@agent-native/core 0.18.0 → 0.19.0

package/dist/mcp/builtin-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"builtin-tools.js","sourceRoot":"","sources":["../../src/mcp/builtin-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAWvD;;;;GAIG;AACH,SAAS,IAAI,CACX,WAAmB,EACnB,UAAmB,EACnB,QAAmB;IAEnB,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACxC,OAAO;QACL,WAAW;QACX,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,UAAU;YACtB,GAAG,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,YAAY;IACnB,OAAO;QACL,IAAI,EAAE,IAAI,CACR,sEAAsE;YACpE,sEAAsE;YACtE,yCAAyC,CAC5C;QACD,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACpE,MAAM,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YACpC,OAAO;gBACL,SAAS,EAAE,EAAE,CAAC,WAAW;gBACzB,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACxB,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,SAAS,WAAW;IAClB,OAAO;QACL,IAAI,EAAE,IAAI,CACR,yEAAyE;YACvE,wEAAwE;YACxE,qEAAqE,EACvE;YACE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;YAC3D,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,sDAAsD;aACpE;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,iEAAiE;aACpE;SACF,EACD,CAAC,KAAK,EAAE,MAAM,CAAC,CAChB;QACD,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,GAAG,EAAE,KAAK,EAAE,IAAyB,EAAE,EAAE;YACvC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,MAA6D,CAAC;YAClE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;YACxB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAgD,CAAC;YAC5D,CAAC;iBAAM,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjD,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,GAAG,SAAS,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACjD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;YACnB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACvD,MAAM,CAAC,GAAG,MAAuD,CAAC;YAClE,IAAI,CAAC,CAAC,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACxB,OAAO;gBACL,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,QAAQ,CAAC,CAAC,GAAG,IAAI,KAAK,EAAE;gBAC/B,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,UAAU,CAAC,MAAiB;IACnC,OAAO;QACL,IAAI,EAAE,IAAI,CACR,mEAAmE;YACjE,kEAAkE;YAClE,oEAAoE;YACpE,2CAA2C,EAC7C;YACE,GAAG,EAAE;gBACH,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,uDAAuD;aACrE;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,wCAAwC;aACtD;SACF,EACD,CAAC,SAAS,CAAC,CACZ;QACD,GAAG,EAAE,KAAK,EAAE,IAAyB,EAAE,EAAE;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAClD,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEnD,sEAAsE;YACtE,wEAAwE;YACxE,yEAAyE;YACzE,wEAAwE;YACxE,wEAAwE;YACxE,yDAAyD;YACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChD,OAAO;gBACL,GAAG,EAAE,YAAY,IAAI,MAAM,CAAC,IAAI;gBAChC,QAAQ;aACT,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,iBAAiB;IACxB,OAAO;QACL,IAAI,EAAE,IAAI,CACR,yEAAyE;YACvE,gCAAgC,CACnC;QACD,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACtE,OAAO;gBACL,SAAS,EAAE,gBAAgB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACxC,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,IAAI,EAAE,CAAC,CAAC,IAAI;iBACb,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,SAAS,sBAAsB;IAC7B,OAAO;QACL,IAAI,EAAE,IAAI,CACR,qEAAqE;YACnE,sEAAsE;YACtE,qEAAqE;YACrE,2CAA2C,EAC7C;YACE,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,mDAAmD;aACjE;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,uEAAuE;aAC1E;SACF,EACD,CAAC,MAAM,EAAE,UAAU,CAAC,CACrB;QACD,GAAG,EAAE,KAAK,EAAE,IAAyB,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YAED,oEAAoE;YACpE,yEAAyE;YACzE,yEAAyE;YACzE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,aAAa,QAAQ,mCAAmC,CAAC,GAAG,OAAO,CAAC;qBACjE,IAAI,EAAE;qBACN,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,GAC3C,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACzC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAEvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CACb,+DAA+D;oBAC7D,oDAAoD,CACvD,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAE7C,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,8DAA8D;gBAC9D,iEAAiE;gBACjE,oEAAoE;gBACpE,qEAAqE;gBACrE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC9B,IAAI,CAAC;oBACH,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACpB,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;oBAC/D,MAAM,iBAAiB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC;wBACH,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACzB,CAAC;oBAAC,MAAM,CAAC;wBACP,0BAA0B;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;YAED,iEAAiE;YACjE,mEAAmE;YACnE,uEAAuE;YACvE,qDAAqD;YACrD,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;YAC3B,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAE5D,OAAO;gBACL,IAAI;gBACJ,QAAQ;gBACR,OAAO,EAAE,CAAC,cAAc;gBACxB,MAAM,EAAE,cAAc;gBACtB,IAAI;gBACJ,GAAG,EAAE,OAAO,EAAE,GAAG;gBACjB,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,QAAQ;aACT,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;YACnB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACvD,MAAM,CAAC,GAAG,MAA8C,CAAC;YACzD,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC7B,OAAO;gBACL,GAAG,EAAE,CAAC,CAAC,QAAQ;gBACf,KAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,KAAK,EAAE;gBAChC,IAAI,EAAE,MAAM;aACb,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAiB;IAEjB,OAAO;QACL,SAAS,EAAE,YAAY,EAAE;QACzB,QAAQ,EAAE,WAAW,EAAE;QACvB,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;QAC3B,oBAAoB,EAAE,sBAAsB,EAAE;QAC9C,cAAc,EAAE,iBAAiB,EAAE;KACpC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Generic cross-app MCP tools — a stable verb set every external agent gets\n * regardless of which template it is talking to.\n *\n * These are merged into the MCP action registry by\n * `createMCPServerForRequest` (see `build-server.ts`). **Precedence: template\n * actions win.