@nocobase/plugin-mcp-server 2.3.0-beta.12 → 2.3.0-beta.14

package/dist/node_modules/openapi-mcp-generator/dist/parser/extract-tools.js

@@ -3,15 +3,138 @@
  */
 import OpenapiTypes from 'openapi-types';
 const { OpenAPIV3 } = OpenapiTypes;
+import { createHash } from 'crypto';
 import { generateOperationId } from '../utils/code-gen.js';
 import { shouldIncludeOperationForMcp } from '../utils/helpers.js';
+/** Default maximum tool name length (Claude Desktop limit). */
+export const DEFAULT_MAX_TOOL_NAME_LENGTH = 64;
+/** Length of the deterministic hex hash segment appended for uniqueness. */
+const HASH_LEN = 6;
+/** Marker inserted where the middle of a name is elided: `head__tail`. */
+const ELISION_MARKER = '__';
+/** Fraction of the head/tail budget given to the head (front carries the verb/resource). */
+const HEAD_RATIO = 0.6;
+/** Words this length or shorter are kept intact during abbreviation. */
+const SHORT_WORD_MAX = 3;
+/** Longer words are abbreviated to this many leading characters. */
+const ABBREV_WORD_LEN = 4;
+/**
+ * Split a tool name into words on `_`/`-` boundaries and camelCase humps,
+ * preserving each word's original casing so it can be rejoined.
+ *
+ * `FDA_get_info_on_conditions` -> ['FDA','get','info','on','conditions']
+ * `createUserSubscriptionMethod` -> ['create','User','Subscription','Method']
+ */
+export function splitNameIntoWords(name) {
+    return name
+        .split(/[_-]+/)
+        .filter(Boolean)
+        .flatMap((segment) => 
+    // Split camelCase / PascalCase, and digit boundaries, into separate words.
+    segment.match(/[A-Z]+(?=[A-Z][a-z])|[A-Z]?[a-z]+|[A-Z]+|[0-9]+/g) ?? [segment]);
+}
+/**
+ * Abbreviate a tool name word-by-word (inspired by ToolUniverse): keep the
+ * first word (category/verb prefix) intact, then for each subsequent word keep
+ * short words (<= 3 chars) as-is and shorten longer words to their first 4
+ * characters. Words are rejoined with `_`.
+ *
+ * `FDA_get_info_on_conditions_for_doctor_consultation_by_drug_name`
+ *   -> `FDA_get_info_on_cond_for_doct_cons_by_drug_name`
+ *
+ * Readability-preserving but NOT length-guaranteed (a name with very many words
+ * can still exceed the limit), so callers must apply a hard backstop.
+ */
+export function abbreviateToolName(name) {
+    const words = splitNameIntoWords(name);
+    if (words.length <= 1)
+        return name;
+    return words
+        .map((word, i) => {
+        if (i === 0)
+            return word; // preserve the category/verb prefix
+        if (word.length <= SHORT_WORD_MAX)
+            return word;
+        return word.slice(0, ABBREV_WORD_LEN);
+    })
+        .join('_');
+}
+/**
+ * Produce an MCP-compliant tool name within `maxLength` (issue #4).
+ *
+ * Strategy:
+ *  1. If the name already fits, return it unchanged.
+ *  2. Try word-level abbreviation (readable, no hash). If that fits, use it.
+ *  3. Otherwise fall back to deterministic Start…End hash truncation.
+ *
+ * @param name Sanitized candidate tool name
+ * @param maxLength Maximum allowed length
+ * @returns A name guaranteed to be <= maxLength
+ */
+export function shortenToolName(name, maxLength) {
+    if (maxLength <= 0 || name.length <= maxLength)
+        return name;
+    const abbreviated = abbreviateToolName(name);
+    if (abbreviated.length <= maxLength && abbreviated !== name) {
+        return abbreviated;
+    }
+    // Abbreviation alone wasn't enough — hash-truncate the (already abbreviated)
+    // name so distinct long names still collapse to unique, stable identifiers.
+    return truncateToolName(abbreviated.length < name.length ? abbreviated : name, maxLength);
+}
+/**
+ * Truncate a tool name to `maxLength` when it exceeds the limit.
+ *
+ * Strategy (issue #4): names are truncated "Start…End" style — the head and
+ * the tail are both preserved and the middle is elided with `__` — followed by
+ * a short deterministic hash of the *full* name. This keeps tool names readable
+ * for the model in both common collision shapes (prefix collisions like
+ * `createUserSubscriptionPaymentMethodWith...` where the tail disambiguates,
+ * and suffix collisions like `getUserById`/`getOrderById` where the head does),
+ * while the hash guarantees uniqueness even when both ends match. The hash is
+ * computed over the original name, so output is stable across runs and spec
+ * reordering.
+ *
+ * For very small limits there isn't room for two ends plus a marker plus a
+ * hash, so it falls back to `head_hash`.
+ *
+ * Returns the name unchanged when already within the limit.
+ */
+export function truncateToolName(name, maxLength) {
+    if (maxLength <= 0 || name.length <= maxLength)
+        return name;
+    const hash = createHash('sha1').update(name).digest('hex').slice(0, HASH_LEN);
+    const hashSuffix = `_${hash}`; // separator + hash
+    // Budget left for the visible name once the hash is reserved.
+    const nameBudget = maxLength - hashSuffix.length;
+    // Need at least 2 chars per end plus the marker to make Start…End meaningful;
+    // otherwise degrade to head + hash.
+    const headTailBudget = nameBudget - ELISION_MARKER.length;
+    if (headTailBudget < 4) {
+        const headLength = Math.max(1, nameBudget);
+        return `${name.slice(0, headLength)}${hashSuffix}`.slice(0, maxLength);
+    }
+    const headLength = Math.ceil(headTailBudget * HEAD_RATIO);
+    const tailLength = headTailBudget - headLength;
+    const head = name.slice(0, headLength);
+    const tail = tailLength > 0 ? name.slice(name.length - tailLength) : '';
+    return `${head}${ELISION_MARKER}${tail}${hashSuffix}`.slice(0, maxLength);
+}
 /**
  * Extracts tool definitions from an OpenAPI document
  *
  * @param api OpenAPI document
  * @returns Array of MCP tool definitions
  */
-export function extractToolsFromApi(api, defaultInclude = true) {
+/** Smallest tool-name length that still guarantees collision-resolution progress. */
+export const MIN_TOOL_NAME_LENGTH = 8;
+export function extractToolsFromApi(api, defaultInclude = true, maxToolNameLength = DEFAULT_MAX_TOOL_NAME_LENGTH) {
+    // Clamp pathologically small limits so the collision-resolution loop below
+    // always makes progress (the 6-char hash suffix needs room to stay unique).
+    if (maxToolNameLength < MIN_TOOL_NAME_LENGTH) {
+        console.warn(`maxToolNameLength=${maxToolNameLength} is too small; using ${MIN_TOOL_NAME_LENGTH} to keep tool names unique.`);
+        maxToolNameLength = MIN_TOOL_NAME_LENGTH;
+    }
     const tools = [];
     const usedNames = new Set();
     const globalSecurity = api.security || [];
@@ -45,16 +168,31 @@ export function extractToolsFromApi(api, defaultInclude = true) {
                     continue;
                 }
             }
-            // Generate a unique name for the tool
-            let baseName = operation.operationId || generateOperationId(method, path);
-            if (!baseName)
+            // Generate a unique name for the tool.
+            // Preserve the original operationId (or generated fallback) separately so
+            // tool.operationId stays stable for callers that filter on it, e.g.
+            // getToolsFromOpenApi({ excludeOperationIds }) — independent of the
+            // sanitization/truncation applied to the MCP-facing tool name.
+            const originalOperationId = operation.operationId || generateOperationId(method, path);
+            if (!originalOperationId)
                 continue;
             // Sanitize the name to be MCP-compatible (only a-z, 0-9, _, -)
-            baseName = baseName.replace(/\./g, '_').replace(/[^a-z0-9_-]/gi, '_');
+            const sanitized = originalOperationId.replace(/\./g, '_').replace(/[^a-z0-9_-]/gi, '_');
+            // Shorten to fit the limit: word-abbreviate first, hash-truncate as backstop.
+            const baseName = shortenToolName(sanitized, maxToolNameLength);
+            // Resolve collisions deterministically. Use a content hash of the
+            // original operationId (stable across spec reordering) rather than an
+            // order-dependent counter, re-shortened to stay within the limit.
             let finalToolName = baseName;
-            let counter = 1;
+            let attempt = 0;
             while (usedNames.has(finalToolName)) {
-                finalToolName = `${baseName}_${counter++}`;
+                const disambiguator = createHash('sha1')
+                    .update(`${sanitized}#${attempt++}`)
+                    .digest('hex')
+                    .slice(0, HASH_LEN);
+                const suffix = `_${disambiguator}`;
+                const headRoom = Math.max(1, maxToolNameLength - suffix.length);
+                finalToolName = `${baseName.slice(0, headRoom)}${suffix}`;
             }
             usedNames.add(finalToolName);
             // Get or create a description
@@ -65,6 +203,9 @@ export function extractToolsFromApi(api, defaultInclude = true) {
             const executionParameters = parameters.map((p) => ({ name: p.name, in: p.in }));
             // Determine security requirements
             const securityRequirements = operation.security === null ? globalSecurity : operation.security || globalSecurity;
+            // Extract OpenAPI tags and deprecation status
+            const tags = Array.isArray(operation.tags) ? operation.tags.filter(Boolean) : [];
+            const deprecated = operation.deprecated === true;
             // Create the tool definition
             tools.push({
                 name: finalToolName,
@@ -76,7 +217,9 @@ export function extractToolsFromApi(api, defaultInclude = true) {
                 executionParameters,
                 requestBodyContentType,
                 securityRequirements,
-                operationId: baseName,
+                operationId: originalOperationId,
+                tags,
+                deprecated,
             });
         }
     }

