@1mcp/agent 0.35.0 → 0.37.0

package/build/transport/http/middlewares/securityMiddleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"securityMiddleware.js","sourceRoot":"","sources":["../../../../src/transport/http/middlewares/securityMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAG3C,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAE3C;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC7E,uBAAuB;IACvB,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAEzC,6BAA6B;IAC7B,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAEnD,wBAAwB;IACxB,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAEnD,2BAA2B;IAC3B,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;IAEpE,6EAA6E;IAC7E,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB,sIAAsI,CACvI,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;IAEjC,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAC;IACjD,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;IACvC,GAAG,EAAE,EAAE,EAAE,yBAAyB;IAClC,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;IACpB,OAAO,EAAE;QACP,KAAK,EAAE,qBAAqB;QAC5B,iBAAiB,EAAE,wDAAwD;KAC5E;IACD,IAAI,EAAE,CAAC,GAAY,EAAE,EAAE;QACrB,kEAAkE;QAClE,OAAO,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACvC,MAAM,OAAO,GAA4B;YACvC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;YAChC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,OAAO,CAAC,CAAC;QAEpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,qBAAqB;YAC5B,iBAAiB,EAAE,wDAAwD;SAC5E,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC7E,iDAAiD;IACjD,MAAM,kBAAkB,GAAG;QACzB,UAAU,EAAE,oBAAoB;QAChC,mBAAmB,EAAE,gCAAgC;QACrD,cAAc,EAAE,sBAAsB;QACtC,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,sBAAsB;QAC5B,gBAAgB,EAAE,gBAAgB;QAClC,YAAY,EAAE,iBAAiB;KAChC,CAAC;IAEF,MAAM,wBAAwB,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAW,EAAE;QAC5E,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACzC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,OAAO,GAA4B;oBACvC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,2BAA2B;oBAC3D,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;oBAC3B,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;oBAChC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,kCAAkC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,gBAAgB;IAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAkC,CAAC,EAAE,CAAC;QAClF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,KAAK,EAAE,UAAU,GAAG,EAAE,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,qCAAqC;aACzD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAgC,CAAC,EAAE,CAAC;QAChF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,KAAK,EAAE,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,qCAAqC;aACzD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAA+B,CAAC,EAAE,CAAC;YAC/E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,iBAAiB;oBACxB,iBAAiB,EAAE,qCAAqC;iBACzD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC7E,sDAAsD;IACtD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,uDAAuD,CAAC,CAAC;IACxF,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACpC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC9B,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;IAE/C,+CAA+C;IAC/C,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,yCAAyC,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IACjF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,iCAAiC;IACjC,MAAM,kBAAkB,GACtB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,GAAG,CAAC,MAAM,KAAK,MAAM;QACrB,GAAG,CAAC,MAAM,KAAK,KAAK;QACpB,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC;IAE1B,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,OAAO,GAA4B;YACvC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;YAChC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;YACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB;YAC9D,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;SAC3E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,2BAA2B;IAC3B,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,GAAG,CAAC,IAAI,GAAG,UAA0B,IAAa;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,OAAO,GAA4B;gBACvC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,QAAQ;gBACR,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IACpF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,kFAAkF;IAClF,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEnF,IAAI,cAAc,EAAE,CAAC;QACnB,iEAAiE;QACjE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAEvG,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,GAAG,CAAC,IAAI,GAAG,UAA0B,IAAa;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC;YAE1D,UAAU,CAAC,GAAG,EAAE;gBACd,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvC,CAAC,EAAE,cAAc,CAAC,CAAC;YAEnB,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,CAAC,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;AAC1G,CAAC"}
