@1mcp/agent 0.35.0-beta.1 → 0.35.0-beta.2

package/build/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,EAAE,4BAA4B,EAAE,MAAM,qDAAqD,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAoBnE;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,cAAuB,EAAE,OAAqB;IACvE,IAAI,CAAC;QACH,sDAAsD;QACtD,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAChE,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAE3E,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,mBAAmB,CAAC,UAAU,EAAE,CAAC;QAEvC,oEAAoE;QACpE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,oBAAoB,GAAG,uBAAuB,EAAE,CAAC;YACvD,OAAO,GAAG,oBAAoB,CAAC,UAAU,EAAE,CAAC;QAC9C,CAAC;QAED,gFAAgF;QAChF,iFAAiF;QACjF,6FAA6F;QAC7F,MAAM,SAAS,GAAG,aAAa,CAAC,kBAAkB,EAAE,CAAC;QAErD,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC;QAEpE,sCAAsC;QACtC,8DAA8D;QAC9D,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,MAAM,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAExC,yFAAyF;QACzF,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CACT,WAAW,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,kEAAkE,CAC5G,CAAC;QAEF,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,+FAA+F,CAAC,CAAC;YAC7G,OAAO,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;YAC/G,OAAO,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAC7B,UAAiD,EACjD,QAAsB;IAEtB,qCAAqC;IACrC,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;IAErD,oCAAoC;IACpC,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1D,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAElD,mEAAmE;IACnE,MAAM,aAAa,GAAG,aAAa,CAAC,mBAAmB,EAAE,CAAC;IAC1D,aAAa,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC;IAErF,qDAAqD;IACrD,MAAM,aAAa,GAAG,aAAa,CAAC,mBAAmB,CACrD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,EAAE,EACtD,EAAE,YAAY,EAAE,uBAAuB,EAAE,EACzC,OAAO,EACP,UAAU,CACX,CAAC;IACF,aAAa,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;IAE9D,mGAAmG;IAEnG,6DAA6D;IAC7D,MAAM,cAAc,GAAG,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAE5D,8EAA8E;IAC9E,MAAM,iBAAiB,GAAG,IAAI,wBAAwB,CAAC,OAAO,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IAC/F,MAAM,iBAAiB,CAAC,UAAU,EAAE,CAAC;IAErC,8CAA8C;IAC9C,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC;IAClE,IAAI,uBAA4D,CAAC;IACjE,IAAI,kBAAkB,EAAE,CAAC;QACvB,uBAAuB,GAAG,IAAI,uBAAuB,CAAC,OAAO,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC/F,MAAM,uBAAuB,CAAC,UAAU,EAAE,CAAC;QAC3C,aAAa,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;QAElE,uEAAuE;QACvE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,WAAW,EAAE,CAAC;QACpE,gBAAgB,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;QAErE,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAED,qCAAqC;IACrC,MAAM,cAAc,GAAG,cAAc;SAClC,iBAAiB,CAAC,UAAU,CAAC;SAC7B,IAAI,CAAC,GAAG,EAAE;QACT,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAC3E,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,YAAY,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEL,MAAM,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IAEnG,OAAO;QACL,aAAa;QACb,cAAc;QACd,cAAc;QACd,iBAAiB;QACjB,uBAAuB;QACvB,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAC5B,UAAiD,EACjD,QAAsB;IAEtB,qCAAqC;IACrC,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;IAErD,oCAAoC;IACpC,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1D,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAElD,+CAA+C;IAC/C,MAAM,aAAa,GAAG,aAAa,CAAC,mBAAmB,EAAE,CAAC;IAC1D,aAAa,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,IAAI,4BAA4B,CAAC,CAAC;IAEtE,+CAA+C;IAC/C,MAAM,aAAa,GAAG,aAAa,CAAC,mBAAmB,CACrD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,EAAE,EACtD,EAAE,YAAY,EAAE,uBAAuB,EAAE,EACzC,OAAO,EACP,UAAU,CACX,CAAC;IACF,aAAa,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;IAC9D,aAAa,CAAC,0CAA0C,EAAE,CAAC;IAE3D,mGAAmG;IAEnG,mFAAmF;IACnF,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC;IAClE,IAAI,uBAA4D,CAAC;IACjE,IAAI,kBAAkB,EAAE,CAAC;QACvB,uBAAuB,GAAG,IAAI,uBAAuB,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACvF,MAAM,uBAAuB,CAAC,UAAU,EAAE,CAAC;QAC3C,aAAa,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;QAElE,uEAAuE;QACvE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,WAAW,EAAE,CAAC;QACpE,gBAAgB,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;QAErE,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAED,mDAAmD;IACnD,MAAM,cAAc,GAAG,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,iBAAiB;IAE3D,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;IAE9E,OAAO;QACL,aAAa;QACb,cAAc;QACd,cAAc;QACd,uBAAuB;QACvB,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,sBAAsB,CAAC,eAAwB;IAC5D,IAAI,CAAC;QACH,+CAA+C;QAC/C,