webmcp-codegen 0.3.2 → 0.3.3

package/dist/cli.js

@@ -1,22 +1,23 @@
 #!/usr/bin/env node
+import {
+  findSpecs,
+  resolveSetup,
+  saveDataFile,
+  startDevServer
+} from "./chunk-MUTXYBL6.js";
 import {
   CONFIG_FILE_NAMES,
-  loadConfig,
   runGenerate
 } from "./chunk-MJQ5B6HB.js";
-import {
-  js
-} from "./chunk-EAKYM4YS.js";
-import {
-  openapi
-} from "./chunk-3LTHWIAP.js";
+import "./chunk-EAKYM4YS.js";
+import "./chunk-3LTHWIAP.js";
 import "./chunk-FWSATV7C.js";
 import "./chunk-KSQMJERY.js";
 
 // src/cli.ts
-import { existsSync as existsSync2 } from "fs";
-import { writeFile as writeFile3 } from "fs/promises";
-import { join as join6 } from "path";
+import { existsSync } from "fs";
+import { writeFile as writeFile2 } from "fs/promises";
+import { join as join2 } from "path";
 import { parseArgs } from "util";
 
 // src/cli-output.ts
@@ -24,15 +25,12 @@ var ESC = "\x1B[";
 var RESET = `${ESC}0m`;
 var BOLD = `${ESC}1m`;
 var DIM = `${ESC}2m`;
-var ITALIC = `${ESC}3m`;
 var FG = {
   red: `${ESC}31m`,
   green: `${ESC}32m`,
   yellow: `${ESC}33m`,
   blue: `${ESC}34m`,
-  magenta: `${ESC}35m`,
   cyan: `${ESC}36m`,
-  white: `${ESC}37m`,
   gray: `${ESC}90m`
 };
 function c(color, text) {
@@ -44,85 +42,82 @@ function bold(text) {
 function dim(text) {
   return `${DIM}${text}${RESET}`;
 }
-function italic(text) {
-  return `${ITALIC}${text}${RESET}`;
-}
-function header(title, subtitle) {
-  const line = "\u2500".repeat(Math.max(title.length, subtitle.length) + 4);
-  return `${c("cyan", line)}
-  ${bold(title)}
-  ${subtitle}
-${c("cyan", line)}`;
-}
-function badge(risk) {
-  switch (risk) {
-    case "read":
-      return c("green", "[read]");
-    case "write":
-      return c("yellow", "[write]");
-    case "destructive":
-      return c("red", "[destructive]");
-    default:
-      return `[${risk}]`;
-  }
-}
-function groupFindings(findings) {
-  const groups = {};
+function summarizeFindings(findings) {
+  const counts = { auth: 0, admin: 0, pii: 0, postAsRead: 0, other: 0 };
   for (const f of findings) {
-    const kind = f.message.includes("sign-in") || f.message.includes("auth") ? "auth" : f.message.includes("Admin") ? "admin" : f.message.includes("PII") || f.message.includes("email") ? "PII" : f.message.includes("POST treated as a read") ? "POST as read" : "other";
-    groups[kind] = (groups[kind] ?? 0) + 1;
+    const msg = f.message.toLowerCase();
+    if (msg.includes("sign-in") || msg.includes("auth") || msg.includes("session")) {
+      counts.auth++;
+    } else if (msg.includes("admin")) {
+      counts.admin++;
+    } else if (msg.includes("pii") || msg.includes("email")) {
+      counts.pii++;
+    } else if (msg.includes("post") && msg.includes("read")) {
+      counts.postAsRead++;
+    } else {
+      counts.other++;
+    }
   }
-  return groups;
+  return counts;
 }
 function renderSummary(result, setup, _cwd, wiring) {
-  const { tools, findings } = result;
+  const { tools, findings, skipped } = result;
   const reads = tools.filter((t) => t.sideEffect === "read").length;
   const writes = tools.filter((t) => t.sideEffect === "write").length;
   const destructives = tools.filter((t) => t.sideEffect === "destructive").length;
-  const skipped = result.skipped.length;
-  const warnings = findings.filter((f) => f.level === "warning").length;
-  const errors = findings.filter((f) => f.level === "error").length;
+  const enabled = tools.filter((t) => t.enabledByDefault).length;
+  const findingCounts = summarizeFindings(findings);
+  const totalFindings = findings.length;
   console.log("");
-  console.log(header("webmcp-codegen", `${tools.length} tools from ${setup.label}`));
+  console.log(`  ${bold("webmcp-codegen")}`);
+  console.log(dim(`  ${setup.label}`));
   console.log("");
-  const summaryParts = [
-    c("green", `${reads} read`),
-    c("yellow", `${writes} write`),
-    destructives > 0 ? c("red", `${destructives} destructive`) : null,
-    skipped > 0 ? dim(`${skipped} skipped`) : null
-  ].filter(Boolean);
-  console.log(`  ${summaryParts.join("  ")}
-`);
-  if (warnings > 0 || errors > 0) {
-    const groups = groupFindings(findings);
-    const parts = Object.entries(groups).map(([kind, count]) => {
-      const color = kind === "auth" || kind === "admin" ? "yellow" : "gray";
-      return `${c(color, kind)} ${count}`;
-    });
-    console.log(`  ${c("yellow", "\u26A0")} ${warnings + errors} finding(s): ${parts.join(", ")}`);
-    console.log(dim(`    Run with --verbose to see details
-`));
+  console.log(`  ${c("green", "\u2713")} ${bold(`${tools.length} tools generated`)}`);
+  console.log(dim(`    ${enabled} ready to use, ${tools.length - enabled} start disabled`));
+  if (skipped.length > 0) {
+    console.log(dim(`    ${skipped.length} skipped (webhooks and excluded endpoints)`));
+  }
+  console.log("");
+  if (totalFindings > 0) {
+    console.log(`  ${c("yellow", "!")} ${bold(`${totalFindings} safety note${totalFindings === 1 ? "" : "s"}`)}`);
+    if (findingCounts.auth > 0) {
+      console.log(dim(`    ${findingCounts.auth} auth endpoint${findingCounts.auth === 1 ? "" : "s"} disabled (agents shouldn't sign in)`));
+    }
+    if (findingCounts.admin > 0) {
+      console.log(dim(`    ${findingCounts.admin} admin endpoint${findingCounts.admin === 1 ? "" : "s"} disabled (review each before enabling)`));
+    }
+    if (findingCounts.pii > 0) {
+      console.log(dim(`    ${findingCounts.pii} endpoint${findingCounts.pii === 1 ? "" : "s"} may return personal data`));
+    }
+    if (findingCounts.postAsRead > 0) {
+      console.log(dim(`    ${findingCounts.postAsRead} POST endpoint${findingCounts.postAsRead === 1 ? "" : "s"} treated as read-only (verify this is correct)`));
+    }
+    console.log(dim(`    Run with --verbose to see all details`));
+    console.log("");
   }
   const outDir = setup.config.generate[0]?.outDir ?? "src/webmcp";
-  console.log(`  ${c("cyan", "\u2192")} ${bold(outDir)}
-`);
+  console.log(`  ${c("cyan", "\u2192")} ${bold("Files")} ${outDir}`);
   if (wiring && !wiring.alreadyWired) {
-    console.log(`  ${c("green", "\u2714")} Registration wired into your app
-`);
+    console.log(`  ${c("cyan", "\u2192")} ${bold("Registration")} wired into your app`);
   }
-  console.log(`  ${bold("Next:")} ${c("cyan", "npx webmcp-codegen dev")} to review and test
-`);
+  console.log("");
+  console.log(`  ${bold("Next:")} ${c("cyan", "npx webmcp-codegen dev")}`);
+  console.log(dim("  Review your tools, edit descriptions, test them live"));
+  console.log("");
+  console.log(dim(`  Docs: https://webmcp-codegen.vercel.app/docs`));
