@desplega.ai/agent-swarm 1.113.0 → 1.115.0

package/dist/{cli-qwgtacd6.js → cli-r9f6ngrf.js}

@@ -1,19 +1,31 @@
+import {
+  McpHttpClient
+} from "./cli-jkhwmmgg.js";
 import {
   embedScript
-} from "./cli-30bbaveh.js";
+} from "./cli-cmw9rzy5.js";
+import {
+  calculatePKCECodeChallenge,
+  generateRandomCodeVerifier,
+  generateRandomState
+} from "./cli-0pygq9r1.js";
 import {
   computeContentHash,
   decryptSecret,
   encryptSecret,
   getDb,
   getEncryptionKey,
+  getMcpServerById,
+  getResolvedConfig,
   getSwarmConfigs,
   init_crypto,
-  init_db
-} from "./cli-ncfgsqbd.js";
+  init_date_utils,
+  init_db,
+  normalizeDateRequired
+} from "./cli-15y7qhzp.js";
 import {
   init_zod
-} from "./cli-q21d49ac.js";
+} from "./cli-bw80ck94.js";
 import {
   _enum,
   array,
@@ -21,7 +33,7 @@ import {
   object,
   string,
   union
-} from "./cli-anrj584m.js";
+} from "./cli-xz9aq0rf.js";
 import {
   init_secret_scrubber,
   registerVolatileSecret
@@ -168753,337 +168765,278 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
   } });
 });
 
-// src/be/scripts/db.ts
-init_secret_scrubber();
+// src/be/script-connections.ts
+init_db();
 
-// src/utils/short-id.ts
-import { randomBytes } from "node:crypto";
-var LETTERS = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
-var BASE62 = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
-function generateShortId(len = 12) {
-  let out = "";
-  while (out.length < len) {
-    for (const byte of randomBytes((len - out.length) * 2)) {
-      if (byte < 208) {
-        out += LETTERS[byte % 52];
-        if (out.length === len)
-          break;
-      }
-    }
+// src/oauth/mcp-wrapper.ts
+var PRIVATE_IPV4_BLOCKS = [
+  { prefix: "10.", mask: 8 },
+  { prefix: "127.", mask: 8 },
+  { prefix: "169.254.", mask: 16 },
+  { prefix: "172.16.", mask: 12 },
+  { prefix: "192.168.", mask: 16 },
+  { prefix: "0.", mask: 8 }
+];
+function isPrivateIPv4(host) {
+  if (host === "127.0.0.1")
+    return true;
+  if (host.startsWith("169.254."))
+    return true;
+  if (host.startsWith("10."))
+    return true;
+  if (host.startsWith("192.168."))
+    return true;
+  if (host.startsWith("0."))
+    return true;
+  if (host.startsWith("172.")) {
+    const parts = host.split(".");
+    const second = parseInt(parts[1] ?? "", 10);
+    if (Number.isFinite(second) && second >= 16 && second <= 31)
+      return true;
   }
-  return out;
-}
-function base62(bytes) {
-  let out = "";
-  for (const byte of bytes)
-    out += BASE62[byte % 62];
-  return out;
+  for (const block of PRIVATE_IPV4_BLOCKS) {
+    if (block.prefix !== "172." && host.startsWith(block.prefix))
+      return true;
+  }
+  return false;
 }
-function generateBearerToken() {
-  return `xsk_${base62(randomBytes(24))}`;
+function isPrivateIPv6(host) {
+  const lower = host.toLowerCase();
+  if (lower === "::1" || lower === "[::1]")
+    return true;
+  if (lower.startsWith("fe80:") || lower.startsWith("[fe80:"))
+    return true;
+  if (lower.startsWith("fc") || lower.startsWith("fd"))
+    return true;
+  if (lower.startsWith("[fc") || lower.startsWith("[fd"))
+    return true;
+  return false;
 }
-
-// src/be/scripts/db.ts
-init_crypto();
-init_db();
-function normalizeScopeId(scope, scopeId) {
-  if (scope === "global")
-    return null;
-  if (!scopeId) {
-    throw new Error("scopeId is required for agent-scoped scripts");
+function assertUrlSafe(rawUrl, opts = {}) {
+  let parsed;
+  try {
+    parsed = new URL(rawUrl);
+  } catch {
+    throw new Error(`Invalid URL: ${rawUrl}`);
   }
-  return scopeId;
+  const allowPrivate = opts.allowPrivateHosts === true;
+  const allowInsecure = opts.allowInsecure === true;
+  if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+    throw new Error(`Refusing unsupported protocol: ${parsed.protocol}`);
+  }
+  if (parsed.protocol === "http:" && !allowInsecure) {
+    throw new Error(`Refusing insecure (http://) URL in production: ${rawUrl}`);
+  }
+  const host = parsed.hostname;
+  if (!host) {
+    throw new Error(`Missing hostname: ${rawUrl}`);
+  }
+  if (host === "localhost" && !allowPrivate) {
+    throw new Error(`Refusing loopback hostname: ${host}`);
+  }
+  if (isPrivateIPv4(host) && !allowPrivate) {
+    throw new Error(`Refusing private IPv4 host: ${host}`);
+  }
+  if (isPrivateIPv6(host) && !allowPrivate) {
+    throw new Error(`Refusing private IPv6 host: ${host}`);
+  }
+  return parsed;
 }
-function rowToScript(row) {
+function publicEndpointSsrfOptions() {
+  const env = "development";
+  const dev = env === "development" || env === "test" || process.env.ALLOW_PRIVATE_NETWORK_URLS === "true";
   return {
-    ...row,
-    scopeId: row.scopeId ?? null,
-    isScratch: row.isScratch === 1,
-    typeChecked: row.typeChecked === 1,
-    createdByAgentId: row.createdByAgentId ?? null
+    allowPrivateHosts: dev,
+    allowInsecure: dev
   };
 }
-function rowToScriptVersion(row) {
+function defaultSsrfOptions() {
   return {
-    ...row,
-    changedByAgentId: row.changedByAgentId ?? null,
-    changeReason: row.changeReason ?? null
+    allowPrivateHosts: process.env.MCP_OAUTH_ALLOW_PRIVATE_HOSTS === "true",
+    allowInsecure: true
   };
 }
-function insertScriptVersion(args) {
-  getDb().prepare(`INSERT INTO script_versions (
-        id, scriptId, version, source, description, intent, signatureJson,
-        contentHash, changedByAgentId, changedAt, changeReason
-      )
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(crypto.randomUUID(), args.scriptId, args.version, args.source, args.description, args.intent, args.signatureJson, args.contentHash, args.changedByAgentId ?? null, new Date().toISOString(), args.changeReason ?? null);
+async function safeFetch(url, init) {
+  assertUrlSafe(url, defaultSsrfOptions());
+  return fetch(url, init);
 }
-function insertScript(args) {
-  const now = new Date().toISOString();
-  const id = crypto.randomUUID();
-  const scopeId = normalizeScopeId(args.scope, args.scopeId);
-  const contentHash = computeContentHash(args.source);
-  const fsMode = args.fsMode ?? "none";
-  const isScratch = args.isScratch ? 1 : 0;
-  const typeChecked = args.typeChecked ? 1 : 0;
-  const txn = getDb().transaction(() => {
-    const row = getDb().prepare(`INSERT INTO scripts (
-          id, name, scope, scopeId, source, description, intent, signatureJson,
-          argsJsonSchema, contentHash, isScratch, typeChecked, fsMode, createdByAgentId, createdAt, updatedAt,
-          created_by, updated_by
-        )
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-        RETURNING *`).get(id, args.name, args.scope, scopeId, args.source, args.description, args.intent, args.signatureJson, args.argsJsonSchema ?? null, contentHash, isScratch, typeChecked, fsMode, args.agentId ?? null, now, now, args.createdBy ?? null, args.createdBy ?? null);
-    if (!row)
-      throw new Error("Failed to insert script");
-    insertScriptVersion({
-      scriptId: row.id,
-      version: row.version,
-      source: row.source,
-      description: row.description,
-      intent: row.intent,
-      signatureJson: row.signatureJson,
-      contentHash: row.contentHash,
-      changedByAgentId: args.agentId ?? null,
-      changeReason: args.changeReason ?? "Initial creation"
+async function discoverProtectedResourceMetadata(resourceUrl) {
+  const base = new URL(resourceUrl);
+  const wellKnown = new URL("/.well-known/oauth-protected-resource", base).toString();
+  try {
+    const res = await safeFetch(wellKnown, {
+      headers: { Accept: "application/json" }
     });
-    return rowToScript(row);
-  });
-  return txn();
-}
-async function upsertScriptByName(args) {
-  const shouldEmbed = args.embeddingMode !== "skip";
-  const existing = getScript(args);
-  if (!existing) {
-    const script2 = insertScript(args);
-    if (!script2.isScratch && shouldEmbed) {
-      await embedScript(script2);
+    if (res.ok) {
+      return await res.json();
     }
-    return {
-      script: script2,
-      isNew: true,
-      contentDeduped: false
-    };
-  }
-  const contentHash = computeContentHash(args.source);
-  if (existing.contentHash === contentHash) {
-    const fsMode2 = args.fsMode ?? existing.fsMode;
-    const isScratch2 = args.isScratch ?? existing.isScratch;
-    const typeChecked2 = args.typeChecked ?? existing.typeChecked;
-    const argsJsonSchema2 = args.argsJsonSchema !== undefined ? args.argsJsonSchema : existing.argsJsonSchema;
-    const trackedMetadataChanged = args.description !== existing.description || args.intent !== existing.intent || args.signatureJson !== existing.signatureJson || argsJsonSchema2 !== existing.argsJsonSchema;
-    const promotedFromScratch = existing.isScratch && !isScratch2;
-    if (fsMode2 !== existing.fsMode || isScratch2 !== existing.isScratch || typeChecked2 !== existing.typeChecked || trackedMetadataChanged) {
-      const row = getDb().prepare(`UPDATE scripts
-          SET description = ?, intent = ?, signatureJson = ?, argsJsonSchema = ?,
-            isScratch = ?, typeChecked = ?, fsMode = ?, updatedAt = ?, updated_by = ?
