@dainprotocol/service-sdk 2.0.95 → 2.1.0

package/dist/service/server.js

@@ -142,20 +142,26 @@ function getRuntimeContextFromJwtPayload(payload, options = {}) {
     const account = getObjectClaim(payload, "account_context");
     const group = getObjectClaim(payload, "group_context");
     const auth = getObjectClaim(payload, "auth_context");
-    const dainAccountId = getStringClaim(payload, "dain_account_id", "account_id") ??
-        account?.id;
-    const dainGroupId = getStringClaim(payload, "dain_group_id", "group_id") ??
-        group?.id;
+    const dainAccountId = getStringClaim(payload, "dain_account_id", "account_id") ?? account?.id;
+    const dainGroupId = getStringClaim(payload, "dain_group_id", "group_id") ?? group?.id;
     const smartAccountPDA = getStringClaim(payload, "smart_account_pda") ??
         options.fallbackSmartAccountPDA;
     if (account?.id && dainAccountId && account.id !== dainAccountId) {
-        throw new http_exception_1.HTTPException(401, { message: "JWT DAIN context mismatch: dain_account_id does not match account_context.id" });
+        throw new http_exception_1.HTTPException(401, {
+            message: "JWT DAIN context mismatch: dain_account_id does not match account_context.id",
+        });
     }
     if (group?.id && dainGroupId && group.id !== dainGroupId) {
-        throw new http_exception_1.HTTPException(401, { message: "JWT DAIN context mismatch: dain_group_id does not match group_context.id" });
+        throw new http_exception_1.HTTPException(401, {
+            message: "JWT DAIN context mismatch: dain_group_id does not match group_context.id",
+        });
     }
-    if (account?.smartAccount?.pda && smartAccountPDA && account.smartAccount.pda !== smartAccountPDA) {
-        throw new http_exception_1.HTTPException(401, { message: "JWT DAIN context mismatch: smart_account_pda does not match account_context.smartAccount.pda" });
+    if (account?.smartAccount?.pda &&
+        smartAccountPDA &&
+        account.smartAccount.pda !== smartAccountPDA) {
+        throw new http_exception_1.HTTPException(401, {
+            message: "JWT DAIN context mismatch: smart_account_pda does not match account_context.smartAccount.pda",
+        });
     }
     const grants = getArrayClaim(payload, "action_grants");
     const dataPermissions = getArrayClaim(payload, "data_permissions");
@@ -184,15 +190,23 @@ function getRuntimeContextFromJwtPayload(payload, options = {}) {
 }
 function getRuntimeContextFromAgentInfo(agentInfo) {
     return {
-        ...(agentInfo.dainAccountId ? { dainAccountId: agentInfo.dainAccountId } : {}),
+        ...(agentInfo.dainAccountId
+            ? { dainAccountId: agentInfo.dainAccountId }
+            : {}),
         ...(agentInfo.dainGroupId ? { dainGroupId: agentInfo.dainGroupId } : {}),
-        ...(agentInfo.smartAccountPDA ? { smartAccountPDA: agentInfo.smartAccountPDA } : {}),
+        ...(agentInfo.smartAccountPDA
+            ? { smartAccountPDA: agentInfo.smartAccountPDA }
+            : {}),
         ...(agentInfo.account ? { account: agentInfo.account } : {}),
         ...(agentInfo.group ? { group: agentInfo.group } : {}),
         ...(agentInfo.auth ? { auth: agentInfo.auth } : {}),
         ...(agentInfo.grants ? { grants: agentInfo.grants } : {}),
-        ...(agentInfo.dataPermissions ? { dataPermissions: agentInfo.dataPermissions } : {}),
-        ...(agentInfo.registryPolicy ? { registryPolicy: agentInfo.registryPolicy } : {}),
+        ...(agentInfo.dataPermissions
+            ? { dataPermissions: agentInfo.dataPermissions }
+            : {}),
+        ...(agentInfo.registryPolicy
+            ? { registryPolicy: agentInfo.registryPolicy }
+            : {}),
     };
 }
 function getRequestExtraData(request) {
@@ -221,12 +235,14 @@ function buildServiceExtraData(agentInfo, options = {}) {
  */
 function requireScope(requiredScope) {
     return async (c, next) => {
-        const scopes = c.get('scope') || [];
-        const requiredScopes = Array.isArray(requiredScope) ? requiredScope : [requiredScope];
-        const hasRequiredScope = requiredScopes.some(scope => (0, auth_2.hasScope)(scopes, scope));
+        const scopes = c.get("scope") || [];
+        const requiredScopes = Array.isArray(requiredScope)
+            ? requiredScope
+            : [requiredScope];
+        const hasRequiredScope = requiredScopes.some((scope) => (0, auth_2.hasScope)(scopes, scope));
         if (!hasRequiredScope) {
             throw new http_exception_1.HTTPException(403, {
-                message: `Insufficient scope. Required: ${requiredScopes.join(' OR ')}, Have: ${scopes.join(', ')}`
+                message: `Insufficient scope. Required: ${requiredScopes.join(" OR ")}, Have: ${scopes.join(", ")}`,
             });
         }
         await next();
@@ -256,16 +272,26 @@ function signedStreamSSE(c, privateKey, config, handler) {
                 const messageHash = (0, sseSignature_1.hashEventMessage)(event.data, timestamp);
                 const signature = (0, utils_js_1.bytesToHex)(sseSignature_1.ed25519.sign(messageHash, privateKey));
                 // Fast path for non-critical events (progress/UI updates)
-                const isCriticalEvent = event.event === 'result' ||
-                    event.event === 'process-created' ||
-                    event.event === 'datasource-update';
+                const isCriticalEvent = event.event === "result" ||
+                    event.event === "process-created" ||
+                    event.event === "datasource-update";
                 const dataWithSignature = isCriticalEvent
                     ? JSON.stringify({
                         data: JSON.parse(event.data),
-                        _signature: { signature, timestamp, agentId: config.identity.agentId, orgId: config.identity.orgId, address: config.identity.publicKey }
+                        _signature: {
+                            signature,
+                            timestamp,
+                            agentId: config.identity.agentId,
+                            orgId: config.identity.orgId,
+                            address: config.identity.publicKey,
+                        },
                     })
                     : `{"data":${event.data},"_signature":{"signature":"${signature}","timestamp":"${timestamp}","agentId":"${config.identity.agentId}","orgId":"${config.identity.orgId}","address":"${config.identity.publicKey}"}}`;
-                await stream.writeSSE({ event: event.event, data: dataWithSignature, id: event.id });
+                await stream.writeSSE({
+                    event: event.event,
+                    data: dataWithSignature,
+                    id: event.id,
+                });
             },
             isAborted,
             onAbort: (listener) => stream.onAbort(listener),
@@ -285,7 +311,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         serviceId: "service_" + config.identity.orgId + "_" + config.identity.agentId,
         privateKey,
         store: config.processStore,
-        onHumanActionResponse: config.onHumanActionResponse
+        onHumanActionResponse: config.onHumanActionResponse,
     });
     app.processes = processHandler;
     // CORS middleware - apply to all routes
@@ -334,7 +360,8 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         const isStreaming = acceptHeader.includes("text/event-stream");
         await next();
         // Skip signature for streaming responses
-        if (isStreaming || c.res.headers.get("content-type")?.includes("text/event-stream")) {
+        if (isStreaming ||
+            c.res.headers.get("content-type")?.includes("text/event-stream")) {
             return;
         }
         const body = await c.res.clone().text();
@@ -347,12 +374,14 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
     });
     // Get all webhook paths for auth bypass
     const webhookPaths = config.webhookTriggers?.getWebhookPaths() || [];
-    const hitlPath = config.hitl?.enabled ? (config.hitl.webhookPath || '/actions') : null;
+    const hitlPath = config.hitl?.enabled
