@wootsup/mcp 0.1.0-rc.9 → 0.3.0

package/dist/modules/apimapper/read-cache.d.ts

@@ -1,5 +1,27 @@
 export declare const READ_CACHE_TTL_MS = 60000;
 export declare const READ_CACHE_MAX_ENTRIES = 200;
+/**
+ * Per-entry opts that influence the cache key. Currently only `sanitize`
+ * but kept as an object so future flags (e.g. shape variants) can be added
+ * without breaking the existing call-sites.
+ */
+export interface CacheKeyOpts {
+    /**
+     * When the request will run its response through `sanitizeSecrets()`,
+     * the cached payload looks materially different (redacted) vs the raw
+     * variant. Without this bit in the key, two callers with different
+     * `sanitize` flags would see each other's responses — a Defense-in-Depth
+     * gap (F-02, A5). Default = false (raw) preserves prior behaviour.
+     *
+     * Contract: `undefined` and explicit `false` are intentionally equivalent
+     * (both map to the `R` (raw) cache slot — see read-cache.test.ts
+     * "default behaviour (no flag) treats as sanitize=false" for the pinned
+     * contract). Only literal `true` selects the `S` (sanitized) slot —
+     * non-boolean truthy values (e.g. `1`, `"yes"`) map to `R` per strict-
+     * equality guard in `cacheKey()`.
+     */
+    sanitize?: boolean;
+}
 /**
  * Is the request eligible for caching? GET only, and the path must
  * match at least one allowlist prefix. We compare against the path-
@@ -10,15 +32,22 @@ export declare function isCacheableRequest(method: string, url: string): boolean
 /**
  * Retrieve a cached entry. Returns undefined on miss or expired entry —
  * expired entries are also evicted to keep the store small.
+ *
+ * The optional `opts.sanitize` bit must match the value used at `setCached`
+ * time, otherwise this is a miss (intentional — sanitized and raw variants
+ * are isolated, see F-02).
  */
-export declare function getCached<T = unknown>(method: string, url: string): T | undefined;
+export declare function getCached<T = unknown>(method: string, url: string, opts?: CacheKeyOpts): T | undefined;
 /**
  * Store an entry. Caps the store at READ_CACHE_MAX_ENTRIES — when full,
  * we drop the OLDEST entry first (by storedAt). This is FIFO rather than
  * LRU; LRU would require an access-time update on every read which is
  * not worth it at 200-entry scale.
+ *
+ * The optional `opts.sanitize` bit becomes part of the cache key so the
+ * sanitized variant cannot leak into a raw-mode call (F-02, A5 D-i-D).
  */
-export declare function setCached<T = unknown>(method: string, url: string, data: T): void;
+export declare function setCached<T = unknown>(method: string, url: string, data: T, opts?: CacheKeyOpts): void;
 /**
  * Invalidate cache entries whose request path overlaps with the mutated
  * resource. Conservative — clears every entry whose key includes the

package/dist/modules/apimapper/read-cache.js

@@ -66,9 +66,16 @@ const store = new Map();
  * The HTTP method is part of the key only for safety — non-GET will
  * never reach here, but we don't want a future caller to accidentally
  * cache a POST against the same path.
+ *
+ * F-02 (2026-05-19): a sanitize-bit (`S` sanitized / `R` raw) is appended
+ * so sanitized and raw variants of the same URL occupy different slots.
+ * Strict-equality (`=== true`) makes the intent self-documenting and
+ * prevents silent widening if a JS caller passes a non-boolean truthy
+ * value (e.g. `1`, `"yes"`) — those map to the `R` slot.
  */
-function cacheKey(method, url) {
-    return `${method.toUpperCase()}::${url}`;
+function cacheKey(method, url, opts) {
+    const sanitizeBit = opts?.sanitize === true ? "S" : "R";
+    return `${method.toUpperCase()}::${sanitizeBit}::${url}`;
 }
 /**
  * Is the request eligible for caching? GET only, and the path must
@@ -91,9 +98,13 @@ export function isCacheableRequest(method, url) {
 /**
  * Retrieve a cached entry. Returns undefined on miss or expired entry —
  * expired entries are also evicted to keep the store small.
+ *
+ * The optional `opts.sanitize` bit must match the value used at `setCached`
+ * time, otherwise this is a miss (intentional — sanitized and raw variants
+ * are isolated, see F-02).
  */
-export function getCached(method, url) {
-    const key = cacheKey(method, url);
+export function getCached(method, url, opts) {
+    const key = cacheKey(method, url, opts);
     const entry = store.get(key);
     if (!entry)
         return undefined;
@@ -108,8 +119,11 @@ export function getCached(method, url) {
  * we drop the OLDEST entry first (by storedAt). This is FIFO rather than
  * LRU; LRU would require an access-time update on every read which is
  * not worth it at 200-entry scale.
+ *
+ * The optional `opts.sanitize` bit becomes part of the cache key so the
+ * sanitized variant cannot leak into a raw-mode call (F-02, A5 D-i-D).
  */
-export function setCached(method, url, data) {
+export function setCached(method, url, data, opts) {
     if (store.size >= READ_CACHE_MAX_ENTRIES) {
         let oldestKey;
         let oldestTime = Infinity;
@@ -123,7 +137,7 @@ export function setCached(method, url, data) {
             store.delete(oldestKey);
     }
     const now = Date.now();
-    store.set(cacheKey(method, url), {
+    store.set(cacheKey(method, url, opts), {
         data,
         expiresAt: now + READ_CACHE_TTL_MS,
         storedAt: now,