-          WHERE id = ?
-          RETURNING *`).get(args.description, args.intent, args.signatureJson, argsJsonSchema2 ?? null, isScratch2 ? 1 : 0, typeChecked2 ? 1 : 0, fsMode2, new Date().toISOString(), args.createdBy ?? null, existing.id);
-      if (!row)
-        throw new Error("Failed to update script metadata");
-      const script2 = rowToScript(row);
-      if (!script2.isScratch && shouldEmbed && (trackedMetadataChanged || promotedFromScratch)) {
-        await embedScript(script2);
+  } catch {}
+  try {
+    const probe = await safeFetch(resourceUrl, { method: "HEAD" });
+    const wwwAuth = probe.headers.get("www-authenticate");
+    if (wwwAuth) {
+      const match = /resource_metadata="([^"]+)"/i.exec(wwwAuth);
+      if (match) {
+        const metaRes = await safeFetch(match[1], {
+          headers: { Accept: "application/json" }
+        });
+        if (metaRes.ok) {
+          return await metaRes.json();
+        }
       }
-      return {
-        script: script2,
-        isNew: false,
-        contentDeduped: true
-      };
     }
-    return {
-      script: existing,
-      isNew: false,
-      contentDeduped: true
-    };
-  }
-  const now = new Date().toISOString();
-  const newVersion = existing.version + 1;
-  const fsMode = args.fsMode ?? existing.fsMode;
-  const isScratch = args.isScratch ?? existing.isScratch;
-  const typeChecked = args.typeChecked ?? existing.typeChecked;
-  const argsJsonSchema = args.argsJsonSchema !== undefined ? args.argsJsonSchema : existing.argsJsonSchema;
-  const txn = getDb().transaction(() => {
-    const row = getDb().prepare(`UPDATE scripts
-        SET source = ?, description = ?, intent = ?, signatureJson = ?, argsJsonSchema = ?,
-          contentHash = ?, version = ?, isScratch = ?, typeChecked = ?, fsMode = ?, updatedAt = ?, updated_by = ?
-        WHERE id = ?
-        RETURNING *`).get(args.source, args.description, args.intent, args.signatureJson, argsJsonSchema ?? null, contentHash, newVersion, isScratch ? 1 : 0, typeChecked ? 1 : 0, fsMode, now, args.createdBy ?? null, existing.id);
-    if (!row)
-      throw new Error("Failed to update script");
-    insertScriptVersion({
-      scriptId: row.id,
-      version: row.version,
-      source: row.source,
-      description: row.description,
-      intent: row.intent,
-      signatureJson: row.signatureJson,
-      contentHash: row.contentHash,
-      changedByAgentId: args.agentId ?? null,
-      changeReason: args.changeReason ?? null
-    });
-    return rowToScript(row);
-  });
-  const script = txn();
-  if (!script.isScratch && shouldEmbed) {
-    await embedScript(script);
-  }
-  return {
-    script,
-    isNew: false,
-    contentDeduped: false
-  };
-}
-function getScript(args) {
-  const scopeId = normalizeScopeId(args.scope, args.scopeId);
-  const row = scopeId === null ? getDb().prepare("SELECT * FROM scripts WHERE name = ? AND scope = ? AND scopeId IS NULL").get(args.name, args.scope) : getDb().prepare("SELECT * FROM scripts WHERE name = ? AND scope = ? AND scopeId = ?").get(args.name, args.scope, scopeId);
-  return row ? rowToScript(row) : null;
-}
-function getScriptById(id) {
-  const row = getDb().prepare("SELECT * FROM scripts WHERE id = ?").get(id);
-  return row ? rowToScript(row) : null;
-}
-function getScriptVersion(args) {
-  if (args.version === undefined && args.contentHash === undefined) {
-    throw new Error("version or contentHash is required");
-  }
-  const row = args.version !== undefined ? getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? AND version = ?").get(args.scriptId, args.version) : getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? AND contentHash = ? ORDER BY version DESC LIMIT 1").get(args.scriptId, args.contentHash);
-  return row ? rowToScriptVersion(row) : null;
+  } catch {}
+  return null;
 }
-function listScripts(args) {
-  const conditions = [];
-  const params = [];
-  if (args?.scope) {
-    conditions.push("scope = ?");
-    params.push(args.scope);
-    if (args.scope === "global") {
-      conditions.push("scopeId IS NULL");
-    } else if (args.scopeId !== undefined) {
-      conditions.push("scopeId = ?");
-      params.push(normalizeScopeId(args.scope, args.scopeId));
+async function discoverAuthorizationServerMetadata(issuer) {
+  const issuerUrl = new URL(issuer);
+  const candidates = [
+    new URL("/.well-known/oauth-authorization-server", issuerUrl).toString(),
+    new URL("/.well-known/openid-configuration", issuerUrl).toString()
+  ];
+  let lastError = null;
+  for (const candidate of candidates) {
+    try {
+      const res = await safeFetch(candidate, {
+        headers: { Accept: "application/json" }
+      });
+      if (res.ok) {
+        return await res.json();
+      }
+      lastError = new Error(`Metadata fetch ${candidate} → ${res.status}`);
+    } catch (err) {
+      lastError = err instanceof Error ? err : new Error(String(err));
     }
-  } else if (args?.scopeId !== undefined) {
-    conditions.push("scopeId = ?");
-    params.push(args.scopeId ?? "");
-  }
-  if (!args?.includeScratch) {
-    conditions.push("isScratch = 0");
   }
-  const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
-  return getDb().prepare(`SELECT * FROM scripts ${whereClause} ORDER BY scope ASC, scopeId ASC, name ASC`).all(...params).map(rowToScript);
-}
-function listScriptVersions(scriptId) {
-  return getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? ORDER BY version DESC").all(scriptId).map(rowToScriptVersion);
-}
-function deleteScript(args) {
-  const existing = getScript(args);
-  if (!existing)
-    return false;
-  const result = getDb().run("DELETE FROM scripts WHERE id = ?", [existing.id]);
-  return result.changes > 0;
-}
-var SCRIPT_API_ID_LEN = 12;
-function rowToScriptApi(row) {
-  return {
-    id: row.id,
-    scriptId: row.scriptId,
-    agentId: row.agentId,
-    authMode: row.authMode,
-    enabled: row.enabled === 1,
-    label: row.label ?? null,
-    callCount: row.callCount,
-    lastUsedAt: row.lastUsedAt ?? null,
-    createdAt: row.createdAt
-  };
+  throw lastError ?? new Error(`Authorization server metadata not found at ${issuer}`);
 }
-function isUniqueConstraintError(err) {
-  return err instanceof Error && /UNIQUE constraint failed/i.test(err.message);
+async function registerClient(registrationEndpoint, req) {
+  const res = await safeFetch(registrationEndpoint, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Accept: "application/json"
+    },
+    body: JSON.stringify(req)
+  });
+  if (!res.ok) {
+    const body = await res.text().catch(() => "");
+    throw new Error(`Dynamic client registration failed (${res.status}): ${body}`);
+  }
+  return await res.json();
 }
-function createScriptApi(args) {
-  const now = new Date().toISOString();
-  const token = args.authMode === "bearer" ? generateBearerToken() : null;
-  const encrypted = token ? encryptSecret(token, getEncryptionKey()) : null;
-  const createdBy = args.createdBy ?? null;
-  for (let attempt = 0;attempt < 5; attempt++) {
-    const id = generateShortId(SCRIPT_API_ID_LEN);
-    try {
-      const row = getDb().prepare(`INSERT INTO script_apis
-             (id, scriptId, agentId, authMode, bearerTokenEncrypted, enabled, label,
-              callCount, lastUsedAt, createdAt, created_by, updated_by)
-           VALUES (?, ?, ?, ?, ?, 1, ?, 0, NULL, ?, ?, ?)
