mcp4openapi 0.3.1 → 0.3.3

package/dist/src/tool-generator.js

@@ -1,182 +0,0 @@
-/**
- * MCP tool generator from profile definitions
- *
- * Why: Translates profile config into MCP SDK tool definitions. Handles both
- * simple (single operation) and composite (multi-step) tools.
- */
-export class ToolGenerator {
-    constructor(parser) {
-        this.parser = parser;
-    }
-    /**
-     * Generate MCP tool from profile definition
-     */
-    generateTool(toolDef) {
-        const inputSchema = this.generateInputSchema(toolDef);
-        return {
-            name: toolDef.name,
-            description: toolDef.description,
-            inputSchema,
-        };
-    }
-    /**
-     * Generate JSON Schema for tool parameters
-     *
-     * Why JSON Schema: MCP SDK expects JSON Schema for parameter validation.
-     * LLM uses schema to understand what parameters are needed.
-     */
-    generateInputSchema(toolDef) {
-        const properties = {};
-        const required = [];
-        for (const [name, param] of Object.entries(toolDef.parameters)) {
-            properties[name] = this.parameterToJsonSchema(param);
-            // Add to required if unconditionally required
-            if (param.required) {
-                required.push(name);
-            }
-            // Add conditional requirement hints in description
-            if (param.required_for && param.required_for.length > 0) {
-                const existing = properties[name].description || '';
-                properties[name].description = existing +
-                    ` Required when action is: ${param.required_for.join(', ')}.`;
-            }
-        }
-        return {
-            type: 'object',
-            properties,
-            required: required.length > 0 ? required : undefined,
-        };
-    }
-    /**
-     * Convert parameter definition to JSON Schema
-     */
-    parameterToJsonSchema(param) {
-        if (Array.isArray(param.type)) {
-            const oneOf = param.type.map(type => this.parameterTypeToSchema(type, param));
-            return {
-                description: param.description,
-                oneOf,
-            };
-        }
-        const schema = this.parameterTypeToSchema(param.type, param);
-        schema.description = param.description;
-        return schema;
-    }
-    parameterTypeToSchema(type, param) {
-        const schema = { type };
-        if (param.enum) {
-            schema.enum = param.enum;
-        }
-        if (param.default !== undefined) {
-            schema.default = param.default;
-        }
-        if (type === 'array' && param.items) {
-            schema.items = { type: param.items.type };
-        }
-        if (type === 'object') {
-            // Always include properties for object type (empty {} = free-form object)
-            schema.properties = param.properties || {};
-        }
-        return schema;
-    }
-    /**
-     * Validate tool arguments against parameter definitions
-     *
-     * Why manual validation: Checks conditional requirements (required_for)
-     * which JSON Schema can't express directly.
-     */
-    validateArguments(toolDef, args) {
-        for (const [name, param] of Object.entries(toolDef.parameters)) {
-            const value = args[name];
-            // Check unconditional required
-            if (param.required && value === undefined) {
-                throw new Error(`Missing required parameter: ${name}`);
-            }
-            // Check conditional required
-            if (param.required_for && param.required_for.length > 0) {
-                const action = args['action'];
-                if (action && param.required_for.includes(action) && value === undefined) {
-                    throw new Error(`Parameter '${name}' is required for action '${action}'`);
-                }
-            }
-            // Validate enum
-            if (value !== undefined && param.enum && !param.enum.includes(String(value))) {
-                throw new Error(`Invalid value for ${name}. Must be one of: ${param.enum.join(', ')}`);
-            }
-        }
-    }
-    /**
-     * Get operation definition (string or ProxyDownloadOperation) for action
-     *
-     * Why: Tools can have string operationIds OR proxy_download configs.
-     * This returns the raw definition before extracting operationId.
-     */
-    getOperationDefinition(toolDef, args) {
-        if (!toolDef.operations)
-            return undefined;
-        const action = args['action'];
-        if (!action) {
-            // If single operation, use it directly
-            const operations = Object.values(toolDef.operations);
-            return operations.length === 1 ? operations[0] : undefined;
-        }
-        // For resource_type discrimination (e.g., project vs group)
-        const resourceType = args['resource_type'];
-        if (resourceType) {
-            // Try resource-specific operation first
-            const key = `${action}_${resourceType}`;
-            if (toolDef.operations[key]) {
-                return toolDef.operations[key];
-            }
-        }
-        return toolDef.operations[action];
-    }
-    /**
-     * Map tool action to OpenAPI operation ID
-     *
-     * Why: Single tool with 'action' parameter maps to multiple operations.
-     * Example: manage_badges + action=create => postApiV4ProjectsIdBadges
-     *
-     * Note: Returns undefined for ProxyDownloadOperation (not a direct operationId)
-     */
-    mapActionToOperation(toolDef, args) {
-        const op = this.getOperationDefinition(toolDef, args);
-        return typeof op === 'string' ? op : undefined;
-    }
-    /**
-     * Check if operation requires multipart/form-data
-     *
-     * Why: Some operations (file uploads) need FormData instead of JSON body.
-     * Detected from OpenAPI requestBody.content['multipart/form-data'].
-     */
-    isMultipartOperation(operationId) {
-        const operation = this.parser.getOperation(operationId);
-        if (!operation?.requestBody?.content)
-            return false;
-        return 'multipart/form-data' in operation.requestBody.content;
-    }
-    /**
-     * Build FormData body for file upload
-     *
-     * @param args Tool arguments including base64Content or filePath
-     * @param fileFieldName Field name in FormData (default: 'files[0]')
-     */
-    buildFormDataBody(args, fileFieldName = 'files[0]') {
-        const formData = new FormData();
-        const base64Content = args['base64Content'];
-        const fileName = args['fileName'] || 'upload';
-        const mimeType = args['mimeType'] || 'application/octet-stream';
-        if (base64Content) {
-            // Convert base64 to Blob
-            const binaryString = atob(base64Content);
-            const bytes = new Uint8Array(binaryString.length);
-            for (let i = 0; i < binaryString.length; i++) {
-                bytes[i] = binaryString.charCodeAt(i);
-            }
-            const blob = new Blob([bytes], { type: mimeType });
-            formData.append(fileFieldName, blob, fileName);
-        }
-        return formData;
-    }
-}
-//# sourceMappingURL=tool-generator.js.map

