@agent-native/core 0.9.1 → 0.11.0

package/dist/mcp-client/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/mcp-client/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,QAAQ,EACR,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGtD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,sEAAsE;AACtE,SAAS,aAAa,CACpB,OAAgC;IAEhC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,GAAG,GAAkC,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA6B,EAC7B,KAAqB,EACrB,OAAe,EACf,MAAoB;IAEpB,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC;QACtC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;QACjD,MAAM;KACP,CAAC;AACJ,CAAC;AAoBD,SAAS,SAAS,CAAC,OAAyB,EAAE,QAAgB;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,IAAI,GAAG,aAAa,EAAE,IAAI,mBAAmB,EAAE,CAAC;IACtD,MAAM,OAAO,GAAoC,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAE9E,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,KAAK,GAA0B,IAAI,CAAC;QACxC,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,GAAG,MAAM,CAAC;YACf,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,QAAQ,EAAE,CAAC;YACpB,KAAK,GAAG,KAAK,CAAC;YACd,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;YAAE,SAAS;QACjC,MAAM,IAAI,GAAI,KAA+C,CAAC,OAAO,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,SAAS;YACxE,oEAAoE;YACpE,gEAAgE;YAChE,sEAAsE;YACtE,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC9C,MAAM,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,uEAAuE;IACvE,2DAA2D;IAC3D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,eAAe,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;QAC3B,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CACV,kCAAkC,GAAG,EAAE,OAAO,IAAI,GAAG,iCAAiC,CACvF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,QAAQ,EAAE,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,KAAc;IAKpD,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;QACvC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QAClB,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAChB,IAAI,CAAC,KAAK;YAAE,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAyB;IACzD,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACzC,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAa,EACb,OAAyB;IAEzB,MAAM,WAAW,GAAoB,CACnC,UACD,CAAC,kCAAkC,KAAK,IAAI,OAAO,EAAU,CAAC,CAAC;IAChE,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO;IACtC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE1B,IAAI,CAAC;QACH,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CACpB,4BAA4B,EAC5B,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;iBACzC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;iBACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAElD,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAE7D,+DAA+D;YAC/D,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;gBACnE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YAED,kBAAkB;YAClB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,MAAM,KAAK,KAAK;oBAAE,OAAO,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACxD,IAAI,MAAM,KAAK,MAAM;oBAAE,OAAO,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACxD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YAED,qBAAqB;YACrB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACnE,OAAO,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBAChD,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC9C,OAAO,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAChC,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CACV,4DAA4D,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,KAAc,EACd,OAAyB;IAOzB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,OAAO;QACL,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,gBAAgB,CACd,CAAC,EACD,MAAM,EACN,KAAK,IAAI,EAAE,EACX,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAC5D,CACF;QACD,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACxB,gBAAgB,CACd,CAAC,EACD,KAAK,EACL,KAAK,IAAI,EAAE,EACX,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAC3D,CACF;QACD,KAAK;QACL,IAAI;KACL,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAc,EAAE,OAAyB;IAChE,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAMpD,CAAC;IACF,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,WAAW,GACf,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAErE,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,KAAK,EAAE,+DAA+D;aACvE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACzC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC;QAC3E,CAAC;QACD,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE;QACnD,IAAI;QACJ,GAAG;QACH,OAAO;QACP,WAAW;KACZ,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACvB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,gBAAgB,CACtB,MAAM,CAAC,MAAM,EACb,KAAK,EACL,OAAO,EACP,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAC7B;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAc,EACd,OAAyB,EACzB,EAAU;IAEV,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;IACpC,MAAM,WAAW,GACf,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAErE,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACzC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,KAAK,EAAE,yDAAyD;aACjE,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAc;IACzC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGpD,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACvB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAc,EACd,OAAyB,EACzB,EAAU;IAEV,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;IACpC,MAAM,WAAW,GACf,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACvB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAW,EACX,OAAgC;IAKhC,IAAI,CAAC;QACH,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,6BAA6B,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxE,MAAM,CAAC,2CAA2C,CAAC;YACnD,MAAM,CAAC,oDAAoD,CAAC;SAC7D,CAAC,CAAC;QACH,MAAM,WAAW,GAA4B,EAAE,CAAC;QAChD,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC;QAChC,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE;YAChE,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,OAAO,EAAE,EAC1D,EAAE,YAAY,EAAE,EAAE,EAAE,CACrB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,KAAK,GAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAA6B,CAAC,GAAG,CAClE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CACd,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC7D,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;YAAE,SAAS;QACjD,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QACpC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC","sourcesContent":["/**\n * HTTP routes for user- and org-scope remote MCP server management.\n *\n * Mounted under `/_agent-native/mcp/servers` by `agent-chat-plugin` —\n * requires a reference to the running `McpClientManager` so mutations can\n * hot-reload the configured server set.\n *\n *   GET    /_agent-native/mcp/servers           list user + org servers\n *   POST   /_agent-native/mcp/servers           add a server\n *   DELETE /_agent-native/mcp/servers/:id       remove a server (scope via ?scope=)\n *   POST   /_agent-native/mcp/servers/:id/test  dry-run connect (no persist)\n *   POST   /_agent-native/mcp/servers/test      dry-run a URL before persisting\n */\n\nimport {\n  defineEventHandler,\n  getMethod,\n  getQuery,\n  setResponseHeader,\n  setResponseStatus,\n  type H3Event,\n} from \"h3\";\nimport { getH3App } from \"../server/framework-request-handler.js\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport { getOrgContext } from \"../org/context.js\";\nimport { getSession } from \"../server/auth.js\";\nimport { getAllSettings } from \"../settings/store.js\";\nimport type { McpClientManager } from \"./manager.js\";\nimport type { McpConfig, McpServerConfig } from \"./config.js\";\nimport { loadMcpConfig, autoDetectMcpConfig } from \"./config.js\";\nimport {\n  addRemoteServer,\n  listRemoteServers,\n  mergedConfigKey,\n  removeRemoteServer,\n  toHttpServerConfigAsync,\n  validateRemoteUrl,\n  type RemoteMcpScope,\n  type StoredRemoteMcpServer,\n} from \"./remote-store.js\";\nimport { fetchHubServers } from \"./hub-client.js\";\n\n/** Redact obvious auth header values before sending to the client. */\nfunction redactHeaders(\n  headers?: Record<string, string>,\n): Record<string, { set: true }> | undefined {\n  if (!headers) return undefined;\n  const out: Record<string, { set: true }> = {};\n  for (const k of Object.keys(headers)) out[k] = { set: true };\n  return out;\n}\n\nfunction projectForClient(\n  stored: StoredRemoteMcpServer,\n  scope: RemoteMcpScope,\n  ownerId: string,\n  status: ServerStatus,\n): ClientServer {\n  return {\n    id: stored.id,\n    scope,\n    name: stored.name,\n    url: stored.url,\n    headers: redactHeaders(stored.headers),\n    description: stored.description,\n    createdAt: stored.createdAt,\n    mergedId: mergedConfigKey(scope, stored, ownerId),\n    status,\n  };\n}\n\nexport interface ClientServer {\n  id: string;\n  scope: RemoteMcpScope;\n  name: string;\n  url: string;\n  headers?: Record<string, { set: true }>;\n  description?: string;\n  createdAt: number;\n  /** The key under which this server is registered in the running MCP manager. */\n  mergedId: string;\n  status: ServerStatus;\n}\n\ntype ServerStatus =\n  | { state: \"connected\"; toolCount: number }\n  | { state: \"error\"; error: string }\n  | { state: \"unknown\" };\n\nfunction statusFor(manager: McpClientManager, mergedId: string): ServerStatus {\n  const snap = manager.getStatus();\n  if (snap.connectedServers.includes(mergedId)) {\n    const toolCount = snap.tools.filter((t) => t.source === mergedId).length;\n    return { state: \"connected\", toolCount };\n  }\n  if (snap.errors[mergedId]) {\n    return { state: \"error\", error: snap.errors[mergedId] };\n  }\n  if (snap.configuredServers.includes(mergedId)) {\n    return { state: \"unknown\" };\n  }\n  return { state: \"unknown\" };\n}\n\n/**\n * Build the merged MCP config the manager should run with: file/env config\n * plus **every** user-scope and org-scope remote server persisted in the\n * settings store. Scanning all scopes means a mutation from one user's\n * session never drops another user's servers from the running manager.