-           RETURNING *`).get(id, args.scriptId, args.agentId, args.authMode, encrypted, args.label ?? null, now, createdBy, createdBy);
-      if (!row)
-        throw new Error("Failed to create script API endpoint");
-      if (token)
-        registerVolatileSecret(token, `script-api:${id}`);
-      return { ...rowToScriptApi(row), token };
-    } catch (err) {
-      if (isUniqueConstraintError(err) && attempt < 4)
+async function buildAuthorizeUrl(input) {
+  const state = input.state ?? generateRandomState();
+  const codeVerifier = generateRandomCodeVerifier();
+  const codeChallenge = await calculatePKCECodeChallenge(codeVerifier);
+  const url = new URL(input.authorizeUrl);
+  url.searchParams.set("response_type", "code");
+  url.searchParams.set("client_id", input.clientId);
+  url.searchParams.set("redirect_uri", input.redirectUri);
+  if (input.scopes.length > 0) {
+    url.searchParams.set("scope", input.scopes.join(" "));
+  }
+  url.searchParams.set("state", state);
+  url.searchParams.set("code_challenge", codeChallenge);
+  url.searchParams.set("code_challenge_method", "S256");
+  url.searchParams.set("resource", input.resource);
+  if (input.extraParams) {
+    const RESERVED = new Set([
+      "response_type",
+      "client_id",
+      "redirect_uri",
+      "scope",
+      "state",
+      "code_challenge",
+      "code_challenge_method",
+      "resource"
+    ]);
+    for (const [k, v] of Object.entries(input.extraParams)) {
+      if (RESERVED.has(k.toLowerCase())) {
+        console.warn(`[mcp-oauth] extraParams key "${k}" is reserved and skipped`);
         continue;
-      throw err;
+      }
+      url.searchParams.set(k, v);
     }
   }
-  throw new Error("Failed to allocate a unique script API endpoint id");
-}
-function listScriptApisForScript(scriptId) {
-  return getDb().prepare("SELECT * FROM script_apis WHERE scriptId = ? ORDER BY createdAt DESC").all(scriptId).map(rowToScriptApi);
-}
-function getScriptApiById(id) {
-  const row = getDb().prepare("SELECT * FROM script_apis WHERE id = ?").get(id);
-  if (!row)
-    return null;
-  return { ...rowToScriptApi(row), bearerTokenEncrypted: row.bearerTokenEncrypted ?? null };
+  return { url: url.toString(), state, codeVerifier, codeChallenge };
 }
-function getScriptApiSecret(id) {
-  const row = getDb().prepare("SELECT bearerTokenEncrypted FROM script_apis WHERE id = ?").get(id);
-  if (!row?.bearerTokenEncrypted)
-    return null;
-  const token = decryptSecret(row.bearerTokenEncrypted, getEncryptionKey());
-  registerVolatileSecret(token, `script-api:${id}`);
-  return token;
-}
-function updateScriptApi(id, args) {
-  const sets = [];
-  const vals = [];
-  if (args.enabled !== undefined) {
-    sets.push("enabled = ?");
-    vals.push(args.enabled ? 1 : 0);
-  }
-  if (args.label !== undefined) {
-    sets.push("label = ?");
-    vals.push(args.label);
+async function exchangeCodeForTokens(input) {
+  const body = new URLSearchParams({
+    grant_type: "authorization_code",
+    code: input.code,
+    redirect_uri: input.redirectUri,
+    client_id: input.clientId,
+    code_verifier: input.codeVerifier,
+    resource: input.resource
+  });
+  if (input.clientSecret)
+    body.set("client_secret", input.clientSecret);
+  const res = await safeFetch(input.tokenUrl, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+      Accept: "application/json"
+    },
+    body: body.toString()
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => "");
+    throw new Error(`Token exchange failed (${res.status}): ${text}`);
   }
-  if (args.updatedBy !== undefined) {
-    sets.push("updated_by = ?");
-    vals.push(args.updatedBy);
+  return await res.json();
+}
+async function refreshMcpToken(input) {
+  const body = new URLSearchParams({
+    grant_type: "refresh_token",
+    refresh_token: input.refreshToken,
+    client_id: input.clientId,
+    resource: input.resource
+  });
+  if (input.clientSecret)
+    body.set("client_secret", input.clientSecret);
+  if (input.scopes && input.scopes.length > 0)
+    body.set("scope", input.scopes.join(" "));
+  const res = await safeFetch(input.tokenUrl, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+      Accept: "application/json"
+    },
+    body: body.toString()
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => "");
+    throw new Error(`Token refresh failed (${res.status}): ${text}`);
   }
-  if (sets.length === 0) {
-    const row2 = getDb().prepare("SELECT * FROM script_apis WHERE id = ?").get(id);
-    return row2 ? rowToScriptApi(row2) : null;
+  return await res.json();
+}
+async function revokeMcpToken(input) {
+  const body = new URLSearchParams({
+    token: input.token,
+    client_id: input.clientId
+  });
+  if (input.tokenTypeHint)
+    body.set("token_type_hint", input.tokenTypeHint);
+  if (input.clientSecret)
+    body.set("client_secret", input.clientSecret);
+  const res = await safeFetch(input.revocationUrl, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+      Accept: "application/json"
+    },
+    body: body.toString()
+  });
+  if (!res.ok && res.status !== 200 && res.status !== 204) {
+    const text = await res.text().catch(() => "");
+    throw new Error(`Token revocation failed (${res.status}): ${text}`);
   }
-  vals.push(id);
-  const row = getDb().prepare(`UPDATE script_apis SET ${sets.join(", ")} WHERE id = ? RETURNING *`).get(...vals);
-  return row ? rowToScriptApi(row) : null;
 }
-function rotateScriptApiSecret(id, updatedBy) {
-  const existing = getScriptApiById(id);
-  if (!existing || existing.authMode !== "bearer")
+function computeExpiresAt(expiresInSeconds) {
+  if (!expiresInSeconds || expiresInSeconds <= 0)
     return null;
-  const token = generateBearerToken();
-  const encrypted = encryptSecret(token, getEncryptionKey());
-  const row = getDb().prepare("UPDATE script_apis SET bearerTokenEncrypted = ?, updated_by = ? WHERE id = ? RETURNING *").get(encrypted, updatedBy ?? null, id);
-  if (!row)
-    return null;
-  registerVolatileSecret(token, `script-api:${id}`);
-  return { ...rowToScriptApi(row), token };
-}
-function deleteScriptApi(id) {
-  return getDb().run("DELETE FROM script_apis WHERE id = ?", [id]).changes > 0;
-}
-function recordScriptApiUsage(id) {
-  getDb().run("UPDATE script_apis SET callCount = callCount + 1, lastUsedAt = ? WHERE id = ?", [
-    new Date().toISOString(),
-    id
-  ]);
+  return new Date(Date.now() + expiresInSeconds * 1000).toISOString();
 }
 
 // src/scripts-runtime/credential-broker/types.ts
@@ -169091,6 +169044,7 @@ init_zod();
 var CREDENTIAL_BINDINGS_CONFIG_KEY = "SCRIPT_CREDENTIAL_BINDINGS";
 var REDACTED_PLACEHOLDER_PREFIX = "[REDACTED:";
 var CredentialBindingScopeSchema = _enum(["global", "agent", "repo"]);
+var CredentialBindingAuthKindSchema = _enum(["config", "oauth"]);
 var CredentialBindingSchema = object({
   configKey: string().min(1).max(255),
   allowedHosts: array(string().min(1)).min(1),
@@ -169098,9 +169052,14 @@ var CredentialBindingSchema = object({
   queryTemplate: string().min(1).optional(),
   scope: CredentialBindingScopeSchema.default("global"),
   scopeId: string().nullable().optional(),
-  active: boolean().default(true)
+  active: boolean().default(true),
+  authKind: CredentialBindingAuthKindSchema.default("config"),
+  oauthProvider: string().min(1).max(255).optional()
 }).refine((binding) => binding.headerTemplate || binding.queryTemplate, {
   message: "At least one of headerTemplate or queryTemplate is required."
