = require("./channelDebounce");
 const toolConfirmation_1 = require("./toolConfirmation");
+const toolLint_1 = require("./toolLint");
 const sources_1 = require("./sources");
 const oauth_1 = require("./oauth");
 const vendorTimeZone_1 = require("./vendorTimeZone");
@@ -170,6 +171,12 @@ exports.utils = {
     formatConfirmationSummary: toolConfirmation_1.formatConfirmationSummary,
     annotationsForEffect: toolConfirmation_1.annotationsForEffect,
     TOOL_EFFECTS: toolConfirmation_1.TOOL_EFFECTS,
+    isSensitiveTool: toolConfirmation_1.isSensitiveTool,
+    stableJson: toolConfirmation_1.stableJson,
+    lintTools: toolLint_1.lintTools,
+    TOOL_LINT_RULES: toolLint_1.TOOL_LINT_RULES,
+    TOOL_LINT_MAX_TOOLS: toolLint_1.TOOL_LINT_MAX_TOOLS,
+    TOOL_LINT_MIN_DESCRIPTION_LENGTH: toolLint_1.TOOL_LINT_MIN_DESCRIPTION_LENGTH,
     isResourceSourceEnabled: sources_1.isResourceSourceEnabled,
     isDownloadableSource: sources_1.isDownloadableSource,
     safeHostname: sources_1.safeHostname,

package/dist/toolConfirmation.d.ts

@@ -44,4 +44,15 @@ export declare const formatConfirmationSummary: (calls: Array<{
     name: string;
     arguments: Record<string, unknown>;
 }>, titleOf: (name: string) => string) => string;
+/**
+ * Whether a tool needs a yes before it runs, by the MCP defaults: read-only
+ * only if it says so, and a tool that changes things is destructive unless it
+ * says it isn't. So an unannotated custom or proxied tool is confirmed — the
+ * safe reading for an organization that asked to be asked.
+ */
+export declare const isSensitiveTool: (annotations: {
+    readOnlyHint?: boolean;
+    destructiveHint?: boolean;
+} | null | undefined) => boolean;
+export declare const stableJson: (value: unknown) => string;
 //# sourceMappingURL=toolConfirmation.d.ts.map

package/dist/toolConfirmation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"toolConfirmation.d.ts","sourceRoot":"","sources":["../src/toolConfirmation.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,uBAAuB;IAEtC,EAAE,EAAE,MAAM,CAAC;IAGX,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,CAAC,CAAC;CACJ;AAKD,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAO/E,eAAO,MAAM,YAAY,yCAA0C,CAAC;AAEpE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,UAAU,KACjB;IAAE,YAAY,EAAE,OAAO,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAKE,CAAC;AAmHvD,eAAO,MAAM,uBAAuB,GAAI,OAAO,MAAM,KAAG,MAAM,GAAG,IAOhE,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,SAAS,MAAM,GAAG,IAAI,KACrB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAG3B,CAAC;AAQF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,KAAK,GAAG,IAAI,EACpB,uBAAuB,MAAM,KAC5B,MAA4E,CAAC;AAEhF,eAAO,MAAM,uBAAuB,GAClC,IAAI,MAAM,KACT;IAAE,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAA;CAAE,GAAG,IAQ1D,CAAC;AAWF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAAI,MAAM,MAAM,KAAG,OAIlD,CAAC;AAmBF;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,GACpC,OAAO,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAClE,SAAS,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,KAChC,MAcc,CAAC"}
+{"version":3,"file":"toolConfirmation.d.ts","sourceRoot":"","sources":["../src/toolConfirmation.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,uBAAuB;IAEtC,EAAE,EAAE,MAAM,CAAC;IAGX,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,CAAC,CAAC;CACJ;AAKD,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAO/E,eAAO,MAAM,YAAY,yCAA0C,CAAC;AAEpE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,UAAU,KACjB;IAAE,YAAY,EAAE,OAAO,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAKE,CAAC;AAmHvD,eAAO,MAAM,uBAAuB,GAAI,OAAO,MAAM,KAAG,MAAM,GAAG,IAOhE,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,SAAS,MAAM,GAAG,IAAI,KACrB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAG3B,CAAC;AAQF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,KAAK,GAAG,IAAI,EACpB,uBAAuB,MAAM,KAC5B,MAA4E,CAAC;AAEhF,eAAO,MAAM,uBAAuB,GAClC,IAAI,MAAM,KACT;IAAE,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAA;CAAE,GAAG,IAQ1D,CAAC;AAWF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAAI,MAAM,MAAM,KAAG,OAIlD,CAAC;AAmBF;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,GACpC,OAAO,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAClE,SAAS,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,KAChC,MAcc,CAAC;AAElB;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAC1B,aACI;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD,IAAI,GACJ,SAAS,KACZ,OAC2E,CAAC;AAI/E,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,MAY3C,CAAC"}