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QACjE,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC;QAEjC,kCAAkC;QAClC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,WAAW,EAAE,CAAC;QAEpE,iDAAiD;QACjD,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE,UAAkB,EAAE,EAAE;YACxD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBACb,OAAO,EAAE,uCAAuC;gBAChD,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;aAC5C,CAAC,CAAC,CAAC;YACJ,MAAM,mBAAmB,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5E,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB;IAC9B,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;IACnC,mDAAmD;IACnD,MAAM,MAAM,CAAC,cAAc,CAAC;IAC5B,OAAO,MAAM,CAAC,aAAa,CAAC;AAC9B,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,EAAE,4BAA4B,EAAE,MAAM,qDAAqD,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAoBnE;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,cAAuB,EAAE,OAAqB;IACvE,IAAI,CAAC;QACH,sDAAsD;QACtD,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAChE,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAE3E,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,mBAAmB,CAAC,UAAU,EAAE,CAAC;QAEvC,oEAAoE;QACpE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,oBAAoB,GAAG,uBAAuB,EAAE,CAAC;YACvD,OAAO,GAAG,oBAAoB,CAAC,UAAU,EAAE,CAAC;QAC9C,CAAC;QAED,gFAAgF;QAChF,iFAAiF;QACjF,6FAA6F;QAC7F,MAAM,SAAS,GAAG,aAAa,CAAC,kBAAkB,EAAE,CAAC;QAErD,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC;QAEpE,sCAAsC;QACtC,8DAA8D;QAC9D,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,MAAM,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAExC,yFAAyF;QACzF,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CACT,WAAW,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,kEAAkE,CAC5G,CAAC;QAEF,MAAM,WAAW,GAAG,mBAAmB;YACrC,CAAC,CAAC,MAAM,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC;YAC7C,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAE/C,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,yBAAyB,EAAE,CAAC;QAC9E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,WAAW,CAAC,aAAa,CAAC,wBAAwB,EAAE,CAAC,oBAAoB,CAAC,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC;QAC/G,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,+EAA+E,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,+FAA+F,CAAC,CAAC;QAC/G,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;QACjH,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAC7B,UAAiD,EACjD,QAAsB;IAEtB,qCAAqC;IACrC,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;IAErD,oCAAoC;IACpC,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1D,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAElD,mEAAmE;IACnE,MAAM,aAAa,GAAG,aAAa,CAAC,mBAAmB,EAAE,CAAC;IAC1D,aAAa,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC;IAErF,qDAAqD;IACrD,MAAM,aAAa,GAAG,aAAa,CAAC,mBAAmB,CACrD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,EAAE,EACtD,EAAE,YAAY,EAAE,uBAAuB,EAAE,EACzC,OAAO,EACP,UAAU,CACX,CAAC;IACF,aAAa,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;IAE9D,mGAAmG;IAEnG,6DAA6D;IAC7D,MAAM,cAAc,GAAG,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAE5D,8EAA8E;IAC9E,MAAM,iBAAiB,GAAG,IAAI,wBAAwB,CAAC,OAAO,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IAC/F,MAAM,iBAAiB,CAAC,UAAU,EAAE,CAAC;IAErC,8CAA8C;IAC9C,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC;IAClE,IAAI,uBAA4D,CAAC;IACjE,IAAI,kBAAkB,EAAE,CAAC;QACvB,uBAAuB,GAAG,IAAI,uBAAuB,CAAC,OAAO,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC/F,MAAM,uBAAuB,CAAC,UAAU,EAAE,CAAC;QAC3C,aAAa,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;QAElE,uEAAuE;QACvE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,WAAW,EAAE,CAAC;QACpE,gBAAgB,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;QAErE,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAED,aAAa,CAAC,6BAA6B,CAAC,KAAK,IAAI,EAAE;QACrD,MAAM,iBAAiB,CAAC,mBAAmB,EAAE,CAAC;QAC9C,IAAI,uBAAuB,EAAE,CAAC;YAC5B,MAAM,uBAAuB,CAAC,mBAAmB,EAAE,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,MAAM,cAAc,GAAG,cAAc;SAClC,iBAAiB,CAAC,UAAU,CAAC;SAC7B,IAAI,CAAC,GAAG,EAAE;QACT,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAC3E,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,YAAY,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEL,MAAM,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IAEnG,OAAO;QACL,aAAa;QACb,cAAc;QACd,cAAc;QACd,iBAAiB;QACjB,uBAAuB;QACvB,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAC5B,UAAiD,EACjD,QAAsB;IAEtB,qCAAqC;IACrC,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;IAErD,oCAAoC;IACpC,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1D,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAElD,+CAA+C;IAC/C,MAAM,aAAa,GAAG,aAAa,CAAC,mBAAmB,EAAE,CAAC;IAC1D,aAAa,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,IAAI,4BAA4B,CAAC,CAAC;IAEtE,+CAA+C;IAC/C,MAAM,aAAa,GAAG,aAAa,CAAC,mBAAmB,CACrD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,EAAE,EACtD,EAAE,YAAY,EAAE,uBAAuB,EAAE,EACzC,OAAO,EACP,UAAU,CACX,CAAC;IACF,aAAa,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;IAC9D,aAAa,CAAC,0CAA0C,EAAE,CAAC;IAE3D,mGAAmG;IAEnG,mFAAmF;IACnF,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC;IAClE,IAAI,uBAA4D,CAAC;IACjE,IAAI,kBAAkB,EAAE,CAAC;QACvB,uBAAuB,GAAG,IAAI,uBAAuB,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACvF,MAAM,uBAAuB,CAAC,UAAU,EAAE,CAAC;QAC3C,aAAa,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;QAElE,uEAAuE;QACvE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,WAAW,EAAE,CAAC;QACpE,gBAAgB,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;QAErE,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAED,mDAAmD;IACnD,MAAM,cAAc,GAAG,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,iBAAiB;IAC3D,aAAa,CAAC,6BAA6B,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,mCAAmC,EAAE,CAAC,CAAC;IAEvG,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;IAE9E,OAAO;QACL,aAAa;QACb,cAAc;QACd,cAAc;QACd,uBAAuB;QACvB,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,sBAAsB,CAAC,eAAwB;IAC5D,IAAI,CAAC;QACH,+CAA+C;QAC/C,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QACjE,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC;QAEjC,kCAAkC;QAClC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,WAAW,EAAE,CAAC;QAEpE,iDAAiD;QACjD,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE,UAAkB,EAAE,EAAE;YACxD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBACb,OAAO,EAAE,uCAAuC;gBAChD,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;aAC5C,CAAC,CAAC,CAAC;YACJ,MAAM,mBAAmB,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5E,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB;IAC9B,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;IACnC,mDAAmD;IACnD,MAAM,MAAM,CAAC,cAAc,CAAC;IAC5B,OAAO,MAAM,CAAC,aAAa,CAAC;AAC9B,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC"}

package/build/transport/http/routes/adminRoutes.d.ts

@@ -1,7 +1,9 @@
 import type { BackendOAuthDashboardResult } from '../../../auth/oauthAuthorizationFlow.js';
 import { RuntimeIdentity } from '../../../core/runtime/runtimeIdentityService.js';
+import type { AdminBackendRestartOperations } from '../../../domains/admin/adminBackendRestartService.js';
 import { type AdminConfiguredServerOperations } from '../../../domains/admin/adminConfiguredServerService.js';
 import { AdminIdentityService } from '../../../domains/admin/adminIdentityService.js';
+import type { AdminOAuthOperations } from '../../../domains/admin/adminOAuthService.js';
 import { type AdminPresetOperations } from '../../../domains/admin/adminPresetService.js';
 import type { AdminMutationAvailability } from '../../../domains/admin/runtimeScopeAdminLock.js';
 import { Router } from 'express';
@@ -9,7 +11,9 @@ interface AdminRoutesOptions {
     adminEnabled: boolean;
     adminService: AdminIdentityService;
     configuredServerService?: AdminConfiguredServerOperations;
+    backendRestartService?: AdminBackendRestartOperations;
     presetService?: AdminPresetOperations;
+    oauthService?: AdminOAuthOperations;
     adminMutationAvailability?: AdminMutationAvailability;
     getRuntimeIdentity: () => RuntimeIdentity;
     getOAuthDashboard?: () => BackendOAuthDashboardResult;

package/build/transport/http/routes/adminRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adminRoutes.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/adminRoutes.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAIL,oBAAoB,EACrB,MAAM,4CAA4C,CAAC;AAMpD,OAAO,EAIL,KAAK,qBAAqB,EAC3B,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAG7F,OAAgB,EAAqB,MAAM,EAAE,MAAM,SAAS,CAAC;AA0C7D,UAAU,kBAAkB;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,oBAAoB,CAAC;IACnC,uBAAuB,CAAC,EAAE,+BAA+B,CAAC;IAC1D,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,kBAAkB,EAAE,MAAM,eAAe,CAAC;IAC1C,iBAAiB,CAAC,EAAE,MAAM,2BAA2B,CAAC;IACtD,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAmX5E;AAUD,wBAAgB,mCAAmC,IAAI,MAAM,CAE5D;AA2UD,qBAAa,kBAAkB;IAI3B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgE;gBAGtE,GAAG,GAAE,MAAM,MAAiB,EAC5B,aAAa,SAA+B,EAC5C,QAAQ,SAAyB;IAGpD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IASpD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAWrD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAI7C,OAAO,CAAC,UAAU;IAelB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,YAAY;CAQrB"}