+  console.log("");
 }
 function renderVerbose(result, setup, _cwd) {
   const { tools, findings, skipped } = result;
   console.log("");
-  console.log(bold(`webmcp-codegen: ${tools.length} tools from ${setup.label}`));
+  console.log(bold(`webmcp-codegen`));
+  console.log(dim(`${tools.length} tools from ${setup.label}`));
   console.log("");
   if (skipped.length > 0) {
     console.log(c("gray", "Skipped:"));
     for (const s of skipped) {
       console.log(`  ${dim(s.ref)}`);
-      console.log(`    ${italic(s.reason)}`);
+      console.log(`    ${dim(s.reason)}`);
     }
     console.log("");
   }
@@ -131,18 +126,23 @@ function renderVerbose(result, setup, _cwd) {
     write: tools.filter((t) => t.sideEffect === "write"),
     destructive: tools.filter((t) => t.sideEffect === "destructive")
   };
+  const riskLabels = {
+    read: c("green", "Read-only"),
+    write: c("yellow", "Write"),
+    destructive: c("red", "Destructive")
+  };
   for (const [risk, group] of Object.entries(byRisk)) {
     if (group.length === 0) continue;
-    console.log(badge(risk));
+    console.log(riskLabels[risk] ?? risk);
     for (const tool of group) {
-      const disabled = tool.enabledByDefault ? "" : dim(" (starts disabled)");
-      console.log(`  ${tool.name}${disabled}`);
+      const status = tool.enabledByDefault ? "" : dim(" (disabled)");
+      console.log(`  ${tool.name}${status}`);
       if (tool.description) console.log(`    ${dim(tool.description)}`);
     }
     console.log("");
   }
   if (findings.length > 0) {
-    console.log(bold("Findings:"));
+    console.log(bold("Safety notes:"));
     for (const f of findings) {
       const icon = f.level === "error" ? c("red", "\u2716") : c("yellow", "\u26A0");
       const where = f.tool ? dim(` (${f.tool})`) : "";
@@ -150,1243 +150,14 @@ function renderVerbose(result, setup, _cwd) {
     }
     console.log("");
   }
-  console.log(`  ${c("cyan", "\u2192")} Files in ${setup.config.generate[0]?.outDir ?? "src/webmcp"}
-`);
-}
-
-// src/data-file.ts
-import { readFile, writeFile } from "fs/promises";
-import { join } from "path";
-var DATA_FILE_NAME = ".webmcp-codegen.json";
-async function loadDataFile(cwd) {
-  try {
-    const parsed = JSON.parse(await readFile(join(cwd, DATA_FILE_NAME), "utf8"));
-    return parsed && typeof parsed === "object" ? parsed : {};
-  } catch {
-    return {};
-  }
-}
-async function saveDataFile(cwd, patch) {
-  const current = await loadDataFile(cwd);
-  const next = { ...current, ...patch };
-  if (JSON.stringify(next) === JSON.stringify(current)) return;
-  await writeFile(join(cwd, DATA_FILE_NAME), `${JSON.stringify(next, null, 2)}
-`, "utf8");
-}
-
-// src/detect.ts
-import { readdir } from "fs/promises";
-import { join as join2, relative } from "path";
-var SPEC_FILE_PATTERN = /^(openapi|swagger|api)\.(ya?ml|json)$/i;
-var IGNORED_DIRS = /* @__PURE__ */ new Set([
-  "node_modules",
-  ".git",
-  ".turbo",
-  ".next",
-  "dist",
-  "build",
-  "coverage"
-]);
-var MAX_DEPTH = 5;
-async function findSpecs(cwd) {
-  const found = [];
-  async function walk(dir, depth) {
-    if (depth > MAX_DEPTH) return;
-    let entries;
-    try {
-      entries = await readdir(dir, { withFileTypes: true });
-    } catch {
-      return;
-    }
-    for (const entry of entries) {
-      if (entry.isDirectory()) {
-        if (!IGNORED_DIRS.has(entry.name)) await walk(join2(dir, entry.name), depth + 1);
-      } else if (SPEC_FILE_PATTERN.test(entry.name)) {
-        found.push({ path: join2(dir, entry.name), depth });
-      }
-    }
-  }
-  await walk(cwd, 0);
-  return found.sort((a, b) => a.depth - b.depth).map((entry) => relative(cwd, entry.path));
-}
-
-// src/dev/server.ts
-import { spawn } from "child_process";
-import { createServer } from "http";
-
-// src/setup.ts
-import { existsSync } from "fs";
-import { basename, join as join4 } from "path";
-import { createInterface } from "readline/promises";
-
-// src/detect-app.ts
-import { readdir as readdir2, readFile as readFile2 } from "fs/promises";
-import { join as join3 } from "path";
-var FRAMEWORKS = [
-  { dep: "next", framework: "next" },
-  { dep: "nuxt", framework: "nuxt" },
-  { dep: "@sveltejs/kit", framework: "sveltekit" }
-];
-async function findWebApps(cwd) {
-  const packageDirs = await findPackageDirs(cwd);
-  const apps = [];
-  for (const dir of packageDirs) {
-    const pkg = await readPackageJson(join3(cwd, dir));
-    if (!pkg) continue;
-    const deps = {
-      ...pkg.dependencies,
-      ...pkg.devDependencies
-    };
-    const known = FRAMEWORKS.find(({ dep }) => deps[dep]);
-    const framework = known?.framework ?? (deps.react && deps.vite ? "vite-react" : void 0);
-    if (framework) apps.push({ dir, framework });
-  }
-  return apps.sort((a, b) => score(b) - score(a));
-  function score(app) {
-    return (app.framework === "unknown" ? 0 : 10) + (/(^|\/)(web|app|frontend|client)$/.test(app.dir) ? 2 : 0);
-  }
-}
-async function findPackageDirs(cwd) {
-  const dirs = [];
-  const root = await readPackageJson(join3(cwd, ""));
-  if (root) {
-    dirs.push(".");
-    for (const pattern of await workspaceGlobs(cwd, root)) {
-      dirs.push(...await expandShallowGlob(cwd, pattern));
-    }
-  }
-  return [...new Set(dirs)];
-}
-async function workspaceGlobs(cwd, rootPkg) {
-  const workspaces = rootPkg.workspaces;
-  if (Array.isArray(workspaces)) return workspaces;
-  if (workspaces && typeof workspaces === "object" && Array.isArray(workspaces.packages)) {
-    return workspaces.packages;
-  }
-  return readPnpmWorkspaceGlobs(cwd);
-}
-async function readPnpmWorkspaceGlobs(cwd) {
-  try {
-    const text = await readFile2(join3(cwd, "pnpm-workspace.yaml"), "utf8");
-    const packagesBlock = /^packages:\s*\n((?:\s+-\s+.+\n?)+)/m.exec(text);
-    if (!packagesBlock) return [];
-    return [...packagesBlock[1].matchAll(/^\s+-\s+['"]?([^'"\n]+?)['"]?\s*$/gm)].map(
-      (match) => match[1]
-    );
-  } catch {
-    return [];
-  }
-}
-async function expandShallowGlob(cwd, pattern) {
-  const starAt = pattern.indexOf("*");
-  const base = starAt === -1 ? pattern : pattern.slice(0, starAt).replace(/\/$/, "");
-  if (starAt === -1) return [base];
-  try {
-    const entries = await readdir2(join3(cwd, base), { withFileTypes: true });
-    return entries.filter((entry) => entry.isDirectory()).map((entry) => `${base}/${entry.name}`);
-  } catch {
-    return [];
-  }
-}
-async function readPackageJson(dir) {
-  try {
-    return JSON.parse(await readFile2(join3(dir, "package.json"), "utf8"));
-  } catch {
-    return void 0;
-  }
-}
-
-// src/setup.ts
