webmcp-codegen 0.3.1 → 0.3.2

package/dist/chunk-CCVNYNJ5.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/data-file.ts","../src/detect.ts","../src/setup.ts","../src/detect-app.ts"],"sourcesContent":["/**\n * The remembered-choices file: `.webmcp-codegen.json` at the project root.\n *\n * It is plain data — never code — so it works in the pure-npx flow (no\n * install needed) and can be read and written safely by the CLI and the dev\n * dashboard alike. It holds two kinds of things:\n *\n *   - choices we asked for once and should never ask again\n *     (\"which of these packages is your web app?\")\n *   - overrides   per-tool edits made in the dashboard (description,\n *                 enabled). They are applied after the safety review, so\n *                 they survive regeneration.\n *\n * The config file (codegen.config.mjs) stays the source of truth for\n * *structure* (sources, generators, safety). This file is for *choices and\n * tweaks*. Editing it by hand is fine; it is meant to be committed.\n */\n\nimport { readFile, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { ToolOverrides } from \"./types.js\";\n\nexport const DATA_FILE_NAME = \".webmcp-codegen.json\";\n\nexport interface DataFile {\n  /** The spec we used (or were told to use), relative to the project root. */\n  spec?: string;\n  /** The web app package directory, relative to the project root. */\n  app?: string;\n  /** Per-tool tweaks, keyed by tool name. */\n  overrides?: ToolOverrides;\n}\n\nexport async function loadDataFile(cwd: string): Promise<DataFile> {\n  try {\n    const parsed = JSON.parse(await readFile(join(cwd, DATA_FILE_NAME), \"utf8\")) as DataFile;\n    return parsed && typeof parsed === \"object\" ? parsed : {};\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Merge and write. Only the keys given are touched; everything already in\n * the file (especially overrides) survives. Writes nothing when the merged\n * result equals what's already there, so watch mode never loops on us.\n */\nexport async function saveDataFile(cwd: string, patch: Partial<DataFile>): Promise<void> {\n  const current = await loadDataFile(cwd);\n  const next: DataFile = { ...current, ...patch };\n  if (JSON.stringify(next) === JSON.stringify(current)) return;\n  await writeFile(join(cwd, DATA_FILE_NAME), `${JSON.stringify(next, null, 2)}\\n`, \"utf8\");\n}\n","/**\n * Spec auto-detection: the reason `npx webmcp-codegen generate` works with\n * zero arguments, zero config, and zero install.\n *\n * The rule is deliberately boring: walk the project (skipping the obvious\n * noise), recognize the usual spec filenames, and return what we find\n * shallowest-first. When exactly one spec exists we just use it; the CLI\n * layer decides what to do about zero or several.\n */\n\nimport type { Dirent } from \"node:fs\";\nimport { readdir } from \"node:fs/promises\";\nimport { join, relative } from \"node:path\";\n\n/** Filenames we recognize as API specs. */\nexport const SPEC_FILE_PATTERN = /^(openapi|swagger|api)\\.(ya?ml|json)$/i;\n\n/** Directories never worth descending into. */\nconst IGNORED_DIRS = new Set([\n  \"node_modules\",\n  \".git\",\n  \".turbo\",\n  \".next\",\n  \"dist\",\n  \"build\",\n  \"coverage\",\n]);\n\n/**\n * How deep we look. Enough for monorepo layouts like\n * apps/server/openapi/openapi.json (depth 3) without wandering forever.\n */\nconst MAX_DEPTH = 5;\n\n/**\n * Find API spec files under `cwd`, returned as paths relative to `cwd`,\n * shallowest first. A root-level spec is a likelier intent than one\n * buried six folders deep.\n */\nexport async function findSpecs(cwd: string): Promise<string[]> {\n  const found: { path: string; depth: number }[] = [];\n\n  async function walk(dir: string, depth: number): Promise<void> {\n    if (depth > MAX_DEPTH) return;\n    let entries: Dirent[];\n    try {\n      entries = await readdir(dir, { withFileTypes: true });\n    } catch {\n      return; // Unreadable directory. Skip it, never die on detection.\n    }\n    for (const entry of entries) {\n      if (entry.isDirectory()) {\n        if (!IGNORED_DIRS.has(entry.name)) await walk(join(dir, entry.name), depth + 1);\n      } else if (SPEC_FILE_PATTERN.test(entry.name)) {\n        found.push({ path: join(dir, entry.name), depth });\n      }\n    }\n  }\n\n  await walk(cwd, 0);\n  return found.sort((a, b) => a.depth - b.depth).map((entry) => relative(cwd, entry.path));\n}\n","/**\n * Setup resolution: where the tools come from and where they go.\n *\n * Shared by the CLI (`generate`) and the dev dashboard (`dev`), so both see\n * the same project the same way:\n *\n *   1. a config file (codegen.config.mjs or --config) for full control\n *   2. --spec/--out flags as quick overrides, no config needed\n *   3. remembered choices from .webmcp-codegen.json\n *   4. auto-detection: the spec by filename, the web app by its package.json\n *\n * Branches 2-4 build the config right here, which is what makes\n * `npx webmcp-codegen generate` work without installing the package: the\n * user's project never has to resolve a webmcp-codegen import.\n */\n\nimport { existsSync } from \"node:fs\";\nimport { basename, join } from \"node:path\";\nimport { createInterface } from \"node:readline/promises\";\nimport { CONFIG_FILE_NAMES, loadConfig } from \"./config.js\";\nimport { loadDataFile } from \"./data-file.js\";\nimport { findSpecs } from \"./detect.js\";\nimport { findWebApps, type WebApp } from \"./detect-app.js\";\nimport { js } from \"./generators/js.js\";\nimport { openapi } from \"./sources/openapi.js\";\nimport type { CodegenConfig } from \"./types.js\";\n\nexport interface GenerateFlags {\n  dryRun: boolean;\n  skipAudit: boolean;\n  force: boolean;\n  watch: boolean;\n  configPath?: string;\n  spec?: string;\n  out?: string;\n}\n\nexport interface Setup {\n  config: CodegenConfig;\n  label: string;\n  /** The web app we detected (when detection ran). Drives placement + wiring. */\n  app?: WebApp;\n  /** True when the config came from a config file rather than detection. */\n  fromConfigFile: boolean;\n  /** Choices to remember in .webmcp-codegen.json after a successful run. */\n  remember: { spec?: string; app?: string };\n}\n\n/**\n * Where the tools come from and where they go, in priority order:\n *\n *   1. a config file (codegen.config.mjs or --config) for full control\n *   2. --spec/--out flags as quick overrides, no config needed\n *   3. remembered choices from .webmcp-codegen.json\n *   4. auto-detection: the spec by filename, the web app by its package.json\n *\n * Branches 2-4 build the config right here inside the CLI, which is what\n * makes `npx webmcp-codegen generate` work without installing the package:\n * the user's project never has to resolve a webmcp-codegen import.