@12-apps/mcp 3.10.0 → 3.12.0

package/dist/oauth/index.js

@@ -1,6 +1,9 @@
 import {
-  providerForHostId
-} from "../chunk-FBUSSQSK.js";
+  createPrismaMcpStores,
+  disconnectAiHost,
+  listAiConnections
+} from "../chunk-VDD4YRNP.js";
+import "../chunk-FBUSSQSK.js";
 import {
   ACCESS_TOKEN_TTL_SECONDS,
   AUTHORIZATION_CODE_AUDIENCE,
@@ -44,193 +47,7 @@ import {
   verifyCode
 } from "../chunk-UIILEGAC.js";
 import "../chunk-WJJNKKNS.js";
-import {
-  __name
-} from "../chunk-7QVYU63E.js";
-
-// src/oauth/prisma-stores.ts
-function clientStore(getPrisma) {
-  return {
-    async create(client) {
-      const prisma = await getPrisma();
-      return prisma.oAuthClient.create({ data: client });
-    },
-    async findByClientId(clientId) {
-      const prisma = await getPrisma();
-      return prisma.oAuthClient.findUnique({ where: { clientId } });
-    }
-  };
-}
-__name(clientStore, "clientStore");
-function refreshTokenStore(getPrisma) {
-  return {
-    async create(token) {
-      const prisma = await getPrisma();
-      await prisma.oAuthRefreshToken.create({ data: token });
-    },
-    async findByHash(tokenHash) {
-      const prisma = await getPrisma();
-      return prisma.oAuthRefreshToken.findUnique({ where: { tokenHash } });
-    },
-    async hasSuccessor(tokenHash) {
-      const prisma = await getPrisma();
-      const successor = await prisma.oAuthRefreshToken.findFirst({
-        where: { rotatedFrom: tokenHash }
-      });
-      return successor !== null;
-    },
-    async listFamily(userEmail, clientId) {
-      const prisma = await getPrisma();
-      return prisma.oAuthRefreshToken.findMany({ where: { userEmail, clientId } });
-    },
-    async revokeHashes(tokenHashes, at) {
-      if (tokenHashes.length === 0) return;
-      const prisma = await getPrisma();
-      await prisma.oAuthRefreshToken.updateMany({
-        where: { tokenHash: { in: [...tokenHashes] } },
-        data: { revokedAt: at }
-      });
-    },
-    async rotate(successor, parentHash, at) {
-      const prisma = await getPrisma();
-      return prisma.$transaction(async (tx) => {
-        const { count } = await tx.oAuthRefreshToken.updateMany({
-          where: { tokenHash: parentHash, revokedAt: null },
-          data: { revokedAt: at }
-        });
-        if (count !== 1) return false;
-        await tx.oAuthRefreshToken.create({ data: successor });
-        return true;
-      });
-    },
-    async revokeLiveForClient(userEmail, clientId) {
-      const prisma = await getPrisma();
-      const { count } = await prisma.oAuthRefreshToken.updateMany({
-        where: { userEmail, clientId, revokedAt: null },
-        data: { revokedAt: /* @__PURE__ */ new Date() }
-      });
-      return count;
-    }
-  };
-}
-__name(refreshTokenStore, "refreshTokenStore");
-var CONNECTION_SELECT = {
-  oauthClientId: true,
-  clientName: true,
-  host: true,
-  connectedAt: true,
-  lastActiveAt: true
-};
-function connectionStore(getPrisma) {
-  return {
-    async lastActiveAt(userId, oauthClientId) {
-      const prisma = await getPrisma();
-      const row = await prisma.mcpConnection.findUnique({
-        where: { userId_oauthClientId: { userId, oauthClientId } },
-        select: { lastActiveAt: true }
-      });
-      return row?.lastActiveAt ?? null;
-    },
-    async recordActivity({ userId, oauthClientId, clientName, host, at }) {
-      const prisma = await getPrisma();
-      await prisma.mcpConnection.upsert({
-        where: { userId_oauthClientId: { userId, oauthClientId } },
-        create: { userId, oauthClientId, clientName, host, connectedAt: at, lastActiveAt: at },
-        // Never blank a known host on refresh — keep the existing attribution
-        // when this grant cannot derive one.