+{"version":3,"file":"securityMiddleware.js","sourceRoot":"","sources":["../../../../src/transport/http/middlewares/securityMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAG3C,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAE3C;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC7E,uBAAuB;IACvB,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAEzC,6BAA6B;IAC7B,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAEnD,wBAAwB;IACxB,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAEnD,2BAA2B;IAC3B,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;IAEpE,6EAA6E;IAC7E,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB,sIAAsI,CACvI,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;IAEjC,IAAI,EAAE,CAAC;AACT,CAAC;AAUD,MAAM,CAAC,MAAM,6CAA6C,GAAsC;IAC9F,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACxB,WAAW,EAAE,EAAE;CAChB,CAAC;AAEF,MAAM,UAAU,+BAA+B,CAC7C,SAA4C,6CAA6C;IAEzF,OAAO,SAAS,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,EAAE,MAAM,CAAC,WAAW;QACvB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,KAAK;QACpB,OAAO,EAAE;YACP,KAAK,EAAE,qBAAqB;YAC5B,iBAAiB,EAAE,wDAAwD;SAC5E;QACD,IAAI,EAAE,CAAC,GAAY,EAAE,EAAE;YACrB,mEAAmE;YACnE,OAAO,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC;QACpD,CAAC;QACD,OAAO,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;YACvC,MAAM,OAAO,GAA4B;gBACvC,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;gBAChC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,OAAO,CAAC,CAAC;YAEpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,qBAAqB;gBAC5B,iBAAiB,EAAE,wDAAwD;aAC5E,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,gFAAgF;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG,+BAA+B,EAAE,CAAC;AAE3E;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC7E,iDAAiD;IACjD,MAAM,kBAAkB,GAAG;QACzB,UAAU,EAAE,oBAAoB;QAChC,mBAAmB,EAAE,gCAAgC;QACrD,cAAc,EAAE,sBAAsB;QACtC,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,sBAAsB;QAC5B,gBAAgB,EAAE,gBAAgB;QAClC,YAAY,EAAE,iBAAiB;KAChC,CAAC;IAEF,MAAM,wBAAwB,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAW,EAAE;QAC5E,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACzC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,OAAO,GAA4B;oBACvC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,2BAA2B;oBAC3D,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;oBAC3B,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;oBAChC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,kCAAkC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,gBAAgB;IAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAkC,CAAC,EAAE,CAAC;QAClF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,KAAK,EAAE,UAAU,GAAG,EAAE,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,qCAAqC;aACzD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAgC,CAAC,EAAE,CAAC;QAChF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,KAAK,EAAE,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,qCAAqC;aACzD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAA+B,CAAC,EAAE,CAAC;YAC/E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,iBAAiB;oBACxB,iBAAiB,EAAE,qCAAqC;iBACzD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC7E,sDAAsD;IACtD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,uDAAuD,CAAC,CAAC;IACxF,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACpC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC9B,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;IAE/C,+CAA+C;IAC/C,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,yCAAyC,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IACjF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,iCAAiC;IACjC,MAAM,kBAAkB,GACtB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,GAAG,CAAC,MAAM,KAAK,MAAM;QACrB,GAAG,CAAC,MAAM,KAAK,KAAK;QACpB,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC;IAE1B,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,OAAO,GAA4B;YACvC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;YAChC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;YACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB;YAC9D,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;SAC3E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,2BAA2B;IAC3B,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,GAAG,CAAC,IAAI,GAAG,UAA0B,IAAa;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,OAAO,GAA4B;gBACvC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,QAAQ;gBACR,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IACpF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,kFAAkF;IAClF,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEnF,IAAI,cAAc,EAAE,CAAC;QACnB,iEAAiE;QACjE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAEvG,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,GAAG,CAAC,IAAI,GAAG,UAA0B,IAAa;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC;YAE1D,UAAU,CAAC,GAAG,EAAE;gBACd,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvC,CAAC,EAAE,cAAc,CAAC,CAAC;YAEnB,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,CAAC,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;AAC1G,CAAC"}

