npm - @agent-native/core - Versions diffs - 0.98.17 → 0.99.1 - Mend

@agent-native/core 0.98.17 → 0.99.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (583) hide show

package/dist/mcp-client/remote-store.js CHANGED Viewed

@@ -322,19 +322,17 @@ async function addRemoteServerInternal(scope, scopeId, input) {
 function normalizeEndpointPath(pathname) {
     return pathname.replace(/\/+$/, "") || "/";
 }
-function expectedFirstPartyMcpUrl(appUrl) {
+function expectedFirstPartyMcpUrls(appUrl) {
     try {
-        return new URL(`${appUrl.replace(/\/+$/, "")}/_agent-native/mcp`);
+        const base = appUrl.replace(/\/+$/, "");
+        return [new URL(`${base}/mcp`), new URL(`${base}/_agent-native/mcp`)];
     }
     catch {
-        return null;
+        return [];
     }
 }
 function sameFirstPartyMcpEndpoint(endpointUrl, appUrl) {
-    const expected = expectedFirstPartyMcpUrl(appUrl);
-    if (!expected)
-        return false;
-    return (endpointUrl.origin === expected.origin &&
+    return expectedFirstPartyMcpUrls(appUrl).some((expected) => endpointUrl.origin === expected.origin &&
         normalizeEndpointPath(endpointUrl.pathname) ===
             normalizeEndpointPath(expected.pathname) &&
         endpointUrl.search === expected.search);