\n */\nexport async function resolveSetup(cwd: string, flags: GenerateFlags): Promise<Setup> {\n  const hasConfigFile = flags.configPath\n    ? existsSync(join(cwd, flags.configPath))\n    : CONFIG_FILE_NAMES.some((name) => existsSync(join(cwd, name)));\n\n  if (hasConfigFile) {\n    const { config, path } = await loadConfig(cwd, flags.configPath);\n    if (flags.spec || flags.out) {\n      console.warn(`Note: --spec/--out are ignored; ${basename(path)} is in charge here.`);\n    }\n    // Wiring still works with a config file if we can find the app.\n    const data = await loadDataFile(cwd);\n    const apps = await findWebApps(cwd);\n    const app = apps.find((candidate) => candidate.dir === data.app) ?? apps[0];\n    return { config, label: basename(path), app, fromConfigFile: true, remember: {} };\n  }\n  if (flags.configPath) {\n    throw new Error(`No config file at \"${flags.configPath}\".`);\n  }\n\n  const data = await loadDataFile(cwd);\n\n  // The spec: flag wins, then the remembered choice, then detection.\n  const spec = flags.spec ?? data.spec ?? (await detectSpec(cwd));\n\n  // The web app: detection decides placement. Only asked once; the answer\n  // is remembered in .webmcp-codegen.json.\n  let app: WebApp | undefined;\n  if (!flags.out) {\n    const apps = await findWebApps(cwd);\n    const remembered = apps.find((candidate) => candidate.dir === data.app);\n    if (remembered) {\n      app = remembered;\n    } else if (apps.length === 1) {\n      app = apps[0];\n      console.log(`Found your web app: ${app?.dir} (${app?.framework})`);\n    } else if (apps.length > 1) {\n      app = await askWhichApp(apps);\n    }\n  }\n\n  const outDir = flags.out ?? (app && app.dir !== \".\" ? `${app.dir}/src/webmcp` : \"./src/webmcp\");\n  return {\n    config: { sources: [openapi({ spec })], generate: [js({ outDir })] },\n    label: flags.spec ? `--spec ${spec}` : `detected ${spec}`,\n    app,\n    fromConfigFile: false,\n    remember: { spec, app: app?.dir },\n  };\n}\n\n/**\n * The one question this CLI asks. Several packages look like the web app;\n * a human picks, and .webmcp-codegen.json remembers it. Non-interactive\n * shells (CI) get the best guess with a note, never a hang.\n */\nasync function askWhichApp(apps: WebApp[]): Promise<WebApp> {\n  if (!process.stdin.isTTY) {\n    const first = apps[0] as WebApp;\n    console.log(`Several packages look like web apps; using ${first.dir}. Override with --out.`);\n    return first;\n  }\n  console.log(\"Several packages look like the web app. Which one should the tools live in?\");\n  apps.forEach((app, index) => {\n    console.log(`  ${index + 1}. ${app.dir} (${app.framework})${index === 0 ? \"  [default]\" : \"\"}`);\n  });\n  const rl = createInterface({ input: process.stdin, output: process.stdout });\n  try {\n    const answer = await rl.question(\"Choice [1]: \");\n    const picked = Number.parseInt(answer.trim() || \"1\", 10);\n    return apps[picked - 1] ?? (apps[0] as WebApp);\n  } finally {\n    rl.close();\n  }\n}\n\n/**\n * Find the project's API spec. One candidate: use it and say so. Several:\n * list them and make the human pick. None: say exactly what to do next.\n */\nasync function detectSpec(cwd: string): Promise<string> {\n  const specs = await findSpecs(cwd);\n\n  if (specs.length === 0) {\n    throw new Error(\n      \"No OpenAPI spec found in this project.\\n\" +\n        \"Point at one:  npx webmcp-codegen generate --spec path/to/openapi.json\",\n    );\n  }\n  if (specs.length > 1) {\n    const list = specs.map((spec) => `  - ${spec}`).join(\"\\n\");\n    throw new Error(\n      `Found ${specs.length} API specs:\\n${list}\\n\\n` +\n        `Pick one:  npx webmcp-codegen generate --spec ${specs[0]}`,\n    );\n  }\n\n  console.log(`Detected ${specs[0]} (override with --spec)`);\n  return specs[0] as string;\n}\n\n","/**\n * Web-app detection: where the generated tools should live.\n *\n * The tools are browser code, so they belong in whichever package *is* the\n * web app — not next to the spec, and not wherever the command happened to\n * run. In a monorepo like:\n *\n *   apps/\n *   ├── server/   (has the openapi.json)\n *   └── web/      (has next in its package.json)   ← tools go here\n *\n * detection means reading package.json files and looking for a browser\n * framework. One candidate: we use it and say so. Several: the CLI asks\n * once and remembers the answer in .webmcp-codegen.json.\n */\n\nimport { readdir, readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nexport interface WebApp {\n  /** Package directory relative to the project root, e.g. \"apps/web\". */\n  dir: string;\n  framework: \"next\" | \"vite-react\" | \"nuxt\" | \"sveltekit\" | \"unknown\";\n}\n\n/** The frameworks we recognize, best-supported first. */\nconst FRAMEWORKS: { dep: string; framework: WebApp[\"framework\"] }[] = [\n  { dep: \"next\", framework: \"next\" },\n  { dep: \"nuxt\", framework: \"nuxt\" },\n  { dep: \"@sveltejs/kit\", framework: \"sveltekit\" },\n];\n\n/**\n * Find web apps in the project. Returns candidates with the likeliest first\n * (a known framework beats \"has react\", an app named \"web\" beats \"admin\").