package/dist/node_modules/openapi-mcp-generator/dist/parser/extract-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract-tools.js","sourceRoot":"","sources":["../../src/parser/extract-tools.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAuB,EACvB,iBAA0B,IAAI;IAE9B,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;IAE1C,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAE7B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,6DAA6D;YAC7D,IAAI,CAAC;gBACH,IACE,CAAC,4BAA4B,CAC3B,GAAG,EACH,QAAoC,EACpC,SAAS,EACT,cAAc,CACf,EACD,CAAC;oBACD,SAAS;gBACX,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,IAAI,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;gBACzD,MAAM,MAAM,GACT,SAAiB,CAAC,OAAO,CAAC,IAAK,QAAgB,CAAC,OAAO,CAAC,IAAK,GAAW,CAAC,OAAO,CAAC,CAAC;gBACrF,IAAI,UAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACtC,CAAC;gBAAC,MAAM,CAAC;oBACP,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9B,CAAC;gBACD,OAAO,CAAC,IAAI,CACV,kDAAkD,GAAG,WAAW,UAAU,IAAI,EAC9E,KAAK,CACN,CAAC;gBACF,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,SAAS;gBACX,CAAC;YACH,CAAC;YAED,sCAAsC;YACtC,IAAI,QAAQ,GAAG,SAAS,CAAC,WAAW,IAAI,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1E,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAExB,+DAA+D;YAC/D,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YAEtE,IAAI,aAAa,GAAG,QAAQ,CAAC;YAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,OAAO,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpC,aAAa,GAAG,GAAG,QAAQ,IAAI,OAAO,EAAE,EAAE,CAAC;YAC7C,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAE7B,8BAA8B;YAC9B,MAAM,WAAW,GACf,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,OAAO,IAAI,YAAY,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;YAE3F,+CAA+C;YAC/C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,sBAAsB,EAAE,GAAG,6BAA6B,CACvF,SAAS,EACT,QAAQ,CAAC,UAAU,CACpB,CAAC;YAEF,0CAA0C;YAC1C,MAAM,mBAAmB,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAEhF,kCAAkC;YAClC,MAAM,oBAAoB,GACxB,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,IAAI,cAAc,CAAC;YAEtF,6BAA6B;YAC7B,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,aAAa;gBACnB,WAAW;gBACX,WAAW;gBACX,MAAM;gBACN,YAAY,EAAE,IAAI;gBAClB,UAAU;gBACV,mBAAmB;gBACnB,sBAAsB;gBACtB,oBAAoB;gBACpB,WAAW,EAAE,QAAQ;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAoC,EACpC,cAA0E;IAM1E,MAAM,UAAU,GAA6C,EAAE,CAAC;IAChE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,uEAAuE;IACvE,MAAM,mBAAmB,GAAgC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;QAC1F,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAA8B,CAAC;QACjE,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,sBAAsB,GAAgC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QACvF,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAA8B,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IAEP,mDAAmD;IACnD,oFAAoF;IACpF,MAAM,aAAa,GAAgC,EAAE,CAAC;IAEtD,sBAAsB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACnE,MAAM,aAAa,GAAG,aAAa,CAAC,SAAS,CAC3C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAC1E,CAAC;QACF,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,mDAAmD;YACnD,aAAa,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,8BAA8B;YAC9B,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO;QAEzC,MAAM,WAAW,GAAG,4BAA4B,CAAC,KAAK,CAAC,MAAgC,CAAC,CAAC;QACzF,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,WAAW,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW,CAAC;QACzE,CAAC;QAED,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;QACrC,IAAI,KAAK,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,IAAI,sBAAsB,GAAuB,SAAS,CAAC;IAE3D,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;QAC1B,MAAM,aAAa,GAAG,SAAS,CAAC,WAA0C,CAAC;QAC3E,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO;YACxC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1C,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,WAAW,EAAE,MAAM,EAAE,CAAC;YACxB,sBAAsB,GAAG,kBAAkB,CAAC;YAC5C,MAAM,UAAU,GAAG,4BAA4B,CAAC,WAAW,CAAC,MAAgC,CAAC,CAAC;YAE9F,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,UAAU,CAAC,WAAW;oBACpB,aAAa,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,IAAI,wBAAwB,CAAC;YACpF,CAAC;YAED,UAAU,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC;YACvC,IAAI,aAAa,CAAC,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,YAAY,EAAE,CAAC;YACxB,MAAM,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;YACnC,sBAAsB,GAAG,WAAW,CAAC;YAErC,UAAU,CAAC,aAAa,CAAC,GAAG;gBAC1B,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,aAAa,CAAC,WAAW,IAAI,+BAA+B,WAAW,GAAG;aACxF,CAAC;YAEF,IAAI,aAAa,CAAC,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,WAAW,GAAgB;QAC/B,IAAI,EAAE,QAAQ;QACd,UAAU;QACV,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;KACzC,CAAC;IAEF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAA0D,EAC1D,OAAwB,IAAI,OAAO,EAAE;IAErC,2BAA2B;IAC3B,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAE/C,gBAAgB;IAChB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CACV,2BAA2B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,gDAAgD,CACpH,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEjB,IAAI,CAAC;QACH,wCAAwC;QACxC,MAAM,UAAU,GAAgB,EAAE,GAAG,MAAM,EAAS,CAAC;QAErD,0DAA0D;QAC1D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,UAAU,CAAC,IAAI,GAAG,QAAQ,CAAC;QAE1D,gEAAgE;QAChE,OAAQ,UAAkB,CAAC,QAAQ,CAAC;QACpC,OAAQ,UAAkB,CAAC,OAAO,CAAC;QACnC,OAAQ,UAAkB,CAAC,GAAG,CAAC;QAC/B,OAAQ,UAAkB,CAAC,YAAY,CAAC;QACxC,OAAQ,UAAkB,CAAC,UAAU,CAAC;QACtC,OAAQ,UAAkB,CAAC,QAAQ,CAAC;QACpC,OAAQ,UAAkB,CAAC,SAAS,CAAC;QAErC,wDAAwD;QACxD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtE,CAAC;iBAAM,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/C,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAA2B,EAAE,MAAM,CAAC,CAAC;YACrE,CAAC;iBAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBAC5B,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YAC1D,MAAM,WAAW,GAA6C,EAAE,CAAC;YAEjE,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;oBAC1D,WAAW,CAAC,GAAG,CAAC,GAAG,4BAA4B,CAC7C,UAAoC,EACpC,IAAI,CACL,CAAC;gBACJ,CAAC;qBAAM,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC3C,WAAW,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;gBAChC,CAAC;YACH,CAAC;YAED,UAAU,CAAC,UAAU,GAAG,WAAW,CAAC;QACtC,CAAC;QAED,kCAAkC;QAClC,IACE,UAAU,CAAC,IAAI,KAAK,OAAO;YAC3B,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;YACpC,UAAU,CAAC,KAAK,KAAK,IAAI,EACzB,CAAC;YACD,UAAU,CAAC,KAAK,GAAG,4BAA4B,CAC7C,UAAU,CAAC,KAA2D,EACtE,IAAI,CACL,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}
+{"version":3,"file":"extract-tools.js","sourceRoot":"","sources":["../../src/parser/extract-tools.