package/dist/modules/apimapper/read-cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"read-cache.js","sourceRoot":"","sources":["../../../src/modules/apimapper/read-cache.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,0EAA0E;AAC1E,iFAAiF;AACjF,2EAA2E;AAC3E,+DAA+D;AAC/D,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,EAAE;AACF,0EAA0E;AAC1E,gBAAgB;AAChB,EAAE;AACF,QAAQ;AACR,QAAQ;AACR,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,uEAAuE;AACvE,yEAAyE;AACzE,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,wEAAwE;AACxE,2EAA2E;AAC3E,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,kEAAkE;AAQlE,mDAAmD;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,wEAAwE;AACxE,uEAAuE;AACvE,sEAAsE;AACtE,6BAA6B;AAC7B,EAAE;AACF,+EAA+E;AAC/E,MAAM,yBAAyB,GAA0B;IACvD,SAAS;IACT,WAAW;IACX,UAAU;IACV,UAAU;IACV,cAAc;IACd,cAAc;IACd,QAAQ;IACR,kBAAkB;IAClB,WAAW;IACX,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,QAAQ;CACT,CAAC;AAEF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE5C;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,MAAc,EAAE,GAAW;IAC3C,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,GAAW;IAC5D,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,CAAC;QACH,4CAA4C;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAc,MAAc,EAAE,GAAW;IAChE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,IAAS,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAc,MAAc,EAAE,GAAW,EAAE,IAAO;IACzE,IAAI,KAAK,CAAC,IAAI,IAAI,sBAAsB,EAAE,CAAC;QACzC,IAAI,SAA6B,CAAC;QAClC,IAAI,UAAU,GAAG,QAAQ,CAAC;QAC1B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC;gBAC5B,UAAU,GAAG,CAAC,CAAC,QAAQ,CAAC;gBACxB,SAAS,GAAG,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,SAAS;YAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;QAC/B,IAAI;QACJ,SAAS,EAAE,GAAG,GAAG,iBAAiB;QAClC,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B;IAClE,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU;IACxB,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,KAAK,EAAE,iBAAiB;KACzB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"read-cache.js","sourceRoot":"","sources":["../../../src/modules/apimapper/read-cache.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,0EAA0E;AAC1E,iFAAiF;AACjF,2EAA2E;AAC3E,+DAA+D;AAC/D,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,EAAE;AACF,0EAA0E;AAC1E,gBAAgB;AAChB,EAAE;AACF,QAAQ;AACR,QAAQ;AACR,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,uEAAuE;AACvE,yEAAyE;AACzE,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,wEAAwE;AACxE,2EAA2E;AAC3E,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,kEAAkE;AAQlE,mDAAmD;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,wEAAwE;AACxE,uEAAuE;AACvE,sEAAsE;AACtE,6BAA6B;AAC7B,EAAE;AACF,+EAA+E;AAC/E,MAAM,yBAAyB,GAA0B;IACvD,SAAS;IACT,WAAW;IACX,UAAU;IACV,UAAU;IACV,cAAc;IACd,cAAc;IACd,QAAQ;IACR,kBAAkB;IAClB,WAAW;IACX,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,QAAQ;CACT,CAAC;AAEF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;AAyB5C;;;;;;;;;;;;GAYG;AACH,SAAS,QAAQ,CAAC,MAAc,EAAE,GAAW,EAAE,IAAmB;IAChE,MAAM,WAAW,GAAG,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACxD,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,KAAK,WAAW,KAAK,GAAG,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,GAAW;IAC5D,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,CAAC;QACH,4CAA4C;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CACvB,MAAc,EACd,GAAW,EACX,IAAmB;IAEnB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,IAAS,CAAC;AACzB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CACvB,MAAc,EACd,GAAW,EACX,IAAO,EACP,IAAmB;IAEnB,IAAI,KAAK,CAAC,IAAI,IAAI,sBAAsB,EAAE,CAAC;QACzC,IAAI,SAA6B,CAAC;QAClC,IAAI,UAAU,GAAG,QAAQ,CAAC;QAC1B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC;gBAC5B,UAAU,GAAG,CAAC,CAAC,QAAQ,CAAC;gBACxB,SAAS,GAAG,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,SAAS;YAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE;QACrC,IAAI;QACJ,SAAS,EAAE,GAAG,GAAG,iBAAiB;QAClC,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B;IAClE,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU;IACxB,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,KAAK,EAAE,iBAAiB;KACzB,CAAC;AACJ,CAAC"}