package/dist/mcp-client/remote-store.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"remote-store.js","sourceRoot":"","sources":["../../src/mcp-client/remote-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,cAAc,EACd,aAAa,EACb,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,aAAa,EACb,aAAa,EACb,gBAAgB,GACjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,cAAc,EACd,cAAc,EACd,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AAGtC,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAI1C,SAAS,aAAa,CAAC,KAAqB;IAC1C,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;AACjD,CAAC;AAsCD;;;;;GAKG;AACH,MAAM,2BAA2B,GAAG;IAClC,gBAAgB;IAChB,cAAc;IACd,QAAQ;IACR,SAAS;IACT,SAAS;IACT,WAAW;CACZ,CAAC;AAEF,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,4DAA4D;AAC5D,SAAS,gBAAgB,CAAC,OAA2C;IAInE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACjE,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QACpC,IAAI,kBAAkB,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;;YACpC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACpE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KAC5D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,OAAO;IACd,MAAM,IAAI,GACR,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK;SACT,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;SAClC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,yBAAyB,GAAa;IAC1C,cAAc;IACd,eAAe;IACf,WAAW;IACX,cAAc;IACd,sBAAsB;IACtB,aAAa;IACb,eAAe;IACf,aAAa;IACb,mBAAmB;IACnB,aAAa;IACb,uBAAuB;IACvB,+BAA+B;IAC/B,kBAAkB;CACnB,CAAC;AAEF,uEAAuE;AACvE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,iBAAiB,EAAE,qBAAqB;IACxC,iBAAiB,EAAE,yBAAyB;IAC5C,KAAK;CACN,CAAC,CAAC;AAEH,+EAA+E;AAC/E,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QACvD,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7B,aAAa;IACb,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACvD,gBAAgB;IAChB,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACvD,iBAAiB;IACjB,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACvD,yDAAyD;IACzD,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACvD,yBAAyB;IACzB,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,aAAa,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,iDAAiD;IACjD,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,QAAQ,GAAG,oCAAoC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GACT,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG;gBACb,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI;gBACrB,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI;gBACrB,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,IAAI;gBACpB,KAAK,GAAG,IAAI;aACb,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,IAAI,aAAa,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;QACzC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,yBAAyB,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAK3C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,SAAS,GAAG,CAAC,QAAQ,6CAA6C;aAC1E,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,KAAqB,EACrB,OAAe;IAEf,MAAM,GAAG,GACP,KAAK,KAAK,MAAM;QACd,CAAC,CAAC,MAAM,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC;QAC7C,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,GAAW,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5D,OAAS,GAAW,CAAC,OAAmC,CAAC,MAAM,CAC7D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAClE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,KAAqB,EACrB,OAAe,EACf,OAAgC;IAEhC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAqB,EACrB,OAAe;IAEf,OAAO,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAqB,EACrB,OAAe,EACf,KAMC;IAID,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,8FAA8F;SACjG,CAAC;IACJ,CAAC;IACD,OAAO,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAa,EACb,KAKC;IAID,MAAM,KAAK,GAAG,MAAM,iCAAiC,CACnD,KAAK,EACL,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,GAAG,CACV,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACxD,OAAO,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE;QAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,IAAI;QAChB,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;KAClD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,KAAqB,EACrB,OAAe,EACf,KAOC;IAID,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC3D,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;IAE3E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,IAAI,kBAAkB,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,OAAO,EAAE,EAAE,CAAC;IAC/B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE9D,mEAAmE;IACnE,oEAAoE;IACpE,IAAI,eAAmC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,eAAe,GAAG,eAAe,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,cAAc,CAAC;gBACnB,GAAG,EAAE,eAAe;gBACpB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;gBAC7B,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;gBAC3B,OAAO;gBACP,WAAW,EAAE,6BAA6B,IAAI,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,kCAAkC,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE;aAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAA0B;QACpC,EAAE;QACF,IAAI;QACJ,GAAG,EAAE,QAAQ,CAAC,GAAI,CAAC,QAAQ,EAAE;QAC7B,OAAO,EAAE,SAAS;QAClB,eAAe;QACf,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,eAAe;YACvB,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,SAAS;QACnD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAc;IAC9C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAgB,EAAE,MAAc;IACjE,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,CACL,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACtC,qBAAqB,CAAC,WAAW,CAAC,QAAQ,CAAC;YACzC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC1C,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CACvC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAAa,EACb,KAAa,EACb,QAAgB;IAEhB,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,WAAgB,CAAC;IACrB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QACvC,IAAI,YAAY,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;YAC3C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,2EAA2E;aAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,sEAAsE;IACxE,CAAC;IAED,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,eAAe,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,2DAA2D;SACnE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,mEAAmE;SACtE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAqB,EACrB,OAAe,EACf,EAAU;IAEV,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,MAAM,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,wEAAwE;IACxE,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,OAAO,EAAE,eAAe,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,eAAe,CAAC;gBACpB,GAAG,EAAE,OAAO,CAAC,eAAe;gBAC5B,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;gBAC3B,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,mDAAmD,OAAO,CAAC,eAAe,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CACrG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAqB,EACrB,OAAe,EACf,MAA6B;IAE7B,MAAM,MAAM,GAA2B,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IACrE,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;gBACjC,GAAG,EAAE,MAAM,CAAC,eAAe;gBAC3B,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;gBAC3B,OAAO;aACR,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAA2B,CAAC;gBAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,kDAAkD,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA6B;IAE7B,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,eAAe;YACxB,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAqB,EACrB,OAAe,EACf,MAA6B;IAE7B,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,eAAe;YACxB,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,KAAK,KAAK,KAAK;YACtC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE;YAC9B,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAqB,EACrB,MAA6B,EAC7B,OAAe;IAEf,MAAM,KAAK,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC7E,OAAO,GAAG,KAAK,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,aAAqB;IAErB,IAAI,GAAG,GAAG,aAAa,CAAC;IACxB,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IACD,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,KAAK,GAAmB,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,OAAO;QACL,KAAK;QACL,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACX,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;KACX,CAAC;AACJ,CAAC","sourcesContent":["/*\n Persistent store for user-added remote MCP servers.\n \n Servers added through the settings UI live in the framework's `settings`\n * table, keyed by scope:\n * - User scope: `u:<email>:mcp-servers-remote`\n * - Org scope: `o:<orgId>:mcp-servers-remote`\n \n Both scopes store the same shape — a list of `StoredRemoteMcpServer`\n * records. The running MCP manager merges this list with the file-based\n * `mcp.config.json` on startup and after every mutation.\n \n SECURITY: HTTP MCP servers commonly require a bearer token in the\n * `Authorization` header. Those values are written to the encrypted\n * `app_secrets` table (AES-256-GCM via writeAppSecret). The settings row\n * stores only the secret-key reference (`headerSecretKey`), not the raw\n * value. Callers retrieving headers must call `materializeHeaders` to\n * fetch the cleartext at request time. Legacy rows that wrote headers\n * cleartext into `headers` continue to work read-only — they should be\n * re-saved to migrate.\n /\n\nimport { createHash } from \"node:crypto\";\n\nimport type { SecretScope } from \"../secrets/register.js\";\nimport {\n writeAppSecret,\n readAppSecret,\n deleteAppSecret,\n} from \"../secrets/storage.js\";\nimport {\n getOrgSetting,\n putOrgSetting,\n deleteOrgSetting,\n} from \"../settings/org-settings.js\";\nimport {\n getUserSetting,\n putUserSetting,\n deleteUserSetting,\n} from \"../settings/user-settings.js\";\nimport type { McpHttpServerConfig } from \"./config.js\";\n\nconst SETTINGS_KEY = \"mcp-servers-remote\";\n\nexport type RemoteMcpScope = \"user\" \| \"org\";\n\nfunction toSecretScope(scope: RemoteMcpScope): SecretScope {\n return scope === \"user\" ? \"user\" : \"workspace\";\n}\n\nexport interface StoredRemoteMcpServer {\n /* Stable unique id — used for removal / URLs. /\n id: string;\n /* Human-readable name. Also used as the MCP server id (prefixed with scope). /\n name: string;\n /* Streamable HTTP MCP server URL. /\n url: string;\n /\n Optional non-secret headers to pass to the MCP server. SECURITY: secret\n * material (Authorization, X-Api-Key, …) is moved out of this field at\n * write time and stored encrypted in `app_secrets`; see\n * `headerSecretKey`. Legacy rows may still contain cleartext headers and\n * are honored read-only.\n /\n headers?: Record<string, string>;\n /\n Reference to the encrypted secret holding the JSON-stringified secret\n * headers map (e.g. `{\"Authorization\":\"Bearer …\"}`). Resolved at request\n * time via `readAppSecret`. Undefined when no secret-class headers were\n * supplied (or for legacy cleartext rows).\n /\n headerSecretKey?: string;\n /\n Trusted first-party Agent-Native app. Only framework-controlled\n * registrations should set this; management routes intentionally do not\n * expose it for arbitrary user-added MCP servers.\n /\n firstParty?: boolean;\n /* Canonical first-party app id from the org directory, e.g. `assets`. /\n firstPartyAppId?: string;\n /* Optional description shown in the UI. /\n description?: string;\n /* ms since epoch. /\n createdAt: number;\n}\n\n/\n Header names that are routed through the encrypted-at-rest secrets store\n * instead of being written to the plaintext `settings` row. Match is\n * case-insensitive and substring-based to catch one-off names like\n * `x-zapier-api-key`.\n /\nconst SECRET_HEADER_NAME_PATTERNS = [\n /authorization/i,\n /api[-_]?key/i,\n /token/i,\n /secret/i,\n /bearer/i,\n /x-.-key/i,\n];\n\nfunction isSecretHeaderName(name: string): boolean {\n return SECRET_HEADER_NAME_PATTERNS.some((re) => re.test(name));\n}\n\n/** Split a headers map into (cleartext, secret) buckets. /\nfunction partitionHeaders(headers: Record<string, string> \| undefined): {\n cleartext: Record<string, string> \| undefined;\n secret: Record<string, string> \| undefined;\n} {\n if (!headers) return { cleartext: undefined, secret: undefined };\n const cleartext: Record<string, string> = {};\n const secret: Record<string, string> = {};\n for (const [k, v] of Object.entries(headers)) {\n if (typeof v !== \"string\") continue;\n if (isSecretHeaderName(k)) secret[k] = v;\n else cleartext[k] = v;\n }\n return {\n cleartext: Object.keys(cleartext).length > 0 ? cleartext : undefined,\n secret: Object.keys(secret).length > 0 ? secret : undefined,\n };\n}\n\n/* Tiny nanoid — matches the inline helper used elsewhere in this package. /\nfunction shortId(): string {\n const rand =\n globalThis.crypto?.randomUUID?.().replace(/-/g, \"\") ??\n Math.random().toString(36).slice(2) + Date.now().toString(36);\n return rand.slice(0, 16);\n}\n\n/\n Validate a candidate MCP server name — used as a key in the merged config\n * and as part of the prefixed tool name (`mcp__<merged-key>__<tool>`).\n \n Allowed: letters, digits, hyphen; 1–40 chars. Lowercased. Underscores are\n * excluded on purpose — the merged-key format uses `_` as a separator between\n * `<scope>`, `<owner>`, and `<name>`, so allowing `_` in names would make the\n * parse ambiguous.\n /\nexport function normalizeServerName(input: string): string {\n return input\n .trim()\n .toLowerCase()\n .replace(/[^a-z0-9-]/g, \"-\")\n .slice(0, 40);\n}\n\n/\n Short, deterministic, URL-safe hash of an email. Used as the owner\n * discriminator in user-scope merged keys so two users with the same server\n * name don't collide in the global MCP manager.\n /\nexport function hashEmail(email: string): string {\n return createHash(\"sha256\")\n .update(email.toLowerCase().trim())\n .digest(\"hex\")\n .slice(0, 10);\n}\n\n/\n Sanitise an org id to the character set allowed in merged keys.\n * Org ids are already nanoid-style alphanumeric, but we normalise defensively.\n /\nfunction sanitiseOrgId(orgId: string): string {\n return orgId.toLowerCase().replace(/[^a-z0-9-]/g, \"-\");\n}\n\n/\n Hostname patterns that are always rejected to prevent SSRF via DNS rebinding\n * or well-known internal service names.\n /\nconst BLOCKED_HOSTNAME_PATTERNS: RegExp[] = [\n /^localhost$/i,\n /\\.localhost$/i,\n /\\.local$/i,\n /\\.internal$/i,\n // DNS rebind services\n /\\.nip\\.io$/i,\n /\\.sslip\\.io$/i,\n /\\.xip\\.io$/i,\n /\\.localtest\\.me$/i,\n /\\.lvh\\.me$/i,\n // Cloud metadata hosts\n /^metadata\\.google\\.internal$/i,\n /^instance-data$/i,\n];\n\n/* Literal IPs that are always rejected (cloud metadata endpoints). /\nconst BLOCKED_IPS = new Set([\n \"169.254.169.254\", // AWS/GCP/Azure IMDS\n \"100.100.100.200\", // Alibaba Cloud metadata\n \"::1\",\n]);\n\n/* Parse a dotted-decimal IPv4 string to a 32-bit integer for range checks. /\nfunction ipv4ToInt(ip: string): number \| null {\n const parts = ip.split(\".\");\n if (parts.length !