+{"version":3,"file":"adminRoutes.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/adminRoutes.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAE9E,OAAO,KAAK,EACV,6BAA6B,EAI9B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAIL,oBAAoB,EACrB,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAMpF,OAAO,EAIL,KAAK,qBAAqB,EAC3B,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAI7F,OAAgB,EAAqB,MAAM,EAAE,MAAM,SAAS,CAAC;AA6D7D,UAAU,kBAAkB;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,oBAAoB,CAAC;IACnC,uBAAuB,CAAC,EAAE,+BAA+B,CAAC;IAC1D,qBAAqB,CAAC,EAAE,6BAA6B,CAAC;IACtD,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,kBAAkB,EAAE,MAAM,eAAe,CAAC;IAC1C,iBAAiB,CAAC,EAAE,MAAM,2BAA2B,CAAC;IACtD,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CA4a5E;AAUD,wBAAgB,mCAAmC,IAAI,MAAM,CAE5D;AAqcD,qBAAa,kBAAkB;IAI3B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgE;gBAGtE,GAAG,GAAE,MAAM,MAAiB,EAC5B,aAAa,SAA+B,EAC5C,QAAQ,SAAyB;IAGpD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IASpD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAWrD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAI7C,OAAO,CAAC,UAAU;IAelB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,YAAY;CAQrB"}

package/build/transport/http/routes/adminRoutes.js

@@ -1,17 +1,24 @@
-import { createHash } from 'node:crypto';
+import { createHmac } from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { parseTemplateConnectionKey } from '../../../core/server/templateIdentity.js';
 import { AdminConfiguredServerApplyError, AdminConfiguredServerNotFoundError, } from '../../../domains/admin/adminConfiguredServerService.js';
 import { ADMIN_SESSION_COOKIE_NAME, AdminIdentityError, } from '../../../domains/admin/adminIdentityService.js';
 import { AdminPresetConflictError, AdminPresetNotFoundError, } from '../../../domains/admin/adminPresetService.js';
+import { sensitiveOperationLimiter } from '../../../transport/http/middlewares/securityMiddleware.js';
 import { sanitizeErrorMessage } from '../../../utils/validation/sanitization.js';
 import express, { Router } from 'express';
+import rateLimit from 'express-rate-limit';
 import { createRequire } from 'node:module';
 import { z } from 'zod';
 const FAILED_LOGIN_LIMIT = 5;
 const FAILED_LOGIN_WINDOW_MS = 15 * 60 * 1000;
 const FAILED_LOGIN_MAX_ACTIVE_KEYS = 10_000;
+const ADMIN_AUTH_RATE_LIMIT = 30;
+const ADMIN_AUTH_RATE_LIMIT_WINDOW_MS = 15 * 60 * 1000;
+const ADMIN_STATUS_RATE_LIMIT = 120;
+const ADMIN_STATUS_RATE_LIMIT_WINDOW_MS = 60 * 1000;
 const ADMIN_USERNAME_MAX_LENGTH = 256;
 const ADMIN_PASSWORD_MAX_LENGTH = 4096;
 const CLI_ADMIN_PROTOCOL_VERSION = '1';
@@ -19,16 +26,30 @@ const CLI_ADMIN_RESPONSE_MAX_BYTES = 256 * 1024;
 const CLI_ADMIN_RESPONSE_TOO_LARGE_MESSAGE = 'CLI Admin response exceeded the maximum supported size; use a narrower or paginated request.';
 const CLI_SESSION_OPERATIONS = ['admin.login', 'admin.status', 'admin.logout'];
 const ADMIN_API_PROTOCOL_VERSION = '1';
+const TEMPLATE_INSTANCE_ID_DISPLAY_LENGTH = 12;
 const packageMetadata = createRequire(import.meta.url)('../../../../package.json');
-const CLI_MCP_OPERATIONS = ['mcp.enable', 'mcp.disable'];
+const CLI_CONFIGURED_SERVER_OPERATIONS = ['mcp.enable', 'mcp.disable'];
+const CLI_BACKEND_RESTART_OPERATION = 'mcp.restart';
 const adminLoginBodySchema = z.object({
     username: z.string().trim().min(1).max(ADMIN_USERNAME_MAX_LENGTH),
     password: z.string().min(1).max(ADMIN_PASSWORD_MAX_LENGTH),
 });
+const adminOAuthServiceParamsSchema = z.object({
+    serviceId: z.string().trim().min(1).max(256),
+});
 const cliConfiguredServerMutationBodySchema = z.object({
     targetName: z.string().trim().min(1).max(256),
     dryRun: z.boolean().optional(),
 });
+const cliBackendRestartBodySchema = z
+    .object({
+    targetName: z.string().trim().min(1).max(256),
+    instance: z.string().trim().min(1).max(64).optional(),
+    allInstances: z.boolean().optional(),
+})
+    .refine((value) => !(value.instance !== undefined && value.allInstances === true), {
+    message: 'instance and allInstances are mutually exclusive',
+});
 export function createAdminRoutes(options) {
     if (!options.adminEnabled) {
         options.adminService.revokeAllSessions();
@@ -36,6 +57,18 @@ export function createAdminRoutes(options) {
     }
     const router = Router();
     const failedLoginLimiter = new FailedLoginLimiter();
+    const authenticationLimiter = rateLimit({
+        windowMs: ADMIN_AUTH_RATE_LIMIT_WINDOW_MS,
+        max: ADMIN_AUTH_RATE_LIMIT,
+        standardHeaders: true,
+        legacyHeaders: false,
