glirastes 0.4.0 → 0.5.0

package/dist/codegen/tools/files.d.ts

@@ -0,0 +1,195 @@
+import { z } from 'zod';
+import type { ToolContract, ToolContractsEntry } from './types.js';
+export declare const ToolTombstonesFileSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    appId: z.ZodUUID;
+    tombstones: z.ZodArray<z.ZodObject<{
+        toolId: z.ZodUUID;
+        stableKey: z.ZodString;
+        definitionId: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/**
+ * URL parameters one `ui.filter.<view>` tool takes. The `url-filters` source
+ * keeps the first ones in code-unit order and reports the rest
+ * (`filter-keys-capped`), so refresh never writes a file this schema rejects.
+ */
+export declare const MAX_FILTER_KEYS = 50;
+export declare const ToolContractSchema: z.ZodObject<{
+    source: z.ZodEnum<{
+        openapi: "openapi";
+        native: "native";
+        "contract-module": "contract-module";
+        "legacy-ai-tool": "legacy-ai-tool";
+        resolution: "resolution";
+        derived: "derived";
+        "ui-bridge": "ui-bridge";
+    }>;
+    loadBearing: z.ZodBoolean;
+    input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    output: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    params: z.ZodObject<{
+        path: z.ZodArray<z.ZodString>;
+        query: z.ZodArray<z.ZodString>;
+        body: z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"opaque">]>;
+    }, z.core.$strict>;
+    interfaceDigest: z.ZodString;
+    runtime: z.ZodObject<{
+        input: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"module-export">;
+            module: z.ZodString;
+            export: z.ZodString;
+            property: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"json">;
+            schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strict>], "kind">;
+        output: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"module-export">;
+            module: z.ZodString;
+            export: z.ZodString;
+            property: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"json">;
+            schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strict>], "kind">;
+    }, z.core.$strict>;
+    binding: z.ZodOptional<z.ZodObject<{
+        interfaceDigest: z.ZodString;
+        contractModuleDigest: z.ZodString;
+    }, z.core.$strict>>;
+    uiAction: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"navigate">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"filter">;
+        destination: z.ZodString;
+        keys: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            array: z.ZodOptional<z.ZodEnum<{
+                repeat: "repeat";
+                comma: "comma";
+            }>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"client-action">;
+        actionId: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+}, z.core.$strict>;
+/** One name an app's MCP server keeps for an endpoint tool: the grant id and the MCP tool name. */
+export declare const McpToolNameSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+}, z.core.$strict>;
+/**
+ * `.glirastes/mcp-tool-names.json` (spec 5.2, MCP only): per endpoint tool the
+ * names and grant ids the app's MCP clients know. Two names may share a
+ * route; every id and every name is used once.
+ */
+export declare const McpToolNamesFileSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    tools: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export declare const ToolContractsFileSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    appId: z.ZodUUID;
+    tools: z.ZodArray<z.ZodObject<{
+        toolId: z.ZodUUID;
+        stableKey: z.ZodString;
+        definitionId: z.ZodString;
+        contract: z.ZodNullable<z.ZodObject<{
+            source: z.ZodEnum<{
+                openapi: "openapi";
+                native: "native";
+                "contract-module": "contract-module";
+                "legacy-ai-tool": "legacy-ai-tool";
+                resolution: "resolution";
+                derived: "derived";
+                "ui-bridge": "ui-bridge";
+            }>;
+            loadBearing: z.ZodBoolean;
+            input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            output: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            params: z.ZodObject<{
+                path: z.ZodArray<z.ZodString>;
+                query: z.ZodArray<z.ZodString>;
+                body: z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"opaque">]>;
