@honeyfield/rent2b-mcp 1.2.0 → 1.2.1

package/dist/auth/provider.test.js

@@ -0,0 +1,80 @@
+import { describe, it, expect, vi } from 'vitest';
+import { randomBytes } from 'node:crypto';
+import { createTokenCodec } from './token-crypto.js';
+import { InMemoryClientsStore, AuthCodeStore } from './stores.js';
+import { Rent2bOAuthProvider } from './provider.js';
+function makeProvider(validateKey = vi.fn(async () => 99)) {
+    const codec = createTokenCodec(randomBytes(32));
+    const provider = new Rent2bOAuthProvider({
+        codec,
+        clientsStore: new InMemoryClientsStore(),
+        codeStore: new AuthCodeStore(),
+        validateKey,
+    });
+    return { provider, codec, validateKey };
+}
+const client = { client_id: 'c1', redirect_uris: ['https://claude.ai/cb'] };
+describe('Rent2bOAuthProvider', () => {
+    it('issues a code, exposes its challenge, then exchanges it once', async () => {
+        const { provider } = makeProvider();
+        const code = provider.issueAuthCode({
+            apiKey: 'r2b_live',
+            orgId: 99,
+            codeChallenge: 'CHAL',
+            redirectUri: 'https://claude.ai/cb',
+            clientId: 'c1',
+        });
+        expect(await provider.challengeForAuthorizationCode(client, code)).toBe('CHAL');
+        const tokens = await provider.exchangeAuthorizationCode(client, code);
+        expect(tokens.access_token).toBeTruthy();
+        expect(tokens.token_type).toBe('Bearer');
+        expect(tokens.refresh_token).toBeTruthy();
+        // one-time: second exchange must fail
+        await expect(provider.exchangeAuthorizationCode(client, code)).rejects.toThrow();
+    });
+    it('verifyAccessToken decrypts an issued access token to the api key', async () => {
+        const { provider } = makeProvider();
+        const code = provider.issueAuthCode({
+            apiKey: 'r2b_live',
+            orgId: 99,
+            codeChallenge: 'CHAL',
+            redirectUri: 'https://claude.ai/cb',
+            clientId: 'c1',
+        });
+        const tokens = await provider.exchangeAuthorizationCode(client, code);
+        const info = await provider.verifyAccessToken(tokens.access_token);
+        expect(info.extra?.apiKey).toBe('r2b_live');
+        expect(info.extra?.orgId).toBe(99);
+        expect(info.clientId).toBe('rent2b-oauth');
+    });
+    it('verifyAccessToken accepts a raw r2b_ key (backward compat)', async () => {
+        const validateKey = vi.fn(async () => 7);
+        const { provider } = makeProvider(validateKey);
+        const info = await provider.verifyAccessToken('r2b_directkey');
+        expect(validateKey).toHaveBeenCalledWith('r2b_directkey');
+        expect(info.extra?.apiKey).toBe('r2b_directkey');
+        expect(info.extra?.orgId).toBe(7);
+        // requireBearerAuth rejects tokens without an expiry — both branches must set it.
+        expect(typeof info.expiresAt).toBe('number');
+        expect(info.expiresAt).toBeGreaterThan(Math.floor(Date.now() / 1000));
+    });
+    it('verifyAccessToken rejects garbage', async () => {
+        const { provider } = makeProvider();
+        await expect(provider.verifyAccessToken('not-a-token')).rejects.toThrow();
+    });
+    it('refresh token yields a new access token bound to the same key', async () => {
+        const { provider } = makeProvider();
+        const code = provider.issueAuthCode({
+            apiKey: 'r2b_live',
+            orgId: 99,
+            codeChallenge: 'CHAL',
+            redirectUri: 'https://claude.ai/cb',
+            clientId: 'c1',
+        });
+        const tokens = await provider.exchangeAuthorizationCode(client, code);
+        const refreshed = await provider.exchangeRefreshToken(client, tokens.refresh_token);
+        const info = await provider.verifyAccessToken(refreshed.access_token);
+        expect(info.extra?.apiKey).toBe('r2b_live');
+    });
+});
+//# sourceMappingURL=provider.test.js.map