** If a template defines an action named `list_apps` /\n * `open_app` / `ask_app` / `create_workspace_app` / `list_templates`, the\n * template's `ActionEntry` overwrites the builtin of the same name. This is\n * the same template-over-framework precedence `autoDiscoverActions` uses.\n *\n * | Tool                  | Side effects | Returns                                  |\n * | --------------------- | ------------ | ---------------------------------------- |\n * | `list_apps`           | none         | `{ apps: [{ id, url, running }] }`       |\n * | `open_app`            | none         | `{ url }` (+ deep-link `link`)           |\n * | `ask_app`             | agent loop   | `{ app, response }`                      |\n * | `create_workspace_app`| scaffolds    | `{ name, url, port, deepLink }` (+ link) |\n * | `list_templates`      | none         | `{ templates: [...] }` (allow-list only) |\n *\n * Node-only at call time (workspace resolution + scaffolding use `fs`), but\n * the module has no top-level Node imports so it bundles fine alongside\n * `mountMCP` — the Node bits are dynamically imported inside `run()`.\n */\n\nimport type { ActionEntry } from \"../agent/production-agent.js\";\nimport { buildDeepLink } from \"../server/deep-link.js\";\nimport type { MCPConfig } from \"./build-server.js\";\n\nimport type { ActionTool } from \"../agent/types.js\";\n\n/** Flat map of param name → JSON-schema property. */\ntype Params = Record<\n  string,\n  { type: string; description?: string; enum?: string[] }\n>;\n\n/**\n * Build an `ActionTool`. `parameters` is wrapped in the\n * `{ type:\"object\", properties, required }` shape `createMCPServerForRequest`\n * forwards verbatim as the MCP tool `inputSchema`.\n */\nfunction tool(\n  description: string,\n  parameters?: Params,\n  required?: string[],\n): ActionTool {\n  if (!parameters) return { description };\n  return {\n    description,\n    parameters: {\n      type: \"object\",\n      properties: parameters,\n      ...(required && required.length ? { required } : {}),\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// list_apps\n// ---------------------------------------------------------------------------\n\nfunction listAppsTool(): ActionEntry {\n  return {\n    tool: tool(\n      \"List the workspace apps and their local dev URLs/ports. Use this to \" +\n        \"discover which apps exist before opening or asking one. In a single-\" +\n        \"app project this returns just that app.\",\n    ),\n    readOnly: true,\n    parallelSafe: true,\n    run: async () => {\n      const { resolveWorkspace } = await import(\"./workspace-resolve.js\");\n      const ws = await resolveWorkspace();\n      return {\n        workspace: ws.isWorkspace,\n        gatewayUrl: ws.gatewayUrl,\n        apps: ws.apps.map((a) => ({\n          id: a.id,\n          url: a.url,\n          port: a.port,\n          running: a.running,\n        })),\n      };\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// open_app\n// ---------------------------------------------------------------------------\n\nfunction openAppTool(): ActionEntry {\n  return {\n    tool: tool(\n      \"Build a deep link that opens an app at a specific view/record. No side \" +\n        \"effects — returns a URL the user can click to land in the running UI. \" +\n        'After calling, surface the returned \"Open in … →\" link to the user.',\n      {\n        app: { type: \"string\", description: \"App id, e.g. 'mail'\" },\n        view: {\n          type: \"string\",\n          description: \"Target view, e.g. 'inbox' (maps to navigate command)\",\n        },\n        params: {\n          type: \"object\",\n          description:\n            \"Optional record-focus / filter params, e.g. { threadId: 'abc' }\",\n        },\n      },\n      [\"app\", \"view\"],\n    ),\n    readOnly: true,\n    parallelSafe: true,\n    run: async (args: Record<string, any>) => {\n      const app = String(args.app ?? \"\").trim();\n      const view = String(args.view ?? \"\").trim();\n      if (!app || !view) {\n        throw new Error(\"open_app requires both 'app' and 'view'.\");\n      }\n      let params: Record<string, string | number | boolean> | undefined;\n      const raw = args.params;\n      if (raw && typeof raw === \"object\") {\n        params = raw as Record<string, string | number | boolean>;\n      } else if (typeof raw === \"string\" && raw.trim()) {\n        try {\n          params = JSON.parse(raw);\n        } catch {\n          params = undefined;\n        }\n      }\n      const url = buildDeepLink({ app, view, params });\n      return { app, view, url };\n    },\n    link: ({ result }) => {\n      if (!result || typeof result !== \"object\") return null;\n      const r = result as { url?: string; app?: string; view?: string };\n      if (!r.url) return null;\n      return {\n        url: r.url,\n        label: `Open ${r.app ?? \"app\"}`,\n        view: r.view,\n      };\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// ask_app\n// ---------------------------------------------------------------------------\n\nfunction askAppTool(config: MCPConfig): ActionEntry {\n  return {\n    tool: tool(\n      \"Send a natural-language message to an app's AI agent and get its \" +\n        \"response. Use for complex, multi-step tasks needing the agent's \" +\n        \"reasoning and full app context. In a single-app project the 'app' \" +\n        \"param is optional (defaults to this app).