package/dist/toolConfirmation.js

@@ -4,7 +4,7 @@
 // participant's next message is a plain yes. These are the pieces of that rule
 // that aren't the runner's own bookkeeping.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.formatConfirmationSummary = exports.isConfirmationReply = exports.parseConfirmationButton = exports.confirmationButtonId = exports.confirmationButtonLabels = exports.languageFromPhoneNumber = exports.annotationsForEffect = exports.TOOL_EFFECTS = void 0;
+exports.stableJson = exports.isSensitiveTool = exports.formatConfirmationSummary = exports.isConfirmationReply = exports.parseConfirmationButton = exports.confirmationButtonId = exports.confirmationButtonLabels = exports.languageFromPhoneNumber = exports.annotationsForEffect = exports.TOOL_EFFECTS = void 0;
 // What an owner says a tool they wrote does, in the words the dashboard asks
 // it in, and the MCP annotations each answer stands for: `read` only looks
 // things up, `write` changes things that can be undone, `sensitive` sends,
@@ -215,3 +215,25 @@ const formatConfirmationSummary = (calls, titleOf) => calls
 })
     .join('\n\n');
 exports.formatConfirmationSummary = formatConfirmationSummary;
+/**
+ * Whether a tool needs a yes before it runs, by the MCP defaults: read-only
+ * only if it says so, and a tool that changes things is destructive unless it
+ * says it isn't. So an unannotated custom or proxied tool is confirmed — the
+ * safe reading for an organization that asked to be asked.
+ */
+const isSensitiveTool = (annotations) => annotations?.readOnlyHint !== true && annotations?.destructiveHint !== false;
+exports.isSensitiveTool = isSensitiveTool;
+// JSON with keys sorted at every depth, so two argument objects that say the
+// same thing serialize the same whatever order the model emitted them in.
+const stableJson = (value) => {
+    if (Array.isArray(value))
+        return `[${value.map(exports.stableJson).join(',')}]`;
+    if (value && typeof value === 'object') {
+        return `{${Object.keys(value)
+            .sort()
+            .map(key => `${JSON.stringify(key)}:${(0, exports.stableJson)(value[key])}`)
+            .join(',')}}`;
+    }
+    return JSON.stringify(value) ?? 'null';
+};
+exports.stableJson = stableJson;

package/dist/toolLint.d.ts

@@ -0,0 +1,35 @@
+export interface LintableTool {
+    name: string;
+    title?: string;
+    description?: string;
+    inputSchema?: unknown;
+    annotations?: {
+        readOnlyHint?: boolean;
+        destructiveHint?: boolean;
+        idempotentHint?: boolean;
+        openWorldHint?: boolean;
+    };
+}
+export declare const TOOL_LINT_RULES: readonly ["missing-description", "short-description", "no-usage-guidance", "missing-annotations", "undescribed-input", "overlapping-tools", "too-many-tools"];
+export type ToolLintRule = (typeof TOOL_LINT_RULES)[number];
+export interface ToolLintFinding {
+    rule: ToolLintRule;
+    tool?: string;
+    alike?: string[];
+    paths?: string[];
+    count?: number;
+    limit?: number;
+    message: string;
+}
+export interface ToolLintOptions {
+    others?: LintableTool[];
+    otherCount?: number;
+}
+export declare const TOOL_LINT_MIN_DESCRIPTION_LENGTH = 40;
+export declare const TOOL_LINT_MAX_TOOLS = 25;
+/**
+ * Check a set of tools for what makes them hard for a model to use. Findings
+ * come back in the order of `tools`, then the server-wide one.
+ */
+export declare const lintTools: (tools: LintableTool[], options?: ToolLintOptions) => ToolLintFinding[];
+//# sourceMappingURL=toolLint.d.ts.map

package/dist/toolLint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolLint.d.ts","sourceRoot":"","sources":["../src/toolLint.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE;QACZ,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;CACH;AAED,eAAO,MAAM,eAAe,+JAQlB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IAGnB,IAAI,CAAC,EAAE,MAAM,CAAC;IAGd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IAGf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAI9B,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IAGxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAKnD,eAAO,MAAM,mBAAmB,KAAK,CAAC;AA2ItC;;;GAGG;AACH,eAAO,MAAM,SAAS,GACpB,OAAO,YAAY,EAAE,EACrB,UAAS,eAAoB,KAC5B,eAAe,EA8FjB,CAAC"}