package/dist/modules/apimapper/render/_shared.d.ts

@@ -0,0 +1,24 @@
+/** Counts user-perceived characters (graphemes), not UTF-16 code units. */
+export declare function graphemeLength(s: string): number;
+/** Right-pad with spaces until the string reaches `width` graphemes. */
+export declare function padRight(s: string, width: number): string;
+/** Left-pad with spaces until the string reaches `width` graphemes. */
+export declare function padLeft(s: string, width: number): string;
+/**
+ * Truncate to at most `maxGraphemes` graphemes, appending "…" when cut.
+ * Reserves 1 grapheme for the ellipsis itself, so the returned string is
+ * guaranteed never to exceed `maxGraphemes` in grapheme count.
+ */
+export declare function truncate(s: string, maxGraphemes: number): string;
+/**
+ * Draw an ASCII box around `lines`.
+ *
+ * Width contract:
+ *   - If `width` is supplied, every returned line has exactly `width`
+ *     graphemes (top/bottom = ─-fill, content = "│ <text> │" right-padded).
+ *   - If omitted, width = max content grapheme length + 4 (2 padding chars
+ *     on each side including borders).
+ *
+ * Content lines longer than the inside-width are truncated with `…`.
+ */
+export declare function box(lines: string[], width?: number): string;

package/dist/modules/apimapper/render/_shared.js

@@ -0,0 +1,84 @@
+// _shared.ts — Grapheme-safe text helpers shared by every renderer.
+//
+// Critical invariant: `box()` returns lines whose grapheme-width equals the
+// requested (or auto-derived) width. Renderers join multiple boxes
+// horizontally and pad blocks vertically — every consumer assumes uniform
+// box width. A 1-char drift in any line breaks horizontal alignment for
+// every downstream layer.
+//
+// Why Intl.Segmenter: JavaScript's String#length counts UTF-16 code units,
+// so "🇩🇪".length === 4 (two surrogate pairs) even though the user sees one
+// glyph. We use Intl.Segmenter with granularity:"grapheme" to count what
+// the user actually sees. This matters for connection labels that may
+// contain emoji / CJK / right-to-left text and for the eventual
+// non-ASCII flow names users will throw at us.
+const segmenter = new Intl.Segmenter("en", { granularity: "grapheme" });
+/** Counts user-perceived characters (graphemes), not UTF-16 code units. */
+export function graphemeLength(s) {
+    let n = 0;
+    // Intl.Segmenter always yields truthy segment objects — no guard needed.
+    for (const _segment of segmenter.segment(s))
+        n++;
+    return n;
+}
+/** Right-pad with spaces until the string reaches `width` graphemes. */
+export function padRight(s, width) {
+    const len = graphemeLength(s);
+    return len >= width ? s : s + " ".repeat(width - len);
+}
+/** Left-pad with spaces until the string reaches `width` graphemes. */
+export function padLeft(s, width) {
+    const len = graphemeLength(s);
+    return len >= width ? s : " ".repeat(width - len) + s;
+}
+/**
+ * Truncate to at most `maxGraphemes` graphemes, appending "…" when cut.
+ * Reserves 1 grapheme for the ellipsis itself, so the returned string is
+ * guaranteed never to exceed `maxGraphemes` in grapheme count.
+ */
+export function truncate(s, maxGraphemes) {
+    if (graphemeLength(s) <= maxGraphemes)
+        return s;
+    if (maxGraphemes <= 0)
+        return "";
+    if (maxGraphemes === 1)
+        return "…";
+    const room = maxGraphemes - 1;
+    let out = "";
+    let count = 0;
+    for (const seg of segmenter.segment(s)) {
+        if (count >= room)
+            break;
+        out += seg.segment;
+        count++;
+    }
+    return out + "…";
+}
+/**
+ * Draw an ASCII box around `lines`.
+ *
+ * Width contract:
+ *   - If `width` is supplied, every returned line has exactly `width`
+ *     graphemes (top/bottom = ─-fill, content = "│ <text> │" right-padded).
+ *   - If omitted, width = max content grapheme length + 4 (2 padding chars
+ *     on each side including borders).
+ *
+ * Content lines longer than the inside-width are truncated with `…`.
+ */
+export function box(lines, width) {
+    const computedWidth = width ??
+        Math.max(...lines.map((l) => graphemeLength(l) + 4), 5);
+    const inside = computedWidth - 2; // space between the two side borders
+    const top = "┌" + "─".repeat(inside) + "┐";
+    const bot = "└" + "─".repeat(inside) + "┘";
+    // Each content row: "│" + " " + <truncated content> + right-pad + "│"
+    // We reserve 2 grapheme slots inside (one leading space, one trailing
+    // pad-or-space) so content max width = inside - 2.
+    const contentMax = Math.max(0, inside - 2);
+    const middle = lines.map((l) => {
+        const safe = truncate(l, contentMax);
+        return "│" + padRight(" " + safe, inside) + "│";
+    });
+    return [top, ...middle, bot].join("\n");
+}
+//# sourceMappingURL=_shared.js.map