-        update: {
-          clientName,
-          lastActiveAt: at,
-          revokedAt: null,
-          ...host ? { host } : {}
-        }
-      });
-    },
-    async listActive(userId) {
-      const prisma = await getPrisma();
-      const rows = await prisma.mcpConnection.findMany({
-        where: { userId, revokedAt: null },
-        orderBy: { lastActiveAt: "desc" },
-        select: { ...CONNECTION_SELECT }
-      });
-      return rows;
-    },
-    revokeByHost: /* @__PURE__ */ __name((userId, host) => revokeByHost(getPrisma, userId, host), "revokeByHost"),
-    announce: /* @__PURE__ */ __name((userId, host) => announce(getPrisma, userId, host), "announce")
-  };
-}
-__name(connectionStore, "connectionStore");
-async function revokeByHost(getPrisma, userId, host) {
-  const prisma = await getPrisma();
-  const attributed = await prisma.mcpConnection.findMany({
-    where: { userId, revokedAt: null, host },
-    select: { id: true, oauthClientId: true }
-  });
-  const targets = attributed.length > 0 ? attributed : await prisma.mcpConnection.findMany({
-    where: { userId, revokedAt: null, host: null },
-    select: { id: true, oauthClientId: true }
-  });
-  if (targets.length === 0) return [];
-  await prisma.mcpConnection.updateMany({
-    where: { id: { in: targets.map((row) => String(row.id)) } },
-    data: { revokedAt: /* @__PURE__ */ new Date() }
-  });
-  return targets.map((row) => String(row.oauthClientId));
-}
-__name(revokeByHost, "revokeByHost");
-async function announce(getPrisma, userId, host) {
-  const prisma = await getPrisma();
-  const now = /* @__PURE__ */ new Date();
-  const refreshed = await prisma.mcpConnection.updateMany({
-    where: { userId, revokedAt: null, host },
-    data: { lastActiveAt: now, revokedAt: null }
-  });
-  if (refreshed.count > 0) return refreshed.count;
-  const candidate = await prisma.mcpConnection.findFirst({
-    where: { userId, revokedAt: null, host: null },
-    orderBy: { lastActiveAt: "desc" },
-    select: { id: true }
-  });
-  if (!candidate) return 0;
-  await prisma.mcpConnection.update({
-    where: { id: candidate.id },
-    data: { host, lastActiveAt: now, revokedAt: null }
-  });
-  return 1;
-}
-__name(announce, "announce");
-function createPrismaMcpStores(getPrisma) {
-  return {
-    clients: clientStore(getPrisma),
-    refreshTokens: refreshTokenStore(getPrisma),
-    connections: connectionStore(getPrisma)
-  };
-}
-__name(createPrismaMcpStores, "createPrismaMcpStores");
-
-// src/oauth/connections.ts
-function asProvider(host) {
-  return host === null ? null : providerForHostId(host);
-}
-__name(asProvider, "asProvider");
-async function listAiConnections(connections, userId) {
-  const rows = await connections.listActive(userId);
-  return rows.map((row) => ({ ...row, host: asProvider(row.host) }));
-}
-__name(listAiConnections, "listAiConnections");
-async function disconnectAiHost(stores, caller, host) {
-  const disconnectedClientIds = await stores.connections.revokeByHost(caller.userId, host);
-  const revoked = await Promise.all(
-    disconnectedClientIds.map(
-      (clientId) => stores.refreshTokens.revokeLiveForClient(caller.email, clientId)
-    )
-  );
-  return {
-    disconnectedClientIds,
-    revokedRefreshTokens: revoked.reduce((total, count) => total + count, 0)
-  };
-}
-__name(disconnectAiHost, "disconnectAiHost");
+import "../chunk-7QVYU63E.js";
 export {
   ACCESS_TOKEN_TTL_SECONDS,
   AUTHORIZATION_CODE_AUDIENCE,

package/dist/oauth/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/oauth/prisma-stores.ts","../../src/oauth/connections.ts"],"sourcesContent":["import type {\n  McpConnectionStore,\n  McpOauthStores,\n  NewOAuthClient,\n  NewRefreshToken,\n  OAuthClientStore,\n  RefreshTokenStore,\n  StoredMcpConnection,\n  StoredOAuthClient,\n  StoredRefreshToken,\n} from \"./stores\";\n\n/**\n * The ports of `./stores.ts`, filled by Prisma (12-23).\n *\n * The package owns the three models (`prisma/mcp.prisma`), so their delegate\n * shapes are known and this adapter can be exact. A host with Prisma therefore\n * writes ONE line —\n *\n *   stores: createPrismaMcpStores(async () => getPrismaClient() as unknown as McpOauthPrisma)\n *\n * — and no host code at all beyond it. The client is duck-typed (only the\n * delegates used, only the arguments used) so this file never imports a project's\n * generated client, and a non-Prisma host fills the ports directly instead.