+        ? config.hitl.webhookPath || "/actions"
+        : null;
     // Dual Authentication: JWT (users) or API Key (services)
     app.use("*", async (c, next) => {
         debugLog(`[Auth Middleware] Path: ${c.req.path}, Method: ${c.req.method}`);
         // Check if path is a webhook path (auth bypass)
-        const isWebhookPath = webhookPaths.some(path => c.req.path === path);
+        const isWebhookPath = webhookPaths.some((path) => c.req.path === path);
         const isHITLPath = hitlPath && c.req.path === hitlPath;
         if (c.req.path.startsWith("/oauth2/callback/") ||
             c.req.path.startsWith("/addons") ||
@@ -374,16 +403,20 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             const host = getFirstForwardedValue(c.req.header("x-forwarded-host")) ||
                 getFirstForwardedValue(c.req.header("host"));
             if (!host) {
-                throw new http_exception_1.HTTPException(400, { message: "Unable to determine service URL. Host header is required." });
+                throw new http_exception_1.HTTPException(400, {
+                    message: "Unable to determine service URL. Host header is required.",
+                });
             }
             // Validate host format to prevent obvious attacks
-            if (host.includes(' ') || host.includes('\n') || host.includes('\r')) {
+            if (host.includes(" ") || host.includes("\n") || host.includes("\r")) {
                 throw new http_exception_1.HTTPException(400, { message: "Invalid Host header format" });
             }
             const xForwardedProto = getFirstForwardedValue(c.req.header("x-forwarded-proto"));
             const protocol = xForwardedProto === "http" || xForwardedProto === "https"
                 ? xForwardedProto
-                : (host.includes("localhost") || host.startsWith("127.") ? "http" : "https");
+                : host.includes("localhost") || host.startsWith("127.")
+                    ? "http"
+                    : "https";
             const forwardedPrefix = normalizeForwardedPrefix(getFirstForwardedValue(c.req.header("x-forwarded-prefix")));
             const jwtAudiences = [`${protocol}://${host}`];
             if (forwardedPrefix) {
@@ -396,7 +429,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 audience: jwtAudiences,
             });
             if (!result.valid) {
-                throw new http_exception_1.HTTPException(401, { message: `JWT verification failed: ${result.error}` });
+                throw new http_exception_1.HTTPException(401, {
+                    message: `JWT verification failed: ${result.error}`,
+                });
             }
             // Defense in depth: double-check audience claim
             const tokenAudiences = Array.isArray(result.payload?.aud)
@@ -406,21 +441,21 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             const audienceMatched = tokenAudiences.some((aud) => aud && expectedAudienceSet.has(aud));
             if (!audienceMatched) {
                 throw new http_exception_1.HTTPException(403, {
-                    message: `JWT audience mismatch. Expected one of: ${jwtAudiences.join(", ")}, Got: ${tokenAudiences.filter(Boolean).join(", ")}`
+                    message: `JWT audience mismatch. Expected one of: ${jwtAudiences.join(", ")}, Got: ${tokenAudiences.filter(Boolean).join(", ")}`,
                 });
             }
-            c.set('authMethod', 'jwt');
-            c.set('smartAccountId', result.smartAccountId);
-            c.set('address', result.smartAccountId); // Use smartAccountId as address for JWT auth
-            c.set('scope', result.scope);
-            c.set('jwtPayload', result.payload);
+            c.set("authMethod", "jwt");
+            c.set("smartAccountId", result.smartAccountId);
+            c.set("address", result.smartAccountId); // Use smartAccountId as address for JWT auth
+            c.set("scope", result.scope);
+            c.set("jwtPayload", result.payload);
             const jwtRuntimeContext = getRuntimeContextFromJwtPayload(result.payload, {
                 scopes: result.scope,
                 smartAccountId: result.smartAccountId,
                 fallbackSmartAccountPDA: c.req.header("X-DAIN-SMART-ACCOUNT-PDA"),
             });
-            c.set('dainRuntimeContext', jwtRuntimeContext);
-            c.set('smartAccountPDA', jwtRuntimeContext.smartAccountPDA);
+            c.set("dainRuntimeContext", jwtRuntimeContext);
+            c.set("smartAccountPDA", jwtRuntimeContext.smartAccountPDA);
             debugLog(`[Auth Middleware] JWT auth SUCCESS - smartAccountId: ${result.smartAccountId}`);
         }
         else if (apiKey) {
@@ -438,15 +473,21 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                     throw new http_exception_1.HTTPException(401, { message: "Invalid API key" });
                 }
             }
-            c.set('authMethod', 'apiKey');
-            c.set('agentId', parsed.agentId);
-            c.set('orgId', parsed.orgId);
-            c.set('address', parsed.agentId); // Use agentId as address for API key auth
-            c.set('smartAccountPDA', c.req.header("X-DAIN-SMART-ACCOUNT-PDA"));
-            c.set('dainRuntimeContext', {
-                ...(c.req.header("X-DAIN-ACCOUNT-ID") ? { dainAccountId: c.req.header("X-DAIN-ACCOUNT-ID") } : {}),
-                ...(c.req.header("X-DAIN-GROUP-ID") ? { dainGroupId: c.req.header("X-DAIN-GROUP-ID") } : {}),
-                ...(c.req.header("X-DAIN-SMART-ACCOUNT-PDA") ? { smartAccountPDA: c.req.header("X-DAIN-SMART-ACCOUNT-PDA") } : {}),
+            c.set("authMethod", "apiKey");
+            c.set("agentId", parsed.agentId);
+            c.set("orgId", parsed.orgId);
+            c.set("address", parsed.agentId); // Use agentId as address for API key auth
+            c.set("smartAccountPDA", c.req.header("X-DAIN-SMART-ACCOUNT-PDA"));
+            c.set("dainRuntimeContext", {
+                ...(c.req.header("X-DAIN-ACCOUNT-ID")
+                    ? { dainAccountId: c.req.header("X-DAIN-ACCOUNT-ID") }
+                    : {}),
+                ...(c.req.header("X-DAIN-GROUP-ID")
+                    ? { dainGroupId: c.req.header("X-DAIN-GROUP-ID") }
+                    : {}),
+                ...(c.req.header("X-DAIN-SMART-ACCOUNT-PDA")
+                    ? { smartAccountPDA: c.req.header("X-DAIN-SMART-ACCOUNT-PDA") }
+                    : {}),
             });
             debugLog(`[Auth Middleware] API Key auth SUCCESS - agentId: ${parsed.agentId}, orgId: ${parsed.orgId}`);
         }
@@ -458,14 +499,17 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
     });
     async function getAgentInfo(c) {
         debugLog("[getAgentInfo] START");
-        debugLog("[getAgentInfo] Auth method:", c.get('authMethod'));
-        const runtimeContext = (c.get('dainRuntimeContext') || {});
-        const smartAccountPDA = runtimeContext.smartAccountPDA || c.get('smartAccountPDA') || c.req.header("X-DAIN-SMART-ACCOUNT-PDA");
+        debugLog("[getAgentInfo] Auth method:", c.get("authMethod"));
+        const runtimeContext = (c.get("dainRuntimeContext") ||
+            {});
+        const smartAccountPDA = runtimeContext.smartAccountPDA ||
+            c.get("smartAccountPDA") ||
+            c.req.header("X-DAIN-SMART-ACCOUNT-PDA");
         const webhookUrl = c.req.header("X-DAIN-WEBHOOK-URL");
         debugLog("[getAgentInfo] smartAccountPDA:", smartAccountPDA);
         debugLog("[getAgentInfo] webhookUrl:", webhookUrl);
-        if (c.get('authMethod') === 'jwt') {
-            const smartAccountId = c.get('smartAccountId');
+        if (c.get("authMethod") === "jwt") {
+            const smartAccountId = c.get("smartAccountId");
             debugLog("[getAgentInfo] JWT auth - smartAccountId:", smartAccountId);
             const agentInfo = {
                 agentId: smartAccountId,
@@ -481,14 +525,16 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 registryPolicy: runtimeContext.registryPolicy,
                 id: runtimeContext.dainAccountId ??