\n */\nexport async function findWebApps(cwd: string): Promise<WebApp[]> {\n  const packageDirs = await findPackageDirs(cwd);\n  const apps: WebApp[] = [];\n\n  for (const dir of packageDirs) {\n    const pkg = await readPackageJson(join(cwd, dir));\n    if (!pkg) continue;\n    const deps = {\n      ...(pkg.dependencies as Record<string, string> | undefined),\n      ...(pkg.devDependencies as Record<string, string> | undefined),\n    };\n    const known = FRAMEWORKS.find(({ dep }) => deps[dep]);\n    // A bare react+vite pair is a Vite SPA; react alone is too weak a signal.\n    const framework =\n      known?.framework ?? (deps.react && deps.vite ? (\"vite-react\" as const) : undefined);\n    if (framework) apps.push({ dir, framework });\n  }\n\n  // Prefer known frameworks, then the package literally named like the app.\n  return apps.sort((a, b) => score(b) - score(a));\n\n  function score(app: WebApp): number {\n    return (\n      (app.framework === \"unknown\" ? 0 : 10) +\n      (/(^|\\/)(web|app|frontend|client)$/.test(app.dir) ? 2 : 0)\n    );\n  }\n}\n\n/** Every directory holding a package.json, root first. */\nasync function findPackageDirs(cwd: string): Promise<string[]> {\n  const dirs: string[] = [];\n  const root = await readPackageJson(join(cwd, \"\"));\n  if (root) {\n    dirs.push(\".\");\n    for (const pattern of await workspaceGlobs(cwd, root)) {\n      dirs.push(...(await expandShallowGlob(cwd, pattern)));\n    }\n  }\n  return [...new Set(dirs)];\n}\n\n/** Workspace globs from package.json workspaces or pnpm-workspace.yaml. */\nasync function workspaceGlobs(cwd: string, rootPkg: Record<string, unknown>): Promise<string[]> {\n  const workspaces = rootPkg.workspaces;\n  if (Array.isArray(workspaces)) return workspaces as string[];\n  if (\n    workspaces &&\n    typeof workspaces === \"object\" &&\n    Array.isArray((workspaces as { packages?: unknown }).packages)\n  ) {\n    return (workspaces as { packages: string[] }).packages;\n  }\n  // pnpm monorepos: parse the \"packages:\" list out of pnpm-workspace.yaml.\n  // Kept deliberately shallow: we only support single-star globs anyway.\n  return readPnpmWorkspaceGlobs(cwd);\n}\n\nasync function readPnpmWorkspaceGlobs(cwd: string): Promise<string[]> {\n  try {\n    const text = await readFile(join(cwd, \"pnpm-workspace.yaml\"), \"utf8\");\n    const packagesBlock = /^packages:\\s*\\n((?:\\s+-\\s+.+\\n?)+)/m.exec(text);\n    if (!packagesBlock) return [];\n    return [...(packagesBlock[1] as string).matchAll(/^\\s+-\\s+['\"]?([^'\"\\n]+?)['\"]?\\s*$/gm)].map(\n      (match) => match[1] as string,\n    );\n  } catch {\n    return [];\n  }\n}\n\n/**\n * Expand a workspace glob, but only one star deep (\"apps/*\"). Deep globs\n * (\"packages/**\") are truncated at the first star; a monorepo app is never\n * buried deeper than that in practice.\n */\nasync function expandShallowGlob(cwd: string, pattern: string): Promise<string[]> {\n  const starAt = pattern.indexOf(\"*\");\n  const base = starAt === -1 ? pattern : pattern.slice(0, starAt).replace(/\\/$/, \"\");\n  if (starAt === -1) return [base];\n  try {\n    const entries = await readdir(join(cwd, base), { withFileTypes: true });\n    return entries.filter((entry) => entry.isDirectory()).map((entry) => `${base}/${entry.name}`);\n  } catch {\n    return [];\n  }\n}\n\nasync function readPackageJson(dir: string): Promise<Record<string, unknown> | undefined> {\n  try {\n    return JSON.parse(await readFile(join(dir, \"package.json\"), \"utf8\")) as Record<string, unknown>;\n  } catch {\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAkBA,SAAS,UAAU,iBAAiB;AACpC,SAAS,YAAY;AAGd,IAAM,iBAAiB;AAW9B,eAAsB,aAAa,KAAgC;AACjE,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,MAAM,SAAS,KAAK,KAAK,cAAc,GAAG,MAAM,CAAC;AAC3E,WAAO,UAAU,OAAO,WAAW,WAAW,SAAS,CAAC;AAAA,EAC1D,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAOA,eAAsB,aAAa,KAAa,OAAyC;AACvF,QAAM,UAAU,MAAM,aAAa,GAAG;AACtC,QAAM,OAAiB,EAAE,GAAG,SAAS,GAAG,MAAM;AAC9C,MAAI,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,OAAO,EAAG;AACtD,QAAM,UAAU,KAAK,KAAK,cAAc,GAAG,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AACzF;;;ACzCA,SAAS,eAAe;AACxB,SAAS,QAAAA,OAAM,gBAAgB;AAGxB,IAAM,oBAAoB;AAGjC,IAAM,eAAe,oBAAI,IAAI;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMD,IAAM,YAAY;AAOlB,eAAsB,UAAU,KAAgC;AAC9D,QAAM,QAA2C,CAAC;AAElD,iBAAe,KAAK,KAAa,OAA8B;AAC7D,QAAI,QAAQ,UAAW;AACvB,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IACtD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,SAAS,SAAS;AAC3B,UAAI,MAAM,YAAY,GAAG;AACvB,YAAI,CAAC,aAAa,IAAI,MAAM,IAAI,EAAG,OAAM,KAAKA,MAAK,KAAK,MAAM,IAAI,GAAG,QAAQ,CAAC;AAAA,MAChF,WAAW,kBAAkB,KAAK,MAAM,IAAI,GAAG;AAC7C,cAAM,KAAK,EAAE,MAAMA,MAAK,KAAK,MAAM,IAAI,GAAG,MAAM,CAAC;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AAEA,QAAM,KAAK,KAAK,CAAC;AACjB,SAAO,MAAM,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,SAAS,KAAK,MAAM,IAAI,CAAC;AACzF;;;AC7CA,SAAS,kBAAkB;AAC3B,SAAS,UAAU,QAAAC,aAAY;AAC/B,SAAS,uBAAuB;;;ACFhC,SAAS,WAAAC,UAAS,YAAAC,iBAAgB;AAClC,SAAS,QAAAC,aAAY;AASrB,IAAM,aAAgE;AAAA,EACpE,EAAE,KAAK,QAAQ,WAAW,OAAO;AAAA,EACjC,EAAE,KAAK,QAAQ,WAAW,OAAO;AAAA,EACjC,EAAE,KAAK,iBAAiB,WAAW,YAAY;AACjD;AAMA,eAAsB,YAAY,KAAgC;AAChE,QAAM,cAAc,MAAM,gBAAgB,GAAG;AAC7C,QAAM,OAAiB,CAAC;AAExB,aAAW,OAAO,aAAa;AAC7B,UAAM,MAAM,MAAM,gBAAgBA,MAAK,KAAK,GAAG,CAAC;AAChD,QAAI,CAAC,IAAK;AACV,UAAM,OAAO;AAAA,MACX,GAAI,IAAI;AAAA,MACR,GAAI,IAAI;AAAA,IACV;AACA,UAAM,QAAQ,WAAW,KAAK,CAAC,EAAE,IAAI,MAAM,KAAK,GAAG,CAAC;AAEpD,UAAM,YACJ,OAAO,cAAc,KAAK,SAAS,KAAK,OAAQ,eAAyB;AAC3E,QAAI,UAAW,MAAK,KAAK,EAAE,KAAK,UAAU,CAAC;AAAA,EAC7C;AAGA,SAAO,KAAK,KAAK,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC;AAE9C,WAAS,MAAM,KAAqB;AAClC,YACG,IAAI,cAAc,YAAY,IAAI,OAClC,mCAAmC,KAAK,IAAI,GAAG,IAAI,IAAI;AAAA,EAE5D;AACF;AAGA,eAAe,gBAAgB,KAAgC;AAC7D,QAAM,OAAiB,CAAC;AACxB,QAAM,OAAO,MAAM,gBAAgBA,MAAK,KAAK,EAAE,CAAC;AAChD,MAAI,MAAM;AACR,SAAK,KAAK,GAAG;AACb,eAAW,WAAW,MAAM,eAAe,KAAK,IAAI,GAAG;AACrD,WAAK,KAAK,GAAI,MAAM,kBAAkB,KAAK,OAAO,CAAE;AAAA,IACtD;AAAA,EACF;AACA,SAAO,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC;AAC1B;AAGA,eAAe,eAAe,KAAa,SAAqD;AAC9F,QAAM,aAAa,QAAQ;AAC3B,MAAI,MAAM,QAAQ,UAAU,EAAG,QAAO;AACtC,MACE,cACA,OAAO,eAAe,YACtB,MAAM,QAAS,WAAsC,QAAQ,GAC7D;AACA,WAAQ,WAAsC;AAAA,EAChD;AAGA,SAAO,uBAAuB,GAAG;AACnC;AAEA,eAAe,uBAAuB,KAAgC;AACpE,MAAI;AACF,UAAM,OAAO,MAAMD,UAASC,MAAK,KAAK,qBAAqB,GAAG,MAAM;AACpE,UAAM,gBAAgB,sCAAsC,KAAK,IAAI;AACrE,QAAI,CAAC,cAAe,QAAO,CAAC;AAC5B,WAAO,CAAC,GAAI,cAAc,CAAC,EAAa,SAAS,qCAAqC,CAAC,EAAE;AAAA,MACvF,CAAC,UAAU,MAAM,CAAC;AAAA,IACpB;AAAA,EACF,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAOA,eAAe,kBAAkB,KAAa,SAAoC;AAChF,QAAM,SAAS,QAAQ,QAAQ,GAAG;AAClC,QAAM,OAAO,WAAW,KAAK,UAAU,QAAQ,MAAM,GAAG,MAAM,EAAE,QAAQ,OAAO,EAAE;AACjF,MAAI,WAAW,GAAI,QAAO,CAAC,IAAI;AAC/B,MAAI;AACF,UAAM,UAAU,MAAMF,SAAQE,MAAK,KAAK,IAAI,GAAG,EAAE,eAAe,KAAK,CAAC;AACtE,WAAO,QAAQ,OAAO,CAAC,UAAU,MAAM,YAAY,CAAC,EAAE,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,MAAM,IAAI,EAAE;AAAA,EAC9F,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAe,gBAAgB,KAA2D;AACxF,MAAI;AACF,WAAO,KAAK,MAAM,MAAMD,UAASC,MAAK,KAAK,cAAc,GAAG,MAAM,CAAC;AAAA,EACrE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ADtEA,eAAsB,aAAa,KAAa,OAAsC;AACpF,QAAM,gBAAgB,MAAM,aACxB,WAAWC,MAAK,KAAK,MAAM,UAAU,CAAC,IACtC,kBAAkB,KAAK,CAAC,SAAS,WAAWA,MAAK,KAAK,IAAI,CAAC,CAAC;AAEhE,MAAI,eAAe;AACjB,UAAM,EAAE,QAAQ,KAAK,IAAI,MAAM,WAAW,KAAK,MAAM,UAAU;AAC/D,QAAI,MAAM,QAAQ,MAAM,KAAK;AAC3B,cAAQ,KAAK,mCAAmC,SAAS,IAAI,CAAC,qBAAqB;AAAA,IACrF;AAEA,UAAMC,QAAO,MAAM,aAAa,GAAG;AACnC,UAAM,OAAO,MAAM,YAAY,GAAG;AAClC,UAAMC,OAAM,KAAK,KAAK,CAAC,cAAc,UAAU,QAAQD,MAAK,GAAG,KAAK,KAAK,CAAC;AAC1E,WAAO,EAAE,QAAQ,OAAO,SAAS,IAAI,GAAG,KAAAC,MAAK,gBAAgB,MAAM,UAAU,CAAC,EAAE;AAAA,EAClF;AACA,MAAI,MAAM,YAAY;AACpB,UAAM,IAAI,MAAM,sBAAsB,MAAM,UAAU,IAAI;AAAA,EAC5D;AAEA,QAAM,OAAO,MAAM,aAAa,GAAG;AAGnC,QAAM,OAAO,MAAM,QAAQ,KAAK,QAAS,MAAM,WAAW,GAAG;AAI7D,MAAI;AACJ,MAAI,CAAC,MAAM,KAAK;AACd,UAAM,OAAO,MAAM,YAAY,GAAG;AAClC,UAAM,aAAa,KAAK,KAAK,CAAC,cAAc,UAAU,QAAQ,KAAK,GAAG;AACtE,QAAI,YAAY;AACd,YAAM;AAAA,IACR,WAAW,KAAK,WAAW,GAAG;AAC5B,YAAM,KAAK,CAAC;AACZ,cAAQ,IAAI,uBAAuB,KAAK,GAAG,KAAK,KAAK,SAAS,GAAG;AAAA,IACnE,WAAW,KAAK,SAAS,GAAG;AAC1B,YAAM,MAAM,YAAY,IAAI;AAAA,IAC9B;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,QAAQ,OAAO,IAAI,QAAQ,MAAM,GAAG,IAAI,GAAG,gBAAgB;AAChF,SAAO;AAAA,IACL,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE;AAAA,IACnE,OAAO,MAAM,OAAO,UAAU,IAAI,KAAK,YAAY,IAAI;AAAA,IACvD;AAAA,IACA,gBAAgB;AAAA,IAChB,UAAU,EAAE,MAAM,KAAK,KAAK,IAAI;AAAA,EAClC;AACF;AAOA,eAAe,YAAY,MAAiC;AAC1D,MAAI,CAAC,QAAQ,MAAM,OAAO;AACxB,UAAM,QAAQ,KAAK,CAAC;AACpB,YAAQ,IAAI,8CAA8C,MAAM,GAAG,wBAAwB;AAC3F,WAAO;AAAA,EACT;AACA,UAAQ,IAAI,6EAA6E;AACzF,OAAK,QAAQ,CAAC,KAAK,UAAU;AAC3B,YAAQ,IAAI,KAAK,QAAQ,CAAC,KAAK,IAAI,GAAG,KAAK,IAAI,SAAS,IAAI,UAAU,IAAI,gBAAgB,EAAE,EAAE;AAAA,EAChG,CAAC;AACD,QAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAC3E,MAAI;AACF,UAAM,SAAS,MAAM,GAAG,SAAS,cAAc;AAC/C,UAAM,SAAS,OAAO,SAAS,OAAO,KAAK,KAAK,KAAK,EAAE;AACvD,WAAO,KAAK,SAAS,CAAC,KAAM,KAAK,CAAC;AAAA,EACpC,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;AAMA,eAAe,WAAW,KAA8B;AACtD,QAAM,QAAQ,MAAM,UAAU,GAAG;AAEjC,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACA,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,OAAO,MAAM,IAAI,CAAC,SAAS,OAAO,IAAI,EAAE,EAAE,KAAK,IAAI;AACzD,UAAM,IAAI;AAAA,MACR,SAAS,MAAM,MAAM;AAAA,EAAgB,IAAI;AAAA;AAAA,gDACU,MAAM,CAAC,CAAC;AAAA,IAC7D;AAAA,EACF;AAEA,UAAQ,IAAI,YAAY,MAAM,CAAC,CAAC,yBAAyB;AACzD,SAAO,MAAM,CAAC;AAChB;","names":["join","join","readdir","readFile","join","join","data","app"]}

package/dist/chunk-I4ZL527H.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/generators/js.ts","../src/generators/js-templates.ts"],"sourcesContent":["/**\n * The `js` generator, named after what lands in your repo: plain JavaScript/\n * TypeScript files that call the spec's imperative API\n * (`document.modelContext.registerTool`).\n *\n * Output layout for `js({ outDir: \"./src/webmcp\" })`:\n *\n *   src/webmcp/\n *   ├── runtime.webmcp.ts          ← fully generated, never edit\n *   ├── index.ts                   ← fully generated, registers everything\n *   ├── get-order-status.webmcp.ts ← generated contract + YOUR execute()\n *   └── ...\n *\n * Each per-tool file has two regions, divided by marker comments:\n *\n *   generated region   schema, input type, tool definition, register()\n *   ── end generated ── everything below survives regeneration\n *   your region        execute(), scaffolded once, then owned by you\n *\n * This file contains only the *file mechanics*: which files exist, and how to\n * update them without destroying hand-written code. The text of the generated\n * code itself lives in js-templates.ts, keeping \"what the output looks like\"\n * separate from \"how files get written\" is what keeps both readable.\n */\n\nimport { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { GeneratedFile, ReviewedTool, ToolGenerator } from \"../types.js\";\nimport {\n  barrelSource,\n  generatedRegion,\n  ownedRegionScaffold,\n  runtimeSource,\n} from \"./js-templates.js\";\n\nexport interface JsGeneratorOptions {\n  /** Where the tool files go, relative to the project root. */\n  outDir: string;\n}\n\n/**\n * The marker lines that split a per-tool file in two. They are the merge\n * contract: we may rewrite everything up to and including GENERATED_END,\n * and we must never touch anything after it. js-templates.ts imports these\n * so the marker text is defined in exactly one place.\n */\nexport const GENERATED_START = \"// ─── webmcp-codegen: generated. Do not edit this region. ───\";\nexport const GENERATED_END =\n  \"// ─── webmcp-codegen: end generated. Your code below survives regeneration. ───\";\n\n/** Create the `js` generator for the config's `generate` array. */\nexport function js(options: JsGeneratorOptions): ToolGenerator {\n  return {\n    kind: \"js\",\n    outDir: options.outDir,\n    async generate(tools, cwd) {\n      const outDir = join(cwd, options.outDir);\n      const files: GeneratedFile[] = [];\n\n      // The runtime and the barrel are regenerated wholesale every run;\n      // their headers say \"do not edit\", and we mean it.