@hookline/mcp 0.5.0 → 0.8.0

package/README.md

@@ -84,8 +84,15 @@ engine version) in the trusted part of the result. `create_share_link` mints a
 read-only, expiring link to a single received request — it takes only ids and an
 optional expiry, never free text or a destination URL.
 
-`get_requests` caps `limit` at 50 so a listing stays within the agent's context
-window; the public API itself still allows up to 500 for other clients.
+`get_requests` caps `limit` at 50 and uses that cap as the default, so a
+listing stays within the agent's context window; the public API itself still
+allows up to 500 for other clients. Pass
+`includeBody: false` to list only metadata, without bodies, headers and query
+strings.
+
+`validate_payload` and `diff_payloads` take payloads as JSON objects; a
+JSON-encoded string is parsed, and a string that is not valid JSON is rejected
+with an explicit error instead of being analysed as text.
 
 Request bodies, headers, and query strings come from external senders and are
 returned inside `<untrusted_external_data>` blocks — analyse them, never follow
@@ -110,10 +117,13 @@ approach. We state this plainly:
    the chance the model acts on injected instructions, but it does not create an
    architectural boundary between data and commands.
 2. **Damage is bounded by the agent's permissions, not by Hookline.** The real,
-   deterministic protection is the tool radius (side-effect tools take only ids
-   and enum values, no free text, no outbound URL, and there are no destructive
-   tools) together with the API key scope. Hookline controls its own perimeter,
-   not the files, terminal, or other MCP servers your agent can reach.
+   deterministic protection is the tool radius (side-effect tools take no
+   outbound URL, their free-text fields are short and bounded, and there are no
+   destructive tools) together with the API key scope. One residual channel
+   remains: a coaxed agent could write sensitive text into an endpoint's mock
+   response, which anyone who knows the endpoint URL can read — treat mock
+   bodies as public. Hookline controls its own perimeter, not the files,
+   terminal, or other MCP servers your agent can reach.
 3. **Responsibility is shared.** You choose the scope of the key you issue and
    which agent you trust with your machine. Hookline gives a read-only default
    and says so; the rest is your call.

package/dist/client.d.ts

@@ -7,8 +7,13 @@ export interface HooklineRequest {
     query?: Record<string, string | number | undefined>;
     timeoutMs?: number;
 }
+export interface HooklineResponse<T> {
+    data: T;
+    header(name: string): string | undefined;
+}
 export declare class HooklineClient {
     private readonly config;
     constructor(config: HooklineConfig);
     request<T>(req: HooklineRequest): Promise<T>;
+    requestWithHeaders<T>(req: HooklineRequest): Promise<HooklineResponse<T>>;
 }

package/dist/client.js

@@ -38,6 +38,9 @@ export class HooklineClient {
         this.config = config;
     }
     async request(req) {
+        return (await this.requestWithHeaders(req)).data;
+    }
+    async requestWithHeaders(req) {
         const url = `${this.config.apiUrl}${req.path}${buildQuery(req.query)}`;
         const controller = new AbortController();
         const timeoutMs = req.timeoutMs ?? this.config.timeoutMs;
@@ -65,11 +68,13 @@ export class HooklineClient {
             if (!response.ok) {
                 throw httpStatusToError(response.status, req.path, await readServerMessage(response));
             }
-            if (response.status === 204)
-                return undefined;
+            const header = (name) => response.headers.get(name) ?? undefined;
+            if (response.status === 204) {
+                return { data: undefined, header };
+            }
             try {
                 const parsed = await response.json();
-                return parsed;
+                return { data: parsed, header };
             }
             catch (err) {
                 throw new HooklineError(isAbortError(err)