package/dist/auth/provider.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.test.js","sourceRoot":"","sources":["../../src/auth/provider.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,SAAS,YAAY,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC;QACvC,KAAK;QACL,YAAY,EAAE,IAAI,oBAAoB,EAAE;QACxC,SAAS,EAAE,IAAI,aAAa,EAAE;QAC9B,WAAW;KACZ,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,sBAAsB,CAAC,EAAS,CAAC;AAEnF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;YAClC,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,MAAM;YACrB,WAAW,EAAE,sBAAsB;YACnC,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,QAAQ,CAAC,6BAA6B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,CAAC;QAC1C,sCAAsC;QACtC,MAAM,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;YAClC,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,MAAM;YACrB,WAAW,EAAE,sBAAsB;YACnC,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAC/D,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,kFAAkF;QAClF,MAAM,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;YAClC,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,MAAM;YACrB,WAAW,EAAE,sBAAsB;YACnC,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,aAAc,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/stores.d.ts

@@ -0,0 +1,27 @@
+import type { OAuthClientInformationFull } from '@modelcontextprotocol/sdk/shared/auth.js';
+/**
+ * In-memory registered-clients store for Dynamic Client Registration.
+ *
+ * The SDK's /register handler generates `client_id` and `client_id_issued_at`
+ * itself before calling `registerClient`, so at runtime the argument always
+ * carries a `client_id`. The parameter is typed as the SDK's `Omit<...>` to
+ * satisfy `OAuthRegisteredClientsStore`; we cast internally to read the id.
+ */
+export declare class InMemoryClientsStore {
+    private clients;
+    getClient(clientId: string): Promise<OAuthClientInformationFull | undefined>;
+    registerClient(client: Omit<OAuthClientInformationFull, 'client_id' | 'client_id_issued_at'>): Promise<OAuthClientInformationFull>;
+}
+export interface AuthCodeRecord {
+    apiKey: string;
+    orgId: number;
+    codeChallenge: string;
+    redirectUri: string;
+    clientId: string;
+    expiresAt: number;
+}
+export declare class AuthCodeStore {
+    private codes;
+    create(record: Omit<AuthCodeRecord, 'expiresAt'>, ttlMs?: number): string;
+    take(code: string): AuthCodeRecord | undefined;
+}

package/dist/auth/stores.js

@@ -0,0 +1,39 @@
+import { randomUUID } from 'node:crypto';
+/**
+ * In-memory registered-clients store for Dynamic Client Registration.
+ *
+ * The SDK's /register handler generates `client_id` and `client_id_issued_at`
+ * itself before calling `registerClient`, so at runtime the argument always
+ * carries a `client_id`. The parameter is typed as the SDK's `Omit<...>` to
+ * satisfy `OAuthRegisteredClientsStore`; we cast internally to read the id.
+ */
+export class InMemoryClientsStore {
+    clients = new Map();
+    async getClient(clientId) {
+        return this.clients.get(clientId);
+    }
+    async registerClient(client) {
+        const full = client;
+        this.clients.set(full.client_id, full);
+        return full;
+    }
+}
+const DEFAULT_TTL_MS = 5 * 60 * 1000;
+export class AuthCodeStore {
+    codes = new Map();
+    create(record, ttlMs = DEFAULT_TTL_MS) {
+        const code = randomUUID().replace(/-/g, '') + randomUUID().replace(/-/g, '');
+        this.codes.set(code, { ...record, expiresAt: Date.now() + ttlMs });
+        return code;
+    }
+    take(code) {
+        const rec = this.codes.get(code);
+        if (!rec)
+            return undefined;
+        this.codes.delete(code);
+        if (rec.expiresAt < Date.now())
+            return undefined;
+        return rec;
+    }
+}
+//# sourceMappingURL=stores.js.map

package/dist/auth/stores.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stores.js","sourceRoot":"","sources":["../../src/auth/stores.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACvB,OAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IAEhE,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,MAA6E;QAE7E,MAAM,IAAI,GAAG,MAAoC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAWD,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAErC,MAAM,OAAO,aAAa;IAChB,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElD,MAAM,CAAC,MAAyC,EAAE,QAAgB,cAAc;QAC9E,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,IAAY;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,SAAS,CAAC;QACjD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/auth/stores.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/auth/stores.test.js

