@agent-deck/backend 1.1.5 → 1.1.7

package/dist/data/oauth-provider-guides.d.ts

@@ -1,23 +1,35 @@
-export type OAuthSetupMode = 'dynamic' | 'managed' | 'manual' | 'unavailable';
+export type OAuthSetupMode = 'dynamic' | 'managed' | 'manual' | 'unavailable' | 'informational';
+export type ServiceGuideContext = {
+    serviceName?: string;
+    serviceUrl?: string;
+};
 export type OAuthProviderGuide = {
     provider: string;
     setupMode: OAuthSetupMode;
     title: string;
     redirectUri: string;
+    /** One-line: what this card does in Agent Deck. */
+    summary?: string;
+    prerequisites?: string[];
     steps: string[];
+    /** What to do after OAuth / first successful tool discovery. */
+    afterConnect?: string[];
     docsUrl?: string;
     unavailableReason?: string;
     /** Pre-filled app manifest (Slack: paste at Create New App → From a manifest). */
     manifestJson?: string;
     /** Deep link to provider app creation UI. */
     createAppUrl?: string;
+    createAppLabel?: string;
     /** Shorter alternative when full setup is too heavy. */
     easierAlternative?: string;
+    /** PAT / header auth when OAuth app setup is optional. */
+    tokenAlternative?: string;
 };
 /** Slack MCP app manifest with redirect URI and common user scopes pre-filled. */
 export declare function getSlackMcpAppManifest(redirectUri?: string): string;
 export declare function inferOAuthProvider(serviceUrl: string, authServers?: string[]): string;
 export declare function resolveOAuthSetupMode(provider: string, supportsDynamicRegistration?: boolean): OAuthSetupMode;
-export declare function getOAuthProviderGuide(provider: string): OAuthProviderGuide;
+export declare function getOAuthProviderGuide(provider: string, context?: ServiceGuideContext): OAuthProviderGuide;
 export { getOAuthRedirectUri } from '../config/oauth-redirect';
 //# sourceMappingURL=oauth-provider-guides.d.ts.map

package/dist/data/oauth-provider-guides.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-provider-guides.d.ts","sourceRoot":"","sources":["../../src/data/oauth-provider-guides.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,aAAa,CAAC;AAK9E,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,cAAc,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,WAAW,SAAwB,GAAG,MAAM,CA8ClF;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,GAAE,MAAM,EAAO,GAAG,MAAM,CAazF;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,2BAA2B,CAAC,EAAE,OAAO,GACpC,cAAc,CAMhB;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAkG1E;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"oauth-provider-guides.d.ts","sourceRoot":"","sources":["../../src/data/oauth-provider-guides.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,aAAa,GAAG,eAAe,CAAC;AAKhG,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,cAAc,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAKF,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,WAAW,SAAwB,GAAG,MAAM,CA8ClF;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,GAAE,MAAM,EAAO,GAAG,MAAM,CAczF;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,2BAA2B,CAAC,EAAE,OAAO,GACpC,cAAc,CAOhB;AA2BD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,mBAAwB,GAChC,kBAAkB,CAiMpB;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/data/oauth-provider-guides.js