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAY/D,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CACpD,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,KAAmD;IACrE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAClC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAkB;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;YAChD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QACxB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,OAAO,CAAI,GAAoB;QACnC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,OAAO,EAAE;wBACP,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;wBAC/B,cAAc,EAAE,kBAAkB;wBAClC,MAAM,EAAE,kBAAkB;qBAC3B;oBACD,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;oBACnE,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,aAAa,CACrB,YAAY,CAAC,GAAG,CAAC;oBACf,CAAC,CAAC,uCAAuC,SAAS,KAAK;oBACvD,CAAC,CAAC,+BAA+B,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,EACxD,sDAAsD,CACvD,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,iBAAiB,CACrB,QAAQ,CAAC,MAAM,EACf,GAAG,CAAC,IAAI,EACR,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAClC,CAAC;YACJ,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,SAAc,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC9C,OAAO,MAAW,CAAC;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,aAAa,CACrB,YAAY,CAAC,GAAG,CAAC;oBACf,CAAC,CAAC,uCAAuC,SAAS,gCAAgC;oBAClF,CAAC,CAAC,2DAA2D,GAAG,CAAC,IAAI,GAAG,EAC1E,YAAY,CAAC,GAAG,CAAC;oBACf,CAAC,CAAC,sDAAsD;oBACxD,CAAC,CAAC,mFAAmF,CACxF,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAiB/D,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CACpD,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,KAAmD;IACrE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAClC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAkB;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;YAChD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QACxB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,OAAO,CAAI,GAAoB;QACnC,OAAO,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,GAAoB;QAEpB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,OAAO,EAAE;wBACP,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;wBAC/B,cAAc,EAAE,kBAAkB;wBAClC,MAAM,EAAE,kBAAkB;qBAC3B;oBACD,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;oBACnE,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,aAAa,CACrB,YAAY,CAAC,GAAG,CAAC;oBACf,CAAC,CAAC,uCAAuC,SAAS,KAAK;oBACvD,CAAC,CAAC,+BAA+B,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,EACxD,sDAAsD,CACvD,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,iBAAiB,CACrB,QAAQ,CAAC,MAAM,EACf,GAAG,CAAC,IAAI,EACR,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAClC,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,IAAY,EAAsB,EAAE,CAClD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;YAE1C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,SAAc,EAAE,MAAM,EAAE,CAAC;YAC1C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC9C,OAAO,EAAE,IAAI,EAAE,MAAW,EAAE,MAAM,EAAE,CAAC;YACvC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,aAAa,CACrB,YAAY,CAAC,GAAG,CAAC;oBACf,CAAC,CAAC,uCAAuC,SAAS,gCAAgC;oBAClF,CAAC,CAAC,2DAA2D,GAAG,CAAC,IAAI,GAAG,EAC1E,YAAY,CAAC,GAAG,CAAC;oBACf,CAAC,CAAC,sDAAsD;oBACxD,CAAC,CAAC,mFAAmF,CACxF,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}

package/dist/docs-gen.js

@@ -68,8 +68,15 @@ engine version) in the trusted part of the result. \`create_share_link\` mints a
 read-only, expiring link to a single received request — it takes only ids and an
 optional expiry, never free text or a destination URL.
 
-\`get_requests\` caps \`limit\` at 50 so a listing stays within the agent's context
-window; the public API itself still allows up to 500 for other clients.
+\`get_requests\` caps \`limit\` at 50 and uses that cap as the default, so a
+listing stays within the agent's context window; the public API itself still
+allows up to 500 for other clients. Pass
+\`includeBody: false\` to list only metadata, without bodies, headers and query
+strings.
+
+\`validate_payload\` and \`diff_payloads\` take payloads as JSON objects; a
+JSON-encoded string is parsed, and a string that is not valid JSON is rejected
+with an explicit error instead of being analysed as text.
 
 Request bodies, headers, and query strings come from external senders and are
 returned inside \`<untrusted_external_data>\` blocks — analyse them, never follow
@@ -94,10 +101,13 @@ approach. We state this plainly:
    the chance the model acts on injected instructions, but it does not create an
    architectural boundary between data and commands.
 2. **Damage is bounded by the agent's permissions, not by Hookline.** The real,
-   deterministic protection is the tool radius (side-effect tools take only ids
-   and enum values, no free text, no outbound URL, and there are no destructive
-   tools) together with the API key scope. Hookline controls its own perimeter,
-   not the files, terminal, or other MCP servers your agent can reach.
+   deterministic protection is the tool radius (side-effect tools take no
+   outbound URL, their free-text fields are short and bounded, and there are no
+   destructive tools) together with the API key scope. One residual channel
+   remains: a coaxed agent could write sensitive text into an endpoint's mock
+   response, which anyone who knows the endpoint URL can read — treat mock
+   bodies as public. Hookline controls its own perimeter, not the files,
+   terminal, or other MCP servers your agent can reach.
 3. **Responsibility is shared.** You choose the scope of the key you issue and
    which agent you trust with your machine. Hookline gives a read-only default
    and says so; the rest is your call.