package/dist/toolLint.js

@@ -0,0 +1,240 @@
+"use strict";
+// Checks on how a tool presents itself to a model: the things that make a
+// model pick the wrong tool, pass the wrong arguments, or pay for tools it never
+// uses. Every finding is a warning — a tool that fails one still works, it is
+// just harder for a model to use well.
+//
+// One rule set, run in three places: `ganju build` (with `--strict` to fail on
+// any finding), the API when a custom-code version is created (returned beside
+// the version, with the artifact's other tools as context), and the dashboard's
+// function dialog while it is being filled in.
+//
+// The rule for this file: it imports nothing. The published CLI bundles it, and
+// anything it imported would ship inside the CLI with it (see cliConstants.ts).
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.lintTools = exports.TOOL_LINT_MAX_TOOLS = exports.TOOL_LINT_MIN_DESCRIPTION_LENGTH = exports.TOOL_LINT_RULES = void 0;
+exports.TOOL_LINT_RULES = [
+    'missing-description',
+    'short-description',
+    'no-usage-guidance',
+    'missing-annotations',
+    'undescribed-input',
+    'overlapping-tools',
+    'too-many-tools'
+];
+// Shorter than this and a description rarely says both what a tool does and
+// when to call it.
+exports.TOOL_LINT_MIN_DESCRIPTION_LENGTH = 40;
+// Past this many tools every call carries a long list of schemas, and models
+// start choosing among them badly. A channel turn hard-caps its list at 40
+// (CHANNEL_MAX_TOOLS); this warns well before that.
+exports.TOOL_LINT_MAX_TOOLS = 25;
+// Two descriptions sharing at least this much of their vocabulary read as the
+// same tool to a model. Words are weighted by how rare they are among the
+// server's tools (see descriptionWeights), so tools written from one template
+// — "Use when someone asks about X" — are told apart by their X.
+const DESCRIPTION_OVERLAP = 0.6;
+// Too few content words and two unrelated descriptions can share most of them.
+const MIN_OVERLAP_WORDS = 5;
+// Lowercased, accents off, so "Úsala cuando" and "usala cuando" are one text.
+const fold = (text) => text
+    .toLowerCase()
+    .normalize('NFKD')
+    .replace(/[\u0300-\u036f]/g, '');
+// Wording that tells a model WHEN to call a tool rather than only what it does
+// — English, Spanish and Portuguese, the languages descriptions here are
+// written in. Loose on purpose: a false "says when" costs nothing, a false
+// "doesn't" nags someone whose description is fine.
+const USAGE_GUIDANCE = /\b(use|uses|using|call|calls|when|whenever|before|after|instead|only if|if the user|if you|for questions|usa|usala|usalo|usar|llama|llamala|llamar|cuando|antes de|despues de|en lugar de|si el usuario|quando|use-a|utilize|chame)\b/;
+const STOPWORDS = new Set([
+    'the',
+    'and',
+    'for',
+    'with',
+    'from',
+    'this',
+    'that',
+    'into',
+    'your',
+    'you',
+    'use',
+    'when',
+    'call',
+    'tool',
+    'returns',
+    'return',
+    'given',
+    'user',
+    'about',
+    'una',
+    'uno',
+    'los',
+    'las',
+    'del',
+    'con',
+    'por',
+    'para',
+    'que',
+    'este',
+    'esta',
+    'como',
+    'cuando',
+    'usa',
+    'herramienta',
+    'devuelve',
+    'usuario'
+]);
+const contentWords = (text) => new Set(fold(text)
+    .split(/[^a-z0-9]+/)
+    .filter(word => word.length >= 3 && !STOPWORDS.has(word)));
+// `lookupOrder`, `lookup-order` and `order_lookup` name the same thing.
+const nameTokens = (name) => name
+    .replace(/([a-z0-9])([A-Z])/g, '$1 $2')
+    .toLowerCase()
+    .split(/[^a-z0-9]+/)
+    .filter(Boolean)
+    .sort()
+    .join(' ');
+// How much each word says about which tool a description belongs to: a word
+// in every description (the template, the domain) next to nothing, a word in
+// one of them a lot. Smoothed, so with two tools a shared word still counts.
+const descriptionWeights = (descriptions) => {
+    const frequency = new Map();
+    for (const words of descriptions) {
+        for (const word of words) {
+            frequency.set(word, (frequency.get(word) ?? 0) + 1);
+        }
+    }
+    const total = descriptions.length;
+    return word => Math.log(1 + total / (frequency.get(word) ?? 1));
+};
+// Jaccard, with each word counted by its weight.
+const weightedJaccard = (a, b, weight) => {
+    let shared = 0;
+    let union = 0;
+    for (const word of a) {
+        union += weight(word);
+        if (b.has(word))
+            shared += weight(word);
+    }
+    for (const word of b)
+        if (!a.has(word))
+            union += weight(word);
+    return union === 0 ? 0 : shared / union;
+};
+const isObject = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+// Every property the model may fill in that doesn't say what it is for, down
+// through nested objects and arrays of objects.
+const undescribedPaths = (schema, prefix = '') => {
+    if (!isObject(schema))
+        return [];
+    const paths = [];
+    if (isObject(schema.properties)) {
+        for (const [key, property] of Object.entries(schema.properties)) {
+            const path = prefix ? `${prefix}.${key}` : key;
+            if (!isObject(property))
+                continue;
+            const description = property.description;
+            if (typeof description !== 'string' || !description.trim()) {
+                paths.push(path);
+            }
+            paths.push(...undescribedPaths(property, path));