@@ -7,6 +7,7 @@ exports.resolveOAuthSetupMode = resolveOAuthSetupMode;
 exports.getOAuthProviderGuide = getOAuthProviderGuide;
 const shared_oauth_apps_1 = require("../config/shared-oauth-apps");
 const oauth_redirect_1 = require("../config/oauth-redirect");
+const AFTER_DECK_HINT = 'Drag this card onto a deck in the dashboard, then bind your agent (bind_workspace or switch_bound_deck) so tools appear in chat.';
 /** Slack MCP app manifest with redirect URI and common user scopes pre-filled. */
 function getSlackMcpAppManifest(redirectUri = (0, oauth_redirect_1.getOAuthRedirectUri)()) {
     return JSON.stringify({
@@ -54,6 +55,8 @@ function inferOAuthProvider(serviceUrl, authServers = []) {
     const url = serviceUrl.toLowerCase();
     if (url.includes('figma.com'))
         return 'figma';
+    if (url.includes('draw.io'))
+        return 'drawio';
     if (url.includes('slack.com'))
         return 'slack';
     if (url.includes('googleapis.com') || authServers.some((s) => s.includes('accounts.google.com'))) {
@@ -71,6 +74,8 @@ function inferOAuthProvider(serviceUrl, authServers = []) {
 function resolveOAuthSetupMode(provider, supportsDynamicRegistration) {
     if (provider === 'figma')
         return 'unavailable';
+    if (provider === 'drawio')
+        return 'informational';
     if ((0, shared_oauth_apps_1.hasSharedOAuthApp)(provider))
         return 'managed';
     if (supportsDynamicRegistration)
@@ -79,58 +84,119 @@ function resolveOAuthSetupMode(provider, supportsDynamicRegistration) {
         return 'dynamic';
     return 'manual';
 }
-function getOAuthProviderGuide(provider) {
+function googleApiSteps(serviceName) {
+    const name = serviceName?.toLowerCase() ?? '';
+    if (name.includes('gmail')) {
+        return [
+            'In Google Cloud Console → APIs & Services → Library, enable the Gmail API for this project.',
+            'OAuth consent screen: add scope https://www.googleapis.com/auth/gmail (and any others Gmail MCP requests).',
+        ];
+    }
+    if (name.includes('calendar')) {
+        return [
+            'Enable the Google Calendar API in APIs & Services → Library.',
+            'OAuth consent screen: allow Calendar scopes when prompted during Connect.',
+        ];
+    }
+    if (name.includes('drive')) {
+        return [
+            'Enable Google Drive API (drive.googleapis.com) in APIs & Services → Library.',
+            'Enable Google Drive MCP API (drivemcp.googleapis.com) — required for the remote MCP endpoint; easy to miss.',
+            'OAuth consent screen → Data access → manually add scopes: drive.readonly and drive.file (see Google Drive MCP docs).',
+            'If app user type is External: Audience → add your Google account as a Test user while the app is in Testing.',
+        ];
+    }
+    return ['Enable the Gmail, Calendar, or Drive API that matches this card.'];
+}
+function getOAuthProviderGuide(provider, context = {}) {
     const redirectUri = (0, oauth_redirect_1.getOAuthRedirectUri)();
     const base = {
         provider,
         redirectUri,
     };
     switch (provider) {
-        case 'google':
+        case 'google': {
+            const isDrive = context.serviceName?.toLowerCase().includes('drive');
             return {
                 ...base,
                 setupMode: 'manual',
-                title: 'Google OAuth app',
-                docsUrl: 'https://developers.google.com/workspace/guides/configure-mcp-servers',
+                title: context.serviceName ?? 'Google MCP',
+                summary: isDrive
+                    ? 'Google-hosted Drive MCP (Developer Preview). Heavy GCP setup — see docs/GOOGLE_DRIVE_WORKAROUND.md for a simpler local-MCP path.'
+                    : 'Google-hosted MCP for Workspace data. One OAuth client can cover multiple Google cards after Drive works.',
+                prerequisites: [
+                    'Google account with access to the data you want.',
+                    'Google Cloud project (free tier OK for personal use).',
+                    ...(isDrive
+                        ? ['Remote Drive MCP: enable both drive.googleapis.com and drivemcp.googleapis.com.']
+                        : []),
+                ],
+                docsUrl: isDrive
+                    ? 'https://developers.google.com/workspace/drive/api/guides/configure-mcp-server'
+                    : 'https://developers.google.com/workspace/guides/configure-mcp-servers',
+                createAppUrl: 'https://console.cloud.google.com/apis/credentials',
+                createAppLabel: 'Open Google Cloud Credentials',
                 steps: [
-                    'Open Google Cloud Console → APIs & Services → Credentials.',
-                    'Create an OAuth 2.0 Client ID (type: Web application or Desktop).',
-                    `Add authorized redirect URI: ${redirectUri}`,
-                    'Enable the Gmail / Calendar / Drive MCP APIs for your project if prompted.',
-                    'Paste the Client ID and Client Secret below, then click Connect.',
+                    'Open Google Cloud Console → select or create a project.',
+                    ...googleApiSteps(context.serviceName),
+                    'Google Auth Platform → OAuth consent screen → configure (External + Test users for personal dev is OK).',