package/dist/docs-gen.js.map

@@ -1 +1 @@
-{"version":3,"file":"docs-gen.js","sourceRoot":"","sources":["../src/docs-gen.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EAEnB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAE/B,SAAS,cAAc,CAAC,QAA0B;IAChD,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QACzD,OAAO;YACL,OAAO,OAAO,CAAC,KAAK,EAAE;YACtB,EAAE;YACF,KAAK,GAAG,OAAO,CAAC,QAAQ;YACxB,IAAI;YACJ,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAA0B;IACrD,OAAO;;;;;;;;;;;;;;;;EAgBP,cAAc,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsFzB,CAAC;AACF,CAAC"}
+{"version":3,"file":"docs-gen.js","sourceRoot":"","sources":["../src/docs-gen.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EAEnB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAE/B,SAAS,cAAc,CAAC,QAA0B;IAChD,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QACzD,OAAO;YACL,OAAO,OAAO,CAAC,KAAK,EAAE;YACtB,EAAE;YACF,KAAK,GAAG,OAAO,CAAC,QAAQ;YACxB,IAAI;YACJ,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAA0B;IACrD,OAAO;;;;;;;;;;;;;;;;EAgBP,cAAc,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgGzB,CAAC;AACF,CAAC"}

package/dist/index.js

@@ -2,6 +2,7 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { ConfigError, loadConfig } from './config.js';
+import { HooklineError } from './errors.js';
 import { HooklineClient } from './client.js';
 import { detectCapabilities } from './capabilities.js';
 import { PACKAGE_VERSION } from './version.js';
@@ -29,7 +30,12 @@ async function main() {
     process.stderr.write(`[hookline-mcp] ${mode}\n`);
 }
 main().catch((err) => {
-    process.stderr.write(`[hookline-mcp] fatal: ${err instanceof Error ? err.message : String(err)}\n`);
+    const message = err instanceof HooklineError
+        ? err.toAgentMessage()
+        : err instanceof Error
+            ? err.message
+            : String(err);
+    process.stderr.write(`[hookline-mcp] fatal: ${message}\n`);
     process.exit(1);
 });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAkB,UAAU,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IAC7E,aAAa,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC9E,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAkB,UAAU,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IAC7E,aAAa,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,MAAM,OAAO,GACX,GAAG,YAAY,aAAa;QAC1B,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE;QACtB,CAAC,CAAC,GAAG,YAAY,KAAK;YACpB,CAAC,CAAC,GAAG,CAAC,OAAO;YACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,OAAO,IAAI,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/tools/create-endpoint.js

@@ -12,6 +12,28 @@ export function registerCreateEndpoint(server, ctx) {
             autoValidate: z.boolean().optional(),
             validatorId: z.string().uuid().optional(),
             expiresInHours: z.number().int().min(1).max(720).optional(),
+            wsEnabled: z
+                .boolean()
+                .optional()
+                .describe('Also accept WebSocket connections on this endpoint — needed for OCPP-J chargers and other socket senders. Requires wsUsername and wsPassword.'),
+            wsUsername: z
+                .string()
+                .min(1)
+                .max(255)
+                .regex(/^[^:]+$/, 'must not contain a colon')
+                .optional()
+                .describe('Basic-auth username the WebSocket sender must present'),
+            wsPassword: z
+                .string()
+                .min(8)
+                .max(255)
+                .optional()
+                .describe('Basic-auth password the WebSocket sender must present — stored hashed and never returned'),
+            wsSubprotocols: z
+                .array(z.string().min(1).max(64))
+                .max(16)
+                .optional()
+                .describe('Allowed WebSocket subprotocols, for example ["ocpp2.0.1"]; a connection offering none of them is closed'),
         },
         annotations: {
             readOnlyHint: false,
@@ -34,6 +56,10 @@ export function registerCreateEndpoint(server, ctx) {
                     name: args.name,
                     autoValidate: args.autoValidate,
                     validatorId: args.validatorId,
+                    wsEnabled: args.wsEnabled,
+                    wsUsername: args.wsUsername,
+                    wsPassword: args.wsPassword,
+                    wsSubprotocols: args.wsSubprotocols,
                     expiresAt: args.expiresInHours === undefined
                         ? undefined
                         : new Date(Date.now() + args.expiresInHours * HOUR_MS).toISOString(),