\n *\n * Each persisted server's merged key includes its owner discriminator\n * (`user_<emailhash>_<name>` or `org_<orgId>_<name>`) so two users' servers\n * with the same name coexist; the request-time gate in\n * `isMcpToolAllowedForRequest` then scopes tool visibility back down to the\n * calling user.\n */\nexport async function buildMergedConfig(): Promise<McpConfig | null> {\n  const base = loadMcpConfig() ?? autoDetectMcpConfig();\n  const servers: Record<string, McpServerConfig> = { ...(base?.servers ?? {}) };\n\n  const all = await getAllSettings().catch(() => ({}));\n  for (const [fullKey, value] of Object.entries(all)) {\n    const userMatch = /^u:([^:]+):mcp-servers-remote$/.exec(fullKey);\n    const orgMatch = /^o:([^:]+):mcp-servers-remote$/.exec(fullKey);\n    let scope: RemoteMcpScope | null = null;\n    let ownerId: string | null = null;\n    if (userMatch) {\n      scope = \"user\";\n      ownerId = userMatch[1];\n    } else if (orgMatch) {\n      scope = \"org\";\n      ownerId = orgMatch[1];\n    }\n    if (!scope || !ownerId) continue;\n    const list = (value as { servers?: StoredRemoteMcpServer[] }).servers;\n    if (!Array.isArray(list)) continue;\n    for (const stored of list) {\n      if (!stored || typeof stored.url !== \"string\" || !stored.name) continue;\n      // Async resolve: decrypts `headerSecretKey` from app_secrets so the\n      // running MCP client gets the cleartext bearer at request time.\n      // Stored row contains only the secret-key reference, never the value.\n      servers[mergedConfigKey(scope, stored, ownerId)] =\n        await toHttpServerConfigAsync(scope, ownerId, stored);\n    }\n  }\n\n  // Hub-consume: if this app is configured to consume from a remote hub\n  // (AGENT_NATIVE_MCP_HUB_URL + AGENT_NATIVE_MCP_HUB_TOKEN), pull its\n  // org-scope servers and merge. Hub entries use `hub_<orgId>_<name>` so\n  // they never collide with local `org_<orgId>_<name>` rows.\n  try {\n    const hubServers = await fetchHubServers();\n    for (const [mergedKey, cfg] of Object.entries(hubServers)) {\n      servers[mergedKey] = cfg;\n    }\n  } catch (err: any) {\n    console.warn(\n      `[mcp-client] hub merge failed: ${err?.message ?? err}. Continuing with local config.`,\n    );\n  }\n\n  if (Object.keys(servers).length === 0) return null;\n  return { servers, source: base?.source ?? \"merged\" };\n}\n\nasync function resolveContextForRequest(event: H3Event): Promise<{\n  email: string | null;\n  orgId: string | null;\n  role: string | null;\n}> {\n  let email: string | null = null;\n  try {\n    const session = await getSession(event);\n    email = session?.email ?? null;\n  } catch {\n    email = null;\n  }\n  let orgId: string | null = null;\n  let role: string | null = null;\n  try {\n    const ctx = await getOrgContext(event);\n    orgId = ctx.orgId;\n    role = ctx.role;\n    if (!email) email = ctx.email;\n  } catch {\n    // ignore — no org context\n  }\n  // No silent `local@localhost` fallback — if `getSession` returns nothing in\n  // production (misconfigured deploy, expired token), the caller must reject\n  // rather than silently pool every unauthenticated request under one identity.\n  return { email, orgId, role };\n}\n\nasync function reconfigureManager(manager: McpClientManager): Promise<void> {\n  const merged = await buildMergedConfig();\n  await manager.reconfigure(merged);\n}\n\nexport function mountMcpServersRoutes(\n  nitroApp: any,\n  manager: McpClientManager,\n): void {\n  const mountedApps: WeakSet<object> = ((\n    globalThis as any\n  ).__agentNativeMcpServersMountedApps ??= new WeakSet<object>());\n  if (mountedApps.has(nitroApp)) return;\n  mountedApps.add(nitroApp);\n\n  try {\n    getH3App(nitroApp).use(\n      \"/_agent-native/mcp/servers\",\n      defineEventHandler(async (event: H3Event) => {\n        const method = getMethod(event);\n        const pathname = (event.url?.pathname || \"\")\n          .replace(/^\\/+/, \"\")\n          .replace(/\\/+$/, \"\");\n        const parts = pathname ? pathname.split(\"/\") : [];\n\n        setResponseHeader(event, \"Content-Type\", \"application/json\");\n\n        // POST /servers/test — dry-run a URL+headers before persisting\n        if (method === \"POST\" && parts.length === 1 && parts[0] === \"test\") {\n          return handleTestUrl(event);\n        }\n\n        // Collection root\n        if (parts.length === 0) {\n          if (method === \"GET\") return handleList(event, manager);\n          if (method === \"POST\") return handleAdd(event, manager);\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n\n        // /:id  /  /:id/test\n        if (parts.length === 1 || parts.length === 2) {\n          const id = parts[0];\n          if (parts.length === 2 && parts[1] === \"test\" && method === \"POST\") {\n            return handleTestExisting(event, manager, id);\n          }\n          if (parts.length === 1 && method === \"DELETE\") {\n            return handleDelete(event, manager, id);\n          }\n        }\n\n        setResponseStatus(event, 404);\n        return { error: \"Not found\" };\n      }),\n    );\n  } catch (err: any) {\n    console.warn(\n      `[mcp-client] Failed to mount /_agent-native/mcp/servers: ${err?.message ?? err}`,\n    );\n  }\n}\n\nasync function handleList(\n  event: H3Event,\n  manager: McpClientManager,\n): Promise<{\n  user: ClientServer[];\n  org: ClientServer[];\n  orgId: string | null;\n  role: string | null;\n}> {\n  const { email, orgId, role } = await resolveContextForRequest(event);\n  const userServers = email ? await listRemoteServers(\"user\", email) : [];\n  const orgServers = orgId ? await listRemoteServers(\"org\", orgId) : [];\n  return {\n    user: userServers.map((s) =>\n      projectForClient(\n        s,\n        \"user\",\n        email ?? \"\",\n        statusFor(manager, mergedConfigKey(\"user\", s, email ?? \"\")),\n      ),\n    ),\n    org: orgServers.map((s) =>\n      projectForClient(\n        s,\n        \"org\",\n        orgId ?? \"\",\n        statusFor(manager, mergedConfigKey(\"org\", s, orgId ?? \"\")),\n      ),\n    ),\n    orgId,\n    role,\n  };\n}\n\nasync function handleAdd(event: H3Event, manager: McpClientManager) {\n  const body = (await readBody(event).catch(() => ({}))) as {\n    scope?: unknown;\n    name?: unknown;\n    url?: unknown;\n    headers?: unknown;\n    description?: unknown;\n  };\n  const scope =\n    body.scope === \"org\" ? \"org\" : body.scope === \"user\" ? \"user\" : null;\n  if (!scope) {\n    setResponseStatus(event, 400);\n    return { error: 'scope must be \"user\" or \"org\"' };\n  }\n  const name = typeof body.name === \"string\" ? body.name : \"\";\n  const url = typeof body.url === \"string\" ? body.url : \"\";\n  if (!name.trim() || !url.trim()) {\n    setResponseStatus(event, 400);\n    return { error: \"name and url are required\" };\n  }\n  const headers = normalizeHeaders(body.headers);\n  const description =\n    typeof body.description === \"string\" ? body.description : undefined;\n\n  const { email, orgId, role } = await resolveContextForRequest(event);\n\n  let scopeId: string | null = null;\n  if (scope === \"user\") {\n    scopeId = email;\n  } else {\n    if (!orgId) {\n      setResponseStatus(event, 400);\n      return {\n        error: \"You must belong to an organization to add an org-scope server\",\n      };\n    }\n    if (role !== \"owner\" && role !== \"admin\") {\n      setResponseStatus(event, 403);\n      return { error: \"Only owners and admins can add org-scope MCP servers\" };\n    }\n    scopeId = orgId;\n  }\n  if (!scopeId) {\n    setResponseStatus(event, 401);\n    return { error: \"Authentication required\" };\n  }\n\n  const result = await addRemoteServer(scope, scopeId, {\n    name,\n    url,\n    headers,\n    description,\n  });\n  if (result.ok !