\n */\n\n/** A `where` on the composite unique of `mcp_connections`. */\ninterface ConnectionKey {\n  userId_oauthClientId: { userId: string; oauthClientId: string };\n}\n\n/** The minimal Prisma surface the AS needs. Every field is one the surface writes. */\nexport interface McpOauthPrisma {\n  oAuthClient: {\n    create(args: { data: NewOAuthClient }): Promise<StoredOAuthClient>;\n    findUnique(args: { where: { clientId: string } }): Promise<StoredOAuthClient | null>;\n  };\n  oAuthRefreshToken: {\n    create(args: { data: NewRefreshToken }): Promise<unknown>;\n    findUnique(args: { where: { tokenHash: string } }): Promise<StoredRefreshToken | null>;\n    findFirst(args: { where: { rotatedFrom: string } }): Promise<{ tokenHash: string } | null>;\n    findMany(args: {\n      where: { userEmail: string; clientId: string };\n    }): Promise<StoredRefreshToken[]>;\n    // No single-row `update`: the rotation used to revoke its parent with one and\n    // that was the bug (unconditional, so two concurrent rotations both won). Every\n    // revoke here is now an `updateMany` with a predicate that says WHICH rows may\n    // move, which is also why this delegate list stays honest about what is written.\n    updateMany(args: {\n      where:\n        | { tokenHash: { in: string[] } }\n        | { userEmail: string; clientId: string; revokedAt: null };\n      data: { revokedAt: Date };\n    }): Promise<{ count: number }>;\n  };\n  mcpConnection: {\n    findUnique(args: {\n      where: ConnectionKey;\n      select: { lastActiveAt: true };\n    }): Promise<{ lastActiveAt: Date } | null>;\n    findFirst(args: {\n      where: { userId: string; revokedAt: null; host: null };\n      orderBy: { lastActiveAt: \"desc\" };\n      select: { id: true };\n    }): Promise<{ id: string } | null>;\n    findMany(args: {\n      where: { userId: string; revokedAt: null; host?: string | null };\n      orderBy?: { lastActiveAt: \"desc\" };\n      select: Record<string, true>;\n    }): Promise<Record<string, unknown>[]>;\n    upsert(args: {\n      where: ConnectionKey;\n      create: Record<string, unknown>;\n      update: Record<string, unknown>;\n    }): Promise<unknown>;\n    update(args: { where: { id: string }; data: Record<string, unknown> }): Promise<unknown>;\n    updateMany(args: {\n      where: { id: { in: string[] } } | { userId: string; revokedAt: null; host: string };\n      data: Record<string, unknown>;\n    }): Promise<{ count: number }>;\n  };\n  /**\n   * Prisma's INTERACTIVE transaction, used for the rotation's claim + write. The\n   * callback form (not the array form) is required: the successor may only be\n   * created once the conditional revoke has reported that it, and not a concurrent\n   * sibling, claimed the parent — see `RefreshTokenStore.rotate`.\n   */\n  $transaction<T>(fn: (tx: McpOauthTx) => Promise<T>): Promise<T>;\n}\n\n/**\n * The delegate subset used INSIDE the rotation transaction. Not exported: it is\n * reachable structurally through `McpOauthPrisma.$transaction`, so no host ever\n * needs to name it, and exporting a type nobody imports is what knip flags.\n */\ninterface McpOauthTx {\n  oAuthRefreshToken: {\n    create(args: { data: NewRefreshToken }): Promise<unknown>;\n    updateMany(args: {\n      where: { tokenHash: string; revokedAt: null };\n      data: { revokedAt: Date };\n    }): Promise<{ count: number }>;\n  };\n}\n\n/** A lazily-resolved client, so a host's singleton is awaited per call. */\nexport type McpOauthPrismaProvider = () => Promise<McpOauthPrisma>;\n\nfunction clientStore(getPrisma: McpOauthPrismaProvider): OAuthClientStore {\n  return {\n    async create(client: NewOAuthClient) {\n      const prisma = await getPrisma();\n      return prisma.oAuthClient.create({ data: client });\n    },\n    async findByClientId(clientId: string) {\n      const prisma = await getPrisma();\n      return prisma.oAuthClient.findUnique({ where: { clientId } });\n    },\n  };\n}\n\nfunction refreshTokenStore(getPrisma: McpOauthPrismaProvider): RefreshTokenStore {\n  return {\n    async create(token) {\n      const prisma = await getPrisma();\n      await prisma.oAuthRefreshToken.create({ data: token });\n    },\n    async findByHash(tokenHash) {\n      const prisma = await getPrisma();\n      return prisma.oAuthRefreshToken.findUnique({ where: { tokenHash } });\n    },\n    async hasSuccessor(tokenHash) {\n      const prisma = await getPrisma();\n      const successor = await prisma.oAuthRefreshToken.findFirst({\n        where: { rotatedFrom: tokenHash },\n      });\n      return successor !== null;\n    },\n    async listFamily(userEmail, clientId) {\n      const prisma = await getPrisma();\n      return prisma.oAuthRefreshToken.findMany({ where: { userEmail, clientId } });\n    },\n    async revokeHashes(tokenHashes, at) {\n      if (tokenHashes.length === 0) return;\n      const prisma = await getPrisma();\n      await prisma.oAuthRefreshToken.updateMany({\n        where: { tokenHash: { in: [...tokenHashes] } },\n        data: { revokedAt: at },\n      });\n    },\n    async rotate(successor, parentHash, at) {\n      const prisma = await getPrisma();\n      return prisma.