package/build/transport/http/routes/adminRoutes.d.ts

@@ -8,7 +8,21 @@ import type { AdminOAuthOperations } from '../../../domains/admin/adminOAuthServ
 import { type AdminPresetOperations } from '../../../domains/admin/adminPresetService.js';
 import type { AdminMutationAvailability } from '../../../domains/admin/runtimeScopeAdminLock.js';
 import type { BackendLogBroker } from '../../../domains/backend-logs/backendLogBroker.js';
+import { type SensitiveOperationRateLimitPolicy } from '../../../transport/http/middlewares/securityMiddleware.js';
 import { Router } from 'express';
+export interface AdminRateLimitPolicy {
+    login: {
+        windowMs: number;
+        maxRequests: number;
+        maxFailedAttempts: number;
+    };
+    status: {
+        windowMs: number;
+        maxRequests: number;
+    };
+    sensitive: SensitiveOperationRateLimitPolicy;
+}
+export declare const DEFAULT_ADMIN_RATE_LIMIT_POLICY: AdminRateLimitPolicy;
 interface AdminRoutesOptions {
     adminEnabled: boolean;
     adminService: AdminIdentityService;
@@ -22,6 +36,7 @@ interface AdminRoutesOptions {
     getOAuthDashboard?: () => BackendOAuthDashboardResult;
     adminConsoleAssetsDir?: string;
     getBackendLogBroker?: () => BackendLogBroker;
+    rateLimit?: AdminRateLimitPolicy;
 }
 export declare function createAdminRoutes(options: AdminRoutesOptions): Router | null;
 export declare function resolveDefaultAdminConsoleAssetsDir(): string;
@@ -29,8 +44,9 @@ export declare class FailedLoginLimiter {
     private readonly now;
     private readonly maxActiveKeys;
     private readonly windowMs;
+    private readonly maxFailedAttempts;
     private readonly attempts;
-    constructor(now?: () => number, maxActiveKeys?: number, windowMs?: number);
+    constructor(now?: () => number, maxActiveKeys?: number, windowMs?: number, maxFailedAttempts?: number);
     isLimited(username: string, origin: string): boolean;
     recordFailure(username: string, origin: string): void;
     reset(username: string, origin: string): void;

package/build/transport/http/routes/adminRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adminRoutes.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/adminRoutes.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAEvF,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAE9E,OAAO,KAAK,EACV,6BAA6B,EAI9B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAIL,oBAAoB,EACrB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAEL,KAAK,kCAAkC,EACxC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAMpF,OAAO,EAIL,KAAK,qBAAqB,EAC3B,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAC7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAWtF,OAAgB,EAAqB,MAAM,EAAE,MAAM,SAAS,CAAC;AAqH7D,UAAU,kBAAkB;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,oBAAoB,CAAC;IACnC,uBAAuB,CAAC,EAAE,+BAA+B,CAAC;IAC1D,0BAA0B,CAAC,EAAE,kCAAkC,CAAC;IAChE,qBAAqB,CAAC,EAAE,6BAA6B,CAAC;IACtD,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,kBAAkB,EAAE,MAAM,eAAe,CAAC;IAC1C,iBAAiB,CAAC,EAAE,MAAM,2BAA2B,CAAC;IACtD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,gBAAgB,CAAC;CAC9C;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAsiB5E;AAqQD,wBAAgB,mCAAmC,IAAI,MAAM,CAE5D;AAslBD,qBAAa,kBAAkB;IAI3B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgE;gBAGtE,GAAG,GAAE,MAAM,MAAiB,EAC5B,aAAa,SAA+B,EAC5C,QAAQ,SAAyB;IAGpD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IASpD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAWrD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAI7C,OAAO,CAAC,UAAU;IAelB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,YAAY;CAQrB"}
+{"version":3,"file":"adminRoutes.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/adminRoutes.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAEvF,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAE9E,OAAO,KAAK,EACV,6BAA6B,EAI9B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAIL,oBAAoB,EACrB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAEL,KAAK,kCAAkC,EACxC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAMpF,OAAO,EAIL,KAAK,qBAAqB,EAC3B,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAC7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAQtF,OAAO,EAGL,KAAK,iCAAiC,EACvC,MAAM,uDAAuD,CAAC;AAG/D,OAAgB,EAAqB,MAAM,EAAE,MAAM,SAAS,CAAC;AAmI7D,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,SAAS,EAAE,iCAAiC,CAAC;CAC9C;AAED,eAAO,MAAM,+BAA+B,EAAE,oBAW7C,CAAC;AAEF,UAAU,kBAAkB;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,oBAAoB,CAAC;IACnC,uBAAuB,CAAC,EAAE,+BAA+B,CAAC;IAC1D,0BAA0B,CAAC,EAAE,kCAAkC,CAAC;IAChE,qBAAqB,CAAC,EAAE,6BAA6B,CAAC;IACtD,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,kBAAkB,EAAE,MAAM,eAAe,CAAC;IAC1C,iBAAiB,CAAC,EAAE,MAAM,2BAA2B,CAAC;IACtD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,gBAAgB,CAAC;IAC7C,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAClC;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAukB5E;AAqQD,wBAAgB,mCAAmC,IAAI,MAAM,CAE5D;AA80BD,qBAAa,kBAAkB;IAI3B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IANpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgE;gBAGtE,GAAG,GAAE,MAAM,MAAiB,EAC5B,aAAa,SAA+B,EAC5C,QAAQ,SAAyB,EACjC,iBAAiB,SAAqB;IAGzD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IASpD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAWrD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAI7C,OAAO,CAAC,UAAU;IAelB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,YAAY;CAQrB"}

