@tempad-dev/mcp 0.3.8 → 0.3.10

package/dist/hub.mjs

@@ -1,4 +1,4 @@
-import { a as SOCK_PATH, c as log, i as RUNTIME_DIR, o as ensureDir, r as PACKAGE_VERSION, s as ensureFile, t as ASSET_DIR } from "./shared-DlR95qf4.mjs";
+import { a as SOCK_PATH, c as log, i as RUNTIME_DIR, o as ensureDir, r as PACKAGE_VERSION, s as ensureFile, t as ASSET_DIR } from "./shared-eU-gSEEq.mjs";
 import { createServer } from "node:net";
 import { join } from "node:path";
 import { URL as URL$1 } from "node:url";
@@ -11,31 +11,37 @@ import { createHash } from "node:crypto";
 import { createServer as createServer$1 } from "node:http";
 import { Transform, pipeline } from "node:stream";
 
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/core/core.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/core/core.js
 /** A special constant with type `never` */
 const NEVER = Object.freeze({ status: "aborted" });
 function $constructor(name, initializer$2, params) {
 	function init(inst, def) {
-		var _a;
-		Object.defineProperty(inst, "_zod", {
-			value: inst._zod ?? {},
+		if (!inst._zod) Object.defineProperty(inst, "_zod", {
+			value: {
+				def,
+				constr: _,
+				traits: /* @__PURE__ */ new Set()
+			},
 			enumerable: false
 		});
-		(_a = inst._zod).traits ?? (_a.traits = /* @__PURE__ */ new Set());
+		if (inst._zod.traits.has(name)) return;
 		inst._zod.traits.add(name);
 		initializer$2(inst, def);
-		for (const k in _.prototype) if (!(k in inst)) Object.defineProperty(inst, k, { value: _.prototype[k].bind(inst) });
-		inst._zod.constr = _;
-		inst._zod.def = def;
+		const proto = _.prototype;
+		const keys = Object.keys(proto);
+		for (let i = 0; i < keys.length; i++) {
+			const k = keys[i];
+			if (!(k in inst)) inst[k] = proto[k].bind(inst);
+		}
 	}
 	const Parent = params?.Parent ?? Object;
 	class Definition extends Parent {}
 	Object.defineProperty(Definition, "name", { value: name });
 	function _(def) {
-		var _a;
+		var _a$1;
 		const inst = params?.Parent ? new Definition() : this;
 		init(inst, def);
-		(_a = inst._zod).deferred ?? (_a.deferred = []);
+		(_a$1 = inst._zod).deferred ?? (_a$1.deferred = []);
 		for (const fn of inst._zod.deferred) fn();
 		return inst;
 	}
@@ -65,7 +71,7 @@ function config(newConfig) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/core/util.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/core/util.js
 function getEnumValues(entries) {
 	const numericValues = Object.values(entries).filter((v) => typeof v === "number");
 	return Object.entries(entries).filter(([k, _]) => numericValues.indexOf(+k) === -1).map(([_, v]) => v);
@@ -140,6 +146,9 @@ function mergeDefs(...defs) {
 function esc(str) {
 	return JSON.stringify(str);
 }
+function slugify(input) {
+	return input.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
+}
 const captureStackTrace = "captureStackTrace" in Error ? Error.captureStackTrace : (..._args) => {};
 function isObject(data) {
 	return typeof data === "object" && data !== null && !Array.isArray(data);
@@ -157,6 +166,7 @@ function isPlainObject(o) {
 	if (isObject(o) === false) return false;
 	const ctor = o.constructor;
 	if (ctor === void 0) return true;
+	if (typeof ctor !== "function") return true;
 	const prot = ctor.prototype;
 	if (isObject(prot) === false) return false;
 	if (Object.prototype.hasOwnProperty.call(prot, "isPrototypeOf") === false) return false;
@@ -339,8 +349,8 @@ function aborted(x, startIndex = 0) {
 }
 function prefixIssues(path, issues) {
 	return issues.map((iss) => {
-		var _a;
-		(_a = iss).path ?? (_a.path = []);
+		var _a$1;
+		(_a$1 = iss).path ?? (_a$1.path = []);
 		iss.path.unshift(path);
 		return iss;
 	});
@@ -376,7 +386,7 @@ function issue(...args) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/core/errors.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/core/errors.js
 const initializer$1 = (inst, def) => {
 	inst.name = "$ZodError";
 	Object.defineProperty(inst, "_zod", {
@@ -434,7 +444,7 @@ function formatError(error, mapper = (issue$1) => issue$1.message) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/core/parse.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/core/parse.js
 const _parse = (_Err) => (schema, value, _ctx, _params) => {
 	const ctx = _ctx ? Object.assign(_ctx, { async: false }) : { async: false };
 	const result = schema._zod.run({
@@ -538,7 +548,7 @@ const _safeDecodeAsync = (_Err) => async (schema, value, _ctx) => {
 const safeDecodeAsync$1 = /* @__PURE__ */ _safeDecodeAsync($ZodRealError);
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/core/regexes.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/core/regexes.js
 const cuid = /^[cC][^\s-]{8,}$/;
 const cuid2 = /^[0-9a-z]+$/;
 const ulid = /^[0-9A-HJKMNP-TV-Za-hjkmnp-tv-z]{26}$/;
@@ -568,7 +578,6 @@ const cidrv4 = /^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-