+            }, z.core.$strict>;
+            interfaceDigest: z.ZodString;
+            runtime: z.ZodObject<{
+                input: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"module-export">;
+                    module: z.ZodString;
+                    export: z.ZodString;
+                    property: z.ZodArray<z.ZodString>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"json">;
+                    schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+                }, z.core.$strict>], "kind">;
+                output: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"module-export">;
+                    module: z.ZodString;
+                    export: z.ZodString;
+                    property: z.ZodArray<z.ZodString>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"json">;
+                    schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+                }, z.core.$strict>], "kind">;
+            }, z.core.$strict>;
+            binding: z.ZodOptional<z.ZodObject<{
+                interfaceDigest: z.ZodString;
+                contractModuleDigest: z.ZodString;
+            }, z.core.$strict>>;
+            uiAction: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"navigate">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"filter">;
+                destination: z.ZodString;
+                keys: z.ZodArray<z.ZodObject<{
+                    key: z.ZodString;
+                    array: z.ZodOptional<z.ZodEnum<{
+                        repeat: "repeat";
+                        comma: "comma";
+                    }>>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"client-action">;
+                actionId: z.ZodString;
+            }, z.core.$strict>], "kind">>;
+        }, z.core.$strict>>;
+        defaults: z.ZodObject<{
+            operationGroup: z.ZodEnum<{
+                create: "create";
+                delete: "delete";
+                ui: "ui";
+                read: "read";
+                update: "update";
+            }>;
+            riskClass: z.ZodEnum<{
+                "safe-read": "safe-read";
+                "read-sensitive": "read-sensitive";
+                write: "write";
+                delete: "delete";
+                financial: "financial";
+                external: "external";
+            }>;
+            requiresApproval: z.ZodBoolean;
+            rulesVersion: z.ZodLiteral<1>;
+        }, z.core.$strict>;
+        search: z.ZodOptional<z.ZodObject<{
+            synonyms: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            examples: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        mcp: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodString;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ToolTombstonesFile = z.infer<typeof ToolTombstonesFileSchema>;
+export type ToolContractsFile = z.infer<typeof ToolContractsFileSchema>;
+/** Compile-time proof that the file schemas produce the shared interface types. */
+export declare function toToolContract(contract: z.infer<typeof ToolContractSchema>): ToolContract;
+export declare function toToolContractsEntry(entry: ToolContractsFile['tools'][number]): ToolContractsEntry;

package/dist/codegen/tools/files.js

@@ -0,0 +1,119 @@
+import { z } from 'zod';
+import { ToolRiskClassSchema } from '../../contracts/index.js';
+import { TOOL_POLICY_RULES_VERSION } from '../../contracts/tool-policy.js';
+import { ExecutionGenerationStateSchema } from '../inventory-generation.js';
+const digest = z.string().regex(/^sha256:[A-Za-z0-9_-]{43}$/);
+const JsonObjectSchema = z.record(z.string(), z.unknown());
+export const ToolTombstonesFileSchema = z.object({
+    schemaVersion: z.literal(1),
+    appId: z.uuid(),
+    tombstones: ExecutionGenerationStateSchema.shape.tombstones,
+}).strict();
+const RuntimeSchemaSourceSchema = z.discriminatedUnion('kind', [
+    z.object({
+        kind: z.literal('module-export'),
+        module: z.string().min(1).max(512),
+        export: z.string().min(1).max(200),
+        property: z.array(z.string().min(1).max(200)).max(8),
+    }).strict(),
+    z.object({ kind: z.literal('json'), schema: JsonObjectSchema }).strict(),
+]);
+/**
+ * URL parameters one `ui.filter.<view>` tool takes. The `url-filters` source
+ * keeps the first ones in code-unit order and reports the rest
+ * (`filter-keys-capped`), so refresh never writes a file this schema rejects.