== true) {\n    setResponseStatus(event, 400);\n    return { error: result.error };\n  }\n\n  await reconfigureManager(manager);\n  const mergedId = mergedConfigKey(scope, result.server, scopeId);\n  return {\n    ok: true,\n    server: projectForClient(\n      result.server,\n      scope,\n      scopeId,\n      statusFor(manager, mergedId),\n    ),\n  };\n}\n\nasync function handleDelete(\n  event: H3Event,\n  manager: McpClientManager,\n  id: string,\n) {\n  const scope = getQuery(event).scope;\n  const parsedScope =\n    scope === \"org\" ? \"org\" : scope === \"user\" ? \"user\" : null;\n  if (!parsedScope) {\n    setResponseStatus(event, 400);\n    return { error: 'scope query param must be \"user\" or \"org\"' };\n  }\n  const { email, orgId, role } = await resolveContextForRequest(event);\n\n  let scopeId: string | null = null;\n  if (parsedScope === \"user\") {\n    scopeId = email;\n  } else {\n    if (!orgId) {\n      setResponseStatus(event, 400);\n      return { error: \"No active organization\" };\n    }\n    if (role !== \"owner\" && role !== \"admin\") {\n      setResponseStatus(event, 403);\n      return {\n        error: \"Only owners and admins can remove org-scope MCP servers\",\n      };\n    }\n    scopeId = orgId;\n  }\n  if (!scopeId) {\n    setResponseStatus(event, 401);\n    return { error: \"Authentication required\" };\n  }\n\n  const removed = await removeRemoteServer(parsedScope, scopeId, id);\n  if (!removed) {\n    setResponseStatus(event, 404);\n    return { error: \"Server not found\" };\n  }\n  await reconfigureManager(manager);\n  return { ok: true };\n}\n\nasync function handleTestUrl(event: H3Event) {\n  const body = (await readBody(event).catch(() => ({}))) as {\n    url?: unknown;\n    headers?: unknown;\n  };\n  const url = typeof body.url === \"string\" ? body.url : \"\";\n  const check = validateRemoteUrl(url);\n  if (!check.ok) {\n    setResponseStatus(event, 400);\n    return { ok: false, error: check.error };\n  }\n  const headers = normalizeHeaders(body.headers);\n  const result = await tryConnect(check.url!.toString(), headers);\n  if (result.ok !== true) {\n    setResponseStatus(event, 400);\n    return { ok: false, error: result.error };\n  }\n  return { ok: true, toolCount: result.toolCount, tools: result.tools };\n}\n\nasync function handleTestExisting(\n  event: H3Event,\n  manager: McpClientManager,\n  id: string,\n) {\n  const scope = getQuery(event).scope;\n  const parsedScope =\n    scope === \"org\" ? \"org\" : scope === \"user\" ? \"user\" : null;\n  if (!parsedScope) {\n    setResponseStatus(event, 400);\n    return { error: 'scope query param must be \"user\" or \"org\"' };\n  }\n  const { email, orgId } = await resolveContextForRequest(event);\n  const scopeId = parsedScope === \"user\" ? email : orgId;\n  if (!scopeId) {\n    setResponseStatus(event, 401);\n    return { error: \"Authentication required\" };\n  }\n  const list = await listRemoteServers(parsedScope, scopeId);\n  const server = list.find((s) => s.id === id);\n  if (!server) {\n    setResponseStatus(event, 404);\n    return { error: \"Server not found\" };\n  }\n  const result = await tryConnect(server.url, server.headers);\n  if (result.ok !== true) {\n    setResponseStatus(event, 400);\n    return { ok: false, error: result.error };\n  }\n  return { ok: true, toolCount: result.toolCount, tools: result.tools };\n}\n\nasync function tryConnect(\n  url: string,\n  headers?: Record<string, string>,\n): Promise<\n  | { ok: true; toolCount: number; tools: string[] }\n  | { ok: false; error: string }\n> {\n  try {\n    const [{ Client }, { StreamableHTTPClientTransport }] = await Promise.all([\n      import(\"@modelcontextprotocol/sdk/client/index.js\"),\n      import(\"@modelcontextprotocol/sdk/client/streamableHttp.js\"),\n    ]);\n    const requestInit: Record<string, unknown> = {};\n    if (headers && Object.keys(headers).length > 0) {\n      requestInit.headers = headers;\n    }\n    const transport = new StreamableHTTPClientTransport(new URL(url), {\n      requestInit,\n    });\n    const client = new Client(\n      { name: \"agent-native-mcp-client-test\", version: \"1.0.0\" },\n      { capabilities: {} },\n    );\n    try {\n      await client.connect(transport);\n      const listed = await client.listTools();\n      const names = ((listed?.tools ?? []) as Array<{ name: string }>).map(\n        (t) => t.name,\n      );\n      return { ok: true, toolCount: names.length, tools: names };\n    } finally {\n      try {\n        await client.close();\n      } catch {}\n      try {\n        await transport.close();\n      } catch {}\n    }\n  } catch (err: any) {\n    return { ok: false, error: err?.message ?? String(err) };\n  }\n}\n\nfunction normalizeHeaders(input: unknown): Record<string, string> | undefined {\n  if (!input || typeof input !== \"object\") return undefined;\n  const out: Record<string, string> = {};\n  for (const [k, v] of Object.entries(input as Record<string, unknown>)) {\n    if (typeof k !== \"string\" || !k.trim()) continue;\n    if (typeof v !== \"string\") continue;\n    out[k.trim()] = v;\n  }\n  return Object.keys(out).length > 0 ? out : undefined;\n}\n"]}
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/mcp-client/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,QAAQ,EACR,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGtD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,sEAAsE;AACtE,SAAS,aAAa,CACpB,OAAgC;IAEhC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,GAAG,GAAkC,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA6B,EAC7B,KAAqB,EACrB,OAAe,EACf,MAAoB;IAEpB,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC;QACtC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;QACjD,MAAM;KACP,CAAC;AACJ,CAAC;AAoBD,SAAS,SAAS,CAAC,OAAyB,EAAE,QAAgB;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK,YAAY,KAAK;YACtB,CAAC,CAAC,KAAK,CAAC,OAAO;YACf,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,IAAI;QAAE,OAAO,uCAAuC,CAAC;IAC1D,IACE,uEAAuE,CAAC,IAAI,CAC1E,IAAI,CACL,EACD,CAAC;QACD,OAAO,oIAAoI,CAAC;IAC9I,CAAC;IACD,IACE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EACzC,CAAC;QACD,OAAO,sHAAsH,CAAC;IAChI,CAAC;IACD,IACE,6EAA6E,CAAC,IAAI,CAChF,IAAI,CACL,EACD,CAAC;QACD,OAAO,sGAAsG,CAAC;IAChH,CAAC;IACD,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,uFAAuF,CAAC;IACjG,CAAC;IACD,IAAI,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,OAAO,6GAA6G,CAAC;IACvH,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,IAAI,GAAG,aAAa,EAAE,IAAI,mBAAmB,EAAE,CAAC;IACtD,MAAM,OAAO,GAAoC,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAE9E,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,KAAK,GAA0B,IAAI,CAAC;QACxC,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,GAAG,MAAM,CAAC;YACf,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,QAAQ,EAAE,CAAC;YACpB,KAAK,GAAG,KAAK,CAAC;YACd,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;YAAE,SAAS;QACjC,MAAM,IAAI,GAAI,KAA+C,CAAC,OAAO,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,SAAS;YACxE,oEAAoE;YACpE,gEAAgE;YAChE,sEAAsE;YACtE,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC9C,MAAM,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,uEAAuE;IACvE,2DAA2D;IAC3D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,eAAe,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;QAC3B,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CACV,kCAAkC,GAAG,EAAE,OAAO,IAAI,GAAG,iCAAiC,CACvF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,QAAQ,EAAE,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,KAAc;IAKpD,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;QACvC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QAClB,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAChB,IAAI,CAAC,KAAK;YAAE,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAyB;IACzD,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACzC,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAa,EACb,OAAyB;IAEzB,MAAM,WAAW,GAAoB,CACnC,UACD,CAAC,kCAAkC,KAAK,IAAI,OAAO,EAAU,CAAC,CAAC;IAChE,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO;IACtC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE1B,IAAI,CAAC;QACH,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CACpB,4BAA4B,EAC5B,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;iBACzC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;iBACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAElD,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAE7D,+DAA+D;YAC/D,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;gBACnE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YAED,kBAAkB;YAClB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,MAAM,KAAK,KAAK;oBAAE,OAAO,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACxD,IAAI,MAAM,KAAK,MAAM;oBAAE,OAAO,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACxD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YAED,qBAAqB;YACrB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACnE,OAAO,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBAChD,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC9C,OAAO,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAChC,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CACV,4DAA4D,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,KAAc,EACd,OAAyB;IAOzB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,OAAO;QACL,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