package/dist/src/tool-generator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool-generator.js","sourceRoot":"","sources":["../../src/tool-generator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,OAAO,aAAa;IACxB,YAAoB,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAE7C;;OAEG;IACH,YAAY,CAAC,OAAuB;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAEtD,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW;SACZ,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CAAC,OAAuB;QACjD,MAAM,UAAU,GAA4C,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAErD,8CAA8C;YAC9C,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YAED,mDAAmD;YACnD,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;gBACpD,UAAU,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,QAAQ;oBACrC,6BAA6B,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAClE,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACrD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,KAA0B;QACtD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9E,OAAO;gBACL,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK;aACN,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7D,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACvC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,qBAAqB,CAC3B,IAAmB,EACnB,KAA0B;QAE1B,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,CAAC;QAEjD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAC3B,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QACjC,CAAC;QAED,IAAI,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,0EAA0E;YAC1E,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;QAC7C,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,OAAuB,EAAE,IAA6B;QACtE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YAEzB,+BAA+B;YAC/B,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,6BAA6B;YAC7B,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAuB,CAAC;gBACpD,IAAI,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACzE,MAAM,IAAI,KAAK,CACb,cAAc,IAAI,6BAA6B,MAAM,GAAG,CACzD,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,gBAAgB;YAChB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,qBAAqB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,sBAAsB,CAAC,OAAuB,EAAE,IAA6B;QAC3E,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAuB,CAAC;QAEpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,uCAAuC;YACvC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACrD,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,CAAC;QAED,4DAA4D;QAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAuB,CAAC;QAEjE,IAAI,YAAY,EAAE,CAAC;YACjB,wCAAwC;YACxC,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,YAAY,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,oBAAoB,CAAC,OAAuB,EAAE,IAA6B;QACzE,MAAM,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtD,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAAC,WAAmB;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO;YAAE,OAAO,KAAK,CAAC;QACnD,OAAO,qBAAqB,IAAI,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC;IAChE,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,IAA6B,EAAE,aAAa,GAAG,UAAU;QACzE,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QAEhC,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAuB,CAAC;QAClE,MAAM,QAAQ,GAAI,IAAI,CAAC,UAAU,CAAY,IAAI,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAI,IAAI,CAAC,UAAU,CAAY,IAAI,0BAA0B,CAAC;QAE5E,IAAI,aAAa,EAAE,CAAC;YAClB,yBAAyB;YACzB,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7C,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnD,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/src/validation-utils.d.ts