+ */
+export const MAX_FILTER_KEYS = 50;
+const GeneratedUiActionSchema = z.discriminatedUnion('kind', [
+    z.object({ kind: z.literal('navigate') }).strict(),
+    z.object({
+        kind: z.literal('filter'),
+        destination: z.string().min(1).max(2_048),
+        keys: z.array(z.object({
+            key: z.string().min(1).max(64),
+            array: z.enum(['comma', 'repeat']).optional(),
+        }).strict()).max(MAX_FILTER_KEYS),
+    }).strict(),
+    z.object({ kind: z.literal('client-action'), actionId: z.string().min(1).max(200) }).strict(),
+]);
+export const ToolContractSchema = z.object({
+    source: z.enum([
+        'native', 'contract-module', 'legacy-ai-tool', 'resolution', 'openapi', 'derived', 'ui-bridge',
+    ]),
+    loadBearing: z.boolean(),
+    input: JsonObjectSchema,
+    output: JsonObjectSchema.optional(),
+    params: z.object({
+        path: z.array(z.string()),
+        query: z.array(z.string()),
+        body: z.union([z.array(z.string()), z.literal('opaque')]),
+    }).strict(),
+    interfaceDigest: digest,
+    runtime: z.object({
+        input: RuntimeSchemaSourceSchema,
+        output: RuntimeSchemaSourceSchema,
+    }).strict(),
+    binding: z.object({
+        interfaceDigest: digest,
+        contractModuleDigest: digest,
+    }).strict().optional(),
+    uiAction: GeneratedUiActionSchema.optional(),
+}).strict();
+const ToolPolicyDefaultsSchema = z.object({
+    operationGroup: z.enum(['read', 'create', 'update', 'delete', 'ui']),
+    riskClass: ToolRiskClassSchema.exclude(['unknown']),
+    requiresApproval: z.boolean(),
+    rulesVersion: z.literal(TOOL_POLICY_RULES_VERSION),
+}).strict();
+/** Synonyms bounded like the runtime index; examples are 3–5 sentences in each of two languages. */
+const ToolSearchFactsSchema = z.object({
+    synonyms: z.array(z.string().min(1).max(100)).min(1).max(20).optional(),
+    examples: z.array(z.string().min(1).max(200)).min(1).max(10).optional(),
+}).strict();
+/** One name an app's MCP server keeps for an endpoint tool: the grant id and the MCP tool name. */
+export const McpToolNameSchema = z.object({
+    id: z.string().regex(/^[A-Za-z][A-Za-z0-9_.-]{0,199}$/),
+    name: z.string().regex(/^[A-Za-z0-9_-]{1,64}$/),
+}).strict();
+/**
+ * `.glirastes/mcp-tool-names.json` (spec 5.2, MCP only): per endpoint tool the
+ * names and grant ids the app's MCP clients know. Two names may share a
+ * route; every id and every name is used once.
+ */
+export const McpToolNamesFileSchema = z.object({
+    schemaVersion: z.literal(1),
+    tools: z.record(z.string().min(1).max(2_100), z.array(McpToolNameSchema).min(1).max(10)),
+}).strict().superRefine((file, context) => {
+    const seen = { id: new Set(), name: new Set() };
+    for (const [stableKey, names] of Object.entries(file.tools)) {
+        for (const entry of names) {
+            for (const field of ['id', 'name']) {
+                if (seen[field].has(entry[field])) {
+                    context.addIssue({ code: 'custom', path: ['tools', stableKey], message: `The MCP ${field} ${entry[field]} is used twice` });
+                }
+                seen[field].add(entry[field]);
+            }
+        }
+    }
+});
+export const ToolContractsFileSchema = z.object({
+    schemaVersion: z.literal(1),
+    appId: z.uuid(),
+    tools: z.array(z.object({
+        toolId: z.uuid(),
+        stableKey: z.string().min(1).max(2_100),
+        definitionId: z.string().min(1).max(200),
+        contract: ToolContractSchema.nullable(),
+        defaults: ToolPolicyDefaultsSchema,
+        search: ToolSearchFactsSchema.optional(),
+        mcp: z.array(McpToolNameSchema).min(1).max(10).optional(),
+    }).strict()).max(5_000),
+}).strict();
+/** Compile-time proof that the file schemas produce the shared interface types. */
+export function toToolContract(contract) {
+    return contract;
+}
+export function toToolContractsEntry(entry) {
+    return entry;
+}
+//# sourceMappingURL=files.js.map