@@ -0,0 +1,41 @@
+import { describe, it, expect } from 'vitest';
+import { InMemoryClientsStore, AuthCodeStore } from './stores.js';
+describe('InMemoryClientsStore', () => {
+    it('registers and retrieves a client', async () => {
+        const store = new InMemoryClientsStore();
+        const reg = await store.registerClient({
+            client_id: 'c1',
+            redirect_uris: ['https://claude.ai/callback'],
+        });
+        expect(reg.client_id).toBe('c1');
+        const got = await store.getClient('c1');
+        expect(got?.redirect_uris).toEqual(['https://claude.ai/callback']);
+    });
+    it('returns undefined for unknown client', async () => {
+        const store = new InMemoryClientsStore();
+        expect(await store.getClient('nope')).toBeUndefined();
+    });
+});
+describe('AuthCodeStore', () => {
+    const rec = {
+        apiKey: 'r2b_x',
+        orgId: 7,
+        codeChallenge: 'chal',
+        redirectUri: 'https://claude.ai/cb',
+        clientId: 'c1',
+    };
+    it('creates a code and takes it exactly once', () => {
+        const store = new AuthCodeStore();
+        const code = store.create(rec);
+        expect(typeof code).toBe('string');
+        const first = store.take(code);
+        expect(first?.apiKey).toBe('r2b_x');
+        expect(store.take(code)).toBeUndefined(); // one-time
+    });
+    it('does not return an expired code', () => {
+        const store = new AuthCodeStore();
+        const code = store.create(rec, -1); // already expired
+        expect(store.take(code)).toBeUndefined();
+    });
+});
+//# sourceMappingURL=stores.test.js.map

package/dist/auth/stores.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stores.test.js","sourceRoot":"","sources":["../../src/auth/stores.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAElE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC;YACrC,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,CAAC,4BAA4B,CAAC;SACvC,CAAC,CAAC;QACV,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACzC,MAAM,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,GAAG,GAAG;QACV,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,CAAC;QACR,aAAa,EAAE,MAAM;QACrB,WAAW,EAAE,sBAAsB;QACnC,QAAQ,EAAE,IAAI;KACf,CAAC;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB;QACtD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/token-crypto.d.ts

@@ -0,0 +1,14 @@
+export interface TokenPayload {
+    apiKey: string;
+    orgId: number;
+    type: 'access' | 'refresh';
+    exp: number;
+    jti: string;
+}
+export declare class TokenError extends Error {
+}
+export interface TokenCodec {
+    encrypt(payload: TokenPayload): string;
+    decrypt(token: string): TokenPayload;
+}
+export declare function createTokenCodec(key: Buffer): TokenCodec;

package/dist/auth/token-crypto.js

@@ -0,0 +1,50 @@
+import { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';
+export class TokenError extends Error {
+}
+const IV_LEN = 12;
+const TAG_LEN = 16;
+export function createTokenCodec(key) {
+    if (key.length !== 32) {
+        throw new Error('OAUTH_ENCRYPTION_KEY must decode to exactly 32 bytes');
+    }
+    return {
+        encrypt(payload) {
+            const iv = randomBytes(IV_LEN);
+            const cipher = createCipheriv('aes-256-gcm', key, iv);
+            const plaintext = Buffer.from(JSON.stringify(payload), 'utf8');
+            const enc = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+            const tag = cipher.getAuthTag();
+            return Buffer.concat([iv, tag, enc]).toString('base64url');
+        },
+        decrypt(token) {
+            let raw;
+            try {
+                raw = Buffer.from(token, 'base64url');
+            }
+            catch {
+                throw new TokenError('Malformed token');
+            }
+            if (raw.length < IV_LEN + TAG_LEN + 1) {
+                throw new TokenError('Malformed token');
+            }
+            const iv = raw.subarray(0, IV_LEN);
+            const tag = raw.subarray(IV_LEN, IV_LEN + TAG_LEN);
+            const enc = raw.subarray(IV_LEN + TAG_LEN);
+            const decipher = createDecipheriv('aes-256-gcm', key, iv);
+            decipher.setAuthTag(tag);
+            let payload;
+            try {
+                const dec = Buffer.concat([decipher.update(enc), decipher.final()]);
+                payload = JSON.parse(dec.toString('utf8'));
+            }
+            catch {
+                throw new TokenError('Invalid or tampered token');
+            }
+            if (typeof payload.exp !== 'number' || payload.exp < Math.floor(Date.now() / 1000)) {
+                throw new TokenError('Token expired');
+            }
+            return payload;
+        },
+    };
+}
+//# sourceMappingURL=token-crypto.js.map

package/dist/auth/token-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-crypto.js","sourceRoot":"","sources":["../../src/auth/token-crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAU5E,MAAM,OAAO,UAAW,SAAQ,KAAK;CAAG;AAOxC,MAAM,MAAM,GAAG,EAAE,CAAC;AAClB,MAAM,OAAO,GAAG,EAAE,CAAC;AAEnB,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO;QACL,OAAO,CAAC,OAAqB;YAC3B,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,CAAC,KAAa;YACnB,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,OAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACpE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/auth/token-crypto.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/auth/token-crypto.test.js