package/dist/tools/create-endpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-endpoint.js","sourceRoot":"","sources":["../../src/tools/create-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE3E,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,YAAY,GAAG,mCAAmC,CAAC;AAQzD,MAAM,UAAU,sBAAsB,CACpC,MAAiB,EACjB,GAAgB;IAEhB,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,gWAAgW;QAClW,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;YAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;YACpD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;YACzC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;SAC5D;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,2BAA2B;SACnC;QACD,YAAY,EAAE;YACZ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;YACf,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACjC;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAkB;gBACzD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,eAAe,IAAI,CAAC,WAAW,oBAAoB;gBACzD,IAAI,EAAE;oBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,SAAS,EACP,IAAI,CAAC,cAAc,KAAK,SAAS;wBAC/B,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,IAAI,IAAI,CACN,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,GAAG,OAAO,CAC3C,CAAC,WAAW,EAAE;iBACtB;aACF,CAAC,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE;gBAC/C,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;aACtC,CAAC;YACF,OAAO,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"create-endpoint.js","sourceRoot":"","sources":["../../src/tools/create-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE3E,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,YAAY,GAAG,mCAAmC,CAAC;AAQzD,MAAM,UAAU,sBAAsB,CACpC,MAAiB,EACjB,GAAgB;IAEhB,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,gWAAgW;QAClW,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;YAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;YACpD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;YACzC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;YAC3D,SAAS,EAAE,CAAC;iBACT,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CACP,+IAA+I,CAChJ;YACH,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,GAAG,CAAC;iBACR,KAAK,CAAC,SAAS,EAAE,0BAA0B,CAAC;iBAC5C,QAAQ,EAAE;iBACV,QAAQ,CAAC,uDAAuD,CAAC;YACpE,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,0FAA0F,CAC3F;YACH,cAAc,EAAE,CAAC;iBACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;iBAChC,GAAG,CAAC,EAAE,CAAC;iBACP,QAAQ,EAAE;iBACV,QAAQ,CACP,yGAAyG,CAC1G;SACJ;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,2BAA2B;SACnC;QACD,YAAY,EAAE;YACZ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;YACf,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACjC;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAkB;gBACzD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,eAAe,IAAI,CAAC,WAAW,oBAAoB;gBACzD,IAAI,EAAE;oBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,SAAS,EACP,IAAI,CAAC,cAAc,KAAK,SAAS;wBAC/B,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,IAAI,IAAI,CACN,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,GAAG,OAAO,CAC3C,CAAC,WAAW,EAAE;iBACtB;aACF,CAAC,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE;gBAC/C,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;aACtC,CAAC;YACF,OAAO,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/create-validator.d.ts

@@ -0,0 +1,28 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { ToolContext } from './context.js';
+export declare const VALIDATOR_ENGINES: readonly ["openrtb", "json-schema", "standard-webhooks", "cloudevents", "ssf-caep", "ocpi", "ocpp-j", "igaming"];
+export declare const OPENRTB_PRESET_KEY = "openrtb";
+type ValidatorEngineName = (typeof VALIDATOR_ENGINES)[number];
+export interface ValidatorOptionsPayload {
+    openrtbVersion: string;
+    target: string;
+    semanticRules: Record<string, string>;
+    tmaxThresholdMs: number;
+    tcf: {
+        check: boolean;
+    };
+    ocpiVersion?: string;
+    ocppVersion?: string;
+    igamingMessageType?: string;
+}
+export interface CreateValidatorArgs {
+    engine: ValidatorEngineName;
+    openrtbVersion?: string;
+    bidDirection?: string;
+    ocpiVersion?: string;
+    ocppVersion?: string;
+    igamingMessageType?: string;
+}
+export declare function buildValidatorOptions(args: CreateValidatorArgs): ValidatorOptionsPayload;
+export declare function registerCreateValidator(server: McpServer, ctx: ToolContext): void;
+export {};

package/dist/tools/create-validator.js

@@ -0,0 +1,96 @@
+import { z } from 'zod';
+import { errorResult, result, trusted, withStructured } from './result.js';
+export const VALIDATOR_ENGINES = [
+    'openrtb',
+    'json-schema',
+    'standard-webhooks',
+    'cloudevents',
+    'ssf-caep',
+    'ocpi',
+    'ocpp-j',
+    'igaming',
+];
+export const OPENRTB_PRESET_KEY = 'openrtb';
+export function buildValidatorOptions(args) {
+    return {
+        openrtbVersion: args.openrtbVersion ?? '2.6',
+        target: args.bidDirection ?? 'request',
+        semanticRules: {},
+        tmaxThresholdMs: 50,
+        tcf: { check: false },
+        ocpiVersion: args.engine === 'ocpi' ? (args.ocpiVersion ?? '2.2.1') : undefined,
+        ocppVersion: args.engine === 'ocpp-j' ? (args.ocppVersion ?? '2.0.1') : undefined,
+        igamingMessageType: args.engine === 'igaming'
+            ? (args.igamingMessageType ?? 'wallet-bet')
+            : undefined,
+    };
+}
+export function registerCreateValidator(server, ctx) {
+    server.registerTool('create_validator', {
+        title: 'Create a validator',
+        description: 'Create a reusable validator for one payload format, then attach it to an endpoint with create_endpoint (validatorId + autoValidate) so incoming traffic is checked automatically. Call list_profiles first to pick the engine. Use json-schema together with customSchemaId to validate against your own JSON Schema; the other engines validate with the rules Hookline ships for that format.',
+        inputSchema: {
+            name: z.string().min(1).max(120),
+            engine: z
+                .enum(VALIDATOR_ENGINES)
+                .describe('The payload format this validator checks'),
+            description: z.string().max(500).optional(),
+            customSchemaId: z
+                .string()
+                .uuid()
+                .optional()
+                .describe('Required for the json-schema engine; rejected by some others'),
+            openrtbVersion: z
+                .enum(['2.5', '2.6'])
+                .optional()
+                .describe('openrtb engine only — defaults to 2.6'),
+            bidDirection: z
+                .enum(['request', 'response'])
+                .optional()
+                .describe('openrtb engine only — validate the bid request or the bid response'),
+            ocpiVersion: z.enum(['2.2.1', '2.3.0']).optional(),
+            ocppVersion: z.enum(['1.6j', '2.0.1']).optional(),
+            igamingMessageType: z
+                .enum(['wallet-bet', 'wallet-win', 'wallet-rollback'])
+                .optional()
+                .describe('igaming engine only — defaults to wallet-bet'),
+        },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
+            title: 'Create a validator',
+        },
+        outputSchema: {
+            id: z.string(),
+            name: z.string(),
+            engine: z.string(),
+        },
+    }, async (args) => {
+        try {
+            const validator = await ctx.client.request({
+                method: 'POST',
+                path: '/validators',
+                body: {
+                    name: args.name,
+                    description: args.description ?? null,
+                    engine: args.engine,
+                    presetKey: args.engine === 'openrtb' ? OPENRTB_PRESET_KEY : null,
+                    customSchemaId: args.customSchemaId ?? null,
+                    options: buildValidatorOptions(args),
+                },
+            });
+            const payload = {
+                id: validator.id,
+                name: validator.name,
+                engine: validator.engine,
+            };
+            return withStructured(result(trusted(payload)), payload);
+        }
+        catch (err) {
+            return errorResult(err);
+        }
+    });
+}
+//# sourceMappingURL=create-validator.js.map