                     runtimeContext.dainGroupId ??
-                    (smartAccountPDA ? `dain_id_${smartAccountPDA}` : `smart_account_${smartAccountId}`),
+                    (smartAccountPDA
+                        ? `dain_id_${smartAccountPDA}`
+                        : `smart_account_${smartAccountId}`),
                 webhookUrl,
             };
             debugLog("[getAgentInfo] JWT - Returning agent info:", agentInfo);
             return agentInfo;
         }
-        const agentId = c.get('agentId');
-        const address = c.get('address');
+        const agentId = c.get("agentId");
+        const address = c.get("address");
         debugLog("[getAgentInfo] API Key auth - agentId:", agentId, "address:", address);
         const agentInfo = {
             agentId,
@@ -534,7 +580,8 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
     app.get("/metadata", (c) => {
         // Compute service-level capability: does ANY tool support user actions (HITL)?
         const supportsUserActions = tools.some((tool) => tool.supportsUserActions === true);
-        const requestedContract = c.req.header("x-butterfly-contract") || c.req.header("X-Butterfly-Contract");
+        const requestedContract = c.req.header("x-butterfly-contract") ||
+            c.req.header("X-Butterfly-Contract");
         const sdkMajor = Number.parseInt(String(package_json_1.default.version).split(".")[0] || "0", 10);
         const contractVersion = Number.isFinite(sdkMajor) && sdkMajor > 0 ? `${sdkMajor}.0.0` : "0.0.0";
         const capabilities = {
@@ -553,6 +600,8 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             actionGrants: true,
             smartAccountTransactions: true,
             payments: true,
+            registryPolicy: true,
+            grantPolicies: true,
         };
         const compatibility = (() => {
             if (!requestedContract)
@@ -619,7 +668,11 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         const autoContexts = app.oauth2?.getDirectProviderContexts?.() || [];
         const serviceSlug = (0, core_1.toSlug)(metadata.title);
         const skillsContext = config.skills?.getSkillsContext?.(serviceSlug);
-        const allContexts = [...contexts, ...autoContexts, ...(skillsContext ? [skillsContext] : [])];
+        const allContexts = [
+            ...contexts,
+            ...autoContexts,
+            ...(skillsContext ? [skillsContext] : []),
+        ];
         const contextInfo = allContexts.map((context) => ({
             id: context.id,
             name: context.name,
@@ -638,7 +691,11 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         const autoContexts = app.oauth2?.getDirectProviderContexts?.() || [];
         const serviceSlug = (0, core_1.toSlug)(metadata.title);
         const skillsContext = config.skills?.getSkillsContext?.(serviceSlug);
-        const allContexts = [...contexts, ...autoContexts, ...(skillsContext ? [skillsContext] : [])];
+        const allContexts = [
+            ...contexts,
+            ...autoContexts,
+            ...(skillsContext ? [skillsContext] : []),
+        ];
         const context = allContexts.find((ctx) => ctx.id === c.req.param("contextId"));
         if (context) {
             const agentInfo = await getAgentInfo(c);
@@ -655,7 +712,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 id: context.id,
                 name: context.name,
                 description: context.description,
-                data: contextData
+                data: contextData,
             };
             const processedResponse = await processPluginsForResponse(response, body, { extraData });
             return c.json(processedResponse);
@@ -677,7 +734,11 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         const autoContexts = app.oauth2?.getDirectProviderContexts?.() || [];
         const serviceSlug = (0, core_1.toSlug)(metadata.title);
         const skillsContext = config.skills?.getSkillsContext?.(serviceSlug);
-        const allContexts = [...contexts, ...autoContexts, ...(skillsContext ? [skillsContext] : [])];
+        const allContexts = [
+            ...contexts,
+            ...autoContexts,
+            ...(skillsContext ? [skillsContext] : []),
+        ];
         const contextsFull = await Promise.all(allContexts.map(async (ctx) => ({
             id: ctx.id,
             name: ctx.name,
@@ -697,8 +758,10 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         });
         const widgetIds = config.getUserWidgets
             ? await config.getUserWidgets(agentInfo, extraData)
-            : widgets.map(widget => widget.id);
-        const processedResponse = await processPluginsForResponse(widgetIds, body, { extraData });
+            : widgets.map((widget) => widget.id);
+        const processedResponse = await processPluginsForResponse(widgetIds, body, {
+            extraData,
+        });
         return c.json(processedResponse);
     });
     app.post("/widgets/all", async (c) => {
@@ -710,7 +773,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 request: processedPluginData,
                 plugins: processedPluginData.plugins,
             }))
-            : widgets.map(widget => widget.id);
+            : widgets.map((widget) => widget.id);
         const oauth2Client = app.oauth2?.getClient();
         const extraData = buildServiceExtraData(agentInfo, {
             request: processedPluginData,
@@ -719,7 +782,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             app,
         });
         const widgetsFull = await Promise.all(widgetIds.map(async (widgetId) => {
-            const widget = widgets.find(w => w.id === widgetId);
+            const widget = widgets.find((w) => w.id === widgetId);
             if (!widget)
                 return null;
             const widgetData = await widget.getWidget(agentInfo, extraData);
@@ -730,7 +793,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 icon: widget.icon,
                 size: widget.size || "sm",
                 refreshIntervalMs: widget.refreshIntervalMs,
-                ...widgetData
+                ...widgetData,
             };
             if (!("freshness" in response)) {
                 response.freshness = {
@@ -744,13 +807,13 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             }