@@ -0,0 +1,40 @@
+import { describe, it, expect } from 'vitest';
+import { randomBytes } from 'node:crypto';
+import { createTokenCodec, TokenError } from './token-crypto.js';
+const key = randomBytes(32);
+const base = () => ({
+    apiKey: 'r2b_abc',
+    orgId: 42,
+    type: 'access',
+    exp: Math.floor(Date.now() / 1000) + 3600,
+    jti: 'jti-1',
+});
+describe('token-crypto', () => {
+    it('round-trips an encrypted payload', () => {
+        const codec = createTokenCodec(key);
+        const token = codec.encrypt(base());
+        expect(typeof token).toBe('string');
+        expect(token).not.toContain('r2b_'); // key must not be readable
+        const out = codec.decrypt(token);
+        expect(out.apiKey).toBe('r2b_abc');
+        expect(out.orgId).toBe(42);
+        expect(out.type).toBe('access');
+    });
+    it('rejects a tampered token', () => {
+        const codec = createTokenCodec(key);
+        const token = codec.encrypt(base());
+        const tampered = token.slice(0, -2) + (token.endsWith('A') ? 'BB' : 'AA');
+        expect(() => codec.decrypt(tampered)).toThrow(TokenError);
+    });
+    it('rejects a token signed with a different key', () => {
+        const token = createTokenCodec(key).encrypt(base());
+        const other = createTokenCodec(randomBytes(32));
+        expect(() => other.decrypt(token)).toThrow(TokenError);
+    });
+    it('rejects an expired token', () => {
+        const codec = createTokenCodec(key);
+        const token = codec.encrypt({ ...base(), exp: Math.floor(Date.now() / 1000) - 1 });
+        expect(() => codec.decrypt(token)).toThrow(TokenError);
+    });
+});
+//# sourceMappingURL=token-crypto.test.js.map

package/dist/auth/token-crypto.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-crypto.test.js","sourceRoot":"","sources":["../../src/auth/token-crypto.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAqB,MAAM,mBAAmB,CAAC;AAEpF,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;AAC5B,MAAM,IAAI,GAAG,GAAiB,EAAE,CAAC,CAAC;IAChC,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,QAAQ;IACd,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;IACzC,GAAG,EAAE,OAAO;CACb,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,2BAA2B;QAChE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -1,6 +1,12 @@
 export interface Config {
     apiKey: string;
     apiUrl: string;
+    /**
+     * Pre-resolved organization id for this key. When provided, the client skips
+     * the `GET /zapier/me` lookup — used in HTTP mode where the auth layer
+     * (verifyAccessToken) already resolved the org and set it on req.auth.
+     */
+    organizationId?: number;
 }
 export declare function loadConfig(): Config;
 export declare function loadHttpConfig(): {

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAKA,MAAM,eAAe,GAAG,6CAA6C,CAAC;AAEtE,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO;QACL,MAAM;QACN,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,eAAe;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,eAAe;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAsD;IAClF,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAuB,CAAC;IAClE,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAuB,CAAC;IAC3D,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;AACnG,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAWA,MAAM,eAAe,GAAG,6CAA6C,CAAC;AAEtE,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO;QACL,MAAM;QACN,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,eAAe;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,eAAe;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAsD;IAClF,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAuB,CAAC;IAClE,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAuB,CAAC;IAC3D,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;AACnG,CAAC"}