+                    'Credentials → Create credentials → OAuth client ID → Web application.',
+                    `Authorized redirect URIs: add exactly ${redirectUri} (127.0.0.1 not localhost if you see redirect_uri_mismatch).`,
+                    'Copy Client ID and Client Secret → paste below → Connect with credentials → pick your Google account.',
+                ],
+                afterConnect: [
+                    'If OAuth succeeds but tools fail, confirm drivemcp.googleapis.com is enabled (Drive) or the product MCP API for Gmail/Calendar.',
+                    AFTER_DECK_HINT,
                 ],
+                easierAlternative: isDrive
+                    ? 'Recommended if remote OAuth failed: register a local Google Drive MCP server (stdio) — full steps in docs/GOOGLE_DRIVE_WORKAROUND.md. Or use Drive in Cursor/Claude natively and skip this card.'
+                    : 'You only need one GCP project for all three Google cards. Debug Google Drive first; reuse the same Client ID/Secret on other cards once scopes are added.',
             };
+        }
         case 'slack':
             if ((0, shared_oauth_apps_1.hasSharedOAuthApp)('slack')) {
                 return {
                     ...base,
                     setupMode: 'managed',
-                    title: 'Slack',
+                    title: 'Slack MCP',
+                    summary: 'Official Slack MCP — search channels/DMs, read history, send messages as you.',
                     docsUrl: 'https://docs.slack.dev/ai/slack-mcp-server/',
                     steps: [
                         'Click Connect — Agent Deck uses the shared Slack OAuth app.',
-                        'Sign in and approve access for your workspace (one time per workspace).',
+                        'Sign in and approve access for your workspace (once per workspace).',
                     ],
+                    afterConnect: [AFTER_DECK_HINT],
                 };
             }
             return {
                 ...base,
                 setupMode: 'manual',
                 title: 'Slack MCP (~10 min, one-time)',
+                summary: 'Official Slack MCP at mcp.slack.com. Requires your own Slack app with MCP enabled (Slack does not allow auto-registration like Linear).',
+                prerequisites: [
+                    'Slack workspace where you can create or manage apps.',
+                    'Permission to install the app to that workspace.',
+                ],
                 docsUrl: 'https://docs.slack.dev/ai/slack-mcp-server/',
                 createAppUrl: 'https://api.slack.com/apps/new',
+                createAppLabel: 'Open Slack app creator',
                 manifestJson: getSlackMcpAppManifest(redirectUri),
-                easierAlternative: 'If this is too much: use Slack MCP inside Cursor or Claude Code (partner apps), and keep this card as a reminder—or wait for a future Agent Deck shared OAuth app.',
+                easierAlternative: 'Easier path: use Slack MCP inside Cursor or Claude Code (partner OAuth). Use Agent Deck when you want Slack on a custom deck with other tools.',
                 steps: [
                     ...((0, oauth_redirect_1.isOAuthRedirectHttps)()
                         ? []
                         : [
-                            'Set AGENT_DECK_PUBLIC_URL to your Agent Deck HTTPS origin (e.g. https://oauth.agent-deck.dev) so the manifest redirect URL uses https:// — required for Slack public distribution.',
+                            'Dev / single workspace: redirect URI above (http on 127.0.0.1) is fine. Other workspaces need HTTPS — set AGENT_DECK_PUBLIC_URL when you host.',
                         ]),
-                    'Use the buttons below: copy the manifest → open Slack app creator → Create New App → From a manifest → paste → Create.',
-                    'In the new app: Agents & AI Apps → enable Model Context Protocol (MCP). OAuth & Permissions → opt in to PKCE if shown.',
+                    'Copy manifest → Open Slack app creator → Create New App → From a manifest → paste → Create.',
+                    'In the app: Agents & AI Apps → enable Model Context Protocol (MCP).',
+                    'OAuth & Permissions → enable PKCE if shown; confirm redirect URL matches above.',
                     'Basic Information → copy Client ID and Client Secret → paste below → Connect → approve in browser.',
                 ],
+                afterConnect: [
+                    'If tools fail with “App is not enabled for Slack MCP”, enable MCP under Agents & AI Apps.',
+                    AFTER_DECK_HINT,
+                ],
             };
         case 'figma':
             return {
@@ -145,33 +211,85 @@ function getOAuthProviderGuide(provider) {
             return {
                 ...base,
                 setupMode: 'manual',
-                title: 'GitHub',
-                docsUrl: 'https://docs.github.com/en/apps/oauth-apps',
+                title: 'GitHub MCP',
+                summary: 'GitHub’s hosted MCP at api.githubcopilot.com — repos, issues, PRs, Actions, code search. Available to any GitHub account; only certain tools (e.g. Copilot Cloud Agent) need a paid Copilot plan.',
+                prerequisites: [
+                    'GitHub account with access to the repos you want the agent to touch.',