-async function resolveSetup(cwd, flags) {
-  const hasConfigFile = flags.configPath ? existsSync(join4(cwd, flags.configPath)) : CONFIG_FILE_NAMES.some((name) => existsSync(join4(cwd, name)));
-  if (hasConfigFile) {
-    const { config, path } = await loadConfig(cwd, flags.configPath);
-    if (flags.spec || flags.out) {
-      console.warn(`Note: --spec/--out are ignored; ${basename(path)} is in charge here.`);
-    }
-    const data2 = await loadDataFile(cwd);
-    const apps = await findWebApps(cwd);
-    const app2 = apps.find((candidate) => candidate.dir === data2.app) ?? apps[0];
-    return { config, label: basename(path), app: app2, fromConfigFile: true, remember: {} };
-  }
-  if (flags.configPath) {
-    throw new Error(`No config file at "${flags.configPath}".`);
-  }
-  const data = await loadDataFile(cwd);
-  const spec = flags.spec ?? data.spec ?? await detectSpec(cwd);
-  let app;
-  if (!flags.out) {
-    const apps = await findWebApps(cwd);
-    const remembered = apps.find((candidate) => candidate.dir === data.app);
-    if (remembered) {
-      app = remembered;
-    } else if (apps.length === 1) {
-      app = apps[0];
-      console.log(`Found your web app: ${app?.dir} (${app?.framework})`);
-    } else if (apps.length > 1) {
-      app = await askWhichApp(apps);
-    }
-  }
-  const outDir = flags.out ?? (app && app.dir !== "." ? `${app.dir}/src/webmcp` : "./src/webmcp");
-  return {
-    config: { sources: [openapi({ spec })], generate: [js({ outDir })] },
-    label: flags.spec ? `--spec ${spec}` : `detected ${spec}`,
-    app,
-    fromConfigFile: false,
-    remember: { spec, app: app?.dir }
-  };
-}
-async function askWhichApp(apps) {
-  if (!process.stdin.isTTY) {
-    const first = apps[0];
-    console.log(`Several packages look like web apps; using ${first.dir}. Override with --out.`);
-    return first;
-  }
-  console.log("Several packages look like the web app. Which one should the tools live in?");
-  apps.forEach((app, index) => {
-    console.log(`  ${index + 1}. ${app.dir} (${app.framework})${index === 0 ? "  [default]" : ""}`);
-  });
-  const rl = createInterface({ input: process.stdin, output: process.stdout });
-  try {
-    const answer = await rl.question("Choice [1]: ");
-    const picked = Number.parseInt(answer.trim() || "1", 10);
-    return apps[picked - 1] ?? apps[0];
-  } finally {
-    rl.close();
-  }
-}
-async function detectSpec(cwd) {
-  const specs = await findSpecs(cwd);
-  if (specs.length === 0) {
-    throw new Error(
-      "No OpenAPI spec found in this project.\nPoint at one:  npx webmcp-codegen generate --spec path/to/openapi.json"
-    );
-  }
-  if (specs.length > 1) {
-    const list = specs.map((spec) => `  - ${spec}`).join("\n");
-    throw new Error(
-      `Found ${specs.length} API specs:
-${list}
-
-Pick one:  npx webmcp-codegen generate --spec ${specs[0]}`
-    );
-  }
-  console.log(`Detected ${specs[0]} (override with --spec)`);
-  return specs[0];
-}
-
-// src/dev/ui.ts
-function dashboardHtml() {
-  return `<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="utf-8" />
-<meta name="viewport" content="width=device-width, initial-scale=1" />
-<title>webmcp-codegen</title>
-<style>
-  :root {
-    --baseline: #0a0b0f;
-    --surface: #10131a;
-    --surface-raised: #161a23;
-    --line: #1e2330;
-    --line-subtle: #161a23;
-    --ink: #e9ecf2;
-    --dim: #9aa3b2;
-    --faint: #5d6575;
-    --ghost: #3b4150;
-    --accent: #58a6ff;
-    --accent-dim: rgba(88, 166, 255, 0.15);
-    --signal: #e3b341;
-    --signal-dim: rgba(227, 179, 65, 0.15);
-    --fault: #f47067;
-    --fault-dim: rgba(244, 112, 103, 0.15);
-    --sans: ui-sans-serif, system-ui, -apple-system, sans-serif;
-    --mono: ui-monospace, SFMono-Regular, Menlo, monospace;
-  }
-  * { box-sizing: border-box; }
-  html, body { margin: 0; height: 100%; }
-  body {
-    background: var(--baseline);
-    color: var(--ink);
-    font-family: var(--sans);
-    font-size: 14px;
-    -webkit-font-smoothing: antialiased;
-    overflow: hidden;
-  }
-  ::selection { background: var(--accent); color: var(--baseline); }
-
-  /* Layout */
-  .app { display: flex; height: 100vh; }
-  .sidebar {
-    width: 320px;
-    min-width: 320px;
-    border-right: 1px solid var(--line);
-    display: flex;
-    flex-direction: column;
-    background: var(--surface);
-  }
-  .main {
-    flex: 1;
-    overflow-y: auto;
-    background: var(--baseline);
-  }
-
-  /* Sidebar header */
-  .sidebar-header {
-    padding: 20px 20px 16px;
-    border-bottom: 1px solid var(--line-subtle);
-  }
-  .brand {
-    display: flex;
-    align-items: center;
-    gap: 10px;
-    font-weight: 600;
-    font-size: 15px;
-    margin-bottom: 4px;
-  }
-  .brand-mark {
-    width: 24px;
-    height: 24px;
-    background: linear-gradient(135deg, var(--accent), #7c3aed);
-    border-radius: 6px;
-    display: flex;
-    align-items: center;
-    justify-content: center;
-    font-size: 12px;
-    font-weight: 700;
-    color: white;
-  }
-  .brand-sub {
-    color: var(--faint);
-    font-size: 12px;
-  }
-
-  /* Search */
-  .search-wrap {
-    padding: 12px 16px;
-    border-bottom: 1px solid var(--line-subtle);
-  }
-  .search {
-    width: 100%;
-    background: var(--surface-raised);
-    border: 1px solid var(--line);
-    border-radius: 6px;
-    padding: 8px 12px 8px 32px;
-    color: var(--ink);
-    font-size: 13px;
-    font-family: inherit;
-    position: relative;
-  }
-  .search:focus {
-    outline: none;
-    border-color: var(--accent);
-  }
-  .search-icon {
-    position: absolute;
-    left: 28px;
-    top: 50%;
-    transform: translateY(-50%);
-    color: var(--faint);
-    pointer-events: none;
-  }
-  .search-wrap { position: relative; }
-
-  /* Tool list */
-  .tool-list {
-    flex: 1;
-    overflow-y: auto;
-    padding: 8px 0;
-  }
-  .tool-group {
-    padding: 8px 16px 4px;
-    font-size: 11px;
-    font-weight: 600;
-    text-transform: uppercase;
-    letter-spacing: 0.05em;
-    color: var(--faint);
-  }
-  .tool {
-    display: flex;
-    align-items: center;
-    gap: 10px;
-    width: 100%;
-    padding: 8px 16px;
-    border: none;
-    background: none;
-    color: var(--ink);
-    font-size: 13px;
-    font-family: var(--mono);
-    text-align: left;
-    cursor: pointer;
-    transition: background 0.1s;
-  }
-  .tool:hover { background: var(--surface-raised); }
-  .tool[aria-selected="true"] {
-    background: var(--accent-dim);
-    border-right: 2px solid var(--accent);
-  }
-  .tool-indicator {
-    width: 6px;
-    height: 6px;
-    border-radius: 50%;
-    flex-shrink: 0;
-  }