package/dist/generator/openapi-parser.js

@@ -7,6 +7,11 @@ const INCLUDED_PREFIXES = [
     '/time-slots',
     '/categories',
     '/organizations/{organizationId}/guests',
+    '/organizations/{organizationId}/website-content',
+    '/organizations/{organizationId}/branding',
+    '/settings',
+    '/profile',
+    '/campaign-links',
     '/statistics',
     '/organizations/{organizationId}/locations/{locationId}/items/{itemId}/availability',
 ];
@@ -17,6 +22,20 @@ export function shouldIncludeEndpoint(path) {
     const stripped = stripApiPrefix(path);
     return INCLUDED_PREFIXES.some((prefix) => stripped.startsWith(prefix));
 }
+// Endpoints inside the included prefixes that don't translate to usable
+// JSON-RPC tools and would only add noise: multipart file uploads, the public
+// click-tracking endpoint, and binary (QR image) responses.
+const EXCLUDED_ENDPOINTS = new Set([
+    'POST /rooms/{id}/images',
+    'POST /organizations/{organizationId}/branding/logo',
+    'POST /organizations/{organizationId}/branding/background',
+    'POST /profile/image',
+    'POST /campaign-links/track',
+    'POST /campaign-links/{id}/generate-qr',
+]);
+function isExcludedEndpoint(method, path) {
+    return EXCLUDED_ENDPOINTS.has(`${method.toUpperCase()} ${stripApiPrefix(path)}`);
+}
 function resolveRef(spec, ref) {
     const parts = ref.replace('#/', '').split('/');
     let current = spec;
@@ -58,6 +77,8 @@ export function parseOpenApiSpec(spec) {
         for (const [method, operation] of Object.entries(methods)) {
             if (['get', 'post', 'put', 'patch', 'delete'].indexOf(method) === -1)
                 continue;
+            if (isExcludedEndpoint(method, path))
+                continue;
             const parameters = (operation.parameters || []).map((p) => {
                 const resolved = p.$ref ? resolveRef(spec, p.$ref) : p;
                 return {

package/dist/generator/openapi-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"openapi-parser.js","sourceRoot":"","sources":["../../src/generator/openapi-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAmC1B,MAAM,iBAAiB,GAAG;IACxB,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,aAAa;IACb,aAAa;IACb,wCAAwC;IACxC,aAAa;IACb,oFAAoF;CACrF,CAAC;AAEF,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,UAAU,CAAC,IAAS,EAAE,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAS,EACT,MAAW;IAEX,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACtE,IAAI,CAAC,QAAQ,EAAE,UAAU;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAoC,EAAE,CAAC;IAElD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU,EAAE,CAAC;QACxE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,IAAI,EAAE,YAAY,CAAC,IAAI,IAAI,QAAQ;YACnC,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAClC,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,MAAM,EAAE,YAAY,CAAC,MAAM;SAC5B,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAS;IACxC,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAU,EAAE,CAAC;QACxE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAAE,SAAS;QAE3C,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAU,EAAE,CAAC;YACnE,IACE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAEhE,SAAS;YAEX,MAAM,UAAU,GAAsB,CACpC,SAAS,CAAC,UAAU,IAAI,EAAE,CAC3B,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;gBACf,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,OAAO;oBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,KAAK;oBACpC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,IAAI,QAAQ;oBACvC,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;iBACxC,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,WAA0C,CAAC;YAC/C,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC1B,MAAM,OAAO,GACX,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;gBAC9D,IAAI,OAAO,EAAE,CAAC;oBACZ,WAAW,GAAG;wBACZ,QAAQ,EAAE,SAAS,CAAC,WAAW,CAAC,QAAQ,IAAI,KAAK;wBACjD,UAAU,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC;qBAC7C,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,SAAS,CAAC,IAAI,CAAC;gBACb,WAAW,EACT,SAAS,CAAC,WAAW,IAAI,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE;gBAClE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC5B,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,EAAE;gBAChC,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,OAAO,IAAI,EAAE;gBAC7D,UAAU;gBACV,WAAW;gBACX,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,EAAE;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"openapi-parser.js","sourceRoot":"","sources":["../../src/generator/openapi-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAmC1B,MAAM,iBAAiB,GAAG;IACxB,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,aAAa;IACb,aAAa;IACb,wCAAwC;IACxC,iDAAiD;IACjD,0CAA0C;IAC1C,WAAW;IACX,UAAU;IACV,iBAAiB;IACjB,aAAa;IACb,oFAAoF;CACrF,CAAC;AAEF,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,wEAAwE;AACxE,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,yBAAyB;IACzB,oDAAoD;IACpD,0DAA0D;IAC1D,qBAAqB;IACrB,4BAA4B;IAC5B,uCAAuC;CACxC,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,MAAc,EAAE,IAAY;IACtD,OAAO,kBAAkB,CAAC,GAAG,CAC3B,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAS,EAAE,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAS,EACT,MAAW;IAEX,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACtE,IAAI,CAAC,QAAQ,EAAE,UAAU;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAoC,EAAE,CAAC;IAElD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU,EAAE,CAAC;QACxE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,IAAI,EAAE,YAAY,CAAC,IAAI,IAAI,QAAQ;YACnC,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAClC,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,MAAM,EAAE,YAAY,CAAC,MAAM;SAC5B,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAS;IACxC,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAU,EAAE,CAAC;QACxE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAAE,SAAS;QAE3C,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAU,EAAE,CAAC;YACnE,IACE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAEhE,SAAS;YAEX,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,SAAS;YAE/C,MAAM,UAAU,GAAsB,CACpC,SAAS,CAAC,UAAU,IAAI,EAAE,CAC3B,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;gBACf,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,OAAO;oBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,KAAK;oBACpC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,IAAI,QAAQ;oBACvC,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;iBACxC,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,WAA0C,CAAC;YAC/C,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC1B,MAAM,OAAO,GACX,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;gBAC9D,IAAI,OAAO,EAAE,CAAC;oBACZ,WAAW,GAAG;wBACZ,QAAQ,EAAE,SAAS,CAAC,WAAW,CAAC,QAAQ,IAAI,KAAK;wBACjD,UAAU,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC;qBAC7C,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,SAAS,CAAC,IAAI,CAAC;gBACb,WAAW,EACT,SAAS,CAAC,WAAW,IAAI,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE;gBAClE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC5B,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,EAAE;gBAChC,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,OAAO,IAAI,EAAE;gBAC7D,UAAU;gBACV,WAAW;gBACX,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,EAAE;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/generator/tool-generator.js