,gBAAgB,CACd,CAAC,EACD,MAAM,EACN,KAAK,IAAI,EAAE,EACX,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAC5D,CACF;QACD,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACxB,gBAAgB,CACd,CAAC,EACD,KAAK,EACL,KAAK,IAAI,EAAE,EACX,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAC3D,CACF;QACD,KAAK;QACL,IAAI;KACL,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAc,EAAE,OAAyB;IAChE,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAMpD,CAAC;IACF,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,WAAW,GACf,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAErE,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,KAAK,EAAE,+DAA+D;aACvE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACzC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC;QAC3E,CAAC;QACD,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE;QACnD,IAAI;QACJ,GAAG;QACH,OAAO;QACP,WAAW;KACZ,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACvB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,gBAAgB,CACtB,MAAM,CAAC,MAAM,EACb,KAAK,EACL,OAAO,EACP,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAC7B;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAc,EACd,OAAyB,EACzB,EAAU;IAEV,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;IACpC,MAAM,WAAW,GACf,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAErE,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACzC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,KAAK,EAAE,yDAAyD;aACjE,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAc;IACzC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGpD,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACvB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAc,EACd,OAAyB,EACzB,EAAU;IAEV,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;IACpC,MAAM,WAAW,GACf,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACvB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAW,EACX,OAAgC;IAKhC,IAAI,CAAC;QACH,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,6BAA6B,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxE,MAAM,CAAC,2CAA2C,CAAC;YACnD,MAAM,CAAC,oDAAoD,CAAC;SAC7D,CAAC,CAAC;QACH,MAAM,WAAW,GAA4B,EAAE,CAAC;QAChD,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC;QAChC,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE;YAChE,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,OAAO,EAAE,EAC1D,EAAE,YAAY,EAAE,EAAE,EAAE,CACrB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,KAAK,GAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAA6B,CAAC,GAAG,CAClE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CACd,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC7D,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;YAAE,SAAS;QACjD,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QACpC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC","sourcesContent":["/**\n * HTTP routes for user- and org-scope remote MCP server management.\n *\n * Mounted under `/_agent-native/mcp/servers` by `agent-chat-plugin` —\n * requires a reference to the running `McpClientManager` so mutations can\n * hot-reload the configured server set.\n *\n *   GET    /_agent-native/mcp/servers           list user + org servers\n *   POST   /_agent-native/mcp/servers           add a server\n *   DELETE /_agent-native/mcp/servers/:id       remove a server (scope via ?scope=)\n *   POST   /_agent-native/mcp/servers/:id/test  dry-run connect (no persist)\n *   POST   /_agent-native/mcp/servers/test      dry-run a URL before persisting\n */\n\nimport {\n  defineEventHandler,\n  getMethod,\n  getQuery,\n  setResponseHeader,\n  setResponseStatus,\n  type H3Event,\n} from \"h3\";\nimport { getH3App } from \"../server/framework-request-handler.js\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport { getOrgContext } from \"../org/context.js\";\nimport { getSession } from \"../server/auth.js\";\nimport { getAllSettings } from \"../settings/store.js\";\nimport type { McpClientManager } from \"./manager.js\";\nimport type { McpConfig, McpServerConfig } from \"./config.js\";\nimport { loadMcpConfig, autoDetectMcpConfig } from \"./config.js\";\nimport {\n  addRemoteServer,\n  listRemoteServers,\n  mergedConfigKey,\n  removeRemoteServer,\n  toHttpServerConfigAsync,\n  validateRemoteUrl,\n  type RemoteMcpScope,\n  type StoredRemoteMcpServer,\n} from \"./remote-store.js\";\nimport { fetchHubServers } from \"./hub-client.js\";\n\n/** Redact obvious auth header values before sending to the client. */\nfunction redactHeaders(\n  headers?: Record<string, string>,\n): Record<string, { set: true }> | undefined {\n  if (!headers) return undefined;\n  const out: Record<string, { set: true }> = {};\n  for (const k of Object.keys(headers)) out[k] = { set: true };\n  return out;\n}\n\nfunction projectForClient(\n  stored: StoredRemoteMcpServer,\n  scope: RemoteMcpScope,\n  ownerId: string,\n  status: ServerStatus,\n): ClientServer {\n  return {\n    id: stored.id,\n    scope,\n    name: stored.name,\n    url: stored.url,\n    headers: redactHeaders(stored.headers),\n    description: stored.description,\n    createdAt: stored.createdAt,\n    mergedId: mergedConfigKey(scope, stored, ownerId),\n    status,\n  };\n}\n\nexport interface ClientServer {\n  id: string;\n  scope: RemoteMcpScope;\n  name: string;\n  url: string;\n  headers?: Record<string, { set: true }>;\n  description?: string;\n  createdAt: number;\n  /** The key under which this server is registered in the running MCP manager. */\n  mergedId: string;\n  status: ServerStatus;\n}\n\ntype ServerStatus =\n  | { state: \"connected\"; toolCount: number }\n  | { state: \"error\"; error: string }\n  | { state: \"unknown\" };\n\nfunction statusFor(manager: McpClientManager, mergedId: string): ServerStatus {\n  const snap = manager.getStatus();\n  if (snap.connectedServers.includes(mergedId)) {\n    const toolCount = snap.tools.filter((t) => t.source === mergedId).length;\n    return { state: \"connected\", toolCount };\n  }\n  if (snap.errors[mergedId]) {\n    return { state: \"error\", error: snap.errors[mergedId] };\n  }\n  if (snap.configuredServers.includes(mergedId)) {\n    return { state: \"unknown\" };\n  }\n  return { state: \"unknown\" };\n}\n\nexport function formatMcpConnectError(error: unknown): string {\n  const raw =\n    typeof error === \"string\"\n      ? error\n      : error instanceof Error\n        ? error.message\n        : String(error ?? \"\");\n  const text = raw.trim();\n  if (!text) return \"Could not connect to that MCP server.\";\n  if (\n    /<!doctype|<html[\\s>]|<\\/html>|unexpected token '<'|is not valid json/i.test(\n      text,\n    )\n  ) {\n    return \"That URL returned a web page instead of an MCP response. Check that you pasted the Streamable HTTP endpoint, often ending in /mcp.\";\n  }\n  if (\n    /streamable http/i.test(text) &&\n    /error|failed|non-200|status/i.test(text)\n  ) {\n    return \"The server did not complete the Streamable HTTP MCP handshake. Check the URL and any required authorization headers.\";\n  }\n  if (\n    /failed to fetch|fetch failed|networkerror|econnrefused|enotfound|timed out/i.test(\n      text,\n    )\n  ) {\n    return \"Could not reach that MCP server. Check the URL and make sure it is publicly reachable from this app.\";\n  }\n  if (/401|403|unauthorized|forbidden/i.test(text)) {\n    return \"The MCP server rejected the request. Add or update the required Authorization header.\";\n  }\n  if (/404|not found|405|method not allowed/i.test(text)) {\n    return \"That URL is reachable, but it does not look like the MCP endpoint. Check the server's Streamable HTTP path.\";\n  }\n  return text.length > 240 ? `${text.slice(0, 237).trimEnd()}...` : text;\n}\n\n/**\n * Build the merged MCP config the manager should run with: file/env config\n * plus **every** user-scope and org-scope remote server persisted in the\n * settings store. Scanning all scopes means a mutation from one user's\n * session never drops another user's servers from the running manager.\n *\n * Each persisted server's merged key includes its owner discriminator\n * (`user_<emailhash>_<name>` or `org_<orgId>_<name>`) so two users' servers\n * with the same name coexist; the request-time gate in\n * `isMcpToolAllowedForRequest` then scopes tool visibility back down to the\n * calling user.\n */\nexport async function buildMergedConfig(): Promise<McpConfig | null> {\n  const base = loadMcpConfig() ?? autoDetectMcpConfig();\n  const servers: Record<string, McpServerConfig> = { ...(base?.servers ?? {}) };\n\n  const all = await getAllSettings().catch(() => ({}));\n  for (const [fullKey, value] of Object.entries(all)) {\n    const userMatch = /^u:([^:]+):mcp-servers-remote$/.exec(fullKey);\n    const orgMatch = /^o:([^:]+):mcp-servers-remote$/.exec(fullKey);\n    let scope: RemoteMcpScope | null = null;\n    let ownerId: string | null = null;\n    if (userMatch) {\n      scope = \"user\";\n      ownerId = userMatch[1];\n    } else if (orgMatch) {\n      scope = \"org\";\n      ownerId = orgMatch[1];\n    }\n    if (!scope || !ownerId) continue;\n    const list = (value as { servers?: StoredRemoteMcpServer[] }).servers;\n    if (!Array.isArray(list)) continue;\n    for (const stored of list) {\n      if (!stored || typeof stored.url !