-  .tool-indicator.read { background: var(--accent); }
-  .tool-indicator.write { background: var(--signal); }
-  .tool-indicator.destructive { background: var(--fault); }
-  .tool-name { flex: 1; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-  .tool-badge {
-    font-size: 10px;
-    padding: 2px 6px;
-    border-radius: 4px;
-    background: var(--surface-raised);
-    color: var(--dim);
-    text-transform: uppercase;
-    letter-spacing: 0.02em;
-  }
-  .tool-badge.disabled { color: var(--signal); }
-
-  /* Main content */
-  .detail {
-    max-width: 640px;
-    margin: 0 auto;
-    padding: 32px 40px;
-  }
-  .placeholder {
-    display: flex;
-    flex-direction: column;
-    align-items: center;
-    justify-content: center;
-    height: 100%;
-    color: var(--faint);
-    text-align: center;
-    padding: 40px;
-  }
-  .placeholder-icon {
-    width: 48px;
-    height: 48px;
-    border-radius: 12px;
-    background: var(--surface-raised);
-    display: flex;
-    align-items: center;
-    justify-content: center;
-    margin-bottom: 16px;
-    color: var(--ghost);
-  }
-  .placeholder kbd {
-    background: var(--surface-raised);
-    padding: 2px 6px;
-    border-radius: 4px;
-    font-family: var(--mono);
-    font-size: 12px;
-  }
-
-  /* Detail header */
-  .detail-header {
-    margin-bottom: 24px;
-    padding-bottom: 20px;
-    border-bottom: 1px solid var(--line-subtle);
-  }
-  .detail-crumb {
-    font-size: 12px;
-    color: var(--faint);
-    margin-bottom: 8px;
-    font-family: var(--mono);
-  }
-  .detail-title {
-    font-size: 24px;
-    font-weight: 600;
-    margin: 0 0 8px;
-    font-family: var(--mono);
-  }
-  .detail-route {
-    font-family: var(--mono);
-    font-size: 13px;
-    color: var(--dim);
-    display: flex;
-    align-items: center;
-    gap: 8px;
-  }
-  .verb {
-    font-weight: 600;
-    padding: 2px 6px;
-    border-radius: 4px;
-    font-size: 11px;
-  }
-  .verb.read { color: var(--accent); background: var(--accent-dim); }
-  .verb.write { color: var(--signal); background: var(--signal-dim); }
-  .verb.destructive { color: var(--fault); background: var(--fault-dim); }
-
-  /* Badges */
-  .badges {
-    display: flex;
-    gap: 8px;
-    margin-top: 12px;
-    flex-wrap: wrap;
-  }
-  .badge {
-    font-size: 11px;
-    padding: 3px 8px;
-    border-radius: 4px;
-    font-weight: 500;
-  }
-  .badge.read { color: var(--accent); background: var(--accent-dim); }
-  .badge.write { color: var(--signal); background: var(--signal-dim); }
-  .badge.destructive { color: var(--fault); background: var(--fault-dim); }
-  .badge.disabled { color: var(--signal); background: var(--signal-dim); }
-  .badge.auth { color: var(--fault); background: var(--fault-dim); }
-
-  /* Sections */
-  .section {
-    margin-bottom: 28px;
-  }
-  .section-label {
-    font-size: 11px;
-    font-weight: 600;
-    text-transform: uppercase;
-    letter-spacing: 0.05em;
-    color: var(--faint);
-    margin-bottom: 10px;
-  }
-
-  /* Description edit */
-  .description-edit {
-    width: 100%;
-    background: var(--surface);
-    border: 1px solid var(--line);
-    border-radius: 6px;
-    padding: 12px;
-    color: var(--ink);
-    font-size: 14px;
-    font-family: inherit;
-    line-height: 1.5;
-    resize: vertical;
-    min-height: 80px;
-  }
-  .description-edit:focus {
-    outline: none;
-    border-color: var(--accent);
-  }
-  .edit-actions {
-    display: flex;
-    align-items: center;
-    gap: 12px;
-    margin-top: 10px;
-  }
-  .btn {
-    padding: 8px 16px;
-    border-radius: 6px;
-    font-size: 13px;
-    font-weight: 500;
-    cursor: pointer;
-    transition: all 0.15s;
-    border: 1px solid var(--line);
-    background: var(--surface);
-    color: var(--ink);
-  }
-  .btn:hover { background: var(--surface-raised); border-color: var(--ghost); }
-  .btn-primary {
-    background: var(--accent);
-    border-color: var(--accent);
-    color: var(--baseline);
-  }
-  .btn-primary:hover { background: #4a95ee; border-color: #4a95ee; }
-  .saved-indicator {
-    font-size: 12px;
-    color: var(--accent);
-    opacity: 0;
-    transition: opacity 0.2s;
-  }
-  .saved-indicator.show { opacity: 1; }
-  .edit-hint {
-    font-size: 12px;
-    color: var(--faint);
-    margin-top: 8px;
-    line-height: 1.5;
-  }
-
-  /* Toggle */
-  .toggle-row {
-    display: flex;
-    align-items: center;
-    gap: 12px;
-    padding: 14px;
-    background: var(--surface);
-    border: 1px solid var(--line);
-    border-radius: 8px;
-  }
-  .switch {
-    width: 40px;
-    height: 22px;
-    border-radius: 11px;
-    background: var(--surface-raised);
-    border: 1px solid var(--line);
-    position: relative;
-    cursor: pointer;
-    transition: all 0.2s;
-    flex-shrink: 0;
-  }
-  .switch::after {
-    content: "";
-    position: absolute;
-    width: 16px;
-    height: 16px;
-    border-radius: 50%;
-    background: var(--dim);
-    top: 2px;
-    left: 2px;
-    transition: all 0.2s;
-  }
-  .switch[aria-checked="true"] {
-    background: var(--accent);
-    border-color: var(--accent);
-  }
-  .switch[aria-checked="true"]::after {
-    left: 20px;
-    background: white;
-  }
-  .toggle-copy { font-size: 13px; line-height: 1.5; }
-  .toggle-copy strong { display: block; margin-bottom: 2px; }
-
-  /* Try it */
-  .try-section {
-    background: var(--surface);
-    border: 1px solid var(--line);
-    border-radius: 8px;
-    overflow: hidden;
-  }
-  .try-header {
-    padding: 14px 16px;
-    border-bottom: 1px solid var(--line-subtle);
-    display: flex;
-    align-items: center;
-    justify-content: space-between;
-  }
-  .try-header h3 {
-    margin: 0;
-    font-size: 13px;
-    font-weight: 600;
-  }
-  .try-note {
-    font-size: 11px;
-    color: var(--faint);
-  }
-  .try-body { padding: 16px; }
-  .auth-note {
-    background: var(--signal-dim);
-    border: 1px solid var(--signal);
-    color: var(--signal);
-    padding: 10px 12px;
-    border-radius: 6px;
-    font-size: 12px;
-    margin-bottom: 14px;
-    line-height: 1.5;
-  }
-  .base-url-input {
-    width: 100%;
-    background: var(--baseline);
-    border: 1px solid var(--line);
-    border-radius: 6px;
-    padding: 8px 12px;
-    color: var(--ink);
-    font-size: 13px;
-    font-family: var(--mono);
-    margin-bottom: 14px;
-  }
-  .base-url-input:focus {
-    outline: none;
-    border-color: var(--accent);
-  }
-  .param-list { margin-bottom: 14px; }
-  .param {
-    margin-bottom: 12px;
-  }
-  .param-label {
-    display: block;
-    font-size: 12px;
-    font-weight: 500;
-    margin-bottom: 4px;