+        }
+    }
+    if (isObject(schema.items)) {
+        paths.push(...undescribedPaths(schema.items, `${prefix}[]`));
+    }
+    return paths;
+};
+const quoted = (name) => `"${name}"`;
+/**
+ * Check a set of tools for what makes them hard for a model to use. Findings
+ * come back in the order of `tools`, then the server-wide one.
+ */
+const lintTools = (tools, options = {}) => {
+    const others = options.others ?? [];
+    const findings = [];
+    const everyTool = [...tools, ...others];
+    const wordsOf = new Map(everyTool.map(tool => [tool, contentWords(tool.description ?? '')]));
+    const weight = descriptionWeights([...wordsOf.values()]);
+    const overlaps = (a, b) => {
+        if (nameTokens(a.name) === nameTokens(b.name))
+            return true;
+        const aWords = wordsOf.get(a);
+        const bWords = wordsOf.get(b);
+        if (aWords.size < MIN_OVERLAP_WORDS || bWords.size < MIN_OVERLAP_WORDS) {
+            return false;
+        }
+        return weightedJaccard(aWords, bWords, weight) >= DESCRIPTION_OVERLAP;
+    };
+    tools.forEach((tool, index) => {
+        const description = (tool.description ?? '').trim();
+        if (!description) {
+            findings.push({
+                rule: 'missing-description',
+                tool: tool.name,
+                message: `${quoted(tool.name)} has no description, so a model sees only its name when deciding whether to call it.`
+            });
+        }
+        else if (description.length < exports.TOOL_LINT_MIN_DESCRIPTION_LENGTH) {
+            findings.push({
+                rule: 'short-description',
+                tool: tool.name,
+                message: `${quoted(tool.name)} has a very short description. Say what it does and when to call it, in at least ${exports.TOOL_LINT_MIN_DESCRIPTION_LENGTH} characters.`
+            });
+        }
+        else if (!USAGE_GUIDANCE.test(fold(description))) {
+            findings.push({
+                rule: 'no-usage-guidance',
+                tool: tool.name,
+                message: `${quoted(tool.name)}'s description says what it does but not when to use it (e.g. "Use when the user asks about…").`
+            });
+        }
+        // Undeclared means "may change things" by the MCP defaults, so with the
+        // organization confirming sensitive actions every call asks first — a
+        // lookup included.
+        const hints = tool.annotations;
+        if (hints?.readOnlyHint === undefined &&
+            hints?.destructiveHint === undefined) {
+            findings.push({
+                rule: 'missing-annotations',
+                tool: tool.name,
+                message: `${quoted(tool.name)} declares no annotations, so it is treated as one that may change things and is confirmed before every call when the organization confirms sensitive actions. Set readOnlyHint: true if it only reads, or destructiveHint: false if its changes can be undone.`
+            });
+        }
+        const paths = undescribedPaths(tool.inputSchema);
+        if (paths.length > 0) {
+            findings.push({
+                rule: 'undescribed-input',
+                tool: tool.name,
+                paths,
+                message: `${quoted(tool.name)} has input properties with no description: ${paths.join(', ')}. A model has to guess what to pass.`
+            });
+        }
+        // Each pair once — against the tools after this one, then the rest of the
+        // server — and one finding per tool, so twenty look-alikes are nineteen
+        // lines rather than a hundred and ninety.
+        const alike = [...tools.slice(index + 1), ...others]
+            .filter(other => other.name !== tool.name && overlaps(tool, other))
+            .map(other => other.name);
+        if (alike.length > 0) {
+            findings.push({
+                rule: 'overlapping-tools',
+                tool: tool.name,
+                alike,
+                message: `${quoted(tool.name)} looks like ${alike.map(quoted).join(', ')} in name or description, so a model may call one for another. Make each description say what sets it apart.`
+            });
+        }
+    });
+    const count = tools.length + (options.otherCount ?? others.length);
+    if (count > exports.TOOL_LINT_MAX_TOOLS) {
+        findings.push({
+            rule: 'too-many-tools',
+            count,
+            limit: exports.TOOL_LINT_MAX_TOOLS,
+            message: `${count} tools are enabled on this server. Every one's schema is sent to the model on every call, and models choose worse past a few dozen — turn off the ones it doesn't need (more than ${exports.TOOL_LINT_MAX_TOOLS} is where this warns).`
+        });
+    }
+    return findings;
+};
+exports.lintTools = lintTools;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ganju/utils",
-  "version": "0.0.11",
+  "version": "0.0.13",
   "description": "Shared constants, schemas and helpers for Ganju",
   "license": "Apache-2.0",
   "author": "MontoyaAndres <andresmontoyafcb@gmail.com>",
@@ -53,6 +53,11 @@
       "import": "./dist/cliConstants.js",
       "require": "./dist/cliConstants.js"
     },
+    "./toolLint": {
+      "types": "./dist/toolLint.d.ts",
+      "import": "./dist/toolLint.js",
+      "require": "./dist/toolLint.js"
+    },
     "./sdkConstants": {
       "types": "./dist/sdkConstants.d.ts",
       "import": "./dist/sdkConstants.js",