+                    'Permission to create an OAuth App (personal account) or org admin approval for org-owned apps.',
+                    'Org/enterprise: admins may need to allow this OAuth app / MCP for non-partner clients (Cursor/VS Code are pre-approved; Agent Deck is BYO).',
+                ],
+                docsUrl: 'https://docs.github.com/en/copilot/how-tos/provide-context/use-mcp-in-your-ide/set-up-the-github-mcp-server',
+                createAppUrl: 'https://github.com/settings/applications/new',
+                createAppLabel: 'Create GitHub OAuth App',
+                easierAlternative: 'Easier in one IDE: built-in GitHub MCP in Cursor or VS Code (one-click OAuth). Use Agent Deck when GitHub must share a deck with Linear, Slack, etc.',
+                tokenAlternative: 'Skip OAuth app: edit this card → Headers → Authorization: Bearer <fine-grained PAT> with the repo scopes you need. Rotate PATs manually.',
                 steps: [
-                    'Create a GitHub OAuth App or use a fine-grained Personal Access Token.',
-                    `For OAuth app, set callback URL: ${redirectUri}`,
-                    'Alternatively set Authorization: Bearer <PAT> in service headers.',
-                    'Paste Client ID and Secret below for OAuth, then Connect.',
+                    'GitHub → Settings → Developer settings → OAuth Apps → New OAuth App.',
+                    'Application name: e.g. Agent Deck (local). Homepage URL: your Agent Deck URL or http://127.0.0.1:8000.',
+                    `Authorization callback URL: ${redirectUri} (must match exactly — use Copy redirect URI below).`,
+                    'Register the app → copy Client ID → Generate a new client secret.',
+                    'Paste Client ID and Client Secret below → Connect with credentials → approve GitHub access in the browser tab.',
+                    'Return here; health should turn green and tools (issues, PRs, repos, …) should appear.',
+                ],
+                afterConnect: [
+                    'Some tools need extra licenses (e.g. Copilot Cloud Agent → Copilot plan; code scanning → GHAS). Most repo/issue/PR tools work on free GitHub.',
+                    AFTER_DECK_HINT,
                 ],
             };
         case 'linear':
+            return {
+                ...base,
+                setupMode: 'dynamic',
+                title: 'Linear',
+                summary: 'Official Linear MCP — issues, projects, cycles, and team workflows.',
+                docsUrl: 'https://linear.app/docs/mcp',
+                steps: [
+                    'Click Connect — Agent Deck auto-registers with Linear (no developer console).',
+                    'Complete sign-in in the browser tab Linear opens.',
+                    'When status shows authenticated, refresh tools on this card.',
+                ],
+                afterConnect: [AFTER_DECK_HINT],
+            };
         case 'notion':
             return {
                 ...base,
                 setupMode: 'dynamic',
-                title: provider === 'linear' ? 'Linear' : 'Notion',
-                steps: ['Click Connect — Agent Deck registers automatically and opens the login page.'],
+                title: 'Notion',
+                summary: 'Official Notion MCP — pages, databases, and workspace search.',
+                docsUrl: 'https://developers.notion.com/docs/mcp',
+                steps: [
+                    'Click Connect — Agent Deck auto-registers with Notion.',
+                    'Pick the workspace and approve access in the browser.',
+                    'Refresh tools once authenticated.',
+                ],
+                afterConnect: [AFTER_DECK_HINT],
+            };
+        case 'drawio':
+            return {
+                ...base,
+                setupMode: 'informational',
+                title: 'Draw.io MCP',
+                summary: 'Hosted diagrams MCP at mcp.draw.io. Often works without OAuth — open tools on this card first.',
+                docsUrl: 'https://www.drawio.com/blog/mcp-server',
+                steps: [
+                    'Open this card → check Connection Logs / Tools tab. Many users get tools with no setup.',
+                    'If tools load: drag the card onto a deck and bind your agent — you are done.',
+                    'If discovery fails: check draw.io MCP docs for auth requirements; you may need a draw.io account or API token in card Headers.',
+                ],
+                afterConnect: [AFTER_DECK_HINT],
             };
         default:
             return {
                 ...base,
                 setupMode: 'manual',
-                title: 'OAuth application',
+                title: context.serviceName ?? 'OAuth application',
+                summary: 'Connect this MCP server with a provider-registered OAuth application.',
                 steps: [
-                    'Create an OAuth app with this MCP provider.',
+                    'Create an OAuth app in the provider developer console.',
                     `Set redirect URI to: ${redirectUri}`,
                     'Paste Client ID and Client Secret below, then Connect.',
                 ],
+                afterConnect: [AFTER_DECK_HINT],
             };
     }
 }