package/build/transport/http/routes/adminRoutes.js

@@ -8,7 +8,7 @@ import { AdminConfiguredServerApplyError, AdminConfiguredServerNotFoundError, }
 import { ADMIN_SESSION_COOKIE_NAME, AdminIdentityError, } from '../../../domains/admin/adminIdentityService.js';
 import { AdminInstructionTemplateNotFoundError, } from '../../../domains/admin/adminInstructionTemplateService.js';
 import { AdminPresetConflictError, AdminPresetNotFoundError, } from '../../../domains/admin/adminPresetService.js';
-import { sensitiveOperationLimiter } from '../../../transport/http/middlewares/securityMiddleware.js';
+import { createSensitiveOperationLimiter, DEFAULT_SENSITIVE_OPERATION_RATE_LIMIT_POLICY, } from '../../../transport/http/middlewares/securityMiddleware.js';
 import { sanitizeErrorMessage } from '../../../utils/validation/sanitization.js';
 import express, { Router } from 'express';
 import rateLimit from 'express-rate-limit';
@@ -42,6 +42,7 @@ const backendLogSnapshotQuerySchema = z.object({
     sourceId: z.string().trim().min(1).max(256).optional(),
 });
 const configuredServerModelSchema = z.string().trim().min(1).max(64);
+const configuredToolInventoryRefreshSchema = z.object({ model: configuredServerModelSchema.optional() }).strict();
 const cliConfiguredServerMutationBodySchema = z.object({
     targetName: z.string().trim().min(1).max(256),
     dryRun: z.boolean().optional(),
@@ -116,25 +117,52 @@ const requestContextSchema = z
 })
     .strict();
 const configuredServerSourceSchema = z.enum(['mcpServers', 'mcpTemplates']);
+const configuredServerDeleteApplySchema = z
+    .object({
+    previewFingerprint: z.string().trim().min(1).max(256),
+    confirmationFacts: z
+        .object({
+        previewConfirmed: z.string().trim().min(1).max(256),
+        targetIdentityConfirmed: z.string().trim().min(1).max(512),
+    })
+        .strict(),
+})
+    .strict();
+const configuredServerLifecyclePreviewSchema = z.object({ enabled: z.boolean() }).strict();
+const configuredServerLifecycleApplySchema = configuredServerDeleteApplySchema.extend({ enabled: z.boolean() }).strict();
+export const DEFAULT_ADMIN_RATE_LIMIT_POLICY = {
+    login: {
+        windowMs: ADMIN_AUTH_RATE_LIMIT_WINDOW_MS,
+        maxRequests: ADMIN_AUTH_RATE_LIMIT,
+        maxFailedAttempts: FAILED_LOGIN_LIMIT,
+    },
+    status: {
+        windowMs: ADMIN_STATUS_RATE_LIMIT_WINDOW_MS,
+        maxRequests: ADMIN_STATUS_RATE_LIMIT,
+    },
+    sensitive: { ...DEFAULT_SENSITIVE_OPERATION_RATE_LIMIT_POLICY },
+};
 export function createAdminRoutes(options) {
     if (!options.adminEnabled) {
         options.adminService.revokeAllSessions();
         return null;
     }
     const router = Router();
-    const failedLoginLimiter = new FailedLoginLimiter();
+    const rateLimitPolicy = options.rateLimit ?? DEFAULT_ADMIN_RATE_LIMIT_POLICY;
+    const failedLoginLimiter = new FailedLoginLimiter(Date.now, FAILED_LOGIN_MAX_ACTIVE_KEYS, rateLimitPolicy.login.windowMs, rateLimitPolicy.login.maxFailedAttempts);
     const authenticationLimiter = rateLimit({
-        windowMs: ADMIN_AUTH_RATE_LIMIT_WINDOW_MS,
-        max: ADMIN_AUTH_RATE_LIMIT,
+        windowMs: rateLimitPolicy.login.windowMs,
+        max: rateLimitPolicy.login.maxRequests,
         standardHeaders: true,
         legacyHeaders: false,
     });
     const statusLimiter = rateLimit({
-        windowMs: ADMIN_STATUS_RATE_LIMIT_WINDOW_MS,
-        max: ADMIN_STATUS_RATE_LIMIT,
+        windowMs: rateLimitPolicy.status.windowMs,
+        max: rateLimitPolicy.status.maxRequests,
         standardHeaders: true,
         legacyHeaders: false,
     });
+    const sensitiveOperationLimiter = createSensitiveOperationLimiter(rateLimitPolicy.sensitive);
     const adminConsoleAssets = resolveAdminConsoleAssets(options.adminConsoleAssetsDir);
     options.adminService.bootstrapFirstAdminFromEnvironment();
     router.get('/cli/v1/capabilities', (req, res) => {
@@ -543,6 +571,12 @@ export function createAdminRoutes(options) {
     router.get('/api/configured-servers/:name', async (req, res) => {
         await handleConfiguredServerDetail(req, res, options);
     });
+    router.post('/api/configured-servers/:source/:name/tool-inventory/refresh', async (req, res) => {