package/src/constants.ts

@@ -807,6 +807,16 @@ const TOOL_CONFIRMATION_ASK_INSTRUCTION =
   'waiting for the user to confirm them. Your reply must ask the user to ' +
   'confirm, and must not say or suggest that they were done, nor describe ' +
   'or make up any result from them.';
+// For MCP clients, whose chat the server can't see: a sensitive call without a
+// valid confirmation isn't run, and the model is told to ask the user and call
+// again with a token that binds the second call to these exact arguments.
+// How long that token stays good, and the argument that carries it.
+const MCP_TOOL_CONFIRMATION_TTL_MS = 10 * 60 * 1000;
+const MCP_TOOL_CONFIRMATION_ARG = 'confirmation';
+const MCP_TOOL_CONFIRMATION_ARG_DESCRIPTION =
+  "Leave out on the first call. This action needs the user's yes: the " +
+  'first call returns a token; after the user says yes, call again with the ' +
+  'same arguments and that token here.';
 // The question when the model wrote none, above the runner's own summary.
 const TOOL_CONFIRMATION_FALLBACK_QUESTION =
   'Before I do this, please confirm. Reply yes to go ahead, or no to cancel.';
@@ -2669,6 +2679,9 @@ export const constants = {
   TOOL_CONFIRMATION_FALLBACK_QUESTION,
   TOOL_CONFIRMATION_ASK_INSTRUCTION,
   TOOL_CONFIRMATION_SYSTEM_NOTE,
+  MCP_TOOL_CONFIRMATION_TTL_MS,
+  MCP_TOOL_CONFIRMATION_ARG,
+  MCP_TOOL_CONFIRMATION_ARG_DESCRIPTION,
   CHANNEL_DEBOUNCE_DEFAULT_MS,
   CHANNEL_DEBOUNCE_MIN_MS,
   CHANNEL_DEBOUNCE_MAX_MS,

package/src/index.ts

@@ -233,13 +233,27 @@ import {
   languageFromPhoneNumber,
   formatConfirmationSummary,
   annotationsForEffect,
-  TOOL_EFFECTS
+  TOOL_EFFECTS,
+  isSensitiveTool,
+  stableJson
 } from './toolConfirmation';
 import type {
   PendingToolConfirmation,
   PendingToolConfirmations,
   ToolEffect
 } from './toolConfirmation';
+import {
+  lintTools,
+  TOOL_LINT_RULES,
+  TOOL_LINT_MAX_TOOLS,
+  TOOL_LINT_MIN_DESCRIPTION_LENGTH
+} from './toolLint';
+import type {
+  LintableTool,
+  ToolLintFinding,
+  ToolLintOptions,
+  ToolLintRule
+} from './toolLint';
 import {
   isResourceSourceEnabled,
   isDownloadableSource,
@@ -387,6 +401,12 @@ export const utils = {
   formatConfirmationSummary,
   annotationsForEffect,
   TOOL_EFFECTS,
+  isSensitiveTool,
+  stableJson,
+  lintTools,
+  TOOL_LINT_RULES,
+  TOOL_LINT_MAX_TOOLS,
+  TOOL_LINT_MIN_DESCRIPTION_LENGTH,
   isResourceSourceEnabled,
   isDownloadableSource,
   safeHostname,
@@ -419,6 +439,10 @@ export type {
   PendingToolConfirmation,
   PendingToolConfirmations,
   ToolEffect,
+  LintableTool,
+  ToolLintFinding,
+  ToolLintOptions,
+  ToolLintRule,
   ToolGroupKey,
   ToolKey,
   CalendarConfigField,