\",\n      {\n        app: {\n          type: \"string\",\n          description: \"App id to route to (optional in a single-app project)\",\n        },\n        message: {\n          type: \"string\",\n          description: \"The message to send to the app's agent\",\n        },\n      },\n      [\"message\"],\n    ),\n    run: async (args: Record<string, any>) => {\n      const message = String(args.message ?? \"\").trim();\n      if (!message) throw new Error(\"ask_app requires a 'message'.\");\n      const requestedApp = String(args.app ?? \"\").trim();\n\n      // This MCP server is mounted for a single app (`config`). Delegate to\n      // its own ask-agent handler — that is the same entry point the HTTP MCP\n      // mount + A2A use, so there is no second agent runner. Cross-app routing\n      // (talking to a *different* workspace app's agent) is intentionally not\n      // done here: the stdio proxy connects to one app, and cross-app fan-out\n      // is the workspace control plane's job (Dispatch / A2A).\n      if (!config.askAgent) {\n        throw new Error(\n          \"This app does not expose an agent (no ask-agent handler).\",\n        );\n      }\n      const response = await config.askAgent(message);\n      return {\n        app: requestedApp || config.name,\n        response,\n      };\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// list_templates\n// ---------------------------------------------------------------------------\n\nfunction listTemplatesTool(): ActionEntry {\n  return {\n    tool: tool(\n      \"List the first-party templates that can be scaffolded into a workspace \" +\n        \"(allow-listed templates only).\",\n    ),\n    readOnly: true,\n    parallelSafe: true,\n    run: async () => {\n      const { visibleTemplates } = await import(\"../cli/templates-meta.js\");\n      return {\n        templates: visibleTemplates().map((t) => ({\n          name: t.name,\n          label: t.label,\n          hint: t.hint,\n        })),\n      };\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// create_workspace_app\n// ---------------------------------------------------------------------------\n\nfunction createWorkspaceAppTool(): ActionEntry {\n  return {\n    tool: tool(\n      \"Scaffold a new app into the current workspace from an allow-listed \" +\n        \"template, then return a deep link to open it. Idempotent: if an app \" +\n        \"with that name already exists it is reused. After calling, surface \" +\n        'the returned \"Open … →\" link to the user.',\n      {\n        name: {\n          type: \"string\",\n          description: \"New app id (directory under apps/), e.g. 'mymail'\",\n        },\n        template: {\n          type: \"string\",\n          description:\n            \"Template to scaffold from — must be allow-listed (see list_templates)\",\n        },\n      },\n      [\"name\", \"template\"],\n    ),\n    run: async (args: Record<string, any>) => {\n      const name = String(args.name ?? \"\").trim();\n      const template = String(args.template ?? \"\").trim();\n      if (!name || !template) {\n        throw new Error(\n          \"create_workspace_app requires both 'name' and 'template'.\",\n        );\n      }\n\n      // Enforce the strict public template allow-list. The authoritative,\n      // dependency-free source inside @agent-native/core is cli/templates-meta\n      // (kept in sync with packages/shared-app-config/templates.ts; CI guard).\n      const { visibleTemplates } = await import(\"../cli/templates-meta.js\");\n      const allowed = new Set(visibleTemplates().map((t) => t.name));\n      if (!allowed.has(template)) {\n        throw new Error(\n          `Template \"${template}\" is not allow-listed. Allowed: ${[...allowed]\n            .sort()\n            .join(\", \")}`,\n        );\n      }\n\n      const { findWorkspaceRoot, resolveWorkspace } =\n        await import(\"./workspace-resolve.js\");\n      const fs = await import(\"node:fs\");\n      const path = await import(\"node:path\");\n\n      const root = findWorkspaceRoot(process.cwd());\n      if (!root) {\n        throw new Error(\n          \"Not inside a workspace. create_workspace_app only works in a \" +\n            \"multi-app workspace (run from the workspace root).\",\n        );\n      }\n\n      const appDir = path.join(root, \"apps\", name);\n      const alreadyExisted = fs.existsSync(appDir);\n\n      if (!alreadyExisted) {\n        // Reuse the CLI scaffolder directly (no second `agent-native`\n        // subprocess). `addAppToWorkspace(name, { template })` takes the\n        // non-interactive single-template path when name + one template are\n        // given. Run it from the workspace root so detectWorkspace resolves.\n        const prevCwd = process.cwd();\n        try {\n          process.chdir(root);\n          const { addAppToWorkspace } = await import(\"../cli/create.js\");\n          await addAppToWorkspace(name, { template, noInstall: true });\n        } finally {\n          try {\n            process.chdir(prevCwd);\n          } catch {\n            // best-effort cwd restore\n          }\n        }\n      }\n\n      // The workspace gateway auto-detects new apps/* dirs (fs.watch +\n      // 2s sync) and lazily boots the dev server on first request, so we\n      // don't spawn vite ourselves — opening the deep link warms it. Resolve\n      // the port the gateway will use so we can report it.\n      const ws = await resolveWorkspace(root);\n      const appInfo = ws.apps.find((a) => a.id === name);\n      const port = appInfo?.port;\n      const deepLink = buildDeepLink({ app: name, view: \"home\" });\n\n      return {\n        name,\n        template,\n        created: !alreadyExisted,\n        reused: alreadyExisted,\n        port,\n        url: appInfo?.url,\n        gatewayUrl: ws.gatewayUrl,\n        deepLink,\n      };\n    },\n    link: ({ result }) => {\n      if (!result || typeof result !