== \"string\" || !stored.name) continue;\n      // Async resolve: decrypts `headerSecretKey` from app_secrets so the\n      // running MCP client gets the cleartext bearer at request time.\n      // Stored row contains only the secret-key reference, never the value.\n      servers[mergedConfigKey(scope, stored, ownerId)] =\n        await toHttpServerConfigAsync(scope, ownerId, stored);\n    }\n  }\n\n  // Hub-consume: if this app is configured to consume from a remote hub\n  // (AGENT_NATIVE_MCP_HUB_URL + AGENT_NATIVE_MCP_HUB_TOKEN), pull its\n  // org-scope servers and merge. Hub entries use `hub_<orgId>_<name>` so\n  // they never collide with local `org_<orgId>_<name>` rows.\n  try {\n    const hubServers = await fetchHubServers();\n    for (const [mergedKey, cfg] of Object.entries(hubServers)) {\n      servers[mergedKey] = cfg;\n    }\n  } catch (err: any) {\n    console.warn(\n      `[mcp-client] hub merge failed: ${err?.message ?? err}. Continuing with local config.`,\n    );\n  }\n\n  if (Object.keys(servers).length === 0) return null;\n  return { servers, source: base?.source ?? \"merged\" };\n}\n\nasync function resolveContextForRequest(event: H3Event): Promise<{\n  email: string | null;\n  orgId: string | null;\n  role: string | null;\n}> {\n  let email: string | null = null;\n  try {\n    const session = await getSession(event);\n    email = session?.email ?? null;\n  } catch {\n    email = null;\n  }\n  let orgId: string | null = null;\n  let role: string | null = null;\n  try {\n    const ctx = await getOrgContext(event);\n    orgId = ctx.orgId;\n    role = ctx.role;\n    if (!email) email = ctx.email;\n  } catch {\n    // ignore — no org context\n  }\n  // No silent `local@localhost` fallback — if `getSession` returns nothing in\n  // production (misconfigured deploy, expired token), the caller must reject\n  // rather than silently pool every unauthenticated request under one identity.\n  return { email, orgId, role };\n}\n\nasync function reconfigureManager(manager: McpClientManager): Promise<void> {\n  const merged = await buildMergedConfig();\n  await manager.reconfigure(merged);\n}\n\nexport function mountMcpServersRoutes(\n  nitroApp: any,\n  manager: McpClientManager,\n): void {\n  const mountedApps: WeakSet<object> = ((\n    globalThis as any\n  ).__agentNativeMcpServersMountedApps ??= new WeakSet<object>());\n  if (mountedApps.has(nitroApp)) return;\n  mountedApps.add(nitroApp);\n\n  try {\n    getH3App(nitroApp).use(\n      \"/_agent-native/mcp/servers\",\n      defineEventHandler(async (event: H3Event) => {\n        const method = getMethod(event);\n        const pathname = (event.url?.pathname || \"\")\n          .replace(/^\\/+/, \"\")\n          .replace(/\\/+$/, \"\");\n        const parts = pathname ? pathname.split(\"/\") : [];\n\n        setResponseHeader(event, \"Content-Type\", \"application/json\");\n\n        // POST /servers/test — dry-run a URL+headers before persisting\n        if (method === \"POST\" && parts.length === 1 && parts[0] === \"test\") {\n          return handleTestUrl(event);\n        }\n\n        // Collection root\n        if (parts.length === 0) {\n          if (method === \"GET\") return handleList(event, manager);\n          if (method === \"POST\") return handleAdd(event, manager);\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n\n        // /:id  /  /:id/test\n        if (parts.length === 1 || parts.length === 2) {\n          const id = parts[0];\n          if (parts.length === 2 && parts[1] === \"test\" && method === \"POST\") {\n            return handleTestExisting(event, manager, id);\n          }\n          if (parts.length === 1 && method === \"DELETE\") {\n            return handleDelete(event, manager, id);\n          }\n        }\n\n        setResponseStatus(event, 404);\n        return { error: \"Not found\" };\n      }),\n    );\n  } catch (err: any) {\n    console.warn(\n      `[mcp-client] Failed to mount /_agent-native/mcp/servers: ${err?.message ?? err}`,\n    );\n  }\n}\n\nasync function handleList(\n  event: H3Event,\n  manager: McpClientManager,\n): Promise<{\n  user: ClientServer[];\n  org: ClientServer[];\n  orgId: string | null;\n  role: string | null;\n}> {\n  const { email, orgId, role } = await resolveContextForRequest(event);\n  const userServers = email ? await listRemoteServers(\"user\", email) : [];\n  const orgServers = orgId ? await listRemoteServers(\"org\", orgId) : [];\n  return {\n    user: userServers.map((s) =>\n      projectForClient(\n        s,\n        \"user\",\n        email ?? \"\",\n        statusFor(manager, mergedConfigKey(\"user\", s, email ?? \"\")),\n      ),\n    ),\n    org: orgServers.map((s) =>\n      projectForClient(\n        s,\n        \"org\",\n        orgId ?? \"\",\n        statusFor(manager, mergedConfigKey(\"org\", s, orgId ?? \"\")),\n      ),\n    ),\n    orgId,\n    role,\n  };\n}\n\nasync function handleAdd(event: H3Event, manager: McpClientManager) {\n  const body = (await readBody(event).catch(() => ({}))) as {\n    scope?: unknown;\n    name?: unknown;\n    url?: unknown;\n    headers?: unknown;\n    description?: unknown;\n  };\n  const scope =\n    body.scope === \"org\" ? \"org\" : body.scope === \"user\" ? \"user\" : null;\n  if (!scope) {\n    setResponseStatus(event, 400);\n    return { error: 'scope must be \"user\" or \"org\"' };\n  }\n  const name = typeof body.name === \"string\" ? body.name : \"\";\n  const url = typeof body.url === \"string\" ? body.url : \"\";\n  if (!name.trim() || !url.trim()) {\n    setResponseStatus(event, 400);\n    return { error: \"name and url are required\" };\n  }\n  const headers = normalizeHeaders(body.headers);\n  const description =\n    typeof body.description === \"string\" ? body.description : undefined;\n\n  const { email, orgId, role } = await resolveContextForRequest(event);\n\n  let scopeId: string | null = null;\n  if (scope === \"user\") {\n    scopeId = email;\n  } else {\n    if (!orgId) {\n      setResponseStatus(event, 400);\n      return {\n        error: \"You must belong to an organization to add an org-scope server\",\n      };\n    }\n    if (role !== \"owner\" && role !== \"admin\") {\n      setResponseStatus(event, 403);\n      return { error: \"Only owners and admins can add org-scope MCP servers\" };\n    }\n    scopeId = orgId;\n  }\n  if (!scopeId) {\n    setResponseStatus(event, 401);\n    return { error: \"Authentication required\" };\n  }\n\n  const result = await addRemoteServer(scope, scopeId, {\n    name,\n    url,\n    headers,\n    description,\n  });\n  if (result.ok !== true) {\n    setResponseStatus(event, 400);\n    return { error: result.error };\n  }\n\n  await reconfigureManager(manager);\n  const mergedId = mergedConfigKey(scope, result.server, scopeId);\n  return {\n    ok: true,\n    server: projectForClient(\n      result.server,\n      scope,\n      scopeId,\n      statusFor(manager, mergedId),\n    ),\n  };\n}\n\nasync function handleDelete(\n  event: H3Event,\n  manager: McpClientManager,\n  id: string,\n) {\n  const scope = getQuery(event).scope;\n  const parsedScope =\n    scope === \"org\" ? \"org\" : scope === \"user\" ? \"user\" : null;\n  if (!parsedScope) {\n    setResponseStatus(event, 400);\n    return { error: 'scope query param must be \"user\" or \"org\"' };\n  }\n  const { email, orgId, role } = await resolveContextForRequest(event);\n\n  let scopeId: string | null = null;\n  if (parsedScope === \"user\") {\n    scopeId = email;\n  } else {\n    if (!orgId) {\n      setResponseStatus(event, 400);\n      return { error: \"No active organization\" };\n    }\n    if (role !== \"owner\" && role !== \"admin\") {\n      setResponseStatus(event, 403);\n      return {\n        error: \"Only owners and admins can remove org-scope MCP servers\",\n      };\n    }\n    scopeId = orgId;\n  }\n  if (!scopeId) {\n    setResponseStatus(event, 401);\n    return { error: \"Authentication required\" };\n  }\n\n  const removed = await removeRemoteServer(parsedScope, scopeId, id);\n  if (!removed) {\n    setResponseStatus(event, 404);\n    return { error: \"Server not found\" };\n  }\n  await reconfigureManager(manager);\n  return { ok: true };\n}\n\nasync function handleTestUrl(event: H3Event) {\n  const body = (await readBody(event).catch(() => ({}))) as {\n    url?: unknown;\n    headers?: unknown;\n  };\n  const url = typeof body.url === \"string\" ? body.url : \"\";\n  const check = validateRemoteUrl(url);\n  if (!check.ok) {\n    setResponseStatus(event, 400);\n    return { ok: false, error: check.error };\n  }\n  const headers = normalizeHeaders(body.headers);\n  const result = await tryConnect(check.url!.toString(), headers);\n  if (result.ok !