             return response;
         }));
-        const validWidgets = widgetsFull.filter(w => w !== null);
+        const validWidgets = widgetsFull.filter((w) => w !== null);
         const processedResponse = await processPluginsForResponse(validWidgets, body, { extraData });
         return c.json(processedResponse);
     });
     app.post("/widgets/:widgetId", async (c) => {
         const widgetId = c.req.param("widgetId");
-        const widget = widgets.find(w => w.id === widgetId);
+        const widget = widgets.find((w) => w.id === widgetId);
         if (!widget) {
             throw new http_exception_1.HTTPException(404, { message: "Widget not found" });
         }
@@ -763,16 +826,19 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 plugins: processedPluginData.plugins,
             });
             const userWidgetIds = await config.getUserWidgets(agentInfo, {
-                ...accessExtraData
+                ...accessExtraData,
             });
             let homeUIWidgetId = null;
             if (config.homeUI) {
-                homeUIWidgetId = typeof config.homeUI === 'string'
-                    ? config.homeUI
-                    : await config.homeUI(agentInfo, accessExtraData);
+                homeUIWidgetId =
+                    typeof config.homeUI === "string"
+                        ? config.homeUI
+                        : await config.homeUI(agentInfo, accessExtraData);
             }
             if (!userWidgetIds.includes(widgetId) && widgetId !== homeUIWidgetId) {
-                throw new http_exception_1.HTTPException(403, { message: "Access denied to this widget" });
+                throw new http_exception_1.HTTPException(403, {
+                    message: "Access denied to this widget",
+                });
             }
         }
         const oauth2Client = app.oauth2?.getClient();
@@ -790,7 +856,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             icon: widget.icon,
             size: widget.size || "sm",
             refreshIntervalMs: widget.refreshIntervalMs,
-            ...widgetData
+            ...widgetData,
         };
         if (!("freshness" in response)) {
             response.freshness = {
@@ -802,7 +868,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 scope: "account",
             };
         }
-        const processedResponse = await processPluginsForResponse(response, body, { extraData });
+        const processedResponse = await processPluginsForResponse(response, body, {
+            extraData,
+        });
         return c.json(processedResponse);
     });
     app.post("/homeUI", async (c) => {
@@ -816,13 +884,13 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             request: processedPluginData,
             plugins: processedPluginData.plugins,
         });
-        const homeUIWidgetId = typeof config.homeUI === 'string'
+        const homeUIWidgetId = typeof config.homeUI === "string"
             ? config.homeUI
             : await config.homeUI(agentInfo, extraData);
         if (!homeUIWidgetId) {
             return c.json({ widgetId: null });
         }
-        const widget = widgets.find(w => w.id === homeUIWidgetId);
+        const widget = widgets.find((w) => w.id === homeUIWidgetId);
         if (!widget) {
             return c.json({ widgetId: null });
         }
@@ -927,7 +995,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                     .join(", ");
                 return c.json({
                     error: `Missing or invalid parameters: ${missingParams}`,
-                    code: "INVALID_PARAMS"
+                    code: "INVALID_PARAMS",
                 }, 400);
             }
             throw error;
@@ -960,17 +1028,23 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             typeof rawBody === "object" &&
             !Array.isArray(rawBody) &&
             "params" in rawBody;
-        const requestedIntervalMsRaw = hasWrappedParams ? rawBody.intervalMs : undefined;
-        const requestedStreamIdRaw = hasWrappedParams ? rawBody.streamId : undefined;
+        const requestedIntervalMsRaw = hasWrappedParams
+            ? rawBody.intervalMs
+            : undefined;
+        const requestedStreamIdRaw = hasWrappedParams
+            ? rawBody.streamId
+            : undefined;
         const streamId = typeof requestedStreamIdRaw === "string" &&
             /^[A-Za-z0-9._:-]{1,128}$/.test(requestedStreamIdRaw)
             ? requestedStreamIdRaw
             : null;
-        const requestParamsRaw = hasWrappedParams ? rawBody.params : rawBody;
-        let params = await processPluginsForRequest(requestParamsRaw && typeof requestParamsRaw === "object" ? requestParamsRaw : {}, agentInfo);
-        const pluginsData = (params.plugins && typeof params.plugins === "object"
-            ? params.plugins
-            : {});
+        const requestParamsRaw = hasWrappedParams
+            ? rawBody.params
+            : rawBody;
+        let params = await processPluginsForRequest(requestParamsRaw && typeof requestParamsRaw === "object"
+            ? requestParamsRaw
+            : {}, agentInfo);
+        const pluginsData = (params.plugins && typeof params.plugins === "object" ? params.plugins : {});
         delete params.plugins;
         let parsedParams;
         try {
@@ -983,7 +1057,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                     .join(", ");
                 return c.json({
                     error: `Missing or invalid parameters: ${missingParams}`,
-                    code: "INVALID_PARAMS"
+                    code: "INVALID_PARAMS",
                 }, 400);
             }
             throw error;
@@ -1016,11 +1090,14 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             scope: datasource.scope,
             dataClass: datasource.dataClass,
         };
-        const requestedIntervalMs = typeof requestedIntervalMsRaw === "number" && Number.isFinite(requestedIntervalMsRaw) && requestedIntervalMsRaw > 0
+        const requestedIntervalMs = typeof requestedIntervalMsRaw === "number" &&
+            Number.isFinite(requestedIntervalMsRaw) &&
+            requestedIntervalMsRaw > 0
             ? requestedIntervalMsRaw
             : null;
         const baseIntervalMs = requestedIntervalMs ??