 const cidrv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|::|([0-9a-fA-F]{1,4})?::([0-9a-fA-F]{1,4}:?){0,6})\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$/;
 const base64 = /^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$/;
 const base64url = /^[A-Za-z0-9_-]*$/;
-const hostname = /^(?=.{1,253}\.?$)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[-0-9a-zA-Z]{0,61}[0-9a-zA-Z])?)*\.?$/;
 const e164 = /^\+(?:[0-9]){6,14}[0-9]$/;
 const dateSource = `(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))`;
 const date$1 = /* @__PURE__ */ new RegExp(`^${dateSource}$`);
@@ -598,12 +607,12 @@ const lowercase = /^[^A-Z]*$/;
 const uppercase = /^[^a-z]*$/;
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/core/checks.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/core/checks.js
 const $ZodCheck = /* @__PURE__ */ $constructor("$ZodCheck", (inst, def) => {
-	var _a;
+	var _a$1;
 	inst._zod ?? (inst._zod = {});
 	inst._zod.def = def;
-	(_a = inst._zod).onattach ?? (_a.onattach = []);
+	(_a$1 = inst._zod).onattach ?? (_a$1.onattach = []);
 });
 const numericOriginMap = {
 	number: "number",
@@ -657,8 +666,8 @@ const $ZodCheckGreaterThan = /* @__PURE__ */ $constructor("$ZodCheckGreaterThan"
 const $ZodCheckMultipleOf = /* @__PURE__ */ $constructor("$ZodCheckMultipleOf", (inst, def) => {
 	$ZodCheck.init(inst, def);
 	inst._zod.onattach.push((inst$1) => {
-		var _a;
-		(_a = inst$1._zod.bag).multipleOf ?? (_a.multipleOf = def.value);
+		var _a$1;
+		(_a$1 = inst$1._zod.bag).multipleOf ?? (_a$1.multipleOf = def.value);
 	});
 	inst._zod.check = (payload) => {
 		if (typeof payload.value !== typeof def.value) throw new Error("Cannot mix number and bigint in multiple_of check.");
@@ -741,9 +750,9 @@ const $ZodCheckNumberFormat = /* @__PURE__ */ $constructor("$ZodCheckNumberForma
 	};
 });
 const $ZodCheckMaxLength = /* @__PURE__ */ $constructor("$ZodCheckMaxLength", (inst, def) => {
-	var _a;
+	var _a$1;
 	$ZodCheck.init(inst, def);
-	(_a = inst._zod.def).when ?? (_a.when = (payload) => {
+	(_a$1 = inst._zod.def).when ?? (_a$1.when = (payload) => {
 		const val = payload.value;
 		return !nullish(val) && val.length !== void 0;
 	});
@@ -767,9 +776,9 @@ const $ZodCheckMaxLength = /* @__PURE__ */ $constructor("$ZodCheckMaxLength", (i
 	};
 });
 const $ZodCheckMinLength = /* @__PURE__ */ $constructor("$ZodCheckMinLength", (inst, def) => {
-	var _a;
+	var _a$1;
 	$ZodCheck.init(inst, def);
-	(_a = inst._zod.def).when ?? (_a.when = (payload) => {
+	(_a$1 = inst._zod.def).when ?? (_a$1.when = (payload) => {
 		const val = payload.value;
 		return !nullish(val) && val.length !== void 0;
 	});
@@ -793,9 +802,9 @@ const $ZodCheckMinLength = /* @__PURE__ */ $constructor("$ZodCheckMinLength", (i
 	};
 });
 const $ZodCheckLengthEquals = /* @__PURE__ */ $constructor("$ZodCheckLengthEquals", (inst, def) => {
-	var _a;
+	var _a$1;
 	$ZodCheck.init(inst, def);
-	(_a = inst._zod.def).when ?? (_a.when = (payload) => {
+	(_a$1 = inst._zod.def).when ?? (_a$1.when = (payload) => {
 		const val = payload.value;
 		return !nullish(val) && val.length !== void 0;
 	});
@@ -829,7 +838,7 @@ const $ZodCheckLengthEquals = /* @__PURE__ */ $constructor("$ZodCheckLengthEqual
 	};
 });
 const $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat", (inst, def) => {
-	var _a, _b;
+	var _a$1, _b;
 	$ZodCheck.init(inst, def);
 	inst._zod.onattach.push((inst$1) => {
 		const bag = inst$1._zod.bag;
@@ -839,7 +848,7 @@ const $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringForma
 			bag.patterns.add(def.pattern);
 		}
 	});
-	if (def.pattern) (_a = inst._zod).check ?? (_a.check = (payload) => {
+	if (def.pattern) (_a$1 = inst._zod).check ?? (_a$1.check = (payload) => {
 		def.pattern.lastIndex = 0;
 		if (def.pattern.test(payload.value)) return;
 		payload.issues.push({
@@ -953,7 +962,7 @@ const $ZodCheckOverwrite = /* @__PURE__ */ $constructor("$ZodCheckOverwrite", (i
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/core/doc.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/core/doc.js
 var Doc = class {
 	constructor(args = []) {
 		this.content = [];
@@ -985,17 +994,17 @@ var Doc = class {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/core/versions.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/core/versions.js
 const version = {
 	major: 4,
 	minor: 1,
-	patch: 12
+	patch: 13
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/core/schemas.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/core/schemas.js
 const $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
-	var _a;
+	var _a$1;
 	inst ?? (inst = {});
 	inst._zod.def = def;
 	inst._zod.bag = inst._zod.bag || {};
@@ -1004,7 +1013,7 @@ const $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