== true) {\n    setResponseStatus(event, 400);\n    return { ok: false, error: result.error };\n  }\n  return { ok: true, toolCount: result.toolCount, tools: result.tools };\n}\n\nasync function handleTestExisting(\n  event: H3Event,\n  manager: McpClientManager,\n  id: string,\n) {\n  const scope = getQuery(event).scope;\n  const parsedScope =\n    scope === \"org\" ? \"org\" : scope === \"user\" ? \"user\" : null;\n  if (!parsedScope) {\n    setResponseStatus(event, 400);\n    return { error: 'scope query param must be \"user\" or \"org\"' };\n  }\n  const { email, orgId } = await resolveContextForRequest(event);\n  const scopeId = parsedScope === \"user\" ? email : orgId;\n  if (!scopeId) {\n    setResponseStatus(event, 401);\n    return { error: \"Authentication required\" };\n  }\n  const list = await listRemoteServers(parsedScope, scopeId);\n  const server = list.find((s) => s.id === id);\n  if (!server) {\n    setResponseStatus(event, 404);\n    return { error: \"Server not found\" };\n  }\n  const result = await tryConnect(server.url, server.headers);\n  if (result.ok !== true) {\n    setResponseStatus(event, 400);\n    return { ok: false, error: result.error };\n  }\n  return { ok: true, toolCount: result.toolCount, tools: result.tools };\n}\n\nasync function tryConnect(\n  url: string,\n  headers?: Record<string, string>,\n): Promise<\n  | { ok: true; toolCount: number; tools: string[] }\n  | { ok: false; error: string }\n> {\n  try {\n    const [{ Client }, { StreamableHTTPClientTransport }] = await Promise.all([\n      import(\"@modelcontextprotocol/sdk/client/index.js\"),\n      import(\"@modelcontextprotocol/sdk/client/streamableHttp.js\"),\n    ]);\n    const requestInit: Record<string, unknown> = {};\n    if (headers && Object.keys(headers).length > 0) {\n      requestInit.headers = headers;\n    }\n    const transport = new StreamableHTTPClientTransport(new URL(url), {\n      requestInit,\n    });\n    const client = new Client(\n      { name: \"agent-native-mcp-client-test\", version: \"1.0.0\" },\n      { capabilities: {} },\n    );\n    try {\n      await client.connect(transport);\n      const listed = await client.listTools();\n      const names = ((listed?.tools ?? []) as Array<{ name: string }>).map(\n        (t) => t.name,\n      );\n      return { ok: true, toolCount: names.length, tools: names };\n    } finally {\n      try {\n        await client.close();\n      } catch {}\n      try {\n        await transport.close();\n      } catch {}\n    }\n  } catch (err: any) {\n    return { ok: false, error: formatMcpConnectError(err) };\n  }\n}\n\nfunction normalizeHeaders(input: unknown): Record<string, string> | undefined {\n  if (!input || typeof input !== \"object\") return undefined;\n  const out: Record<string, string> = {};\n  for (const [k, v] of Object.entries(input as Record<string, unknown>)) {\n    if (typeof k !== \"string\" || !k.trim()) continue;\n    if (typeof v !== \"string\") continue;\n    out[k.trim()] = v;\n  }\n  return Object.keys(out).length > 0 ? out : undefined;\n}\n"]}

package/dist/org/accept-pending.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accept-pending.d.ts","sourceRoot":"","sources":["../../src/org/accept-pending.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gCAAgC,CACpD,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CA4D9B"}
+{"version":3,"file":"accept-pending.d.ts","sourceRoot":"","sources":["../../src/org/accept-pending.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gCAAgC,CACpD,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CA8D9B"}

package/dist/org/accept-pending.js

@@ -24,7 +24,7 @@ export async function acceptPendingInvitationsForEmail(rawEmail) {
     let rows = [];
     try {
         const res = await db.execute({
-            sql: `SELECT id, org_id AS "orgId" FROM org_invitations
+            sql: `SELECT id, org_id AS "orgId", role FROM org_invitations
             WHERE LOWER(email) = ? AND status = 'pending'
             ORDER BY created_at DESC`,
             args: [email],
@@ -32,6 +32,7 @@ export async function acceptPendingInvitationsForEmail(rawEmail) {
         rows = res.rows.map((r) => ({
             id: String(r.id),
             orgId: String(r.orgId ?? r.org_id),
+            role: r.role == null ? null : String(r.role),
         }));
     }
     catch (err) {
@@ -48,9 +49,10 @@ export async function acceptPendingInvitationsForEmail(rawEmail) {
             args: [inv.orgId, email],
         });
         if (existing.rows.length === 0) {
+            const role = inv.role === "admin" ? "admin" : "member";
             await db.execute({
-                sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, 'member', ?)`,
-                args: [nanoid(), inv.orgId, email, Date.now()],
+                sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, ?, ?)`,
+                args: [nanoid(), inv.orgId, email, role, Date.now()],
             });
         }
         await db.execute({

package/dist/org/accept-pending.js.map

@@ -1 +1 @@
-{"version":3,"file":"accept-pending.js","sourceRoot":"","sources":["../../src/org/accept-pending.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,MAAM,MAAM,GAAG,GAAW,EAAE,CAC1B,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAOhE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,QAAgB;IAEhB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,IAAI,IAAI,GAAyC,EAAE,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC3B,GAAG,EAAE;;qCAE0B;YAC/B,IAAI,EAAE,CAAC,KAAK,CAAC;SACd,CAAC,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAC/B,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;SACnC,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iEAAiE;QACjE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAoC,EAAE,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAChC,GAAG,EAAE,yEAAyE;YAC9E,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC;SACzB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,4FAA4F;gBACjG,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,CAAC,OAAO,CAAC;YACf,GAAG,EAAE,6DAA6D;YAClE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;SACf,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,qEAAqE;IACrE,qCAAqC;IACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC","sourcesContent":["import { getDbExec } from \"../db/client.js\";\nimport { putUserSetting } from \"../settings/user-settings.js\";\n\nconst nanoid = (): string =>\n  globalThis.crypto?.randomUUID?.().replace(/-/g, \"\") ??\n  Math.random().toString(36).slice(2) + Date.now().toString(36);\n\nexport interface AcceptPendingResult {\n  accepted: Array<{ invitationId: string; orgId: string }>;\n  activeOrgId: string | null;\n}\n\n/**\n * Accept every pending `org_invitations` row for this email:\n *   - insert a matching `org_members` row (role 'member') when one doesn't exist\n *   - flip the invitation's status to 'accepted'\n *   - set the user's `active-org-id` to the most-recently-created invite\n *\n * Called from the Better Auth `user.create.after` hook so that a user who signs\n * up with an email they were just invited to lands in the org immediately,\n * rather than seeing a blank-slate app until they navigate to /team.\n *\n * Safe to call when the org tables don't exist (some templates don't use the\n * org module) — it swallows the \"no such table\" error and returns empty.\n */\nexport async function acceptPendingInvitationsForEmail(\n  rawEmail: string,\n): Promise<AcceptPendingResult> {\n  const email = rawEmail.trim().toLowerCase();\n  if (!email) {\n    return { accepted: [], activeOrgId: null };\n  }\n\n  const db = getDbExec();\n\n  let rows: Array<{ id: string; orgId: string }> = [];\n  try {\n    const res = await db.execute({\n      sql: `SELECT id, org_id AS \"orgId\" FROM org_invitations\n            WHERE LOWER(email) = ? AND status = 'pending'\n            ORDER BY created_at DESC`,\n      args: [email],\n    });\n    rows = res.rows.map((r: any) => ({\n      id: String(r.id),\n      orgId: String(r.orgId ?? r.org_id),\n    }));\n  } catch (err) {\n    // Template doesn't use the org module / tables not migrated yet.\n    return { accepted: [], activeOrgId: null };\n  }\n\n  if (rows.length === 0) {\n    return { accepted: [], activeOrgId: null };\n  }\n\n  const accepted: AcceptPendingResult[\"accepted\"] = [];\n  for (const inv of rows) {\n    const existing = await db.execute({\n      sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,\n      args: [inv.orgId, email],\n    });\n    if (existing.rows.length === 0) {\n      await db.execute({\n        sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, 'member', ?)`,\n        args: [nanoid(), inv.orgId, email, Date.now()],\n      });\n    }\n    await db.execute({\n      sql: `UPDATE org_invitations SET status = 'accepted' WHERE id = ?`,\n      args: [inv.id],\n    });\n    accepted.push({ invitationId: inv.id, orgId: inv.orgId });\n  }\n\n  // Set active-org-id to the most recent invite so the user lands in a\n  // populated workspace on first load.\n  const activeOrgId = accepted[0]?.orgId ?? null;\n  if (activeOrgId) {\n    try {\n      await putUserSetting(email, \"active-org-id\", { orgId: activeOrgId });\n    } catch {\n      // user_settings table might not exist in a minimal template — not fatal.\n    }\n  }\n\n  return { accepted, activeOrgId };\n}\n"]}