package/dist/tools/create-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-validator.js","sourceRoot":"","sources":["../../src/tools/create-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE3E,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS;IACT,aAAa;IACb,mBAAmB;IACnB,aAAa;IACb,UAAU;IACV,MAAM;IACN,QAAQ;IACR,SAAS;CACD,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AA8B5C,MAAM,UAAU,qBAAqB,CACnC,IAAyB;IAEzB,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK;QAC5C,MAAM,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS;QACtC,aAAa,EAAE,EAAE;QACjB,eAAe,EAAE,EAAE;QACnB,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;QACrB,WAAW,EAAE,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,WAAW,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QACjF,kBAAkB,EAChB,IAAI,CAAC,MAAM,KAAK,SAAS;YACvB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,IAAI,YAAY,CAAC;YAC3C,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAiB,EACjB,GAAgB;IAEhB,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,iYAAiY;QACnY,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YAChC,MAAM,EAAE,CAAC;iBACN,IAAI,CAAC,iBAAiB,CAAC;iBACvB,QAAQ,CAAC,0CAA0C,CAAC;YACvD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;YAC3C,cAAc,EAAE,CAAC;iBACd,MAAM,EAAE;iBACR,IAAI,EAAE;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,8DAA8D,CAAC;YAC3E,cAAc,EAAE,CAAC;iBACd,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;iBACpB,QAAQ,EAAE;iBACV,QAAQ,CAAC,uCAAuC,CAAC;YACpD,YAAY,EAAE,CAAC;iBACZ,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;iBAC7B,QAAQ,EAAE;iBACV,QAAQ,CACP,oEAAoE,CACrE;YACH,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;YAClD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;YACjD,kBAAkB,EAAE,CAAC;iBAClB,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;iBACrD,QAAQ,EAAE;iBACV,QAAQ,CAAC,8CAA8C,CAAC;SAC5D;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,oBAAoB;SAC5B;QACD,YAAY,EAAE;YACZ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;SACnB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAmB;gBAC3D,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE;oBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;oBACrC,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI;oBAChE,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;oBAC3C,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC;iBACrC;aACF,CAAC,CAAC;YACH,MAAM,OAAO,GAAG;gBACd,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC;YACF,OAAO,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/custom-rules.d.ts