-            (typeof datasource.refreshIntervalMs === "number" && datasource.refreshIntervalMs > 0
+            (typeof datasource.refreshIntervalMs === "number" &&
+                datasource.refreshIntervalMs > 0
                 ? datasource.refreshIntervalMs
                 : 15_000);
         const intervalMs = Math.max(1_000, Math.floor(baseIntervalMs));
@@ -1033,7 +1110,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             if (streamKey) {
                 datasourceStreamAbortControllers.set(streamKey, streamAbortController);
             }
-            const isCancelled = () => stream.isAborted() || signal?.aborted === true || streamAbortController.signal.aborted;
+            const isCancelled = () => stream.isAborted() ||
+                signal?.aborted === true ||
+                streamAbortController.signal.aborted;
             const emitUpdate = async () => {
                 if (isCancelled())
                     return false;
@@ -1081,7 +1160,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                     if (!isCancelled()) {
                         await stream.writeSSE({
                             event: "error",
-                            data: JSON.stringify({ message: error?.message || "Datasource stream error" }),
+                            data: JSON.stringify({
+                                message: error?.message || "Datasource stream error",
+                            }),
                         });
                     }
                     return;
@@ -1118,7 +1199,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                         if (!isCancelled()) {
                             await stream.writeSSE({
                                 event: "error",
-                                data: JSON.stringify({ message: error?.message || "Datasource stream error" }),
+                                data: JSON.stringify({
+                                    message: error?.message || "Datasource stream error",
+                                }),
                             });
                         }
                     }
@@ -1139,7 +1222,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             context: agent.context,
             prompt: agent.prompt,
             resolveCondition: agent.resolveCondition,
-            serviceConnections: agent.serviceConnections || [process.env.BASE_URL || 'http://localhost:3000'],
+            serviceConnections: agent.serviceConnections || [
+                process.env.BASE_URL || "http://localhost:3000",
+            ],
             inputSchema: (0, schemaStructure_1.zodToJsonSchema)(agent.input),
             outputSchema: (0, schemaStructure_1.zodToJsonSchema)(agent.output),
         };
@@ -1183,14 +1268,16 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         return c.json(processedResponse);
     });
     function fixEmptySchemas(schema) {
-        if (!schema || typeof schema !== 'object')
+        if (!schema || typeof schema !== "object")
             return;
-        if (schema.properties && typeof schema.properties === 'object') {
+        if (schema.properties && typeof schema.properties === "object") {
             const props = schema.properties;
             for (const key of Object.keys(props)) {
                 const prop = props[key];
-                if (prop && typeof prop === 'object' && Object.keys(prop).length === 0) {
-                    props[key] = { type: 'object' };
+                if (prop &&
+                    typeof prop === "object" &&
+                    Object.keys(prop).length === 0) {
+                    props[key] = { type: "object" };
                 }
                 fixEmptySchemas(prop);
             }
@@ -1203,10 +1290,10 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         let inputSchema = (0, schemaStructure_1.zodToJsonSchema)(tool.input);
         let outputSchema = (0, schemaStructure_1.zodToJsonSchema)(tool.output);
         if (!inputSchema.type) {
-            inputSchema = { ...inputSchema, type: 'object' };
+            inputSchema = { ...inputSchema, type: "object" };
         }
         if (!outputSchema.type) {
-            outputSchema = { ...outputSchema, type: 'object' };
+            outputSchema = { ...outputSchema, type: "object" };
         }
         fixEmptySchemas(inputSchema);
         fixEmptySchemas(outputSchema);
@@ -1273,11 +1360,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
     // Configure trigger forwarding (uses HITL config for automation API)
     if (config.webhookTriggers) {
         // Resolve automation API URL (priority: hitl config > env)
-        const automationApiUrl = config.hitl?.automationApiUrl ||
-            process.env.AUTOMATION_API_URL;
+        const automationApiUrl = config.hitl?.automationApiUrl || process.env.AUTOMATION_API_URL;
         // Resolve API key
-        const automationApiKey = config.hitl?.automationApiKey ||
-            process.env.AUTOMATION_API_KEY;
+        const automationApiKey = config.hitl?.automationApiKey || process.env.AUTOMATION_API_KEY;
         // Resolve service URL (priority: oauth2.baseUrl > env)
         const serviceUrl = config.oauth2?.baseUrl ||
             process.env.SERVICE_BASE_URL ||
@@ -1300,10 +1385,12 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                         try {
                             const registerUrl = `${automationApiUrl}/webhooks/register-triggers`;
                             const response = await fetch(registerUrl, {
-                                method: 'POST',
+                                method: "POST",
                                 headers: {
-                                    'Content-Type': 'application/json',
-                                    ...(automationApiKey ? { 'Authorization': `Bearer ${automationApiKey}` } : {}),
+                                    "Content-Type": "application/json",
+                                    ...(automationApiKey
+                                        ? { Authorization: `Bearer ${automationApiKey}` }
+                                        : {}),
                                 },
                                 body: JSON.stringify({
                                     serviceUrl,
@@ -1328,10 +1415,10 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         }
         else {
             if (!automationApiUrl) {
-                console.warn('[Webhook] Trigger forwarding disabled: missing automationApiUrl (set hitl.automationApiUrl or AUTOMATION_API_URL)');
+                console.warn("[Webhook] Trigger forwarding disabled: missing automationApiUrl (set hitl.automationApiUrl or AUTOMATION_API_URL)");
             }
             if (!serviceUrl) {
-                console.warn('[Webhook] Trigger forwarding disabled: missing serviceUrl (set oauth2.baseUrl or SERVICE_BASE_URL)');
+                console.warn("[Webhook] Trigger forwarding disabled: missing serviceUrl (set oauth2.baseUrl or SERVICE_BASE_URL)");
             }
         }
     }
@@ -1356,7 +1443,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                             success: true,
                             triggerId: result.triggerId,
                             triggerName: result.triggerName,
-                            data: result.data
+                            data: result.data,
                         });
                     }
                     else {
@@ -1364,7 +1451,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                         // No trigger matched - return 200 OK but with success: false
                         return c.json({
                             success: false,
-                            message: 'No trigger matched'
+                            message: "No trigger matched",
                         }, 200);
                     }
                 }
@@ -1372,22 +1459,22 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                     console.error(`[Webhook] Error processing webhook at ${path}:`, error);
                     // Return error response
                     throw new http_exception_1.HTTPException(500, {
-                        message: `Webhook processing failed: ${error.message}`
+                        message: `Webhook processing failed: ${error.message}`,
                     });
                 }
             });
         }
-        console.log(`[Webhook] Registered ${webhookPaths.length} webhook endpoint(s): ${webhookPaths.join(', ')}`);
+        console.log(`[Webhook] Registered ${webhookPaths.length} webhook endpoint(s): ${webhookPaths.join(", ")}`);
     }
     // Auto-register HITL action webhook
     if (config.hitl?.enabled) {
-        const hitlPath = config.hitl.webhookPath || '/actions';
+        const hitlPath = config.hitl.webhookPath || "/actions";
         const automationApiUrl = config.hitl.automationApiUrl ||
             process.env.AUTOMATION_API_URL ||
-            'http://localhost:3000';
+            "http://localhost:3000";
         const automationApiKey = config.hitl.automationApiKey || process.env.AUTOMATION_API_KEY;
         if (!automationApiUrl) {
-            console.warn('[HITL] Enabled but missing automationApiUrl - HITL webhook will not work correctly');
+            console.warn("[HITL] Enabled but missing automationApiUrl - HITL webhook will not work correctly");
         }
         const hitlHandler = new hitl_1.HITLHandler({
             automationApiUrl,
@@ -1398,19 +1485,19 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             try {