\n      files.push(await plainFile(join(outDir, \"runtime.webmcp.ts\"), runtimeSource()));\n      files.push(await plainFile(join(outDir, \"index.ts\"), barrelSource(tools)));\n\n      for (const tool of tools) {\n        files.push(await toolFile(tool, outDir));\n      }\n      return files;\n    },\n  };\n}\n\n/** A fully-generated file: create if missing, overwrite if changed, skip if same. */\nasync function plainFile(path: string, contents: string): Promise<GeneratedFile> {\n  try {\n    const existing = await readFile(path, \"utf8\");\n    return { path, contents, action: existing === contents ? \"unchanged\" : \"update\" };\n  } catch {\n    return { path, contents, action: \"create\" };\n  }\n}\n\n/**\n * Build (or merge) one per-tool file. The only I/O here is reading the\n * existing file to check for a hand-written region worth keeping.\n */\nasync function toolFile(tool: ReviewedTool, outDir: string): Promise<GeneratedFile> {\n  const path = join(outDir, `${tool.name}.webmcp.ts`);\n  const head = generatedRegion(tool);\n\n  let existing: string | undefined;\n  try {\n    existing = await readFile(path, \"utf8\");\n  } catch {\n    // No file yet: brand new tool, so we also lay down the execute() scaffold.\n    return { path, contents: `${head}\\n${ownedRegionScaffold(tool)}`, action: \"create\" };\n  }\n\n  const markerIndex = existing.indexOf(GENERATED_END);\n  if (markerIndex === -1) {\n    // Someone removed the markers or hand-wrote this path from scratch.\n    // Never clobber their work: report a conflict and let the pipeline put\n    // our version in a `.new` sibling for a human to merge.\n    return { path, contents: existing, action: \"unchanged\", conflict: `${path}.new` };\n  }\n\n  // Keep everything the developer wrote below the marker, word for word.\n  const preservedTail = existing.slice(markerIndex + GENERATED_END.length);\n  const contents = head + preservedTail;\n  return { path, contents, action: contents === existing ? \"unchanged\" : \"update\" };\n}\n","/**\n * The text of the code the `js` generator writes.\n *\n * Heads up before reading on: every function here returns *TypeScript source\n * code as a string*. When you see `export const ...` inside quotes, that's\n * the output a user's repo will contain, not this module's own logic.\n * Building output from arrays of lines (rather than nested template strings)\n * keeps the quoting readable; the only escaping left is for code samples\n * inside the generated comments.\n *\n * Three kinds of output are built here:\n *   - generatedRegion()      the per-tool contract (regenerated freely)\n *   - ownedRegionScaffold()  the execute() body (written once, then owned)\n *   - runtimeSource() / barrelSource()   fully-generated support files\n *\n * The contract the output fulfills: read tools work out of the box (a real\n * request to the endpoint), mutation tools start disabled with the working\n * code generated but commented out, and the user-confirmation step for\n * mutations lives in the generated region so it cannot be edited away.\n */\n\nimport { jsonSchemaToTs, pascalCase } from \"../schema.js\";\nimport type { ReviewedTool } from \"../types.js\";\nimport { GENERATED_END, GENERATED_START } from \"./js.js\";\n\n/**\n * Everything above the end-marker of a per-tool file: the parts that must\n * track the API contract exactly: name, description, schema, input type,\n * hints, and the register() wrapper.\n */\nexport function generatedRegion(tool: ReviewedTool): string {\n  const pascal = pascalCase(tool.name);\n  const camel = lowercaseFirst(pascal);\n  const schemaJson = JSON.stringify(tool.inputSchema, null, 2);\n  const inputType = jsonSchemaToTs(tool.inputSchema, undefined);\n  const mutates = tool.riskTier !== \"safe-read\";\n\n  // The imports cover what this file's regions use: the generated register()\n  // and the owned execute() scaffold. A developer who replaces the scaffold\n  // with their own API client can trim the imports they stop using.\n  const runtimeImports = [\n    \"getModelContext\",\n    ...(mutates ? [\"requestUserConfirmation\"] : []),\n    \"callApi\",\n    \"toolResult\",\n    ...(tool.enabledByDefault ? [] : [\"toolDisabled\"]),\n  ].join(\", \");\n\n  const registerBody = mutates\n    ? [\n        `  await modelContext.registerTool(`,\n        `    {`,\n        `      ...${camel}Tool,`,\n        `      execute: async (input) => {`,\n        `        // This tool changes things, so the user is always asked first. The`,\n        `        // confirmation lives in the generated region: it cannot be edited away.`,\n        `        const confirmed = await requestUserConfirmation(`,\n        `          ${JSON.stringify(`Allow the agent to: ${tool.description}`)},`,\n        `        );`,\n        `        if (!confirmed) {`,\n        `          return {`,\n        `            content: [{ type: \"text\", text: \"The user declined this action.\" }],`,\n        `            isError: true,`,\n        `          };`,\n        `        }`,\n        `        // The browser has already validated the agent's input against the schema.`,\n        `        return execute${pascal}(input as ${tool.inputTypeName});`,\n        `      },`,\n        `    },`,\n        `    { signal },`,\n        `  );`,\n      ]\n    : [\n        `  await modelContext.registerTool(`,\n        `    {`,\n        `      ...${camel}Tool,`,\n        `      // The browser has already validated the agent's input against the schema.`,\n        `      execute: (input) => execute${pascal}(input as ${tool.inputTypeName}),`,\n        `    },`,\n        `    { signal },`,\n        `  );`,\n      ];\n\n  return [\n    `import { ${runtimeImports} } from \"./runtime.webmcp\";`,\n    ``,\n    GENERATED_START,\n    `/**`,\n    ` * ${tool.description}`,\n    ` *`,\n    ` * Source: ${tool.source.ref} (${tool.source.kind}). Risk: ${tool.riskTier}.