@@ -0,0 +1,10 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { ToolContext } from './context.js';
+export declare enum CustomRuleSeverity {
+    Error = "error",
+    Warning = "warning",
+    Info = "info"
+}
+export declare function registerListCustomRules(server: McpServer, ctx: ToolContext): void;
+export declare function registerPreviewCustomRule(server: McpServer, ctx: ToolContext): void;
+export declare function registerCreateCustomRule(server: McpServer, ctx: ToolContext): void;

package/dist/tools/custom-rules.js

@@ -0,0 +1,151 @@
+import { z } from 'zod';
+import { errorResult, result, trusted, withStructured } from './result.js';
+export var CustomRuleSeverity;
+(function (CustomRuleSeverity) {
+    CustomRuleSeverity["Error"] = "error";
+    CustomRuleSeverity["Warning"] = "warning";
+    CustomRuleSeverity["Info"] = "info";
+})(CustomRuleSeverity || (CustomRuleSeverity = {}));
+const SPEC_GUIDE = 'A rule spec is {scope, assert, message, when?, appliesTo?}. scope is a JSON pointer to the node the rule runs on ("" for the whole document, "/imp" to run once per impression). assert and when are conditions: {kind:"check", path, op, value} where op is one of eq, ne, gt, gte, lt, lte, matches, in, type-of, length-gt, exists, absent; {kind:"compare", left, op, right} to compare two pointers; or {kind:"and"|"or", conditions:[...]} and {kind:"not", condition:{...}}. Example: {"scope":"","assert":{"kind":"check","path":"/tmax","op":"gte","value":50},"message":"tmax must be at least 50ms"}.';
+const specSchema = z
+    .object({
+    scope: z.string(),
+    assert: z.record(z.unknown()),
+    message: z.string().min(1).max(500),
+    when: z.record(z.unknown()).optional(),
+    appliesTo: z
+        .object({
+        profileId: z.string().max(64).optional(),
+        profileVersions: z.array(z.string().max(32)).max(16).optional(),
+        messageTypes: z.array(z.string().max(64)).max(16).optional(),
+    })
+        .optional(),
+})
+    .describe(SPEC_GUIDE);
+function toCreatedRulePayload(rule) {
+    return {
+        id: rule.id,
+        ruleId: rule.ruleId,
+        slug: rule.slug,
+        name: rule.name,
+        severity: rule.severity,
+        enabled: rule.enabled,
+        version: rule.version,
+    };
+}
+export function registerListCustomRules(server, ctx) {
+    server.registerTool('list_custom_rules', {
+        title: 'List custom rules',
+        description: 'List the rules you wrote yourself. They run alongside the built-in rule packs of whichever profile a validator uses, so a custom rule applies to every validation that matches its appliesTo.',
+        inputSchema: {},
+        annotations: {
+            readOnlyHint: true,
+            openWorldHint: true,
+            title: 'List custom rules',
+        },
+        outputSchema: {
+            count: z.number(),
+            rules: z.array(z.unknown()),
+        },
+    }, async () => {
+        try {
+            const rules = await ctx.client.request({
+                method: 'GET',
+                path: '/custom-rules',
+            });
+            const payload = { count: rules.length, rules };
+            return withStructured(result(trusted(payload)), payload);
+        }
+        catch (err) {
+            return errorResult(err);
+        }
+    });
+}
+export function registerPreviewCustomRule(server, ctx) {
+    server.registerTool('preview_custom_rule', {
+        title: 'Try a custom rule',
+        description: `Run a rule spec against a sample payload without saving it, and see what it would report. Use this to iterate on a rule before creating it. ${SPEC_GUIDE}`,
+        inputSchema: {
+            spec: specSchema,
+            payload: z.record(z.unknown()),
+            severity: z.nativeEnum(CustomRuleSeverity).optional(),
+            profileId: z.string().max(64).optional(),
+            profileVersion: z.string().max(32).optional(),
+            messageType: z.string().max(64).optional(),
+        },
+        annotations: {
+            readOnlyHint: true,
+            openWorldHint: true,
+            title: 'Try a custom rule',
+        },
+        outputSchema: {
+            engineVersion: z.string(),
+            findings: z.array(z.unknown()),
+            skippedRules: z.array(z.unknown()),
+        },
+    }, async (args) => {
+        try {
+            const outcome = await ctx.client.request({
+                method: 'POST',
+                path: '/custom-rules/preview',
+                body: args,
+            });
+            const payload = {
+                engineVersion: outcome.engineVersion,
+                findings: outcome.findings,
+                skippedRules: outcome.skippedRules,
+            };
+            return withStructured(result(trusted(payload)), payload);
+        }
+        catch (err) {
+            return errorResult(err);
+        }
+    });
+}
+export function registerCreateCustomRule(server, ctx) {
+    server.registerTool('create_custom_rule', {
+        title: 'Create a custom rule',
+        description: `Save a rule of your own so every matching validation applies it. Try the spec with preview_custom_rule first — an invalid spec is rejected with a message naming the problem. ${SPEC_GUIDE}`,
+        inputSchema: {
+            slug: z
+                .string()
+                .min(1)
+                .max(64)
+                .regex(/^[a-z0-9][a-z0-9-]*$/, 'lowercase letters, digits and dashes'),
+            name: z.string().min(1).max(120),
+            severity: z.nativeEnum(CustomRuleSeverity),
+            spec: specSchema,
+            enabled: z.boolean().optional(),
+        },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
+            title: 'Create a custom rule',
+        },
+        outputSchema: {
+            id: z.string(),
+            ruleId: z.string(),
+            slug: z.string(),
+            name: z.string(),
+            severity: z.string(),
+            enabled: z.boolean(),
+            version: z.number(),
+        },
+    }, async (args) => {
+        try {
+            const rule = await ctx.client.request({
+                method: 'POST',
+                path: '/custom-rules',
+                body: args,
+            });
+            const payload = toCreatedRulePayload(rule);
+            return withStructured(result(trusted(payload)), payload);
+        }
+        catch (err) {
+            return errorResult(err);
+        }
+    });
+}
+//# sourceMappingURL=custom-rules.js.map