-    color: var(--dim);
-  }
-  .param-label .req { color: var(--fault); }
-  .param-hint {
-    font-size: 11px;
-    color: var(--faint);
-    margin-top: 2px;
-  }
-  .param-input {
-    width: 100%;
-    background: var(--baseline);
-    border: 1px solid var(--line);
-    border-radius: 6px;
-    padding: 8px 12px;
-    color: var(--ink);
-    font-size: 13px;
-    font-family: var(--mono);
-  }
-  .param-input:focus {
-    outline: none;
-    border-color: var(--accent);
-  }
-  .run-btn {
-    width: 100%;
-    padding: 10px;
-    background: var(--accent);
-    border: none;
-    border-radius: 6px;
-    color: var(--baseline);
-    font-size: 13px;
-    font-weight: 600;
-    cursor: pointer;
-    transition: background 0.15s;
-  }
-  .run-btn:hover { background: #4a95ee; }
-  .run-btn:disabled { opacity: 0.5; cursor: not-allowed; }
-  .result {
-    margin-top: 14px;
-    padding: 12px;
-    background: var(--baseline);
-    border: 1px solid var(--line);
-    border-radius: 6px;
-    font-family: var(--mono);
-    font-size: 12px;
-    white-space: pre-wrap;
-    word-break: break-all;
-    max-height: 300px;
-    overflow-y: auto;
-  }
-  .result.ok { border-color: var(--accent); }
-  .result.err { border-color: var(--fault); }
-
-  /* Findings */
-  .findings {
-    margin-bottom: 20px;
-  }
-  .finding {
-    display: flex;
-    gap: 8px;
-    padding: 10px 12px;
-    background: var(--surface);
-    border: 1px solid var(--line);
-    border-radius: 6px;
-    margin-bottom: 8px;
-    font-size: 13px;
-    line-height: 1.5;
-  }
-  .finding.warning { border-left: 3px solid var(--signal); }
-  .finding.error { border-left: 3px solid var(--fault); }
-  .finding-icon { flex-shrink: 0; }
-
-  /* Scrollbar */
-  ::-webkit-scrollbar { width: 8px; height: 8px; }
-  ::-webkit-scrollbar-track { background: transparent; }
-  ::-webkit-scrollbar-thumb { background: var(--line); border-radius: 4px; }
-  ::-webkit-scrollbar-thumb:hover { background: var(--ghost); }
-</style>
-</head>
-<body>
-<div class="app">
-  <aside class="sidebar">
-    <div class="sidebar-header">
-      <div class="brand">
-        <div class="brand-mark">W</div>
-        <span>webmcp-codegen</span>
-      </div>
-      <div class="brand-sub" id="tool-count"></div>
-    </div>
-    <div class="search-wrap">
-      <svg class="search-icon" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
-        <circle cx="11" cy="11" r="8"></circle>
-        <path d="m21 21-4.35-4.35"></path>
-      </svg>
-      <input type="text" class="search" id="search" placeholder="Search tools..." spellcheck="false" />
-    </div>
-    <div class="tool-list" id="tool-list"></div>
-  </aside>
-  <main class="main" id="main">
-    <div class="placeholder" id="placeholder">
-      <div class="placeholder-icon">
-        <svg width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5">
-          <path d="M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.77-3.77a6 6 0 0 1-7.94 7.94l-6.91 6.91a2.12 2.12 0 0 1-3-3l6.91-6.91a6 6 0 0 1 7.94-7.94l-3.76 3.76z"/>
-        </svg>
-      </div>
-      <p>Select a tool to view details</p>
-      <p style="font-size: 12px; margin-top: 8px;">
-        <kbd>\u2191</kbd> <kbd>\u2193</kbd> to navigate &nbsp;\xB7&nbsp; <kbd>\u2318K</kbd> to search
-      </p>
-    </div>
-    <div class="detail" id="detail" hidden></div>
-  </main>
-</div>
-
-<script>
-(function () {
-  var state = null;
-  var selected = null;
-  var filter = "";
-
-  var listEl = document.getElementById("tool-list");
-  var detailEl = document.getElementById("detail");
-  var placeholderEl = document.getElementById("placeholder");
-  var searchEl = document.getElementById("search");
-  var countEl = document.getElementById("tool-count");
-
-  function esc(text) {
-    var div = document.createElement("div");
-    div.textContent = text == null ? "" : String(text);
-    return div.innerHTML;
-  }
-
-  function api(path, options) {
-    return fetch(path, options).then(function (res) {
-      if (!res.ok) throw new Error("Request failed: " + res.status);
-      return res.json();
-    });
-  }
-
-  function load() {
-    api("/api/state").then(function (data) {
-      state = data;
-      countEl.textContent = data.tools.length + " tools from " + data.label;
-      renderList();
-      renderDetail();
-    });
-  }
-
-  function visibleTools() {
-    if (!state) return [];
-    var f = filter.toLowerCase();
-    return state.tools.filter(function (tool) {
-      return tool.name.toLowerCase().indexOf(f) !== -1 ||
-        (tool.description && tool.description.toLowerCase().indexOf(f) !== -1);
-    });
-  }
-
-  function groupTools(tools) {
-    var groups = { read: [], write: [], destructive: [] };
-    tools.forEach(function (tool) {
-      var key = tool.sideEffect || "read";
-      if (!groups[key]) groups[key] = [];
-      groups[key].push(tool);
-    });
-    return groups;
-  }
-
-  function renderList() {
-    var tools = visibleTools();
-    var groups = groupTools(tools);
-    var html = "";
-
-    ["read", "write", "destructive"].forEach(function (risk) {
-      var group = groups[risk];
-      if (!group || group.length === 0) return;
-      html += '<div class="tool-group">' + risk + ' (' + group.length + ')</div>';
-      group.forEach(function (tool) {
-        var isSelected = tool.name === selected;
-        html += '<button class="tool" data-name="' + esc(tool.name) + '" aria-selected="' + isSelected + '">' +
-          '<span class="tool-indicator ' + risk + '"></span>' +
-          '<span class="tool-name">' + esc(tool.name) + "</span>" +
-          (!tool.enabled ? '<span class="tool-badge disabled">off</span>' : "") +
-          "</button>";
-      });
-    });
-
-    if (tools.length === 0) {
-      html = '<div style="padding: 20px; text-align: center; color: var(--faint);">No tools match your search</div>';
-    }
-
-    listEl.innerHTML = html;
-
-    Array.prototype.forEach.call(listEl.querySelectorAll(".tool"), function (btn) {
-      btn.addEventListener("click", function () {
-        selected = btn.getAttribute("data-name");
-        renderList();
-        renderDetail();
-      });
-    });
-  }
-
-  function currentTool() {
-    if (!state || !selected) return null;
-    return state.tools.find(function (tool) { return tool.name === selected; });
-  }
-
-  function renderDetail() {
-    var tool = currentTool();
-    if (!tool) {
-      detailEl.hidden = true;
-      placeholderEl.hidden = false;
-      return;
-    }
-
-    placeholderEl.hidden = true;
-    detailEl.hidden = false;
-
-    var badges = [