`,\n    ` * Starts ${tool.enabledByDefault ? \"enabled\" : \"disabled\"} (see execute${pascal} below).`,\n    ` * Regenerate with: npx webmcp-codegen generate`,\n    ` */`,\n    ``,\n    `/** The exact contract advertised to the agent. Derived from the API spec. Do not hand-edit. */`,\n    `export const ${camel}InputSchema = ${schemaJson};`,\n    ``,\n    `/** What \\`execute\\` receives. The browser validates agent input against the schema above. */`,\n    `export type ${tool.inputTypeName} = ${inputType};`,\n    ``,\n    `/** Safety hints computed by webmcp-codegen. Informational metadata for hosts and UIs. */`,\n    `export const ${camel}Hints = ${JSON.stringify(tool.hints)} as const;`,\n    ``,\n    `/** The tool definition, minus \\`execute\\` (which is yours, below the marker). */`,\n    `export const ${camel}Tool = {`,\n    `  name: ${JSON.stringify(tool.name)},`,\n    `  description: ${JSON.stringify(tool.description)},`,\n    `  inputSchema: ${camel}InputSchema,`,\n    `};`,\n    ``,\n    `/**`,\n    ` * Register this tool with WebMCP. Call it once on page load, or use`,\n    ` * registerAllTools() from the generated index.ts.`,\n    ` *`,\n    ` * Pass an AbortSignal to unregister later: controller.abort().`,\n    ` */`,\n    `export async function register${pascal}(signal?: AbortSignal): Promise<void> {`,\n    `  const modelContext = getModelContext();`,\n    ...registerBody,\n    `}`,\n    ``,\n    GENERATED_END,\n  ].join(\"\\n\");\n}\n\n/**\n * The scaffold below the marker, written exactly once (when the file is\n * first created). After that the developer owns it and regeneration never\n * touches it. That promise is the whole reason the marker split exists.\n *\n * The scaffold is real code, not a TODO: the spec knows the method, the\n * path, and which fields go where, so the default implementation actually\n * calls the endpoint from the page, with the signed-in user's session.\n * Reads are born working; mutations are born disabled (the working code is\n * right there, commented out, one deliberate edit away from live).\n */\nexport function ownedRegionScaffold(tool: ReviewedTool): string {\n  const pascal = pascalCase(tool.name);\n  const call = requestCall(tool);\n  const lines: string[] = [\n    ``,\n    `/**`,\n    ` * What actually happens when the agent calls \"${tool.name}\".`,\n    ` *`,\n    ` * Default implementation: calls ${tool.source.ref} from this page, with the`,\n    ` * signed-in user's session. Replace it with your app's own API client`,\n    ` * whenever you like; the contract above never changes.`,\n  ];\n\n  if (tool.serverUrl) {\n    lines.push(\n      ` *`,\n      ` * Calls the API at ${tool.serverUrl} (from your spec's servers list).`,\n    );\n  }\n\n  if (tool.riskTier !== \"safe-read\") {\n    lines.push(\n      ` *`,\n      ` * This tool is ${tool.riskTier}: it ${\n        tool.riskTier === \"destructive-confirm\" ? \"cannot easily be undone\" : \"changes things\"\n      }.`,\n      ` * The user is asked to confirm every call (built into the generated region).`,\n    );\n  }\n  lines.push(` */`);\n\n  if (tool.piiInOutput.length > 0) {\n    lines.push(\n      `//`,\n      `// ⚠ webmcp-codegen flagged these response fields as likely PII: ${tool.piiInOutput.join(\", \")}.`,\n      `// Everything you return reaches the agent. Leave those fields out of what you`,\n      `// return unless the agent genuinely needs them, and say so in a comment if you keep them.`,\n    );\n  }\n\n  if (tool.enabledByDefault) {\n    lines.push(\n      `export async function execute${pascal}(input: ${tool.inputTypeName}) {`,\n      `  ${call}`,\n      `  return toolResult(data);`,\n      `}`,\n    );\n  } else {\n    lines.push(\n      `export async function execute${pascal}(input: ${tool.inputTypeName}) {`,\n      `  // This tool starts disabled: it ${\n        tool.endpointRole === \"endpoint\"\n          ? \"changes things\"\n          : `wraps an ${tool.endpointRole} endpoint`\n      }. Agents can see it, and calling it tells`,\n      `  // them it is disabled. To enable it, delete the line below and uncomment the code.`,\n      `  return toolDisabled(\"${tool.name}.webmcp.ts\");`,\n      ``,\n      `  // ${call}`,\n      `  // return toolResult(data);`,\n      `}`,\n    );\n  }\n\n  return lines.join(\"\\n\");\n}\n\n/**\n * The one working request line inside a scaffold, built from what the spec\n * knows: the path template becomes a template literal, query params become\n * the search string, body fields become the JSON body.\n *\n *   \"/pets/{id}\" + DELETE  →  const data = await callApi(`/pets/${input.id}`, { method: \"DELETE\" });\n *\n * When the source carries no route information, we fall back to an honest\n * TODO instead of inventing a URL.\n */\nfunction requestCall(tool: ReviewedTool): string {\n  if (!tool.httpMethod || !tool.pathTemplate || !tool.paramLocations) {\n    return `const data = null; // TODO: call your app's existing code here.`;\n  }\n\n  const { path: pathParams, query: queryParams, body: bodyParams } = tool.paramLocations;\n\n  // \"/pets/{id}\" → `/pets/${input.id}`. Params the schema knows by name.\n  let pathExpr = `\\`${tool.pathTemplate.replace(/\\{([^}]+)\\}/g, (_m, param: string) => `\\${${inputRef(param)}}`)}\\``;\n  if (pathParams.length === 0) pathExpr = JSON.stringify(tool.pathTemplate);\n\n  // When the spec declares an absolute server URL, use it so the call goes\n  // to the API even when the app and API are on different origins.\n  if (tool.serverUrl) {\n    const base = tool.serverUrl.endsWith(\"/\") ? tool.serverUrl.slice(0, -1) : tool.serverUrl;\n    pathExpr = `\\`${base}\\${${pathExpr}}\\``;\n  }\n\n  const options: string[] = [`method: ${JSON.stringify(tool.httpMethod)}`];\n  if (queryParams.length > 0) {\n    const entries = queryParams.map((name) => `${safeKey(name)}: ${inputRef(name)}`).join(\", \");\n    options.push(`query: { ${entries} }`);\n  }\n  if (bodyParams.length > 0) {\n    if (bodyParams.length === 1 && bodyParams[0] === \"body\") {\n      // A non-object request body arrives as a single \"body\" field.