+    });
+    const statusLimiter = rateLimit({
+        windowMs: ADMIN_STATUS_RATE_LIMIT_WINDOW_MS,
+        max: ADMIN_STATUS_RATE_LIMIT,
+        standardHeaders: true,
+        legacyHeaders: false,
+    });
     const adminConsoleAssets = resolveAdminConsoleAssets(options.adminConsoleAssetsDir);
     options.adminService.bootstrapFirstAdminFromEnvironment();
     router.get('/cli/v1/capabilities', (req, res) => {
@@ -43,9 +76,18 @@ export function createAdminRoutes(options) {
         const setupRequired = !options.adminService.hasAdminAccount();
         const mutationAvailability = cliMutationAvailability(options, setupRequired);
         const configuredServerOperationsSupported = Boolean(options.configuredServerService);
-        const mcpMutationsReady = configuredServerOperationsSupported && mutationAvailability.available;
-        const mcpOperations = configuredServerOperationsSupported ? [...CLI_MCP_OPERATIONS] : [];
-        const mcpMutationOperations = mcpMutationsReady ? ['enable', 'disable'] : [];
+        const backendRestartSupported = Boolean(options.backendRestartService);
+        const mcpMutationsReady = (configuredServerOperationsSupported || backendRestartSupported) && mutationAvailability.available;
+        const mcpOperations = [
+            ...(configuredServerOperationsSupported ? [...CLI_CONFIGURED_SERVER_OPERATIONS] : []),
+            ...(backendRestartSupported ? [CLI_BACKEND_RESTART_OPERATION] : []),
+        ];
+        const mcpMutationOperations = mutationAvailability.available
+            ? [
+                ...(configuredServerOperationsSupported ? ['enable', 'disable'] : []),
+                ...(backendRestartSupported ? ['restart'] : []),
+            ]
+            : [];
         const mcpReadinessStatus = cliMcpReadinessStatus(mutationAvailability);
         sendCliSuccess(req, res, {
             runtime: toCliRuntimeIdentity(identity),
@@ -67,11 +109,12 @@ export function createAdminRoutes(options) {
                 adminSessions: true,
                 bearerSessionAuth: true,
                 csrfTokens: true,
-                mcpEnableDisable: mcpMutationsReady,
+                mcpEnableDisable: configuredServerOperationsSupported && mutationAvailability.available,
+                mcpRestart: backendRestartSupported && mutationAvailability.available,
             },
         });
     });
-    router.post('/cli/v1/session/login', async (req, res) => {
+    router.post('/cli/v1/session/login', authenticationLimiter, async (req, res) => {
         const parsedBody = adminLoginBodySchema.safeParse(req.body);
         if (!parsedBody.success) {
             sendCliError(req, res, {
@@ -143,7 +186,10 @@ export function createAdminRoutes(options) {
     router.post('/cli/v1/operations/disable-server', async (req, res) => {
         await handleCliConfiguredServerMutation(req, res, options, 'disableConfiguredServer');
     });
-    router.post('/api/session/login', async (req, res) => {
+    router.post('/cli/v1/operations/restart-server', async (req, res) => {
+        await handleCliBackendRestart(req, res, options);
+    });
+    router.post('/api/session/login', authenticationLimiter, async (req, res) => {
         const parsedBody = adminLoginBodySchema.safeParse(req.body);
         if (!parsedBody.success) {
             res.status(400).json({ error: 'admin_login_request_invalid' });
@@ -205,7 +251,7 @@ export function createAdminRoutes(options) {
         clearAdminSessionCookie(res, options.getRuntimeIdentity().externalUrl);
         res.status(200).json({ ok: true });
     });
-    router.get('/api/status', (req, res) => {
+    router.get('/api/status', statusLimiter, (req, res) => {
         const session = options.adminService.validateSession(getAdminSessionCookie(req));
         if (!session) {
             res.status(401).json({ authenticated: false });
@@ -231,6 +277,34 @@ export function createAdminRoutes(options) {
             }),
         });
     });
+    router.post('/api/oauth/:serviceId/authorize', sensitiveOperationLimiter, async (req, res) => {
+        if (!options.oauthService) {
+            res.status(503).json({ error: 'backend_oauth_runtime_unavailable' });
+            return;
+        }
+        const serviceId = parseAdminOAuthServiceId(req, res);
+        if (!serviceId)
+            return;
+        const result = await options.oauthService.authorizeService({
+            context: buildAdminOperationContext(req, options, { type: 'backend_oauth_service', id: serviceId }),
+            serviceId,
+        });
+        sendAdminOAuthOperationResult(res, result);