-      '<span class="badge ' + tool.sideEffect + '">' + tool.sideEffect + "</span>",
-      !tool.enabled ? '<span class="badge disabled">starts disabled</span>' : "",
-      tool.endpointRole !== "endpoint" ? '<span class="badge auth">' + tool.endpointRole + "</span>" : "",
-      tool.piiInOutput.length > 0 ? '<span class="badge write">pii: ' + esc(tool.piiInOutput.join(", ")) + "</span>" : "",
-    ].filter(Boolean).join("");
-
-    var findings = tool.findings.map(function (finding) {
-      var icon = finding.level === "error" ? "\u2716" : "\u26A0";
-      return '<div class="finding ' + finding.level + '"><span class="finding-icon">' + icon + "</span><span>" + esc(finding.message) + "</span></div>";
-    }).join("");
-
-    var schema = tool.inputSchema || {};
-    var properties = schema.properties || {};
-    var required = schema.required || [];
-    var fields = Object.keys(properties).map(function (key) {
-      var field = properties[key];
-      var type = field.type === "number" || field.type === "integer" ? "number" : "text";
-      var req = required.indexOf(key) !== -1 ? ' <span class="req">*</span>' : "";
-      var hint = field.description ? '<div class="param-hint">' + esc(field.description) + "</div>" : "";
-      return '<div class="param"><label class="param-label">' + esc(key) + req + '</label>' +
-        '<input class="param-input" data-field="' + esc(key) + '" data-type="' + esc(field.type || "string") + '" type="' + type + '" spellcheck="false" />' +
-        hint + "</div>";
-    }).join("");
-
-    var baseUrl = "";
-    try { baseUrl = localStorage.getItem("webmcp-codegen:baseUrl") || tool.serverUrl || ""; } catch (e) {}
-
-    detailEl.innerHTML =
-      '<div class="detail-header">' +
-      '<div class="detail-crumb">' + esc(state.label) + (state.outDir ? " \u2192 " + esc(state.outDir) : "") + "</div>" +
-      '<h1 class="detail-title">' + esc(tool.name) + "</h1>" +
-      '<div class="detail-route">' +
-      '<span class="verb ' + tool.sideEffect + '">' + esc(tool.verb || "GET") + "</span>" +
-      "<span>" + esc(tool.path || "") + "</span>" +
-      "</div>" +
-      '<div class="badges">' + badges + "</div>" +
-      "</div>" +
-
-      (findings ? '<div class="section"><div class="section-label">Audit findings</div>' + findings + "</div>" : "") +
-
-      '<div class="section">' +
-      '<div class="section-label">Description</div>' +
-      '<textarea class="description-edit" id="desc" spellcheck="false">' + esc(tool.description) + "</textarea>" +
-      '<div class="edit-actions">' +
-      '<button class="btn btn-primary" id="save-desc">Save</button>' +
-      '<span class="saved-indicator" id="saved">Saved</span>' +
-      "</div>" +
-      '<div class="edit-hint">Agents pick tools by this text. Saved to .webmcp-codegen.json, so it survives regeneration. \u2318S to save.</div>' +
-      "</div>" +
-
-      '<div class="section">' +
-      '<div class="section-label">Status</div>' +
-      '<div class="toggle-row">' +
-      '<button class="switch" id="toggle-enabled" role="switch" aria-checked="' + tool.enabled + '" aria-label="Enabled"></button>' +
-      '<div class="toggle-copy"><strong>' + (tool.enabled ? "Enabled" : "Disabled") + "</strong>" +
-      (tool.enabled
-        ? "This tool works as soon as the app registers it."
-        : "The generated code is there, commented out. Flipping this regenerates it enabled on the next run.") +
-      "</div></div>" +
-      "</div>" +
-
-      '<div class="section">' +
-      '<div class="section-label">Test</div>' +
-      '<div class="try-section">' +
-      '<div class="try-header"><h3>Run this tool</h3><span class="try-note">server-side, no browser session</span></div>' +
-      '<div class="try-body">' +
-      (tool.requiresAuth
-        ? '<div class="auth-note">\u26A0 This endpoint requires a browser session. The dashboard runs server-side, so you will get a 401. Test it in Chrome DevTools where you are signed in.</div>'
-        : "") +
-      '<input class="base-url-input" id="base-url" type="text" placeholder="Base URL (e.g. http://localhost:3000)" value="' + esc(baseUrl) + '" spellcheck="false" />' +
-      (fields || '<div style="color: var(--faint); font-size: 13px; margin-bottom: 14px;">This tool takes no inputs.</div>') +
-      '<button class="run-btn" id="run">Run tool</button>' +
-      '<pre class="result" id="result" hidden></pre>' +
-      "</div></div>" +
-      "</div>";
-
-    document.getElementById("save-desc").addEventListener("click", saveDescription);
-    document.getElementById("toggle-enabled").addEventListener("click", toggleEnabled);
-    document.getElementById("run").addEventListener("click", runTool);
-    document.getElementById("base-url").addEventListener("change", function (event) {
-      try { localStorage.setItem("webmcp-codegen:baseUrl", event.target.value); } catch (e) {}
-    });
-  }
-
-  function saveDescription() {
-    var tool = currentTool();
-    var desc = document.getElementById("desc").value.trim();
-    if (!tool || !desc) return;
-    api("/api/override", {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ name: tool.name, description: desc }),
-    }).then(function () {
-      tool.description = desc;
-      var saved = document.getElementById("saved");
-      saved.classList.add("show");
-      setTimeout(function () { saved.classList.remove("show"); }, 2000);
-    }).catch(function (error) { alert(error.message); });
-  }
-
-  function toggleEnabled() {
-    var tool = currentTool();
-    if (!tool) return;
-    var next = !tool.enabled;
-    api("/api/override", {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ name: tool.name, enabled: next }),
-    }).then(function () {
-      tool.enabled = next;
-      renderList();
-      renderDetail();
-    }).catch(function (error) { alert(error.message); });
-  }
-
-  function runTool() {
-    var tool = currentTool();
-    if (!tool) return;
-    var input = {};
-    Array.prototype.forEach.call(document.querySelectorAll("[data-field]"), function (field) {
-      var value = field.value;
-      if (value === "") return;
-      var type = field.getAttribute("data-type");
-      if (type === "number" || type === "integer") value = Number(value);
-      if (type === "boolean") value = value === "true";
-      if (type === "object" || type === "array") {
-        try { value = JSON.parse(value); } catch (e) { /* keep as string */ }
-      }
-      input[field.getAttribute("data-field")] = value;
-    });
-    var baseUrl = document.getElementById("base-url").value.trim();
-    var resultEl = document.getElementById("result");