@@ -1,49 +0,0 @@
-/**
- * Validation utilities for common data types
- *
- * Why: Provides reusable validation functions for email, URI, and other formats
- * Centralizes validation logic and ensures consistency across the application
- */
-/**
- * Validates that a property name is safe to use as dynamic object key.
- * Prevents prototype pollution attacks.
- */
-export declare function isSafePropertyName(name: string): boolean;
-/**
- * Escape special regex characters in a string.
- * Prevents ReDoS attacks when using dynamic strings in RegExp.
- */
-export declare function escapeRegExp(str: string): string;
-/**
- * Redact specific header from headers object (case-insensitive)
- */
-export declare function redactHeader(headers: unknown, headerName: string): Record<string, unknown>;
-/**
- * Redact query parameter from URL string
- */
-export declare function redactQueryParam(url: string | undefined, paramName: string): string;
-/**
- * Redact parameter from params object
- */
-export declare function redactParam(params: unknown, paramName: string): Record<string, unknown>;
-/**
- * Validates if a string is a valid email address
- */
-export declare function isEmail(value: string): boolean;
-/**
- * Validates if a string is a valid URI
- */
-export declare function isUri(value: string): boolean;
-/**
- * Escape HTML special characters to prevent XSS attacks
- *
- * Why: User-provided strings in error messages must be sanitized
- * before being returned in JSON responses that might be rendered as HTML.
- *
- * Uses escape-html library for reliable HTML entity escaping.
- *
- * @param str - String to escape (can be undefined or null)
- * @returns Escaped string safe for HTML rendering, empty string if input is falsy
- */
-export declare function escapeHtmlSafe(str: string | undefined | null): string;
-//# sourceMappingURL=validation-utils.d.ts.map

package/dist/src/validation-utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"validation-utils.d.ts","sourceRoot":"","sources":["../../src/validation-utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqBH;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYzB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,SAAS,EAAE,MAAM,GAChB,MAAM,CAiCR;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASzB;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9C;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAO5C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAGrE"}