package/dist/codegen/tools/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../src/codegen/tools/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAG5E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAC9D,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,UAAU,EAAE,8BAA8B,CAAC,KAAK,CAAC,UAAU;CAC5D,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,yBAAyB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;KACrD,CAAC,CAAC,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;CACzE,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAElC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAClD,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QACzC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;SAC9C,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;KAClC,CAAC,CAAC,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CAC9F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;QACb,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW;KAC/F,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,KAAK,EAAE,gBAAgB;IACvB,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;KAC1D,CAAC,CAAC,MAAM,EAAE;IACX,eAAe,EAAE,MAAM;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE,yBAAyB;KAClC,CAAC,CAAC,MAAM,EAAE;IACX,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,eAAe,EAAE,MAAM;QACvB,oBAAoB,EAAE,MAAM;KAC7B,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtB,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACpE,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC;IACnD,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,oGAAoG;AACpG,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,mGAAmG;AACnG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC;IACvD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;CAChD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;CACzF,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;IACxC,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,GAAG,EAAU,EAAE,IAAI,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;IAChE,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,MAAM,CAAU,EAAE,CAAC;gBAC5C,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAClC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,WAAW,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBAC9H,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;QAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QACvC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACxC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;QACvC,QAAQ,EAAE,wBAAwB;QAClC,MAAM,EAAE,qBAAqB,CAAC,QAAQ,EAAE;QACxC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC1D,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CACxB,CAAC,CAAC,MAAM,EAAE,CAAC;AAKZ,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,QAA4C;IACzE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAyC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/codegen/tools/findings.d.ts

@@ -0,0 +1,7 @@
+import type { ToolFinding, ToolFindingSeverity } from './types.js';
+/** Findings that describe a change relative to the previous state; never written to outputs. */
+export declare const TRANSIENT_FINDING_CODES: ReadonlySet<string>;
+/** `reason` only refines `E-POLICY-002`; every other code ignores it. */
+export declare function nextActionFor(code: string, reason?: string): string;
+export declare function toolFinding(code: string, severity: ToolFindingSeverity, subjectRef: string, message: string, reason?: string): ToolFinding;
+export declare function sortFindings(findings: ReadonlyArray<ToolFinding>): ToolFinding[];

package/dist/codegen/tools/findings.js

@@ -0,0 +1,106 @@
+import { compareCodeUnits } from './canonical.js';
+import { MAX_FILTER_KEYS } from './files.js';
+const NEXT_ACTIONS = {
+    'input-contract-unresolved': 'Validate the request with an exported Zod schema, add a sibling contract.ts, or add a .glirastes/tool-resolutions.json entry, then run glirastes tools refresh.',
+    'input-role-unclear': 'Parse request.json(), the search params or params directly with the exported schema, or declare your reader in tool-resolutions.json conventions.',
+    'input-role-unsupported': 'Send write parameters in the body and read parameters in the query string, or describe the tool in tool-resolutions.json.',
+    'parameter-collision': 'Rename the path, query or body parameter so every name has exactly one role.',
+    'schema-not-exported': 'Export the schema from an app module (for Next.js a sibling contract.ts) and import it in the handler.',
+    'schema-module-unloadable': 'Make the schema module importable without side effects: no database, network or secrets at import time.',