+        const source = configuredServerSourceSchema.safeParse(req.params.source);
+        if (!source.success)
+            return void res.status(400).json({ error: 'configured_server_source_invalid' });
+        await handleConfiguredToolInventoryRefresh(req, res, options, source.data);
+    });
     router.post('/api/configured-servers/:source/:name/preview', async (req, res) => {
         const source = configuredServerSourceSchema.safeParse(req.params.source);
         if (!source.success)
@@ -555,6 +589,24 @@ export function createAdminRoutes(options) {
             return void res.status(400).json({ error: 'configured_server_source_invalid' });
         await handleConfiguredServerApply(req, res, options, source.data);
     });
+    router.post('/api/configured-servers/:source/:name/delete-preview', async (req, res) => {
+        const source = configuredServerSourceSchema.safeParse(req.params.source);
+        if (!source.success)
+            return void res.status(400).json({ error: 'configured_server_source_invalid' });
+        await handleConfiguredServerDeletePreview(req, res, options, source.data);
+    });
+    router.post('/api/configured-servers/mcpTemplates/:name/lifecycle-preview', async (req, res) => {
+        await handleConfiguredServerLifecyclePreview(req, res, options);
+    });
+    router.post('/api/configured-servers/mcpTemplates/:name/lifecycle', async (req, res) => {
+        await handleConfiguredServerLifecycleApply(req, res, options);
+    });
+    router.delete('/api/configured-servers/:source/:name', async (req, res) => {
+        const source = configuredServerSourceSchema.safeParse(req.params.source);
+        if (!source.success)
+            return void res.status(400).json({ error: 'configured_server_source_invalid' });
+        await handleConfiguredServerDelete(req, res, options, source.data);
+    });
     router.post('/api/configured-servers/mcpServers/:name/enable', async (req, res) => {
         await handleConfiguredServerMutation(req, res, options, 'enableConfiguredServer', 'mcpServers');
     });
@@ -1030,7 +1082,7 @@ async function handleConfiguredServerDetail(req, res, options, targetSource) {
         const result = await options.configuredServerService.getConfiguredServerDetail({
             context: buildAdminOperationContext(req, options, {
                 type: 'configured_server',
-                id: `${targetSource ?? 'mcpServers'}:${targetName}`,
+                id: `${targetSource ?? 'mcpServers'}/${targetName}`,
             }),
             targetName,
             ...(targetSource ? { targetSource } : {}),
@@ -1055,7 +1107,52 @@ async function handleConfiguredServerDetail(req, res, options, targetSource) {
                 error: error.code,
                 code: error.code,
                 message: 'Configured server target was not found',
-                target: { type: 'configured_server', id: error.targetName },
+                target: { type: 'configured_server', id: `${targetSource ?? 'mcpServers'}/${error.targetName}` },
+            });
+            return;
+        }
+        throw error;
+    }
+}
+async function handleConfiguredToolInventoryRefresh(req, res, options, targetSource) {
+    if (!options.configuredServerService?.refreshConfiguredToolInventory) {
+        res.status(404).json({ error: 'admin_configured_servers_unavailable' });
+        return;
+    }
+    const body = configuredToolInventoryRefreshSchema.safeParse(req.body ?? {});
+    if (!body.success) {
+        res.status(400).json({ error: 'configured_tool_inventory_refresh_invalid' });
+        return;
+    }
+    const targetName = req.params.name;
+    try {
+        const result = await options.configuredServerService.refreshConfiguredToolInventory({
+            context: buildAdminOperationContext(req, options, {
+                type: 'configured_server',
+                id: `${targetSource}/${targetName}`,
+            }),
+            targetName,
+            targetSource,
+            ...(body.data.model ? { model: body.data.model } : {}),
+        });
+        if (!result.ok) {
+            sendAdminOperationResult(res, result);
+            return;
+        }
+        res.status(200).json({
+            ok: true,
+            operationId: result.operationId,
+            toolInventory: result.result,
+        });
+    }
+    catch (error) {
+        if (error instanceof AdminConfiguredServerNotFoundError) {
+            res.status(404).json({
+                ok: false,
+                error: error.code,
+                code: error.code,
+                message: 'Configured server target was not found',
+                target: { type: 'configured_server', id: `${targetSource}/${targetName}` },
             });
             return;
         }
@@ -1158,7 +1255,7 @@ async function handleConfiguredServerPreview(req, res, options, targetSource) {
         const result = await options.configuredServerService.previewConfiguredServerEdit({