+}).refine((binding) => binding.authKind !== "oauth" || !!binding.oauthProvider, {
+  message: "oauthProvider is required when authKind is oauth.",
+  path: ["oauthProvider"]
 });
 var CredentialBindingsDocumentSchema = union([
   array(CredentialBindingSchema),
@@ -169161,7 +169120,6 @@ class CredentialBroker {
     return resolved;
   }
 }
-
 // src/scripts-runtime/credential-broker/default-bindings.ts
 var DEFAULT_CREDENTIAL_BINDINGS = [
   {
@@ -169170,10 +169128,10 @@ var DEFAULT_CREDENTIAL_BINDINGS = [
     headerTemplate: "Authorization: Bearer [REDACTED:GITHUB_TOKEN]",
     scope: "global",
     scopeId: null,
-    active: true
+    active: true,
+    authKind: "config"
   }
 ];
-
 // src/scripts-runtime/credential-broker/store.ts
 function appliesToContext(binding, context) {
   if (binding.scope === "global")
@@ -169221,8 +169179,312 @@ class SwarmConfigCredentialBindingStore {
     return rows.flatMap(parseBindingsFromConfig).filter((binding) => binding.active !== false).filter((binding) => appliesToContext(binding, context)).filter(bindingHasPlaceholder2);
   }
 }
-// src/be/script-connections.ts
+// src/be/mcp-proxy.ts
 init_db();
+
+// src/be/db-queries/mcp-oauth.ts
+init_crypto();
+init_date_utils();
+init_db();
+function encryptOrNull(plaintext) {
+  if (plaintext == null || plaintext === "")
+    return null;
+  return encryptSecret(plaintext, getEncryptionKey());
+}
+function decryptOrNull(ciphertext) {
+  if (ciphertext == null || ciphertext === "")
+    return null;
+  return decryptSecret(ciphertext, getEncryptionKey());
+}
+function decryptTokenRow(row) {
+  const key = getEncryptionKey();
+  return {
+    ...row,
+    accessToken: decryptSecret(row.accessToken, key),
+    refreshToken: decryptOrNull(row.refreshToken),
+    dcrClientSecret: decryptOrNull(row.dcrClientSecret),
+    createdAt: normalizeDateRequired(row.createdAt),
+    updatedAt: normalizeDateRequired(row.updatedAt)
+  };
+}
+function getMcpOAuthToken(mcpServerId, userId = null) {
+  const row = getDb().query(userId == null ? "SELECT * FROM mcp_oauth_tokens WHERE mcpServerId = ? AND userId IS NULL" : "SELECT * FROM mcp_oauth_tokens WHERE mcpServerId = ? AND userId = ?").get(...userId == null ? [mcpServerId] : [mcpServerId, userId]);
+  return row ? decryptTokenRow(row) : null;
+}
+function upsertMcpOAuthToken(input) {
+  const userId = input.userId ?? null;
+  const encryptedAccess = encryptSecret(input.accessToken, getEncryptionKey());
+  const encryptedRefresh = encryptOrNull(input.refreshToken);
+  const encryptedClientSecret = encryptOrNull(input.dcrClientSecret);
+  const existing = getMcpOAuthToken(input.mcpServerId, userId);
+  if (!existing) {
+    getDb().query(`INSERT INTO mcp_oauth_tokens (
+          mcpServerId, userId,
+          accessToken, refreshToken, tokenType, expiresAt, scope,
+          resourceUrl, authorizationServerIssuer, authorizeUrl, tokenUrl, revocationUrl,
+          dcrClientId, dcrClientSecret, clientSource,
+          status, lastErrorMessage, lastRefreshedAt, connectedByUserId
+        )
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(input.mcpServerId, userId, encryptedAccess, encryptedRefresh, input.tokenType ?? "Bearer", input.expiresAt ?? null, input.scope ?? null, input.resourceUrl, input.authorizationServerIssuer, input.authorizeUrl, input.tokenUrl, input.revocationUrl ?? null, input.dcrClientId ?? null, encryptedClientSecret, input.clientSource, input.status ?? "connected", input.lastErrorMessage ?? null, input.lastRefreshedAt ?? null, input.connectedByUserId ?? null);
+    return;
+  }
+  getDb().query(`UPDATE mcp_oauth_tokens SET
+        accessToken = ?,
+        refreshToken = COALESCE(?, refreshToken),
+        tokenType = ?,
+        expiresAt = ?,
+        scope = COALESCE(?, scope),
+        resourceUrl = ?,
+        authorizationServerIssuer = ?,
+        authorizeUrl = ?,
+        tokenUrl = ?,
+        revocationUrl = ?,
+        dcrClientId = COALESCE(?, dcrClientId),
+        dcrClientSecret = COALESCE(?, dcrClientSecret),
+        clientSource = ?,
+        status = ?,
+        lastErrorMessage = ?,
+        lastRefreshedAt = ?,
+        connectedByUserId = COALESCE(?, connectedByUserId),
+        updatedAt = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+      WHERE id = ?`).run(encryptedAccess, encryptedRefresh, input.tokenType ?? "Bearer", input.expiresAt ?? null, input.scope ?? null, input.resourceUrl, input.authorizationServerIssuer, input.authorizeUrl, input.tokenUrl, input.revocationUrl ?? null, input.dcrClientId ?? null, encryptedClientSecret, input.clientSource, input.status ?? "connected", input.lastErrorMessage ?? null, input.lastRefreshedAt ?? null, input.connectedByUserId ?? null, existing.id);
+}
+function applyMcpOAuthRefresh(id, data) {
+  const key = getEncryptionKey();
+  const encryptedAccess = encryptSecret(data.accessToken, key);
+  const encryptedRefresh = data.refreshToken === undefined ? undefined : data.refreshToken == null ? null : encryptSecret(data.refreshToken, key);
+  if (encryptedRefresh === undefined) {
+    getDb().query(`UPDATE mcp_oauth_tokens
+         SET accessToken = ?,
+             expiresAt = COALESCE(?, expiresAt),
+             scope = COALESCE(?, scope),
+             status = 'connected',
+             lastErrorMessage = NULL,
+             lastRefreshedAt = strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
+             updatedAt = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+         WHERE id = ?`).run(encryptedAccess, data.expiresAt ?? null, data.scope ?? null, id);
+  } else {
+    getDb().query(`UPDATE mcp_oauth_tokens
+         SET accessToken = ?,
+             refreshToken = ?,
+             expiresAt = COALESCE(?, expiresAt),
+             scope = COALESCE(?, scope),
+             status = 'connected',
+             lastErrorMessage = NULL,
+             lastRefreshedAt = strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
+             updatedAt = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+         WHERE id = ?`).run(encryptedAccess, encryptedRefresh, data.expiresAt ?? null, data.scope ?? null, id);
+  }
+}
+function markMcpOAuthTokenStatus(id, status, errorMessage) {
+  getDb().query(`UPDATE mcp_oauth_tokens
+       SET status = ?,
+           lastErrorMessage = ?,
+           updatedAt = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+       WHERE id = ?`).run(status, errorMessage ?? null, id);
+}
+function deleteMcpOAuthToken(mcpServerId, userId = null) {
+  const result = getDb().query(userId == null ? "DELETE FROM mcp_oauth_tokens WHERE mcpServerId = ? AND userId IS NULL" : "DELETE FROM mcp_oauth_tokens WHERE mcpServerId = ? AND userId = ?").run(...userId == null ? [mcpServerId] : [mcpServerId, userId]);
+  return result.changes > 0;
+}
+function isMcpTokenExpiringSoon(token, bufferMs = 5 * 60 * 1000) {
+  if (!token.expiresAt)
+    return false;
+  const expiresAt = new Date(token.expiresAt).getTime();
+  if (Number.isNaN(expiresAt))
+    return true;
+  return expiresAt - Date.now() < bufferMs;
+}
+function insertMcpOAuthPending(input) {
+  const key = getEncryptionKey();
+  getDb().query(`INSERT INTO mcp_oauth_pending (
+        state, mcpServerId, userId,
+        codeVerifier, nonce,
+        resourceUrl, authorizationServerIssuer, authorizeUrl, tokenUrl, revocationUrl,
+        scopes, dcrClientId, dcrClientSecret, redirectUri, finalRedirect
+      )
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(input.state, input.mcpServerId, input.userId ?? null, encryptSecret(input.codeVerifier, key), input.nonce ?? null, input.resourceUrl, input.authorizationServerIssuer, input.authorizeUrl, input.tokenUrl, input.revocationUrl ?? null, input.scopes ?? null, input.dcrClientId ?? null, encryptOrNull(input.dcrClientSecret), input.redirectUri, input.finalRedirect ?? null);
+}
+function consumeMcpOAuthPending(state) {