package/dist/src/validation-utils.js

@@ -1,138 +0,0 @@
-/**
- * Validation utilities for common data types
- *
- * Why: Provides reusable validation functions for email, URI, and other formats
- * Centralizes validation logic and ensures consistency across the application
- */
-import escapeHtml from 'escape-html';
-/** Property names that must never be used as dynamic object keys */
-const FORBIDDEN_PROPERTY_NAMES = new Set([
-    '__proto__',
-    'constructor',
-    'prototype',
-    '__defineGetter__',
-    '__defineSetter__',
-    '__lookupGetter__',
-    '__lookupSetter__',
-    'hasOwnProperty',
-    'isPrototypeOf',
-    'propertyIsEnumerable',
-    'toLocaleString',
-    'toString',
-    'valueOf',
-]);
-/**
- * Validates that a property name is safe to use as dynamic object key.
- * Prevents prototype pollution attacks.
- */
-export function isSafePropertyName(name) {
-    return !FORBIDDEN_PROPERTY_NAMES.has(name);
-}
-/**
- * Escape special regex characters in a string.
- * Prevents ReDoS attacks when using dynamic strings in RegExp.
- */
-export function escapeRegExp(str) {
-    return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-/**
- * Redact specific header from headers object (case-insensitive)
- */
-export function redactHeader(headers, headerName) {
-    if (!headers || typeof headers !== 'object')
-        return {};
-    const redacted = { ...headers };
-    for (const key of Object.keys(redacted)) {
-        if (key.toLowerCase() === headerName.toLowerCase()) {
-            redacted[key] = '[REDACTED]';
-        }
-    }
-    return redacted;
-}
-/**
- * Redact query parameter from URL string
- */
-export function redactQueryParam(url, paramName) {
-    if (!url)
-        return '';
-    // Enforce safe paramName (alphanumeric, underscore, dash) length <= 64
-    if (!/^[A-Za-z0-9_-]{1,64}$/.test(paramName)) {
-        return url; // Unsafe param name; return original unmodified
-    }
-    try {
-        const urlObj = new URL(url);
-        if (urlObj.searchParams.has(paramName)) {
-            urlObj.searchParams.set(paramName, '[REDACTED]');
-        }
-        return urlObj.toString();
-    }
-    catch {
-        // Fallback: manual parsing without dynamic RegExp to avoid ReDoS concerns
-        // Split on '?' then process query string key-value pairs
-        const qIndex = url.indexOf('?');
-        if (qIndex === -1)
-            return url;
-        const base = url.substring(0, qIndex);
-        const query = url.substring(qIndex + 1);
-        const parts = query.split('&');
-        const redactedParts = parts.map(part => {
-            const eqIndex = part.indexOf('=');
-            if (eqIndex === -1)
-                return part; // skip malformed segment
-            const key = part.substring(0, eqIndex);
-            if (key === paramName) {
-                // Encode [REDACTED] for consistency with URLSearchParams behavior
-                return key + '=%5BREDACTED%5D';
-            }
-            return part;
-        });
-        return base + '?' + redactedParts.join('&');
-    }
-}
-/**
- * Redact parameter from params object
- */
-export function redactParam(params, paramName) {
-    if (!params || typeof params !== 'object')
-        return {};
-    const redacted = { ...params };
-    if (paramName in redacted) {
-        redacted[paramName] = '[REDACTED]';
-    }
-    return redacted;
-}
-/**
- * Validates if a string is a valid email address
- */
-export function isEmail(value) {
-    return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value);
-}
-/**
- * Validates if a string is a valid URI
- */
-export function isUri(value) {
-    try {
-        new URL(value);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Escape HTML special characters to prevent XSS attacks
- *
- * Why: User-provided strings in error messages must be sanitized
- * before being returned in JSON responses that might be rendered as HTML.
- *
- * Uses escape-html library for reliable HTML entity escaping.
- *
- * @param str - String to escape (can be undefined or null)
- * @returns Escaped string safe for HTML rendering, empty string if input is falsy
- */
-export function escapeHtmlSafe(str) {
-    if (!str)
-        return '';
-    return escapeHtml(String(str));
-}
-//# sourceMappingURL=validation-utils.js.map

package/dist/src/validation-utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"validation-utils.js","sourceRoot":"","sources":["../../src/validation-utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,UAAU,MAAM,aAAa,CAAC;AAErC,oEAAoE;AACpE,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,WAAW;IACX,aAAa;IACb,WAAW;IACX,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,sBAAsB;IACtB,gBAAgB;IAChB,UAAU;IACV,SAAS;CACV,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAgB,EAChB,UAAkB;IAElB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEvD,MAAM,QAAQ,GAAG,EAAE,GAAI,OAAmC,EAAE,CAAC;IAE7D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YACnD,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAuB,EACvB,SAAiB;IAEjB,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,uEAAuE;IACvE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,OAAO,GAAG,CAAC,CAAC,gDAAgD;IAC9D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,yDAAyD;QACzD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,OAAO,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC,yBAAyB;YAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACvC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,kEAAkE;gBAClE,OAAO,GAAG,GAAG,iBAAiB,CAAC;YACjC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,GAAG,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,MAAe,EACf,SAAiB;IAEjB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAErD,MAAM,QAAQ,GAAG,EAAE,GAAI,MAAkC,EAAE,CAAC;IAC5D,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;IACrC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,OAAO,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,KAAK,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,GAA8B;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC"}