== \"object\") return null;\n      const r = result as { deepLink?: string; name?: string };\n      if (!r.deepLink) return null;\n      return {\n        url: r.deepLink,\n        label: `Open ${r.name ?? \"app\"}`,\n        view: \"home\",\n      };\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Registry\n// ---------------------------------------------------------------------------\n\n/**\n * Build the generic cross-app builtin tool registry. Called by\n * `createMCPServerForRequest`; the result is merged UNDER the config's\n * actions so template actions of the same name win.\n */\nexport function getBuiltinCrossAppTools(\n  config: MCPConfig,\n): Record<string, ActionEntry> {\n  return {\n    list_apps: listAppsTool(),\n    open_app: openAppTool(),\n    ask_app: askAppTool(config),\n    create_workspace_app: createWorkspaceAppTool(),\n    list_templates: listTemplatesTool(),\n  };\n}\n"]}
+{"version":3,"file":"builtin-tools.js","sourceRoot":"","sources":["../../src/mcp/builtin-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAWvD;;;;GAIG;AACH,SAAS,IAAI,CACX,WAAmB,EACnB,UAAmB,EACnB,QAAmB;IAEnB,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACxC,OAAO;QACL,WAAW;QACX,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,UAAU;YACtB,GAAG,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAAiB;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,sBAAsB,CACnC,MAAiB,EACjB,WAAmB;IAEnB,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACpE,MAAM,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,YAAY;IACnB,OAAO;QACL,IAAI,EAAE,IAAI,CACR,sEAAsE;YACpE,sEAAsE;YACtE,yCAAyC,CAC5C;QACD,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACpE,MAAM,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YACpC,OAAO;gBACL,SAAS,EAAE,EAAE,CAAC,WAAW;gBACzB,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACxB,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,SAAS,WAAW,CAAC,MAAiB;IACpC,OAAO;QACL,IAAI,EAAE,IAAI,CACR,yEAAyE;YACvE,wEAAwE;YACxE,qEAAqE,EACvE;YACE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;YAC3D,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,sDAAsD;aACpE;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,iEAAiE;aACpE;SACF,EACD,CAAC,KAAK,EAAE,MAAM,CAAC,CAChB;QACD,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,GAAG,EAAE,KAAK,EAAE,IAAyB,EAAE,EAAE;YACvC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,MAA6D,CAAC;YAClE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;YACxB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAgD,CAAC;YAC5D,CAAC;iBAAM,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjD,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,GAAG,SAAS,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAEpD,uEAAuE;YACvE,mEAAmE;YACnE,qEAAqE;YACrE,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,SAAS;gBACnB,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,EAAE;gBACpD,CAAC,CAAC,MAAM,CAAC;YAEX,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;YACnB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACvD,MAAM,CAAC,GAAG,MAAuD,CAAC;YAClE,IAAI,CAAC,CAAC,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACxB,OAAO;gBACL,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,QAAQ,CAAC,CAAC,GAAG,IAAI,KAAK,EAAE;gBAC/B,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,UAAU,CAAC,MAAiB;IACnC,OAAO;QACL,IAAI,EAAE,IAAI,CACR,mEAAmE;YACjE,kEAAkE;YAClE,oEAAoE;YACpE,+DAA+D;YAC/D,oEAAoE;YACpE,gEAAgE,EAClE;YACE,GAAG,EAAE;gBACH,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,uDAAuD;aACrE;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,wCAAwC;aACtD;SACF,EACD,CAAC,SAAS,CAAC,CACZ;QACD,GAAG,EAAE,KAAK,EAAE,IAAyB,EAAE,EAAE;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAClD,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAEpC,qEAAqE;YACrE,iEAAiE;YACjE,mEAAmE;YACnE,oEAAoE;YACpE,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACrE,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC;oBACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;oBACvD,MAAM,EAAE,mBAAmB,EAAE,GAC3B,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;oBAC/C,kEAAkE;oBAClE,kEAAkE;oBAClE,oDAAoD;oBACpD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE;wBAC1D,SAAS,EAAE,mBAAmB,EAAE;wBAChC,yDAAyD;wBACzD,SAAS,EAAE,CAAC,GAAG,MAAM;qBACtB,CAAC,CAAC;oBACH,OAAO;wBACL,GAAG,EAAE,SAAS,CAAC,EAAE;wBACjB,SAAS,EAAE,KAAK;wBAChB,QAAQ;qBACT,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,oEAAoE;oBACpE,kDAAkD;oBAClD,MAAM,IAAI,KAAK,CACb,+BAA+B,SAAS,CAAC,EAAE,aAAa;wBACtD,GAAG,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAC3B,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,wEAAwE;YACxE,wEAAwE;YACxE,iDAAiD;YACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,iEAAiE;YACjE,MAAM,UAAU,GACd,CAAC,CAAC,YAAY,IAAI,YAAY,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChD,OAAO;gBACL,GAAG,EAAE,MAAM;gBACX,SAAS,EAAE,OAAO;gBAClB,GAAG,CAAC,UAAU;oBACZ,CAAC,CAAC;wBACE,IAAI,EACF,kBAAkB,YAAY,iCAAiC;4BAC/D,iCAAiC,MAAM,aAAa;qBACvD;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,QAAQ;aACT,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,iBAAiB;IACxB,OAAO;QACL,IAAI,EAAE,IAAI,CACR,yEAAyE;YACvE,gCAAgC,CACnC;QACD,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACtE,OAAO;gBACL,SAAS,EAAE,gBAAgB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACxC,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,IAAI,EAAE,CAAC,CAAC,IAAI;iBACb,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,SAAS,sBAAsB;IAC7B,OAAO;QACL,IAAI,EAAE,IAAI,CACR,qEAAqE;YACnE,sEAAsE;YACtE,qEAAqE;YACrE,2CAA2C,EAC7C;YACE,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