package/dist/data/oauth-provider-guides.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-provider-guides.js","sourceRoot":"","sources":["../../src/data/oauth-provider-guides.ts"],"names":[],"mappings":";;;AAsBA,wDA8CC;AAED,gDAaC;AAED,sDASC;AAED,sDAkGC;AAhMD,mEAAgE;AAChE,6DAAqF;AAkBrF,kFAAkF;AAClF,SAAgB,sBAAsB,CAAC,WAAW,GAAG,IAAA,oCAAmB,GAAE;IACxE,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,mBAAmB,EAAE;YACnB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,+DAA+D;YAC5E,gBAAgB,EACd,sPAAsP;YACxP,gBAAgB,EAAE,SAAS;SAC5B;QACD,QAAQ,EAAE;YACR,QAAQ,EAAE;gBACR,YAAY,EAAE,gBAAgB;gBAC9B,aAAa,EAAE,KAAK;aACrB;SACF;QACD,YAAY,EAAE;YACZ,aAAa,EAAE,CAAC,WAAW,CAAC;YAC5B,MAAM,EAAE;gBACN,GAAG,EAAE,CAAC,YAAY,CAAC;gBACnB,IAAI,EAAE;oBACJ,oBAAoB;oBACpB,qBAAqB;oBACrB,kBAAkB;oBAClB,gBAAgB;oBAChB,mBAAmB;oBACnB,mBAAmB;oBACnB,YAAY;oBACZ,kBAAkB;oBAClB,gBAAgB;oBAChB,cAAc;oBACd,YAAY;oBACZ,eAAe;oBACf,gBAAgB;oBAChB,YAAY;oBACZ,kBAAkB;iBACnB;aACF;SACF;QACD,QAAQ,EAAE;YACR,kBAAkB,EAAE,IAAI;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAAC,UAAkB,EAAE,cAAwB,EAAE;IAC/E,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC;QACjG,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC3F,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CACnC,QAAgB,EAChB,2BAAqC;IAErC,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,aAAa,CAAC;IAC/C,IAAI,IAAA,qCAAiB,EAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,2BAA2B;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACrE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CAAC,QAAgB;IACpD,MAAM,WAAW,GAAG,IAAA,oCAAmB,GAAE,CAAC;IAC1C,MAAM,IAAI,GAAG;QACX,QAAQ;QACR,WAAW;KACZ,CAAC;IAEF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,sEAAsE;gBAC/E,KAAK,EAAE;oBACL,4DAA4D;oBAC5D,mEAAmE;oBACnE,gCAAgC,WAAW,EAAE;oBAC7C,4EAA4E;oBAC5E,kEAAkE;iBACnE;aACF,CAAC;QACJ,KAAK,OAAO;YACV,IAAI,IAAA,qCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,GAAG,IAAI;oBACP,SAAS,EAAE,SAAS;oBACpB,KAAK,EAAE,OAAO;oBACd,OAAO,EAAE,6CAA6C;oBACtD,KAAK,EAAE;wBACL,6DAA6D;wBAC7D,yEAAyE;qBAC1E;iBACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,+BAA+B;gBACtC,OAAO,EAAE,6CAA6C;gBACtD,YAAY,EAAE,gCAAgC;gBAC9C,YAAY,EAAE,sBAAsB,CAAC,WAAW,CAAC;gBACjD,iBAAiB,EACf,oKAAoK;gBACtK,KAAK,EAAE;oBACL,GAAG,CAAC,IAAA,qCAAoB,GAAE;wBACxB,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACE,oLAAoL;yBACrL,CAAC;oBACN,wHAAwH;oBACxH,wHAAwH;oBACxH,oGAAoG;iBACrG;aACF,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,aAAa;gBACxB,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,gFAAgF;gBACzF,iBAAiB,EACf,oQAAoQ;gBACtQ,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,4CAA4C;gBACrD,KAAK,EAAE;oBACL,wEAAwE;oBACxE,oCAAoC,WAAW,EAAE;oBACjD,mEAAmE;oBACnE,2DAA2D;iBAC5D;aACF,CAAC;QACJ,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,SAAS;gBACpB,KAAK,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;gBAClD,KAAK,EAAE,CAAC,8EAA8E,CAAC;aACxF,CAAC;QACJ;YACE,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,mBAAmB;gBAC1B,KAAK,EAAE;oBACL,6CAA6C;oBAC7C,wBAAwB,WAAW,EAAE;oBACrC,wDAAwD;iBACzD;aACF,CAAC;IACN,CAAC;AACH,CAAC;AAED,2DAA+D;AAAtD,qHAAA,mBAAmB,OAAA"}
+{"version":3,"file":"oauth-provider-guides.js","sourceRoot":"","sources":["../../src/data/oauth-provider-guides.ts"],"names":[],"mappings":";;;AAsCA,wDA8CC;AAED,gDAcC;AAED,sDAUC;AA2BD,sDAoMC;AA7UD,mEAAgE;AAChE,6DAAqF;AA+BrF,MAAM,eAAe,GACnB,kIAAkI,CAAC;AAErI,kFAAkF;AAClF,SAAgB,sBAAsB,CAAC,WAAW,GAAG,IAAA,oCAAmB,GAAE;IACxE,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,mBAAmB,EAAE;YACnB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,+DAA+D;YAC5E,gBAAgB,EACd,sPAAsP;YACxP,gBAAgB,EAAE,SAAS;SAC5B;QACD,QAAQ,EAAE;YACR,QAAQ,EAAE;gBACR,YAAY,EAAE,gBAAgB;gBAC9B,aAAa,EAAE,KAAK;aACrB;SACF;QACD,YAAY,EAAE;YACZ,aAAa,EAAE,CAAC,WAAW,CAAC;YAC5B,MAAM,EAAE;gBACN,GAAG,EAAE,CAAC,YAAY,CAAC;gBACnB,IAAI,EAAE;oBACJ,oBAAoB;oBACpB,qBAAqB;oBACrB,kBAAkB;oBAClB,gBAAgB;oBAChB,mBAAmB;oBACnB,mBAAmB;oBACnB,YAAY;oBACZ,kBAAkB;oBAClB,gBAAgB;oBAChB,cAAc;oBACd,YAAY;oBACZ,eAAe;oBACf,gBAAgB;oBAChB,YAAY;oBACZ,kBAAkB;iBACnB;aACF;SACF;QACD,QAAQ,EAAE;YACR,kBAAkB,EAAE,IAAI;SACzB;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAAC,UAAkB,EAAE,cAAwB,EAAE;IAC/E,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC;QACjG,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC3F,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CACnC,QAAgB,EAChB,2BAAqC;IAErC,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,aAAa,CAAC;IAC/C,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC;IAClD,IAAI,IAAA,qCAAiB,EAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,2BAA2B;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACrE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,WAAoB;IAC1C,MAAM,IAAI,GAAG,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,6FAA6F;YAC7F,4GAA4G;SAC7G,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,8DAA8D;YAC9D,2EAA2E;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,8EAA8E;YAC9E,6GAA6G;YAC7G,sHAAsH;YACtH,8GAA8G;SAC/G,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,kEAAkE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAgB,qBAAqB,CACnC,QAAgB,EAChB,UAA+B,EAAE;IAEjC,MAAM,WAAW,GAAG,IAAA,oCAAmB,GAAE,CAAC;IAC1C,MAAM,IAAI,GAAG;QACX,QAAQ;QACR,WAAW;KACZ,CAAC;IAEF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrE,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,OAAO,CAAC,WAAW,IAAI,YAAY;gBAC1C,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,kIAAkI;oBACpI,CAAC,CAAC,2GAA2G;gBAC/G,aAAa,EAAE;oBACb,kDAAkD;oBAClD,uDAAuD;oBACvD,GAAG,CAAC,OAAO;wBACT,CAAC,CAAC,CAAC,iFAAiF,CAAC;wBACrF,CAAC,CAAC,EAAE,CAAC;iBACR;gBACD,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,+EAA+E;oBACjF,CAAC,CAAC,sEAAsE;gBAC1E,YAAY,EAAE,mDAAmD;gBACjE,cAAc,EAAE,+BAA+B;gBAC/C,KAAK,EAAE;oBACL,yDAAyD;oBACzD,GAAG,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC;oBACtC,yGAAyG;oBACzG,uEAAuE;oBACvE,yCAAyC,WAAW,8DAA8D;oBAClH,uGAAuG;iBACxG;gBACD,YAAY,EAAE;oBACZ,iIAAiI;oBACjI,eAAe;iBAChB;gBACD,iBAAiB,EAAE,OAAO;oBACxB,CAAC,CAAC,kMAAkM;oBACpM,CAAC,CAAC,2JAA2J;aAChK,CAAC;QACJ,CAAC;QACD,KAAK,OAAO;YACV,IAAI,IAAA,qCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,GAAG,IAAI;oBACP,SAAS,EAAE,SAAS;oBACpB,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,+EAA+E;oBACxF,OAAO,EAAE,6CAA6C;oBACtD,KAAK,EAAE;wBACL,6DAA6D;wBAC7D,qEAAqE;qBACtE;oBACD,YAAY,EAAE,CAAC,eAAe,CAAC;iBAChC,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,+BAA+B;gBACtC,OAAO,EACL,yIAAyI;gBAC3I,aAAa,EAAE;oBACb,sDAAsD;oBACtD,kDAAkD;iBACnD;gBACD,OAAO,EAAE,6CAA6C;gBACtD,YAAY,EAAE,gCAAgC;gBAC9C,cAAc,EAAE,wBAAwB;gBACxC,YAAY,EAAE,sBAAsB,CAAC,WAAW,CAAC;gBACjD,iBAAiB,EACf,gJAAgJ;gBAClJ,KAAK,EAAE;oBACL,GAAG,CAAC,IAAA,qCAAoB,GAAE;wBACxB,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACE,gJAAgJ;yBACjJ,CAAC;oBACN,6FAA6F;oBAC7F,qEAAqE;oBACrE,iFAAiF;oBACjF,oGAAoG;iBACrG;gBACD,YAAY,EAAE;oBACZ,2FAA2F;oBAC3F,eAAe;iBAChB;aACF,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,aAAa;gBACxB,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,gFAAgF;gBACzF,iBAAiB,EACf,oQAAoQ;gBACtQ,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,YAAY;gBACnB,OAAO,EACL,mMAAmM;gBACrM,aAAa,EAAE;oBACb,sEAAsE;oBACtE,gGAAgG;oBAChG,6IAA6I;iBAC9I;gBACD,OAAO,EACL,6GAA6G;gBAC/G,YAAY,EAAE,8CAA8C;gBAC5D,cAAc,EAAE,yBAAyB;gBACzC,iBAAiB,EACf,sJAAsJ;gBACxJ,gBAAgB,EACd,0IAA0I;gBAC5I,KAAK,EAAE;oBACL,sEAAsE;oBACtE,wGAAwG;oBACxG,+BAA+B,WAAW,sDAAsD;oBAChG,mEAAmE;oBACnE,gHAAgH;oBAChH,wFAAwF;iBACzF;gBACD,YAAY,EAAE;oBACZ,+IAA+I;oBAC/I,eAAe;iBAChB;aACF,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,SAAS;gBACpB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,qEAAqE;gBAC9E,OAAO,EAAE,6BAA6B;gBACtC,KAAK,EAAE;oBACL,+EAA+E;oBAC/E,mDAAmD;oBACnD,8DAA8D;iBAC/D;gBACD,YAAY,EAAE,CAAC,eAAe,CAAC;aAChC,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,SAAS;gBACpB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,+DAA+D;gBACxE,OAAO,EAAE,wCAAwC;gBACjD,KAAK,EAAE;oBACL,wDAAwD;oBACxD,uDAAuD;oBACvD,mCAAmC;iBACpC;gBACD,YAAY,EAAE,CAAC,eAAe,CAAC;aAChC,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,eAAe;gBAC1B,KAAK,EAAE,aAAa;gBACpB,OAAO,EACL,gGAAgG;gBAClG,OAAO,EAAE,wCAAwC;gBACjD,KAAK,EAAE;oBACL,yFAAyF;oBACzF,8EAA8E;oBAC9E,gIAAgI;iBACjI;gBACD,YAAY,EAAE,CAAC,eAAe,CAAC;aAChC,CAAC;QACJ;YACE,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,OAAO,CAAC,WAAW,IAAI,mBAAmB;gBACjD,OAAO,EAAE,uEAAuE;gBAChF,KAAK,EAAE;oBACL,wDAAwD;oBACxD,wBAAwB,WAAW,EAAE;oBACrC,wDAAwD;iBACzD;gBACD,YAAY,EAAE,CAAC,eAAe,CAAC;aAChC,CAAC;IACN,CAAC;AACH,CAAC;AAED,2DAA+D;AAAtD,qHAAA,mBAAmB,OAAA"}