 	if (inst._zod.traits.has("$ZodCheck")) checks.unshift(inst);
 	for (const ch of checks) for (const fn of ch._zod.onattach) fn(inst);
 	if (checks.length === 0) {
-		(_a = inst._zod).deferred ?? (_a.deferred = []);
+		(_a$1 = inst._zod).deferred ?? (_a$1.deferred = []);
 		inst._zod.deferred?.push(() => {
 			inst._zod.run = inst._zod.parse;
 		});
@@ -1140,7 +1149,7 @@ const $ZodURL = /* @__PURE__ */ $constructor("$ZodURL", (inst, def) => {
 					code: "invalid_format",
 					format: "url",
 					note: "Invalid hostname",
-					pattern: hostname.source,
+					pattern: def.hostname.source,
 					input: payload.value,
 					inst,
 					continue: !def.abort
@@ -1219,18 +1228,12 @@ const $ZodISODuration = /* @__PURE__ */ $constructor("$ZodISODuration", (inst, d
 const $ZodIPv4 = /* @__PURE__ */ $constructor("$ZodIPv4", (inst, def) => {
 	def.pattern ?? (def.pattern = ipv4);
 	$ZodStringFormat.init(inst, def);
-	inst._zod.onattach.push((inst$1) => {
-		const bag = inst$1._zod.bag;
-		bag.format = `ipv4`;
-	});
+	inst._zod.bag.format = `ipv4`;
 });
 const $ZodIPv6 = /* @__PURE__ */ $constructor("$ZodIPv6", (inst, def) => {
 	def.pattern ?? (def.pattern = ipv6);
 	$ZodStringFormat.init(inst, def);
-	inst._zod.onattach.push((inst$1) => {
-		const bag = inst$1._zod.bag;
-		bag.format = `ipv6`;
-	});
+	inst._zod.bag.format = `ipv6`;
 	inst._zod.check = (payload) => {
 		try {
 			new URL(`http://[${payload.value}]`);
@@ -1286,9 +1289,7 @@ function isValidBase64(data) {
 const $ZodBase64 = /* @__PURE__ */ $constructor("$ZodBase64", (inst, def) => {
 	def.pattern ?? (def.pattern = base64);
 	$ZodStringFormat.init(inst, def);
-	inst._zod.onattach.push((inst$1) => {
-		inst$1._zod.bag.contentEncoding = "base64";
-	});
+	inst._zod.bag.contentEncoding = "base64";
 	inst._zod.check = (payload) => {
 		if (isValidBase64(payload.value)) return;
 		payload.issues.push({
@@ -1308,9 +1309,7 @@ function isValidBase64URL(data) {
 const $ZodBase64URL = /* @__PURE__ */ $constructor("$ZodBase64URL", (inst, def) => {
 	def.pattern ?? (def.pattern = base64url);
 	$ZodStringFormat.init(inst, def);
-	inst._zod.onattach.push((inst$1) => {
-		inst$1._zod.bag.contentEncoding = "base64url";
-	});
+	inst._zod.bag.contentEncoding = "base64url";
 	inst._zod.check = (payload) => {
 		if (isValidBase64URL(payload.value)) return;
 		payload.issues.push({
@@ -1374,7 +1373,7 @@ const $ZodNumber = /* @__PURE__ */ $constructor("$ZodNumber", (inst, def) => {
 		return payload;
 	};
 });
-const $ZodNumberFormat = /* @__PURE__ */ $constructor("$ZodNumber", (inst, def) => {
+const $ZodNumberFormat = /* @__PURE__ */ $constructor("$ZodNumberFormat", (inst, def) => {
 	$ZodCheckNumberFormat.init(inst, def);
 	$ZodNumber.init(inst, def);
 });
@@ -1467,7 +1466,7 @@ function handleCatchall(proms, input, payload, ctx, def, inst) {
 	const keySet = def.keySet;
 	const _catchall = def.catchall._zod;
 	const t = _catchall.def.type;
-	for (const key of Object.keys(input)) {
+	for (const key in input) {
 		if (keySet.has(key)) continue;
 		if (t === "never") {
 			unrecognized.push(key);
@@ -1833,11 +1832,12 @@ const $ZodEnum = /* @__PURE__ */ $constructor("$ZodEnum", (inst, def) => {
 const $ZodLiteral = /* @__PURE__ */ $constructor("$ZodLiteral", (inst, def) => {
 	$ZodType.init(inst, def);
 	if (def.values.length === 0) throw new Error("Cannot create literal schema with no valid values");
-	inst._zod.values = new Set(def.values);
+	const values = new Set(def.values);
+	inst._zod.values = values;
 	inst._zod.pattern = /* @__PURE__ */ new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex(o) : o ? escapeRegex(o.toString()) : String(o)).join("|")})$`);
 	inst._zod.parse = (payload, _ctx) => {
 		const input = payload.value;
-		if (inst._zod.values.has(input)) return payload;
+		if (values.has(input)) return payload;
 		payload.issues.push({
 			code: "invalid_value",
 			values: def.values,
@@ -2021,8 +2021,8 @@ const $ZodReadonly = /* @__PURE__ */ $constructor("$ZodReadonly", (inst, def) =>
 	$ZodType.init(inst, def);
 	defineLazy(inst._zod, "propValues", () => def.innerType._zod.propValues);
 	defineLazy(inst._zod, "values", () => def.innerType._zod.values);
-	defineLazy(inst._zod, "optin", () => def.innerType._zod.optin);
-	defineLazy(inst._zod, "optout", () => def.innerType._zod.optout);
+	defineLazy(inst._zod, "optin", () => def.innerType?._zod?.optin);
+	defineLazy(inst._zod, "optout", () => def.innerType?._zod?.optout);
 	inst._zod.parse = (payload, ctx) => {
 		if (ctx.direction === "backward") return def.innerType._zod.run(payload, ctx);
 		const result = def.innerType._zod.run(payload, ctx);
@@ -2062,18 +2062,19 @@ function handleRefineResult(result, payload, input, inst) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/core/registries.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/core/registries.js