== 4) return null;\n let n = 0;\n for (const part of parts) {\n const byte = parseInt(part, 10);\n if (isNaN(byte) \|\| byte < 0 \|\| byte > 255) return null;\n n = (n << 8) \| byte;\n }\n return n >>> 0;\n}\n\nfunction isPrivateIpv4(hostname: string): boolean {\n const n = ipv4ToInt(hostname);\n if (n === null) return false;\n // 10.0.0.0/8\n if ((n & 0xff000000) >>> 0 === 0x0a000000) return true;\n // 172.16.0.0/12\n if ((n & 0xfff00000) >>> 0 === 0xac100000) return true;\n // 192.168.0.0/16\n if ((n & 0xffff0000) >>> 0 === 0xc0a80000) return true;\n // 169.254.0.0/16 (link-local, includes AWS/GCP metadata)\n if ((n & 0xffff0000) >>> 0 === 0xa9fe0000) return true;\n // 127.0.0.0/8 (loopback)\n if ((n & 0xff000000) >>> 0 === 0x7f000000) return true;\n return false;\n}\n\nfunction isBlockedHostname(hostname: string): boolean {\n const normalized = hostname.toLowerCase().replace(/^\\[\|\\]$/g, \"\");\n if (BLOCKED_IPS.has(normalized)) return true;\n if (isPrivateIpv4(normalized)) return true;\n // IPv6 ULA (fc00::/7) and link-local (fe80::/10)\n if (normalized === \"::1\") return true;\n if (normalized.startsWith(\"fc\") \|\| normalized.startsWith(\"fd\")) return true;\n if (normalized.startsWith(\"fe80\")) return true;\n if (normalized.startsWith(\"::ffff:\")) {\n const mapped = normalized.slice(\"::ffff:\".length);\n if (isPrivateIpv4(mapped)) return true;\n const hexMatch = /^([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i.exec(mapped);\n if (hexMatch) {\n const value =\n (parseInt(hexMatch[1], 16) << 16) \| parseInt(hexMatch[2], 16);\n const dotted = [\n (value >>> 24) & 0xff,\n (value >>> 16) & 0xff,\n (value >>> 8) & 0xff,\n value & 0xff,\n ].join(\".\");\n if (isPrivateIpv4(dotted)) return true;\n }\n }\n for (const pattern of BLOCKED_HOSTNAME_PATTERNS) {\n if (pattern.test(normalized)) return true;\n }\n return false;\n}\n\n/* Reject obviously-wrong URLs. Allows http only for localhost. /\nexport function validateRemoteUrl(raw: string): {\n ok: boolean;\n url?: URL;\n error?: string;\n} {\n let url: URL;\n try {\n url = new URL(raw);\n } catch {\n return { ok: false, error: \"Not a valid URL\" };\n }\n if (url.protocol === \"https:\") {\n if (isBlockedHostname(url.hostname)) {\n return {\n ok: false,\n error: `Host \"${url.hostname}\" is not allowed (private/internal address)`,\n };\n }\n return { ok: true, url };\n }\n if (url.protocol === \"http:\") {\n const host = url.hostname;\n if (host === \"localhost\" \|\| host === \"127.0.0.1\") {\n return { ok: true, url };\n }\n return { ok: false, error: \"Plain http is only allowed for localhost\" };\n }\n return { ok: false, error: `Unsupported protocol: ${url.protocol}` };\n}\n\nasync function readList(\n scope: RemoteMcpScope,\n scopeId: string,\n): Promise<StoredRemoteMcpServer[]> {\n const raw =\n scope === \"user\"\n ? await getUserSetting(scopeId, SETTINGS_KEY)\n : await getOrgSetting(scopeId, SETTINGS_KEY);\n if (!raw \|\| !Array.isArray((raw as any).servers)) return [];\n return ((raw as any).servers as StoredRemoteMcpServer[]).filter(\n (s) => s && typeof s.id === \"string\" && typeof s.url === \"string\",\n );\n}\n\nasync function writeList(\n scope: RemoteMcpScope,\n scopeId: string,\n servers: StoredRemoteMcpServer[],\n): Promise<void> {\n if (scope === \"user\") {\n await putUserSetting(scopeId, SETTINGS_KEY, { servers });\n } else {\n await putOrgSetting(scopeId, SETTINGS_KEY, { servers });\n }\n}\n\nexport async function listRemoteServers(\n scope: RemoteMcpScope,\n scopeId: string,\n): Promise<StoredRemoteMcpServer[]> {\n return readList(scope, scopeId);\n}\n\nexport async function addRemoteServer(\n scope: RemoteMcpScope,\n scopeId: string,\n input: {\n name: string;\n url: string;\n headers?: Record<string, string>;\n description?: string;\n firstParty?: boolean;\n },\n): Promise<\n { ok: true; server: StoredRemoteMcpServer } \| { ok: false; error: string }\n> {\n if (input.firstParty) {\n return {\n ok: false,\n error:\n \"First-party MCP servers must be registered through the trusted first-party registration path\",\n };\n }\n return addRemoteServerInternal(scope, scopeId, input);\n}\n\nexport async function addFirstPartyRemoteServer(\n orgId: string,\n input: {\n appId: string;\n name: string;\n url: string;\n description?: string;\n },\n): Promise<\n { ok: true; server: StoredRemoteMcpServer } \| { ok: false; error: string }\n> {\n const trust = await isFirstPartyRemoteEndpointTrusted(\n orgId,\n input.appId,\n input.url,\n );\n if (!trust.ok) return { ok: false, error: trust.error };\n return addRemoteServerInternal(\"org\", orgId, {\n name: input.name,\n url: input.url,\n description: input.description,\n firstParty: true,\n firstPartyAppId: input.appId.trim().toLowerCase(),\n });\n}\n\nasync function addRemoteServerInternal(\n scope: RemoteMcpScope,\n scopeId: string,\n input: {\n name: string;\n url: string;\n headers?: Record<string, string>;\n description?: string;\n firstParty?: boolean;\n firstPartyAppId?: string;\n },\n): Promise<\n { ok: true; server: StoredRemoteMcpServer } \| { ok: false; error: string }\n> {\n const name = normalizeServerName(input.name);\n if (!name) return { ok: false, error: \"Name is required\" };\n if (input.firstParty && scope !== \"org\") {\n return { ok: false, error: \"First-party MCP servers must be org-scoped\" };\n }\n const urlCheck = validateRemoteUrl(input.url);\n if (!urlCheck.ok) return { ok: false, error: urlCheck.error ?? \"Bad URL\" };\n\n const existing = await readList(scope, scopeId);\n if (existing.some((s) => s.name === name)) {\n return { ok: false, error: `A server named \"${name}\" already exists` };\n }\n\n const id = `mcps_${shortId()}`;\n const { cleartext, secret } = partitionHeaders(input.headers);\n\n // Persist secret-class headers in the encrypted secrets table; the\n // settings row only references the secret key, never the cleartext.\n let headerSecretKey: string \| undefined;\n if (secret) {\n headerSecretKey = `mcp_headers:${id}`;\n try {\n await writeAppSecret({\n key: headerSecretKey,\n value: JSON.stringify(secret),\n scope: toSecretScope(scope),\n scopeId,\n description: `Encrypted MCP headers for ${name}`,\n });\n } catch (err: any) {\n return {\n ok: false,\n error: `Failed to encrypt MCP headers: ${err?.message ?? err}`,\n };\n }\n }\n\n const server: StoredRemoteMcpServer = {\n id,\n name,\n url: urlCheck.url!.toString(),\n headers: cleartext,\n headerSecretKey,\n ...(input.firstParty ? { firstParty: true } : {}),\n ...(input.firstPartyAppId\n ? { firstPartyAppId: input.firstPartyAppId }\n : {}),\n description: input.description?.trim() \|\| undefined,\n createdAt: Date.now(),\n };\n await writeList(scope, scopeId, [...existing, server]);\n return { ok: true, server };\n}\n\nfunction normalizeEndpointPath(pathname: string): string {\n return pathname.replace(/\\/+$/, \"\") \|\| \"/\";\n}\n\nfunction expectedFirstPartyMcpUrl(appUrl: string): URL \| null {\n try {\n return new URL(`${appUrl.replace(/\\/+$/, \"\")}/_agent-native/mcp`);\n } catch {\n return null;\n }\n}\n\nfunction sameFirstPartyMcpEndpoint(endpointUrl: URL, appUrl: string): boolean {\n const expected = expectedFirstPartyMcpUrl(appUrl);\n if (!expected) return false;\n return (\n endpointUrl.origin === expected.origin &&\n normalizeEndpointPath(endpointUrl.pathname) ===\n normalizeEndpointPath(expected.pathname) &&\n endpointUrl.search === expected.search\n );\n}\n\nexport async function isFirstPartyRemoteEndpointTrusted(\n orgId: string,\n appId: string,\n endpoint: string,\n): Promise<{ ok: true } \| { ok: false; error: string }> {\n const normalizedAppId = appId.trim().toLowerCase();\n if (!orgId.trim()) {\n return { ok: false, error: \"Organization id is required\" };\n }\n if (!normalizedAppId) {\n return { ok: false, error: \"First-party app id is required\" };\n }\n\n let endpointUrl: URL;\n try {\n endpointUrl = new URL(endpoint);\n } catch {\n return { ok: false, error: \"Not a valid URL\" };\n }\n\n try {\n const { getRequestOrgId } = await import(\"../server/request-context.js\");\n const requestOrgId = getRequestOrgId();\n if (requestOrgId && requestOrgId !== orgId) {\n return {\n ok: false,\n error:\n \"First-party MCP server org does not match the active request organization\",\n };\n }\n } catch {\n // No request context helper available: the org-directory lookup below will\n // still fail closed if it cannot authenticate a first-party app list.\n }\n\n const { fetchOrgApps } = await import(\"../mcp/org-directory.js\");\n const apps = await fetchOrgApps({ serviceOrgId: orgId });\n const app = apps.find((candidate) => candidate.id === normalizedAppId);\n if (!app) {\n return {\n ok: false,\n error: \"Could not verify the first-party app in the org directory\",\n };\n }\n if (!sameFirstPartyMcpEndpoint(endpointUrl, app.url)) {\n return {\n ok: false,\n error:\n \"First-party MCP URL does not match the org-directory app endpoint\",\n };\n }\n return { ok: true };\n}\n\nexport async function removeRemoteServer(\n scope: RemoteMcpScope,\n scopeId: string,\n id: string,\n): Promise<boolean> {\n const existing = await readList(scope, scopeId);\n const removed = existing.find((s) => s.id === id);\n const next = existing.filter((s) => s.id !== id);\n if (next.length === existing.length) return false;\n if (next.length === 0) {\n if (scope === \"user\") {\n await deleteUserSetting(scopeId, SETTINGS_KEY);\n } else {\n await deleteOrgSetting(scopeId, SETTINGS_KEY);\n }\n } else {\n await writeList(scope, scopeId, next);\n }\n // Best-effort: drop the encrypted-headers secret too. Errors are logged\n // but don't fail the deletion — the settings row is already gone, so a\n // dangling secret is harmless (it just can't be read back).\n if (removed?.headerSecretKey) {\n try {\n await deleteAppSecret({\n key: removed.headerSecretKey,\n scope: toSecretScope(scope),\n scopeId,\n });\n } catch (err: any) {\n // eslint-disable-next-line no-console\n console.warn(\n `[mcp-client] Failed to delete MCP header secret ${removed.headerSecretKey}: ${err?.message ?? err}`,\n );\n }\n }\n return true;\n}\n\n/\n Resolve the full headers map (cleartext + decrypted secret headers) for a\n * stored MCP server. Used when projecting the stored record into the\n * runtime `McpHttpServerConfig` shape that `McpClientManager` consumes.\n \n For legacy rows that wrote secrets cleartext into `headers`, this\n * returns those cleartext values unchanged — they should be re-saved\n * through `addRemoteServer` to migrate to encrypted storage.\n /\nexport async function materializeHeaders(\n scope: RemoteMcpScope,\n scopeId: string,\n stored: StoredRemoteMcpServer,\n): Promise<Record<string, string> \| undefined> {\n const merged: Record<string, string> = { ...(stored.headers ?? {}) };\n if (stored.headerSecretKey) {\n try {\n const secret = await readAppSecret({\n key: stored.headerSecretKey,\n scope: toSecretScope(scope),\n scopeId,\n });\n if (secret) {\n const parsed = JSON.parse(secret.value) as Record<string, string>;\n for (const [k, v] of Object.entries(parsed)) {\n if (typeof v === \"string\") merged[k] = v;\n }\n }\n } catch (err: any) {\n // eslint-disable-next-line no-console\n console.warn(\n `[mcp-client] Failed to decrypt MCP headers for ${stored.name}: ${err?.message ?? err}`,\n );\n }\n }\n return Object.keys(merged).length > 0 ? merged : undefined;\n}\n\n/\n Project a stored server into the runtime `McpHttpServerConfig` shape that\n * `McpClientManager` consumes. The merged-config key is the scope + name\n * so a user-scope and org-scope server can both share a readable name\n * without clobbering each other.\n \n SECURITY: when the stored row references encrypted headers\n * (`headerSecretKey`), callers should use `toHttpServerConfigAsync`\n * instead — this synchronous variant returns ONLY the cleartext headers\n * already present on the row. Returning the row's literal headers without\n * the secret material means the runtime client would call the MCP server\n * without auth (request will fail), but never leaks the encrypted secret.\n /\nexport function toHttpServerConfig(\n stored: StoredRemoteMcpServer,\n): McpHttpServerConfig {\n return {\n type: \"http\",\n url: stored.url,\n headers: stored.headers,\n ...(stored.firstParty ? { firstParty: true } : {}),\n ...(stored.firstPartyAppId\n ? { firstPartyAppId: stored.firstPartyAppId }\n : {}),\n description: stored.description,\n };\n}\n\n/\n Async variant of `toHttpServerConfig` that resolves any encrypted\n * `headerSecretKey` reference from `app_secrets` and returns the full\n * cleartext headers map for use at runtime. Use this when actually\n * configuring an MCP client; use the sync variant only when serializing\n * stored data (e.g. for read-only listings that shouldn't disclose\n * secrets).\n /\nexport async function toHttpServerConfigAsync(\n scope: RemoteMcpScope,\n scopeId: string,\n stored: StoredRemoteMcpServer,\n): Promise<McpHttpServerConfig> {\n return {\n type: \"http\",\n url: stored.url,\n headers: await materializeHeaders(scope, scopeId, stored),\n ...(stored.firstParty ? { firstParty: true } : {}),\n ...(stored.firstPartyAppId\n ? { firstPartyAppId: stored.firstPartyAppId }\n : {}),\n ...(stored.firstParty && scope === \"org\"\n ? { firstPartyOrgId: scopeId }\n : {}),\n description: stored.description,\n };\n}\n\n/\n Build the merged-config key for a stored server.\n \n The key encodes the owning scope + owner identity so two users adding a\n * server called `zapier` produce distinct ids (`user_ab12cd34ef_zapier` vs\n * `user_99aa88bb77_zapier`) and Alice's tool calls never route through Bob's\n * credentials in a shared-process deployment.\n \n - User scope: `user_<emailhash>_<name>`\n * - Org scope: `org_<orgId>_<name>`\n \n `ownerId` is the raw email for user scope, and the org id for org scope.\n /\nexport function mergedConfigKey(\n scope: RemoteMcpScope,\n stored: StoredRemoteMcpServer,\n ownerId: string,\n): string {\n const owner = scope === \"user\" ? hashEmail(ownerId) : sanitiseOrgId(ownerId);\n return `${scope}_${owner}_${stored.name}`;\n}\n\n/\n Parse a merged key (or a full prefixed tool name like\n * `mcp__user_abcd1234ef_zapier__run-task`) back into its scope + owner + name\n * components. Returns null for non-merged keys (e.g. stdio file-config servers\n * like `claude-in-chrome`) so callers can treat them as always-visible.\n \n `hub_<orgId>_<name>` entries (pulled from a remote hub via\n * `hub-client.ts`) project to `scope: \"org\"` so they pass through the same\n * per-request visibility gate as locally-stored org servers — the tool is\n * only visible to requests whose active org matches the hub entry's org.\n */\nexport function parseMergedKey(\n keyOrToolName: string,\n): { scope: RemoteMcpScope; owner: string; name: string } \| null {\n let key = keyOrToolName;\n if (key.startsWith(\"mcp__\")) {\n const rest = key.slice(\"mcp__\".length);\n const idx = rest.indexOf(\"__\");\n key = idx >= 0 ? rest.slice(0, idx) : rest;\n }\n const m = /^(user\|org\|hub)_([^_]+)_(.+)$/.exec(key);\n if (!m) return null;\n const prefix = m[1];\n // Hub-sourced servers are scoped to the org they came from — treat them\n // as org-scope for visibility purposes (see isMcpToolAllowedForRequest).\n const scope: RemoteMcpScope = prefix === \"user\" ? \"user\" : \"org\";\n return {\n scope,\n owner: m[2],\n name: m[3],\n };\n}\n"]}