package/src/toolConfirmation.ts

@@ -259,3 +259,33 @@ export const formatConfirmationSummary = (
       return [`⏳ **${titleOf(call.name)}**`, ...lines].join('\n');
     })
     .join('\n\n');
+
+/**
+ * Whether a tool needs a yes before it runs, by the MCP defaults: read-only
+ * only if it says so, and a tool that changes things is destructive unless it
+ * says it isn't. So an unannotated custom or proxied tool is confirmed — the
+ * safe reading for an organization that asked to be asked.
+ */
+export const isSensitiveTool = (
+  annotations:
+    | { readOnlyHint?: boolean; destructiveHint?: boolean }
+    | null
+    | undefined
+): boolean =>
+  annotations?.readOnlyHint !== true && annotations?.destructiveHint !== false;
+
+// JSON with keys sorted at every depth, so two argument objects that say the
+// same thing serialize the same whatever order the model emitted them in.
+export const stableJson = (value: unknown): string => {
+  if (Array.isArray(value)) return `[${value.map(stableJson).join(',')}]`;
+  if (value && typeof value === 'object') {
+    return `{${Object.keys(value)
+      .sort()
+      .map(
+        key =>
+          `${JSON.stringify(key)}:${stableJson((value as Record<string, unknown>)[key])}`
+      )
+      .join(',')}}`;
+  }
+  return JSON.stringify(value) ?? 'null';
+};