+var _a;
 var $ZodRegistry = class {
 	constructor() {
 		this._map = /* @__PURE__ */ new WeakMap();
 		this._idmap = /* @__PURE__ */ new Map();
 	}
 	add(schema, ..._meta) {
-		const meta = _meta[0];
-		this._map.set(schema, meta);
-		if (meta && typeof meta === "object" && "id" in meta) {
-			if (this._idmap.has(meta.id)) throw new Error(`ID ${meta.id} already exists in the registry`);
-			this._idmap.set(meta.id, schema);
+		const meta$2 = _meta[0];
+		this._map.set(schema, meta$2);
+		if (meta$2 && typeof meta$2 === "object" && "id" in meta$2) {
+			if (this._idmap.has(meta$2.id)) throw new Error(`ID ${meta$2.id} already exists in the registry`);
+			this._idmap.set(meta$2.id, schema);
 		}
 		return this;
 	}
@@ -2083,8 +2084,8 @@ var $ZodRegistry = class {
 		return this;
 	}
 	remove(schema) {
-		const meta = this._map.get(schema);
-		if (meta && typeof meta === "object" && "id" in meta) this._idmap.delete(meta.id);
+		const meta$2 = this._map.get(schema);
+		if (meta$2 && typeof meta$2 === "object" && "id" in meta$2) this._idmap.delete(meta$2.id);
 		this._map.delete(schema);
 		return this;
 	}
@@ -2108,10 +2109,11 @@ var $ZodRegistry = class {
 function registry() {
 	return new $ZodRegistry();
 }
-const globalRegistry = /* @__PURE__ */ registry();
+(_a = globalThis).__zod_globalRegistry ?? (_a.__zod_globalRegistry = registry());
+const globalRegistry = globalThis.__zod_globalRegistry;
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/core/api.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/core/api.js
 function _string(Class, params) {
 	return new Class({
 		type: "string",
@@ -2510,6 +2512,9 @@ function _toLowerCase() {
 function _toUpperCase() {
 	return _overwrite((input) => input.toUpperCase());
 }
+function _slugify() {
+	return _overwrite((input) => slugify(input));
+}
 function _array(Class, element, params) {
 	return new Class({
 		type: "array",
@@ -2551,9 +2556,33 @@ function _check(fn, params) {
 	ch._zod.check = fn;
 	return ch;
 }
+function describe$1(description) {
+	const ch = new $ZodCheck({ check: "describe" });
+	ch._zod.onattach = [(inst) => {
+		const existing = globalRegistry.get(inst) ?? {};
+		globalRegistry.add(inst, {
+			...existing,
+			description
+		});
+	}];
+	ch._zod.check = () => {};
+	return ch;
+}
+function meta$1(metadata) {
+	const ch = new $ZodCheck({ check: "meta" });
+	ch._zod.onattach = [(inst) => {
+		const existing = globalRegistry.get(inst) ?? {};
+		globalRegistry.add(inst, {
+			...existing,
+			...metadata
+		});
+	}];
+	ch._zod.check = () => {};
+	return ch;
+}
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/classic/iso.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/classic/iso.js
 const ZodISODateTime = /* @__PURE__ */ $constructor("ZodISODateTime", (inst, def) => {
 	$ZodISODateTime.init(inst, def);
 	ZodStringFormat.init(inst, def);
@@ -2584,7 +2613,7 @@ function duration(params) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/classic/errors.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/classic/errors.js
 const initializer = (inst, issues) => {
 	$ZodError.init(inst, issues);
 	inst.name = "ZodError";
@@ -2608,7 +2637,7 @@ const ZodError = $constructor("ZodError", initializer);
 const ZodRealError = $constructor("ZodError", initializer, { Parent: Error });
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/classic/parse.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/classic/parse.js
 const parse = /* @__PURE__ */ _parse(ZodRealError);
 const parseAsync = /* @__PURE__ */ _parseAsync(ZodRealError);
 const safeParse = /* @__PURE__ */ _safeParse(ZodRealError);
@@ -2623,7 +2652,7 @@ const safeEncodeAsync = /* @__PURE__ */ _safeEncodeAsync(ZodRealError);
 const safeDecodeAsync = /* @__PURE__ */ _safeDecodeAsync(ZodRealError);
 
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.1.12/node_modules/zod/v4/classic/schemas.js
+//#region ../../node_modules/.pnpm/zod@4.1.13/node_modules/zod/v4/classic/schemas.js
 const ZodType = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
 	$ZodType.init(inst, def);
 	inst.def = def;
@@ -2638,8 +2667,8 @@ const ZodType = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
 	};
 	inst.clone = (def$1, params) => clone(inst, def$1, params);
 	inst.brand = () => inst;
-	inst.register = ((reg, meta) => {
-		reg.add(inst, meta);
+	inst.register = ((reg, meta$2) => {
+		reg.add(inst, meta$2);
 		return inst;
 	});
 	inst.parse = (data, params) => parse(inst, data, params, { callee: inst.parse });
@@ -2714,6 +2743,7 @@ const _ZodString = /* @__PURE__ */ $constructor("_ZodString", (inst, def) => {
 	inst.normalize = (...args) => inst.check(_normalize(...args));
 	inst.toLowerCase = () => inst.check(_toLowerCase());
 	inst.toUpperCase = () => inst.check(_toUpperCase());
+	inst.slugify = () => inst.check(_slugify());
