@canonry/canonry 7.75.0 → 7.76.0

package/dist/{chunk-KF76GJ7L.js → chunk-BC56FPTQ.js}

@@ -5,7 +5,7 @@ import {
   isStoredPageReadTool,
   isStoredReadTool,
   truncateToolResult
-} from "./chunk-WWZ6RZJ5.js";
+} from "./chunk-IZP4KKIJ.js";
 import {
   CANONRY_MCP_TOOLKITS
 } from "./chunk-NDTU7FGL.js";
@@ -22,7 +22,7 @@ import {
   resolveApiKeyFor,
   resolveModelForProvider,
   validateAgentProviderRegistry
-} from "./chunk-5SVPFDUM.js";
+} from "./chunk-ZWD4W3KU.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools

package/dist/{chunk-LBFWNA4V.js → chunk-DAOGINSR.js}

@@ -4,7 +4,7 @@ import {
 import {
   configExists,
   loadConfigRaw
-} from "./chunk-5SVPFDUM.js";
+} from "./chunk-ZWD4W3KU.js";
 
 // src/setup-state.ts
 import fs from "fs";
@@ -47,7 +47,7 @@ function queueServeHandoff() {
 async function runPendingServeHandoff(format) {
   if (!pendingServeHandoff) return;
   pendingServeHandoff = false;
-  const { serveCommand } = await import("./serve-IZ2FZ7F3.js");
+  const { serveCommand } = await import("./serve-ZH36XF5Y.js");
   await serveCommand(format);
 }
 

package/dist/{chunk-WWZ6RZJ5.js → chunk-IZP4KKIJ.js}

@@ -1,6 +1,6 @@
 import {
   runWithUsageTags
-} from "./chunk-MJGY7NBK.js";
+} from "./chunk-KXSNV6C3.js";
 import {
   CanonryMcpToolNames,
   canonryMcpTools

package/dist/{chunk-MJGY7NBK.js → chunk-KXSNV6C3.js}

@@ -1,6 +1,6 @@
 import {
   loadConfig
-} from "./chunk-5SVPFDUM.js";
+} from "./chunk-ZWD4W3KU.js";
 import {
   PACKAGE_VERSION
 } from "./chunk-AOJU5LKX.js";

package/dist/{chunk-NKNA2DSS.js → chunk-MXRCOQT2.js}

@@ -6,7 +6,7 @@ import {
 import {
   createApiClient,
   runWithUsageTags
-} from "./chunk-MJGY7NBK.js";
+} from "./chunk-KXSNV6C3.js";
 import {
   canonryMcpTools,
   mcpOutputSchema,

package/dist/{chunk-W5GZENMO.js → chunk-OT6SUK6X.js}

@@ -5,7 +5,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-5SVPFDUM.js";
+} from "./chunk-ZWD4W3KU.js";
 import {
   CANONRY_NPM_PACKAGE_URL,
   compareSemver,

package/dist/{chunk-U5UXQV57.js → chunk-UWPCUAZM.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VJWDBFSL.js";
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
+} from "./chunk-KXSNV6C3.js";
 import {
   CliError,
   isMachineFormat

package/dist/{chunk-4LR2SXYB.js → chunk-X2CE5IME.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
+} from "./chunk-KXSNV6C3.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{chunk-5SVPFDUM.js → chunk-ZWD4W3KU.js}

@@ -105,9 +105,16 @@ var gatewayTenantSchema = z4.object({
   catalogVersion: z4.literal("canonry-readonly-v1"),
   upstreamClientId: nonempty.optional()
 }).strict();
+var LOOPBACK_HOSTS = ["localhost", "127.0.0.1", "[::1]"];
 var clientSchema = z4.object({
   client_id: identifier,
   client_name: nonempty.max(200),
+  /**
+   * `native` is a CLI or desktop app that receives the code on a loopback port it
+   * picks per sign-in (RFC 8252 section 7.3). oidc-provider matches its loopback
+   * redirects on any port, so they are registered without one.
+   */
+  application_type: z4.enum(["web", "native"]).default("web"),
   redirect_uris: z4.array(z4.url()).min(1),
   token_endpoint_auth_method: z4.literal("none").default("none"),
   grant_types: z4.array(z4.enum(["authorization_code", "refresh_token"])).default(["authorization_code", "refresh_token"]),
@@ -129,7 +136,7 @@ var gatewayConfigSchema = z4.object({
 }).strict().superRefine((config, ctx) => {
   const checkTransport = (value, path2) => {
     const parsed = new URL(value);
-    const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(parsed.hostname);
+    const loopback = LOOPBACK_HOSTS.includes(parsed.hostname);
     if (parsed.protocol !== "https:" && !(config.development && loopback && parsed.protocol === "http:")) {
       ctx.addIssue({ code: "custom", path: path2, message: "HTTPS is required except explicit development on loopback" });
     }
@@ -167,8 +174,11 @@ var gatewayConfigSchema = z4.object({
     if (clientIds.has(client.client_id)) ctx.addIssue({ code: "custom", path: ["clients", index, "client_id"], message: "Client IDs must be unique" });
     clientIds.add(client.client_id);
     client.redirect_uris.forEach((redirect, redirectIndex) => {
-      checkTransport(redirect, ["clients", index, "redirect_uris", redirectIndex]);
       const parsed = new URL(redirect);
+      if (client.application_type === "web") checkTransport(redirect, ["clients", index, "redirect_uris", redirectIndex]);
+      else if (parsed.protocol !== "http:" || !LOOPBACK_HOSTS.includes(parsed.hostname) || parsed.port) {
+        ctx.addIssue({ code: "custom", path: ["clients", index, "redirect_uris", redirectIndex], message: "Native clients register loopback HTTP redirects without a port" });
+      }
       if (parsed.username || parsed.password || parsed.hash) {
         ctx.addIssue({ code: "custom", path: ["clients", index, "redirect_uris", redirectIndex], message: "Redirects cannot contain credentials or fragments" });
       }