+{"version":3,"file":"accept-pending.js","sourceRoot":"","sources":["../../src/org/accept-pending.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,MAAM,MAAM,GAAG,GAAW,EAAE,CAC1B,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAOhE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,QAAgB;IAEhB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,IAAI,IAAI,GAA8D,EAAE,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC3B,GAAG,EAAE;;qCAE0B;YAC/B,IAAI,EAAE,CAAC,KAAK,CAAC;SACd,CAAC,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAC/B,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;YAClC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;SAC7C,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iEAAiE;QACjE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAoC,EAAE,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAChC,GAAG,EAAE,yEAAyE;YAC9E,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC;SACzB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;YACvD,MAAM,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,qFAAqF;gBAC1F,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,CAAC,OAAO,CAAC;YACf,GAAG,EAAE,6DAA6D;YAClE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;SACf,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,qEAAqE;IACrE,qCAAqC;IACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC","sourcesContent":["import { getDbExec } from \"../db/client.js\";\nimport { putUserSetting } from \"../settings/user-settings.js\";\n\nconst nanoid = (): string =>\n  globalThis.crypto?.randomUUID?.().replace(/-/g, \"\") ??\n  Math.random().toString(36).slice(2) + Date.now().toString(36);\n\nexport interface AcceptPendingResult {\n  accepted: Array<{ invitationId: string; orgId: string }>;\n  activeOrgId: string | null;\n}\n\n/**\n * Accept every pending `org_invitations` row for this email:\n *   - insert a matching `org_members` row (role 'member') when one doesn't exist\n *   - flip the invitation's status to 'accepted'\n *   - set the user's `active-org-id` to the most-recently-created invite\n *\n * Called from the Better Auth `user.create.after` hook so that a user who signs\n * up with an email they were just invited to lands in the org immediately,\n * rather than seeing a blank-slate app until they navigate to /team.\n *\n * Safe to call when the org tables don't exist (some templates don't use the\n * org module) — it swallows the \"no such table\" error and returns empty.\n */\nexport async function acceptPendingInvitationsForEmail(\n  rawEmail: string,\n): Promise<AcceptPendingResult> {\n  const email = rawEmail.trim().toLowerCase();\n  if (!email) {\n    return { accepted: [], activeOrgId: null };\n  }\n\n  const db = getDbExec();\n\n  let rows: Array<{ id: string; orgId: string; role: string | null }> = [];\n  try {\n    const res = await db.execute({\n      sql: `SELECT id, org_id AS \"orgId\", role FROM org_invitations\n            WHERE LOWER(email) = ? AND status = 'pending'\n            ORDER BY created_at DESC`,\n      args: [email],\n    });\n    rows = res.rows.map((r: any) => ({\n      id: String(r.id),\n      orgId: String(r.orgId ?? r.org_id),\n      role: r.role == null ? null : String(r.role),\n    }));\n  } catch (err) {\n    // Template doesn't use the org module / tables not migrated yet.\n    return { accepted: [], activeOrgId: null };\n  }\n\n  if (rows.length === 0) {\n    return { accepted: [], activeOrgId: null };\n  }\n\n  const accepted: AcceptPendingResult[\"accepted\"] = [];\n  for (const inv of rows) {\n    const existing = await db.execute({\n      sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,\n      args: [inv.orgId, email],\n    });\n    if (existing.rows.length === 0) {\n      const role = inv.role === \"admin\" ? \"admin\" : \"member\";\n      await db.execute({\n        sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, ?, ?)`,\n        args: [nanoid(), inv.orgId, email, role, Date.now()],\n      });\n    }\n    await db.execute({\n      sql: `UPDATE org_invitations SET status = 'accepted' WHERE id = ?`,\n      args: [inv.id],\n    });\n    accepted.push({ invitationId: inv.id, orgId: inv.orgId });\n  }\n\n  // Set active-org-id to the most recent invite so the user lands in a\n  // populated workspace on first load.\n  const activeOrgId = accepted[0]?.orgId ?? null;\n  if (activeOrgId) {\n    try {\n      await putUserSetting(email, \"active-org-id\", { orgId: activeOrgId });\n    } catch {\n      // user_settings table might not exist in a minimal template — not fatal.\n    }\n  }\n\n  return { accepted, activeOrgId };\n}\n"]}

package/dist/org/free-email-providers.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Free / public mailbox providers that should NOT be allowed as an
+ * organization's auto-join domain.
+ *
+ * Why: the auto-join feature lets anyone who signs up with an email at the
+ * org's `allowed_domain` join the org without an invitation. That is safe
+ * for company-owned domains (`acme.com`) — the company controls who gets
+ * an `@acme.com` address. It is catastrophic for shared mailbox providers
+ * (`gmail.com`, `outlook.com`, etc.) — anyone in the world can create a
+ * matching address and would be auto-added to the org.
+ *
+ * The list intentionally errs on the side of well-known providers; if a
+ * future provider isn't here we'll learn from a bug report rather than
+ * pretend we have an exhaustive registry.
+ */
+export declare const FREE_EMAIL_PROVIDER_DOMAINS: ReadonlySet<string>;
+export declare function isFreeEmailProvider(domain: string): boolean;
+//# sourceMappingURL=free-email-providers.d.ts.map

package/dist/org/free-email-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"free-email-providers.d.ts","sourceRoot":"","sources":["../../src/org/free-email-providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAwG1D,CAAC;AAEH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE3D"}

package/dist/org/free-email-providers.js

@@ -0,0 +1,124 @@
+/**
+ * Free / public mailbox providers that should NOT be allowed as an
+ * organization's auto-join domain.
+ *
+ * Why: the auto-join feature lets anyone who signs up with an email at the
+ * org's `allowed_domain` join the org without an invitation. That is safe
+ * for company-owned domains (`acme.com`) — the company controls who gets
+ * an `@acme.com` address. It is catastrophic for shared mailbox providers
+ * (`gmail.com`, `outlook.com`, etc.) — anyone in the world can create a
+ * matching address and would be auto-added to the org.
+ *
+ * The list intentionally errs on the side of well-known providers; if a
+ * future provider isn't here we'll learn from a bug report rather than
+ * pretend we have an exhaustive registry.
+ */
+export const FREE_EMAIL_PROVIDER_DOMAINS = new Set([
+    // Google
+    "gmail.com",
+    "googlemail.com",
+    // Microsoft
+    "outlook.com",
+    "hotmail.com",
+    "live.com",
+    "msn.com",
+    "outlook.co.uk",
+    "hotmail.co.uk",
+    "live.co.uk",
+    "outlook.de",
+    "hotmail.de",
+    "live.de",
+    "outlook.fr",
+    "hotmail.fr",
+    "live.fr",
+    // Yahoo
+    "yahoo.com",
+    "yahoo.co.uk",
+    "yahoo.co.jp",
+    "yahoo.fr",
+    "yahoo.de",
+    "yahoo.it",
+    "yahoo.es",
+    "yahoo.ca",
+    "yahoo.com.au",
+    "yahoo.com.br",
+    "ymail.com",
+    "rocketmail.com",
+    // Apple
+    "icloud.com",
+    "me.com",
+    "mac.com",
+    // AOL / Verizon
+    "aol.com",
+    "aim.com",
+    // Privacy / disposable / forwarding
+    "proton.me",
+    "protonmail.com",
+    "pm.me",
+    "tutanota.com",
+    "tutanota.de",
+    "tuta.io",
+    "fastmail.com",
+    "fastmail.fm",
+    "duck.com",
+    "hey.com",
+    // Russian / Chinese majors
+    "yandex.com",
+    "yandex.ru",
+    "mail.ru",
+    "list.ru",
+    "bk.ru",
+    "inbox.ru",
+    "qq.com",
+    "163.com",
+    "126.com",
+    "sina.com",
+    "sina.cn",
+    "sohu.com",
+    // ISP / legacy / misc
+    "gmx.com",
+    "gmx.de",
+    "gmx.net",
+    "web.de",
+    "t-online.de",
+    "freenet.de",
+    "zoho.com",
+    "zohomail.com",
+    "rediffmail.com",
+    "mail.com",
+    "att.net",
+    "comcast.net",
+    "verizon.net",
+    "sbcglobal.net",
+    "bellsouth.net",
+    "cox.net",
+    "earthlink.net",
+    "btinternet.com",
+    "btopenworld.com",
+    "talktalk.net",
+    "sky.com",
+    "ntlworld.com",
+    "virginmedia.com",
+    "free.fr",
+    "orange.fr",
+    "wanadoo.fr",
+    "laposte.net",
+    "libero.it",
+    "tiscali.it",
+    "uol.com.br",
+    "bol.com.br",
+    "terra.com.br",
+    // Disposable
+    "mailinator.com",
+    "guerrillamail.com",
+    "10minutemail.com",
+    "trashmail.com",
+    "yopmail.com",
+    "tempmail.com",
+    "throwawaymail.com",
+    "sharklasers.com",
+]);
+export function isFreeEmailProvider(domain) {
+    return FREE_EMAIL_PROVIDER_DOMAINS.has(domain.trim().toLowerCase());
+}
+//# sourceMappingURL=free-email-providers.js.map