 });
 const ZodString = /* @__PURE__ */ $constructor("ZodString", (inst, def) => {
 	$ZodString.init(inst, def);
@@ -3172,6 +3202,8 @@ function refine(fn, _params = {}) {
 function superRefine(fn) {
 	return _superRefine(fn);
 }
+const describe = describe$1;
+const meta = meta$1;
 
 //#endregion
 //#region ../mcp-shared/dist/index.js
@@ -3184,6 +3216,7 @@ const MCP_MAX_PAYLOAD_BYTES = 4 * 1024 * 1024;
 const MCP_TOOL_TIMEOUT_MS = 15e3;
 const MCP_AUTO_ACTIVATE_GRACE_MS = 1500;
 const MCP_MAX_ASSET_BYTES = 8 * 1024 * 1024;
+const MCP_ASSET_TTL_MS = 720 * 60 * 60 * 1e3;
 const MCP_ASSET_RESOURCE_NAME = "tempad-assets";
 const MCP_ASSET_URI_PREFIX = "asset://tempad/";
 const MCP_ASSET_URI_TEMPLATE = `${MCP_ASSET_URI_PREFIX}{hash}`;
@@ -3234,10 +3267,10 @@ const AssetDescriptorSchema = object({
 const GetCodeParametersSchema = object({
 	nodeId: string().describe("Optional target node id; omit to use the current single selection when pulling the baseline snapshot.").optional(),
 	preferredLang: _enum(["jsx", "vue"]).describe("Preferred output language to bias the snapshot; otherwise uses the design’s hint/detected language, then falls back to JSX.").optional(),
-	resolveTokens: boolean().describe("Inline token values instead of references for quick renders; default false returns token metadata so you can map into your theming system.").optional()
+	resolveTokens: boolean().describe("Inline token values instead of references for quick renders; default false returns token metadata so you can map into your theming system. When true, values are resolved per-node (mode-aware).").optional()
 });
 const GetTokenDefsParametersSchema = object({
-	names: array(string().regex(/^--[a-zA-Z0-9-_]+$/)).min(1).describe("Canonical token names (CSS variable form) from get_code.usedTokens or your own list to resolve, e.g., --color-primary."),
+	names: array(string().regex(/^--[a-zA-Z0-9-_]+$/)).min(1).describe("Canonical token names (CSS variable form) from Object.keys(get_code.tokens) or your own list to resolve, e.g., --color-primary."),
 	includeAllModes: boolean().describe("Include all token modes (light/dark/etc.) instead of just the active one to mirror responsive tokens; default false.").optional()
 });
 const GetScreenshotParametersSchema = object({ nodeId: string().describe("Optional node id to screenshot; defaults to the current single selection. Useful when layout/overlap is uncertain (auto-layout none/inferred).").optional() });
@@ -3257,6 +3290,10 @@ function parsePositiveInt(envValue, fallback) {
 	const parsed = envValue ? Number.parseInt(envValue, 10) : NaN;
 	return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
 }
+function parseNonNegativeInt(envValue, fallback) {
+	const parsed = envValue ? Number.parseInt(envValue, 10) : NaN;
+	return Number.isFinite(parsed) && parsed >= 0 ? parsed : fallback;
+}
 function resolveToolTimeoutMs() {
 	return parsePositiveInt(process.env.TEMPAD_MCP_TOOL_TIMEOUT, MCP_TOOL_TIMEOUT_MS);
 }
@@ -3266,13 +3303,17 @@ function resolveAutoActivateGraceMs() {
 function resolveMaxAssetSizeBytes() {
 	return parsePositiveInt(process.env.TEMPAD_MCP_MAX_ASSET_BYTES, MCP_MAX_ASSET_BYTES);
 }
+function resolveAssetTtlMs() {
+	return parseNonNegativeInt(process.env.TEMPAD_MCP_ASSET_TTL_MS, MCP_ASSET_TTL_MS);
+}
 function getMcpServerConfig() {
 	return {
 		wsPortCandidates: [...MCP_PORT_CANDIDATES],
 		toolTimeoutMs: resolveToolTimeoutMs(),
 		maxPayloadBytes: MCP_MAX_PAYLOAD_BYTES,
 		autoActivateGraceMs: resolveAutoActivateGraceMs(),
-		maxAssetSizeBytes: resolveMaxAssetSizeBytes()
+		maxAssetSizeBytes: resolveMaxAssetSizeBytes(),
+		assetTtlMs: resolveAssetTtlMs()
 	};
 }
 
@@ -3314,6 +3355,15 @@ function createAssetHttpServer(store) {
 		return `http://${LOOPBACK_HOST}:${port$1}`;
 	}
 	function handleRequest(req, res) {
+		const startedAt = Date.now();
+		res.on("finish", () => {
+			log.info({
+				method: req.method,
+				url: req.url,
+				status: res.statusCode,
+				durationMs: Date.now() - startedAt
+			}, "HTTP asset request completed.");
+		});
 		res.setHeader("Access-Control-Allow-Origin", "*");
 		res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
 		res.setHeader("Access-Control-Allow-Headers", "Content-Type, X-Asset-Width, X-Asset-Height");
@@ -3323,14 +3373,12 @@ function createAssetHttpServer(store) {
 			return;
 		}
 		if (!req.url) {
-			res.writeHead(400);
-			res.end("Missing URL");
+			sendError(res, 400, "Missing URL");
 			return;
 		}
 		const segments = new URL$1(req.url, getBaseUrl()).pathname.split("/").filter(Boolean);
 		if (segments.length !== 2 || segments[0] !== "assets") {
-			res.writeHead(404);
-			res.end("Not Found");
+			sendError(res, 404, "Not Found");
 			return;
 		}
 		const hash = segments[1];
@@ -3342,14 +3390,12 @@ function createAssetHttpServer(store) {