package/dist/lib/mcp-connection-error.d.ts

@@ -0,0 +1,4 @@
+/** Extract a user-facing message from MCP client connection failures. */
+export declare function formatMcpConnectionError(streamableError: unknown, sseError: unknown): string;
+export declare function extractMcpErrorMessage(err: unknown): string | null;
+//# sourceMappingURL=mcp-connection-error.d.ts.map

package/dist/lib/mcp-connection-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-connection-error.d.ts","sourceRoot":"","sources":["../../src/lib/mcp-connection-error.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wBAAgB,wBAAwB,CACtC,eAAe,EAAE,OAAO,EACxB,QAAQ,EAAE,OAAO,GAChB,MAAM,CAcR;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAElE"}

package/dist/lib/mcp-connection-error.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatMcpConnectionError = formatMcpConnectionError;
+exports.extractMcpErrorMessage = extractMcpErrorMessage;
+/** Extract a user-facing message from MCP client connection failures. */
+function formatMcpConnectionError(streamableError, sseError) {
+    for (const err of [streamableError, sseError]) {
+        const parsed = extractMcpErrorMessage(err);
+        if (parsed) {
+            return parsed;
+        }
+    }
+    const sseMsg = sseError instanceof Error ? sseError.message : String(sseError ?? '');
+    if (sseMsg && !sseMsg.includes('Non-200 status code')) {
+        return `Failed to connect to MCP service: ${sseMsg}`;
+    }
+    return 'Failed to connect to MCP service';
+}
+function extractMcpErrorMessage(err) {
+    return parseMcpErrorMessage(err);
+}
+function parseMcpErrorMessage(err) {
+    const raw = err instanceof Error ? err.message : String(err ?? '');
+    if (!raw) {
+        return null;
+    }
+    const jsonStart = raw.indexOf('{');
+    if (jsonStart >= 0) {
+        try {
+            const payload = JSON.parse(raw.slice(jsonStart));
+            const message = payload.error?.message?.trim();
+            if (message) {
+                return message;
+            }
+        }
+        catch {
+            // fall through
+        }
+    }
+    if (raw.includes('App is not enabled for Slack MCP')) {
+        return raw.replace(/^Error POSTing to endpoint \(HTTP \d+\): /, '');
+    }
+    return null;
+}
+//# sourceMappingURL=mcp-connection-error.js.map

package/dist/lib/mcp-connection-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-connection-error.js","sourceRoot":"","sources":["../../src/lib/mcp-connection-error.ts"],"names":[],"mappings":";;AACA,4DAiBC;AAED,wDAEC;AAtBD,yEAAyE;AACzE,SAAgB,wBAAwB,CACtC,eAAwB,EACxB,QAAiB;IAEjB,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACrF,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACtD,OAAO,qCAAqC,MAAM,EAAE,CAAC;IACvD,CAAC;IAED,OAAO,kCAAkC,CAAC;AAC5C,CAAC;AAED,SAAgB,sBAAsB,CAAC,GAAY;IACjD,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAY;IACxC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAE9C,CAAC;YACF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAAE,CAAC;QACrD,OAAO,GAAG,CAAC,OAAO,CAAC,2CAA2C,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/oauth-token-response.d.ts

@@ -0,0 +1,11 @@
+export type OAuthTokenResponseBody = {
+    access_token: string;
+    refresh_token?: string;
+    expires_in?: number;
+    token_type?: string;
+    scope?: string;
+};
+/** Parse OAuth token endpoint body (JSON or application/x-www-form-urlencoded). */
+export declare function parseOAuthTokenResponse(response: Response): Promise<OAuthTokenResponseBody>;
+export declare function oauthTokenRequestHeaders(): Record<string, string>;
+//# sourceMappingURL=oauth-token-response.d.ts.map

package/dist/lib/oauth-token-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-token-response.d.ts","sourceRoot":"","sources":["../../src/lib/oauth-token-response.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,sBAAsB,GAAG;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,mFAAmF;AACnF,wBAAsB,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA0CjG;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKjE"}