+  const row = getDb().query("SELECT * FROM mcp_oauth_pending WHERE state = ?").get(state);
+  if (!row)
+    return null;
+  getDb().query("DELETE FROM mcp_oauth_pending WHERE state = ?").run(state);
+  const key = getEncryptionKey();
+  return {
+    ...row,
+    codeVerifier: decryptSecret(row.codeVerifier, key),
+    dcrClientSecret: decryptOrNull(row.dcrClientSecret)
+  };
+}
+function gcMcpOAuthPending(olderThanMs = 10 * 60 * 1000) {
+  const cutoff = new Date(Date.now() - olderThanMs).toISOString();
+  const result = getDb().query("DELETE FROM mcp_oauth_pending WHERE createdAt < ?").run(cutoff);
+  return result.changes;
+}
+function setMcpServerAuthMethod(mcpServerId, authMethod) {
+  getDb().query("UPDATE mcp_servers SET authMethod = ?, lastUpdatedAt = strftime('%Y-%m-%dT%H:%M:%fZ', 'now') WHERE id = ?").run(authMethod, mcpServerId);
+}
+
+// src/oauth/ensure-mcp-token.ts
+var inflight = new Map;
+async function ensureMcpToken(mcpServerId, opts = {}) {
+  const userId = opts.userId ?? null;
+  const key = `${mcpServerId}::${userId ?? "_"}`;
+  const existing = inflight.get(key);
+  if (existing)
+    return existing;
+  const work = (async () => {
+    const token = getMcpOAuthToken(mcpServerId, userId);
+    if (!token)
+      return null;
+    if (token.status === "revoked")
+      return token;
+    if (!isMcpTokenExpiringSoon(token, opts.bufferMs))
+      return token;
+    if (!token.refreshToken) {
+      markMcpOAuthTokenStatus(token.id, "expired", "No refresh token available; reconnect required.");
+      return { ...token, status: "expired" };
+    }
+    try {
+      const refreshed = await refreshMcpToken({
+        tokenUrl: token.tokenUrl,
+        clientId: token.dcrClientId ?? "",
+        clientSecret: token.dcrClientSecret ?? undefined,
+        refreshToken: token.refreshToken,
+        resource: token.resourceUrl,
+        scopes: token.scope ? token.scope.split(" ").filter(Boolean) : undefined
+      });
+      applyMcpOAuthRefresh(token.id, {
+        accessToken: refreshed.access_token,
+        refreshToken: refreshed.refresh_token ?? undefined,
+        expiresAt: computeExpiresAt(refreshed.expires_in),
+        scope: refreshed.scope ?? null
+      });
+      return getMcpOAuthToken(mcpServerId, userId);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      markMcpOAuthTokenStatus(token.id, "error", message);
+      console.error(`[mcp-oauth] refresh failed for ${mcpServerId}: ${message}`);
+      return { ...token, status: "error", lastErrorMessage: message };
+    }
+  })();
+  inflight.set(key, work);
+  try {
+    return await work;
+  } finally {
+    inflight.delete(key);
+  }
+}
+
+// src/be/mcp-proxy.ts
+init_secret_scrubber();
+var MCP_PROXY_TIMEOUT_MS = 30000;
+function parseHeadersJson(value) {
+  if (!value)
+    return {};
+  try {
+    const parsed = JSON.parse(value);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+      return {};
+    return Object.fromEntries(Object.entries(parsed).filter((entry) => typeof entry[1] === "string").map(([key, headerValue]) => [key, headerValue]));
+  } catch {
+    return {};
+  }
+}
+function resolveHeaderConfigKeys(headerConfigKeys, context) {
+  if (!headerConfigKeys)
+    return {};
+  let parsed;
+  try {
+    parsed = JSON.parse(headerConfigKeys);
+  } catch {
+    return {};
+  }
+  const configs = getResolvedConfig(context.agentId, context.repoId);
+  const configMap = new Map(configs.map((config) => [config.key, config.value]));
+  const resolved = {};
+  if (Array.isArray(parsed)) {
+    for (const item of parsed) {
+      if (typeof item !== "string")
+        continue;
+      const value = configMap.get(item);
+      if (value === undefined)
+        continue;
+      registerVolatileSecret(value, `mcp-header:${item}`);
+      resolved[item] = value;
+    }
+    return resolved;
+  }
+  if (!parsed || typeof parsed !== "object")
+    return resolved;
+  for (const [headerName, configKey] of Object.entries(parsed)) {
+    if (typeof configKey !== "string")
+      continue;
+    const value = configMap.get(configKey);
+    if (value === undefined)
+      continue;
+    registerVolatileSecret(value, `mcp-header:${configKey}`);
+    resolved[headerName] = value;
+  }
+  return resolved;
+}
+async function resolveMcpHeaders(server2, context) {
+  const headers = {
+    ...parseHeadersJson(server2.headers),
+    ...resolveHeaderConfigKeys(server2.headerConfigKeys, context)
+  };
+  if (server2.authMethod !== "oauth")
+    return headers;
+  delete headers.Authorization;
+  delete headers.authorization;
+  const token = await ensureMcpToken(server2.id);
+  if (!token)
+    throw new Error("No OAuth token for this MCP server");
+  if (token.status !== "connected") {
+    throw new Error(token.lastErrorMessage ?? `OAuth status: ${token.status}`);
+  }
+  registerVolatileSecret(token.accessToken, `mcp-oauth:${server2.id}`);
+  const rawType = token.tokenType || "Bearer";
+  const prefix = rawType.toLowerCase() === "bearer" ? "Bearer" : rawType;
+  headers.Authorization = `${prefix} ${token.accessToken}`;
+  return headers;
+}
+async function createMcpServerClient(serverId, context = {}) {
+  const server2 = getMcpServerById(serverId);
+  if (!server2)
+    throw new Error("MCP server not found");
+  if (!server2.isEnabled)
+    throw new Error("MCP server is disabled");
+  if (server2.transport === "sse") {
+    throw new Error("SSE MCP servers are not supported yet — use a streamable HTTP server");
+  }
+  if (server2.transport !== "http") {
+    throw new Error("Only streamable HTTP MCP servers are supported by script connections");
+  }
+  if (!server2.url)
+    throw new Error("MCP server URL is required");
+  const client = new McpHttpClient(server2.url, "", "", undefined, {
+    clientInfo: { name: "agent-swarm-script-mcp-proxy", version: "1.0.0" },
+    omitEmptyAuthHeaders: true,
+    timeoutMs: context.timeoutMs ?? MCP_PROXY_TIMEOUT_MS
+  });
+  client.useRawUrl = true;
+  client.customHeaders = await resolveMcpHeaders(server2, context);
+  return client;
+}
+async function listMcpServerTools(serverId, context = {}) {
+  const client = await createMcpServerClient(serverId, context);
+  await client.initialize();
+  return client.listTools();
+}
+async function callMcpServerTool(serverId, tool, args, context = {}) {
+  const client = await createMcpServerClient(serverId, context);
+  await client.initialize();
+  return client.callToolRaw(tool, args);
+}
+
+// src/be/script-connections.ts
 function parseJsonArray(value) {
   try {
     const parsed = JSON.parse(value);
@@ -169241,6 +169503,8 @@ function bindingFromRow(row) {
     scope: row.scope,
     scopeId: row.scope_id,
     active: row.active === 1,
+    authKind: row.auth_kind === "oauth" ? "oauth" : "config",
+    oauthProvider: row.oauth_provider ?? undefined,
     source: row.source,
     createdAt: row.created_at,
     updatedAt: row.updated_at,
@@ -169317,6 +169581,11 @@ function upsertCredentialBinding(data) {
   const scope = data.scope ?? "global";
   const scopeId = scope === "global" ? null : data.scopeId ?? null;
   const active = data.active === false ? 0 : 1;
+  const authKind = data.authKind ?? "config";
+  if (authKind === "oauth" && !data.oauthProvider) {
+    throw new Error("oauthProvider is required for oauth credential bindings");
+  }
+  const oauthProvider = data.oauthProvider ?? null;
   const source = data.source ?? "user";
   const existing = (data.id ? getCredentialBindingById(data.id) : null) ?? findCredentialBindingByIdentity({
     configKey: data.configKey,
@@ -169329,16 +169598,17 @@ function upsertCredentialBinding(data) {
     const targetId = existing.id;
     const row2 = getDb().prepare(`UPDATE script_credential_bindings
          SET config_key = ?, allowed_hosts_json = ?, header_template = ?, query_template = ?,
-             scope = ?, scope_id = ?, active = ?, source = ?, updated_by = ?, updated_at = ?