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAEnE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAE/C,4EAA4E;AAC5E,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,0EAA0E;AAC1E,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,4FAA4F;AAC5F,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,wEAAwE;AACxE,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,oEAAoE;AACpE,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI;SACR,KAAK,CAAC,OAAO,CAAC;SACd,MAAM,CAAC,OAAO,CAAC;SACf,OAAO,CACN,CAAC,OAAO,EAAE,EAAE;IACV,2EAA2E;IAC3E,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,IAAI,CAAC,OAAO,CAAC,CACjF,CAAC;AACN,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACf,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,oCAAoC;QAC9D,IAAI,IAAI,CAAC,MAAM,IAAI,cAAc;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACxC,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,SAAiB;IAC7D,IAAI,SAAS,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,WAAW,CAAC,MAAM,IAAI,SAAS,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QAC5D,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,OAAO,gBAAgB,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAiB;IAC9D,IAAI,SAAS,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5D,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,mBAAmB;IAElD,8DAA8D;IAC9D,MAAM,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;IAEjD,8EAA8E;IAC9E,oCAAoC;IACpC,MAAM,cAAc,GAAG,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC;IAC1D,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC3C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,cAAc,GAAG,UAAU,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,GAAG,IAAI,GAAG,cAAc,GAAG,IAAI,GAAG,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,UAAU,mBAAmB,CACjC,GAAuB,EACvB,iBAA0B,IAAI,EAC9B,oBAA4B,4BAA4B;IAExD,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,iBAAiB,GAAG,oBAAoB,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CACV,qBAAqB,iBAAiB,wBAAwB,oBAAoB,6BAA6B,CAChH,CAAC;QACF,iBAAiB,GAAG,oBAAoB,CAAC;IAC3C,CAAC;IAED,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;IAE1C,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAE7B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,6DAA6D;YAC7D,IAAI,CAAC;gBACH,IACE,CAAC,4BAA4B,CAC3B,GAAG,EACH,QAAoC,EACpC,SAAS,EACT,cAAc,CACf,EACD,CAAC;oBACD,SAAS;gBACX,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,IAAI,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;gBACzD,MAAM,MAAM,GACT,SAAiB,CAAC,OAAO,CAAC,IAAK,QAAgB,CAAC,OAAO,CAAC,IAAK,GAAW,CAAC,OAAO,CAAC,CAAC;gBACrF,IAAI,UAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACtC,CAAC;gBAAC,MAAM,CAAC;oBACP,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9B,CAAC;gBACD,OAAO,CAAC,IAAI,CACV,kDAAkD,GAAG,WAAW,UAAU,IAAI,EAC9E,KAAK,CACN,CAAC;gBACF,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,SAAS;gBACX,CAAC;YACH,CAAC;YAED,uCAAuC;YACvC,0EAA0E;YAC1E,oEAAoE;YACpE,oEAAoE;YACpE,+DAA+D;YAC/D,MAAM,mBAAmB,GAAG,SAAS,CAAC,WAAW,IAAI,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvF,IAAI,CAAC,mBAAmB;gBAAE,SAAS;YAEnC,+DAA+D;YAC/D,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YAExF,8EAA8E;YAC9E,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAE/D,kEAAkE;YAClE,sEAAsE;YACtE,kEAAkE;YAClE,IAAI,aAAa,GAAG,QAAQ,CAAC;YAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,OAAO,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpC,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC;qBACrC,MAAM,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,EAAE,CAAC;qBACnC,MAAM,CAAC,KAAK,CAAC;qBACb,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACtB,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBAChE,aAAa,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,MAAM,EAAE,CAAC;YAC5D,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAE7B,8BAA8B;YAC9B,MAAM,WAAW,GACf,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,OAAO,IAAI,YAAY,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;YAE3F,+CAA+C;YAC/C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,sBAAsB,EAAE,GAAG,6BAA6B,CACvF,SAAS,EACT,QAAQ,CAAC,UAAU,CACpB,CAAC;YAEF,0CAA0C;YAC1C,MAAM,mBAAmB,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAEhF,kCAAkC;YAClC,MAAM,oBAAoB,GACxB,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,IAAI,cAAc,CAAC;YAEtF,8CAA8C;YAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,KAAK,IAAI,CAAC;YAEjD,6BAA6B;YAC7B,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,aAAa;gBACnB,WAAW;gBACX,WAAW;gBACX,MAAM;gBACN,YAAY,EAAE,IAAI;gBAClB,UAAU;gBACV,mBAAmB;gBACnB,sBAAsB;gBACtB,oBAAoB;gBACpB,WAAW,EAAE,mBAAmB;gBAChC,IAAI;gBACJ,UAAU;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAoC,EACpC,cAA0E;IAM1E,MAAM,UAAU,GAA6C,EAAE,CAAC;IAChE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,uEAAuE;IACvE,MAAM,mBAAmB,GAAgC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;QAC1F,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAA8B,CAAC;QACjE,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,sBAAsB,GAAgC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QACvF,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAA8B,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IAEP,mDAAmD;IACnD,oFAAoF;IACpF,MAAM,aAAa,GAAgC,EAAE,CAAC;IAEtD,sBAAsB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACnE,MAAM,aAAa,GAAG,aAAa,CAAC,SAAS,CAC3C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAC1E,CAAC;QACF,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,mDAAmD;YACnD,aAAa,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,8BAA8B;YAC9B,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO;QAEzC,MAAM,WAAW,GAAG,4BAA4B,CAAC,KAAK,CAAC,MAAgC,CAAC,CAAC;QACzF,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,WAAW,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW,CAAC;QACzE,CAAC;QAED,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;QACrC,IAAI,KAAK,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,IAAI,sBAAsB,GAAuB,SAAS,CAAC;IAE3D,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;QAC1B,MAAM,aAAa,GAAG,SAAS,CAAC,WAA0C,CAAC;QAC3E,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO;YACxC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1C,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,WAAW,EAAE,MAAM,EAAE,CAAC;YACxB,sBAAsB,GAAG,kBAAkB,CAAC;YAC5C,MAAM,UAAU,GAAG,4BAA4B,CAAC,WAAW,CAAC,MAAgC,CAAC,CAAC;YAE9F,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,UAAU,CAAC,WAAW;oBACpB,aAAa,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,IAAI,wBAAwB,CAAC;YACpF,CAAC;YAED,UAAU,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC;YACvC,IAAI,aAAa,CAAC,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,YAAY,EAAE,CAAC;YACxB,MAAM,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;YACnC,sBAAsB,GAAG,WAAW,CAAC;YAErC,UAAU,CAAC,aAAa,CAAC,GAAG;gBAC1B,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,aAAa,CAAC,WAAW,IAAI,+BAA+B,WAAW,GAAG;aACxF,CAAC;YAEF,IAAI,aAAa,CAAC,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,WAAW,GAAgB;QAC/B,IAAI,EAAE,QAAQ;QACd,UAAU;QACV,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;KACzC,CAAC;IAEF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAA0D,EAC1D,OAAwB,IAAI,OAAO,EAAE;IAErC,2BAA2B;IAC3B,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAE/C,gBAAgB;IAChB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CACV,2BAA2B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,gDAAgD,CACpH,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEjB,IAAI,CAAC;QACH,wCAAwC;QACxC,MAAM,UAAU,GAAgB,EAAE,GAAG,MAAM,EAAS,CAAC;QAErD,0DAA0D;QAC1D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,UAAU,CAAC,IAAI,GAAG,QAAQ,CAAC;QAE1D,gEAAgE;QAChE,OAAQ,UAAkB,CAAC,QAAQ,CAAC;QACpC,OAAQ,UAAkB,CAAC,OAAO,CAAC;QACnC,OAAQ,UAAkB,CAAC,GAAG,CAAC;QAC/B,OAAQ,UAAkB,CAAC,YAAY,CAAC;QACxC,OAAQ,UAAkB,CAAC,UAAU,CAAC;QACtC,OAAQ,UAAkB,CAAC,QAAQ,CAAC;QACpC,OAAQ,UAAkB,CAAC,SAAS,CAAC;QAErC,wDAAwD;QACxD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtE,CAAC;iBAAM,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/C,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAA2B,EAAE,MAAM,CAAC,CAAC;YACrE,CAAC;iBAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBAC5B,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YAC1D,MAAM,WAAW,GAA6C,EAAE,CAAC;YAEjE,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;oBAC1D,WAAW,CAAC,GAAG,CAAC,GAAG,4BAA4B,CAC7C,UAAoC,EACpC,IAAI,CACL,CAAC;gBACJ,CAAC;qBAAM,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC3C,WAAW,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;gBAChC,CAAC;YACH,CAAC;YAED,UAAU,CAAC,UAAU,GAAG,WAAW,CAAC;QACtC,CAAC;QAED,kCAAkC;QAClC,IACE,UAAU,CAAC,IAAI,KAAK,OAAO;YAC3B,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;YACpC,UAAU,CAAC,KAAK,KAAK,IAAI,EACzB,CAAC;YACD,UAAU,CAAC,KAAK,GAAG,4BAA4B,CAC7C,UAAU,CAAC,KAA2D,EACtE,IAAI,CACL,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/node_modules/openapi-mcp-generator/dist/types/index.d.ts