-    var runEl = document.getElementById("run");
-    runEl.disabled = true;
-    runEl.textContent = "Running...";
-    resultEl.hidden = true;
-    api("/api/run", {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ name: tool.name, input: input, baseUrl: baseUrl || undefined }),
-    }).then(function (result) {
-      resultEl.hidden = false;
-      resultEl.className = "result " + (result.ok ? "ok" : "err");
-      resultEl.textContent =
-        (result.status ? "HTTP " + result.status + "
-
-" : "") +
-        (result.error ? result.error : JSON.stringify(result.body, null, 2));
-    }).catch(function (error) {
-      resultEl.hidden = false;
-      resultEl.className = "result err";
-      resultEl.textContent = error.message;
-    }).finally(function () {
-      runEl.disabled = false;
-      runEl.textContent = "Run tool";
-    });
-  }
-
-  /* Keyboard navigation */
-  document.addEventListener("keydown", function (event) {
-    if ((event.metaKey || event.ctrlKey) && event.key === "k") {
-      event.preventDefault();
-      searchEl.focus();
-      return;
-    }
-    if ((event.metaKey || event.ctrlKey) && event.key === "s") {
-      event.preventDefault();
-      saveDescription();
-      return;
-    }
-    if (event.target === searchEl || event.target.tagName === "TEXTAREA" || event.target.tagName === "INPUT") {
-      return;
-    }
-    if (event.key !== "ArrowDown" && event.key !== "ArrowUp") return;
-    var tools = visibleTools();
-    var index = tools.findIndex(function (tool) { return tool.name === selected; });
-    var next = event.key === "ArrowDown" ? index + 1 : index - 1;
-    if (next < 0 || next >= tools.length) return;
-    event.preventDefault();
-    selected = tools[next].name;
-    renderList();
-    renderDetail();
-    var button = listEl.querySelector('[aria-selected="true"]');
-    if (button) button.scrollIntoView({ block: "nearest" });
-  });
-
-  searchEl.addEventListener("input", function (event) {
-    filter = event.target.value;
-    renderList();
-  });
-
-  load();
-})();
-</script>
-</body>
-</html>`;
-}
-
-// src/dev/server.ts
-async function startDevServer(options) {
-  const setup = await resolveSetup(options.cwd, {
-    dryRun: true,
-    skipAudit: false,
-    force: false,
-    watch: false
-  });
-  async function currentState() {
-    const data = await loadDataFile(options.cwd);
-    const result = await runGenerate(setup.config, {
-      cwd: options.cwd,
-      dryRun: true,
-      overrides: data.overrides
-    });
-    return {
-      label: setup.label,
-      outDir: setup.config.generate[0]?.outDir,
-      tools: result.tools.map((tool) => toUiTool(tool, result.findings)),
-      skipped: result.skipped,
-      notes: result.notes
-    };
-  }
-  const server = createServer(async (request, response) => {
-    try {
-      await route(request, response);
-    } catch (error) {
-      sendJson(response, 500, { error: error instanceof Error ? error.message : String(error) });
-    }
-  });
-  async function route(request, response) {
-    const url = new URL(request.url ?? "/", "http://localhost");
-    if (request.method === "GET" && url.pathname === "/") {
-      response.writeHead(200, { "content-type": "text/html; charset=utf-8" });
-      response.end(dashboardHtml());
-      return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/state") {
-      sendJson(response, 200, await currentState());
-      return;
-    }
-    if (request.method === "POST" && url.pathname === "/api/override") {
-      const body = await readJson(request);
-      if (!body.name) {
-        sendJson(response, 400, { error: "Missing tool name." });
-        return;
-      }
-      const data = await loadDataFile(options.cwd);
-      const overrides = { ...data.overrides ?? {} };
-      const existing = overrides[body.name] ?? {};
-      overrides[body.name] = {
-        ...existing,
-        ...body.description !== void 0 ? { description: body.description } : {},
-        ...body.enabled !== void 0 ? { enabled: body.enabled } : {}
-      };
-      await saveDataFile(options.cwd, { overrides });
-      sendJson(response, 200, { ok: true, saved: `.webmcp-codegen.json` });
-      return;
-    }
-    if (request.method === "POST" && url.pathname === "/api/run") {
-      const body = await readJson(request);
-      const state = await currentState();
-      const tool = state.tools.find((candidate) => candidate.name === body.name);
-      if (!tool) {
-        sendJson(response, 404, { error: `No tool named "${body.name}".` });
-        return;
-      }
-      const result = await runEndpoint(tool, body.input ?? {}, body.baseUrl);
-      sendJson(response, result.ok ? 200 : 502, result);
-      return;
-    }
-    sendJson(response, 404, { error: "Not found" });
-  }
-  await new Promise(
-    (resolveListen) => server.listen(options.port, "127.0.0.1", resolveListen)
-  );
-  if (options.open !== false) openBrowser(`http://localhost:${options.port}`);
-  return server;
-}
-function toUiTool(tool, findings) {
-  const [verb, ...rest] = tool.source.ref.split(" ");
-  return {
-    name: tool.name,
-    verb,
-    path: rest.join(" "),
-    description: tool.description,
-    sideEffect: tool.sideEffect,
-    riskTier: tool.riskTier,
-    enabled: tool.enabledByDefault,
-    endpointRole: tool.endpointRole,
-    piiInOutput: tool.piiInOutput,
-    inputSchema: tool.inputSchema,
-    ...tool.pathTemplate ? { pathTemplate: tool.pathTemplate } : {},
-    ...tool.paramLocations ? { paramLocations: tool.paramLocations } : {},
-    ...tool.serverUrl ? { serverUrl: tool.serverUrl } : {},
-    requiresAuth: tool.requiresAuth,
-    findings: findings.filter((finding) => finding.tool === tool.name).map((finding) => ({ level: finding.level, message: finding.message }))
-  };
-}
-async function runEndpoint(tool, input, baseUrlOverride) {
-  const base = baseUrlOverride ?? tool.serverUrl;
-  if (!base) {
-    return {
-      ok: false,
-      error: `No base URL: the spec lists no absolute server. Type your app's URL (e.g. http://localhost:3000) in the "base URL" field and run again.`
-    };
-  }
-  if (!tool.pathTemplate || !tool.verb) {
-    return { ok: false, error: "This tool has no route to call." };
-  }
-  let path = tool.pathTemplate;
-  for (const param of tool.paramLocations?.path ?? []) {
-    path = path.replace(`{${param}}`, encodeURIComponent(String(input[param] ?? "")));
-  }
-  const url = new URL(path, base);
-  for (const param of tool.paramLocations?.query ?? []) {
-    const value = input[param];
-    if (value !== void 0 && value !== null) url.searchParams.set(param, String(value));