-         WHERE id = ? RETURNING *`).get(data.configKey, JSON.stringify(data.allowedHosts), data.headerTemplate ?? null, data.queryTemplate ?? null, scope, scopeId, active, source, data.userId ?? null, now, targetId);
+             scope = ?, scope_id = ?, active = ?, auth_kind = ?, oauth_provider = ?,
+             source = ?, updated_by = ?, updated_at = ?
+         WHERE id = ? RETURNING *`).get(data.configKey, JSON.stringify(data.allowedHosts), data.headerTemplate ?? null, data.queryTemplate ?? null, scope, scopeId, active, authKind, oauthProvider, source, data.userId ?? null, now, targetId);
     if (!row2)
       throw new Error("Failed to update credential binding");
     return bindingFromRow(row2);
   }
   const row = getDb().prepare(`INSERT INTO script_credential_bindings
        (id, config_key, allowed_hosts_json, header_template, query_template, scope, scope_id,
-        active, source, created_at, updated_at, created_by, updated_by)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`).get(id, data.configKey, JSON.stringify(data.allowedHosts), data.headerTemplate ?? null, data.queryTemplate ?? null, scope, scopeId, active, source, now, now, data.userId ?? null, data.userId ?? null);
+        active, auth_kind, oauth_provider, source, created_at, updated_at, created_by, updated_by)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`).get(id, data.configKey, JSON.stringify(data.allowedHosts), data.headerTemplate ?? null, data.queryTemplate ?? null, scope, scopeId, active, authKind, oauthProvider, source, now, now, data.userId ?? null, data.userId ?? null);
   if (!row)
     throw new Error("Failed to create credential binding");
   return bindingFromRow(row);
@@ -169376,7 +169646,11 @@ function importLegacyCredentialBindings(userId) {
 }
 function listScriptConnections(context) {
   const rows = getDb().prepare("SELECT * FROM script_connections ORDER BY slug ASC").all();
-  return rows.map(connectionFromRow).filter((connection) => !context?.kind || connection.kind === context.kind).filter((connection) => context?.includeDisabled || connection.enabled).filter((connection) => !context || applies(connection.scope, connection.scopeId, context));
+  return rows.map(connectionFromRow).filter((connection) => !context?.kind || connection.kind === context.kind).filter((connection) => context?.includeDisabled || connection.enabled).filter((connection) => !context || context.allScopes === true || applies(connection.scope, connection.scopeId, context));
+}
+function getScriptConnectionById(id) {
+  const row = getDb().prepare("SELECT * FROM script_connections WHERE id = ?").get(id);
+  return row ? connectionFromRow(row) : null;
 }
 function schemaToTs(schema) {
   if (!schema || typeof schema !== "object")
@@ -169470,7 +169744,8 @@ function extractOperations(spec, slug) {
       const responseType = responseContent?.schema ? schemaToTs(responseContent.schema) : "JsonValue";
       const responseSchema = responseContent?.schema ? jsonSchema(responseContent.schema) : {};
       const paramsByPlace = (place) => parameters.filter((param) => param.in === place).map((param) => `${JSON.stringify(param.name)}${param.required ? "" : "?"}: ${param.type}`).join("; ");
-      const hasBody = Boolean(jsonContent?.schema || requestBody);
+      const methodAllowsBody = method !== "get" && method !== "head";
+      const hasBody = methodAllowsBody && Boolean(jsonContent?.schema || requestBody);
       const requestType = `export type ${typeBase}Args = {${paramsByPlace("path") ? ` path: { ${paramsByPlace("path")} };` : ""}${paramsByPlace("query") ? ` query?: { ${paramsByPlace("query")} };` : ""}${paramsByPlace("header") ? ` header?: { ${paramsByPlace("header")} };` : ""}${hasBody ? ` body: ${bodyType};` : ""}};`;
       const responseDecl = `export type ${typeBase}Response = ${responseType};`;
       typeBlocks.push(requestType, responseDecl);
@@ -169501,11 +169776,7 @@ function extractOperations(spec, slug) {
 function buildGeneratedArtifacts(input) {
   const slug = normalizeSlug(input.slug);
   const { operations, types } = extractOperations(input.openapiSpec, slug);
-  const credential = input.credentialBinding ? {
-    configKey: input.credentialBinding.configKey,
-    headerTemplate: input.credentialBinding.headerTemplate,
-    queryTemplate: input.credentialBinding.queryTemplate
-  } : null;
+  const credential = credentialDescriptor(input.credentialBinding);
   const descriptor = {
     slug,
     baseUrl: input.baseUrl,
@@ -169515,24 +169786,203 @@ function buildGeneratedArtifacts(input) {
   const generatedTypes = [
     types,
     `export interface ${pascal(slug)}Api {`,
-    ...operations.map((operation) => `  ${operation.name}(args: ${operation.requestType}): Promise<${operation.responseType}>;`),
+    ...operations.flatMap((operation) => [
+      `  ${operation.name}(args: ${operation.requestType}): Promise<${operation.responseType}>;`,
+      `  ${operation.name}(args: ${operation.requestType}, options: ScriptApiRawOptions): Promise<ScriptApiRawResult>;`
+    ]),
+    "}"
+  ].join(`
+`);
+  return { generatedTypes, generatedRuntimeJson: JSON.stringify(descriptor) };
+}
+function credentialDescriptor(binding) {
+  return binding ? {
+    configKey: binding.configKey,
+    headerTemplate: binding.headerTemplate,
+    queryTemplate: binding.queryTemplate
+  } : null;
+}
+function buildGraphqlGeneratedArtifacts(input) {
+  const slug = normalizeSlug(input.slug);
+  const descriptor = {
+    slug,
+    kind: "graphql",
+    baseUrl: input.baseUrl,
+    credential: credentialDescriptor(input.credentialBinding)
+  };
+  const generatedTypes = [
+    `export interface ${pascal(slug)}Api {`,
+    "  graphql<T = JsonValue>(query: string, variables?: Record<string, JsonValue>): Promise<T>;",
+    "}"
+  ].join(`
+`);
+  return { generatedTypes, generatedRuntimeJson: JSON.stringify(descriptor) };
+}
+var openapiSpecFetchForTesting = null;
+function openapiSpecUrlOptions() {
+  return publicEndpointSsrfOptions();
+}
+function isRedirectStatus(status) {
+  return status >= 300 && status < 400 && status !== 304;
+}
+function mcpToolMethodName(name) {
+  return normalizeSlug(name);
+}
+function mcpToolMethodNames(tools) {
+  const used = new Set;
+  const baseCounts = new Map;
+  return tools.map((tool) => {
+    const base = mcpToolMethodName(tool.name);
+    const count = baseCounts.get(base) ?? 0;
+    baseCounts.set(base, count + 1);
+    let methodName2 = count === 0 ? base : `${base}${count + 1}`;
+    let suffix = count + 2;
+    while (used.has(methodName2)) {
+      methodName2 = `${base}${suffix}`;
+      suffix += 1;
+    }
+    used.add(methodName2);
+    return { tool, methodName: methodName2 };
+  });
+}
+function mcpToolArgsType(inputSchema) {
+  if (!inputSchema || typeof inputSchema !== "object")
+    return "Record<string, JsonValue>";
+  const schema = inputSchema;
+  if (Object.keys(schema).length === 0)
+    return "Record<string, JsonValue>";
+  const type = schemaToTs(schema);
+  return type === "JsonValue" ? "Record<string, JsonValue>" : type;
+}
+function buildMcpGeneratedArtifacts(input) {
+  const slug = normalizeSlug(input.slug);
+  const methodNames = mcpToolMethodNames(input.tools);
+  const tools = input.tools.map((tool) => ({
+    name: tool.name,
+    description: tool.description,
+    inputSchema: jsonSchema(tool.inputSchema ?? {})
+  }));
+  const generatedTypes = [
+    `export interface ${pascal(slug)}Mcp {`,
+    ...methodNames.map(({ tool, methodName: methodName2 }) => `  ${methodName2}(args: ${mcpToolArgsType(tool.inputSchema)}): Promise<JsonValue>;`),
     "}"
   ].join(`
 `);
+  const descriptor = {
+    slug,
+    kind: "mcp",
+    connectionId: input.connectionId,
+    tools
+  };
   return { generatedTypes, generatedRuntimeJson: JSON.stringify(descriptor) };
 }
-function upsertScriptConnection(data) {
+function parseOpenapiSpecBody(body) {
+  try {
+    return JSON.parse(body);