1	+ {"version":3,"file":"remote-store.js","sourceRoot":"","sources":["../../src/mcp-client/remote-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,cAAc,EACd,aAAa,EACb,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,aAAa,EACb,aAAa,EACb,gBAAgB,GACjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,cAAc,EACd,cAAc,EACd,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AAGtC,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAI1C,SAAS,aAAa,CAAC,KAAqB;IAC1C,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;AACjD,CAAC;AAsCD;;;;;GAKG;AACH,MAAM,2BAA2B,GAAG;IAClC,gBAAgB;IAChB,cAAc;IACd,QAAQ;IACR,SAAS;IACT,SAAS;IACT,WAAW;CACZ,CAAC;AAEF,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,4DAA4D;AAC5D,SAAS,gBAAgB,CAAC,OAA2C;IAInE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACjE,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QACpC,IAAI,kBAAkB,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;;YACpC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACpE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KAC5D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,OAAO;IACd,MAAM,IAAI,GACR,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK;SACT,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;SAClC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,yBAAyB,GAAa;IAC1C,cAAc;IACd,eAAe;IACf,WAAW;IACX,cAAc;IACd,sBAAsB;IACtB,aAAa;IACb,eAAe;IACf,aAAa;IACb,mBAAmB;IACnB,aAAa;IACb,uBAAuB;IACvB,+BAA+B;IAC/B,kBAAkB;CACnB,CAAC;AAEF,uEAAuE;AACvE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,iBAAiB,EAAE,qBAAqB;IACxC,iBAAiB,EAAE,yBAAyB;IAC5C,KAAK;CACN,CAAC,CAAC;AAEH,+EAA+E;AAC/E,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QACvD,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7B,aAAa;IACb,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACvD,gBAAgB;IAChB,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACvD,iBAAiB;IACjB,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACvD,yDAAyD;IACzD,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACvD,yBAAyB;IACzB,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,aAAa,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,iDAAiD;IACjD,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,QAAQ,GAAG,oCAAoC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GACT,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG;gBACb,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI;gBACrB,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI;gBACrB,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,IAAI;gBACpB,KAAK,GAAG,IAAI;aACb,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,IAAI,aAAa,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;QACzC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,yBAAyB,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAK3C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,SAAS,GAAG,CAAC,QAAQ,6CAA6C;aAC1E,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,KAAqB,EACrB,OAAe;IAEf,MAAM,GAAG,GACP,KAAK,KAAK,MAAM;QACd,CAAC,CAAC,MAAM,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC;QAC7C,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,GAAW,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5D,OAAS,GAAW,CAAC,OAAmC,CAAC,MAAM,CAC7D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAClE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,KAAqB,EACrB,OAAe,EACf,OAAgC;IAEhC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAqB,EACrB,OAAe;IAEf,OAAO,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAqB,EACrB,OAAe,EACf,KAMC;IAID,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,8FAA8F;SACjG,CAAC;IACJ,CAAC;IACD,OAAO,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAa,EACb,KAKC;IAID,MAAM,KAAK,GAAG,MAAM,iCAAiC,CACnD,KAAK,EACL,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,GAAG,CACV,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACxD,OAAO,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE;QAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,IAAI;QAChB,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;KAClD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,KAAqB,EACrB,OAAe,EACf,KAOC;IAID,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC3D,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;IAE3E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,IAAI,kBAAkB,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,OAAO,EAAE,EAAE,CAAC;IAC/B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE9D,mEAAmE;IACnE,oEAAoE;IACpE,IAAI,eAAmC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,eAAe,GAAG,eAAe,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,cAAc,CAAC;gBACnB,GAAG,EAAE,eAAe;gBACpB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;gBAC7B,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;gBAC3B,OAAO;gBACP,WAAW,EAAE,6BAA6B,IAAI,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,kCAAkC,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE;aAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAA0B;QACpC,EAAE;QACF,IAAI;QACJ,GAAG,EAAE,QAAQ,CAAC,GAAI,CAAC,QAAQ,EAAE;QAC7B,OAAO,EAAE,SAAS;QAClB,eAAe;QACf,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,eAAe;YACvB,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,SAAS;QACnD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAc;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAgB,EAAE,MAAc;IACjE,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC,IAAI,CAC3C,CAAC,QAAQ,EAAE,EAAE,CACX,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACtC,qBAAqB,CAAC,WAAW,CAAC,QAAQ,CAAC;YACzC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC1C,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAAa,EACb,KAAa,EACb,QAAgB;IAEhB,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,WAAgB,CAAC;IACrB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QACvC,IAAI,YAAY,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;YAC3C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,2EAA2E;aAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,sEAAsE;IACxE,CAAC;IAED,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,eAAe,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,2DAA2D;SACnE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,mEAAmE;SACtE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAqB,EACrB,OAAe,EACf,EAAU;IAEV,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,MAAM,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,wEAAwE;IACxE,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,OAAO,EAAE,eAAe,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,eAAe,CAAC;gBACpB,GAAG,EAAE,OAAO,CAAC,eAAe;gBAC5B,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;gBAC3B,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,mDAAmD,OAAO,CAAC,eAAe,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CACrG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAqB,EACrB,OAAe,EACf,MAA6B;IAE7B,MAAM,MAAM,GAA2B,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IACrE,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;gBACjC,GAAG,EAAE,MAAM,CAAC,eAAe;gBAC3B,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;gBAC3B,OAAO;aACR,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAA2B,CAAC;gBAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,kDAAkD,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA6B;IAE7B,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,eAAe;YACxB,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAqB,EACrB,OAAe,EACf,MAA6B;IAE7B,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,eAAe;YACxB,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,KAAK,KAAK,KAAK;YACtC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE;YAC9B,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAqB,EACrB,MAA6B,EAC7B,OAAe;IAEf,MAAM,KAAK,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC7E,OAAO,GAAG,KAAK,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,aAAqB;IAErB,IAAI,GAAG,GAAG,aAAa,CAAC;IACxB,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IACD,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,KAAK,GAAmB,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,OAAO;QACL,KAAK;QACL,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACX,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;KACX,CAAC;AACJ,CAAC","sourcesContent":["/*\n Persistent store for user-added remote MCP servers.\n \n Servers added through the settings UI live in the framework's `settings`\n * table, keyed by scope:\n * - User scope: `u:<email>:mcp-servers-remote`\n * - Org scope: `o:<orgId>:mcp-servers-remote`\n \n Both scopes store the same shape — a list of `StoredRemoteMcpServer`\n * records. The running MCP manager merges this list with the file-based\n * `mcp.config.json` on startup and after every mutation.\n \n SECURITY: HTTP MCP servers commonly require a bearer token in the\n * `Authorization` header. Those values are written to the encrypted\n * `app_secrets` table (AES-256-GCM via writeAppSecret). The settings row\n * stores only the secret-key reference (`headerSecretKey`), not the raw\n * value. Callers retrieving headers must call `materializeHeaders` to\n * fetch the cleartext at request time. Legacy rows that wrote headers\n * cleartext into `headers` continue to work read-only — they should be\n * re-saved to migrate.\n /\n\nimport { createHash } from \"node:crypto\";\n\nimport type { SecretScope } from \"../secrets/register.js\";\nimport {\n writeAppSecret,\n readAppSecret,\n deleteAppSecret,\n} from \"../secrets/storage.js\";\nimport {\n getOrgSetting,\n putOrgSetting,\n deleteOrgSetting,\n} from \"../settings/org-settings.js\";\nimport {\n getUserSetting,\n putUserSetting,\n deleteUserSetting,\n} from \"../settings/user-settings.js\";\nimport type { McpHttpServerConfig } from \"./config.js\";\n\nconst SETTINGS_KEY = \"mcp-servers-remote\";\n\nexport type RemoteMcpScope = \"user\" \| \"org\";\n\nfunction toSecretScope(scope: RemoteMcpScope): SecretScope {\n return scope === \"user\" ? \"user\" : \"workspace\";\n}\n\nexport interface StoredRemoteMcpServer {\n /* Stable unique id — used for removal / URLs. /\n id: string;\n /* Human-readable name. Also used as the MCP server id (prefixed with scope). /\n name: string;\n /* Streamable HTTP MCP server URL. /\n url: string;\n /\n Optional non-secret headers to pass to the MCP server. SECURITY: secret\n * material (Authorization, X-Api-Key, …) is moved out of this field at\n * write time and stored encrypted in `app_secrets`; see\n * `headerSecretKey`. Legacy rows may still contain cleartext headers and\n * are honored read-only.\n /\n headers?: Record<string, string>;\n /\n Reference to the encrypted secret holding the JSON-stringified secret\n * headers map (e.g. `{\"Authorization\":\"Bearer …\"}`). Resolved at request\n * time via `readAppSecret`. Undefined when no secret-class headers were\n * supplied (or for legacy cleartext rows).\n /\n headerSecretKey?: string;\n /\n Trusted first-party Agent-Native app. Only framework-controlled\n * registrations should set this; management routes intentionally do not\n * expose it for arbitrary user-added MCP servers.\n /\n firstParty?: boolean;\n /* Canonical first-party app id from the org directory, e.g. `assets`. /\n firstPartyAppId?: string;\n /* Optional description shown in the UI. /\n description?: string;\n /* ms since epoch. /\n createdAt: number;\n}\n\n/\n Header names that are routed through the encrypted-at-rest secrets store\n * instead of being written to the plaintext `settings` row. Match is\n * case-insensitive and substring-based to catch one-off names like\n * `x-zapier-api-key`.\n /\nconst SECRET_HEADER_NAME_PATTERNS = [\n /authorization/i,\n /api[-_]?key/i,\n /token/i,\n /secret/i,\n /bearer/i,\n /x-.-key/i,\n];\n\nfunction isSecretHeaderName(name: string): boolean {\n return SECRET_HEADER_NAME_PATTERNS.some((re) => re.test(name));\n}\n\n/** Split a headers map into (cleartext, secret) buckets. /\nfunction partitionHeaders(headers: Record<string, string> \| undefined): {\n cleartext: Record<string, string> \| undefined;\n secret: Record<string, string> \| undefined;\n} {\n if (!headers) return { cleartext: undefined, secret: undefined };\n const cleartext: Record<string, string> = {};\n const secret: Record<string, string> = {};\n for (const [k, v] of Object.entries(headers)) {\n if (typeof v !== \"string\") continue;\n if (isSecretHeaderName(k)) secret[k] = v;\n else cleartext[k] = v;\n }\n return {\n cleartext: Object.keys(cleartext).length > 0 ? cleartext : undefined,\n secret: Object.keys(secret).length > 0 ? secret : undefined,\n };\n}\n\n/* Tiny nanoid — matches the inline helper used elsewhere in this package. /\nfunction shortId(): string {\n const rand =\n globalThis.crypto?.randomUUID?.().replace(/-/g, \"\") ??\n Math.random().toString(36).slice(2) + Date.now().toString(36);\n return rand.slice(0, 16);\n}\n\n/\n Validate a candidate MCP server name — used as a key in the merged config\n * and as part of the prefixed tool name (`mcp__<merged-key>__<tool>`).\n \n Allowed: letters, digits, hyphen; 1–40 chars. Lowercased. Underscores are\n * excluded on purpose — the merged-key format uses `_` as a separator between\n * `<scope>`, `<owner>`, and `<name>`, so allowing `_` in names would make the\n * parse ambiguous.\n /\nexport function normalizeServerName(input: string): string {\n return input\n .trim()\n .toLowerCase()\n .replace(/[^a-z0-9-]/g, \"-\")\n .slice(0, 40);\n}\n\n/\n Short, deterministic, URL-safe hash of an email. Used as the owner\n * discriminator in user-scope merged keys so two users with the same server\n * name don't collide in the global MCP manager.\n /\nexport function hashEmail(email: string): string {\n return createHash(\"sha256\")\n .update(email.toLowerCase().trim())\n .digest(\"hex\")\n .slice(0, 10);\n}\n\n/\n Sanitise an org id to the character set allowed in merged keys.\n * Org ids are already nanoid-style alphanumeric, but we normalise defensively.\n /\nfunction sanitiseOrgId(orgId: string): string {\n return orgId.toLowerCase().replace(/[^a-z0-9-]/g, \"-\");\n}\n\n/\n Hostname patterns that are always rejected to prevent SSRF via DNS rebinding\n * or well-known internal service names.\n /\nconst BLOCKED_HOSTNAME_PATTERNS: RegExp[] = [\n /^localhost$/i,\n /\\.localhost$/i,\n /\\.local$/i,\n /\\.internal$/i,\n // DNS rebind services\n /\\.nip\\.io$/i,\n /\\.sslip\\.io$/i,\n /\\.xip\\.io$/i,\n /\\.localtest\\.me$/i,\n /\\.lvh\\.me$/i,\n // Cloud metadata hosts\n /^metadata\\.google\\.internal$/i,\n /^instance-data$/i,\n];\n\n/* Literal IPs that are always rejected (cloud metadata endpoints). /\nconst BLOCKED_IPS = new Set([\n \"169.254.169.254\", // AWS/GCP/Azure IMDS\n \"100.100.100.200\", // Alibaba Cloud metadata\n \"::1\",\n]);\n\n/* Parse a dotted-decimal IPv4 string to a 32-bit integer for range checks. /\nfunction ipv4ToInt(ip: string): number \| null {\n const parts = ip.split(\".\");\n if (parts.length !