@@ -7,8 +7,15 @@ function generateToolName(endpoint) {
         .replace(/^\//, '')
         .replace(/\//g, '_')
         .replace(/-/g, '_');
+    // A GET whose path ends in a resource id (…/{id}) fetches a single item →
+    // 'get'; otherwise it's a collection → 'list'. This also disambiguates
+    // sibling endpoints like GET /…/damages (list) vs GET /…/damages/{id} (get),
+    // which previously collapsed to the same auto-generated name.
+    const endsWithPathParam = /\/\{[^}]+\}\/?$/.test(path);
     const action = method === 'GET'
-        ? 'list'
+        ? endsWithPathParam
+            ? 'get'
+            : 'list'
         : method === 'POST'
             ? 'create'
             : method === 'PATCH' || method === 'PUT'
@@ -63,6 +70,17 @@ export function generateTools(endpoints) {
             },
         });
     }
+    // Safety net: guarantee unique tool names. If any name still collides (e.g.
+    // two endpoints that clean to the same path + action), suffix later ones with
+    // _2, _3, … so every endpoint stays callable instead of being shadowed.
+    const nameCounts = new Map();
+    for (const tool of tools) {
+        const seen = nameCounts.get(tool.name) ?? 0;
+        nameCounts.set(tool.name, seen + 1);
+        if (seen > 0) {
+            tool.name = `${tool.name}_${seen + 1}`;
+        }
+    }
     return tools;
 }
 //# sourceMappingURL=tool-generator.js.map