             context: buildAdminOperationContext(req, options, {
                 type: 'configured_server',
-                id: `${targetSource ?? 'mcpServers'}:${targetName}`,
+                id: `${targetSource ?? 'mcpServers'}/${targetName}`,
             }),
             targetName,
             ...(targetSource ? { targetSource } : {}),
@@ -1183,7 +1280,7 @@ async function handleConfiguredServerPreview(req, res, options, targetSource) {
                 error: error.code,
                 code: error.code,
                 message: 'Configured server target was not found',
-                target: { type: 'configured_server', id: error.targetName },
+                target: { type: 'configured_server', id: `${targetSource ?? 'mcpServers'}/${error.targetName}` },
             });
             return;
         }
@@ -1212,7 +1309,7 @@ async function handleConfiguredServerApply(req, res, options, targetSource) {
         const result = await options.configuredServerService.applyConfiguredServerEdit({
             context: buildAdminOperationContext(req, options, {
                 type: 'configured_server',
-                id: `${targetSource ?? 'mcpServers'}:${targetName}`,
+                id: `${targetSource ?? 'mcpServers'}/${targetName}`,
             }),
             targetName,
             ...(targetSource ? { targetSource } : {}),
@@ -1238,6 +1335,180 @@ async function handleConfiguredServerApply(req, res, options, targetSource) {
         throw error;
     }
 }
+async function handleConfiguredServerDeletePreview(req, res, options, targetSource) {
+    if (!options.configuredServerService?.previewConfiguredServerDelete) {
+        res.status(404).json({ error: 'admin_configured_server_delete_unavailable' });
+        return;
+    }
+    const targetName = req.params.name;
+    try {
+        const result = await options.configuredServerService.previewConfiguredServerDelete({
+            context: buildAdminOperationContext(req, options, {
+                type: 'configured_server',
+                id: `${targetSource}/${targetName}`,
+            }),
+            targetName,
+            targetSource,
+        });
+        if (!result.ok) {
+            if (result.status === 'mutation_failed' && isConfiguredServerApplyErrorCode(result.error)) {
+                sendConfiguredServerApplyError(res, result.error);
+                return;
+            }
+            sendAdminOperationResult(res, result);
+            return;
+        }
+        res.status(200).json({ ok: true, operationId: result.operationId, preview: result.result });
+    }
+    catch (error) {
+        if (error instanceof AdminConfiguredServerNotFoundError) {
+            sendConfiguredServerApplyError(res, error.code);
+            return;
+        }
+        if (error instanceof AdminConfiguredServerApplyError) {
+            sendConfiguredServerApplyError(res, error.code);
+            return;
+        }
+        throw error;
+    }
+}
+async function handleConfiguredServerDelete(req, res, options, targetSource) {
+    if (!options.configuredServerService?.deleteConfiguredServer) {
+        res.status(404).json({ error: 'admin_configured_server_delete_unavailable' });
+        return;
+    }
+    if (!req.header('Idempotency-Key')?.trim()) {
+        res.status(400).json({ ok: false, error: 'idempotency_key_required', code: 'idempotency_key_required' });
+        return;
+    }
+    if (isMutationLocked(options)) {
+        sendAdminOperationResult(res, {
+            ok: false,
+            status: 'runtime_scope_locked',
+            code: 'runtime_scope_locked',
+            retryable: true,
+            operationName: 'deleteConfiguredServer',
+            reason: 'writer_lock_unavailable',
+        });
+        return;
+    }
+    const targetName = req.params.name;
+    const parsedBody = configuredServerDeleteApplySchema.safeParse(req.body);
+    if (!parsedBody.success) {
+        res.status(400).json({
+            ok: false,
+            error: 'configured_server_delete_request_invalid',
+            code: 'configured_server_delete_request_invalid',
+            message: 'Delete requires a current preview fingerprint and exact source-qualified confirmation facts.',
+        });
+        return;
+    }
+    try {
+        const result = await options.configuredServerService.deleteConfiguredServer({
+            context: buildAdminOperationContext(req, options, {
+                type: 'configured_server',
+                id: `${targetSource}/${targetName}`,
+            }),
+            targetName,
+            targetSource,
+            previewFingerprint: parsedBody.data.previewFingerprint,
+        });
+        if (!result.ok && result.status === 'mutation_failed' && isConfiguredServerApplyErrorCode(result.error)) {
+            sendConfiguredServerApplyError(res, result.error);
+            return;
+        }