+    });
+    router.post('/api/oauth/:serviceId/restart', sensitiveOperationLimiter, async (req, res) => {
+        if (!options.oauthService) {
+            res.status(503).json({ error: 'backend_oauth_runtime_unavailable' });
+            return;
+        }
+        const serviceId = parseAdminOAuthServiceId(req, res);
+        if (!serviceId)
+            return;
+        const result = await options.oauthService.restartService({
+            context: buildAdminOperationContext(req, options, { type: 'backend_oauth_service', id: serviceId }),
+            serviceId,
+        });
+        sendAdminOAuthOperationResult(res, result);
+    });
     router.get('/api/presets', async (req, res) => {
         if (!options.presetService)
             return void res.status(404).json({ error: 'admin_presets_unavailable' });
@@ -374,7 +448,7 @@ function sendAdminConsoleIndex(res, indexPath) {
         res.status(503).type('text/plain').send('Admin Console assets are not available. Run the package build first.');
         return;
     }
-    res.status(200).sendFile(indexPath);
+    res.status(200).sendFile(indexPath, { dotfiles: 'allow' });
 }
 function unauthenticatedAdminApiResponse(options) {
     return options.adminService.hasAdminAccount()
@@ -452,6 +526,109 @@ async function handleCliConfiguredServerMutation(req, res, options, operationNam
         : await options.configuredServerService.disableConfiguredServer(input);
     sendCliAdminOperationResult(req, res, result);
 }
+async function handleCliBackendRestart(req, res, options) {
+    if (!options.backendRestartService) {
+        sendCliError(req, res, {
+            status: 404,
+            code: 'backend_restart_unavailable',
+            message: 'Backend restart administration is unavailable',
+            retryable: false,
+        });
+        return;
+    }
+    if (isMutationLocked(options)) {
+        sendCliError(req, res, {
+            status: 409,
+            code: 'runtime_scope_locked',
+            message: 'Runtime scope admin mutations are locked by another writer',
+            retryable: true,
+            details: { operationName: 'restartBackend', reason: 'writer_lock_unavailable' },
+        });
+        return;
+    }
+    const sessionToken = getBearerSessionToken(req);
+    const session = sessionToken ? options.adminService.validateSession(sessionToken) : null;
+    if (!sessionToken || !session) {
+        sendCliError(req, res, {
+            status: 401,
+            code: 'admin_session_required',
+            message: 'A valid admin session bearer token is required',
+            retryable: false,
+        });
+        return;
+    }
+    const parsedBody = cliBackendRestartBodySchema.safeParse(req.body);
+    if (!parsedBody.success) {
+        sendCliError(req, res, {
+            status: 400,
+            code: 'validation_request_invalid',
+            message: 'Backend targetName and restart selectors must have valid, mutually exclusive values',
+            retryable: false,
+        });
+        return;
+    }
+    const { targetName, instance, allInstances = false } = parsedBody.data;
+    const selection = instance
+        ? { mode: 'instance', instanceIdOrPrefix: instance }
+        : allInstances
+            ? { mode: 'all_instances' }
+            : { mode: 'target_default' };
+    const context = buildCliAdminOperationContext(req, options, session.account, sessionToken, {
+        type: 'backend',
+        id: targetName,
+    });
+    const result = await options.backendRestartService.restartBackend({
+        context,
+        targetName,
+        selection,
+        confirmationRequirements: cliBackendRestartConfirmationRequirements(options, targetName),
+    });
+    if (result.ok && isBackendRestartFailureResult(result.result)) {
+        sendCliBackendRestartOutcome(req, res, result.result);
+        return;
+    }
+    sendCliAdminOperationResult(req, res, result);
+}
+function sendCliBackendRestartOutcome(req, res, result) {
+    const response = backendRestartFailure(result.outcome);
+    sendCliError(req, res, {
+        status: response.status,
+        code: response.code,
+        message: response.message,
+        retryable: false,
+        details: {
+            targetName: result.targetName,
+            ...(result.candidateInstanceIds ? { candidateInstanceIds: result.candidateInstanceIds } : {}),
+        },
+    });
+}
+function isBackendRestartFailureResult(result) {
+    return result.outcome !== 'restarted';
+}
+function backendRestartFailure(outcome) {
+    switch (outcome) {
+        case 'target_not_found':