@@ -31,6 +31,42 @@ export interface CliOptions {
      * false = exclude by default unless x-mcp explicitly enables.
      */
     defaultInclude?: boolean;
+    /**
+     * Allow resolution of external (http/https) `$ref` references in the spec.
+     * Default false: external refs are rejected to prevent SSRF during parsing.
+     */
+    allowExternalRefs?: boolean;
+    /**
+     * Maximum length for generated tool names (Claude Desktop limits to 64).
+     * Names longer than this are truncated with a deterministic hash suffix.
+     * Default 64.
+     */
+    maxToolNameLength?: number;
+    /**
+     * Inbound HTTP header names (web/streamable-http transports) to forward
+     * onto the upstream API request, overriding env-based auth for those headers.
+     */
+    headerPassthrough?: string[];
+    /**
+     * Allow insecure HTTPS connections (skip TLS certificate verification) in the
+     * generated server. Default false.
+     */
+    insecure?: boolean;
+    /**
+     * Generate library-style output: export `main()` instead of auto-invoking it,
+     * and omit signal-handler/cleanup wiring. Default false.
+     */
+    generateLib?: boolean;
+    /**
+     * Generate an editable `src/auth.ts` custom auth hook invoked before built-in
+     * auth in the generated server. Default false.
+     */
+    customAuth?: boolean;
+    /**
+     * Send OAuth2 client credentials in the token request body instead of the
+     * Basic Authorization header. Default false.
+     */
+    oauthCredsInBody?: boolean;
 }
 /**
  * MCP Tool Definition describes a tool extracted from an OpenAPI spec
@@ -60,6 +96,10 @@ export interface McpToolDefinition {
     securityRequirements: OpenAPIV3.SecurityRequirementObject[];
     /** Original operation ID from the OpenAPI spec */
     operationId: string;
+    /** OpenAPI tags associated with this operation, if any */
+    tags?: string[];
+    /** Whether the operation is marked deprecated in the OpenAPI spec */
+    deprecated?: boolean;
 }
 /**
  * Helper type for JSON objects