+    'schema-content-rejected': 'Remove secret-looking values (defaults, consts, descriptions, hints) from the schema or contract metadata; secrets must never reach committed outputs.',
+    'input-schema-not-object': 'Give the tool an object input schema (one object with optional fields, or one field that holds the variants); an internal route can be excluded by the developer instead (glirastes tools policy exclude).',
+    'mcp-tool-names-invalid': 'Fix .glirastes/mcp-tool-names.json: per endpoint stable key a list of { id, name }, every id and MCP name (letters, digits, _ and -, at most 64) used once, and not already used by another tool under its generated id or name; MCP clients see the generated names meanwhile.',
+    'contract-effect-invalid': 'Use one of read, write, destructive, external or financial as the effect in contract.ts, then run glirastes tools refresh.',
+    'contract-presentation-invalid': 'Fix the presentation in contract.ts (locale, singular, plural and approval text, no other keys), then run glirastes tools refresh.',
+    'schema-json-unavailable': 'Use zod v4 or install zod-to-json-schema so the schema can be described as JSON Schema.',
+    'auth-evidence-missing': 'Call your session helper in the handler or list it in tool-resolutions.json conventions.authHelpers. For an OpenAPI export: declare the security scheme on the operation (FastAPI: a Security dependency such as APIKeyCookie or HTTPBearer).',
+    'route-hidden': 'Nothing to do while the route must stay out of the chat. Otherwise remove include_in_schema=False, export the OpenAPI document again and run glirastes tools refresh.',
+    'schema-reference-unresolved': 'Optional: replace the recursive or external $ref by an inline schema so the model sees the shape; the server keeps validating meanwhile.',
+    'contract-stale': 'Update the descriptive contract for the changed interface, then run glirastes tools refresh.',
+    'handler-unresolved': 'Export the handler as a function or as a wrapper call around an inline function.',
+    'contract-derived': 'Optional: validate the input with an exported Zod schema to give the model typed parameters.',
+    'description-templated': 'Optional: add a JSDoc comment to the handler or a description in tool-semantics.json.',
+    'output-contract-opaque': 'Optional: return a typed object or validate the response with an exported schema.',
+    'resolution-rejected': 'Fix or remove the tool-resolutions.json or tool-semantics.json entry the message names; the tool keeps its fallback meanwhile.',
+    'enrichment-stale': 'Optional: describe the changed tool again (glirastes tools describe --print <tool>); it uses the contract derived from code meanwhile.',
+    'semantics-stale': 'Optional: describe the changed tool again (glirastes tools describe --print <tool>); the earlier agent description stays in use meanwhile.',
+    'definition-id-invalid': 'Use a contract id like resource.action (letters and digits, dot-separated).',
+    'definition-id-conflict': 'Give one of the tools a distinct contract id.',
+    'tool-semantics-invalid': 'Fix .glirastes/tool-semantics.json; descriptions fall back to code and templates meanwhile.',
+    'prompt-bundle-missing': 'Create .glirastes/prompt-bundle.json for this app (glirastes init sets it up).',
+    'prompt-bundle-invalid': 'Fix .glirastes/prompt-bundle.json: it must match its schema and this appId.',
+    'generation-state-invalid': 'Restore the generated .glirastes file from git, or resolve its merge by keeping both sides, then rerun refresh.',
+    'route-declared-twice': 'Declare the route in one controller only (or rename one path), then run glirastes tools refresh; to keep it out of the chat instead, glirastes tools policy exclude "<METHOD> <path>". Every other tool is generated meanwhile.',
+    'E-INVENTORY-010': 'Resolve the duplicate tool identity reported above, then rerun glirastes tools refresh.',
+    'E-INVENTORY-011': 'Replace export * in route files and fix unreadable or linked sources so every route, page and UI action can be enumerated.',
+    'E-POLICY-001': 'Fix .glirastes/tool-policy.json so it matches its schema; policy can only restrict what the code allows.',
+    'risk-raised': 'Nothing to do: confirmation is enforced automatically. Review the change in your diff.',
+    'override-lapsed-risk-raised': 'Your relaxation no longer applies at the higher risk; review whether you still need it.',