package/dist/modules/apimapper/render/_shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_shared.js","sourceRoot":"","sources":["../../../../src/modules/apimapper/render/_shared.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,4EAA4E;AAC5E,mEAAmE;AACnE,0EAA0E;AAC1E,wEAAwE;AACxE,0BAA0B;AAC1B,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,sEAAsE;AACtE,gEAAgE;AAChE,+CAA+C;AAE/C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;AAExE,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,yEAAyE;IACzE,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,CAAC,EAAE,CAAC;IACjD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,QAAQ,CAAC,CAAS,EAAE,KAAa;IAC/C,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,OAAO,CAAC,CAAS,EAAE,KAAa;IAC9C,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,CAAS,EAAE,YAAoB;IACtD,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,YAAY;QAAE,OAAO,CAAC,CAAC;IAChD,IAAI,YAAY,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,YAAY,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACnC,MAAM,IAAI,GAAG,YAAY,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,KAAK,IAAI,IAAI;YAAE,MAAM;QACzB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC;QACnB,KAAK,EAAE,CAAC;IACV,CAAC;IACD,OAAO,GAAG,GAAG,GAAG,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,GAAG,CAAC,KAAe,EAAE,KAAc;IACjD,MAAM,aAAa,GACjB,KAAK;QACL,IAAI,CAAC,GAAG,CACN,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAC1C,CAAC,CACF,CAAC;IACJ,MAAM,MAAM,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,qCAAqC;IACvE,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;IAC3C,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;IAC3C,sEAAsE;IACtE,sEAAsE;IACtE,mDAAmD;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,GAAG,GAAG,QAAQ,CAAC,GAAG,GAAG,IAAI,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC"}

package/dist/modules/apimapper/render/dag.d.ts

@@ -0,0 +1,18 @@
+export interface DagNode {
+    id: string;
+}
+export interface DagEdge {
+    source: string;
+    target: string;
+}
+export interface TopoResult {
+    /** Node ids grouped by topological layer (depth from any source). */
+    layers: string[][];
+    /** True iff cycle detected — some nodes never reached in-degree 0. */
+    cycle: boolean;
+    /** Node ids that were never emitted (cycle members or orphans behind one). */
+    unreachable: string[];
+}
+export declare function topoLayers(nodes: DagNode[], edges: DagEdge[]): TopoResult;
+/** Convenience predicate. Equivalent to `topoLayers(...).cycle`. */
+export declare function detectCycle(nodes: DagNode[], edges: DagEdge[]): boolean;

package/dist/modules/apimapper/render/dag.js

@@ -0,0 +1,70 @@
+// dag.ts — Topological layering + cycle detection for the flow-diagram
+// renderer.
+//
+// Algorithm: Kahn's BFS. Start with nodes of in-degree 0 (sources), publish
+// them as layer 0, decrement in-degrees of their successors, advance.
+//
+// A graph contains a cycle iff after the BFS terminates some nodes remain
+// with non-zero in-degree (Kahn's theorem). We expose the surviving set as
+// `unreachable` so the renderer can still draw cyclic nodes — appended as a
+// trailing layer, with a footer warning — rather than silently dropping them.
+//
+// Edges pointing at or from unknown node ids are silently ignored: the
+// fixture/JSON validator on the renderer side already rejects malformed
+// flows; this helper stays defensive and never throws on stray edges.
+export function topoLayers(nodes, edges) {
+    const ids = nodes.map((n) => n.id);
+    const idSet = new Set(ids);
+    const inDeg = new Map();
+    const adj = new Map();
+    for (const id of ids) {
+        inDeg.set(id, 0);
+        adj.set(id, []);
+    }
+    for (const e of edges) {
+        if (!idSet.has(e.source) || !idSet.has(e.target))
+            continue;
+        // `e.target` passed the idSet guard above, so inDeg always holds it —
+        // the `?? 0` is unreachable defensive code.
+        inDeg.set(e.target, 
+        /* v8 ignore next -- e.target is in idSet (guarded), inDeg seeded for every id */
+        (inDeg.get(e.target) ?? 0) + 1);
+        const out = adj.get(e.source);
+        if (out)
+            out.push(e.target);
+    }
+    const layers = [];
+    let frontier = ids.filter(
+    /* v8 ignore next -- id comes from `ids`, inDeg seeded for every id above */
+    (id) => (inDeg.get(id) ?? 0) === 0);
+    const visited = new Set();
+    // in-degrees are consumed in-place as the frontier advances (map is
+    // function-local, safe)
+    while (frontier.length > 0) {
+        const layer = [...frontier];
+        for (const id of layer)
+            visited.add(id);
+        layers.push(layer);
+        const next = [];
+        for (const id of frontier) {
+            // `id` is a known node id, `n` an out-neighbour of a known id — both
+            // adj and inDeg are seeded for every id, so the fallbacks never fire.
+            /* v8 ignore next -- adj seeded for every id; fallback unreachable */
+            for (const n of adj.get(id) ?? []) {
+                /* v8 ignore next -- inDeg seeded for every id; fallback unreachable */
+                const remaining = (inDeg.get(n) ?? 0) - 1;
+                inDeg.set(n, remaining);
+                if (remaining === 0)
+                    next.push(n);
+            }
+        }
+        frontier = next;
+    }
+    const unreachable = ids.filter((id) => !visited.has(id));
+    return { layers, cycle: unreachable.length > 0, unreachable };
+}
+/** Convenience predicate. Equivalent to `topoLayers(...).cycle`. */
+export function detectCycle(nodes, edges) {
+    return topoLayers(nodes, edges).cycle;
+}
+//# sourceMappingURL=dag.js.map