+            return { status: 404, code: 'backend_not_found', message: 'Backend target was not found' };
+        case 'target_disabled':
+            return { status: 409, code: 'backend_disabled', message: 'Backend target is disabled' };
+        case 'instance_not_found':
+            return { status: 404, code: 'backend_instance_not_found', message: 'Backend instance was not found' };
+        case 'instance_ambiguous':
+            return { status: 409, code: 'backend_instance_ambiguous', message: 'Backend instance prefix is ambiguous' };
+        case 'no_active_instances':
+            return {
+                status: 409,
+                code: 'backend_no_active_instances',
+                message: 'Backend has no active instances to restart',
+            };
+        case 'no_unhealthy_instances':
+            return {
+                status: 409,
+                code: 'backend_no_unhealthy_instances',
+                message: 'Backend has no unhealthy active instances to restart by default',
+            };
+    }
+}
 async function handleConfiguredServerDetail(req, res, options) {
     if (!options.configuredServerService) {
         res.status(404).json({ error: 'admin_configured_servers_unavailable' });
@@ -623,7 +800,7 @@ async function handleConfiguredServerMutation(req, res, options, operationName)
     sendAdminOperationResult(res, result);
 }
 function cliMutationAvailability(options, setupRequired) {
-    if (!options.configuredServerService) {
+    if (!options.configuredServerService && !options.backendRestartService) {
         return {
             available: false,
             reason: 'mutation_service_unavailable',
@@ -745,9 +922,20 @@ function getBearerSessionToken(req) {
     if (!authorization) {
         return undefined;
     }
-    const match = authorization.match(/^Bearer\s+(.+)$/i);
-    const token = match?.[1]?.trim();
-    return token || undefined;
+    const bearerScheme = 'Bearer';
+    if (authorization.length <= bearerScheme.length ||
+        authorization.slice(0, bearerScheme.length).toLowerCase() !== bearerScheme.toLowerCase()) {
+        return undefined;
+    }
+    let tokenStart = bearerScheme.length;
+    if (authorization.charCodeAt(tokenStart) !== 0x20) {
+        return undefined;
+    }
+    while (authorization.charCodeAt(tokenStart) === 0x20) {
+        tokenStart += 1;
+    }
+    const token = authorization.slice(tokenStart);
+    return token && !/\s/u.test(token) ? token : undefined;
 }
 function isHttpsRuntime(externalUrl) {
     try {
@@ -864,6 +1052,26 @@ function sendAdminOperationResult(res, result) {
     const status = result.status === 'idempotency_key_required' ? 400 : result.status === 'mutation_failed' ? 409 : 409;
     res.status(status).json(result);
 }
+function sendAdminOAuthOperationResult(res, result) {
+    if (!result.ok && result.status === 'mutation_failed') {
+        const status = result.error === 'backend_oauth_service_not_found'
+            ? 404
+            : result.error === 'backend_oauth_runtime_unavailable'
+                ? 503
+                : 502;
+        res.status(status).json({ ok: false, error: result.error });
+        return;
+    }
+    sendAdminOperationResult(res, result);
+}
+function parseAdminOAuthServiceId(req, res) {
+    const parsed = adminOAuthServiceParamsSchema.safeParse(req.params);
+    if (!parsed.success) {
+        res.status(400).json({ error: 'backend_oauth_service_id_invalid' });
+        return null;
+    }
+    return parsed.data.serviceId;
+}
 async function handlePresetMutation(req, res, options, action) {
     if (!options.presetService) {
         res.status(404).json({ error: 'admin_presets_unavailable' });
@@ -972,7 +1180,9 @@ function buildAdminOperationContext(req, options, target) {
             jsonMode: true,
         },
         idempotencyKey: req.header('Idempotency-Key'),
-        requestFingerprint: configuredServerRequestFingerprint(operationName, target.id, req.body),
+        requestFingerprint: target.type === 'backend_oauth_service'
+            ? backendOAuthRequestFingerprint(operationName, target.id)
+            : configuredServerRequestFingerprint(operationName, target.id, req.body),
         confirmationFacts: getBodyRecord(req.body, 'confirmationFacts'),
     };
 }
@@ -1016,6 +1226,19 @@ function cliConfiguredServerConfirmationRequirements(options, targetName, operat
         },
     ];
 }
+function cliBackendRestartConfirmationRequirements(options, targetName) {
+    const identity = options.getRuntimeIdentity();
+    if (isLoopbackRuntimeUrl(identity.externalUrl)) {
+        return [];
+    }