+    'risk-lower-available': 'After review, record an acceptedRisk entry in .glirastes/tool-policy.json to adopt the lower risk.',
+    'policy-entry-orphaned': 'Remove the entry (glirastes tools policy reset <tool>), restore the tool, or include an excluded route again (glirastes tools policy include <pattern>).',
+    'tool-outputs-drift': 'Run glirastes tools refresh locally and commit .glirastes together with the generated module.',
+    'tool-output-invalid': 'Regenerate the outputs with glirastes tools refresh; never edit generated files.',
+    'generated-output-invalid': 'Nothing was written: the code produced a value past a limit of the generated file (a name, path or list the message names). Shorten or split it in the code, then rerun glirastes tools refresh; if the code is within reason, report it as a Glirastes bug.',
+    'integrity-chain-broken': 'Regenerate the outputs with glirastes tools refresh and commit them; never edit generated files.',
+    'output-path-linked': 'Replace the linked .glirastes or output folder with a real folder inside the app.',
+    'setup-plan-invalid': 'Delete .glirastes/previous-setup-artifact.json left by glirastes setup; git keeps the history.',
+    'navigation-bridge-missing': 'Call useGlirastesNavigationBridge({ push: router.push }) (glirastes/react) or registerNavigationBridge({ push }) (glirastes/browser) in code that is always mounted, then run glirastes tools refresh.',
+    'page-path-duplicated': 'Keep one page per path; navigation uses the first page file in code-unit order.',
+    'filter-domain-open': 'Optional: give the URL parameter a closed domain, e.g. parseAsStringLiteral([...]) or a defineQueryFilters value list.',
+    'filter-domain-conflict': 'Read the URL parameter with one parser on the page and its components.',
+    'filter-parser-unsupported': 'Use parseAsString, parseAsInteger, parseAsFloat, parseAsBoolean, parseAsStringLiteral or parseAsArrayOf for parameters the chat may set.',
+    'filter-path-unrouted': 'Add a route for the path, or correct the path of defineQueryFilters, then run glirastes tools refresh.',
+    'filter-definition-unreadable': 'Write the filter key, path and values as literals so glirastes tools refresh can read them.',
+    'filter-key-reserved': 'Rename the URL parameter; params is reserved for route parameters of the filtered page.',
+    'filter-key-invalid': 'Name the URL parameter with letters, digits, _ or - (starting with a letter or _, at most 64 characters) so the chat can set it; other names are left out of the filter tool.',
+    'filter-keys-capped': `A filter tool takes at most ${MAX_FILTER_KEYS} URL parameters per view, the first in code-unit order. Read fewer URL parameters on the page and the components it renders, or move the others to another page, if the chat must set them.`,
+    'ui-action-payload-untyped': 'Pass a payload contract (e.g. a Zod object) as the third argument of useAiClientAction or registerAiClientAction, or type the handler parameter.',
+    'ui-action-contract-conflict': 'Register the action with one payload contract wherever it is handled.',
+    'ui-action-id-dynamic': 'Register client actions with a literal id so the chat can call them.',
+    'ui-action-id-invalid': 'Use an action id of letters, digits, dots and dashes, e.g. tasks.highlight.',
+    'ui-action-id-reserved': 'Ids starting with glirastes. belong to the SDK; choose another action id.',
+    'ui-control-unbound': 'Add the proposed useAiClientAction (expected.registration) in expected.file, inside the component that owns the state and stays mounted, with imports from glirastes/react and zod; keep the action id. If the chat must not set it, the developer runs glirastes tools policy exclude-control <file>#<setter> --reason <text>.',
+    'ui-control-contract-mismatch': 'Restrict the payload contract of the client action to the values the setter takes, e.g. z.enum of the same const list.',
+    'ui-action-write-unproven': 'If the handler changes data through a helper, a Server Action or a mutation hook, raise the tool: glirastes tools policy raise <tool> write. Otherwise nothing to do.',
+};
+/**
+ * E-POLICY-002 remediation depends on why the relaxation was rejected: an
+ * unpinned tier-2 relaxation can be adopted through a reviewed pin, while a
+ * tier-3 relaxation can never be adopted.