== 4) return null;\n let n = 0;\n for (const part of parts) {\n const byte = parseInt(part, 10);\n if (isNaN(byte) \|\| byte < 0 \|\| byte > 255) return null;\n n = (n << 8) \| byte;\n }\n return n >>> 0;\n}\n\nfunction isPrivateIpv4(hostname: string): boolean {\n const n = ipv4ToInt(hostname);\n if (n === null) return false;\n // 10.0.0.0/8\n if ((n & 0xff000000) >>> 0 === 0x0a000000) return true;\n // 172.16.0.0/12\n if ((n & 0xfff00000) >>> 0 === 0xac100000) return true;\n // 192.168.0.0/16\n if ((n & 0xffff0000) >>> 0 === 0xc0a80000) return true;\n // 169.254.0.0/16 (link-local, includes AWS/GCP metadata)\n if ((n & 0xffff0000) >>> 0 === 0xa9fe0000) return true;\n // 127.0.0.0/8 (loopback)\n if ((n & 0xff000000) >>> 0 === 0x7f000000) return true;\n return false;\n}\n\nfunction isBlockedHostname(hostname: string): boolean {\n const normalized = hostname.toLowerCase().replace(/^\\[\|\\]$/g, \"\");\n if (BLOCKED_IPS.has(normalized)) return true;\n if (isPrivateIpv4(normalized)) return true;\n // IPv6 ULA (fc00::/7) and link-local (fe80::/10)\n if (normalized === \"::1\") return true;\n if (normalized.startsWith(\"fc\") \|\| normalized.startsWith(\"fd\")) return true;\n if (normalized.startsWith(\"fe80\")) return true;\n if (normalized.startsWith(\"::ffff:\")) {\n const mapped = normalized.slice(\"::ffff:\".length);\n if (isPrivateIpv4(mapped)) return true;\n const hexMatch = /^([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i.exec(mapped);\n if (hexMatch) {\n const value =\n (parseInt(hexMatch[1], 16) << 16) \| parseInt(hexMatch[2], 16);\n const dotted = [\n (value >>> 24) & 0xff,\n (value >>> 16) & 0xff,\n (value >>> 8) & 0xff,\n value & 0xff,\n ].join(\".\");\n if (isPrivateIpv4(dotted)) return true;\n }\n }\n for (const pattern of BLOCKED_HOSTNAME_PATTERNS) {\n if (pattern.test(normalized)) return true;\n }\n return false;\n}\n\n/* Reject obviously-wrong URLs. Allows http only for localhost. /\nexport function validateRemoteUrl(raw: string): {\n ok: boolean;\n url?: URL;\n error?: string;\n} {\n let url: URL;\n try {\n url = new URL(raw);\n } catch {\n return { ok: false, error: \"Not a valid URL\" };\n }\n if (url.protocol === \"https:\") {\n if (isBlockedHostname(url.hostname)) {\n return {\n ok: false,\n error: `Host \"${url.hostname}\" is not allowed (private/internal address)`,\n };\n }\n return { ok: true, url };\n }\n if (url.protocol === \"http:\") {\n const host = url.hostname;\n if (host === \"localhost\" \|\| host === \"127.0.0.1\") {\n return { ok: true, url };\n }\n return { ok: false, error: \"Plain http is only allowed for localhost\" };\n }\n return { ok: false, error: `Unsupported protocol: ${url.protocol}` };\n}\n\nasync function readList(\n scope: RemoteMcpScope,\n scopeId: string,\n): Promise<StoredRemoteMcpServer[]> {\n const raw =\n scope === \"user\"\n ? await getUserSetting(scopeId, SETTINGS_KEY)\n : await getOrgSetting(scopeId, SETTINGS_KEY);\n if (!raw \|\| !Array.isArray((raw as any).servers)) return [];\n return ((raw as any).servers as StoredRemoteMcpServer[]).filter(\n (s) => s && typeof s.id === \"string\" && typeof s.url === \"string\",\n );\n}\n\nasync function writeList(\n scope: RemoteMcpScope,\n scopeId: string,\n servers: StoredRemoteMcpServer[],\n): Promise<void> {\n if (scope === \"user\") {\n await putUserSetting(scopeId, SETTINGS_KEY, { servers });\n } else {\n await putOrgSetting(scopeId, SETTINGS_KEY, { servers });\n }\n}\n\nexport async function listRemoteServers(\n scope: RemoteMcpScope,\n scopeId: string,\n): Promise<StoredRemoteMcpServer[]> {\n return readList(scope, scopeId);\n}\n\nexport async function addRemoteServer(\n scope: RemoteMcpScope,\n scopeId: string,\n input: {\n name: string;\n url: string;\n headers?: Record<string, string>;\n description?: string;\n firstParty?: boolean;\n },\n): Promise<\n { ok: true; server: StoredRemoteMcpServer } \| { ok: false; error: string }\n> {\n if (input.firstParty) {\n return {\n ok: false,\n error:\n \"First-party MCP servers must be registered through the trusted first-party registration path\",\n };\n }\n return addRemoteServerInternal(scope, scopeId, input);\n}\n\nexport async function addFirstPartyRemoteServer(\n orgId: string,\n input: {\n appId: string;\n name: string;\n url: string;\n description?: string;\n },\n): Promise<\n { ok: true; server: StoredRemoteMcpServer } \| { ok: false; error: string }\n> {\n const trust = await isFirstPartyRemoteEndpointTrusted(\n orgId,\n input.appId,\n input.url,\n );\n if (!trust.ok) return { ok: false, error: trust.error };\n return addRemoteServerInternal(\"org\", orgId, {\n name: input.name,\n url: input.url,\n description: input.description,\n firstParty: true,\n firstPartyAppId: input.appId.trim().toLowerCase(),\n });\n}\n\nasync function addRemoteServerInternal(\n scope: RemoteMcpScope,\n scopeId: string,\n input: {\n name: string;\n url: string;\n headers?: Record<string, string>;\n description?: string;\n firstParty?: boolean;\n firstPartyAppId?: string;\n },\n): Promise<\n { ok: true; server: StoredRemoteMcpServer } \| { ok: false; error: string }\n> {\n const name = normalizeServerName(input.name);\n if (!name) return { ok: false, error: \"Name is required\" };\n if (input.firstParty && scope !== \"org\") {\n return { ok: false, error: \"First-party MCP servers must be org-scoped\" };\n }\n const urlCheck = validateRemoteUrl(input.url);\n if (!urlCheck.ok) return { ok: false, error: urlCheck.error ?? \"Bad URL\" };\n\n const existing = await readList(scope, scopeId);\n if (existing.some((s) => s.name === name)) {\n return { ok: false, error: `A server named \"${name}\" already exists` };\n }\n\n const id = `mcps_${shortId()}`;\n const { cleartext, secret } = partitionHeaders(input.headers);\n\n // Persist secret-class headers in the encrypted secrets table; the\n // settings row only references the secret key, never the cleartext.\n let headerSecretKey: string \| undefined;\n if (secret) {\n headerSecretKey = `mcp_headers:${id}`;\n try {\n await writeAppSecret({\n key: headerSecretKey,\n value: JSON.stringify(secret),\n scope: toSecretScope(scope),\n scopeId,\n description: `Encrypted MCP headers for ${name}`,\n });\n } catch (err: any) {\n return {\n ok: false,\n error: `Failed to encrypt MCP headers: ${err?.message ?? err}`,\n };\n }\n }\n\n const server: StoredRemoteMcpServer = {\n id,\n name,\n url: urlCheck.url!.toString(),\n headers: cleartext,\n headerSecretKey,\n ...(input.firstParty ? { firstParty: true } : {}),\n ...(input.firstPartyAppId\n ? { firstPartyAppId: input.firstPartyAppId }\n : {}),\n description: input.description?.trim() \|\| undefined,\n createdAt: Date.now(),\n };\n await writeList(scope, scopeId, [...existing, server]);\n return { ok: true, server };\n}\n\nfunction normalizeEndpointPath(pathname: string): string {\n return pathname.replace(/\\/+$/, \"\") \|\| \"/\";\n}\n\nfunction expectedFirstPartyMcpUrls(appUrl: string): URL[] {\n try {\n const base = appUrl.replace(/\\/+$/, \"\");\n return [new URL(`${base}/mcp`), new URL(`${base}/_agent-native/mcp`)];\n } catch {\n return [];\n }\n}\n\nfunction sameFirstPartyMcpEndpoint(endpointUrl: URL, appUrl: string): boolean {\n return expectedFirstPartyMcpUrls(appUrl).some(\n (expected) =>\n endpointUrl.origin === expected.origin &&\n normalizeEndpointPath(endpointUrl.pathname) ===\n normalizeEndpointPath(expected.pathname) &&\n endpointUrl.search === expected.search,\n );\n}\n\nexport async function isFirstPartyRemoteEndpointTrusted(\n orgId: string,\n appId: string,\n endpoint: string,\n): Promise<{ ok: true } \| { ok: false; error: string }> {\n const normalizedAppId = appId.trim().toLowerCase();\n if (!orgId.trim()) {\n return { ok: false, error: \"Organization id is required\" };\n }\n if (!normalizedAppId) {\n return { ok: false, error: \"First-party app id is required\" };\n }\n\n let endpointUrl: URL;\n try {\n endpointUrl = new URL(endpoint);\n } catch {\n return { ok: false, error: \"Not a valid URL\" };\n }\n\n try {\n const { getRequestOrgId } = await import(\"../server/request-context.js\");\n const requestOrgId = getRequestOrgId();\n if (requestOrgId && requestOrgId !== orgId) {\n return {\n ok: false,\n error:\n \"First-party MCP server org does not match the active request organization\",\n };\n }\n } catch {\n // No request context helper available: the org-directory lookup below will\n // still fail closed if it cannot authenticate a first-party app list.\n }\n\n const { fetchOrgApps } = await import(\"../mcp/org-directory.js\");\n const apps = await fetchOrgApps({ serviceOrgId: orgId });\n const app = apps.find((candidate) => candidate.id === normalizedAppId);\n if (!app) {\n return {\n ok: false,\n error: \"Could not verify the first-party app in the org directory\",\n };\n }\n if (!sameFirstPartyMcpEndpoint(endpointUrl, app.url)) {\n return {\n ok: false,\n error:\n \"First-party MCP URL does not match the org-directory app endpoint\",\n };\n }\n return { ok: true };\n}\n\nexport async function removeRemoteServer(\n scope: RemoteMcpScope,\n scopeId: string,\n id: string,\n): Promise<boolean> {\n const existing = await readList(scope, scopeId);\n const removed = existing.find((s) => s.id === id);\n const next = existing.filter((s) => s.id !== id);\n if (next.length === existing.length) return false;\n if (next.length === 0) {\n if (scope === \"user\") {\n await deleteUserSetting(scopeId, SETTINGS_KEY);\n } else {\n await deleteOrgSetting(scopeId, SETTINGS_KEY);\n }\n } else {\n await writeList(scope, scopeId, next);\n }\n // Best-effort: drop the encrypted-headers secret too. Errors are logged\n // but don't fail the deletion — the settings row is already gone, so a\n // dangling secret is harmless (it just can't be read back).\n if (removed?.headerSecretKey) {\n try {\n await deleteAppSecret({\n key: removed.headerSecretKey,\n scope: toSecretScope(scope),\n scopeId,\n });\n } catch (err: any) {\n // eslint-disable-next-line no-console\n console.warn(\n `[mcp-client] Failed to delete MCP header secret ${removed.headerSecretKey}: ${err?.message ?? err}`,\n );\n }\n }\n return true;\n}\n\n/\n Resolve the full headers map (cleartext + decrypted secret headers) for a\n * stored MCP server. Used when projecting the stored record into the\n * runtime `McpHttpServerConfig` shape that `McpClientManager` consumes.\n \n For legacy rows that wrote secrets cleartext into `headers`, this\n * returns those cleartext values unchanged — they should be re-saved\n * through `addRemoteServer` to migrate to encrypted storage.\n /\nexport async function materializeHeaders(\n scope: RemoteMcpScope,\n scopeId: string,\n stored: StoredRemoteMcpServer,\n): Promise<Record<string, string> \| undefined> {\n const merged: Record<string, string> = { ...(stored.headers ?? {}) };\n if (stored.headerSecretKey) {\n try {\n const secret = await readAppSecret({\n key: stored.headerSecretKey,\n scope: toSecretScope(scope),\n scopeId,\n });\n if (secret) {\n const parsed = JSON.parse(secret.value) as Record<string, string>;\n for (const [k, v] of Object.entries(parsed)) {\n if (typeof v === \"string\") merged[k] = v;\n }\n }\n } catch (err: any) {\n // eslint-disable-next-line no-console\n console.warn(\n `[mcp-client] Failed to decrypt MCP headers for ${stored.name}: ${err?.message ?? err}`,\n );\n }\n }\n return Object.keys(merged).length > 0 ? merged : undefined;\n}\n\n/\n Project a stored server into the runtime `McpHttpServerConfig` shape that\n * `McpClientManager` consumes. The merged-config key is the scope + name\n * so a user-scope and org-scope server can both share a readable name\n * without clobbering each other.\n \n SECURITY: when the stored row references encrypted headers\n * (`headerSecretKey`), callers should use `toHttpServerConfigAsync`\n * instead — this synchronous variant returns ONLY the cleartext headers\n * already present on the row. Returning the row's literal headers without\n * the secret material means the runtime client would call the MCP server\n * without auth (request will fail), but never leaks the encrypted secret.\n /\nexport function toHttpServerConfig(\n stored: StoredRemoteMcpServer,\n): McpHttpServerConfig {\n return {\n type: \"http\",\n url: stored.url,\n headers: stored.headers,\n ...(stored.firstParty ? { firstParty: true } : {}),\n ...(stored.firstPartyAppId\n ? { firstPartyAppId: stored.firstPartyAppId }\n : {}),\n description: stored.description,\n };\n}\n\n/\n Async variant of `toHttpServerConfig` that resolves any encrypted\n * `headerSecretKey` reference from `app_secrets` and returns the full\n * cleartext headers map for use at runtime. Use this when actually\n * configuring an MCP client; use the sync variant only when serializing\n * stored data (e.g. for read-only listings that shouldn't disclose\n * secrets).\n /\nexport async function toHttpServerConfigAsync(\n scope: RemoteMcpScope,\n scopeId: string,\n stored: StoredRemoteMcpServer,\n): Promise<McpHttpServerConfig> {\n return {\n type: \"http\",\n url: stored.url,\n headers: await materializeHeaders(scope, scopeId, stored),\n ...(stored.firstParty ? { firstParty: true } : {}),\n ...(stored.firstPartyAppId\n ? { firstPartyAppId: stored.firstPartyAppId }\n : {}),\n ...(stored.firstParty && scope === \"org\"\n ? { firstPartyOrgId: scopeId }\n : {}),\n description: stored.description,\n };\n}\n\n/\n Build the merged-config key for a stored server.\n \n The key encodes the owning scope + owner identity so two users adding a\n * server called `zapier` produce distinct ids (`user_ab12cd34ef_zapier` vs\n * `user_99aa88bb77_zapier`) and Alice's tool calls never route through Bob's\n * credentials in a shared-process deployment.\n \n - User scope: `user_<emailhash>_<name>`\n * - Org scope: `org_<orgId>_<name>`\n \n `ownerId` is the raw email for user scope, and the org id for org scope.\n /\nexport function mergedConfigKey(\n scope: RemoteMcpScope,\n stored: StoredRemoteMcpServer,\n ownerId: string,\n): string {\n const owner = scope === \"user\" ? hashEmail(ownerId) : sanitiseOrgId(ownerId);\n return `${scope}_${owner}_${stored.name}`;\n}\n\n/\n Parse a merged key (or a full prefixed tool name like\n * `mcp__user_abcd1234ef_zapier__run-task`) back into its scope + owner + name\n * components. Returns null for non-merged keys (e.g. stdio file-config servers\n * like `claude-in-chrome`) so callers can treat them as always-visible.\n \n `hub_<orgId>_<name>` entries (pulled from a remote hub via\n * `hub-client.ts`) project to `scope: \"org\"` so they pass through the same\n * per-request visibility gate as locally-stored org servers — the tool is\n * only visible to requests whose active org matches the hub entry's org.\n */\nexport function parseMergedKey(\n keyOrToolName: string,\n): { scope: RemoteMcpScope; owner: string; name: string } \| null {\n let key = keyOrToolName;\n if (key.startsWith(\"mcp__\")) {\n const rest = key.slice(\"mcp__\".length);\n const idx = rest.indexOf(\"__\");\n key = idx >= 0 ? rest.slice(0, idx) : rest;\n }\n const m = /^(user\|org\|hub)_([^_]+)_(.+)$/.exec(key);\n if (!m) return null;\n const prefix = m[1];\n // Hub-sourced servers are scoped to the org they came from — treat them\n // as org-scope for visibility purposes (see isMcpToolAllowedForRequest).\n const scope: RemoteMcpScope = prefix === \"user\" ? \"user\" : \"org\";\n return {\n scope,\n owner: m[2],\n name: m[3],\n };\n}\n"]}