$transaction(async (tx) => {\n        // CLAIM-ONCE. The `revokedAt: null` predicate is what makes this safe under\n        // concurrency, and it is load-bearing rather than defensive: on Postgres's\n        // default READ COMMITTED, a second transaction's `updateMany` blocks on the\n        // row lock, then re-evaluates this WHERE against the COMMITTED row — which\n        // now has a `revokedAt` — and reports 0 rows. So exactly one caller can ever\n        // see count 1, and it is the only one that goes on to create a successor.\n        // An unconditional `update` would let both through: two live successors of\n        // one parent, and replay detection silently defeated (it waits for a third\n        // use of the parent that now never comes).\n        const { count } = await tx.oAuthRefreshToken.updateMany({\n          where: { tokenHash: parentHash, revokedAt: null },\n          data: { revokedAt: at },\n        });\n        // Lost the claim: write NOTHING. The zero-row update commits as the no-op\n        // it is, so there is nothing to roll back.\n        if (count !== 1) return false;\n        // Same transaction as the claim, so a crash cannot leave a live parent AND\n        // a live child either.\n        await tx.oAuthRefreshToken.create({ data: successor });\n        return true;\n      });\n    },\n    async revokeLiveForClient(userEmail, clientId) {\n      const prisma = await getPrisma();\n      const { count } = await prisma.oAuthRefreshToken.updateMany({\n        where: { userEmail, clientId, revokedAt: null },\n        data: { revokedAt: new Date() },\n      });\n      return count;\n    },\n  };\n}\n\n/** The connection columns the account surface reads. */\nconst CONNECTION_SELECT = {\n  oauthClientId: true,\n  clientName: true,\n  host: true,\n  connectedAt: true,\n  lastActiveAt: true,\n} as const;\n\nfunction connectionStore(getPrisma: McpOauthPrismaProvider): McpConnectionStore {\n  return {\n    async lastActiveAt(userId, oauthClientId) {\n      const prisma = await getPrisma();\n      const row = await prisma.mcpConnection.findUnique({\n        where: { userId_oauthClientId: { userId, oauthClientId } },\n        select: { lastActiveAt: true },\n      });\n      return row?.lastActiveAt ?? null;\n    },\n    async recordActivity({ userId, oauthClientId, clientName, host, at }) {\n      const prisma = await getPrisma();\n      await prisma.mcpConnection.upsert({\n        where: { userId_oauthClientId: { userId, oauthClientId } },\n        create: { userId, oauthClientId, clientName, host, connectedAt: at, lastActiveAt: at },\n        // Never blank a known host on refresh — keep the existing attribution\n        // when this grant cannot derive one.\n        update: {\n          clientName,\n          lastActiveAt: at,\n          revokedAt: null,\n          ...(host ? { host } : {}),\n        },\n      });\n    },\n    async listActive(userId) {\n      const prisma = await getPrisma();\n      const rows = await prisma.mcpConnection.findMany({\n        where: { userId, revokedAt: null },\n        orderBy: { lastActiveAt: \"desc\" },\n        select: { ...CONNECTION_SELECT },\n      });\n      return rows as unknown as StoredMcpConnection[];\n    },\n    revokeByHost: (userId, host) => revokeByHost(getPrisma, userId, host),\n    announce: (userId, host) => announce(getPrisma, userId, host),\n  };\n}\n\n/**\n * Disconnect one provider's connections — and ONLY that provider's.\n *\n * Every read and write is scoped by `userId`: a connection is per-user (an MCP\n * bearer is not tenant-scoped), so the user id IS the isolation here, and the\n * `id` list passed to the update comes from a query that already applied it.\n */\nasync function revokeByHost(\n  getPrisma: McpOauthPrismaProvider,\n  userId: string,\n  host: string,\n): Promise<string[]> {\n  const prisma = await getPrisma();\n  const attributed = await prisma.mcpConnection.findMany({\n    where: { userId, revokedAt: null, host },\n    select: { id: true, oauthClientId: true },\n  });\n  // A legacy `host = null` row is claimed only when the provider has no row of\n  // its own: pre-attribution connections must stay disconnectable, but a provider\n  // that DID attribute can never revoke another assistant's row.\n  const targets =\n    attributed.length > 0\n      ? attributed\n      : await prisma.mcpConnection.findMany({\n          where: { userId, revokedAt: null, host: null },\n          select: { id: true, oauthClientId: true },\n        });\n  if (targets.length === 0) return [];\n  await prisma.mcpConnection.updateMany({\n    where: { id: { in: targets.map((row) => String(row.id)) } },\n    data: { revokedAt: new Date() },\n  });\n  return targets.map((row) => String(row.oauthClientId));\n}\n\n/** A provider's self-report: refresh its own row, or claim the unattributed one. */\nasync function announce(\n  getPrisma: McpOauthPrismaProvider,\n  userId: string,\n  host: string,\n): Promise<number> {\n  const prisma = await getPrisma();\n  const now = new Date();\n  const refreshed = await prisma.mcpConnection.updateMany({\n    where: { userId, revokedAt: null, host },\n    data: { lastActiveAt: now, revokedAt: null },\n  });\n  if (refreshed.count > 0) return refreshed.count;\n\n  // No row for this provider yet — attribute the just-connected one. Scoped by\n  // user, so a self-report can never reach another account's connection.