+    const target = { type: 'backend', id: targetName };
+    return [
+        { code: 'confirm_non_loopback_runtime', expected: true, target },
+        { code: 'confirmedOperation', expected: 'mcp.restart', target },
+        { code: 'confirmedRuntimeScopeId', expected: identity.runtimeScopeId, target },
+        { code: 'confirmationSource', expected: 'cli_flag', target },
+    ];
+}
 function buildCliAdminOperationContext(req, options, account, sessionToken, target) {
     const runtimeIdentity = options.getRuntimeIdentity();
     const operationName = operationNameForRequest(req);
@@ -1036,31 +1259,51 @@ function buildCliAdminOperationContext(req, options, account, sessionToken, targ
             jsonMode: true,
         },
         idempotencyKey: req.header('Idempotency-Key'),
-        requestFingerprint: configuredServerRequestFingerprint(operationName, target.id),
+        requestFingerprint: configuredServerRequestFingerprint(operationName, target.id, req.body),
         confirmationFacts: getBodyRecord(req.body, 'confirmationFacts'),
     };
 }
 function configuredServerRequestFingerprint(operationName, targetName, body) {
+    const previewFingerprint = getBodyString(body, 'previewFingerprint');
     const normalized = stableJsonStringify({
         schemaVersion: 1,
         operationName,
         target: {
-            type: 'configured_server',
+            type: operationName === 'restartBackend' ? 'backend' : 'configured_server',
             id: targetName ?? '',
         },
         ...(operationName === 'applyConfiguredServerEdit'
             ? {
-                previewFingerprint: getBodyString(body, 'previewFingerprint'),
-                editDigest: createHash('sha256')
-                    .update(stableJsonStringify(getBodyValue(body, 'edit') ?? {}))
-                    .digest('hex'),
+                previewFingerprint,
+                editDigest: keyedRequestFingerprint(previewFingerprint, 'configured-server-edit', stableJsonStringify(getBodyValue(body, 'edit') ?? {})),
+            }
+            : {}),
+        ...(operationName === 'restartBackend'
+            ? {
+                restartSelection: {
+                    instance: getBodyString(body, 'instance'),
+                    allInstances: getBodyValue(body, 'allInstances') === true,
+                },
             }
             : {}),
     });
     return operationName === 'applyConfiguredServerEdit'
-        ? `configured_server_apply_${createHash('sha256').update(normalized).digest('hex')}`
+        ? `configured_server_apply_${keyedRequestFingerprint(previewFingerprint, 'configured-server-apply', normalized)}`
         : normalized;
 }
+function keyedRequestFingerprint(key, domain, value) {
+    return createHmac('sha256', key).update(domain).update('\0').update(value).digest('hex');
+}
+function backendOAuthRequestFingerprint(operationName, serviceId) {
+    return stableJsonStringify({
+        schemaVersion: 1,
+        operationName,
+        target: {
+            type: 'backend_oauth_service',
+            id: serviceId ?? '',
+        },
+    });
+}
 function stableJsonStringify(value) {
     if (Array.isArray(value)) {
         return `[${value.map((item) => stableJsonStringify(item)).join(',')}]`;
@@ -1130,6 +1373,12 @@ function cliOperationErrorDetails(result) {
     return details;
 }
 function operationNameForRequest(req) {
+    if (req.path.startsWith('/api/oauth/')) {
+        return req.path.endsWith('/restart') ? 'restartBackendOAuth' : 'authorizeBackendOAuth';
+    }
+    if (req.path.endsWith('/restart-server')) {
+        return 'restartBackend';
+    }
     if (req.path.endsWith('/enable') || req.path.endsWith('/enable-server')) {
         return 'enableConfiguredServer';
     }
@@ -1179,10 +1428,19 @@ function sanitizeOAuthDashboard(dashboard) {
         ...dashboard,
         services: dashboard.services.map((service) => ({
             ...service,
+            id: service.name,
+            displayName: backendOAuthServiceDisplayName(service.name),
             lastError: service.lastError ? sanitizeErrorMessage(service.lastError) : undefined,
         })),
     };
 }
+function backendOAuthServiceDisplayName(serviceId) {
+    const identity = parseTemplateConnectionKey(serviceId);
+    if (identity.kind !== 'rendered' || identity.renderedHash.length <= TEMPLATE_INSTANCE_ID_DISPLAY_LENGTH) {
+        return serviceId;
+    }
+    return `${identity.templateName}:${identity.renderedHash.slice(0, TEMPLATE_INSTANCE_ID_DISPLAY_LENGTH)}`;
+}
 function getBodyValue(body, key) {
     if (!body || typeof body !== 'object') {
         return undefined;