 			handleDownload(req, res, hash);
 			return;
 		}
-		res.writeHead(405);
-		res.end("Method Not Allowed");
+		sendError(res, 405, "Method Not Allowed");
 	}
 	function handleDownload(req, res, hash) {
 		const record = store.get(hash);
 		if (!record) {
-			res.writeHead(404);
-			res.end("Not Found");
+			sendError(res, 404, "Asset Not Found");
 			return;
 		}
 		let stat;
@@ -3358,15 +3404,13 @@ function createAssetHttpServer(store) {
 		} catch (error) {
 			if (error.code === "ENOENT") {
 				store.remove(hash, { removeFile: false });
-				res.writeHead(404);
-				res.end("Not Found");
+				sendError(res, 404, "Asset Not Found");
 			} else {
 				log.error({
 					error,
 					hash
 				}, "Failed to stat asset file.");
-				res.writeHead(500);
-				res.end("Internal Server Error");
+				sendError(res, 500, "Internal Server Error");
 			}
 			return;
 		}
@@ -3381,8 +3425,8 @@ function createAssetHttpServer(store) {
 				error,
 				hash
 			}, "Failed to stream asset file.");
-			if (!res.headersSent) res.writeHead(500);
-			res.end("Internal Server Error");
+			if (!res.headersSent) sendError(res, 500, "Internal Server Error");
+			else res.end();
 		});
 		stream.on("open", () => {
 			store.touch(hash);
@@ -3391,8 +3435,7 @@ function createAssetHttpServer(store) {
 	}
 	function handleUpload(req, res, hash) {
 		if (!MCP_HASH_PATTERN.test(hash)) {
-			res.writeHead(400);
-			res.end("Invalid Hash Format");
+			sendError(res, 400, "Invalid Hash Format");
 			return;
 		}
 		const mimeType = req.headers["content-type"] || "application/octet-stream";
@@ -3417,8 +3460,7 @@ function createAssetHttpServer(store) {
 			}
 			if (changed) store.upsert(existing);
 			store.touch(hash);
-			res.writeHead(200);
-			res.end("OK");
+			sendOk(res, 200, "Asset Already Exists");
 			return;
 		}
 		const tmpPath = `${filePath}.tmp.${nanoid()}`;
@@ -3446,26 +3488,22 @@ function createAssetHttpServer(store) {
 		} }), writeStream, (err) => {
 			if (err) {
 				cleanup();
-				if (err.message === "PayloadTooLarge") {
-					res.writeHead(413);
-					res.end("Payload Too Large");
-				} else if (err.code === "ERR_STREAM_PREMATURE_CLOSE") log.warn({ hash }, "Upload request closed prematurely.");
-				else {
+				if (err.message === "PayloadTooLarge") sendError(res, 413, "Payload Too Large");
+				else if (err.code === "ERR_STREAM_PREMATURE_CLOSE") {
+					log.warn({ hash }, "Upload request closed prematurely.");
+					sendError(res, 400, "Upload Incomplete");
+				} else {
 					log.error({
 						error: err,
 						hash
 					}, "Upload pipeline failed.");
-					if (!res.headersSent) {
-						res.writeHead(500);
-						res.end("Internal Server Error");
-					}
+					if (!res.headersSent) sendError(res, 500, "Internal Server Error");
 				}
 				return;
 			}
-			if (hasher.digest("hex") !== hash) {
+			if (hasher.digest("hex").slice(0, MCP_HASH_HEX_LENGTH) !== hash) {
 				cleanup();
-				res.writeHead(400);
-				res.end("Hash Mismatch");
+				sendError(res, 400, "Hash Mismatch");
 				return;
 			}
 			try {
@@ -3476,8 +3514,7 @@ function createAssetHttpServer(store) {
 					hash
 				}, "Failed to rename temp file to asset.");
 				cleanup();
-				res.writeHead(500);
-				res.end("Internal Server Error");
+				sendError(res, 500, "Internal Server Error");
 				return;
 			}
 			store.upsert({
@@ -3491,10 +3528,26 @@ function createAssetHttpServer(store) {
 				hash,
 				size
 			}, "Stored uploaded asset via HTTP.");
-			res.writeHead(201);
-			res.end("Created");
+			sendOk(res, 201, "Created", {
+				hash,
+				size
+			});
 		});
 	}
+	function sendError(res, status, message, details) {
+		if (!res.headersSent) res.writeHead(status, { "Content-Type": "application/json; charset=utf-8" });
+		res.end(JSON.stringify({
+			error: message,
+			...details
+		}));
+	}
+	function sendOk(res, status, message, data) {
+		if (!res.headersSent) res.writeHead(status, { "Content-Type": "application/json; charset=utf-8" });
+		res.end(JSON.stringify({
+			message,
+			...data
+		}));
+	}
 	return {
 		start,
 		stop,
@@ -3664,7 +3717,7 @@ function createAssetStore(options = {}) {
 
 //#endregion
 //#region src/instructions.md?raw