\n  const candidate = await prisma.mcpConnection.findFirst({\n    where: { userId, revokedAt: null, host: null },\n    orderBy: { lastActiveAt: \"desc\" },\n    select: { id: true },\n  });\n  if (!candidate) return 0;\n  await prisma.mcpConnection.update({\n    where: { id: candidate.id },\n    data: { host, lastActiveAt: now, revokedAt: null },\n  });\n  return 1;\n}\n\n/** Every port, over one lazily-resolved Prisma client. */\nexport function createPrismaMcpStores(getPrisma: McpOauthPrismaProvider): McpOauthStores {\n  return {\n    clients: clientStore(getPrisma),\n    refreshTokens: refreshTokenStore(getPrisma),\n    connections: connectionStore(getPrisma),\n  };\n}\n","import { providerForHostId, type AiProvider } from \"../guide\";\nimport type {\n  McpConnectionStore,\n  RefreshTokenStore,\n  StoredMcpConnection,\n} from \"./stores\";\n\n/**\n * The account surface's connection OPERATIONS (12-48) — the half of the\n * `GET/DELETE /api/account/mcp-connections` endpoints that is contract rather\n * than host vocabulary.\n *\n * The ROUTE stays in the host on purpose: it mixes the host's session\n * resolution, its response envelope, its published plugin URLs and its logger,\n * and injecting all four here would make the config surface bigger than the\n * handler it replaces. What must NOT stay in each host is the disconnect's\n * both-halves rule, because getting it half right LOOKS right:\n *\n * `connections.revokeByHost` ends the connection rows and returns the OAuth\n * client ids behind them — and a host that stops there has revoked nothing that\n * matters. The assistant still holds a live refresh token for each of those\n * clients, rotates it on schedule, and the very next grant records fresh\n * activity: the card the user just disconnected lights green again on its own.\n * So the rule is one function: revoke the rows AND end every live refresh token\n * of each returned client, in the same call, with no way to import one half\n * without the other.\n *\n * Deliberately NOT invalidated here: the assistant's current ACCESS token.\n * Those are self-contained JWTs the server does not track; a just-disconnected\n * host keeps working for at most their TTL (15 minutes by default) and can then\n * obtain nothing further.\n */\n\n/** An active AI connection, narrowed for display. */\nexport interface AiConnectionSnapshot {\n  oauthClientId: string;\n  clientName: string | null;\n  /** The provider this connection is attributed to (`null` = pre-attribution). */\n  host: AiProvider | null;\n  connectedAt: Date;\n  lastActiveAt: Date;\n}\n\n/** The caller the operations act for — always the session's own user. */\nexport interface AiConnectionCaller {\n  /** The host's user id — what `mcp_connections` rows are keyed by. */\n  userId: string;\n  /** The identity refresh tokens are bound to (the AS binds by email). */\n  email: string;\n}\n\n/** What one disconnect actually ended, for the host's log and response. */\nexport interface AiDisconnectResult {\n  /** OAuth client ids whose connection rows were revoked. */\n  disconnectedClientIds: string[];\n  /** Live refresh tokens ended across those clients — the half that cuts access. */\n  revokedRefreshTokens: number;\n}\n\n/** Narrow a stored `host` string to a known provider, or `null`. */\nfunction asProvider(host: string | null): AiProvider | null {\n  return host === null ? null : providerForHostId(host);\n}\n\n/**\n * A user's active connections, most-recently-active first, with the stored open\n * `host` string narrowed to the package's closed {@link AiProvider} union — the\n * store cannot know which assistants have screens, but the union is this\n * package's own vocabulary (`guide.ts`), so the narrowing lives beside it\n * rather than being re-derived in every host.\n */\nexport async function listAiConnections(\n  connections: McpConnectionStore,\n  userId: string,\n): Promise<AiConnectionSnapshot[]> {\n  const rows: StoredMcpConnection[] = await connections.listActive(userId);\n  return rows.map((row) => ({ ...row, host: asProvider(row.host) }));\n}\n\n/**\n * Disconnect one provider for this user — BOTH halves, atomically from the\n * caller's point of view (see the module doc for why one half alone is a\n * disconnect that undoes itself).