package/dist/notifications/routes.d.ts CHANGED Viewed

@@ -13,13 +13,13 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
     count?: undefined;
     updated: number;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
     count?: undefined;
     updated?: undefined;
@@ -28,7 +28,7 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/progress/routes.d.ts CHANGED Viewed

@@ -15,7 +15,7 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/provider-api/corpus-jobs.d.ts CHANGED Viewed

@@ -73,7 +73,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
-    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -84,6 +83,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
+    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
-    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
+    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/resources/handlers.d.ts CHANGED Viewed

@@ -52,8 +52,8 @@ export declare function handleDeleteResource(event: any): Promise<{
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>;
 /** POST /_agent-native/resources/upload — upload a file as a resource */
 export declare function handleUploadResource(event: any): Promise<import("./store.js").Resource | {
@@ -74,10 +74,10 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     runId: string | null;
     expiresAt: number | null;
     metadata: string | null;
-    error?: undefined;
     url: string;
     provider: string;
     storageSetupRequired?: undefined;
+    error?: undefined;
 } | {
     error: string;
     storageSetupRequired: boolean;

package/dist/server/agent-chat/action-filters-a2a.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"action-filters-a2a.d.ts","sourceRoot":"","sources":["../../../src/server/agent-chat/action-filters-a2a.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAC1B,MAAM,gCAAgC,CAAC;~~AAExC~~,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,~~EAEL~~,KAAK,WAAW,EACjB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAQlE,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAI7B;AAED;;;;2DAI2D;AAC3D,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAI7B;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAY7B;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,KAAK,CAAC;IACP,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;CACzC,CAAC,CASD;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,GAAG,GAAG,SAAS,GACrB,MAAM,GAAG,SAAS,CAepB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,SAAS,cAAc,EAAE,EACjC,WAAW,EAAE,SAAS,oBAAoB,EAAE,EAC5C,OAAO,GAAE,0BAA0B,GAAG;IAAE,KAAK,CAAC,EAAE,GAAG,CAAA;CAAO,GACzD;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAa7C;AAiCD,KAAK,kBAAkB,GAAG,OAAO,iCAAiC,CAAC;~~AAqBnE~~;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAC7C,aAAa,EAAE,IAAI,CACjB,sBAAsB,EACtB,oBAAoB,GAAG,kBAAkB,CAC1C,EACD,cAAc,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EACjD,MAAM,GAAE,kBAAsD,qEAQ/D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAC7C,aAAa,EAAE,IAAI,CACjB,sBAAsB,EACtB,oBAAoB,GAAG,kBAAkB,CAC1C,EACD,cAAc,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EACjD,MAAM,GAAE,kBAAsD,qEAQ/D;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,cAAc,EAAE,UAAU,EAAE,EAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAC1B;IAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,cAAc,EAAE,UAAU,EAAE,CAAA;CAAE,CAKvD;AAED,wBAAgB,uBAAuB,CACrC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAC5C,UAAU,CAAC,EAAE,MAAM,EAAE,GACpB,MAAM,EAAE,CAEV"}
1	+ {"version":3,"file":"action-filters-a2a.d.ts","sourceRoot":"","sources":["../../../src/server/agent-chat/action-filters-a2a.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAC1B,MAAM,gCAAgC,CAAC;AAGxC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAQlE,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAI7B;AAED;;;;2DAI2D;AAC3D,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAI7B;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAY7B;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,KAAK,CAAC;IACP,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;CACzC,CAAC,CASD;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,GAAG,GAAG,SAAS,GACrB,MAAM,GAAG,SAAS,CAepB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,SAAS,cAAc,EAAE,EACjC,WAAW,EAAE,SAAS,oBAAoB,EAAE,EAC5C,OAAO,GAAE,0BAA0B,GAAG;IAAE,KAAK,CAAC,EAAE,GAAG,CAAA;CAAO,GACzD;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAa7C;AAiCD,KAAK,kBAAkB,GAAG,OAAO,iCAAiC,CAAC;AAgCnE;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAC7C,aAAa,EAAE,IAAI,CACjB,sBAAsB,EACtB,oBAAoB,GAAG,kBAAkB,CAC1C,EACD,cAAc,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EACjD,MAAM,GAAE,kBAAsD,qEAQ/D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAC7C,aAAa,EAAE,IAAI,CACjB,sBAAsB,EACtB,oBAAoB,GAAG,kBAAkB,CAC1C,EACD,cAAc,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EACjD,MAAM,GAAE,kBAAsD,qEAQ/D;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,cAAc,EAAE,UAAU,EAAE,EAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAC1B;IAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,cAAc,EAAE,UAAU,EAAE,CAAA;CAAE,CAKvD;AAED,wBAAgB,uBAAuB,CACrC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAC5C,UAAU,CAAC,EAAE,MAAM,EAAE,GACpB,MAAM,EAAE,CAEV"}

package/dist/server/agent-chat/action-filters-a2a.js CHANGED Viewed

@@ -1,7 +1,8 @@
 import { getHeader } from "h3";
 import { appendA2AArtifactLinks, } from "../../a2a/artifact-response.js";
 import { collectFinalResponseTextFromAgentEvents } from "../../a2a/response-text.js";
-import { filterInitialEngineTools, } from "../../agent/production-agent.js";
+import { resolveMainChatMaxOutputTokens } from "../../agent/engine/output-tokens.js";
+import { filterInitialEngineTools, resolveAgentRequestReasoningEffort, } from "../../agent/production-agent.js";
 import { runAgentLoopDirectWithSoftTimeout } from "../../agent/run-loop-with-resume.js";
 import { withConfiguredAppBasePath } from "../app-base-path.js";
 // ---------------------------------------------------------------------------
@@ -98,6 +99,15 @@ function formatA2ATerminalError(event) {
 function runDelegatedAgentLoop(runOptions, pluginOptions, timeoutOptions, runner) {
     return runner({
         ...runOptions,
+        // Delegated runs resolve their own model and do not pass through the
+        // interactive request handler's output-token setup. Use the same
+        // model-aware headroom here so reasoning models (notably GPT-5.x) do
+        // not spend the small internal default entirely on reasoning before
+        // emitting a tool call or answer. Preserve explicit test/caller values.
+        maxOutputTokens: runOptions.maxOutputTokens ??
+            resolveMainChatMaxOutputTokens(runOptions.model),
+        reasoningEffort: runOptions.reasoningEffort ??
+            resolveAgentRequestReasoningEffort({ model: runOptions.model }),
         finalResponseGuard: pluginOptions.finalResponseGuard,
     }, pluginOptions.runSoftTimeoutMs, timeoutOptions);
 }