package/dist/modules/apimapper/render/dag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag.js","sourceRoot":"","sources":["../../../../src/modules/apimapper/render/dag.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,YAAY;AACZ,EAAE;AACF,4EAA4E;AAC5E,sEAAsE;AACtE,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,sEAAsE;AAmBtE,MAAM,UAAU,UAAU,CAAC,KAAgB,EAAE,KAAgB;IAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjB,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,SAAS;QAC3D,sEAAsE;QACtE,4CAA4C;QAC5C,KAAK,CAAC,GAAG,CACP,CAAC,CAAC,MAAM;QACR,iFAAiF;QACjF,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAC/B,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,QAAQ,GAAG,GAAG,CAAC,MAAM;IACvB,4EAA4E;IAC5E,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CACnC,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,oEAAoE;IACpE,wBAAwB;IACxB,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC5B,KAAK,MAAM,EAAE,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,qEAAqE;YACrE,sEAAsE;YACtE,qEAAqE;YACrE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClC,uEAAuE;gBACvE,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC1C,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBACxB,IAAI,SAAS,KAAK,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC;AAChE,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,KAAgB,EAAE,KAAgB;IAC5D,OAAO,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC;AACxC,CAAC"}

package/dist/modules/apimapper/render/index.d.ts

@@ -0,0 +1,2 @@
+import type { ToolRegistrar } from "../gateway/capturing-server.js";
+export declare function registerRenderTool(server: ToolRegistrar): void;