\n *\n * Idempotent: disconnecting a provider that was never connected returns zero\n * counts rather than failing, so a double-click is harmless. Repeat calls also\n * report zero — `revokeLiveForClient` skips already-revoked tokens by contract.\n */\nexport async function disconnectAiHost(\n  stores: { connections: McpConnectionStore; refreshTokens: RefreshTokenStore },\n  caller: AiConnectionCaller,\n  host: AiProvider,\n): Promise<AiDisconnectResult> {\n  const disconnectedClientIds = await stores.connections.revokeByHost(caller.userId, host);\n  const revoked = await Promise.all(\n    disconnectedClientIds.map((clientId) =>\n      stores.refreshTokens.revokeLiveForClient(caller.email, clientId),\n    ),\n  );\n  return {\n    disconnectedClientIds,\n    revokedRefreshTokens: revoked.reduce((total, count) => total + count, 0),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4GA,SAAS,YAAY,WAAqD;AACxE,SAAO;AAAA,IACL,MAAM,OAAO,QAAwB;AACnC,YAAM,SAAS,MAAM,UAAU;AAC/B,aAAO,OAAO,YAAY,OAAO,EAAE,MAAM,OAAO,CAAC;AAAA,IACnD;AAAA,IACA,MAAM,eAAe,UAAkB;AACrC,YAAM,SAAS,MAAM,UAAU;AAC/B,aAAO,OAAO,YAAY,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAAA,IAC9D;AAAA,EACF;AACF;AAXS;AAaT,SAAS,kBAAkB,WAAsD;AAC/E,SAAO;AAAA,IACL,MAAM,OAAO,OAAO;AAClB,YAAM,SAAS,MAAM,UAAU;AAC/B,YAAM,OAAO,kBAAkB,OAAO,EAAE,MAAM,MAAM,CAAC;AAAA,IACvD;AAAA,IACA,MAAM,WAAW,WAAW;AAC1B,YAAM,SAAS,MAAM,UAAU;AAC/B,aAAO,OAAO,kBAAkB,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AAAA,IACrE;AAAA,IACA,MAAM,aAAa,WAAW;AAC5B,YAAM,SAAS,MAAM,UAAU;AAC/B,YAAM,YAAY,MAAM,OAAO,kBAAkB,UAAU;AAAA,QACzD,OAAO,EAAE,aAAa,UAAU;AAAA,MAClC,CAAC;AACD,aAAO,cAAc;AAAA,IACvB;AAAA,IACA,MAAM,WAAW,WAAW,UAAU;AACpC,YAAM,SAAS,MAAM,UAAU;AAC/B,aAAO,OAAO,kBAAkB,SAAS,EAAE,OAAO,EAAE,WAAW,SAAS,EAAE,CAAC;AAAA,IAC7E;AAAA,IACA,MAAM,aAAa,aAAa,IAAI;AAClC,UAAI,YAAY,WAAW,EAAG;AAC9B,YAAM,SAAS,MAAM,UAAU;AAC/B,YAAM,OAAO,kBAAkB,WAAW;AAAA,QACxC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,WAAW,EAAE,EAAE;AAAA,QAC7C,MAAM,EAAE,WAAW,GAAG;AAAA,MACxB,CAAC;AAAA,IACH;AAAA,IACA,MAAM,OAAO,WAAW,YAAY,IAAI;AACtC,YAAM,SAAS,MAAM,UAAU;AAC/B,aAAO,OAAO,aAAa,OAAO,OAAO;AAUvC,cAAM,EAAE,MAAM,IAAI,MAAM,GAAG,kBAAkB,WAAW;AAAA,UACtD,OAAO,EAAE,WAAW,YAAY,WAAW,KAAK;AAAA,UAChD,MAAM,EAAE,WAAW,GAAG;AAAA,QACxB,CAAC;AAGD,YAAI,UAAU,EAAG,QAAO;AAGxB,cAAM,GAAG,kBAAkB,OAAO,EAAE,MAAM,UAAU,CAAC;AACrD,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA,MAAM,oBAAoB,WAAW,UAAU;AAC7C,YAAM,SAAS,MAAM,UAAU;AAC/B,YAAM,EAAE,MAAM,IAAI,MAAM,OAAO,kBAAkB,WAAW;AAAA,QAC1D,OAAO,EAAE,WAAW,UAAU,WAAW,KAAK;AAAA,QAC9C,MAAM,EAAE,WAAW,oBAAI,KAAK,EAAE;AAAA,MAChC,CAAC;AACD,aAAO;AAAA,IACT;AAAA,EACF;AACF;AA/DS;AAkET,IAAM,oBAAoB;AAAA,EACxB,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,aAAa;AAAA,EACb,cAAc;AAChB;AAEA,SAAS,gBAAgB,WAAuD;AAC9E,SAAO;AAAA,IACL,MAAM,aAAa,QAAQ,eAAe;AACxC,YAAM,SAAS,MAAM,UAAU;AAC/B,YAAM,MAAM,MAAM,OAAO,cAAc,WAAW;AAAA,QAChD,OAAO,EAAE,sBAAsB,EAAE,QAAQ,cAAc,EAAE;AAAA,QACzD,QAAQ,EAAE,cAAc,KAAK;AAAA,MAC/B,CAAC;AACD,aAAO,KAAK,gBAAgB;AAAA,IAC9B;AAAA,IACA,MAAM,eAAe,EAAE,QAAQ,eAAe,YAAY,MAAM,GAAG,GAAG;AACpE,YAAM,SAAS,MAAM,UAAU;AAC/B,YAAM,OAAO,cAAc,OAAO;AAAA,QAChC,OAAO,EAAE,sBAAsB,EAAE,QAAQ,cAAc,EAAE;AAAA,QACzD,QAAQ,EAAE,QAAQ,eAAe,YAAY,MAAM,aAAa,IAAI,cAAc,GAAG;AAAA;AAAA;AAAA,QAGrF,QAAQ;AAAA,UACN;AAAA,UACA,cAAc;AAAA,UACd,WAAW;AAAA,UACX,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,MAAM,WAAW,QAAQ;AACvB,YAAM,SAAS,MAAM,UAAU;AAC/B,YAAM,OAAO,MAAM,OAAO,cAAc,SAAS;AAAA,QAC/C,OAAO,EAAE,QAAQ,WAAW,KAAK;AAAA,QACjC,SAAS,EAAE,cAAc,OAAO;AAAA,QAChC,QAAQ,EAAE,GAAG,kBAAkB;AAAA,MACjC,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,cAAc,wBAAC,QAAQ,SAAS,aAAa,WAAW,QAAQ,IAAI,GAAtD;AAAA,IACd,UAAU,wBAAC,QAAQ,SAAS,SAAS,WAAW,QAAQ,IAAI,GAAlD;AAAA,EACZ;AACF;AArCS;AA8CT,eAAe,aACb,WACA,QACA,MACmB;AACnB,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,aAAa,MAAM,OAAO,cAAc,SAAS;AAAA,IACrD,OAAO,EAAE,QAAQ,WAAW,MAAM,KAAK;AAAA,IACvC,QAAQ,EAAE,IAAI,MAAM,eAAe,KAAK;AAAA,EAC1C,CAAC;AAID,QAAM,UACJ,WAAW,SAAS,IAChB,aACA,MAAM,OAAO,cAAc,SAAS;AAAA,IAClC,OAAO,EAAE,QAAQ,WAAW,MAAM,MAAM,KAAK;AAAA,IAC7C,QAAQ,EAAE,IAAI,MAAM,eAAe,KAAK;AAAA,EAC1C,CAAC;AACP,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAClC,QAAM,OAAO,cAAc,WAAW;AAAA,IACpC,OAAO,EAAE,IAAI,EAAE,IAAI,QAAQ,IAAI,CAAC,QAAQ,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE;AAAA,IAC1D,MAAM,EAAE,WAAW,oBAAI,KAAK,EAAE;AAAA,EAChC,CAAC;AACD,SAAO,QAAQ,IAAI,CAAC,QAAQ,OAAO,IAAI,aAAa,CAAC;AACvD;AA1Be;AA6Bf,eAAe,SACb,WACA,QACA,MACiB;AACjB,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,YAAY,MAAM,OAAO,cAAc,WAAW;AAAA,IACtD,OAAO,EAAE,QAAQ,WAAW,MAAM,KAAK;AAAA,IACvC,MAAM,EAAE,cAAc,KAAK,WAAW,KAAK;AAAA,EAC7C,CAAC;AACD,MAAI,UAAU,QAAQ,EAAG,QAAO,UAAU;AAI1C,QAAM,YAAY,MAAM,OAAO,cAAc,UAAU;AAAA,IACrD,OAAO,EAAE,QAAQ,WAAW,MAAM,MAAM,KAAK;AAAA,IAC7C,SAAS,EAAE,cAAc,OAAO;AAAA,IAChC,QAAQ,EAAE,IAAI,KAAK;AAAA,EACrB,CAAC;AACD,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,OAAO,cAAc,OAAO;AAAA,IAChC,OAAO,EAAE,IAAI,UAAU,GAAG;AAAA,IAC1B,MAAM,EAAE,MAAM,cAAc,KAAK,WAAW,KAAK;AAAA,