package/dist/node_modules/openapi-mcp-generator/dist/utils/code-gen.js

@@ -36,8 +36,25 @@ export function generateToolDefinitionMap(tools, securitySchemes) {
             securityReqsString = '[]';
             console.warn(`Failed to stringify security requirements for tool ${tool.name}: ${e}`);
         }
-        // Sanitize description for template literal
-        const escapedDescription = sanitizeForTemplate(tool.description);
+        // Decorate the description with deprecation marker and tags for
+        // discoverability/filtering, then sanitize for the template literal.
+        const tags = Array.isArray(tool.tags) ? tool.tags.filter(Boolean) : [];
+        let decoratedDescription = tool.description;
+        if (tool.deprecated) {
+            decoratedDescription = `[DEPRECATED] ${decoratedDescription}`;
+        }
+        if (tags.length > 0) {
+            decoratedDescription = `${decoratedDescription}\n(Tags: ${tags.join(', ')})`;
+        }
+        const escapedDescription = sanitizeForTemplate(decoratedDescription);
+        let tagsString;
+        try {
+            tagsString = JSON.stringify(tags);
+        }
+        catch (e) {
+            tagsString = '[]';
+            console.warn(`Failed to stringify tags for tool ${tool.name}: ${e}`);
+        }
         // Build the tool definition entry
         return `
   ["${tool.name}", {
@@ -48,7 +65,9 @@ export function generateToolDefinitionMap(tools, securitySchemes) {
     pathTemplate: "${tool.pathTemplate}",
     executionParameters: ${execParamsString},
     requestBodyContentType: ${tool.requestBodyContentType ? `"${tool.requestBodyContentType}"` : 'undefined'},
-    securityRequirements: ${securityReqsString}
+    securityRequirements: ${securityReqsString},
+    tags: ${tagsString},
+    deprecated: ${tool.deprecated ? 'true' : 'false'}
   }],`;
     })
         .join('');