-var instructions_default = "You are connected to a Figma design file via the MCP server. Convert design elements into production code, preserving design intent while fitting the user’s codebase conventions.\n\n- Start from `get_code` as the baseline, then refactor to match project conventions (components, styling system, file structure, naming).\n- Layout confidence:\n  - If `get_code` contains no `data-hint-auto-layout`, it likely indicates the layout is explicit. You can be more confident implementing directly from `get_code`.\n  - If any `data-hint-auto-layout` is `none` or `inferred`, the corresponding layout may be uncertain. If you feel ambiguity or uncertainty, consult `get_structure` (hierarchy + geometry) and `get_screenshot` (visual intent such as layering/overlap/masks/shadows/translucency).\n- If `data-hint-component` plus repetition supports it, extract reusable components/variants aligned with project patterns. Do not preserve hint strings in output.\n- Tokens: follow the project’s token/theming framework; if needed, use `get_code.usedToken` metadata (collection, mode) to extend a responsive token system within that framework.\n- Assets: follow the project’s existing conventions/practices (icon system, asset pipeline, import/path rules, optimization) to decide how to represent and reference assets. If `get_code` uses resource URIs, you may replace them with the project’s canonical references when appropriate without changing rendering.\n- Do not output any `data-*` attributes returned by `get_code`.\n- For SVG/vector assets: use the exact provided asset, preserving `path` data, `viewBox`, and full SVG structure. Never redraw or approximate vectors.\n";
+var instructions_default = "You are connected to a Figma design file via the MCP server. Convert design elements into production code, preserving design intent while fitting the user’s codebase conventions.\n\n- Start from `get_code` as the baseline (omit `nodeId` to use the current single selection), then refactor to match project conventions (components, styling system, file structure, naming). Treat `get_code` as authoritative.\n- If `get_code` returns a `depth-cap` warning, call `get_code` again once per listed `nodeId` to fetch each omitted subtree.\n- Layout confidence:\n  - If `data-hint-auto-layout=\"inferred\"` appears, layout may be less certain. You can call `get_structure` or `get_screenshot` with a specific `nodeId` (both accept `nodeId`, otherwise they use the current single selection) to improve layout understanding, but keep `get_code` as the baseline.\n  - Otherwise, assume layout is explicit and implement directly from `get_code`.\n- If `data-hint-design-component` plus repetition supports it, extract reusable components/variants aligned with project patterns. Do not preserve hint strings in output.\n- Tokens: `get_code.tokens` is a single map keyed by canonical token name. Multi‑mode values use `${collectionName}:${modeName}` keys. Nodes with explicit overrides include `data-hint-variable-mode=\"Collection=Mode;Collection=Mode\"`; use this to pick the correct mode for a given node. Collection names are assumed unique.\n- Assets: follow the project’s existing conventions/practices (icon system, asset pipeline, import/path rules, optimization) to decide how to represent and reference assets. If `get_code` uses resource URIs, you may replace them with the project’s canonical references when appropriate without changing rendering.\n- Do not output any `data-*` attributes returned by `get_code` (they are hints only).\n- For SVG/vector assets: use the exact provided asset, preserving `path` data, `viewBox`, and full SVG structure. Never redraw or approximate vectors.\n";
 
 //#endregion
 //#region src/request.ts
@@ -3740,7 +3793,7 @@ function hubTool(definition) {
 const TOOL_DEFS = [
 	extTool({
 		name: "get_code",
-		description: "Get a high-fidelity code snapshot for a nodeId/current selection, including assets/usedTokens and codegen preset/config. Start here, then refactor into your component/styling/file/naming conventions; strip any data-* hints. If no data-hint-auto-layout is present, layout is explicit; if any hint is none/inferred, pair with get_structure/get_screenshot to confirm hierarchy/overlap. Use data-hint-component plus repetition to decide on reusable components. Replace resource URIs with your canonical asset system as needed.",
+		description: "Get a high-fidelity code snapshot for a nodeId/current selection (omit nodeId to use the current single selection), including assets/tokens and codegen plugin/config. Start here, then refactor into your component/styling/file/naming conventions; strip any data-* hints. Treat get_code as authoritative. If warnings include depth-cap, call get_code again once per listed nodeId to fetch each omitted subtree. If any data-hint-auto-layout=\"inferred\" appears, you may call get_structure or get_screenshot with a nodeId (both accept nodeId; omit it to use the current single selection) to confirm hierarchy/overlap, but keep get_code as the baseline. Use data-hint-design-component plus repetition to decide on reusable components. Replace resource URIs with your canonical asset system as needed. Tokens: get_code.tokens is a single map keyed by canonical token name; multi-mode values use `${collectionName}:${modeName}` keys. Nodes with explicit mode overrides include data-hint-variable-mode=\"Collection=Mode;Collection=Mode\". Collection names are assumed unique.",