package/dist/server/agent-chat/action-filters-a2a.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"action-filters-a2a.js","sourceRoot":"","sources":["../../../src/server/agent-chat/action-filters-a2a.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,EACL,sBAAsB,GAGvB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,uCAAuC,EAAE,MAAM,4BAA4B,CAAC;AAErF,OAAO,EACL,wBAAwB,GAEzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAExF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhE,8EAA8E;AAC9E,4EAA4E;AAC5E,uEAAuE;AACvE,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,UAAU,qBAAqB,CACnC,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CACvE,CAAC;AACJ,CAAC;AAED;;;;2DAI2D;AAC3D,MAAM,UAAU,gBAAgB,CAC9B,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC;QACjC,OAAO,CACL,MAAM,EAAE,MAAM,KAAK,IAAI;YACvB,MAAM,CAAC,QAAQ,KAAK,IAAI;YACxB,MAAM,CAAC,YAAY,KAAK,IAAI;YAC5B,MAAM,CAAC,eAAe,KAAK,IAAI,CAChC,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAoC;IAOpC,OAAO,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC1D,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,IAAI;QACR,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACnC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAsB;IAEtB,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG;QACf,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC9B,IAAI,OAAO;QAAE,OAAO,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,mBAAmB,CAAC,IAAI,OAAO,CAAC;QAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI;YAAE,OAAO,yBAAyB,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiC,EACjC,WAA4C,EAC5C,OAAO,GAAiD,EAAE;IAE1D,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,uCAAuC,CAAC,MAAM,EAAE;QACnE,qBAAqB,EAAE,CAAC,aAAa;KACtC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,sBAAsB,CAAC,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE;QACvE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC;QACjE,0BAA0B,EAAE,IAAI;KACjC,CAAC,CAAC;IACH,IAAI,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAiC;IAEjC,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACrC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,mCAAmC,KAAK,CAAC,MAAM,IAAI;gBAC1D,SAAS,EAAE,KAAK,CAAC,MAAM;gBACvB,WAAW,EAAE,IAAI;aAClB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAiD;IAEjD,MAAM,KAAK,GAAG;QACZ,KAAK,CAAC,KAAK,IAAI,iDAAiD;QAChE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAID,SAAS,qBAAqB,CAC5B,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,MAA0B;IAE1B,OAAO,MAAM,CACX;QACE,GAAG,UAAU;QACb,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;KACrD,EACD,aAAa,CAAC,gBAAgB,EAC9B,cAAc,CACf,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,MAAM,GAAuB,iCAAiC;IAE9D,OAAO,qBAAqB,CAC1B,UAAU,EACV,aAAa,EACb,cAAc,EACd,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,MAAM,GAAuB,iCAAiC;IAE9D,OAAO,qBAAqB,CAC1B,UAAU,EACV,aAAa,EACb,cAAc,EACd,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,cAA4B,EAC5B,gBAA2B;IAE3B,OAAO;QACL,KAAK,EAAE,wBAAwB,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACjE,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,eAA4C,EAC5C,UAAqB;IAErB,OAAO,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AACpD,CAAC","sourcesContent":["import { getHeader } from \"h3\";\n\nimport {\n appendA2AArtifactLinks,\n type A2AArtifactResponseOptions,\n type A2AToolResultSummary,\n} from \"../../a2a/artifact-response.js\";\nimport { collectFinalResponseTextFromAgentEvents } from \"../../a2a/response-text.js\";\nimport type { EngineTool } from \"../../agent/engine/types.js\";\nimport {\n filterInitialEngineTools,\n type ActionEntry,\n} from \"../../agent/production-agent.js\";\nimport { runAgentLoopDirectWithSoftTimeout } from \"../../agent/run-loop-with-resume.js\";\nimport type { AgentChatEvent } from \"../../agent/types.js\";\nimport { withConfiguredAppBasePath } from \"../app-base-path.js\";\nimport type { AgentChatPluginOptions } from \"./plugin-options.js\";\n\n// ---------------------------------------------------------------------------\n// Action-visibility filters (read-only / agent-exposed / public-agent-safe)\n// and the A2A (agent-to-agent) final-response assembly + delegated-run\n// helpers that share those filters.\n// ---------------------------------------------------------------------------\n\nexport function filterReadOnlyActions(\n actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n return Object.fromEntries(\n Object.entries(actions).filter(([, entry]) => entry.readOnly === true),\n );\n}\n\n/** Drop actions that opted out of agent exposure via `agentTool: false`. They\n * remain callable from the frontend / HTTP (mounted separately from this\n * agent tool surface — see `httpActions`) but never appear in any agent tool\n * list (in-app assistant, MCP, A2A, job/trigger runners) or actions prompt.\n * Default-allow: only an explicit `false` is excluded. /\nexport function filterAgentTools(\n actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n return Object.fromEntries(\n Object.entries(actions).filter(([, entry]) => entry.agentTool !== false),\n );\n}\n\nexport function filterPublicAgentActions(\n actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n return Object.fromEntries(\n Object.entries(actions).filter(([, entry]) => {\n const config = entry.publicAgent;\n return (\n config?.expose === true &&\n config.readOnly === true &&\n config.requiresAuth !== true &&\n config.isConsequential !== true\n );\n }),\n );\n}\n\nexport function buildPublicAgentA2ASkills(\n actions: Record<string, ActionEntry>,\n): Array<{\n id: string;\n name: string;\n description: string;\n publicAgent: ActionEntry[\"publicAgent\"];\n}> {\n return Object.entries(filterPublicAgentActions(actions)).map(\n ([name, entry]) => ({\n id: name,\n name,\n description: entry.tool.description,\n publicAgent: entry.publicAgent,\n }),\n );\n}\n\nexport function resolveArtifactBaseUrl(\n event: any \| undefined,\n): string \| undefined {\n const fromEnv =\n process.env.APP_URL \|\|\n process.env.URL \|\|\n process.env.DEPLOY_URL \|\|\n process.env.BETTER_AUTH_URL;\n if (fromEnv) return withConfiguredAppBasePath(String(fromEnv));\n\n try {\n const proto = getHeader(event, \"x-forwarded-proto\") \|\| \"https\";\n const host = getHeader(event, \"host\");\n if (host) return withConfiguredAppBasePath(`${proto}://${host}`);\n } catch {}\n\n return undefined;\n}\n\nexport function assembleA2AFinalResponse(\n events: readonly AgentChatEvent[],\n toolResults: readonly A2AToolResultSummary[],\n options: A2AArtifactResponseOptions & { event?: any } = {},\n): { responseText: string; finalText: string } {\n const terminalError = getA2ATerminalErrorEvent(events);\n const responseText = collectFinalResponseTextFromAgentEvents(events, {\n fallbackToPreToolText: !terminalError,\n });\n const finalText = appendA2AArtifactLinks(responseText, [...toolResults], {\n baseUrl: options.baseUrl ?? resolveArtifactBaseUrl(options.event),\n includeReferencedArtifacts: true,\n });\n if (terminalError && !finalText.trim()) {\n throw new Error(formatA2ATerminalError(terminalError));\n }\n return { responseText, finalText };\n}\n\nfunction getA2ATerminalErrorEvent(\n events: readonly AgentChatEvent[],\n): Extract<AgentChatEvent, { type: \"error\" }> \| null {\n for (let i = events.length - 1; i >= 0; i--) {\n const event = events[i];\n if (event.type === \"clear\") continue;\n if (event.type === \"done\") return null;\n if (event.type === \"error\") return event;\n if (event.type === \"auto_continue\") {\n return {\n type: \"error\",\n error: `Agent stopped before finishing (${event.reason}).`,\n errorCode: event.reason,\n recoverable: true,\n };\n }\n }\n return null;\n}\n\nfunction formatA2ATerminalError(\n event: Extract<AgentChatEvent, { type: \"error\" }>,\n): string {\n const parts = [\n event.error \|\| \"Agent failed before producing a final response.\",\n event.errorCode ? `code: ${event.errorCode}` : \"\",\n event.details ? `details: ${event.details}` : \"\",\n ].filter(Boolean);\n return parts.join(\"\\n\");\n}\n\ntype A2AAgentLoopRunner = typeof runAgentLoopDirectWithSoftTimeout;\n\nfunction runDelegatedAgentLoop(\n runOptions: Parameters<A2AAgentLoopRunner>[0],\n pluginOptions: Pick<\n AgentChatPluginOptions,\n \"finalResponseGuard\" \| \"runSoftTimeoutMs\"\n >,\n timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n runner: A2AAgentLoopRunner,\n) {\n return runner(\n {\n ...runOptions,\n finalResponseGuard: pluginOptions.finalResponseGuard,\n },\n pluginOptions.runSoftTimeoutMs,\n timeoutOptions,\n );\n}\n\n/\n Run an A2A-delegated agent turn with the same final-response guard used by\n * the app's interactive chat surface.\n \n Keeping this in one helper prevents delegated calls from silently bypassing\n * template guarantees such as Analytics' requirement to query real data\n * before presenting metrics or exhaustive provider conclusions.\n /\nexport function runA2AAgentLoop(\n runOptions: Parameters<A2AAgentLoopRunner>[0],\n pluginOptions: Pick<\n AgentChatPluginOptions,\n \"finalResponseGuard\" \| \"runSoftTimeoutMs\"\n >,\n timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n runner: A2AAgentLoopRunner = runAgentLoopDirectWithSoftTimeout,\n) {\n return runDelegatedAgentLoop(\n runOptions,\n pluginOptions,\n timeoutOptions,\n runner,\n );\n}\n\n/\n Run the MCP-local ask_app turn with the same app-level response guard as\n * A2A. Keeping this seam shared prevents hosted MCP callers from bypassing\n * template guarantees when the request cannot use the self-A2A route.\n /\nexport function runMCPAgentLoop(\n runOptions: Parameters<A2AAgentLoopRunner>[0],\n pluginOptions: Pick<\n AgentChatPluginOptions,\n \"finalResponseGuard\" \| \"runSoftTimeoutMs\"\n >,\n timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n runner: A2AAgentLoopRunner = runAgentLoopDirectWithSoftTimeout,\n) {\n return runDelegatedAgentLoop(\n runOptions,\n pluginOptions,\n timeoutOptions,\n runner,\n );\n}\n\n/\n Keep delegated A2A turns on the same compact initial tool surface as\n * interactive chat. `tool-search` remains in the initial set, while the\n * complete registry is supplied separately so the run loop can load a matched\n * schema after a tool-search result.\n */\nexport function createA2AEngineToolSurface(\n availableTools: EngineTool[],\n initialToolNames?: string[],\n): { tools: EngineTool[]; availableTools: EngineTool[] } {\n return {\n tools: filterInitialEngineTools(availableTools, initialToolNames),\n availableTools,\n };\n}\n\nexport function resolveInitialToolNames(\n templateActions: Record<string, ActionEntry>,\n configured?: string[],\n): string[] {\n return configured ?? Object.keys(templateActions);\n}\n"]}
1	+ {"version":3,"file":"action-filters-a2a.js","sourceRoot":"","sources":["../../../src/server/agent-chat/action-filters-a2a.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,EACL,sBAAsB,GAGvB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,uCAAuC,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,EACL,wBAAwB,EACxB,kCAAkC,GAEnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAExF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhE,8EAA8E;AAC9E,4EAA4E;AAC5E,uEAAuE;AACvE,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,UAAU,qBAAqB,CACnC,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CACvE,CAAC;AACJ,CAAC;AAED;;;;2DAI2D;AAC3D,MAAM,UAAU,gBAAgB,CAC9B,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC;QACjC,OAAO,CACL,MAAM,EAAE,MAAM,KAAK,IAAI;YACvB,MAAM,CAAC,QAAQ,KAAK,IAAI;YACxB,MAAM,CAAC,YAAY,KAAK,IAAI;YAC5B,MAAM,CAAC,eAAe,KAAK,IAAI,CAChC,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAoC;IAOpC,OAAO,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC1D,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,IAAI;QACR,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACnC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAsB;IAEtB,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG;QACf,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC9B,IAAI,OAAO;QAAE,OAAO,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,mBAAmB,CAAC,IAAI,OAAO,CAAC;QAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI;YAAE,OAAO,yBAAyB,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiC,EACjC,WAA4C,EAC5C,OAAO,GAAiD,EAAE;IAE1D,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,uCAAuC,CAAC,MAAM,EAAE;QACnE,qBAAqB,EAAE,CAAC,aAAa;KACtC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,sBAAsB,CAAC,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE;QACvE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC;QACjE,0BAA0B,EAAE,IAAI;KACjC,CAAC,CAAC;IACH,IAAI,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAiC;IAEjC,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACrC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,mCAAmC,KAAK,CAAC,MAAM,IAAI;gBAC1D,SAAS,EAAE,KAAK,CAAC,MAAM;gBACvB,WAAW,EAAE,IAAI;aAClB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAiD;IAEjD,MAAM,KAAK,GAAG;QACZ,KAAK,CAAC,KAAK,IAAI,iDAAiD;QAChE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAID,SAAS,qBAAqB,CAC5B,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,MAA0B;IAE1B,OAAO,MAAM,CACX;QACE,GAAG,UAAU;QACb,qEAAqE;QACrE,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,eAAe,EACb,UAAU,CAAC,eAAe;YAC1B,8BAA8B,CAAC,UAAU,CAAC,KAAK,CAAC;QAClD,eAAe,EACb,UAAU,CAAC,eAAe;YAC1B,kCAAkC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACjE,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;KACrD,EACD,aAAa,CAAC,gBAAgB,EAC9B,cAAc,CACf,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,MAAM,GAAuB,iCAAiC;IAE9D,OAAO,qBAAqB,CAC1B,UAAU,EACV,aAAa,EACb,cAAc,EACd,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,MAAM,GAAuB,iCAAiC;IAE9D,OAAO,qBAAqB,CAC1B,UAAU,EACV,aAAa,EACb,cAAc,EACd,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,cAA4B,EAC5B,gBAA2B;IAE3B,OAAO;QACL,KAAK,EAAE,wBAAwB,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACjE,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,eAA4C,EAC5C,UAAqB;IAErB,OAAO,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AACpD,CAAC","sourcesContent":["import { getHeader } from \"h3\";\n\nimport {\n appendA2AArtifactLinks,\n type A2AArtifactResponseOptions,\n type A2AToolResultSummary,\n} from \"../../a2a/artifact-response.js\";\nimport { collectFinalResponseTextFromAgentEvents } from \"../../a2a/response-text.js\";\nimport { resolveMainChatMaxOutputTokens } from \"../../agent/engine/output-tokens.js\";\nimport type { EngineTool } from \"../../agent/engine/types.js\";\nimport {\n filterInitialEngineTools,\n resolveAgentRequestReasoningEffort,\n type ActionEntry,\n} from \"../../agent/production-agent.js\";\nimport { runAgentLoopDirectWithSoftTimeout } from \"../../agent/run-loop-with-resume.js\";\nimport type { AgentChatEvent } from \"../../agent/types.js\";\nimport { withConfiguredAppBasePath } from \"../app-base-path.js\";\nimport type { AgentChatPluginOptions } from \"./plugin-options.js\";\n\n// ---------------------------------------------------------------------------\n// Action-visibility filters (read-only / agent-exposed / public-agent-safe)\n// and the A2A (agent-to-agent) final-response assembly + delegated-run\n// helpers that share those filters.\n// ---------------------------------------------------------------------------\n\nexport function filterReadOnlyActions(\n actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n return Object.fromEntries(\n Object.entries(actions).filter(([, entry]) => entry.readOnly === true),\n );\n}\n\n/** Drop actions that opted out of agent exposure via `agentTool: false`. They\n * remain callable from the frontend / HTTP (mounted separately from this\n * agent tool surface — see `httpActions`) but never appear in any agent tool\n * list (in-app assistant, MCP, A2A, job/trigger runners) or actions prompt.\n * Default-allow: only an explicit `false` is excluded. /\nexport function filterAgentTools(\n actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n return Object.fromEntries(\n Object.entries(actions).filter(([, entry]) => entry.agentTool !== false),\n );\n}\n\nexport function filterPublicAgentActions(\n actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n return Object.fromEntries(\n Object.entries(actions).filter(([, entry]) => {\n const config = entry.publicAgent;\n return (\n config?.expose === true &&\n config.readOnly === true &&\n config.requiresAuth !== true &&\n config.isConsequential !== true\n );\n }),\n );\n}\n\nexport function buildPublicAgentA2ASkills(\n actions: Record<string, ActionEntry>,\n): Array<{\n id: string;\n name: string;\n description: string;\n publicAgent: ActionEntry[\"publicAgent\"];\n}> {\n return Object.entries(filterPublicAgentActions(actions)).map(\n ([name, entry]) => ({\n id: name,\n name,\n description: entry.tool.description,\n publicAgent: entry.publicAgent,\n }),\n );\n}\n\nexport function resolveArtifactBaseUrl(\n event: any \| undefined,\n): string \| undefined {\n const fromEnv =\n process.env.APP_URL \|\|\n process.env.URL \|\|\n process.env.DEPLOY_URL \|\|\n process.env.BETTER_AUTH_URL;\n if (fromEnv) return withConfiguredAppBasePath(String(fromEnv));\n\n try {\n const proto = getHeader(event, \"x-forwarded-proto\") \|\| \"https\";\n const host = getHeader(event, \"host\");\n if (host) return withConfiguredAppBasePath(`${proto}://${host}`);\n } catch {}\n\n return undefined;\n}\n\nexport function assembleA2AFinalResponse(\n events: readonly AgentChatEvent[],\n toolResults: readonly A2AToolResultSummary[],\n options: A2AArtifactResponseOptions & { event?: any } = {},\n): { responseText: string; finalText: string } {\n const terminalError = getA2ATerminalErrorEvent(events);\n const responseText = collectFinalResponseTextFromAgentEvents(events, {\n fallbackToPreToolText: !terminalError,\n });\n const finalText = appendA2AArtifactLinks(responseText, [...toolResults], {\n baseUrl: options.baseUrl ?? resolveArtifactBaseUrl(options.event),\n includeReferencedArtifacts: true,\n });\n if (terminalError && !finalText.trim()) {\n throw new Error(formatA2ATerminalError(terminalError));\n }\n return { responseText, finalText };\n}\n\nfunction getA2ATerminalErrorEvent(\n events: readonly AgentChatEvent[],\n): Extract<AgentChatEvent, { type: \"error\" }> \| null {\n for (let i = events.length - 1; i >= 0; i--) {\n const event = events[i];\n if (event.type === \"clear\") continue;\n if (event.type === \"done\") return null;\n if (event.type === \"error\") return event;\n if (event.type === \"auto_continue\") {\n return {\n type: \"error\",\n error: `Agent stopped before finishing (${event.reason}).`,\n errorCode: event.reason,\n recoverable: true,\n };\n }\n }\n return null;\n}\n\nfunction formatA2ATerminalError(\n event: Extract<AgentChatEvent, { type: \"error\" }>,\n): string {\n const parts = [\n event.error \|\| \"Agent failed before producing a final response.\",\n event.errorCode ? `code: ${event.errorCode}` : \"\",\n event.details ? `details: ${event.details}` : \"\",\n ].filter(Boolean);\n return parts.join(\"\\n\");\n}\n\ntype A2AAgentLoopRunner = typeof runAgentLoopDirectWithSoftTimeout;\n\nfunction runDelegatedAgentLoop(\n runOptions: Parameters<A2AAgentLoopRunner>[0],\n pluginOptions: Pick<\n AgentChatPluginOptions,\n \"finalResponseGuard\" \| \"runSoftTimeoutMs\"\n >,\n timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n runner: A2AAgentLoopRunner,\n) {\n return runner(\n {\n ...runOptions,\n // Delegated runs resolve their own model and do not pass through the\n // interactive request handler's output-token setup. Use the same\n // model-aware headroom here so reasoning models (notably GPT-5.x) do\n // not spend the small internal default entirely on reasoning before\n // emitting a tool call or answer. Preserve explicit test/caller values.\n maxOutputTokens:\n runOptions.maxOutputTokens ??\n resolveMainChatMaxOutputTokens(runOptions.model),\n reasoningEffort:\n runOptions.reasoningEffort ??\n resolveAgentRequestReasoningEffort({ model: runOptions.model }),\n finalResponseGuard: pluginOptions.finalResponseGuard,\n },\n pluginOptions.runSoftTimeoutMs,\n timeoutOptions,\n );\n}\n\n/\n Run an A2A-delegated agent turn with the same final-response guard used by\n * the app's interactive chat surface.\n \n Keeping this in one helper prevents delegated calls from silently bypassing\n * template guarantees such as Analytics' requirement to query real data\n * before presenting metrics or exhaustive provider conclusions.\n /\nexport function runA2AAgentLoop(\n runOptions: Parameters<A2AAgentLoopRunner>[0],\n pluginOptions: Pick<\n AgentChatPluginOptions,\n \"finalResponseGuard\" \| \"runSoftTimeoutMs\"\n >,\n timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n runner: A2AAgentLoopRunner = runAgentLoopDirectWithSoftTimeout,\n) {\n return runDelegatedAgentLoop(\n runOptions,\n pluginOptions,\n timeoutOptions,\n runner,\n );\n}\n\n/\n Run the MCP-local ask_app turn with the same app-level response guard as\n * A2A. Keeping this seam shared prevents hosted MCP callers from bypassing\n * template guarantees when the request cannot use the self-A2A route.\n /\nexport function runMCPAgentLoop(\n runOptions: Parameters<A2AAgentLoopRunner>[0],\n pluginOptions: Pick<\n AgentChatPluginOptions,\n \"finalResponseGuard\" \| \"runSoftTimeoutMs\"\n >,\n timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n runner: A2AAgentLoopRunner = runAgentLoopDirectWithSoftTimeout,\n) {\n return runDelegatedAgentLoop(\n runOptions,\n pluginOptions,\n timeoutOptions,\n runner,\n );\n}\n\n/\n Keep delegated A2A turns on the same compact initial tool surface as\n * interactive chat. `tool-search` remains in the initial set, while the\n * complete registry is supplied separately so the run loop can load a matched\n * schema after a tool-search result.\n */\nexport function createA2AEngineToolSurface(\n availableTools: EngineTool[],\n initialToolNames?: string[],\n): { tools: EngineTool[]; availableTools: EngineTool[] } {\n return {\n tools: filterInitialEngineTools(availableTools, initialToolNames),\n availableTools,\n };\n}\n\nexport function resolveInitialToolNames(\n templateActions: Record<string, ActionEntry>,\n configured?: string[],\n): string[] {\n return configured ?? Object.keys(templateActions);\n}\n"]}