package/dist/node_modules/openapi-mcp-generator/dist/utils/code-gen.js.map

@@ -1 +1 @@
-{"version":3,"file":"code-gen.js","sourceRoot":"","sources":["../../src/utils/code-gen.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAA0B,EAC1B,eAA+D;IAE/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,mCAAmC;QACnC,IAAI,YAAY,CAAC;QACjB,IAAI,CAAC;YACH,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,uCAAuC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,gBAAgB,CAAC;QACrB,IAAI,CAAC;YACH,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,gBAAgB,GAAG,IAAI,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,qDAAqD,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,kBAAkB,CAAC;QACvB,IAAI,CAAC;YACH,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,kBAAkB,GAAG,IAAI,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,sDAAsD,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,4CAA4C;QAC5C,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEjE,kCAAkC;QAClC,OAAO;MACP,IAAI,CAAC,IAAI;aACF,IAAI,CAAC,IAAI;qBACD,kBAAkB;mBACpB,YAAY;eAChB,IAAI,CAAC,MAAM;qBACL,IAAI,CAAC,YAAY;2BACX,gBAAgB;8BACb,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,sBAAsB,GAAG,CAAC,CAAC,CAAC,WAAW;4BAChF,kBAAkB;MACxC,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO;;;;;;;;;CASR,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;;;;;;;;;;CAUR,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,8DAA8D;IAC9D,OAAO,GAAG;SACP,WAAW,EAAE;SACb,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,oBAAoB;SAC3E,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,oCAAoC;SACtD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,qCAAqC;SACvD,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,0BAA0B;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,IAAY;IAC9D,gEAAgE;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B;IAE/E,IAAI,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,yBAAyB;IAE1D,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,qEAAqE;YACrE,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,IAAI,IAAI,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YACD,uEAAuE;YACvE,6CAA6C;QAC/C,CAAC;aAAM,CAAC;YACN,2CAA2C;YAC3C,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2DAA2D;IAC3D,IAAI,IAAI,KAAK,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAClC,IAAI,IAAI,MAAM,CAAC;IACjB,CAAC;IAED,0EAA0E;IAC1E,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEpD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"code-gen.js","sourceRoot":"","sources":["../../src/utils/code-gen.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAA0B,EAC1B,eAA+D;IAE/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,mCAAmC;QACnC,IAAI,YAAY,CAAC;QACjB,IAAI,CAAC;YACH,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,uCAAuC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,gBAAgB,CAAC;QACrB,IAAI,CAAC;YACH,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,gBAAgB,GAAG,IAAI,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,qDAAqD,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,kBAAkB,CAAC;QACvB,IAAI,CAAC;YACH,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,kBAAkB,GAAG,IAAI,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,sDAAsD,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,gEAAgE;QAChE,qEAAqE;QACrE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,oBAAoB,GAAG,IAAI,CAAC,WAAW,CAAC;QAC5C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,oBAAoB,GAAG,gBAAgB,oBAAoB,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,oBAAoB,GAAG,GAAG,oBAAoB,YAAY,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/E,CAAC;QACD,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;QAErE,IAAI,UAAU,CAAC;QACf,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,kCAAkC;QAClC,OAAO;MACP,IAAI,CAAC,IAAI;aACF,IAAI,CAAC,IAAI;qBACD,kBAAkB;mBACpB,YAAY;eAChB,IAAI,CAAC,MAAM;qBACL,IAAI,CAAC,YAAY;2BACX,gBAAgB;8BACb,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,sBAAsB,GAAG,CAAC,CAAC,CAAC,WAAW;4BAChF,kBAAkB;YAClC,UAAU;kBACJ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;MAC9C,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO;;;;;;;;;CASR,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;;;;;;;;;;CAUR,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,8DAA8D;IAC9D,OAAO,GAAG;SACP,WAAW,EAAE;SACb,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,oBAAoB;SAC3E,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,oCAAoC;SACtD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,qCAAqC;SACvD,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,0BAA0B;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,IAAY;IAC9D,gEAAgE;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B;IAE/E,IAAI,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,yBAAyB;IAE1D,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,qEAAqE;YACrE,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,IAAI,IAAI,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YACD,uEAAuE;YACvE,6CAA6C;QAC/C,CAAC;aAAM,CAAC;YACN,2CAA2C;YAC3C,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2DAA2D;IAC3D,IAAI,IAAI,KAAK,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAClC,IAAI,IAAI,MAAM,CAAC;IACjB,CAAC;IAED,0EAA0E;IAC1E,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEpD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/node_modules/openapi-mcp-generator/dist/utils/helpers.d.ts

@@ -11,7 +11,17 @@ import { OpenAPIV3 } from 'openapi-types';
  */
 export declare function safeJsonStringify(obj: any, defaultValue?: string): string;
 /**
- * Sanitizes a string for use in template strings
+ * Sanitizes a string for safe embedding inside a generated backtick template
+ * literal.
+ *
+ * Escapes, in order:
+ *  - backslashes (so subsequent escapes are not themselves re-escaped)
+ *  - backticks (would otherwise close the template literal)
+ *  - `${` sequences (would otherwise be evaluated as template expressions)
+ *
+ * The `${` escaping prevents template-literal injection: a malicious OpenAPI
+ * `description`/`summary` such as `${process.env.SECRET}` is otherwise written
+ * verbatim into generated code and evaluated at server startup.
  *
  * @param str String to sanitize
  * @returns Sanitized string safe for use in template literals

package/dist/node_modules/openapi-mcp-generator/dist/utils/helpers.js

@@ -15,13 +15,23 @@ export function safeJsonStringify(obj, defaultValue = '{}') {
     }
 }
 /**
- * Sanitizes a string for use in template strings
+ * Sanitizes a string for safe embedding inside a generated backtick template
+ * literal.
+ *
+ * Escapes, in order:
+ *  - backslashes (so subsequent escapes are not themselves re-escaped)
+ *  - backticks (would otherwise close the template literal)
+ *  - `${` sequences (would otherwise be evaluated as template expressions)
+ *
+ * The `${` escaping prevents template-literal injection: a malicious OpenAPI
+ * `description`/`summary` such as `${process.env.SECRET}` is otherwise written
+ * verbatim into generated code and evaluated at server startup.
  *
  * @param str String to sanitize
  * @returns Sanitized string safe for use in template literals
  */
 export function sanitizeForTemplate(str) {
-    return (str || '').replace(/\\/g, '\\\\').replace(/`/g, '\\`');
+    return (str || '').replace(/\\/g, '\\\\').replace(/`/g, '\\`').replace(/\$\{/g, '\\${');
 }
 /**
  * Converts a string to camelCase