package/dist/org/free-email-providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"free-email-providers.js","sourceRoot":"","sources":["../../src/org/free-email-providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC;IACtE,SAAS;IACT,WAAW;IACX,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,aAAa;IACb,UAAU;IACV,SAAS;IACT,eAAe;IACf,eAAe;IACf,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,WAAW;IACX,aAAa;IACb,aAAa;IACb,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,cAAc;IACd,cAAc;IACd,WAAW;IACX,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,gBAAgB;IAChB,SAAS;IACT,SAAS;IACT,oCAAoC;IACpC,WAAW;IACX,gBAAgB;IAChB,OAAO;IACP,cAAc;IACd,aAAa;IACb,SAAS;IACT,cAAc;IACd,aAAa;IACb,UAAU;IACV,SAAS;IACT,2BAA2B;IAC3B,YAAY;IACZ,WAAW;IACX,SAAS;IACT,SAAS;IACT,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,UAAU;IACV,SAAS;IACT,UAAU;IACV,sBAAsB;IACtB,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,UAAU;IACV,cAAc;IACd,gBAAgB;IAChB,UAAU;IACV,SAAS;IACT,aAAa;IACb,aAAa;IACb,eAAe;IACf,eAAe;IACf,SAAS;IACT,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,cAAc;IACd,SAAS;IACT,cAAc;IACd,iBAAiB;IACjB,SAAS;IACT,WAAW;IACX,YAAY;IACZ,aAAa;IACb,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,eAAe;IACf,aAAa;IACb,cAAc;IACd,mBAAmB;IACnB,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,2BAA2B,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACtE,CAAC","sourcesContent":["/**\n * Free / public mailbox providers that should NOT be allowed as an\n * organization's auto-join domain.\n *\n * Why: the auto-join feature lets anyone who signs up with an email at the\n * org's `allowed_domain` join the org without an invitation. That is safe\n * for company-owned domains (`acme.com`) — the company controls who gets\n * an `@acme.com` address. It is catastrophic for shared mailbox providers\n * (`gmail.com`, `outlook.com`, etc.) — anyone in the world can create a\n * matching address and would be auto-added to the org.\n *\n * The list intentionally errs on the side of well-known providers; if a\n * future provider isn't here we'll learn from a bug report rather than\n * pretend we have an exhaustive registry.\n */\nexport const FREE_EMAIL_PROVIDER_DOMAINS: ReadonlySet<string> = new Set([\n  // Google\n  \"gmail.com\",\n  \"googlemail.com\",\n  // Microsoft\n  \"outlook.com\",\n  \"hotmail.com\",\n  \"live.com\",\n  \"msn.com\",\n  \"outlook.co.uk\",\n  \"hotmail.co.uk\",\n  \"live.co.uk\",\n  \"outlook.de\",\n  \"hotmail.de\",\n  \"live.de\",\n  \"outlook.fr\",\n  \"hotmail.fr\",\n  \"live.fr\",\n  // Yahoo\n  \"yahoo.com\",\n  \"yahoo.co.uk\",\n  \"yahoo.co.jp\",\n  \"yahoo.fr\",\n  \"yahoo.de\",\n  \"yahoo.it\",\n  \"yahoo.es\",\n  \"yahoo.ca\",\n  \"yahoo.com.au\",\n  \"yahoo.com.br\",\n  \"ymail.com\",\n  \"rocketmail.com\",\n  // Apple\n  \"icloud.com\",\n  \"me.com\",\n  \"mac.com\",\n  // AOL / Verizon\n  \"aol.com\",\n  \"aim.com\",\n  // Privacy / disposable / forwarding\n  \"proton.me\",\n  \"protonmail.com\",\n  \"pm.me\",\n  \"tutanota.com\",\n  \"tutanota.de\",\n  \"tuta.io\",\n  \"fastmail.com\",\n  \"fastmail.fm\",\n  \"duck.com\",\n  \"hey.com\",\n  // Russian / Chinese majors\n  \"yandex.com\",\n  \"yandex.ru\",\n  \"mail.ru\",\n  \"list.ru\",\n  \"bk.ru\",\n  \"inbox.ru\",\n  \"qq.com\",\n  \"163.com\",\n  \"126.com\",\n  \"sina.com\",\n  \"sina.cn\",\n  \"sohu.com\",\n  // ISP / legacy / misc\n  \"gmx.com\",\n  \"gmx.de\",\n  \"gmx.net\",\n  \"web.de\",\n  \"t-online.de\",\n  \"freenet.de\",\n  \"zoho.com\",\n  \"zohomail.com\",\n  \"rediffmail.com\",\n  \"mail.com\",\n  \"att.net\",\n  \"comcast.net\",\n  \"verizon.net\",\n  \"sbcglobal.net\",\n  \"bellsouth.net\",\n  \"cox.net\",\n  \"earthlink.net\",\n  \"btinternet.com\",\n  \"btopenworld.com\",\n  \"talktalk.net\",\n  \"sky.com\",\n  \"ntlworld.com\",\n  \"virginmedia.com\",\n  \"free.fr\",\n  \"orange.fr\",\n  \"wanadoo.fr\",\n  \"laposte.net\",\n  \"libero.it\",\n  \"tiscali.it\",\n  \"uol.com.br\",\n  \"bol.com.br\",\n  \"terra.com.br\",\n  // Disposable\n  \"mailinator.com\",\n  \"guerrillamail.com\",\n  \"10minutemail.com\",\n  \"trashmail.com\",\n  \"yopmail.com\",\n  \"tempmail.com\",\n  \"throwawaymail.com\",\n  \"sharklasers.com\",\n]);\n\nexport function isFreeEmailProvider(domain: string): boolean {\n  return FREE_EMAIL_PROVIDER_DOMAINS.has(domain.trim().toLowerCase());\n}\n"]}

package/dist/org/handlers.d.ts

@@ -37,13 +37,23 @@ export declare const listMembersHandler: import("h3").EventHandlerWithFetch<impo
         joinedAt: number;
     }[];
 }>>;
-/** POST /_agent-native/org/invitations — invite a user by email */
-export declare const createInvitationHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+interface SingleInviteResult {
     id: string;
-    email: any;
-    status: string;
+    email: string;
+    role: "member" | "admin";
+    status: "pending";
     emailSent: boolean;
-    emailError: string;
+    emailError?: string;
+}
+interface SingleInviteFailure {
+    email: string;
+    error: string;
+}
+/** POST /_agent-native/org/invitations — invite one or many users by email */
+export declare const createInvitationHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<SingleInviteResult | {
+    succeeded: SingleInviteResult[];
+    failed: SingleInviteFailure[];
+    total: number;
 }>>;
 /** GET /_agent-native/org/invitations — list pending invitations for the org */
 export declare const listInvitationsHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
@@ -53,6 +63,7 @@ export declare const listInvitationsHandler: import("h3").EventHandlerWithFetch<
         invitedBy: string;
         createdAt: number;
         status: string;
+        role: string;
     }[];
 }>>;
 /** POST /_agent-native/org/invitations/:id/accept — accept an invitation */
@@ -65,6 +76,18 @@ export declare const acceptInvitationHandler: import("h3").EventHandlerWithFetch
 export declare const removeMemberHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     success: boolean;
 }>>;
+/**
+ * PUT /_agent-native/org/members/:email/role — change a member's role
+ * (owner/admin only). Body: { role: "admin" | "member" }.
+ *
+ * Only owners can promote/demote admins. (Admins can manage members but
+ * not other admins — otherwise an admin could escalate themselves to
+ * owner-equivalent control by promoting a confederate.)
+ */
+export declare const changeMemberRoleHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    email: string;
+    role: string;
+}>>;
 /** PATCH /_agent-native/org — rename the current organization (owner/admin only) */
 export declare const updateOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     orgId: string;
@@ -141,4 +164,5 @@ export declare const receiveA2ASecretHandler: import("h3").EventHandlerWithFetch
     ok: boolean;
     orgId: string;
 }>>;
+export {};
 //# sourceMappingURL=handlers.d.ts.map

package/dist/org/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/org/handlers.ts"],"names":[],"mappings":"AA4CA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AA2B1C,2FAA2F;AAC3F,eAAO,MAAM,eAAe;;;;;;;cAaA,OAAO;;;;;;;;;;eAIC,MAAM;iBAAW,MAAM;;;;GA0EzD,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB;;;;GAkC3B,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;;cAWH,OAAO;;;GAIjC,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;GA+EnC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,sBAAsB;;;;;;;;GAqBlC,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB;;;UAmD8B,OAAO;GAkBxE,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,mBAAmB;;GA2D/B,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,gBAAgB;;;GA4B3B,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB;;;UAkCC,OAAO;GAEnC,CAAC;AAEH,mGAAmG;AACnG,eAAO,MAAM,mBAAmB;;;UAqDR,OAAO;GAG9B,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB;;GA2C3B,CAAC;AAEH,oGAAoG;AACpG,eAAO,MAAM,mBAAmB;;;GA0C/B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB;;;;;YA2DvB,MAAM;cACJ,MAAM;aACP,MAAM;YACP,OAAO;iBACF,MAAM;gBACP,MAAM;;GAyDnB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB;;;GAgGnC,CAAC"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/org/handlers.ts"],"names":[],"mappings":"AA+CA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AA2B1C,2FAA2F;AAC3F,eAAO,MAAM,eAAe;;;;;;;cAaA,OAAO;;;;;;;;;;eAIC,MAAM;iBAAW,MAAM;;;;GA0EzD,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB;;;;GAkC3B,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;;cAWH,OAAO;;;GAIjC,CAAC;AAMH,UAAU,kBAAkB;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAsED,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB;;;;GAuEnC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,sBAAsB;;;;;;;;;GAyBlC,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB;;;UAoD8B,OAAO;GAkBxE,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,mBAAmB;;GA2D/B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;GAqEnC,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,gBAAgB;;;GA4B3B,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB;;;UAkCC,OAAO;GAEnC,CAAC;AAEH,mGAAmG;AACnG,eAAO,MAAM,mBAAmB;;;UAqDR,OAAO;GAG9B,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB;;GAsE3B,CAAC;AAEH,oGAAoG;AACpG,eAAO,MAAM,mBAAmB;;;GA0C/B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB;;;;;YA2DvB,MAAM;cACJ,MAAM;aACP,MAAM;YACP,OAAO;iBACF,MAAM;gBACP,MAAM;;GAyDnB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB;;;GAgGnC,CAAC"}