,mDAAmD;aACjE;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,uEAAuE;aAC1E;SACF,EACD,CAAC,MAAM,EAAE,UAAU,CAAC,CACrB;QACD,GAAG,EAAE,KAAK,EAAE,IAAyB,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YAED,oEAAoE;YACpE,yEAAyE;YACzE,yEAAyE;YACzE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,aAAa,QAAQ,mCAAmC,CAAC,GAAG,OAAO,CAAC;qBACjE,IAAI,EAAE;qBACN,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,GAC3C,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACzC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAEvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CACb,+DAA+D;oBAC7D,oDAAoD,CACvD,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAE7C,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,8DAA8D;gBAC9D,iEAAiE;gBACjE,oEAAoE;gBACpE,qEAAqE;gBACrE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC9B,IAAI,CAAC;oBACH,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACpB,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;oBAC/D,MAAM,iBAAiB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC;wBACH,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACzB,CAAC;oBAAC,MAAM,CAAC;wBACP,0BAA0B;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;YAED,iEAAiE;YACjE,mEAAmE;YACnE,uEAAuE;YACvE,qDAAqD;YACrD,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;YAC3B,mEAAmE;YACnE,iEAAiE;YACjE,qEAAqE;YACrE,mEAAmE;YACnE,6DAA6D;YAC7D,MAAM,WAAW,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,OAAO,EAAE,GAAG;gBAC3B,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,WAAW,EAAE;gBACpD,CAAC,CAAC,WAAW,CAAC;YAEhB,OAAO;gBACL,IAAI;gBACJ,QAAQ;gBACR,OAAO,EAAE,CAAC,cAAc;gBACxB,MAAM,EAAE,cAAc;gBACtB,IAAI;gBACJ,GAAG,EAAE,OAAO,EAAE,GAAG;gBACjB,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,QAAQ;aACT,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;YACnB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACvD,MAAM,CAAC,GAAG,MAA8C,CAAC;YACzD,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC7B,OAAO;gBACL,GAAG,EAAE,CAAC,CAAC,QAAQ;gBACf,KAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,KAAK,EAAE;gBAChC,IAAI,EAAE,MAAM;aACb,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAiB;IAEjB,OAAO;QACL,SAAS,EAAE,YAAY,EAAE;QACzB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;QAC3B,oBAAoB,EAAE,sBAAsB,EAAE;QAC9C,cAAc,EAAE,iBAAiB,EAAE;KACpC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Generic cross-app MCP tools — a stable verb set every external agent gets\n * regardless of which template it is talking to.\n *\n * These are merged into the MCP action registry by\n * `createMCPServerForRequest` (see `build-server.ts`). **Precedence: template\n * actions win.** If a template defines an action named `list_apps` /\n * `open_app` / `ask_app` / `create_workspace_app` / `list_templates`, the\n * template's `ActionEntry` overwrites the builtin of the same name. This is\n * the same template-over-framework precedence `autoDiscoverActions` uses.\n *\n * | Tool                  | Side effects | Returns                                  |\n * | --------------------- | ------------ | ---------------------------------------- |\n * | `list_apps`           | none         | `{ apps: [{ id, url, running }] }`       |\n * | `open_app`            | none         | `{ url }` (+ deep-link `link`)           |\n * | `ask_app`             | agent loop   | `{ app, routedVia, response }`           |\n * | `create_workspace_app`| scaffolds    | `{ name, url, port, deepLink }` (+ link) |\n *\n * `open_app` / `create_workspace_app` return an **absolute** URL on the\n * *target* app's origin when it differs from this app (so a workspace link\n * lands in the right app), and a relative path for the same app / standalone.\n * `ask_app` routes to a *different* workspace app over A2A when possible and\n * reports `routedVia: \"a2a\"`; otherwise it answers locally\n * (`routedVia: \"local\"`) and never falsely claims cross-app delegation.\n * | `list_templates`      | none         | `{ templates: [...] }` (allow-list only) |\n *\n * Node-only at call time (workspace resolution + scaffolding use `fs`), but\n * the module has no top-level Node imports so it bundles fine alongside\n * `mountMCP` — the Node bits are dynamically imported inside `run()`.\n */\n\nimport type { ActionEntry } from \"../agent/production-agent.js\";\nimport { buildDeepLink } from \"../server/deep-link.js\";\nimport type { MCPConfig } from \"./build-server.js\";\n\nimport type { ActionTool } from \"../agent/types.js\";\n\n/** Flat map of param name → JSON-schema property. */\ntype Params = Record<\n  string,\n  { type: string; description?: string; enum?: string[] }\n>;\n\n/**\n * Build an `ActionTool`. `parameters` is wrapped in the\n * `{ type:\"object\", properties, required }` shape `createMCPServerForRequest`\n * forwards verbatim as the MCP tool `inputSchema`.\n */\nfunction tool(\n  description: string,\n  parameters?: Params,\n  required?: string[],\n): ActionTool {\n  if (!parameters) return { description };\n  return {\n    description,\n    parameters: {\n      type: \"object\",\n      properties: parameters,\n      ...(required && required.length ? { required } : {}),\n    },\n  };\n}\n\n/**\n * The canonical app id this MCP server is mounted for. `MCPConfig.appId` is\n * authoritative; fall back to lowercasing `name` (which is the capitalized\n * app id at every call site) for back-compat with configs that predate the\n * `appId` field.\n */\nfunction currentAppId(config: MCPConfig): string {\n  return (config.appId || config.name || \"app\").toLowerCase();\n}\n\n/**\n * Resolve the absolute origin of a *target* workspace app (e.g.