package/dist/modules/apimapper/render/index.js

@@ -0,0 +1,112 @@
+import { z } from "zod";
+import { formatResult, readOnly } from "@getimo/mcp-toolkit";
+import { RENDER_TYPES, dispatchRenderer } from "./schemas.js";
+import { capRendered, hintFor, HARD_CAP, RESERVE } from "./token-cap.js";
+// Per-type recovery hint for the handler's catch-all error envelope.
+// Sibling tools (flows.ts, graph.ts) attach a `hint` so the agent knows
+// what shape to pass / which tool to fetch with — this gives apimapper_render
+// the same affordance when a renderer's Zod schema rejects the payload.
+const RENDER_ERROR_HINTS = {
+    table: "type:'table' expects an array of objects — fetch with " +
+        "apimapper_connection_data or apimapper_graph_preview.",
+    "chart-bar": "type:'chart-bar' expects { labels: string[], values: number[] } of equal length.",
+    "chart-line": "type:'chart-line' expects { labels: string[], values: number[] } of equal length.",
+    "schema-diagram": "type:'schema-diagram' expects a schema profile with fields[] — " +
+        "fetch with apimapper_schema_profile.",
+    "flow-diagram": "type:'flow-diagram' expects a flow object with nodes[]+edges[] — " +
+        "fetch with apimapper_flow_get.",
+    "json-tree": "type:'json-tree' accepts any JSON value — pass the fetched payload directly.",
+    diff: "type:'diff' expects { old, new } — fetch both datasets first " +
+        "(e.g. two apimapper_schema_profile calls).",
+};
+// MCP CallToolResult outer guard. DERIVED from token-cap.ts's HARD_CAP +
+// RESERVE so the relationship is compiler-enforced — bumping HARD_CAP in
+// token-cap.ts automatically widens this guard, no hand-audit needed.
+// The extra +500 is belt-and-suspenders slack: capRendered already bounds
+// the byte budget to (HARD_CAP - RESERVE) of content plus a short footer,
+// so HARD_CAP + RESERVE already covers it; the +500 absorbs any future
+// footer-wording growth without re-touching this call-site.
+const TOOL_RESULT_MAX_CHARS = HARD_CAP + RESERVE + 500;
+export function registerRenderTool(server) {
+    server.registerTool("apimapper_render", {
+        title: "Render Data",
+        description: 
+        // F-LS-08a (W3.1 Stage 3): imperative trigger opener. Live-smoke
+        // (2026-05-20) showed callers composing ASCII tables in their own
+        // response when the user said "show as a table" instead of calling
+        // apimapper_render. Stating the trigger keywords up-front + the
+        // "prefer this over manually composing ASCII art" nudge (carefully
+        // avoiding the baseline-not-ceiling exclusion pin — see render-
+        // dispatcher.test.ts) routes the LLM to this tool.
+        "USE THIS when the user asks to 'visualize', 'show as diagram', " +
+            "'render', 'draw', or 'display as a table/chart/flow' — produces " +
+            "deterministic, pre-formatted text output (tables, flow-diagrams, " +
+            "charts, schema-trees, json-tree, diffs). " +
+            "Prefer this over manually composing ASCII art in your response: " +
+            "the output is drift-free and consistent across renders.\n\n" +
+            "Render data as a ready-to-display text visualization (tables, " +
+            "diagrams, trees, charts, diffs). Returns text the user can read " +
+            "directly in any MCP client.\n\n" +
+            "Prerequisite: fetch the data first with the appropriate source tool, " +
+            "then pass the result as 'data':\n" +
+            "  - type:'table' | 'chart-bar' | 'chart-line' | 'json-tree'\n" +
+            "      → use apimapper_connection_data / apimapper_graph_preview /\n" +
+            "        apimapper_flow_trace first\n" +
+            "  - type:'flow-diagram' → use apimapper_flow_get first; pass the flow object\n" +
+            "  - type:'schema-diagram' → use apimapper_schema_profile first\n" +
+            "  - type:'diff' → fetch both datasets, pass as { old: ..., new: ... }\n\n" +
+            "Pure function: deterministic, no network, no side-effects. The " +
+            "returned text is ready to show as-is. You are also free to enrich " +
+            "it however your client allows — artifacts, inline images, " +
+            "diagram-markdown, charts — whatever renders best for the user.\n\n" +
+            "Example:\n  apimapper_render({ type: 'flow-diagram', data: flowObject })",
+        inputSchema: {
+            type: z.enum(RENDER_TYPES).describe("Visualization type"),
+            data: z.unknown().describe("Data to render. Shape depends on type — see description."),
+            options: z.object({
+                title: z.string().max(200).optional()
+                    .describe("Optional title shown above the visualization"),
+                max_rows: z.number().int().min(1).max(500).default(50).optional()
+                    .describe("Cap rows/items (table, json-tree). Default 50."),
+                columns: z.array(z.string()).max(20).optional()
+                    .describe("Field whitelist for table. Default: auto-detect."),
+                depth: z.number().int().min(1).max(8).default(3).optional()
+                    .describe("Depth cap for json-tree. Default 3."),
+                mask_secrets: z.boolean().default(true).optional()
+                    .describe("Mask values for sensitive field names in diff. Default true."),
+            }).optional(),
+        },
+        annotations: readOnly({
+            title: "Render Data",
+            openWorld: false,
+        }),
+    }, async ({ type, data, options }) => {
+        // `data` is z.unknown() at the tool boundary — per-type validation
+        // happens inside dispatchRenderer via each renderer's inner Zod schema.
+        // This keeps the MCP tool surface a flat object (no discriminatedUnion
+        // in inputSchema) while still enforcing strict shape per type.
+        try {
+            const text = dispatchRenderer(type, data, options ?? {});
+            const capped = capRendered(text, hintFor(type));
+            return formatResult(capped, false, { maxChars: TOOL_RESULT_MAX_CHARS });
+        }
+        catch (err) {
+            // Renderers reject bad input by throwing a ZodError (a subclass of
+            // Error), so `err` is always an Error here. The string fallback arm
+            // is unreachable defensive code against a non-Error throw.
+            /* v8 ignore next 3 -- renderers always throw Error (ZodError); false arm dead */
+            const msg = err instanceof Error ? err.message : "Render failed";
+            // Defense (A5-04): cap the echoed error message. A renderer's Zod
+            // error can quote large fragments of the rejected `data` payload —
+            // capping at 500 chars avoids echoing oversized or sensitive input
+            // back into the error envelope.
+            const safeMsg = msg.length > 500 ? msg.slice(0, 500) + "…" : msg;
+            // Attach a per-type recovery hint — same affordance the flows.ts /
+            // graph.ts error envelopes provide. `type` is already validated
+            // against RENDER_TYPES at the tool boundary, so the lookup always
+            // resolves.
+            return formatResult({ error: safeMsg, type, hint: RENDER_ERROR_HINTS[type] }, true);
+        }
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/modules/apimapper/render/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/apimapper/render/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAmB,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzE,qEAAqE;AACrE,wEAAwE;AACxE,8EAA8E;AAC9E,wEAAwE;AACxE,MAAM,kBAAkB,GAA+B;IACrD,KAAK,EACH,wDAAwD;QACxD,uDAAuD;IACzD,WAAW,EACT,kFAAkF;IACpF,YAAY,EACV,mFAAmF;IACrF,gBAAgB,EACd,iEAAiE;QACjE,sCAAsC;IACxC,cAAc,EACZ,mEAAmE;QACnE,gCAAgC;IAClC,WAAW,EACT,8EAA8E;IAChF,IAAI,EACF,+DAA+D;QAC/D,4CAA4C;CAC/C,CAAC;AAEF,yEAAyE;AACzE,yEAAyE;AACzE,sEAAsE;AACtE,0EAA0E;AAC1E,0EAA0E;AAC1E,uEAAuE;AACvE,4DAA4D;AAC5D,MAAM,qBAAqB,GAAG,QAAQ,GAAG,OAAO,GAAG,GAAG,CAAC;AAEvD,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,aAAa;QACpB,WAAW;QACT,iEAAiE;QACjE,kEAAkE;QAClE,mEAAmE;QACnE,gEAAgE;QAChE,mEAAmE;QACnE,gEAAgE;QAChE,mDAAmD;QACnD,iEAAiE;YACjE,kEAAkE;YAClE,mEAAmE;YACnE,2CAA2C;YAC3C,kEAAkE;YAClE,6DAA6D;YAC7D,gEAAgE;YAChE,kEAAkE;YAClE,iCAAiC;YACjC,uEAAuE;YACvE,mCAAmC;YACnC,+DAA+D;YAC/D,qEAAqE;YACrE,sCAAsC;YACtC,gFAAgF;YAChF,kEAAkE;YAClE,2EAA2E;YAC3E,iEAAiE;YACjE,oEAAoE;YACpE,4DAA4D;YAC5D,oEAAoE;YACpE,0EAA0E;QAC5E,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACzD,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CACxB,0DAA0D,CAC3D;YACD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;gBAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;qBAClC,QAAQ,CAAC,8CAA8C,CAAC;gBAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;qBAC9D,QAAQ,CAAC,gDAAgD,CAAC;gBAC7D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;qBAC5C,QAAQ,CAAC,kDAAkD,CAAC;gBAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;qBACxD,QAAQ,CAAC,qCAAqC,CAAC;gBAClD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;qBAC/C,QAAQ,CAAC,8DAA8D,CAAC;aAC5E,CAAC,CAAC,QAAQ,EAAE;SACd;QACD,WAAW,EAAE,QAAQ,CAAC;YACpB,KAAK,EAAE,aAAa;YACpB,SAAS,EAAE,KAAK;SACjB,CAAC;KACH,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QAChC,mEAAmE;QACnE,wEAAwE;QACxE,uEAAuE;QACvE,+DAA+D;QAC/D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAChD,OAAO,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,oEAAoE;YACpE,2DAA2D;YAC3D,iFAAiF;YACjF,MAAM,GAAG,GACP,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACvD,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,gCAAgC;YAChC,MAAM,OAAO,GACX,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACnD,mEAAmE;YACnE,gEAAgE;YAChE,kEAAkE;YAClE,YAAY;YACZ,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,EACxD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/modules/apimapper/render/renderers/chart-bar.d.ts