package/dist/tools/custom-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-rules.js","sourceRoot":"","sources":["../../src/tools/custom-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE3E,MAAM,CAAN,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,qCAAe,CAAA;IACf,yCAAmB,CAAA;IACnB,mCAAa,CAAA;AACf,CAAC,EAJW,kBAAkB,KAAlB,kBAAkB,QAI7B;AAED,MAAM,UAAU,GACd,klBAAklB,CAAC;AAErlB,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC/D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC7D,CAAC;SACD,QAAQ,EAAE;CACd,CAAC;KACD,QAAQ,CAAC,UAAU,CAAC,CAAC;AAsBxB,SAAS,oBAAoB,CAAC,IAAgB;IAC5C,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,uBAAuB,CACrC,MAAiB,EACjB,GAAgB;IAEhB,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,+LAA+L;QACjM,WAAW,EAAE,EAAE;QACf,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,mBAAmB;SAC3B;QACD,YAAY,EAAE;YACZ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;YACjB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SAC5B;KACF,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAe;gBACnD,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,eAAe;aACtB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YAC/C,OAAO,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAiB,EACjB,GAAgB;IAEhB,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,+IAA+I,UAAU,EAAE;QACxK,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9B,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;YACrD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;YACxC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;YAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC3C;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,mBAAmB;SAC3B;QACD,YAAY,EAAE;YACZ,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;YACzB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACnC;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAuB;gBAC7D,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,uBAAuB;gBAC7B,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,MAAM,OAAO,GAAG;gBACd,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC;YACF,OAAO,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiB,EACjB,GAAgB;IAEhB,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,iLAAiL,UAAU,EAAE;QAC1M,WAAW,EAAE;YACX,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,EAAE,CAAC;iBACP,KAAK,CAAC,sBAAsB,EAAE,sCAAsC,CAAC;YACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YAChC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAC1C,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SAChC;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,sBAAsB;SAC9B;QACD,YAAY,EAAE;YACZ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;YACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;SACpB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAa;gBAChD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/diff-payloads.js

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { coerceJsonArgument } from './payload-input.js';
 import { errorResult, result, trusted, withStructured } from './result.js';
 export function registerDiffPayloads(server, ctx) {
     server.registerTool('diff_payloads', {
@@ -7,10 +8,12 @@ export function registerDiffPayloads(server, ctx) {
         inputSchema: {
             left: z
                 .unknown()
-                .refine((value) => value !== undefined, 'left is required'),
+                .refine((value) => value !== undefined, 'left is required')
+                .describe('The first payload, as a JSON object — not a string (a JSON-encoded string is parsed, anything else is rejected)'),
             right: z
                 .unknown()
-                .refine((value) => value !== undefined, 'right is required'),
+                .refine((value) => value !== undefined, 'right is required')
+                .describe('The second payload, as a JSON object — not a string (a JSON-encoded string is parsed, anything else is rejected)'),
             profileId: z.string().optional(),
             treatNullAsAbsent: z.boolean().optional(),
             ignoreFields: z.array(z.string()).optional(),
@@ -31,8 +34,8 @@ export function registerDiffPayloads(server, ctx) {
                 method: 'POST',
                 path: '/diff',
                 body: {
-                    left: args.left,
-                    right: args.right,
+                    left: coerceJsonArgument(args.left, 'left'),
+                    right: coerceJsonArgument(args.right, 'right'),
                     profileId: args.profileId,
                     treatNullAsAbsent: args.treatNullAsAbsent,
                     ignoreFields: args.ignoreFields,