package/dist/server/agent-chat-plugin.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AAyIA,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;~~AAoCvC~~,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,YAAY,EAAE,6BAA6B,EAAE,CAAC;AAmB9C,OAAO,EACL,0BAA0B,EAK1B,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EAE1B,MAAM,oCAAoC,CAAC;AAW5C,OAAO,EACL,gCAAgC,EAOjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yCAAyC,EAAE,MAAM,qCAAqC,CAAC;AAChG,OAAO,EACL,sBAAsB,EAEvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iCAAiC,EAAE,MAAM,wCAAwC,CAAC;AAC3F,OAAO,EAEL,sCAAsC,EACvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,gCAAgC,EAAE,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACpC,YAAY,EAAE,sBAAsB,EAAE,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACtC,OAAO,EAAE,sCAAsC,EAAE,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAC7C,OAAO,EAAE,yCAAyC,EAAE,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,uCAAuC,CAC3D,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,CAUlB;AAaD,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,~~CA47JhB~~;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAE9E,OAAO,EAEL,mBAAmB,EACnB,uBAAuB,EAGxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,CAAC"}
1	+ {"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AAyIA,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;AAqCvC,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,YAAY,EAAE,6BAA6B,EAAE,CAAC;AAmB9C,OAAO,EACL,0BAA0B,EAK1B,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EAE1B,MAAM,oCAAoC,CAAC;AAW5C,OAAO,EACL,gCAAgC,EAOjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yCAAyC,EAAE,MAAM,qCAAqC,CAAC;AAChG,OAAO,EACL,sBAAsB,EAEvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iCAAiC,EAAE,MAAM,wCAAwC,CAAC;AAC3F,OAAO,EAEL,sCAAsC,EACvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,gCAAgC,EAAE,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACpC,YAAY,EAAE,sBAAsB,EAAE,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACtC,OAAO,EAAE,sCAAsC,EAAE,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAC7C,OAAO,EAAE,yCAAyC,EAAE,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,uCAAuC,CAC3D,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,CAUlB;AAaD,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,CA49JhB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAE9E,OAAO,EAEL,mBAAmB,EACnB,uBAAuB,EAGxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/server/agent-chat-plugin.js CHANGED Viewed

@@ -36,7 +36,7 @@ import { getOrigin } from "./google-oauth.js";
 import { readBody } from "./h3-helpers.js";
 import { FIRST_SESSION_PERSONALIZATION, getModelFamilyOverlay, } from "./prompts/index.js";
 import { mountRealtimeVoiceRoutes } from "./realtime-voice.js";
-import { runWithRequestContext, getRequestOrgId, getRequestUserEmail, getRequestRunContext, ensureRequestRunContext, } from "./request-context.js";
+import { runWithRequestContext, getRequestContext, getRequestOrgId, getRequestUserEmail, getRequestRunContext, ensureRequestRunContext, } from "./request-context.js";
 export { handleSharedThreadRequest };
 // Lazy fs — loaded via dynamic import() on first use.
 // This avoids require() which bundlers convert to createRequire(import.meta.url)
@@ -961,6 +961,23 @@ export function createAgentChatPlugin(options) {
                     if (a2aRunContext) {
                         a2aRunContext.owner = userEmail;
                         a2aRunContext.userApiKey = ownerApiKey;
+                        // The async processor restores the original request origin from
+                        // task metadata. Only derive a fallback for synchronous A2A calls
+                        // where the inbound event is still the caller request.
+                        if (!a2aRunContext.requestOrigin) {
+                            const restoredOrigin = getRequestContext()?.requestOrigin;
+                            if (restoredOrigin) {
+                                a2aRunContext.requestOrigin = restoredOrigin;
+                            }
+                        }
+                        if (!a2aRunContext.requestOrigin) {
+                            try {
+                                a2aRunContext.requestOrigin = getOrigin(context.event);
+                            }
+                            catch {
+                                // Keep the owner context even when no browser origin exists.
+                            }
+                        }
                     }
                     const a2aEngine = await resolveEngine({
                         engineOption: options?.engine,
@@ -975,16 +992,6 @@ export function createAgentChatPlugin(options) {
                         ? ""
                         : await buildSchemaBlock(owner, databaseToolsMode);
                     const extra = await resolveExtraContext(context.event, owner);
-                    // Stable content first, most-volatile-per-day last: the
-                    // runtime-context block is appended after resources/schema/extra so
-                    // a day rollover (or the resources/extra content changing) only
-                    // invalidates the cached prompt prefix as late as possible.
-                    const runtimeContext = runtimeContextForEvent(context.event);
-                    const systemPrompt = devActive
-                        ? devPrompt + resources + schemaBlock + extra + runtimeContext
-                        : basePrompt + resources + schemaBlock + extra + runtimeContext;
-                    if (a2aRunContext)
-                        a2aRunContext.systemPrompt = systemPrompt;
                     const a2aModelCandidate = options?.model ??
                         (await getStoredModelForEngine(a2aEngine, {
                             appId: options?.appId,
@@ -995,6 +1002,30 @@ export function createAgentChatPlugin(options) {
                         a2aRunContext.engine = a2aEngine;
                         a2aRunContext.model = model;
                     }
+                    // Keep delegated runs aligned with the interactive production
+                    // prompt's model-specific behavior without importing interactive
+                    // onboarding into a background/cross-app task.
+                    const modelOverlay = getModelFamilyOverlay(model);
+                    // Stable content first, most-volatile-per-day last: the
+                    // runtime-context block is appended after resources/schema/extra so
+                    // a day rollover (or the resources/extra content changing) only
+                    // invalidates the cached prompt prefix as late as possible.
+                    const runtimeContext = runtimeContextForEvent(context.event);
+                    const systemPrompt = devActive
+                        ? devPrompt +
+                            resources +
+                            schemaBlock +
+                            extra +
+                            modelOverlay +
+                            runtimeContext
+                        : basePrompt +
+                            resources +
+                            schemaBlock +
+                            extra +
+                            modelOverlay +
+                            runtimeContext;
+                    if (a2aRunContext)
+                        a2aRunContext.systemPrompt = systemPrompt;
                     // Build tools — same as interactive handler but WITHOUT call-agent
                     // to prevent infinite recursive A2A loops (agent calling itself).
                     // In dev mode, template actions are invoked via bash (not native tools),
@@ -4335,6 +4366,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                 "/_agent-native/actions",
                 "/_agent-native/agent-model-defaults",
                 "/_agent-native/mcp",
+                "/mcp",
             ],
         });
     };