\n * `http://127.0.0.1:8101`) so cross-app deep links / A2A calls point at the\n * right app instead of the current request's origin. Reuses the same\n * workspace resolution `list_apps` / the stdio proxy use.\n *\n * Returns `null` when:\n *   - the target is the current app (caller should keep relative behavior),\n *   - there is no workspace info (standalone / single app), or\n *   - the target app is unknown.\n */\nasync function resolveTargetAppOrigin(\n  config: MCPConfig,\n  targetAppId: string,\n): Promise<{ origin: string; id: string } | null> {\n  const target = targetAppId.trim().toLowerCase();\n  if (!target || target === currentAppId(config)) return null;\n  try {\n    const { resolveWorkspace } = await import(\"./workspace-resolve.js\");\n    const ws = await resolveWorkspace();\n    if (!ws.isWorkspace) return null;\n    const match = ws.apps.find((a) => a.id.toLowerCase() === target);\n    if (!match) return null;\n    return { origin: match.url, id: match.id };\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// list_apps\n// ---------------------------------------------------------------------------\n\nfunction listAppsTool(): ActionEntry {\n  return {\n    tool: tool(\n      \"List the workspace apps and their local dev URLs/ports. Use this to \" +\n        \"discover which apps exist before opening or asking one. In a single-\" +\n        \"app project this returns just that app.\",\n    ),\n    readOnly: true,\n    parallelSafe: true,\n    run: async () => {\n      const { resolveWorkspace } = await import(\"./workspace-resolve.js\");\n      const ws = await resolveWorkspace();\n      return {\n        workspace: ws.isWorkspace,\n        gatewayUrl: ws.gatewayUrl,\n        apps: ws.apps.map((a) => ({\n          id: a.id,\n          url: a.url,\n          port: a.port,\n          running: a.running,\n        })),\n      };\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// open_app\n// ---------------------------------------------------------------------------\n\nfunction openAppTool(config: MCPConfig): ActionEntry {\n  return {\n    tool: tool(\n      \"Build a deep link that opens an app at a specific view/record. No side \" +\n        \"effects — returns a URL the user can click to land in the running UI. \" +\n        'After calling, surface the returned \"Open in … →\" link to the user.',\n      {\n        app: { type: \"string\", description: \"App id, e.g. 'mail'\" },\n        view: {\n          type: \"string\",\n          description: \"Target view, e.g. 'inbox' (maps to navigate command)\",\n        },\n        params: {\n          type: \"object\",\n          description:\n            \"Optional record-focus / filter params, e.g. { threadId: 'abc' }\",\n        },\n      },\n      [\"app\", \"view\"],\n    ),\n    readOnly: true,\n    parallelSafe: true,\n    run: async (args: Record<string, any>) => {\n      const app = String(args.app ?? \"\").trim();\n      const view = String(args.view ?? \"\").trim();\n      if (!app || !view) {\n        throw new Error(\"open_app requires both 'app' and 'view'.\");\n      }\n      let params: Record<string, string | number | boolean> | undefined;\n      const raw = args.params;\n      if (raw && typeof raw === \"object\") {\n        params = raw as Record<string, string | number | boolean>;\n      } else if (typeof raw === \"string\" && raw.trim()) {\n        try {\n          params = JSON.parse(raw);\n        } catch {\n          params = undefined;\n        }\n      }\n      const relUrl = buildDeepLink({ app, view, params });\n\n      // Cross-app target in a workspace: resolve the TARGET app's origin and\n      // return an absolute URL. Otherwise the MCP layer would prefix the\n      // relative path with the CURRENT request origin, landing the user in\n      // the wrong app (e.g. open_app({app:\"calendar\"}) served from Mail).\n      // Same-app / standalone keeps the relative path (current behavior).\n      const targetApp = await resolveTargetAppOrigin(config, app);\n      const url = targetApp\n        ? `${targetApp.origin.replace(/\\/+$/, \"\")}${relUrl}`\n        : relUrl;\n\n      return { app, view, url };\n    },\n    link: ({ result }) => {\n      if (!result || typeof result !== \"object\") return null;\n      const r = result as { url?: string; app?: string; view?: string };\n      if (!r.url) return null;\n      return {\n        url: r.url,\n        label: `Open ${r.app ?? \"app\"}`,\n        view: r.view,\n      };\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// ask_app\n// ---------------------------------------------------------------------------\n\nfunction askAppTool(config: MCPConfig): ActionEntry {\n  return {\n    tool: tool(\n      \"Send a natural-language message to an app's AI agent and get its \" +\n        \"response. Use for complex, multi-step tasks needing the agent's \" +\n        \"reasoning and full app context. In a single-app project the 'app' \" +\n        \"param is optional (defaults to this app). When 'app' names a \" +\n        \"different workspace app it is routed there over A2A; the result's \" +\n        \"'routedVia' field reports whether it ran cross-app or locally.\",\n      {\n        app: {\n          type: \"string\",\n          description: \"App id to route to (optional in a single-app project)\",\n        },\n        message: {\n          type: \"string\",\n          description: \"The message to send to the app's agent\",\n        },\n      },\n      [\"message\"],\n    ),\n    run: async (args: Record<string, any>) => {\n      const message = String(args.message ?? \"\").trim();\n      if (!message) throw new Error(\"ask_app requires a 'message'.