package/dist/tools/diff-payloads.js.map

@@ -1 +1 @@
-{"version":3,"file":"diff-payloads.js","sourceRoot":"","sources":["../../src/tools/diff-payloads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAQ3E,MAAM,UAAU,oBAAoB,CAClC,MAAiB,EACjB,GAAgB;IAEhB,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,yIAAyI;QAC3I,WAAW,EAAE;YACX,IAAI,EAAE,CAAC;iBACJ,OAAO,EAAE;iBACT,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,kBAAkB,CAAC;YAC7D,KAAK,EAAE,CAAC;iBACL,OAAO,EAAE;iBACT,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,mBAAmB,CAAC;YAC9D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAChC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YACzC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC7C;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,mBAAmB;SAC3B;QACD,YAAY,EAAE;YACZ,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;YACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SAC9B;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAe;gBACtD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE;oBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;oBACzC,YAAY,EAAE,IAAI,CAAC,YAAY;iBAChC;aACF,CAAC,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;aAChC,CAAC;YACF,OAAO,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"diff-payloads.js","sourceRoot":"","sources":["../../src/tools/diff-payloads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAQ3E,MAAM,UAAU,oBAAoB,CAClC,MAAiB,EACjB,GAAgB;IAEhB,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,yIAAyI;QAC3I,WAAW,EAAE;YACX,IAAI,EAAE,CAAC;iBACJ,OAAO,EAAE;iBACT,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,kBAAkB,CAAC;iBAC1D,QAAQ,CACP,iHAAiH,CAClH;YACH,KAAK,EAAE,CAAC;iBACL,OAAO,EAAE;iBACT,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,mBAAmB,CAAC;iBAC3D,QAAQ,CACP,kHAAkH,CACnH;YACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAChC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YACzC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC7C;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,mBAAmB;SAC3B;QACD,YAAY,EAAE;YACZ,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;YACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SAC9B;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAe;gBACtD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE;oBACJ,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;oBAC3C,KAAK,EAAE,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;oBAC9C,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;oBACzC,YAAY,EAAE,IAAI,CAAC,YAAY;iBAChC;aACF,CAAC,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;aAChC,CAAC;YACF,OAAO,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/get-request-detail.js

@@ -37,7 +37,7 @@ export function registerGetRequestDetail(server, ctx) {
                 method: 'GET',
                 path: `/webhook-endpoints/${args.endpointId}/requests/${args.requestId}`,
             });
-            const meta = detailMetaOf(request);
+            const meta = detailMetaOf(request, ctx.config.maxBodyBytes);
             return withStructured(result(trusted(meta), ...untrustedBlocksOf(request, ctx.config.maxBodyBytes)), structuredDetailOf(request, ctx.config.maxBodyBytes));
         }
         catch (err) {

package/dist/tools/get-request-detail.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-request-detail.js","sourceRoot":"","sources":["../../src/tools/get-request-detail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAEL,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,UAAU,wBAAwB,CACtC,MAAiB,EACjB,GAAgB;IAEhB,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,wZAAwZ;QAC1Z,WAAW,EAAE;YACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;YAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;SAC7B;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,oDAAoD;SAC5D;QACD,YAAY,EAAE;YACZ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;YACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;YAC1B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACvC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACvC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACzC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YACvD,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;SAClB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAwB;gBAC9D,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,sBAAsB,IAAI,CAAC,UAAU,aAAa,IAAI,CAAC,SAAS,EAAE;aACzE,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,cAAc,CACnB,MAAM,CACJ,OAAO,CAAC,IAAI,CAAC,EACb,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CACvD,EACD,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CACrD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"get-request-detail.js","sourceRoot":"","sources":["../../src/tools/get-request-detail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAEL,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,UAAU,wBAAwB,CACtC,MAAiB,EACjB,GAAgB;IAEhB,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,wZAAwZ;QAC1Z,WAAW,EAAE;YACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;YAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;SAC7B;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,oDAAoD;SAC5D;QACD,YAAY,EAAE;YACZ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;YACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;YAC1B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACvC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACvC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACzC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YACvD,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;SAClB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAwB;gBAC9D,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,sBAAsB,IAAI,CAAC,UAAU,aAAa,IAAI,CAAC,SAAS,EAAE;aACzE,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC5D,OAAO,cAAc,CACnB,MAAM,CACJ,OAAO,CAAC,IAAI,CAAC,EACb,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CACvD,EACD,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CACrD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/get-requests.d.ts

@@ -1,5 +1,7 @@
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { ToolContext } from './context.js';
 export declare const MAX_LIST_LIMIT = 50;
-export declare function clampListLimit(limit?: number): number | undefined;
+export declare const NEXT_CURSOR_HEADER = "X-Next-Cursor";
+export declare const VALIDATION_STATUS_FILTERS: readonly ["valid", "invalid", "warning", "unvalidated"];
+export declare function clampListLimit(limit?: number): number;
 export declare function registerGetRequests(server: McpServer, ctx: ToolContext): void;