-  }
-  const bodyFields = tool.paramLocations?.body ?? [];
-  const body = bodyFields.length === 1 && bodyFields[0] === "body" ? input.body : bodyFields.length > 0 ? Object.fromEntries(bodyFields.map((field) => [field, input[field]])) : void 0;
-  try {
-    const response = await fetch(url, {
-      method: tool.verb,
-      headers: body !== void 0 ? { "content-type": "application/json" } : void 0,
-      body: body !== void 0 ? JSON.stringify(body) : void 0
-    });
-    const text = await response.text();
-    let parsed = text;
-    try {
-      parsed = JSON.parse(text);
-    } catch {
-    }
-    return { ok: response.ok, status: response.status, body: parsed };
-  } catch (error) {
-    return { ok: false, error: error instanceof Error ? error.message : String(error) };
-  }
-}
-function sendJson(response, status, body) {
-  response.writeHead(status, { "content-type": "application/json" });
-  response.end(JSON.stringify(body));
-}
-function readJson(request) {
-  return new Promise((resolveRead, reject) => {
-    let text = "";
-    request.on("data", (chunk) => {
-      text += chunk.toString("utf8");
-    });
-    request.on("end", () => {
-      try {
-        resolveRead(text ? JSON.parse(text) : {});
-      } catch {
-        reject(new Error("Invalid JSON body"));
-      }
-    });
-    request.on("error", reject);
-  });
-}
-function openBrowser(url) {
-  const command = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
-  spawn(command, [url], { stdio: "ignore", shell: process.platform === "win32" }).unref();
+  console.log(dim(`Files: ${setup.config.generate[0]?.outDir ?? "src/webmcp"}`));
+  console.log(dim(`Docs: https://webmcp-codegen.vercel.app/docs`));
+  console.log("");
 }
 
 // src/wire.ts
-import { readFile as readFile3, writeFile as writeFile2 } from "fs/promises";
-import { dirname, join as join5, relative as relative2 } from "path";
+import { readFile, writeFile } from "fs/promises";
+import { dirname, join, relative } from "path";
 async function planWiring(cwd, app, outDir) {
   switch (app.framework) {
     case "next":
@@ -1399,28 +170,28 @@ async function planWiring(cwd, app, outDir) {
 }
 async function applyWiring(plan) {
   for (const edit of plan.edits) {
-    await writeFile2(edit.path, edit.contents, "utf8");
+    await writeFile(edit.path, edit.contents, "utf8");
   }
 }
 async function planNextWiring(cwd, app, outDir) {
   const layoutCandidates = [
-    join5(cwd, app.dir, "src/app/layout.tsx"),
-    join5(cwd, app.dir, "src/app/layout.jsx"),
-    join5(cwd, app.dir, "app/layout.tsx"),
-    join5(cwd, app.dir, "app/layout.jsx")
+    join(cwd, app.dir, "src/app/layout.tsx"),
+    join(cwd, app.dir, "src/app/layout.jsx"),
+    join(cwd, app.dir, "app/layout.tsx"),
+    join(cwd, app.dir, "app/layout.jsx")
   ];
   const layoutPath = await firstExisting(layoutCandidates);
   if (!layoutPath) return null;
-  const registerPath = join5(cwd, outDir, "register.tsx");
-  const layout = await readFile3(layoutPath, "utf8");
+  const registerPath = join(cwd, outDir, "register.tsx");
+  const layout = await readFile(layoutPath, "utf8");
   if (layout.includes("WebMCPRegister")) return { edits: [], alreadyWired: true };
-  const importPath = withoutExtension(relative2(dirname(layoutPath), registerPath));
+  const importPath = withoutExtension(relative(dirname(layoutPath), registerPath));
   const edits = [
     {
       path: registerPath,
       action: "create",
       contents: nextRegisterComponent(),
-      summary: `created ${relative2(cwd, registerPath)} (a client component that registers your tools on page load)`
+      summary: `created ${relative(cwd, registerPath)} (a client component that registers your tools on page load)`
     }
   ];
   const withImport = insertAfterLastImport(
@@ -1437,7 +208,7 @@ async function planNextWiring(cwd, app, outDir) {
     path: layoutPath,
     action: "modify",
     contents: withComponent,
-    summary: `added 2 lines to ${relative2(cwd, layoutPath)} (an import and <WebMCPRegister /> inside <body>)`
+    summary: `added 2 lines to ${relative(cwd, layoutPath)} (an import and <WebMCPRegister /> inside <body>)`
   });
   return { edits };
 }
@@ -1461,16 +232,16 @@ export function WebMCPRegister() {
 }
 async function planViteWiring(cwd, app, outDir) {
   const entryCandidates = [
-    join5(cwd, app.dir, "src/main.tsx"),
-    join5(cwd, app.dir, "src/main.jsx"),
-    join5(cwd, app.dir, "src/index.tsx"),
-    join5(cwd, app.dir, "src/index.jsx")
+    join(cwd, app.dir, "src/main.tsx"),
+    join(cwd, app.dir, "src/main.jsx"),
+    join(cwd, app.dir, "src/index.tsx"),
+    join(cwd, app.dir, "src/index.jsx")
   ];
   const entryPath = await firstExisting(entryCandidates);
   if (!entryPath) return null;
-  const entry = await readFile3(entryPath, "utf8");
+  const entry = await readFile(entryPath, "utf8");
   if (entry.includes("registerAllTools")) return { edits: [], alreadyWired: true };
-  const importPath = withoutExtension(relative2(dirname(entryPath), join5(cwd, outDir, "index")));
+  const importPath = withoutExtension(relative(dirname(entryPath), join(cwd, outDir, "index")));
   const withWiring = insertAfterLastImport(
     entry,
     `import { registerAllTools } from "${importPath}";
@@ -1484,7 +255,7 @@ void registerAllTools();`
         path: entryPath,
         action: "modify",
         contents: withWiring,
-        summary: `added 2 lines to ${relative2(cwd, entryPath)} (an import and a registerAllTools() call)`
+        summary: `added 2 lines to ${relative(cwd, entryPath)} (an import and a registerAllTools() call)`
       }
     ]
   };
@@ -1506,7 +277,7 @@ function withoutExtension(path) {
 async function firstExisting(paths) {
   for (const path of paths) {
     try {
-      await readFile3(path, "utf8");
+      await readFile(path, "utf8");
       return path;
     } catch {
     }
@@ -1597,8 +368,8 @@ async function main() {
 async function init() {
   const cwd = process.cwd();
   const configFile = CONFIG_FILE_NAMES[0] ?? "codegen.config.mjs";
-  const configPath = join6(cwd, configFile);
-  if (existsSync2(configPath)) {
+  const configPath = join2(cwd, configFile);
+  if (existsSync(configPath)) {
     console.error(`
 \u2716 ${configFile} already exists. Nothing to do.
 `);
@@ -1606,7 +377,7 @@ async function init() {
   }
   const specs = await findSpecs(cwd);
   const specPath = specs.length > 0 ? `./${specs[0]}` : "./openapi.yaml";
-  await writeFile3(
+  await writeFile2(
     configPath,
     `import { defineConfig } from "webmcp-codegen";
 import { openapi } from "webmcp-codegen/sources";