package/src/toolLint.ts

@@ -0,0 +1,316 @@
+// Checks on how a tool presents itself to a model: the things that make a
+// model pick the wrong tool, pass the wrong arguments, or pay for tools it never
+// uses. Every finding is a warning — a tool that fails one still works, it is
+// just harder for a model to use well.
+//
+// One rule set, run in three places: `ganju build` (with `--strict` to fail on
+// any finding), the API when a custom-code version is created (returned beside
+// the version, with the artifact's other tools as context), and the dashboard's
+// function dialog while it is being filled in.
+//
+// The rule for this file: it imports nothing. The published CLI bundles it, and
+// anything it imported would ship inside the CLI with it (see cliConstants.ts).
+
+// The shape all three callers can produce: a manifest entry, an http-endpoint's
+// config, a proxied tool from discovery, a catalog tool.
+export interface LintableTool {
+  name: string;
+  title?: string;
+  description?: string;
+  inputSchema?: unknown;
+  annotations?: {
+    readOnlyHint?: boolean;
+    destructiveHint?: boolean;
+    idempotentHint?: boolean;
+    openWorldHint?: boolean;
+  };
+}
+
+export const TOOL_LINT_RULES = [
+  'missing-description',
+  'short-description',
+  'no-usage-guidance',
+  'missing-annotations',
+  'undescribed-input',
+  'overlapping-tools',
+  'too-many-tools'
+] as const;
+
+export type ToolLintRule = (typeof TOOL_LINT_RULES)[number];
+
+export interface ToolLintFinding {
+  rule: ToolLintRule;
+  // The tool the finding is about. Absent only for `too-many-tools`, which is
+  // about the server as a whole.
+  tool?: string;
+  // `overlapping-tools`: the tools it may be confused with. Each look-alike
+  // pair is reported once, on the first of the two.
+  alike?: string[];
+  // `undescribed-input`: the properties with no description, as dotted paths.
+  paths?: string[];
+  // `too-many-tools`: how many are enabled, and the number past which it warns.
+  count?: number;
+  limit?: number;
+  // The same finding in English, for the CLI and the API. The dashboard builds
+  // its own from the fields above, in the reader's language.
+  message: string;
+}
+
+export interface ToolLintOptions {
+  // The other tools on the same server — natives, http endpoints, proxied
+  // tools. They are checked against for overlap and counted, but never
+  // reported on themselves: the author of these tools can't change them.
+  others?: LintableTool[];
+  // How many tools the server exposes beside `tools`, when `others` doesn't
+  // list them all. Defaults to `others.length`.
+  otherCount?: number;
+}
+
+// Shorter than this and a description rarely says both what a tool does and
+// when to call it.
+export const TOOL_LINT_MIN_DESCRIPTION_LENGTH = 40;
+
+// Past this many tools every call carries a long list of schemas, and models
+// start choosing among them badly. A channel turn hard-caps its list at 40
+// (CHANNEL_MAX_TOOLS); this warns well before that.
+export const TOOL_LINT_MAX_TOOLS = 25;
+
+// Two descriptions sharing at least this much of their vocabulary read as the
+// same tool to a model. Words are weighted by how rare they are among the
+// server's tools (see descriptionWeights), so tools written from one template
+// — "Use when someone asks about X" — are told apart by their X.
+const DESCRIPTION_OVERLAP = 0.6;
+// Too few content words and two unrelated descriptions can share most of them.
+const MIN_OVERLAP_WORDS = 5;
+
+// Lowercased, accents off, so "Úsala cuando" and "usala cuando" are one text.
+const fold = (text: string): string =>
+  text
+    .toLowerCase()
+    .normalize('NFKD')
+    .replace(/[\u0300-\u036f]/g, '');
+
+// Wording that tells a model WHEN to call a tool rather than only what it does
+// — English, Spanish and Portuguese, the languages descriptions here are
+// written in. Loose on purpose: a false "says when" costs nothing, a false
+// "doesn't" nags someone whose description is fine.
+const USAGE_GUIDANCE =
+  /\b(use|uses|using|call|calls|when|whenever|before|after|instead|only if|if the user|if you|for questions|usa|usala|usalo|usar|llama|llamala|llamar|cuando|antes de|despues de|en lugar de|si el usuario|quando|use-a|utilize|chame)\b/;
+
+const STOPWORDS = new Set([
+  'the',
+  'and',
+  'for',
+  'with',
+  'from',
+  'this',
+  'that',
+  'into',
+  'your',
+  'you',
+  'use',
+  'when',
+  'call',
+  'tool',
+  'returns',
+  'return',
+  'given',
+  'user',
+  'about',
+  'una',
+  'uno',
+  'los',
+  'las',
+  'del',
+  'con',
+  'por',
+  'para',
+  'que',
+  'este',
+  'esta',
+  'como',
+  'cuando',
+  'usa',
+  'herramienta',
+  'devuelve',
+  'usuario'
+]);
+
+const contentWords = (text: string): Set<string> =>
+  new Set(
+    fold(text)
+      .split(/[^a-z0-9]+/)
+      .filter(word => word.length >= 3 && !STOPWORDS.has(word))
+  );
+
+// `lookupOrder`, `lookup-order` and `order_lookup` name the same thing.
+const nameTokens = (name: string): string =>
+  name
+    .replace(/([a-z0-9])([A-Z])/g, '$1 $2')
+    .toLowerCase()
+    .split(/[^a-z0-9]+/)
+    .filter(Boolean)
+    .sort()
+    .join(' ');
+
+// How much each word says about which tool a description belongs to: a word
+// in every description (the template, the domain) next to nothing, a word in
+// one of them a lot. Smoothed, so with two tools a shared word still counts.
+const descriptionWeights = (
+  descriptions: Set<string>[]
+): ((word: string) => number) => {
+  const frequency = new Map<string, number>();
+  for (const words of descriptions) {
+    for (const word of words) {
+      frequency.set(word, (frequency.get(word) ?? 0) + 1);
+    }
+  }
+  const total = descriptions.length;