                 const body = await c.req.json();
                 const { action, context } = body;
-                if (!action || typeof action !== 'string') {
+                if (!action || typeof action !== "string") {
                     throw new http_exception_1.HTTPException(400, {
                         message: 'Missing or invalid "action" field in request body',
                     });
                 }
-                if (!context || typeof context !== 'object') {
+                if (!context || typeof context !== "object") {
                     throw new http_exception_1.HTTPException(400, {
                         message: 'Missing or invalid "context" field in request body',
                     });
                 }
                 if (!hitlHandler.isValidAction(action)) {
                     throw new http_exception_1.HTTPException(400, {
-                        message: 'Invalid action format. Expected: scope:id:action[:payload]',
+                        message: "Invalid action format. Expected: scope:id:action[:payload]",
                     });
                 }
                 const result = await hitlHandler.handleAction(action, context);
@@ -1420,7 +1507,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 if (error instanceof http_exception_1.HTTPException) {
                     throw error;
                 }
-                console.error('[HITL] Error processing action:', error);
+                console.error("[HITL] Error processing action:", error);
                 throw new http_exception_1.HTTPException(500, {
                     message: `Action processing failed: ${error.message}`,
                 });
@@ -1532,7 +1619,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 const oauthTool = (0, core_1.createOAuth2Tool)(providerName, serviceSlug, {
                     logoUrl: providerConfig.logoUrl,
                     reason: providerConfig.reason,
-                    requiredTools: providerConfig.requiredTools
+                    requiredTools: providerConfig.requiredTools,
                 });
                 autoOAuth2Tools.push(oauthTool);
             });
@@ -1562,11 +1649,17 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             }
             try {
                 await app.oauth2.handleCallback(code, state);
-                return c.html("<html><body><script>window.opener.postMessage({ type: 'oauth2-success', provider: '" + provider + "' }, '*');window.close();</script><h1>Authentication successful! You can close this window.</h1></body></html>");
+                return c.html("<html><body><script>window.opener.postMessage({ type: 'oauth2-success', provider: '" +
+                    provider +
+                    "' }, '*');window.close();</script><h1>Authentication successful! You can close this window.</h1></body></html>");
             }
             catch (error) {
                 console.error("OAuth callback error:", error);
-                return c.html("<html><body><script>window.opener.postMessage({ type: 'oauth2-error', provider: '" + provider + "', error: '" + error.message + "' }, '*');window.close();</script><h1>Authentication failed! You can close this window.</h1></body></html>");
+                return c.html("<html><body><script>window.opener.postMessage({ type: 'oauth2-error', provider: '" +
+                    provider +
+                    "', error: '" +
+                    error.message +
+                    "' }, '*');window.close();</script><h1>Authentication failed! You can close this window.</h1></body></html>");
             }
         });
         // Make oauth2Handler available to tools
@@ -1585,7 +1678,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         }
         catch (error) {
             if (error.message === "Unauthorized access to process") {
-                throw new http_exception_1.HTTPException(403, { message: "Unauthorized access to process" });
+                throw new http_exception_1.HTTPException(403, {
+                    message: "Unauthorized access to process",
+                });
             }
             throw error;
         }
@@ -1601,7 +1696,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         const providersWithStatus = await Promise.all(providers.map(async ({ name, config }) => ({
             name,
             config,
-            connected: await app.oauth2.hasValidTokens(name, agentInfo.id)
+            connected: await app.oauth2.hasValidTokens(name, agentInfo.id),
         })));
         return c.json(providersWithStatus);
     });
@@ -1618,7 +1713,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
     app.get("/oauth2/connect/:provider", async (c) => {
         debugLog("[OAuth2 Connect] Route hit - START");
         debugLog("[OAuth2 Connect] Provider param:", c.req.param("provider"));
-        debugLog("[OAuth2 Connect] Auth method:", c.get('authMethod'));
+        debugLog("[OAuth2 Connect] Auth method:", c.get("authMethod"));
         debugLog("[OAuth2 Connect] Headers:", {
             authorization: c.req.header("Authorization"),
             apiKey: c.req.header("X-DAIN-API-KEY"),
@@ -1649,7 +1744,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         catch (error) {
             debugLog("[OAuth2 Connect] ERROR generating auth URL:", error);
             throw new http_exception_1.HTTPException(400, {
-                message: `Invalid provider: ${provider}`
+                message: `Invalid provider: ${provider}`,
             });
         }
     });
@@ -1667,8 +1762,8 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         if (isComplete) {
             const config = await setupManager.getProviderConfig(agentInfo.id, provider);
             return c.json({
-                status: 'complete',
-                config: config ? { configuredAt: config.configuredAt } : undefined
+                status: "complete",
+                config: config ? { configuredAt: config.configuredAt } : undefined,
             });
         }
         // Check if there's a pending setup
@@ -1676,15 +1771,15 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         if (pendingSetup) {
             const expiresIn = Math.max(0, Math.floor((pendingSetup.expiresAt - Date.now()) / 1000));
             return c.json({
-                status: 'authorization_pending',
+                status: "authorization_pending",
                 expires_in: expiresIn,
-                interval: 5 // Poll every 5 seconds
+                interval: 5, // Poll every 5 seconds
             });
         }
         // No setup in progress
         return c.json({
-            status: 'not_found',
-            error: 'No setup in progress for this provider'
+            status: "not_found",
+            error: "No setup in progress for this provider",
         });
     });
     // Get all human actions for a process
@@ -1697,13 +1792,15 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         }
         if (process.agentId !== agentInfo.id) {
             debugLog("Unauthorized access to process", process.agentId, agentInfo.id);
-            throw new http_exception_1.HTTPException(403, { message: "Unauthorized access to process" });
+            throw new http_exception_1.HTTPException(403, {
+                message: "Unauthorized access to process",
+            });
         }
         return c.json(process.humanActions);
     });
     // Get specific human action
     app.get("/processes/:processId/human-actions/:stepId", async (c) => {
-        debugLog('GET human action request:', c.req.path);
+        debugLog("GET human action request:", c.req.path);
         const processId = c.req.param("processId");
         const stepId = c.req.param("stepId");
         const agentInfo = await getAgentInfo(c);
@@ -1713,7 +1810,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         }
         if (process.agentId !== agentInfo.id) {
             debugLog("Unauthorized access to process", process.agentId, agentInfo.id);
-            throw new http_exception_1.HTTPException(403, { message: "Unauthorized access to process" });
+            throw new http_exception_1.HTTPException(403, {
+                message: "Unauthorized access to process",
+            });
         }
         const step = await app.processes.checkHumanAction(processId, stepId);
         if (!step) {
@@ -1732,7 +1831,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         }
         if (process.agentId !== agentInfo.id) {
             debugLog("Unauthorized access to process", process.agentId, agentInfo.id);
-            throw new http_exception_1.HTTPException(403, { message: "Unauthorized access to process" });
+            throw new http_exception_1.HTTPException(403, {
+                message: "Unauthorized access to process",
+            });
         }
         const body = await c.req.json();
         const { actionId, responseText, data } = body;
@@ -1763,7 +1864,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         }
         catch (error) {
             console.error(`Error generating confirmation UI for tool ${tool.id}:`, error);
-            throw new http_exception_1.HTTPException(500, { message: "Error generating confirmation UI" });
+            throw new http_exception_1.HTTPException(500, {
+                message: "Error generating confirmation UI",
+            });
         }
     });
     app.get("/exampleQueries", (c) => {
@@ -1799,7 +1902,10 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