package/dist/{citations-K44GWHAZ.js → citations-XJUGQ736.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import "./chunk-AOJU5LKX.js";
 import "./chunk-HGMYEDAQ.js";
 import "./chunk-FCGYYZHL.js";

package/dist/{cli-commands-RQTNKS2T.js → cli-commands-OZFEIIV6.js}

@@ -1,12 +1,12 @@
 import {
   REGISTERED_CLI_COMMANDS
-} from "./chunk-CYXUQNIQ.js";
+} from "./chunk-AIC4FUOD.js";
 import "./chunk-6GO5VVAC.js";
-import "./chunk-E6NE3FJC.js";
+import "./chunk-7KYGOR7N.js";
 import "./chunk-VJWDBFSL.js";
 import "./chunk-TSENU4GG.js";
-import "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+import "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import "./chunk-RPJJOBKN.js";
 import "./chunk-Z7IUAJOF.js";
 import "./chunk-5QR7D4RQ.js";

package/dist/cli.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node --import tsx
 import {
   REGISTERED_CLI_COMMANDS
-} from "./chunk-CYXUQNIQ.js";
+} from "./chunk-AIC4FUOD.js";
 import {
   buildSetupState,
   runPendingServeHandoff
-} from "./chunk-LBFWNA4V.js";
+} from "./chunk-DAOGINSR.js";
 import "./chunk-6GO5VVAC.js";
-import "./chunk-E6NE3FJC.js";
+import "./chunk-7KYGOR7N.js";
 import "./chunk-VJWDBFSL.js";
 import "./chunk-TSENU4GG.js";
 import "./chunk-2WBT6TEJ.js";
@@ -24,13 +24,13 @@ import {
   showFirstRunNotice,
   trackCliCommandFinished,
   trackEvent
-} from "./chunk-W5GZENMO.js";
+} from "./chunk-OT6SUK6X.js";
 import {
   autoSyncSkills,
   formatAutoSyncNotice
-} from "./chunk-3TCCNK2T.js";
-import "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-6NUXSEW6.js";
+import "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   accessFilterFromArgs,
   dispatchRegisteredCommand,

package/dist/{competitor-MHYOHVOJ.js → competitor-5OEWFXMU.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{content-AWDA3GYL.js → content-TUWBGELB.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{dashboard-P2ODMTQG.js → dashboard-P3DLDUTA.js}

@@ -1,7 +1,7 @@
 import {
   clearDashboardPassword,
   loadConfigRaw
-} from "./chunk-5SVPFDUM.js";
+} from "./chunk-ZWD4W3KU.js";
 import {
   isMachineFormat
 } from "./chunk-HGMYEDAQ.js";

package/dist/{discover-I2SVIHRG.js → discover-WZUOPCBV.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{discover-eval-VV2AKXCV.js → discover-eval-SICOH7ML.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import "./chunk-AOJU5LKX.js";
 import {
   CliError,

package/dist/{doctor-25I3JSKE.js → doctor-UMSTE4EO.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{evidence-PNYKUX2F.js → evidence-NLIQFQAK.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{export-cmd-F4XZGLGF.js → export-cmd-U2BFP7VV.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import "./chunk-AOJU5LKX.js";
 import {
   isEndpointMissing,

package/dist/{ga-S4DIQ5SZ.js → ga-OCN3UUG2.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{gbp-IYCVTLP7.js → gbp-B2YUDH7S.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import "./chunk-AOJU5LKX.js";
 import {
   isMachineFormat

package/dist/{google-FAJ5RL57.js → google-EOV6EXSF.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{health-cmd-HLAFQSU7.js → health-cmd-UVJAXG5V.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";

package/dist/{history-U67NTFZP.js → history-4NOM3SFC.js}

@@ -1,7 +1,7 @@
 import {
   createApiClient
-} from "./chunk-MJGY7NBK.js";
-import "./chunk-5SVPFDUM.js";
+} from "./chunk-KXSNV6C3.js";
+import "./chunk-ZWD4W3KU.js";
 import {
   emitJsonl
 } from "./chunk-Z7IUAJOF.js";