+  } catch (jsonErr) {
+    const yaml = Bun.YAML;
+    if (!yaml) {
+      throw new Error(`OpenAPI spec response was not valid JSON. JSON specs only unless Bun.YAML.parse is available: ${jsonErr instanceof Error ? jsonErr.message : String(jsonErr)}`);
+    }
+    try {
+      return yaml.parse(body);
+    } catch (yamlErr) {
+      throw new Error(`OpenAPI spec response was neither valid JSON nor valid YAML: ${yamlErr instanceof Error ? yamlErr.message : String(yamlErr)}`);
+    }
+  }
+}
+async function fetchOpenapiSpec(url, opts = {}) {
+  let parsed = assertUrlSafe(url, openapiSpecUrlOptions());
+  const controller = new AbortController;
+  const timeout = setTimeout(() => controller.abort(), 15000);
+  try {
+    const headers = new Headers({
+      Accept: "application/json, application/yaml;q=0.9, text/yaml;q=0.8, */*;q=0.5"
+    });
+    if (opts.etag)
+      headers.set("If-None-Match", opts.etag);
+    const fetchImpl = openapiSpecFetchForTesting ?? Bun.fetch;
+    let response = null;
+    for (let hop = 0;hop <= 5; hop += 1) {
+      response = await fetchImpl(parsed, {
+        headers,
+        signal: controller.signal,
+        redirect: "manual"
+      });
+      if (!isRedirectStatus(response.status))
+        break;
+      const location = response.headers.get("location");
+      if (!location) {
+        throw new Error(`OpenAPI spec redirect missing Location header: HTTP ${response.status}`);
+      }
+      parsed = assertUrlSafe(new URL(location, parsed).toString(), openapiSpecUrlOptions());
+      if (hop === 5)
+        throw new Error("OpenAPI spec fetch exceeded 5 redirects.");
+    }
+    if (!response)
+      throw new Error("OpenAPI spec fetch failed before receiving a response.");
+    const fetchedAt = new Date().toISOString();
+    const etag = response.headers.get("etag");
+    if (response.status === 304) {
+      return { status: "not_modified", etag, fetchedAt };
+    }
+    if (!response.ok) {
+      throw new Error(`Failed to fetch OpenAPI spec: HTTP ${response.status}`);
+    }
+    const spec = parseOpenapiSpecBody(await response.text());
+    return {
+      status: "fetched",
+      spec,
+      specJson: JSON.stringify(spec),
+      etag,
+      fetchedAt
+    };
+  } catch (err) {
+    if (err instanceof DOMException && err.name === "AbortError") {
+      throw new Error("Timed out fetching OpenAPI spec after 15s");
+    }
+    throw err;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+async function upsertScriptConnection(data) {
   const now = new Date().toISOString();
   const id = data.id ?? crypto.randomUUID();
   const scope = data.scope ?? "global";
   const scopeId = scope === "global" ? null : data.scopeId ?? null;
+  const normalizedSlug = normalizeSlug(data.slug);
   let generatedTypes = null;
   let generatedRuntimeJson = null;
   let generationError = null;
   let generatedAt = null;
+  let openapiSpecJson = data.openapiSpecJson ?? null;
+  let openapiSpecSourceKind = data.openapiSpecSourceKind ?? (data.kind === "openapi" ? data.openapiSpecUrl ? "url" : "inline" : null);
+  let openapiSpecSource = data.openapiSpecSource ?? data.openapiSpecUrl ?? null;
+  let openapiSpecEtag = data.openapiSpecEtag ?? null;
+  let openapiSpecFetchedAt = data.openapiSpecFetchedAt ?? null;
+  let openapiSpec;
+  const existing = data.id ? getDb().prepare("SELECT id, version FROM script_connections WHERE id = ?").get(data.id) : getDb().prepare("SELECT id, version FROM script_connections WHERE slug = ? AND scope = ? AND COALESCE(scope_id, '') = COALESCE(?, '')").get(normalizedSlug, scope, scopeId);
+  const connectionId = existing?.id ?? id;
   if (data.kind === "openapi") {
+    if (!openapiSpecJson && data.openapiSpecUrl) {
+      const fetched = await fetchOpenapiSpec(data.openapiSpecUrl);
+      if (fetched.status === "not_modified") {
+        throw new Error("OpenAPI spec URL returned 304 without an existing cached spec.");
+      }
+      openapiSpec = fetched.spec;
+      openapiSpecJson = fetched.specJson;
+      openapiSpecSourceKind = "url";
+      openapiSpecSource = data.openapiSpecUrl;
+      openapiSpecEtag = fetched.etag;
+      openapiSpecFetchedAt = fetched.fetchedAt;
+    }
     try {
-      const spec = JSON.parse(data.openapiSpecJson ?? "{}");
+      let spec = openapiSpec;
+      if (!spec) {
+        spec = parseOpenapiSpecBody(openapiSpecJson ?? "{}");
+        openapiSpecJson = JSON.stringify(spec);
+      }
       const binding = data.credentialBindingId ? getCredentialBindingById(data.credentialBindingId) : null;
       const artifacts = buildGeneratedArtifacts({
         slug: data.slug,
@@ -169547,9 +169997,43 @@ function upsertScriptConnection(data) {
       generationError = err instanceof Error ? err.message : String(err);
     }
   }
-  const existing = data.id ? getDb().prepare("SELECT id, version FROM script_connections WHERE id = ?").get(data.id) : getDb().prepare("SELECT id, version FROM script_connections WHERE slug = ? AND scope = ? AND COALESCE(scope_id, '') = COALESCE(?, '')").get(normalizeSlug(data.slug), scope, scopeId);
+  if (data.kind === "mcp") {
+    try {
+      if (!data.mcpServerId)
+        throw new Error("mcpServerId is required for MCP connections");
+      const discoveryContext = scope === "agent" && scopeId ? { agentId: scopeId } : scope === "repo" && scopeId ? { agentId: data.agentId, repoId: scopeId } : { agentId: data.agentId };
+      const tools = await listMcpServerTools(data.mcpServerId, discoveryContext);
+      const artifacts = buildMcpGeneratedArtifacts({
+        slug: data.slug,
+        connectionId,
+        tools
+      });
+      generatedTypes = artifacts.generatedTypes;
+      generatedRuntimeJson = artifacts.generatedRuntimeJson;
+      generatedAt = now;
+    } catch (err) {
+      generationError = err instanceof Error ? err.message : String(err);
+    }
+  }
+  if (data.kind === "graphql") {
+    if (!data.baseUrl)
+      throw new Error("baseUrl is required for GraphQL connections");
+    if (!data.allowedHosts?.length) {
+      throw new Error("allowedHosts is required for GraphQL connections");
+    }
+    new URL(data.baseUrl);
+    const binding = data.credentialBindingId ? getCredentialBindingById(data.credentialBindingId) : null;
+    const artifacts = buildGraphqlGeneratedArtifacts({
+      slug: data.slug,
+      baseUrl: data.baseUrl,
+      credentialBinding: binding
+    });
+    generatedTypes = artifacts.generatedTypes;
+    generatedRuntimeJson = artifacts.generatedRuntimeJson;
+    generatedAt = now;
+  }
   const params = [
-    normalizeSlug(data.slug),
+    normalizedSlug,
     data.displayName ?? null,
     data.kind,
     scope,
@@ -169557,9 +170041,11 @@ function upsertScriptConnection(data) {
     data.baseUrl ?? null,
     JSON.stringify(data.allowedHosts ?? []),
     data.credentialBindingId ?? null,
-    data.openapiSpecSourceKind ?? (data.kind === "openapi" ? "inline" : null),
-    data.openapiSpecSource ?? null,
-    data.openapiSpecJson ?? null,
+    openapiSpecSourceKind,
+    openapiSpecSource,
+    openapiSpecJson,
+    openapiSpecEtag,
+    openapiSpecFetchedAt,
     data.mcpServerId ?? null,
     generatedTypes,
     generatedRuntimeJson,
@@ -169571,7 +170057,8 @@ function upsertScriptConnection(data) {
     const row2 = getDb().prepare(`UPDATE script_connections SET
           slug = ?, display_name = ?, kind = ?, scope = ?, scope_id = ?, base_url = ?,
           allowed_hosts_json = ?, credential_binding_id = ?, openapi_spec_source_kind = ?,
-          openapi_spec_source = ?, openapi_spec_json = ?, mcp_server_id = ?, generated_types = ?,
+          openapi_spec_source = ?, openapi_spec_json = ?, openapi_spec_etag = ?,
+          openapi_spec_fetched_at = ?, mcp_server_id = ?, generated_types = ?,
           generated_runtime_json = ?, generated_at = ?, generation_error = ?, enabled = ?,
           updated_at = ?, updated_by = ?, version = ?