@@ -0,0 +1,2 @@
+import type { RenderOptions } from "../schemas.js";
+export declare function renderChartBar(input: unknown, options: RenderOptions): string;

package/dist/modules/apimapper/render/renderers/chart-bar.js

@@ -0,0 +1,70 @@
+// renderers/chart-bar.ts — labels+values → horizontal `█` bar chart.
+//
+// Input is a parallel `{ labels, values }` pair (same length, enforced by a
+// Zod refine). Each row is "<label> │ <bar>  <value>" where the bar is a run
+// of full-block characters scaled so the largest value fills BAR_WIDTH.
+//
+// Layout invariant: every label is right-padded to the widest label's
+// grapheme width so the " │ " separators line up across all rows. The bar
+// itself is right-padded too, so the value column stays aligned even when
+// shorter bars leave trailing space.
+import { z } from "zod";
+import { padRight, graphemeLength } from "../_shared.js";
+const ChartBarSchema = z
+    .object({
+    labels: z
+        .array(z.string())
+        .min(1)
+        .max(20)
+        .describe("Bar labels — parallel to values, same length (1-20)."),
+    values: z
+        .array(z.number())
+        .min(1)
+        .max(20)
+        .describe("Numeric bar values — parallel to labels, same length."),
+    unit: z.string().max(20).optional(),
+    title: z.string().max(200).optional(),
+})
+    .refine((d) => d.labels.length === d.values.length, {
+    message: "labels and values must have the same length",
+});
+/**
+ * Width (in `█` chars) of a bar representing the maximum value.
+ * Independent of chart-line's MIN_RULE_WIDTH — coincidental equal value.
+ */
+const BAR_WIDTH = 40;
+/** Minimum label-column width so very short labels still read as a column. */
+const MIN_LABEL_WIDTH = 5;
+/**
+ * Extra rule width beyond `labelWidth + BAR_WIDTH`: accounts for the
+ * " │ " separator (3) + the two-space gap before the value (2) + slack
+ * for the value column itself, so the rule spans the whole row.
+ */
+const RULE_SLACK = 10;
+export function renderChartBar(input, options) {
+    const { labels, values, unit, title } = ChartBarSchema.parse(input);
+    // `Math.max(..., 1)` guards an all-zero dataset against a 0/0 division.
+    const max = Math.max(...values, 1);
+    const labelWidth = Math.max(...labels.map(graphemeLength), MIN_LABEL_WIDTH);
+    const lines = [];
+    // `options.title` wins over an inline `title` field; both are optional.
+    const heading = options.title ?? title;
+    if (heading)
+        lines.push(heading);
+    lines.push("─".repeat(labelWidth + BAR_WIDTH + RULE_SLACK));
+    labels.forEach((label, i) => {
+        const value = values[i];
+        const barLen = Math.floor((value / max) * BAR_WIDTH);
+        const bar = "█".repeat(barLen);
+        const valueStr = unit ? `${value} ${unit}` : String(value);
+        lines.push(padRight(label, labelWidth) +
+            " │ " +
+            padRight(bar, BAR_WIDTH) +
+            "  " +
+            valueStr);
+    });
+    lines.push("─".repeat(labelWidth + BAR_WIDTH + RULE_SLACK));
+    lines.push(`${labels.length} series • max=${max}`);
+    return lines.join("\n");
+}
+//# sourceMappingURL=chart-bar.js.map

package/dist/modules/apimapper/render/renderers/chart-bar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chart-bar.js","sourceRoot":"","sources":["../../../../../src/modules/apimapper/render/renderers/chart-bar.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,EAAE;AACF,sEAAsE;AACtE,0EAA0E;AAC1E,0EAA0E;AAC1E,qCAAqC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEzD,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CAAC,sDAAsD,CAAC;IACnE,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CAAC,uDAAuD,CAAC;IACpE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE;IAClD,OAAO,EAAE,6CAA6C;CACvD,CAAC,CAAC;AAEL;;;GAGG;AACH,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,8EAA8E;AAC9E,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B;;;;GAIG;AACH,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,OAAsB;IACnE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAEpE,wEAAwE;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,eAAe,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,wEAAwE;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC;IAE5D,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CACR,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;YACzB,KAAK;YACL,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;YACxB,IAAI;YACJ,QAAQ,CACX,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/modules/apimapper/render/renderers/chart-line.d.ts