package/dist/node_modules/openapi-mcp-generator/dist/utils/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/utils/helpers.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAQ,EAAE,eAAuB,IAAI;IACrE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG;SACP,OAAO,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC9C,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CACtD;SACA,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,GAAG;SACP,OAAO,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;SAC5D,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,uDAAuD;IACvD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAEtD,uDAAuD;IACvD,OAAO,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,uDAAuD;IACvD,OAAO,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,gBAAwB,EAAE;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAG,EAAE,CAAC;IAErB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;YACvD,WAAW,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxB,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAAuB,EACvB,QAAkC,EAClC,SAAoC,EACpC,iBAA0B,IAAI;IAE9B,MAAM,KAAK,GAAI,SAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CACV,qCAAqC,SAAS,CAAC,WAAW,IAAI,kBAAkB,IAAI,EACpF,KAAK,EACL,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAI,QAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,OAAO,OAAO,KAAK,WAAW;QAAE,OAAO,OAAO,CAAC;IACnD,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CACV,mCAAmC,EACnC,OAAO,EACP,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAI,GAAW,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,OAAO,OAAO,KAAK,WAAW;QAAE,OAAO,OAAO,CAAC;IACnD,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CACV,kCAAkC,EAClC,OAAO,EACP,yEAAyE,cAAc,GAAG,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC"}
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/utils/helpers.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAQ,EAAE,eAAuB,IAAI;IACrE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG;SACP,OAAO,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC9C,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CACtD;SACA,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,GAAG;SACP,OAAO,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;SAC5D,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,uDAAuD;IACvD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAEtD,uDAAuD;IACvD,OAAO,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,uDAAuD;IACvD,OAAO,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,gBAAwB,EAAE;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAG,EAAE,CAAC;IAErB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;YACvD,WAAW,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxB,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAAuB,EACvB,QAAkC,EAClC,SAAoC,EACpC,iBAA0B,IAAI;IAE9B,MAAM,KAAK,GAAI,SAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CACV,qCAAqC,SAAS,CAAC,WAAW,IAAI,kBAAkB,IAAI,EACpF,KAAK,EACL,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAI,QAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,OAAO,OAAO,KAAK,WAAW;QAAE,OAAO,OAAO,CAAC;IACnD,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CACV,mCAAmC,EACnC,OAAO,EACP,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAI,GAAW,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,OAAO,OAAO,KAAK,WAAW;QAAE,OAAO,OAAO,CAAC;IACnD,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CACV,kCAAkC,EAClC,OAAO,EACP,yEAAyE,cAAc,GAAG,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/node_modules/openapi-mcp-generator/dist/utils/index.d.ts

@@ -5,3 +5,4 @@ export * from './code-gen.js';
 export * from './security.js';
 export * from './helpers.js';
 export { determineBaseUrl } from './url.js';
+export * from './parser-security.js';

package/dist/node_modules/openapi-mcp-generator/dist/utils/index.js

@@ -5,4 +5,5 @@ export * from './code-gen.js';
 export * from './security.js';
 export * from './helpers.js';
 export { determineBaseUrl } from './url.js';
+export * from './parser-security.js';
 //# sourceMappingURL=index.js.map

package/dist/node_modules/openapi-mcp-generator/dist/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,cAAc,sBAAsB,CAAC"}

package/dist/node_modules/openapi-mcp-generator/dist/utils/parser-security.d.ts

@@ -0,0 +1,33 @@
+import { OpenAPIV3 } from 'openapi-types';
+/** Error thrown when an external `$ref` is encountered but not allowed. */
+export declare class ExternalRefError extends Error {
+    readonly ref: string;
+    constructor(ref: string);
+}
+/** Returns true if a `$ref` string points at an http(s) URL. */
+export declare function isExternalHttpRef(ref: unknown): ref is string;
+export declare function assertNoExternalRefs(node: unknown, seen?: WeakSet<object>): void;
+/**
+ * Parse and dereference an OpenAPI spec with optional SSRF protection.
+ *
+ * The SSRF protection targets external `$ref`s embedded *inside* the spec, not
+ * the user-supplied input itself: a URL/path passed as the input is trusted
+ * (the user typed it) and must still load. When `allowExternalRefs` is false
+ * (the default) we:
+ *   1. Parse the entry document (http allowed so a URL input is fetched).
+ *   2. Scan the parsed tree and reject any external http(s) `$ref`.
+ *   3. Dereference with the http resolver disabled — safe because step 2
+ *      guaranteed no external refs remain to follow.
+ *
+ * Step 3 dereferences from the ORIGINAL local-path/object input (not the parsed
+ * object) so relative file `$ref`s (e.g. `./schemas.json#/MyType`) resolve
+ * against the spec's directory rather than the process cwd. For URL inputs,
+ * which can't be re-fetched once http is disabled, it dereferences the parsed
+ * object instead (URL specs are single-file or use absolute refs already
+ * rejected in step 2).
+ *
+ * @param input Path, URL, or pre-parsed document
+ * @param allowExternalRefs Permit external http(s) `$ref` resolution
+ * @returns Fully dereferenced OpenAPI v3 document
+ */
+export declare function parseSpecSecurely(input: string | OpenAPIV3.Document, allowExternalRefs: boolean): Promise<OpenAPIV3.Document>;