 		parameters: GetCodeParametersSchema,
 		target: "extension",
 		format: createCodeToolResponse
@@ -3790,12 +3843,15 @@ function createCodeToolResponse(payload) {
 	const summary = [];
 	const codeSize = Buffer.byteLength(payload.code, "utf8");
 	summary.push(`Generated \`${payload.lang}\` snippet (${formatBytes$1(codeSize)}).`);
-	if (payload.message) summary.push(payload.message);
-	summary.push(payload.assets.length ? `Assets attached: ${payload.assets.length}. Fetch bytes via resources/read using resourceUri.` : "No binary assets were attached to this response.");
-	const tokenCount = payload.usedTokens ? Object.keys(payload.usedTokens.tokens ?? {}).length : 0;
+	if (payload.warnings?.length) {
+		const warningText = payload.warnings.map((warning) => warning.message).join(" ");
+		summary.push(warningText);
+	}
+	summary.push(payload.assets?.length ? `Assets attached: ${payload.assets.length}. Fetch bytes via resources/read using resourceUri.` : "No binary assets were attached to this response.");
+	const tokenCount = payload.tokens ? Object.keys(payload.tokens).length : 0;
 	if (tokenCount) summary.push(`Token references included: ${tokenCount}.`);
 	summary.push("Read structuredContent for the full code string and asset metadata.");
-	const assetLinks = payload.assets.length > 0 ? payload.assets.map((asset) => createAssetResourceLinkBlock$1(asset)) : [];
+	const assetLinks = payload.assets?.length ? payload.assets.map((asset) => createAssetResourceLinkBlock$1(asset)) : [];
 	return {
 		content: [{
 			type: "text",
@@ -3841,7 +3897,7 @@ function isScreenshotResult(payload) {
 function isCodeResult(payload) {
 	if (typeof payload !== "object" || !payload) return false;
 	const candidate = payload;
-	return typeof candidate.code === "string" && typeof candidate.lang === "string" && Array.isArray(candidate.assets);
+	return typeof candidate.code === "string" && typeof candidate.lang === "string" && (candidate.assets === void 0 || Array.isArray(candidate.assets));
 }
 function createAssetResourceLinkBlock$1(asset) {
 	return {
@@ -3869,7 +3925,7 @@ function coercePayloadToToolResponse(payload) {
 //#endregion
 //#region src/hub.ts
 const SHUTDOWN_TIMEOUT = 2e3;
-const { wsPortCandidates, toolTimeoutMs, maxPayloadBytes, autoActivateGraceMs } = getMcpServerConfig();
+const { wsPortCandidates, toolTimeoutMs, maxPayloadBytes, autoActivateGraceMs, assetTtlMs } = getMcpServerConfig();
 log.info({ version: PACKAGE_VERSION }, "TemPad MCP Hub starting...");
 const extensions = [];
 let consumerCount = 0;
@@ -3901,17 +3957,47 @@ const assetStore = createAssetStore();
 const assetHttpServer = createAssetHttpServer(assetStore);
 await assetHttpServer.start();
 registerAssetResources();
+scheduleAssetCleanup();
 function registerAssetResources() {
-	const template = new ResourceTemplate(MCP_ASSET_URI_TEMPLATE, { list: async () => ({ resources: assetStore.list().filter((record) => existsSync(record.filePath)).map((record) => ({
-		uri: buildAssetResourceUri(record.hash),
-		name: formatAssetResourceName(record.hash),
-		description: `${record.mimeType} (${formatBytes(record.size)})`,
-		mimeType: record.mimeType
-	})) }) });
-	mcp.registerResource(MCP_ASSET_RESOURCE_NAME, template, { description: "Binary assets captured by the TemPad Dev hub." }, async (_uri, variables) => {
+	const template = new ResourceTemplate(MCP_ASSET_URI_TEMPLATE, { list: async () => ({ resources: [] }) });
+	mcp.registerResource(MCP_ASSET_RESOURCE_NAME, template, { description: "Exported PNG/SVG assets which can serve as screenshots or be referenced in code output." }, async (_uri, variables) => {
 		return readAssetResource(typeof variables.hash === "string" ? variables.hash : "");
 	});
 }
+function scheduleAssetCleanup() {
+	if (assetTtlMs <= 0) {
+		log.info("Asset TTL cleanup disabled (TEMPAD_MCP_ASSET_TTL_MS=0).");
+		return;
+	}
+	pruneExpiredAssets(assetTtlMs);
+	const intervalMs = Math.min(assetTtlMs, 1440 * 60 * 1e3);
+	unrefTimer(setInterval(() => {
+		pruneExpiredAssets(assetTtlMs);
+	}, intervalMs));
+	log.info({
+		ttlMs: assetTtlMs,
+		intervalMs
+	}, "Asset TTL cleanup enabled (list remains empty; assets are tool-linked).");
+}
+function pruneExpiredAssets(ttlMs) {
+	const now = Date.now();
+	let removed = 0;
+	let checked = 0;
+	for (const record of assetStore.list()) {
+		checked += 1;
+		const lastAccess = Number.isFinite(record.lastAccess) ? record.lastAccess : record.uploadedAt;
+		if (!lastAccess) continue;
+		if (now - lastAccess > ttlMs) {
+			assetStore.remove(record.hash);
+			removed += 1;
+		}
+	}
+	log.info({
+		checked,
+		removed,
+		ttlMs
+	}, "Asset TTL sweep completed.");
+}
 async function readAssetResource(hash) {
 	if (!hash) throw new Error("Missing asset hash in resource URI.");
 	const record = assetStore.get(hash);