@@ -0,0 +1,2 @@
+import type { RenderOptions } from "../schemas.js";
+export declare function renderChartLine(input: unknown, options: RenderOptions): string;

package/dist/modules/apimapper/render/renderers/chart-line.js

@@ -0,0 +1,71 @@
+// renderers/chart-line.ts — labels+values → single-row sparkline.
+//
+// Input is a parallel `{ labels, values }` pair (same length, enforced by a
+// Zod refine, up to 64 points). Each value is mapped onto one of eight
+// block-element characters ▁▂▃▄▅▆▇█ scaled across the [min, max] range, and
+// the chars are concatenated into a one-line dense curve.
+//
+// CRITICAL flat-line guard: when every value is equal, `max - min === 0`.
+// `range || 1` substitutes 1 so the division never produces NaN/Infinity —
+// a flat series collapses to a repeated bottom block, which is correct.
+//
+// The block-element chars are plain Unicode (U+2581..U+2588), not Braille;
+// they render at a fixed single-cell width in every terminal and MCP client.
+import { z } from "zod";
+const ChartLineSchema = z
+    .object({
+    labels: z
+        .array(z.string())
+        .min(1)
+        .max(64)
+        .describe("Point labels — parallel to values, same length (1-64)."),
+    values: z
+        .array(z.number())
+        .min(1)
+        .max(64)
+        .describe("Numeric point values — parallel to labels, same length."),
+    unit: z.string().max(20).optional(),
+    title: z.string().max(200).optional(),
+})
+    .refine((d) => d.labels.length === d.values.length, {
+    message: "labels and values must have the same length",
+});
+/** Block-element ramp from lowest (▁) to highest (█). */
+const SPARK_CHARS = ["▁", "▂", "▃", "▄", "▅", "▆", "▇", "█"];
+/**
+ * Minimum width of the horizontal rules above and below the sparkline.
+ * Independent of chart-bar's BAR_WIDTH — coincidental equal value.
+ */
+const MIN_RULE_WIDTH = 40;
+export function renderChartLine(input, options) {
+    const { labels, values, unit, title } = ChartLineSchema.parse(input);
+    const min = Math.min(...values);
+    const max = Math.max(...values);
+    // Flat-line guard: a zero range would make every (v-min)/range a 0/0 → NaN.
+    const range = max - min || 1;
+    const sparkline = values
+        .map((v) => {
+        // Clamp the index into [0, 7] — `(v-min)/range` is in [0,1], and
+        // exactly 1 would otherwise index SPARK_CHARS.length (out of bounds).
+        const idx = Math.min(SPARK_CHARS.length - 1, Math.floor(((v - min) / range) * SPARK_CHARS.length));
+        return SPARK_CHARS[idx];
+    })
+        .join("");
+    const ruleWidth = Math.max(MIN_RULE_WIDTH, sparkline.length + 4);
+    const unitSuffix = unit ? ` ${unit}` : "";
+    const lines = [];
+    const heading = options.title ?? title;
+    if (heading)
+        lines.push(heading);
+    lines.push("─".repeat(ruleWidth));
+    lines.push("  " + sparkline);
+    // Axis: min label left-aligned, max label right-aligned under the curve.
+    const minLabel = `${min}${unitSuffix}`;
+    const maxLabel = `${max}${unitSuffix}`;
+    const axisGap = Math.max(1, sparkline.length - minLabel.length - maxLabel.length);
+    lines.push("  " + minLabel + " ".repeat(axisGap) + maxLabel);
+    lines.push("─".repeat(ruleWidth));
+    lines.push(`${values.length} data points • range ${min}-${max}${unitSuffix}`);
+    return lines.join("\n");
+}
+//# sourceMappingURL=chart-line.js.map

package/dist/modules/apimapper/render/renderers/chart-line.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chart-line.js","sourceRoot":"","sources":["../../../../../src/modules/apimapper/render/renderers/chart-line.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,4EAA4E;AAC5E,uEAAuE;AACvE,4EAA4E;AAC5E,0DAA0D;AAC1D,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,wEAAwE;AACxE,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CAAC,wDAAwD,CAAC;IACrE,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CAAC,yDAAyD,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE;IAClD,OAAO,EAAE,6CAA6C;CACvD,CAAC,CAAC;AAEL,yDAAyD;AACzD,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAU,CAAC;AAEtE;;;GAGG;AACH,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,MAAM,UAAU,eAAe,CAC7B,KAAc,EACd,OAAsB;IAEtB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAErE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAChC,4EAA4E;IAC5E,MAAM,KAAK,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC;IAE7B,MAAM,SAAS,GAAG,MAAM;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,iEAAiE;QACjE,sEAAsE;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,WAAW,CAAC,MAAM,GAAG,CAAC,EACtB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CACrD,CAAC;QACF,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IAE7B,yEAAyE;IACzE,MAAM,QAAQ,GAAG,GAAG,GAAG,GAAG,UAAU,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,GAAG,GAAG,UAAU,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACtB,CAAC,EACD,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CACrD,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAE7D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,GAAG,UAAU,EAAE,CAClE,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/modules/apimapper/render/renderers/diff.d.ts

@@ -0,0 +1,2 @@
+import type { RenderOptions } from "../schemas.js";
+export declare function renderDiff(input: unknown, options: RenderOptions): string;