package/dist/lib/oauth-token-response.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseOAuthTokenResponse = parseOAuthTokenResponse;
+exports.oauthTokenRequestHeaders = oauthTokenRequestHeaders;
+/** Parse OAuth token endpoint body (JSON or application/x-www-form-urlencoded). */
+async function parseOAuthTokenResponse(response) {
+    const contentType = response.headers.get('content-type') ?? '';
+    const text = await response.text();
+    const trimmed = text.trim();
+    if (!trimmed) {
+        throw new Error('OAuth token response was empty');
+    }
+    if (contentType.includes('application/json') || trimmed.startsWith('{')) {
+        const data = JSON.parse(trimmed);
+        if (data.error) {
+            throw new Error(`OAuth token error: ${data.error}${data.error_description ? ` — ${data.error_description}` : ''}`);
+        }
+        if (!data.access_token) {
+            throw new Error('OAuth token JSON response missing access_token');
+        }
+        return data;
+    }
+    const params = new URLSearchParams(trimmed);
+    const oauthError = params.get('error');
+    if (oauthError) {
+        const description = params.get('error_description');
+        throw new Error(`OAuth token error: ${oauthError}${description ? ` — ${description}` : ''}`);
+    }
+    const accessToken = params.get('access_token');
+    if (!accessToken) {
+        throw new Error(`OAuth token response missing access_token: ${trimmed.slice(0, 200)}`);
+    }
+    const expiresIn = params.get('expires_in');
+    return {
+        access_token: accessToken,
+        refresh_token: params.get('refresh_token') ?? undefined,
+        expires_in: expiresIn ? Number(expiresIn) : undefined,
+        token_type: params.get('token_type') ?? undefined,
+        scope: params.get('scope') ?? undefined,
+    };
+}
+function oauthTokenRequestHeaders() {
+    return {
+        'Content-Type': 'application/x-www-form-urlencoded',
+        Accept: 'application/json',
+    };
+}
+//# sourceMappingURL=oauth-token-response.js.map

package/dist/lib/oauth-token-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-token-response.js","sourceRoot":"","sources":["../../src/lib/oauth-token-response.ts"],"names":[],"mappings":";;AASA,0DA0CC;AAED,4DAKC;AAlDD,mFAAmF;AAC5E,KAAK,UAAU,uBAAuB,CAAC,QAAkB;IAC9D,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAE5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4E,CAAC;QAC5G,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAClG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3C,OAAO;QACL,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS;QACvD,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QACrD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS;QACjD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;KACxC,CAAC;AACJ,CAAC;AAED,SAAgB,wBAAwB;IACtC,OAAO;QACL,cAAc,EAAE,mCAAmC;QACnD,MAAM,EAAE,kBAAkB;KAC3B,CAAC;AACJ,CAAC"}

package/dist/mcp-server.d.ts

@@ -6,15 +6,16 @@ export declare class AgentDeckMCPServer {
     private sessions;
     /** Set only while registerTools/registerResources run for a new session server. */
     private mcpServerForRegistration;
-    /** Workspace root per MCP session → resolves `.agent-deck/deck.yaml`. */
-    private workspaceBySession;
+    /** Per-session workspace + optional deck override (see mcp-session-binding.ts). */
+    private sessionBinding;
     private activeSessionId;
     private get server();
     constructor(port?: number, backendUrl?: string);
     private createMcpServer;
     private getSessionId;
-    private getBoundWorkspace;
     private getAgentHeaders;
+    private fetchDeck;
+    private buildBindingPayload;
     private callBackendAPI;
     private getBoundDeckId;
     private toolResult;

package/dist/mcp-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AAQA,OAAO,OAA8B,MAAM,SAAS,CAAC;AAuBrD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAiC;IACjD,mFAAmF;IACnF,OAAO,CAAC,wBAAwB,CAAwB;IACxD,yEAAyE;IACzE,OAAO,CAAC,kBAAkB,CAA6B;IACvD,OAAO,CAAC,eAAe,CAAqB;IAE5C,OAAO,KAAK,MAAM,GAKjB;gBAEW,IAAI,GAAE,MAAa,EAAE,UAAU,GAAE,MAAgC;IAc7E,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,eAAe;YAQT,cAAc;YAwCd,cAAc;IAQ5B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,UAAU;IA8wBlB,OAAO,CAAC,cAAc;IA2LtB,OAAO,CAAC,WAAW;IA2CnB,OAAO,CAAC,kBAAkB;YAKZ,aAAa;YAuDb,uBAAuB;IAiB/B,KAAK;IAiCL,IAAI;CAeX"}
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AAQA,OAAO,OAA8B,MAAM,SAAS,CAAC;AA0BrD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAiC;IACjD,mFAAmF;IACnF,OAAO,CAAC,wBAAwB,CAAwB;IACxD,mFAAmF;IACnF,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,eAAe,CAAqB;IAE5C,OAAO,KAAK,MAAM,GAKjB;gBAEW,IAAI,GAAE,MAAa,EAAE,UAAU,GAAE,MAAgC;IAc7E,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,eAAe;YAIT,SAAS;YAkBT,mBAAmB;YAYnB,cAAc;YAwCd,cAAc;IAQ5B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,UAAU;IAm2BlB,OAAO,CAAC,cAAc;IA2LtB,OAAO,CAAC,WAAW;IA2CnB,OAAO,CAAC,kBAAkB;YAKZ,aAAa;YAuDb,uBAAuB;IAiB/B,KAAK;IAmCL,IAAI;CAeX"}