\n      options.push(`body: input.body`);\n    } else {\n      const entries = bodyParams.map((name) => `${safeKey(name)}: ${inputRef(name)}`).join(\", \");\n      options.push(`body: { ${entries} }`);\n    }\n  }\n\n  return `const data = await callApi(${pathExpr}, { ${options.join(\", \")} });`;\n}\n\n/**\n * How generated code reads a field off `input`. Dot access for identifier\n * names (\"input.limit\"), bracket access for the rest (\"input[\"pet-id\"]\").\n */\nfunction inputRef(name: string): string {\n  return /^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(name)\n    ? `input.${name}`\n    : `input[${JSON.stringify(name)}]`;\n}\n\n/** Quote an object key only when it needs it. */\nfunction safeKey(name: string): string {\n  return /^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(name) ? name : JSON.stringify(name);\n}\n\n/**\n * The shared runtime: the minimal WebMCP browser types plus the helpers the\n * generated files use. Kept tiny on purpose: this is the only browser\n * coupling in the output.\n */\nexport function runtimeSource(): string {\n  return `/**\n * Generated by webmcp-codegen. This file is fully regenerated on every run.\n * Do not edit by hand; your changes will be lost.\n */\n\n/** The result shape tools return (same as MCP tool results). */\nexport interface WebMcpToolResult {\n  content: { type: \"text\"; text: string }[];\n  isError?: boolean;\n  [key: string]: unknown;\n}\n\n/** A tool as the browser runtime understands it. */\nexport interface WebMcpToolDefinition {\n  name: string;\n  description: string;\n  inputSchema?: Record<string, unknown>;\n  execute: (input: Record<string, unknown>) => unknown | Promise<unknown>;\n}\n\n/** The slice of the WebMCP draft spec the generated code uses. */\nexport interface ModelContext {\n  registerTool(\n    tool: WebMcpToolDefinition,\n    options?: { signal?: AbortSignal },\n  ): Promise<void>;\n}\n\n/**\n * Access the page's WebMCP model context, with a helpful error when the\n * browser doesn't have one (rather than an undefined-callsite mystery).\n */\nexport function getModelContext(): ModelContext {\n  const modelContext = (document as unknown as { modelContext?: ModelContext }).modelContext;\n  if (!modelContext) {\n    throw new Error(\n      \"WebMCP is not available in this browser. \" +\n        \"Enable chrome://flags/#enable-webmcp-testing (Chrome 146+), \" +\n        \"or add the WebMCP polyfill to your app.\",\n    );\n  }\n  return modelContext;\n}\n\n/**\n * Call your API from the page. Same origin by default (pass a full URL when\n * the API lives on another host), always with the signed-in user's session\n * cookies. Throws on HTTP errors; returns the parsed JSON body, or raw text\n * when the response is not JSON.\n */\nexport async function callApi(\n  path: string,\n  options: { method?: string; query?: Record<string, unknown>; body?: unknown } = {},\n): Promise<unknown> {\n  const url = new URL(path, window.location.origin);\n  for (const [key, value] of Object.entries(options.query ?? {})) {\n    if (value !== undefined && value !== null) url.searchParams.set(key, String(value));\n  }\n  const response = await fetch(url, {\n    method: options.method ?? \"GET\",\n    credentials: \"include\",\n    headers: options.body !== undefined ? { \"content-type\": \"application/json\" } : undefined,\n    body: options.body !== undefined ? JSON.stringify(options.body) : undefined,\n  });\n  if (!response.ok) {\n    throw new Error(\"Request failed: \" + response.status + \" \" + response.statusText);\n  }\n  if (response.status === 204) return null;\n  const text = await response.text();\n  try {\n    return JSON.parse(text);\n  } catch {\n    return text;\n  }\n}\n\n/** Wrap a result in the MCP shape, so tool bodies stay one line. */\nexport function toolResult(data: unknown): WebMcpToolResult {\n  return {\n    content: [\n      { type: \"text\", text: typeof data === \"string\" ? data : JSON.stringify(data, null, 2) },\n    ],\n  };\n}\n\n/**\n * What a disabled tool tells the agent. The tool stays visible (so the agent\n * knows it exists and can ask the human to enable it) but does nothing.\n */\nexport function toolDisabled(fileName: string): WebMcpToolResult {\n  return {\n    content: [\n      {\n        type: \"text\",\n        text:\n          \"This tool is currently disabled by the app developer. Ask them to enable it \" +\n          \"(uncomment the implementation in \" + fileName + \").\",\n      },\n    ],\n    isError: true,\n  };\n}\n\n/**\n * Default \"agent proposes, human confirms\" gate for write/destructive tools.\n * Deliberately minimal (window.confirm). Replace it with your app's own\n * dialog when you outgrow it. The point is that the user always gets a say.\n */\nexport function requestUserConfirmation(message: string): Promise<boolean> {\n  return Promise.resolve(window.confirm(message));\n}\n`;\n}\n\n/** The barrel: one import that registers every generated tool. */\nexport function barrelSource(tools: ReviewedTool[]): string {\n  const imports = tools\n    .map((tool) => `import { register${pascalCase(tool.name)} } from \"./${tool.name}.webmcp\";`)\n    .join(\"\\n\");\n  const names = tools.map((tool) => `register${pascalCase(tool.name)}`).join(\",\\n  \");\n\n  return `/**\n * Generated by webmcp-codegen. This file is fully regenerated on every run.\n * Import registerAllTools() once at app startup:\n *\n *   import { registerAllTools } from \"./webmcp\";\n *   await registerAllTools();\n */\n\n${imports}\n\nconst registrations = [\n  ${names}\n];\n\n/**\n * Register every generated tool with WebMCP. One tool failing (for example\n * because the page's Permissions-Policy disables tools) never takes the\n * others down with it. The failure is logged and registration continues.