+  return word => Math.log(1 + total / (frequency.get(word) ?? 1));
+};
+
+// Jaccard, with each word counted by its weight.
+const weightedJaccard = (
+  a: Set<string>,
+  b: Set<string>,
+  weight: (word: string) => number
+): number => {
+  let shared = 0;
+  let union = 0;
+  for (const word of a) {
+    union += weight(word);
+    if (b.has(word)) shared += weight(word);
+  }
+  for (const word of b) if (!a.has(word)) union += weight(word);
+  return union === 0 ? 0 : shared / union;
+};
+
+const isObject = (value: unknown): value is Record<string, unknown> =>
+  typeof value === 'object' && value !== null && !Array.isArray(value);
+
+// Every property the model may fill in that doesn't say what it is for, down
+// through nested objects and arrays of objects.
+const undescribedPaths = (schema: unknown, prefix = ''): string[] => {
+  if (!isObject(schema)) return [];
+  const paths: string[] = [];
+  if (isObject(schema.properties)) {
+    for (const [key, property] of Object.entries(schema.properties)) {
+      const path = prefix ? `${prefix}.${key}` : key;
+      if (!isObject(property)) continue;
+      const description = property.description;
+      if (typeof description !== 'string' || !description.trim()) {
+        paths.push(path);
+      }
+      paths.push(...undescribedPaths(property, path));
+    }
+  }
+  if (isObject(schema.items)) {
+    paths.push(...undescribedPaths(schema.items, `${prefix}[]`));
+  }
+  return paths;
+};
+
+const quoted = (name: string) => `"${name}"`;
+
+/**
+ * Check a set of tools for what makes them hard for a model to use. Findings
+ * come back in the order of `tools`, then the server-wide one.
+ */
+export const lintTools = (
+  tools: LintableTool[],
+  options: ToolLintOptions = {}
+): ToolLintFinding[] => {
+  const others = options.others ?? [];
+  const findings: ToolLintFinding[] = [];
+
+  const everyTool = [...tools, ...others];
+  const wordsOf = new Map(
+    everyTool.map(tool => [tool, contentWords(tool.description ?? '')])
+  );
+  const weight = descriptionWeights([...wordsOf.values()]);
+  const overlaps = (a: LintableTool, b: LintableTool): boolean => {
+    if (nameTokens(a.name) === nameTokens(b.name)) return true;
+    const aWords = wordsOf.get(a)!;
+    const bWords = wordsOf.get(b)!;
+    if (aWords.size < MIN_OVERLAP_WORDS || bWords.size < MIN_OVERLAP_WORDS) {
+      return false;
+    }
+    return weightedJaccard(aWords, bWords, weight) >= DESCRIPTION_OVERLAP;
+  };
+
+  tools.forEach((tool, index) => {
+    const description = (tool.description ?? '').trim();
+
+    if (!description) {
+      findings.push({
+        rule: 'missing-description',
+        tool: tool.name,
+        message: `${quoted(tool.name)} has no description, so a model sees only its name when deciding whether to call it.`
+      });
+    } else if (description.length < TOOL_LINT_MIN_DESCRIPTION_LENGTH) {
+      findings.push({
+        rule: 'short-description',
+        tool: tool.name,
+        message: `${quoted(tool.name)} has a very short description. Say what it does and when to call it, in at least ${TOOL_LINT_MIN_DESCRIPTION_LENGTH} characters.`
+      });
+    } else if (!USAGE_GUIDANCE.test(fold(description))) {
+      findings.push({
+        rule: 'no-usage-guidance',
+        tool: tool.name,
+        message: `${quoted(tool.name)}'s description says what it does but not when to use it (e.g. "Use when the user asks about…").`
+      });
+    }
+
+    // Undeclared means "may change things" by the MCP defaults, so with the
+    // organization confirming sensitive actions every call asks first — a
+    // lookup included.
+    const hints = tool.annotations;
+    if (
+      hints?.readOnlyHint === undefined &&
+      hints?.destructiveHint === undefined
+    ) {
+      findings.push({
+        rule: 'missing-annotations',
+        tool: tool.name,
+        message: `${quoted(tool.name)} declares no annotations, so it is treated as one that may change things and is confirmed before every call when the organization confirms sensitive actions. Set readOnlyHint: true if it only reads, or destructiveHint: false if its changes can be undone.`
+      });
+    }
+
+    const paths = undescribedPaths(tool.inputSchema);
+    if (paths.length > 0) {
+      findings.push({
+        rule: 'undescribed-input',
+        tool: tool.name,
+        paths,
+        message: `${quoted(tool.name)} has input properties with no description: ${paths.join(', ')}. A model has to guess what to pass.`
+      });
+    }
+
+    // Each pair once — against the tools after this one, then the rest of the
+    // server — and one finding per tool, so twenty look-alikes are nineteen
+    // lines rather than a hundred and ninety.
+    const alike = [...tools.slice(index + 1), ...others]
+      .filter(other => other.name !== tool.name && overlaps(tool, other))
+      .map(other => other.name);
+    if (alike.length > 0) {
+      findings.push({
+        rule: 'overlapping-tools',
+        tool: tool.name,
+        alike,
+        message: `${quoted(tool.name)} looks like ${alike.map(quoted).join(', ')} in name or description, so a model may call one for another. Make each description say what sets it apart.`
+      });
+    }
+  });
+
+  const count = tools.length + (options.otherCount ?? others.length);
+  if (count > TOOL_LINT_MAX_TOOLS) {
+    findings.push({
+      rule: 'too-many-tools',
+      count,
+      limit: TOOL_LINT_MAX_TOOLS,
+      message: `${count} tools are enabled on this server. Every one's schema is sent to the model on every call, and models choose worse past a few dozen — turn off the ones it doesn't need (more than ${TOOL_LINT_MAX_TOOLS} is where this warns).`
+    });
+  }
+
+  return findings;
+};