     // Toolboxes list endpoint
     app.get("/toolboxes", (c) => c.json(toolboxes));
     function normalizeRecommendationText(value) {
-        return value.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
+        return value
+            .toLowerCase()
+            .replace(/[^a-z0-9]+/g, " ")
+            .trim();
     }
     function tokenizeRecommendationQuery(query) {
         const normalized = normalizeRecommendationText(query);
@@ -1818,7 +1924,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                     throw new Error(`Duplicate recommendation card ID "${scopedCardId}". Card IDs must be unique per tool.`);
                 }
                 const isDynamic = !!card.inputSchema;
-                const inputSchema = isDynamic ? (0, schemaStructure_1.zodToJsonSchema)(card.inputSchema) : undefined;
+                const inputSchema = isDynamic
+                    ? (0, schemaStructure_1.zodToJsonSchema)(card.inputSchema)
+                    : undefined;
                 const searchText = normalizeRecommendationText([tool.id, tool.name, card.id, ...card.tags].join(" "));
                 index.set(scopedCardId, {
                     cardId: scopedCardId,
@@ -1880,7 +1988,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 details: parsed.error.format(),
             }, 400);
         }
-        const { query, limit, toolIds, includeStaticUI, } = parsed.data;
+        const { query, limit, toolIds, includeStaticUI } = parsed.data;
         const toolIdSet = toolIds?.length ? new Set(toolIds) : null;
         const filteredCards = Array.from(recommendationCardsById.values()).filter((card) => !toolIdSet || toolIdSet.has(card.toolId));
         const tokens = tokenizeRecommendationQuery(query ?? "");
@@ -2013,7 +2121,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 renderErrors.push({
                     cardId: card.cardId,
                     code: "render_failed",
-                    message: error instanceof Error ? error.message : "Failed to render recommendation card",
+                    message: error instanceof Error
+                        ? error.message
+                        : "Failed to render recommendation card",
                 });
                 if (!continueOnError)
                     break;
@@ -2048,21 +2158,22 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         // Auto-inject smartAccountPDA into CryptoPlugin wallet context for automations
         // This allows automation wallets to work seamlessly without manual configuration
         if (agentInfo.smartAccountPDA) {
-            processedRequest.plugins['crypto-plugin'] = processedRequest.plugins['crypto-plugin'] || {};
-            const cryptoData = isRecord(processedRequest.plugins['crypto-plugin'])
-                ? stripRuntimeContextFields(processedRequest.plugins['crypto-plugin'])
+            processedRequest.plugins["crypto-plugin"] =
+                processedRequest.plugins["crypto-plugin"] || {};
+            const cryptoData = isRecord(processedRequest.plugins["crypto-plugin"])
+                ? stripRuntimeContextFields(processedRequest.plugins["crypto-plugin"])
                 : {};
-            processedRequest.plugins['crypto-plugin'] = cryptoData;
+            processedRequest.plugins["crypto-plugin"] = cryptoData;
             const smartAccountWallet = {
-                chain: 'sol',
+                chain: "sol",
                 address: agentInfo.smartAccountPDA,
                 accountId: agentInfo.dainAccountId ?? agentInfo.dainGroupId,
-                kind: 'smart_account_vault',
-                capabilities: ['solana-smart-account'],
+                kind: "smart_account_vault",
+                capabilities: ["solana-smart-account"],
             };
             if (Array.isArray(cryptoData.wallets)) {
                 const hasSmartAccountWallet = cryptoData.wallets.some((wallet) => isRecord(wallet) &&
-                    wallet.chain === 'sol' &&
+                    wallet.chain === "sol" &&
                     wallet.address === agentInfo.smartAccountPDA);
                 if (!hasSmartAccountWallet) {
                     cryptoData.wallets = [smartAccountWallet, ...cryptoData.wallets];
@@ -2081,9 +2192,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 cryptoData.wallets = [smartAccountWallet];
             }
         }
-        if (processedRequest.plugins['crypto-plugin']) {
-            processedRequest.plugins['crypto-plugin'] = {
-                ...stripRuntimeContextFields(processedRequest.plugins['crypto-plugin']),
+        if (processedRequest.plugins["crypto-plugin"]) {
+            processedRequest.plugins["crypto-plugin"] = {
+                ...stripRuntimeContextFields(processedRequest.plugins["crypto-plugin"]),
                 ...getRuntimeContextFromAgentInfo(agentInfo),
             };
         }
@@ -2115,7 +2226,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
         processedResponse.plugins = processedResponse.plugins || {};
         const extraData = isRecord(context?.extraData)
             ? context.extraData
-            : (isRecord(context) ? context : {});
+            : isRecord(context)
+                ? context
+                : {};
         for (const plugin of config.plugins) {
             if (plugin.processOutputService) {
                 // Provide context to the plugin
@@ -2123,8 +2236,8 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                     ...processedResponse,
                     context: {
                         request,
-                        extraData
-                    }
+                        extraData,
+                    },
                 });
                 if (pluginOutput) {
                     processedResponse.plugins[plugin.id] = pluginOutput;
@@ -2172,22 +2285,25 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 return signedStreamSSE(c, privateKey, config, async (stream) => {
                     try {
                         // Execute the tool first
-                        debugLog(`[SSE] Executing tool ${tool.id} in streaming mode${withContext ? ' with context' : ''}`);
+                        debugLog(`[SSE] Executing tool ${tool.id} in streaming mode${withContext ? " with context" : ""}`);
                         const { DAIN_EXTRA_DATA: _dainExtraData, ...toolInput } = body;
                         const result = await tool.handler(toolInput, agentInfo, buildToolContext(agentInfo, body, pluginsData, {
                             updateUI: async (update) => {
                                 try {
                                     // Check if this is a progress update
-                                    if (update.type === 'progress') {
+                                    if (update.type === "progress") {
                                         await stream.writeSSE({
-                                            event: 'progress',
-                                            data: JSON.stringify({ text: update.text, data: update.data }),
+                                            event: "progress",
+                                            data: JSON.stringify({
+                                                text: update.text,
+                                                data: update.data,
+                                            }),
                                         });
                                     }
                                     else {
                                         // Legacy UI page updates for Canvas rendering
                                         await stream.writeSSE({
-                                            event: 'uipage-update',
+                                            event: "uipage-update",
                                             data: JSON.stringify(update),
                                         });
                                     }
@@ -2199,7 +2315,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                             addProcess: async (processId) => {
                                 try {
                                     await stream.writeSSE({
-                                        event: 'process-created',
+                                        event: "process-created",
                                         data: JSON.stringify({ processId }),
                                         id: Date.now().toString(),
                                     });
@@ -2207,7 +2323,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                                 catch (error) {
                                     console.error(`Error sending process update in ${tool.id}:`, error);
                                 }
-                            }
+                            },
                         }));
                         // If we need to include context data
                         let response = result;
@@ -2226,7 +2342,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                                                 ...buildServiceExtraData(agentInfo, {
                                                     request: body,
                                                     plugins: pluginsData,
-                                                    oauth2Client: app.oauth2 ? app.oauth2.getClient() : undefined,
+                                                    oauth2Client: app.oauth2
+                                                        ? app.oauth2.getClient()
+                                                        : undefined,