+ */
+const POLICY_RELAXATION_ACTIONS = {
+    'relaxation-requires-reviewed-pin': 'Add a reviewed pin (glirastes tools policy relax … --yes) to adopt the relaxation, or remove it from .glirastes/tool-policy.json.',
+    'tier-3-always-requires-approval': 'Remove the relaxation: delete, financial and external tools always confirm.',
+};
+const POLICY_RELAXATION_FALLBACK = POLICY_RELAXATION_ACTIONS['tier-3-always-requires-approval'];
+/** Findings that describe a change relative to the previous state; never written to outputs. */
+export const TRANSIENT_FINDING_CODES = new Set([
+    'risk-raised',
+    'tool-outputs-drift',
+]);
+const SEVERITY_ORDER = {
+    error: 0,
+    needs_attention: 1,
+    warning: 2,
+};
+function own(table, key) {
+    return Object.hasOwn(table, key) ? table[key] : undefined;
+}
+/** `reason` only refines `E-POLICY-002`; every other code ignores it. */
+export function nextActionFor(code, reason) {
+    if (code === 'E-POLICY-002') {
+        return (reason === undefined ? undefined : own(POLICY_RELAXATION_ACTIONS, reason))
+            ?? POLICY_RELAXATION_FALLBACK;
+    }
+    return own(NEXT_ACTIONS, code) ?? 'Fix the reported code, then run glirastes tools refresh.';
+}
+export function toolFinding(code, severity, subjectRef, message, reason) {
+    return { code, severity, subjectRef, message, nextAction: nextActionFor(code, reason) };
+}
+export function sortFindings(findings) {
+    return [...findings].sort((left, right) => (SEVERITY_ORDER[left.severity] - SEVERITY_ORDER[right.severity]
+        || compareCodeUnits(left.code, right.code)
+        || compareCodeUnits(left.subjectRef, right.subjectRef)
+        || compareCodeUnits(left.message, right.message)));
+}
+//# sourceMappingURL=findings.js.map

package/dist/codegen/tools/findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findings.js","sourceRoot":"","sources":["../../../src/codegen/tools/findings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C,MAAM,YAAY,GAAqC;IACrD,2BAA2B,EAAE,iKAAiK;IAC9L,oBAAoB,EAAE,mJAAmJ;IACzK,wBAAwB,EAAE,2HAA2H;IACrJ,qBAAqB,EAAE,8EAA8E;IACrG,qBAAqB,EAAE,wGAAwG;IAC/H,0BAA0B,EAAE,yGAAyG;IACrI,yBAAyB,EAAE,wJAAwJ;IACnL,yBAAyB,EAAE,4MAA4M;IACvO,wBAAwB,EAAE,iRAAiR;IAC3S,yBAAyB,EAAE,4HAA4H;IACvJ,+BAA+B,EAAE,oIAAoI;IACrK,yBAAyB,EAAE,yFAAyF;IACpH,uBAAuB,EAAE,+OAA+O;IACxQ,cAAc,EAAE,uKAAuK;IACvL,6BAA6B,EAAE,0IAA0I;IACzK,gBAAgB,EAAE,8FAA8F;IAChH,oBAAoB,EAAE,kFAAkF;IACxG,kBAAkB,EAAE,8FAA8F;IAClH,uBAAuB,EAAE,uFAAuF;IAChH,wBAAwB,EAAE,mFAAmF;IAC7G,qBAAqB,EAAE,gIAAgI;IACvJ,kBAAkB,EAAE,wIAAwI;IAC5J,iBAAiB,EAAE,4IAA4I;IAC/J,uBAAuB,EAAE,6EAA6E;IACtG,wBAAwB,EAAE,+CAA+C;IACzE,wBAAwB,EAAE,6FAA6F;IACvH,uBAAuB,EAAE,gFAAgF;IACzG,uBAAuB,EAAE,6EAA6E;IACtG,0BAA0B,EAAE,iHAAiH;IAC7I,sBAAsB,EAAE,iOAAiO;IACzP,iBAAiB,EAAE,yFAAyF;IAC5G,iBAAiB,EAAE,4HAA4H;IAC/I,cAAc,EAAE,0GAA0G;IAC1H,aAAa,EAAE,wFAAwF;IACvG,6BAA6B,EAAE,yFAAyF;IACxH,sBAAsB,EAAE,oGAAoG;IAC5H,uBAAuB,EAAE,0JAA0J;IACnL,oBAAoB,EAAE,+FAA+F;IACrH,qBAAqB,EAAE,kFAAkF;IACzG,0BAA0B,EAAE,8PAA8P;IAC1R,wBAAwB,EAAE,kGAAkG;IAC5H,oBAAoB,EAAE,mFAAmF;IACzG,oBAAoB,EAAE,gGAAgG;IACtH,2BAA2B,EAAE,wMAAwM;IACrO,sBAAsB,EAAE,iFAAiF;IACzG,oBAAoB,EAAE,wHAAwH;IAC9I,wBAAwB,EAAE,wEAAwE;IAClG,2BAA2B,EAAE,0IAA0I;IACvK,sBAAsB,EAAE,wGAAwG;IAChI,8BAA8B,EAAE,6FAA6F;IAC7H,qBAAqB,EAAE,yFAAyF;IAChH,oBAAoB,EAAE,+KAA+K;IACrM,oBAAoB,EAAE,+BAA+B,eAAe,6LAA6L;IACjQ,2BAA2B,EAAE,kJAAkJ;IAC/K,6BAA6B,EAAE,uEAAuE;IACtG,sBAAsB,EAAE,sEAAsE;IAC9F,sBAAsB,EAAE,6EAA6E;IACrG,uBAAuB,EAAE,2EAA2E;IACpG,oBAAoB,EAAE,iUAAiU;IACvV,8BAA8B,EAAE,wHAAwH;IACxJ,0BAA0B,EAAE,uKAAuK;CACpM,CAAC;AAEF;;;;GAIG;AACH,MAAM,yBAAyB,GAAqC;IAClE,kCAAkC,EAAE,mIAAmI;IACvK,iCAAiC,EAAE,6EAA6E;CACjH,CAAC;AACF,MAAM,0BAA0B,GAAG,yBAAyB,CAAC,iCAAiC,CAAE,CAAC;AAEjG,gGAAgG;AAChG,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAClE,aAAa;IACb,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAkD;IACpE,KAAK,EAAE,CAAC;IACR,eAAe,EAAE,CAAC;IAClB,OAAO,EAAE,CAAC;CACX,CAAC;AAEF,SAAS,GAAG,CAAC,KAAuC,EAAE,GAAW;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAe;IACzD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;eAC7E,0BAA0B,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,0DAA0D,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,QAA6B,EAC7B,UAAkB,EAClB,OAAe,EACf,MAAe;IAEf,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAoC;IAC/D,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CACzC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;WAC3D,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;WACvC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;WACnD,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CACjD,CAAC,CAAC;AACL,CAAC"}

package/dist/codegen/tools/handler-analysis.d.ts

@@ -0,0 +1,49 @@
+import ts from 'typescript';
+import type { EndpointMethod } from '../../types.js';
+import { type LocatedHandler } from './handler-locator.js';
+import { type InputRole } from './input-roles.js';
+import type { AppProgram } from './program.js';
+import type { SchemaBindingRef } from './types.js';
+export interface ModuleExportRef {
+    module: string;
+    export: string;
+}
+export interface HandlerWrapperConvention extends ModuleExportRef {
+    inputArg?: number;
+    queryArg?: number;
+    outputArg?: number;
+}
+export interface HandlerConventions {
+    handlerWrappers: ReadonlyArray<HandlerWrapperConvention>;
+    bodyReaders: ReadonlyArray<ModuleExportRef>;
+    authHelpers: ReadonlyArray<string>;
+}
+export type SchemaRole = InputRole | 'output' | 'unclear';
+export interface SchemaUse {
+    role: SchemaRole;
+    via: 'parse' | 'wrapper';
+    binding?: SchemaBindingRef;
+    problem?: 'not-exported';
+}
+export interface HandlerAnalysis {
+    located?: LocatedHandler;
+    schemaUses: SchemaUse[];
+    queryKeys: string[];
+    repeatedQueryKeys: string[];
+    bodyKeys: string[] | 'opaque';
+    readsBody: boolean;
+    normalizedText?: string;
+    responseArguments: ts.Expression[];
+    importedModules: string[];
+}
+export declare function sameModule(left: string, right: string): boolean;
+/** Module and export name of a called function, when it is imported from the app. */
+export declare function resolveCallTarget(app: AppProgram, expression: ts.Expression): ModuleExportRef | undefined;
+export declare function resolveSchemaBinding(app: AppProgram, sourceFile: ts.SourceFile, expression: ts.Expression): Pick<SchemaUse, 'binding' | 'problem'>;
+export declare function isSchemaExpression(app: AppProgram, expression: ts.Expression): boolean;
+export declare function analyzeRouteHandler(input: {
+    app: AppProgram;
+    sourceFile: ts.SourceFile;
+    method: EndpointMethod;
+    conventions: HandlerConventions;
+}): HandlerAnalysis;