+        sendAdminOperationResult(res, result);
+    }
+    catch (error) {
+        if (error instanceof AdminConfiguredServerNotFoundError || error instanceof AdminConfiguredServerApplyError) {
+            sendConfiguredServerApplyError(res, error.code);
+            return;
+        }
+        throw error;
+    }
+}
+async function handleConfiguredServerLifecyclePreview(req, res, options) {
+    if (!options.configuredServerService?.previewConfiguredServerLifecycle) {
+        res.status(404).json({ error: 'admin_configured_server_lifecycle_unavailable' });
+        return;
+    }
+    const body = configuredServerLifecyclePreviewSchema.safeParse(req.body);
+    if (!body.success) {
+        res.status(400).json({ ok: false, error: 'configured_server_lifecycle_request_invalid' });
+        return;
+    }
+    try {
+        const result = await options.configuredServerService.previewConfiguredServerLifecycle({
+            context: buildAdminOperationContext(req, options, {
+                type: 'configured_server',
+                id: `mcpTemplates/${req.params.name}`,
+            }),
+            targetName: req.params.name,
+            targetSource: 'mcpTemplates',
+            enabled: body.data.enabled,
+        });
+        if (!result.ok)
+            return void sendAdminOperationResult(res, result);
+        res.status(200).json({ ok: true, operationId: result.operationId, preview: result.result });
+    }
+    catch (error) {
+        if (error instanceof AdminConfiguredServerNotFoundError || error instanceof AdminConfiguredServerApplyError) {
+            sendConfiguredServerApplyError(res, error.code);
+            return;
+        }
+        throw error;
+    }
+}
+async function handleConfiguredServerLifecycleApply(req, res, options) {
+    if (!options.configuredServerService?.applyConfiguredServerLifecycle) {
+        res.status(404).json({ error: 'admin_configured_server_lifecycle_unavailable' });
+        return;
+    }
+    if (!req.header('Idempotency-Key')?.trim()) {
+        res.status(400).json({ ok: false, error: 'idempotency_key_required', code: 'idempotency_key_required' });
+        return;
+    }
+    if (isMutationLocked(options)) {
+        sendAdminOperationResult(res, {
+            ok: false,
+            status: 'runtime_scope_locked',
+            code: 'runtime_scope_locked',
+            retryable: true,
+            operationName: 'applyConfiguredServerLifecycle',
+            reason: 'writer_lock_unavailable',
+        });
+        return;
+    }
+    const body = configuredServerLifecycleApplySchema.safeParse(req.body);
+    if (!body.success) {
+        res.status(400).json({ ok: false, error: 'configured_server_lifecycle_request_invalid' });
+        return;
+    }
+    try {
+        const result = await options.configuredServerService.applyConfiguredServerLifecycle({
+            context: buildAdminOperationContext(req, options, {
+                type: 'configured_server',
+                id: `mcpTemplates/${req.params.name}`,
+            }),
+            targetName: req.params.name,
+            targetSource: 'mcpTemplates',
+            enabled: body.data.enabled,
+            previewFingerprint: body.data.previewFingerprint,
+        });
+        if (!result.ok && result.status === 'mutation_failed' && isConfiguredServerApplyErrorCode(result.error)) {
+            sendConfiguredServerApplyError(res, result.error);
+            return;
+        }
+        sendAdminOperationResult(res, result);
+    }
+    catch (error) {
+        if (error instanceof AdminConfiguredServerNotFoundError || error instanceof AdminConfiguredServerApplyError) {
+            sendConfiguredServerApplyError(res, error.code);
+            return;
+        }
+        throw error;
+    }
+}
 function isConfiguredServerApplyErrorCode(value) {
     return value.startsWith('configured_server_');
 }
@@ -1268,6 +1539,12 @@ function configuredServerApplyErrorMessage(code) {
             return 'The configured server could not be persisted. Inspect the Runtime Scope configuration and retry with a new idempotency key.';
         case 'configured_server_not_found':
             return 'Configured server target was not found.';
+        case 'configured_server_already_removed':
+            return 'This source-qualified configured server target was already removed. Refresh the server inventory.';
+        case 'configured_server_source_changed':
+            return 'The requested source no longer owns this configured server target. Refresh the inventory; the same name in the other source was not changed.';
+        case 'configured_server_delete_failed':
+            return 'The configured server target could not be deleted. The recovery backup and original definition were preserved.';
         default:
             return 'The configured server edit could not be applied.';
     }