package/dist/generator/tool-generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-generator.js","sourceRoot":"","sources":["../../src/generator/tool-generator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAcpD,SAAS,gBAAgB,CAAC,QAAwB;IAChD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IAElC,MAAM,OAAO,GAAG,IAAI;SACjB,OAAO,CAAC,sCAAsC,EAAE,EAAE,CAAC;SACnD,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEtB,MAAM,MAAM,GACV,MAAM,KAAK,KAAK;QACd,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,KAAK,MAAM;YACjB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK;gBACtC,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,MAAM,KAAK,QAAQ;oBACnB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAEjC,OAAO,UAAU,OAAO,IAAI,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAA2B;IACvD,MAAM,KAAK,GAAoB,EAAE,CAAC;IAElC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE7D,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBAAE,SAAS;YAC9C,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ;gBAAE,SAAS;YAEpC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;gBACvB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,GAAG,KAAK,CAAC,IAAI,YAAY;aAC5D,CAAC;YACF,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAChC,EAAE,CAAC;gBACF,UAAU,CAAC,IAAI,CAAC,GAAG;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;iBACtC,CAAC;gBACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;gBACpC,CAAC;gBACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,gBAAgB,CAAC,QAAQ,CAAC;YAClD,WAAW,EACT,QAAQ,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,OAAO;YACnE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU;gBACV,QAAQ;aACT;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"tool-generator.js","sourceRoot":"","sources":["../../src/generator/tool-generator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAcpD,SAAS,gBAAgB,CAAC,QAAwB;IAChD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IAElC,MAAM,OAAO,GAAG,IAAI;SACjB,OAAO,CAAC,sCAAsC,EAAE,EAAE,CAAC;SACnD,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEtB,0EAA0E;IAC1E,uEAAuE;IACvE,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,MAAM,GACV,MAAM,KAAK,KAAK;QACd,CAAC,CAAC,iBAAiB;YACjB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,MAAM;QACV,CAAC,CAAC,MAAM,KAAK,MAAM;YACjB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK;gBACtC,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,MAAM,KAAK,QAAQ;oBACnB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAEjC,OAAO,UAAU,OAAO,IAAI,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAA2B;IACvD,MAAM,KAAK,GAAoB,EAAE,CAAC;IAElC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE7D,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBAAE,SAAS;YAC9C,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ;gBAAE,SAAS;YAEpC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;gBACvB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,GAAG,KAAK,CAAC,IAAI,YAAY;aAC5D,CAAC;YACF,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAChC,EAAE,CAAC;gBACF,UAAU,CAAC,IAAI,CAAC,GAAG;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;iBACtC,CAAC;gBACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;gBACpC,CAAC;gBACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,gBAAgB,CAAC,QAAQ,CAAC;YAClD,WAAW,EACT,QAAQ,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,OAAO;YACnE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU;gBACV,QAAQ;aACT;SACF,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QACpC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/generator/tool-generator.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/generator/tool-generator.test.js

@@ -0,0 +1,35 @@
+import { describe, it, expect } from 'vitest';
+import { generateTools } from './tool-generator.js';
+function ep(method, path) {
+    return {
+        operationId: `${method} ${path}`,
+        method,
+        path,
+        summary: '',
+        description: '',
+        parameters: [],
+        tags: [],
+    };
+}
+describe('generateTools naming', () => {
+    it("uses 'get' for a GET on a single resource (path ends in /{id}) and 'list' for a collection", () => {
+        const tools = generateTools([
+            ep('GET', '/bookings/{bookingId}/damages'),
+            ep('GET', '/bookings/{bookingId}/damages/{id}'),
+        ]);
+        const names = tools.map((t) => t.name);
+        expect(names).toContain('rent2b_bookings_damages_list');
+        expect(names).toContain('rent2b_bookings_damages_get');
+    });
+    it('never emits duplicate tool names (dedup safety net)', () => {
+        // Two endpoints that clean to the same name + action would collide without dedup.
+        const tools = generateTools([
+            ep('GET', '/bookings/{bookingId}/damages'),
+            ep('GET', '/bookings/{otherId}/damages'),
+        ]);
+        const names = tools.map((t) => t.name);
+        expect(new Set(names).size).toBe(names.length);
+        expect(names).toEqual(['rent2b_bookings_damages_list', 'rent2b_bookings_damages_list_2']);
+    });
+});
+//# sourceMappingURL=tool-generator.test.js.map

package/dist/generator/tool-generator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-generator.test.js","sourceRoot":"","sources":["../../src/generator/tool-generator.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,SAAS,EAAE,CAAC,MAAc,EAAE,IAAY;IACtC,OAAO;QACL,WAAW,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE;QAChC,MAAM;QACN,IAAI;QACJ,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,EAAE;QACf,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,EAAE;KACT,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,MAAM,KAAK,GAAG,aAAa,CAAC;YAC1B,EAAE,CAAC,KAAK,EAAE,+BAA+B,CAAC;YAC1C,EAAE,CAAC,KAAK,EAAE,oCAAoC,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,kFAAkF;QAClF,MAAM,KAAK,GAAG,aAAa,CAAC;YAC1B,EAAE,CAAC,KAAK,EAAE,+BAA+B,CAAC;YAC1C,EAAE,CAAC,KAAK,EAAE,6BAA6B,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,8BAA8B,EAAE,gCAAgC,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}