package/dist/node_modules/openapi-mcp-generator/dist/utils/parser-security.js

@@ -0,0 +1,121 @@
+/**
+ * Parser-level security utilities.
+ *
+ * Guards against SSRF via uncontrolled external `$ref` resolution. By default
+ * `@apidevtools/swagger-parser`'s `dereference()` will follow `http://` and
+ * `https://` `$ref` URLs, issuing live outbound requests during parsing. A
+ * malicious or compromised spec can use this to reach internal services
+ * (cloud metadata endpoints, internal APIs) from the host running the
+ * generator. See GitHub issue #68.
+ */
+import SwaggerParser from '@apidevtools/swagger-parser';
+/** Error thrown when an external `$ref` is encountered but not allowed. */
+export class ExternalRefError extends Error {
+    ref;
+    constructor(ref) {
+        super(`External $ref resolution is disabled for security (SSRF protection): "${ref}". ` +
+            `Re-run with --allow-external-refs / { allowExternalRefs: true } to permit it.`);
+        this.ref = ref;
+        this.name = 'ExternalRefError';
+    }
+}
+/** Returns true if a `$ref` string points at an http(s) URL. */
+export function isExternalHttpRef(ref) {
+    return typeof ref === 'string' && /^https?:\/\//i.test(ref.trim());
+}
+/**
+ * Recursively scan an already-loaded spec object for external http(s) `$ref`
+ * values. Throws {@link ExternalRefError} on the first one found.
+ *
+ * This runs before dereferencing so no outbound request is ever made.
+ */
+/**
+ * Keys whose values are literal user data (example payloads, defaults), where a
+ * string property named `$ref` is content — not an OpenAPI reference. We don't
+ * scan into these to avoid false positives on otherwise-valid specs.
+ */
+const DATA_BEARING_KEYS = new Set(['example', 'examples', 'default']);
+/**
+ * An OpenAPI Reference Object is `{ $ref: string }`, optionally accompanied by
+ * `summary`/`description` (OpenAPI 3.1). If an object carries a `$ref` string
+ * alongside other arbitrary properties, it's user data (e.g. an example body),
+ * not a reference SwaggerParser would resolve.
+ */
+function isReferenceObject(obj) {
+    if (typeof obj.$ref !== 'string')
+        return false;
+    return Object.keys(obj).every((k) => k === '$ref' || k === 'summary' || k === 'description');
+}
+export function assertNoExternalRefs(node, seen = new WeakSet()) {
+    if (node === null || typeof node !== 'object')
+        return;
+    if (seen.has(node))
+        return;
+    seen.add(node);
+    if (Array.isArray(node)) {
+        for (const item of node)
+            assertNoExternalRefs(item, seen);
+        return;
+    }
+    const obj = node;
+    // Only treat a structurally-valid Reference Object's $ref as a resolvable ref.
+    if (isReferenceObject(obj) && isExternalHttpRef(obj.$ref)) {
+        throw new ExternalRefError(obj.$ref);
+    }
+    for (const [key, value] of Object.entries(obj)) {
+        // Skip literal-data subtrees where `$ref` would be content, not a reference.
+        if (DATA_BEARING_KEYS.has(key))
+            continue;
+        assertNoExternalRefs(value, seen);
+    }
+}
+/** True if the input is an http(s) URL string. */
+function isHttpUrlInput(input) {
+    return typeof input === 'string' && /^https?:\/\//i.test(input.trim());
+}
+/**
+ * Parse and dereference an OpenAPI spec with optional SSRF protection.
+ *
+ * The SSRF protection targets external `$ref`s embedded *inside* the spec, not
+ * the user-supplied input itself: a URL/path passed as the input is trusted
+ * (the user typed it) and must still load. When `allowExternalRefs` is false
+ * (the default) we:
+ *   1. Parse the entry document (http allowed so a URL input is fetched).
+ *   2. Scan the parsed tree and reject any external http(s) `$ref`.
+ *   3. Dereference with the http resolver disabled — safe because step 2
+ *      guaranteed no external refs remain to follow.
+ *
+ * Step 3 dereferences from the ORIGINAL local-path/object input (not the parsed
+ * object) so relative file `$ref`s (e.g. `./schemas.json#/MyType`) resolve
+ * against the spec's directory rather than the process cwd. For URL inputs,
+ * which can't be re-fetched once http is disabled, it dereferences the parsed
+ * object instead (URL specs are single-file or use absolute refs already
+ * rejected in step 2).
+ *
+ * @param input Path, URL, or pre-parsed document
+ * @param allowExternalRefs Permit external http(s) `$ref` resolution
+ * @returns Fully dereferenced OpenAPI v3 document
+ */
+export async function parseSpecSecurely(input, allowExternalRefs) {
+    // SwaggerParser accepts a path/URL string OR a pre-parsed API object.
+    const apiInput = input;
+    if (allowExternalRefs) {
+        return (await SwaggerParser.dereference(apiInput));
+    }
+    // 1. Parse/fetch the entry document (http allowed so a URL input still loads),
+    //    without dereferencing, so we can inspect raw $ref values first.
+    const parsed = (await SwaggerParser.parse(apiInput));
+    // 2. Reject any external http(s) $ref embedded in the spec (SSRF guard).
+    assertNoExternalRefs(parsed);
+    // 3. Dereference with http disabled. For local-path/object inputs, pass the
+    //    ORIGINAL input so relative file refs resolve against the spec directory;
+    //    for URL inputs (which can't be re-fetched with http off) dereference the
+    //    already-parsed object.
+    const dereferenceInput = isHttpUrlInput(input)
+        ? parsed
+        : apiInput;
+    return (await SwaggerParser.dereference(dereferenceInput, {
+        resolve: { http: false },
+    }));
+}
+//# sourceMappingURL=parser-security.js.map

package/dist/node_modules/openapi-mcp-generator/dist/utils/parser-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser-security.js","sourceRoot":"","sources":["../../src/utils/parser-security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,aAAa,MAAM,6BAA6B,CAAC;AAGxD,2EAA2E;AAC3E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAA5B,YAA4B,GAAW;QACrC,KAAK,CACH,yEAAyE,GAAG,KAAK;YAC/E,+EAA+E,CAClF,CAAC;QAJwB,QAAG,GAAH,GAAG,CAAQ;QAKrC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAA4B;IACrD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,aAAa,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAa,EAAE,OAAwB,IAAI,OAAO,EAAE;IACvF,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO;IACtD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAc,CAAC;QAAE,OAAO;IACrC,IAAI,CAAC,GAAG,CAAC,IAAc,CAAC,CAAC;IAEzB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,IAAI;YAAE,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,+EAA+E;IAC/E,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAc,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,6EAA6E;QAC7E,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACzC,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,SAAS,cAAc,CAAC,KAAkC;IACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAkC,EAClC,iBAA0B;IAE1B,sEAAsE;IACtE,MAAM,QAAQ,GAAG,KAAwD,CAAC;IAE1E,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAuB,CAAC;IAC3E,CAAC;IAED,+EAA+E;IAC/E,qEAAqE;IACrE,MAAM,MAAM,GAAG,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAuB,CAAC;IAE3E,yEAAyE;IACzE,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,4BAA4B;IAC5B,MAAM,gBAAgB,GAAoD,cAAc,CAAC,KAAK,CAAC;QAC7F,CAAC,CAAE,MAAqE;QACxE,CAAC,CAAC,QAAQ,CAAC;IACb,OAAO,CAAC,MAAM,aAAa,CAAC,WAAW,CAAC,gBAAgB,EAAE;QACxD,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;KACzB,CAAC,CAAuB,CAAC;AAC5B,CAAC"}