@@ -1291,7 +1568,7 @@ async function handleConfiguredServerMutation(req, res, options, operationName,
     const targetName = req.params.name;
     const context = buildAdminOperationContext(req, options, {
         type: 'configured_server',
-        id: `${targetSource ?? 'mcpServers'}:${targetName}`,
+        id: `${targetSource ?? 'mcpServers'}/${targetName}`,
     });
     const input = { context, targetName, ...(targetSource ? { targetSource } : {}) };
     const result = operationName === 'enableConfiguredServer'
@@ -1330,17 +1607,19 @@ export class FailedLoginLimiter {
     now;
     maxActiveKeys;
     windowMs;
+    maxFailedAttempts;
     attempts = new Map();
-    constructor(now = Date.now, maxActiveKeys = FAILED_LOGIN_MAX_ACTIVE_KEYS, windowMs = FAILED_LOGIN_WINDOW_MS) {
+    constructor(now = Date.now, maxActiveKeys = FAILED_LOGIN_MAX_ACTIVE_KEYS, windowMs = FAILED_LOGIN_WINDOW_MS, maxFailedAttempts = FAILED_LOGIN_LIMIT) {
         this.now = now;
         this.maxActiveKeys = maxActiveKeys;
         this.windowMs = windowMs;
+        this.maxFailedAttempts = maxFailedAttempts;
     }
     isLimited(username, origin) {
         this.pruneExpired();
         const attempt = this.getAttempt(username, origin);
         if (attempt) {
-            return attempt.count >= FAILED_LOGIN_LIMIT;
+            return attempt.count >= this.maxFailedAttempts;
         }
         return this.attempts.size >= this.maxActiveKeys;
     }
@@ -1385,7 +1664,7 @@ function isUnsafeMethod(method) {
     return method !== 'GET' && method !== 'HEAD' && method !== 'OPTIONS';
 }
 function getLoginSource(req) {
-    return req.ip ?? req.socket.remoteAddress ?? req.header('origin') ?? 'unknown';
+    return req.ip ?? 'unknown';
 }
 function setAdminSessionCookie(res, externalUrl, sessionToken, expiresAt) {
     res.cookie(ADMIN_SESSION_COOKIE_NAME, sessionToken, {
@@ -1778,6 +2057,25 @@ function configuredServerRequestFingerprint(operationName, targetName, body) {
                 draftDigest: keyedRequestFingerprint(previewFingerprint, 'configured-server-create-draft', stableJsonStringify(getBodyValue(body, 'draft') ?? {})),
             }
             : {}),
+        ...(operationName === 'deleteConfiguredServer'
+            ? {
+                previewFingerprint,
+                deleteDigest: keyedRequestFingerprint(previewFingerprint, 'configured-server-delete-body', stableJsonStringify({
+                    previewFingerprint,
+                    confirmationFacts: getBodyRecord(body, 'confirmationFacts') ?? {},
+                })),
+            }
+            : {}),
+        ...(operationName === 'applyConfiguredServerLifecycle'
+            ? {
+                previewFingerprint,
+                lifecycleDigest: keyedRequestFingerprint(previewFingerprint, 'configured-server-lifecycle-body', stableJsonStringify({
+                    enabled: getBodyValue(body, 'enabled') === true,
+                    previewFingerprint,
+                    confirmationFacts: getBodyRecord(body, 'confirmationFacts') ?? {},
+                })),
+            }
+            : {}),
         ...(operationName === 'restartBackend'
             ? {
                 restartSelection: {
@@ -1795,6 +2093,12 @@ function configuredServerRequestFingerprint(operationName, targetName, body) {
     if (operationName === 'applyConfiguredServerCreate') {
         return `configured_server_create_${keyedRequestFingerprint(previewFingerprint, 'configured-server-create', normalized)}`;
     }
+    if (operationName === 'deleteConfiguredServer') {
+        return `configured_server_delete_${keyedRequestFingerprint(previewFingerprint, 'configured-server-delete', normalized)}`;
+    }
+    if (operationName === 'applyConfiguredServerLifecycle') {
+        return `configured_server_lifecycle_${keyedRequestFingerprint(previewFingerprint, 'configured-server-lifecycle', normalized)}`;
+    }
     return operationName === 'applyConfiguredServerEdit'
         ? `configured_server_apply_${keyedRequestFingerprint(previewFingerprint, 'configured-server-apply', normalized)}`
         : normalized;
@@ -1926,9 +2230,21 @@ function operationNameForRequest(req) {
     if (req.method === 'GET' && req.path === '/api/configured-servers/create-contract') {
         return 'getConfiguredServerCreateContract';
     }
+    if (req.path.endsWith('/lifecycle-preview')) {
+        return 'previewConfiguredServerLifecycle';
+    }
+    if (req.path.endsWith('/lifecycle')) {
+        return 'applyConfiguredServerLifecycle';
+    }
     if (req.path.endsWith('/preview')) {
         return 'previewConfiguredServerEdit';
     }
+    if (req.path.endsWith('/delete-preview')) {
+        return 'previewConfiguredServerDelete';
+    }
+    if (req.method === 'DELETE' && req.path.startsWith('/api/configured-servers/')) {
+        return 'deleteConfiguredServer';
+    }
     if (req.path.endsWith('/apply')) {
         return 'applyConfiguredServerEdit';
     }