\");\n      const requestedApp = String(args.app ?? \"\").trim();\n      const selfId = currentAppId(config);\n\n      // Cross-app: the caller named a *different* workspace app. Route the\n      // message to THAT app's agent over A2A (its `/_agent-native/a2a`\n      // endpoint runs the real agent loop with JWT identity) rather than\n      // silently answering from this app's agent and claiming delegation.\n      const targetApp = await resolveTargetAppOrigin(config, requestedApp);\n      if (targetApp) {\n        try {\n          const { callAgent } = await import(\"../a2a/client.js\");\n          const { getRequestUserEmail } =\n            await import(\"../server/request-context.js\");\n          // The MCP handler runs inside `runWithRequestContext`, so this is\n          // the verified caller's email — it lets `callAgent` mint a signed\n          // A2A JWT so the target app honours per-user scope.\n          const response = await callAgent(targetApp.origin, message, {\n            userEmail: getRequestUserEmail(),\n            // Bound the wait — cross-app A2A polls async by default.\n            timeoutMs: 5 * 60_000,\n          });\n          return {\n            app: targetApp.id,\n            routedVia: \"a2a\",\n            response,\n          };\n        } catch (err: any) {\n          // Be honest: routing was attempted and failed — do NOT fall back to\n          // this app's agent and pretend it was the target.\n          throw new Error(\n            `Failed to route ask_app to \"${targetApp.id}\" via A2A: ` +\n              `${err?.message ?? err}`,\n          );\n        }\n      }\n\n      // Same app (or no workspace / unknown target): answer locally with this\n      // app's own ask-agent handler — the same entry point the HTTP MCP mount\n      // + A2A use, so there is no second agent runner.\n      if (!config.askAgent) {\n        throw new Error(\n          \"This app does not expose an agent (no ask-agent handler).\",\n        );\n      }\n\n      // If the caller named an app we couldn't route to (unknown id, or no\n      // workspace), say so honestly instead of claiming we reached it.\n      const unresolved =\n        !!requestedApp && requestedApp.toLowerCase() !== selfId;\n      const response = await config.askAgent(message);\n      return {\n        app: selfId,\n        routedVia: \"local\",\n        ...(unresolved\n          ? {\n              note:\n                `Requested app \"${requestedApp}\" is not a reachable workspace ` +\n                `app; answered with this app (\"${selfId}\") instead.`,\n            }\n          : {}),\n        response,\n      };\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// list_templates\n// ---------------------------------------------------------------------------\n\nfunction listTemplatesTool(): ActionEntry {\n  return {\n    tool: tool(\n      \"List the first-party templates that can be scaffolded into a workspace \" +\n        \"(allow-listed templates only).\",\n    ),\n    readOnly: true,\n    parallelSafe: true,\n    run: async () => {\n      const { visibleTemplates } = await import(\"../cli/templates-meta.js\");\n      return {\n        templates: visibleTemplates().map((t) => ({\n          name: t.name,\n          label: t.label,\n          hint: t.hint,\n        })),\n      };\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// create_workspace_app\n// ---------------------------------------------------------------------------\n\nfunction createWorkspaceAppTool(): ActionEntry {\n  return {\n    tool: tool(\n      \"Scaffold a new app into the current workspace from an allow-listed \" +\n        \"template, then return a deep link to open it. Idempotent: if an app \" +\n        \"with that name already exists it is reused. After calling, surface \" +\n        'the returned \"Open … →\" link to the user.',\n      {\n        name: {\n          type: \"string\",\n          description: \"New app id (directory under apps/), e.g. 'mymail'\",\n        },\n        template: {\n          type: \"string\",\n          description:\n            \"Template to scaffold from — must be allow-listed (see list_templates)\",\n        },\n      },\n      [\"name\", \"template\"],\n    ),\n    run: async (args: Record<string, any>) => {\n      const name = String(args.name ?? \"\").trim();\n      const template = String(args.template ?? \"\").trim();\n      if (!name || !template) {\n        throw new Error(\n          \"create_workspace_app requires both 'name' and 'template'.\",\n        );\n      }\n\n      // Enforce the strict public template allow-list. The authoritative,\n      // dependency-free source inside @agent-native/core is cli/templates-meta\n      // (kept in sync with packages/shared-app-config/templates.ts; CI guard).\n      const { visibleTemplates } = await import(\"../cli/templates-meta.js\");\n      const allowed = new Set(visibleTemplates().map((t) => t.name));\n      if (!allowed.has(template)) {\n        throw new Error(\n          `Template \"${template}\" is not allow-listed. Allowed: ${[...allowed]\n            .sort()\n            .join(\", \")}`,\n        );\n      }\n\n      const { findWorkspaceRoot, resolveWorkspace } =\n        await import(\"./workspace-resolve.js\");\n      const fs = await import(\"node:fs\");\n      const path = await import(\"node:path\");\n\n      const root = findWorkspaceRoot(process.cwd());\n      if (!root) {\n        throw new Error(\n          \"Not inside a workspace. create_workspace_app only works in a \" +\n            \"multi-app workspace (run from the workspace root).