                                                 }),
                                             }),
                                         };
@@ -2245,11 +2363,11 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                                 // Use Promise.allSettled to continue even if some contexts fail
                                 const settledContexts = await Promise.allSettled(contextPromises);
                                 contextsNow = settledContexts
-                                    .filter(result => result.status === 'fulfilled')
-                                    .map(result => result.value);
-                                // Log any rejected promises  
+                                    .filter((result) => result.status === "fulfilled")
+                                    .map((result) => result.value);
+                                // Log any rejected promises
                                 settledContexts
-                                    .filter(result => result.status === 'rejected')
+                                    .filter((result) => result.status === "rejected")
                                     .forEach((result, index) => {
                                     console.error(`Context at index ${index} failed:`, result.reason);
                                 });
@@ -2270,12 +2388,12 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                         const processedResult = await processPluginsForResponse(response, body, {
                             extraData: {
                                 ...body.DAIN_EXTRA_DATA,
-                                plugins: pluginsData
-                            }
+                                plugins: pluginsData,
+                            },
                         });
                         // Send the final result
                         await stream.writeSSE({
-                            event: 'result',
+                            event: "result",
                             data: JSON.stringify(processedResult),
                             id: Date.now().toString(),
                         });
@@ -2287,13 +2405,13 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                         try {
                             if (withContext) {
                                 await stream.writeSSE({
-                                    event: 'result',
+                                    event: "result",
                                     data: JSON.stringify({
                                         toolResult: {
                                             error: safeMsg,
                                             text: `Error: ${safeMsg}`,
                                             data: null,
-                                            ui: null
+                                            ui: null,
                                         },
                                         context: [],
                                     }),
@@ -2302,12 +2420,12 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                             }
                             else {
                                 await stream.writeSSE({
-                                    event: 'result',
+                                    event: "result",
                                     data: JSON.stringify({
                                         error: safeMsg,
                                         text: `Error: ${safeMsg}`,
                                         data: null,
-                                        ui: null
+                                        ui: null,
                                     }),
                                     id: Date.now().toString(),
                                 });
@@ -2331,8 +2449,11 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                     const result = await tool.handler(toolInput, agentInfo, buildToolContext(agentInfo, body, pluginsData, {
                         updateUI: (update) => {
                             // Collect UI updates instead of streaming them (synchronous for performance)
-                            if (update.type === 'progress') {
-                                progressUpdates.push({ text: update.text, data: update.data });
+                            if (update.type === "progress") {
+                                progressUpdates.push({
+                                    text: update.text,
+                                    data: update.data,
+                                });
                             }
                             else {
                                 uiUpdates.push(update);
@@ -2343,7 +2464,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                             // Collect process IDs (synchronous for performance)
                             processes.push(processId);
                             return Promise.resolve();
-                        }
+                        },
                     }));
                     // If we need to include context data
                     let response = result;
@@ -2358,7 +2479,9 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                                     ...buildServiceExtraData(agentInfo, {
                                         request: body,
                                         plugins: pluginsData,
-                                        oauth2Client: app.oauth2 ? app.oauth2.getClient() : undefined,
+                                        oauth2Client: app.oauth2
+                                            ? app.oauth2.getClient()
+                                            : undefined,
                                     }),
                                 }),
                             })));
@@ -2381,15 +2504,15 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                     const processedResult = await processPluginsForResponse(response, body, {
                         extraData: {
                             ...body.DAIN_EXTRA_DATA,
-                            plugins: pluginsData
-                        }
+                            plugins: pluginsData,
+                        },
                     });
                     // Add collected updates to response for non-streaming clients
                     const finalResponse = {
                         ...processedResult,
                         _updates: uiUpdates.length > 0 ? uiUpdates : undefined,
                         _progress: progressUpdates.length > 0 ? progressUpdates : undefined,
-                        _processes: processes.length > 0 ? processes : undefined
+                        _processes: processes.length > 0 ? processes : undefined,
                     };
                     return c.json(finalResponse);
                 }
@@ -2404,7 +2527,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                                 error: safeMsg,
                                 text: `Error: ${safeMsg}`,
                                 data: null,
-                                ui: null
+                                ui: null,
                             },
                             context: [],
                         };
@@ -2414,7 +2537,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                             error: safeMsg,
                             text: `Error: ${safeMsg}`,
                             data: null,
-                            ui: null
+                            ui: null,
                         };
                     }
                     // We return status 200 with error details in the body
@@ -2428,7 +2551,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             debugLog(`[Tool ${tool.id}] ========== TOOL EXECUTION START ==========`);
             debugLog(`[Tool ${tool.id}] Path: ${c.req.path}`);
             debugLog(`[Tool ${tool.id}] Method: ${c.req.method}`);
-            debugLog(`[Tool ${tool.id}] Auth Method: ${c.get('authMethod')}`);
+            debugLog(`[Tool ${tool.id}] Auth Method: ${c.get("authMethod")}`);
             debugLog(`[Tool ${tool.id}] Headers:`, {
                 authorization: c.req.header("Authorization") ? "Bearer ***" : undefined,
                 apiKey: c.req.header("X-DAIN-API-KEY") ? "***" : undefined,
@@ -2465,7 +2588,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
             debugLog(`[Tool ${tool.id} +Context] ========== TOOL EXECUTION START (WITH CONTEXT) ==========`);
             debugLog(`[Tool ${tool.id} +Context] Path: ${c.req.path}`);
             debugLog(`[Tool ${tool.id} +Context] Method: ${c.req.method}`);
-            debugLog(`[Tool ${tool.id} +Context] Auth Method: ${c.get('authMethod')}`);
+            debugLog(`[Tool ${tool.id} +Context] Auth Method: ${c.get("authMethod")}`);
             debugLog(`[Tool ${tool.id} +Context] Headers:`, {
                 authorization: c.req.header("Authorization") ? "Bearer ***" : undefined,
                 apiKey: c.req.header("X-DAIN-API-KEY") ? "***" : undefined,
@@ -2498,7 +2621,7 @@ function setupHttpServer(config, tools, services, toolboxes, metadata, privateKe
                 console.error(`[Tool ${tool.id} +Context] Stack:`, error?.stack);
                 throw new http_exception_1.HTTPException(500, {
                     message: error?.message || "Internal server error",
-                    cause: error
+                    cause: error,
                 });
             }
         });