EACnD,CAAC;AACD,SAAO;AACT;AA1Be;AA6BR,SAAS,sBAAsB,WAAmD;AACvF,SAAO;AAAA,IACL,SAAS,YAAY,SAAS;AAAA,IAC9B,eAAe,kBAAkB,SAAS;AAAA,IAC1C,aAAa,gBAAgB,SAAS;AAAA,EACxC;AACF;AANgB;;;AC/OhB,SAAS,WAAW,MAAwC;AAC1D,SAAO,SAAS,OAAO,OAAO,kBAAkB,IAAI;AACtD;AAFS;AAWT,eAAsB,kBACpB,aACA,QACiC;AACjC,QAAM,OAA8B,MAAM,YAAY,WAAW,MAAM;AACvE,SAAO,KAAK,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,MAAM,WAAW,IAAI,IAAI,EAAE,EAAE;AACnE;AANsB;AAiBtB,eAAsB,iBACpB,QACA,QACA,MAC6B;AAC7B,QAAM,wBAAwB,MAAM,OAAO,YAAY,aAAa,OAAO,QAAQ,IAAI;AACvF,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,sBAAsB;AAAA,MAAI,CAAC,aACzB,OAAO,cAAc,oBAAoB,OAAO,OAAO,QAAQ;AAAA,IACjE;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA,sBAAsB,QAAQ,OAAO,CAAC,OAAO,UAAU,QAAQ,OAAO,CAAC;AAAA,EACzE;AACF;AAfsB;","names":[]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/react/index.d.ts

@@ -2,7 +2,7 @@ import { ConfirmActionCopy } from '@12-apps/ui/copy';
 import { OnboardingStore, OnboardingStateSnapshot } from '@12-apps/onboarding';
 import { e as AiHostGuide, g as AiProvider, A as AiCapability, c as AiHostBrand } from '../guide-KQNcXlMG.js';
 export { b as AiConnectPromptSpec, d as AiHostConfigureStage, f as AiHostLink, h as aiConnectPrompt, p as providerForHostId } from '../guide-KQNcXlMG.js';
-export { P as PT_BR_AI_CAPABILITIES, a as PT_BR_AI_CONNECT_PROMPT, b as PT_BR_AI_HOST_GUIDES, c as PT_BR_AI_PERMISSION_MODEL } from '../pt-BR-e1RnV2v8.js';
+export { A as AI_CAPABILITIES, a as AI_CONNECT_PROMPT, b as AI_HOST_GUIDES, c as AI_PERMISSION_MODEL, E as EN_US_AI_CAPABILITIES, d as EN_US_AI_CONNECT_PROMPT, e as EN_US_AI_HOST_GUIDES, f as EN_US_AI_PERMISSION_MODEL, P as PT_BR_AI_CAPABILITIES, g as PT_BR_AI_CONNECT_PROMPT, h as PT_BR_AI_HOST_GUIDES, i as PT_BR_AI_PERMISSION_MODEL } from '../locales-eKE_OJw4.js';
 
 /**
  * Every word the AI-integration screens render, as REQUIRED host config
@@ -440,4 +440,22 @@ declare function FeatureBadge({ icon, label, caption }: FeatureBadgeItem): React
  */
 declare const PT_BR_MCP_AI_COPY: McpAiCopy;
 
-export { AiCapabilities, type AiCapabilitiesCopy, AiCapability, type AiConnectGuideCopy, type AiConnection, type AiConnectionSummaryCopy, type AiFlowCopy, AiHostBrand, AiHostGuide, type AiHostSelectCopy, AiIntegrationOnboarding, type AiIntegrationOnboardingProps, AiLanding, type AiLandingCopy, type AiOnboardingCopy, AiProvider, AiStatusBoard, type AiStatusBoardCopy, type AiTrustPoint, CapabilityIcon, type DisconnectHandler, EndpointCopyBlock, FeatureBadge, type FeatureBadgeItem, HostBrandAvatar, HostConnectHeader, HostOpenButton, HostSelectStep, type HostStatus, HostStepList, type McpAiCopy, McpEndpointUrl, PT_BR_MCP_AI_COPY, PromptCopyBlock };
+/**
+ * The en-US pack for the AI-integration screens — a NAMED constant a host
+ * passes by hand, never a default.
+ *
+ * `statusBoard.confirmAction` composes `@12-apps/ui`'s own English pack rather
+ * than restating it, exactly as the pt-BR side composes the Portuguese one.
+ *
+ * The assistant NAMES (Claude, ChatGPT, Codex) are products, not words: they
+ * are spelled the same in every language, and `hostLabel` arrives as an
+ * argument so a sentence can place it where its own grammar wants.
+ */
+declare const EN_US_MCP_AI_COPY: McpAiCopy;
+
+declare const MCP_AI_COPY: {
+    readonly "pt-BR": McpAiCopy;
+    readonly "en-US": McpAiCopy;
+};
+
+export { AiCapabilities, type AiCapabilitiesCopy, AiCapability, type AiConnectGuideCopy, type AiConnection, type AiConnectionSummaryCopy, type AiFlowCopy, AiHostBrand, AiHostGuide, type AiHostSelectCopy, AiIntegrationOnboarding, type AiIntegrationOnboardingProps, AiLanding, type AiLandingCopy, type AiOnboardingCopy, AiProvider, AiStatusBoard, type AiStatusBoardCopy, type AiTrustPoint, CapabilityIcon, type DisconnectHandler, EN_US_MCP_AI_COPY, EndpointCopyBlock, FeatureBadge, type FeatureBadgeItem, HostBrandAvatar, HostConnectHeader, HostOpenButton, HostSelectStep, type HostStatus, HostStepList, MCP_AI_COPY, type McpAiCopy, McpEndpointUrl, PT_BR_MCP_AI_COPY, PromptCopyBlock };

package/dist/react/index.js

@@ -1,9 +1,17 @@
 import {
+  AI_CAPABILITIES,
+  AI_CONNECT_PROMPT,
+  AI_HOST_GUIDES,
+  AI_PERMISSION_MODEL,
+  EN_US_AI_CAPABILITIES,
+  EN_US_AI_CONNECT_PROMPT,
+  EN_US_AI_HOST_GUIDES,
+  EN_US_AI_PERMISSION_MODEL,
   PT_BR_AI_CAPABILITIES,
   PT_BR_AI_CONNECT_PROMPT,
   PT_BR_AI_HOST_GUIDES,
   PT_BR_AI_PERMISSION_MODEL
-} from "../chunk-HRAQKMDC.js";
+} from "../chunk-WUNMAHQG.js";
 import {
   aiConnectPrompt,
   providerForHostId
@@ -1349,12 +1357,131 @@ var PT_BR_MCP_AI_COPY = {
     collapseLabel: "Ocultar"
   }
 };
+
+// src/react/en-US.ts
+import { EN_US_CONFIRM_ACTION_COPY } from "@12-apps/ui/en-US";
+var EN_US_MCP_AI_COPY = {
+  capabilities: {
+    heading: "What the assistant does for you",
+    subheading: "No spreadsheets, no clicking \u2014 just ask it in the chat."