\",\n        );\n      }\n\n      const appDir = path.join(root, \"apps\", name);\n      const alreadyExisted = fs.existsSync(appDir);\n\n      if (!alreadyExisted) {\n        // Reuse the CLI scaffolder directly (no second `agent-native`\n        // subprocess). `addAppToWorkspace(name, { template })` takes the\n        // non-interactive single-template path when name + one template are\n        // given. Run it from the workspace root so detectWorkspace resolves.\n        const prevCwd = process.cwd();\n        try {\n          process.chdir(root);\n          const { addAppToWorkspace } = await import(\"../cli/create.js\");\n          await addAppToWorkspace(name, { template, noInstall: true });\n        } finally {\n          try {\n            process.chdir(prevCwd);\n          } catch {\n            // best-effort cwd restore\n          }\n        }\n      }\n\n      // The workspace gateway auto-detects new apps/* dirs (fs.watch +\n      // 2s sync) and lazily boots the dev server on first request, so we\n      // don't spawn vite ourselves — opening the deep link warms it. Resolve\n      // the port the gateway will use so we can report it.\n      const ws = await resolveWorkspace(root);\n      const appInfo = ws.apps.find((a) => a.id === name);\n      const port = appInfo?.port;\n      // The scaffolded app is always a *different* app from the host MCP\n      // server, so anchor the deep link to the new app's own origin. A\n      // relative path would otherwise be prefixed with the current request\n      // origin and land on the wrong app. Fall back to the relative path\n      // only if the gateway hasn't reported the new app's URL yet.\n      const relDeepLink = buildDeepLink({ app: name, view: \"home\" });\n      const deepLink = appInfo?.url\n        ? `${appInfo.url.replace(/\\/+$/, \"\")}${relDeepLink}`\n        : relDeepLink;\n\n      return {\n        name,\n        template,\n        created: !alreadyExisted,\n        reused: alreadyExisted,\n        port,\n        url: appInfo?.url,\n        gatewayUrl: ws.gatewayUrl,\n        deepLink,\n      };\n    },\n    link: ({ result }) => {\n      if (!result || typeof result !== \"object\") return null;\n      const r = result as { deepLink?: string; name?: string };\n      if (!r.deepLink) return null;\n      return {\n        url: r.deepLink,\n        label: `Open ${r.name ?? \"app\"}`,\n        view: \"home\",\n      };\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Registry\n// ---------------------------------------------------------------------------\n\n/**\n * Build the generic cross-app builtin tool registry. Called by\n * `createMCPServerForRequest`; the result is merged UNDER the config's\n * actions so template actions of the same name win.\n */\nexport function getBuiltinCrossAppTools(\n  config: MCPConfig,\n): Record<string, ActionEntry> {\n  return {\n    list_apps: listAppsTool(),\n    open_app: openAppTool(config),\n    ask_app: askAppTool(config),\n    create_workspace_app: createWorkspaceAppTool(),\n    list_templates: listTemplatesTool(),\n  };\n}\n"]}

package/dist/mcp/connect-route.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `/_agent-native/mcp/connect` — frictionless external-agent connection.
+ *
+ * A logged-in user on a deployed agent-native app (e.g. mail.agent-native.com)
+ * mints a per-user, scoped, revocable MCP bearer token WITHOUT ever copying a
+ * shared deployment secret. Two surfaces:
+ *
+ *   1. Browser  — `GET /connect` renders a minimal in-app page (same inline
+ *      HTML approach as the auth pages). The Authorize button POSTs to
+ *      `/connect/token`, then shows the ready-to-paste `.mcp.json` entry, the
+ *      `agent-native connect <origin>` one-liner, and the user's existing
+ *      tokens with Revoke buttons.
+ *   2. CLI      — an OAuth-2.0-device-authorization-style flow:
+ *        POST /connect/device/start      (unauth)  → device_code + user_code
+ *        GET  /connect?user_code=…       (browser) → user signs in & approves
+ *        POST /connect/device/authorize  (session) → binds user to the code
+ *        POST /connect/device/poll       (unauth)  → mints + returns the token
+ *
+ * The minted token reuses the existing A2A signer (`signA2AToken`) — no new
+ * crypto. We only add a random `jti` + `scope: "mcp-connect"` claim so it can
+ * be revoked. `verifyAuth` already verifies A2A_SECRET JWTs and extracts
+ * `sub`/`org_domain`, so a minted token works against `/_agent-native/mcp`
+ * with no verify changes for the happy path (the revoke check is the only
+ * addition there).
+ *
+ * Node-only (crypto + the A2A signer), bundled alongside the other framework
+ * routes. Dialect-agnostic SQL lives in `connect-store.ts`.
+ */
+import type { H3Event } from "h3";
+export interface McpConnectRouteOptions {
+    /** App id (directory under apps/, e.g. `mail`). Used for the server name. */
+    appId?: string;
+    /** Human app name shown on the connect page. */
+    appName?: string;
+}
+/**
+ * Handle a `/_agent-native/mcp/connect[...]` request. `subpath` is the part
+ * after `/connect` (empty string = the page itself, otherwise e.g.
+ * `/token`, `/device/start`). The core-routes-plugin computes it from the
+ * stripped event path so this module stays mount-agnostic.
+ */
+export declare function handleMcpConnect(event: H3Event, subpath: string, options?: McpConnectRouteOptions): Promise<Response>;
+//# sourceMappingURL=connect-route.d.ts.map

package/dist/mcp/connect-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-route.d.ts","sourceRoot":"","sources":["../../src/mcp/connect-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AA+BlC,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA6YD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,QAAQ,CAAC,CAoPnB"}