\n */\nexport async function registerAllTools(signal?: AbortSignal): Promise<void> {\n  for (const register of registrations) {\n    try {\n      await register(signal);\n    } catch (error) {\n      console.warn(\"[webmcp-codegen] a tool failed to register:\", error);\n    }\n  }\n}\n`;\n}\n\n/** \"GetOrderStatus\" → \"getOrderStatus\" (for the generated const names). */\nfunction lowercaseFirst(pascal: string): string {\n  return pascal.charAt(0).toLowerCase() + pascal.slice(1);\n}\n"],"mappings":";;;;;;AAyBA,SAAS,gBAAgB;AACzB,SAAS,YAAY;;;ACId,SAAS,gBAAgB,MAA4B;AAC1D,QAAM,SAAS,WAAW,KAAK,IAAI;AACnC,QAAM,QAAQ,eAAe,MAAM;AACnC,QAAM,aAAa,KAAK,UAAU,KAAK,aAAa,MAAM,CAAC;AAC3D,QAAM,YAAY,eAAe,KAAK,aAAa,MAAS;AAC5D,QAAM,UAAU,KAAK,aAAa;AAKlC,QAAM,iBAAiB;AAAA,IACrB;AAAA,IACA,GAAI,UAAU,CAAC,yBAAyB,IAAI,CAAC;AAAA,IAC7C;AAAA,IACA;AAAA,IACA,GAAI,KAAK,mBAAmB,CAAC,IAAI,CAAC,cAAc;AAAA,EAClD,EAAE,KAAK,IAAI;AAEX,QAAM,eAAe,UACjB;AAAA,IACE;AAAA,IACA;AAAA,IACA,YAAY,KAAK;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAa,KAAK,UAAU,uBAAuB,KAAK,WAAW,EAAE,CAAC;AAAA,IACtE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,yBAAyB,MAAM,aAAa,KAAK,aAAa;AAAA,IAC9D;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IACA;AAAA,IACE;AAAA,IACA;AAAA,IACA,YAAY,KAAK;AAAA,IACjB;AAAA,IACA,oCAAoC,MAAM,aAAa,KAAK,aAAa;AAAA,IACzE;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEJ,SAAO;AAAA,IACL,YAAY,cAAc;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,KAAK,WAAW;AAAA,IACtB;AAAA,IACA,cAAc,KAAK,OAAO,GAAG,KAAK,KAAK,OAAO,IAAI,YAAY,KAAK,QAAQ;AAAA,IAC3E,aAAa,KAAK,mBAAmB,YAAY,UAAU,gBAAgB,MAAM;AAAA,IACjF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,KAAK,iBAAiB,UAAU;AAAA,IAChD;AAAA,IACA;AAAA,IACA,eAAe,KAAK,aAAa,MAAM,SAAS;AAAA,IAChD;AAAA,IACA;AAAA,IACA,gBAAgB,KAAK,WAAW,KAAK,UAAU,KAAK,KAAK,CAAC;AAAA,IAC1D;AAAA,IACA;AAAA,IACA,gBAAgB,KAAK;AAAA,IACrB,WAAW,KAAK,UAAU,KAAK,IAAI,CAAC;AAAA,IACpC,kBAAkB,KAAK,UAAU,KAAK,WAAW,CAAC;AAAA,IAClD,kBAAkB,KAAK;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,iCAAiC,MAAM;AAAA,IACvC;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAaO,SAAS,oBAAoB,MAA4B;AAC9D,QAAM,SAAS,WAAW,KAAK,IAAI;AACnC,QAAM,OAAO,YAAY,IAAI;AAC7B,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA,kDAAkD,KAAK,IAAI;AAAA,IAC3D;AAAA,IACA,oCAAoC,KAAK,OAAO,GAAG;AAAA,IACnD;AAAA,IACA;AAAA,EACF;AAEA,MAAI,KAAK,WAAW;AAClB,UAAM;AAAA,MACJ;AAAA,MACA,uBAAuB,KAAK,SAAS;AAAA,IACvC;AAAA,EACF;AAEA,MAAI,KAAK,aAAa,aAAa;AACjC,UAAM;AAAA,MACJ;AAAA,MACA,mBAAmB,KAAK,QAAQ,QAC9B,KAAK,aAAa,wBAAwB,4BAA4B,gBACxE;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,KAAK,KAAK;AAEhB,MAAI,KAAK,YAAY,SAAS,GAAG;AAC/B,UAAM;AAAA,MACJ;AAAA,MACA,yEAAoE,KAAK,YAAY,KAAK,IAAI,CAAC;AAAA,MAC/F;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,KAAK,kBAAkB;AACzB,UAAM;AAAA,MACJ,gCAAgC,MAAM,WAAW,KAAK,aAAa;AAAA,MACnE,KAAK,IAAI;AAAA,MACT;AAAA,MACA;AAAA,IACF;AAAA,EACF,OAAO;AACL,UAAM;AAAA,MACJ,gCAAgC,MAAM,WAAW,KAAK,aAAa;AAAA,MACnE,sCACE,KAAK,iBAAiB,aAClB,mBACA,YAAY,KAAK,YAAY,WACnC;AAAA,MACA;AAAA,MACA,0BAA0B,KAAK,IAAI;AAAA,MACnC;AAAA,MACA,QAAQ,IAAI;AAAA,MACZ;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;AAYA,SAAS,YAAY,MAA4B;AAC/C,MAAI,CAAC,KAAK,cAAc,CAAC,KAAK,gBAAgB,CAAC,KAAK,gBAAgB;AAClE,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,MAAM,YAAY,OAAO,aAAa,MAAM,WAAW,IAAI,KAAK;AAGxE,MAAI,WAAW,KAAK,KAAK,aAAa,QAAQ,gBAAgB,CAAC,IAAI,UAAkB,MAAM,SAAS,KAAK,CAAC,GAAG,CAAC;AAC9G,MAAI,WAAW,WAAW,EAAG,YAAW,KAAK,UAAU,KAAK,YAAY;AAIxE,MAAI,KAAK,WAAW;AAClB,UAAM,OAAO,KAAK,UAAU,SAAS,GAAG,IAAI,KAAK,UAAU,MAAM,GAAG,EAAE,IAAI,KAAK;AAC/E,eAAW,KAAK,IAAI,MAAM,QAAQ;AAAA,EACpC;AAEA,QAAM,UAAoB,CAAC,WAAW,KAAK,UAAU,KAAK,UAAU,CAAC,EAAE;AACvE,MAAI,YAAY,SAAS,GAAG;AAC1B,UAAM,UAAU,YAAY,IAAI,CAAC,SAAS,GAAG,QAAQ,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI;AAC1F,YAAQ,KAAK,YAAY,OAAO,IAAI;AAAA,EACtC;AACA,MAAI,WAAW,SAAS,GAAG;AACzB,QAAI,WAAW,WAAW,KAAK,WAAW,CAAC,MAAM,QAAQ;AAEvD,cAAQ,KAAK,kBAAkB;AAAA,IACjC,OAAO;AACL,YAAM,UAAU,WAAW,IAAI,CAAC,SAAS,GAAG,QAAQ,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI;AACzF,cAAQ,KAAK,WAAW,OAAO,IAAI;AAAA,IACrC;AAAA,EACF;AAEA,SAAO,8BAA8B,QAAQ,OAAO,QAAQ,KAAK,IAAI,CAAC;AACxE;AAMA,SAAS,SAAS,MAAsB;AACtC,SAAO,6BAA6B,KAAK,IAAI,IACzC,SAAS,IAAI,KACb,SAAS,KAAK,UAAU,IAAI,CAAC;AACnC;AAGA,SAAS,QAAQ,MAAsB;AACrC,SAAO,6BAA6B,KAAK,IAAI,IAAI,OAAO,KAAK,UAAU,IAAI;AAC7E;AAOO,SAAS,gBAAwB;AACtC,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgHT;AAGO,SAAS,aAAa,OAA+B;AAC1D,QAAM,UAAU,MACb,IAAI,CAAC,SAAS,oBAAoB,WAAW,KAAK,IAAI,CAAC,cAAc,KAAK,IAAI,WAAW,EACzF,KAAK,IAAI;AACZ,QAAM,QAAQ,MAAM,IAAI,CAAC,SAAS,WAAW,WAAW,KAAK,IAAI,CAAC,EAAE,EAAE,KAAK,OAAO;AAElF,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQP,OAAO;AAAA;AAAA;AAAA,IAGL,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAkBT;AAGA,SAAS,eAAe,QAAwB;AAC9C,SAAO,OAAO,OAAO,CAAC,EAAE,YAAY,IAAI,OAAO,MAAM,CAAC;AACxD;;;AD5XO,IAAM,kBAAkB;AACxB,IAAM,gBACX;AAGK,SAAS,GAAG,SAA4C;AAC7D,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,QAAQ;AAAA,IAChB,MAAM,SAAS,OAAO,KAAK;AACzB,YAAM,SAAS,KAAK,KAAK,QAAQ,MAAM;AACvC,YAAM,QAAyB,CAAC;AAIhC,YAAM,KAAK,MAAM,UAAU,KAAK,QAAQ,mBAAmB,GAAG,cAAc,CAAC,CAAC;AAC9E,YAAM,KAAK,MAAM,UAAU,KAAK,QAAQ,UAAU,GAAG,aAAa,KAAK,CAAC,CAAC;AAEzE,iBAAW,QAAQ,OAAO;AACxB,cAAM,KAAK,MAAM,SAAS,MAAM,MAAM,CAAC;AAAA,MACzC;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAGA,eAAe,UAAU,MAAc,UAA0C;AAC/E,MAAI;AACF,UAAM,WAAW,MAAM,SAAS,MAAM,MAAM;AAC5C,WAAO,EAAE,MAAM,UAAU,QAAQ,aAAa,WAAW,cAAc,SAAS;AAAA,EAClF,QAAQ;AACN,WAAO,EAAE,MAAM,UAAU,QAAQ,SAAS;AAAA,EAC5C;AACF;AAMA,eAAe,SAAS,MAAoB,QAAwC;AAClF,QAAM,OAAO,KAAK,QAAQ,GAAG,KAAK,IAAI,YAAY;AAClD,QAAM,OAAO,gBAAgB,IAAI;AAEjC,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,SAAS,MAAM,MAAM;AAAA,EACxC,QAAQ;AAEN,WAAO,EAAE,MAAM,UAAU,GAAG,IAAI;AAAA,EAAK,oBAAoB,IAAI,CAAC,IAAI,QAAQ,SAAS;AAAA,EACrF;AAEA,QAAM,cAAc,SAAS,QAAQ,aAAa;AAClD,MAAI,gBAAgB,IAAI;AAItB,WAAO,EAAE,MAAM,UAAU,UAAU,QAAQ,aAAa,UAAU,GAAG,IAAI,OAAO;AAAA,EAClF;AAGA,QAAM,gBAAgB,SAAS,MAAM,cAAc,cAAc,MAAM;AACvE,QAAM,WAAW,OAAO;AACxB,SAAO,EAAE,MAAM,UAAU,QAAQ,aAAa,WAAW,cAAc,SAAS;AAClF;","names":[]}