+  },
+  landing: {
+    eyebrow: "AI integration",
+    // Three fragments the heading renders around an emphasised middle, so the
+    // seam has to survive: "Connect / AI assistants / to your store".
+    titleLead: "Connect",
+    titleEmphasis: "AI assistants",
+    titleTail: "to your store",
+    lede: "Let Claude, ChatGPT and other assistants answer questions about your menu, stock and orders \u2014 and take actions for you, right in the chat. Securely, with nothing to install.",
+    trust: [
+      // The `id`s are the package's own and are NOT words: the component keys
+      // its icons off them.
+      {
+        id: "login",
+        label: "Uses your own login",
+        caption: "No extra keys or credentials"
+      },
+      { id: "install", label: "Nothing to install", caption: "Connects in minutes" },
+      {
+        id: "permissions",
+        label: "Only what you can do",
+        caption: "Your permissions, nothing beyond them"
+      },
+      { id: "surface", label: "Browser or app", caption: "Claude, ChatGPT, Codex" }
+    ],
+    start: "Get started"
+  },
+  flow: {
+    steps: {
+      select: "Choose",
+      copyUrl: "Copy URL",
+      configure: "Configure",
+      connect: "Connect",
+      install: "Install",
+      confirm: "Confirm"
+    },
+    back: "Back",
+    next: "Next",
+    advance: "Continue",
+    finish: "Finish",
+    copyUrl: "Copy URL",
+    copied: "Copied",
+    copyMessage: "Copy message",
+    copyUrlTitle: "Copy your store's URL",
+    urlCaption: "It is the only thing you paste into the assistant \u2014 copying it moves you to the next step.",
+    promptCaption: "That is how it connects, identifies itself (Claude, ChatGPT\u2026) and how we record the connection.",
+    askTitle: "Ask the assistant to connect",
+    installBody: "Open your store's plugin, click Install and authorise access \u2014 no URL to copy, no credentials to generate.",
+    installAction: "Install the store plugin",
+    pasteTitle: "Paste this message into the assistant",
+    pasteInstallCaption: "Paste it into the assistant so it connects, identifies itself and confirms access.",
+    connectedTo: /* @__PURE__ */ __name((hostLabel2) => `${hostLabel2} is connected to your store.`, "connectedTo"),
+    waitingTitle: "Waiting for the connection",
+    waitingBody: /* @__PURE__ */ __name((hostLabel2) => `As soon as you authorise access in ${hostLabel2}, it appears here automatically.`, "waitingBody"),
+    testNow: "Test it now"
+  },
+  statusBoard: {
+    instructions: "Instructions",
+    connected: "Connected",
+    notConnected: "Not connected yet",
+    connect: "Connect",
+    disconnect: "Disconnect",
+    disconnectTitle: "Disconnect this assistant?",
+    disconnectBody: "It loses access to your store immediately. To use it again you will have to connect it afresh.",
+    disconnectConfirm: "Disconnect",
+    disconnectError: "Could not disconnect. Try again.",
+    boardTitle: "Connected assistants",
+    boardCaption: "Green are the ones already working with your store; red are the ones still to connect.",
+    confirmAction: EN_US_CONFIRM_ACTION_COPY
+  },
+  summary: {
+    activeNow: "active now",
+    activeMinutes: /* @__PURE__ */ __name((minutes) => `active ${minutes} min ago`, "activeMinutes"),
+    activeHours: /* @__PURE__ */ __name((hours) => `active ${hours} h ago`, "activeHours"),
+    activeDays: /* @__PURE__ */ __name((days) => `active ${days} days ago`, "activeDays"),
+    configured: "Integration configured",
+    connectedSuffix: "Connected",
+    connectedSeveral: /* @__PURE__ */ __name((names) => `${names} connected`, "connectedSeveral"),
+    connectedGeneric: "AI connected"
+  },
+  hostSelect: {
+    heading: "Choose your assistant",
+    caption: "Pick where you use AI \u2014 the walkthrough is tailored to it."
+  },
+  connectGuide: {
+    urlLabel: "Your store's server URL",
+    urlHint: "Copy this URL and paste it into your assistant to connect it to the store.",
+    // Ends mid-sentence: the screen renders a documentation link straight after.
+    moreInfo: "For more, see the",
+    connectOn: /* @__PURE__ */ __name((hostLabel2) => `Connect in ${hostLabel2}`, "connectOn")
+  },
+  onboarding: {
+    title: "Connect AI assistants to your store",
+    editLabel: "Connect AI",
+    collapseLabel: "Hide"
+  }
+};
+
+// src/react/locales.ts
+var MCP_AI_COPY = {
+  "pt-BR": PT_BR_MCP_AI_COPY,
+  "en-US": EN_US_MCP_AI_COPY
+};
 export {
+  AI_CAPABILITIES,
+  AI_CONNECT_PROMPT,
+  AI_HOST_GUIDES,
+  AI_PERMISSION_MODEL,
   AiCapabilities,
   AiIntegrationOnboarding,
   AiLanding,
   AiStatusBoard,
   CapabilityIcon,
+  EN_US_AI_CAPABILITIES,
+  EN_US_AI_CONNECT_PROMPT,
+  EN_US_AI_HOST_GUIDES,
+  EN_US_AI_PERMISSION_MODEL,
+  EN_US_MCP_AI_COPY,
   EndpointCopyBlock,
   FeatureBadge,
   HostBrandAvatar,
@@ -1362,6 +1489,7 @@ export {
   HostOpenButton,
   HostSelectStep,
   HostStepList,
+  MCP_AI_COPY,
   McpEndpointUrl,
   PT_BR_AI_CAPABILITIES,
   PT_BR_AI_CONNECT_PROMPT,