          WHERE id = ? RETURNING *`).get(...params, now, data.userId ?? null, existing.version + 1, existing.id);
@@ -169582,13 +170069,73 @@ function upsertScriptConnection(data) {
   const row = getDb().prepare(`INSERT INTO script_connections
        (id, slug, display_name, kind, scope, scope_id, base_url, allowed_hosts_json,
         credential_binding_id, openapi_spec_source_kind, openapi_spec_source, openapi_spec_json,
-        mcp_server_id, generated_types, generated_runtime_json, generated_at, generation_error,
-        enabled, created_at, updated_at, created_by, updated_by)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`).get(id, ...params, now, now, data.userId ?? null, data.userId ?? null);
+        openapi_spec_etag, openapi_spec_fetched_at, mcp_server_id, generated_types,
+        generated_runtime_json, generated_at, generation_error, enabled, created_at, updated_at,
+        created_by, updated_by)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`).get(id, ...params, now, now, data.userId ?? null, data.userId ?? null);
   if (!row)
     throw new Error("Failed to create script connection");
   return connectionFromRow(row);
 }
+async function refreshScriptConnection(id, userId, callerAgentId) {
+  const row = getDb().prepare("SELECT * FROM script_connections WHERE id = ?").get(id);
+  if (!row)
+    return null;
+  const connection = connectionFromRow(row);
+  if (connection.kind === "mcp") {
+    if (!connection.mcpServerId) {
+      throw new Error("MCP connection has no mcpServerId to refresh from.");
+    }
+    return upsertScriptConnection({
+      id: connection.id,
+      slug: connection.slug,
+      displayName: connection.displayName,
+      kind: "mcp",
+      scope: connection.scope,
+      scopeId: connection.scopeId,
+      allowedHosts: connection.allowedHosts,
+      credentialBindingId: connection.credentialBindingId,
+      mcpServerId: connection.mcpServerId,
+      enabled: connection.enabled,
+      agentId: callerAgentId,
+      userId
+    });
+  }
+  if (connection.kind !== "openapi") {
+    throw new Error("Only OpenAPI and MCP script connections can be refreshed.");
+  }
+  if (connection.openapiSpecSourceKind !== "url" || !connection.openapiSpecSource) {
+    throw new Error("Only OpenAPI script connections registered by URL can be refreshed.");
+  }
+  const fetched = await fetchOpenapiSpec(connection.openapiSpecSource, {
+    etag: connection.openapiSpecEtag
+  });
+  if (fetched.status === "not_modified") {
+    const refreshed = getDb().prepare(`UPDATE script_connections
+         SET openapi_spec_fetched_at = ?
+         WHERE id = ? RETURNING *`).get(fetched.fetchedAt, id);
+    return refreshed ? connectionFromRow(refreshed) : null;
+  }
+  return upsertScriptConnection({
+    id: connection.id,
+    slug: connection.slug,
+    displayName: connection.displayName,
+    kind: "openapi",
+    scope: connection.scope,
+    scopeId: connection.scopeId,
+    baseUrl: connection.baseUrl,
+    allowedHosts: connection.allowedHosts,
+    credentialBindingId: connection.credentialBindingId,
+    openapiSpecSourceKind: "url",
+    openapiSpecSource: connection.openapiSpecSource,
+    openapiSpecJson: fetched.specJson,
+    openapiSpecEtag: fetched.etag,
+    openapiSpecFetchedAt: fetched.fetchedAt,
+    mcpServerId: connection.mcpServerId,
+    enabled: connection.enabled,
+    userId
+  });
+}
 function setScriptConnectionEnabled(id, enabled, userId) {
   const row = getDb().prepare(`UPDATE script_connections
        SET enabled = ?, updated_at = ?, updated_by = ?, version = version + 1
@@ -169596,7 +170143,18 @@ function setScriptConnectionEnabled(id, enabled, userId) {
   return row ? connectionFromRow(row) : null;
 }
 function getScriptApiConnectionDescriptors(context = {}) {
-  return listScriptConnections({ ...context, kind: "openapi" }).map((connection) => {
+  return listScriptConnections(context).filter((connection) => connection.kind === "openapi" || connection.kind === "graphql").map((connection) => {
+    if (!connection.generatedRuntimeJson)
+      return null;
+    try {
+      return JSON.parse(connection.generatedRuntimeJson);
+    } catch {
+      return null;
+    }
+  }).filter((descriptor) => Boolean(descriptor));
+}
+function getScriptMcpConnectionDescriptors(context = {}) {
+  return listScriptConnections({ ...context, kind: "mcp" }).map((connection) => {
     if (!connection.generatedRuntimeJson)
       return null;
     try {
@@ -169607,7 +170165,7 @@ function getScriptApiConnectionDescriptors(context = {}) {
   }).filter((descriptor) => Boolean(descriptor));
 }
 function getScriptApiTypes(context = {}) {
-  const connections = listScriptConnections({ ...context, kind: "openapi" });
+  const connections = listScriptConnections(context).filter((connection) => connection.kind === "openapi" || connection.kind === "graphql");
   const blocks = connections.filter((connection) => connection.generatedTypes).map((connection) => connection.generatedTypes);
   if (blocks.length === 0)
     return `export interface ScriptApiRegistry {}
@@ -169623,6 +170181,356 @@ ${members.join(`
 }
 `;
 }
+function getScriptMcpTypes(context = {}) {
+  const connections = listScriptConnections({ ...context, kind: "mcp" });
+  const blocks = connections.filter((connection) => connection.generatedTypes).map((connection) => connection.generatedTypes);
+  if (blocks.length === 0)
+    return `export interface ScriptMcpRegistry {}
+`;
+  const members = connections.filter((connection) => connection.generatedTypes).map((connection) => `  ${connection.slug}: ${pascal(connection.slug)}Mcp;`);
+  return `${blocks.join(`
+
+`)}
+
+export interface ScriptMcpRegistry {
+${members.join(`
+`)}
+}
+`;
+}
+
+// src/be/scripts/db.ts
+init_secret_scrubber();
+
+// src/utils/short-id.ts
+import { randomBytes } from "node:crypto";
+var LETTERS = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
+var BASE62 = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
+function generateShortId(len = 12) {
+  let out = "";
+  while (out.length < len) {
+    for (const byte of randomBytes((len - out.length) * 2)) {
+      if (byte < 208) {
+        out += LETTERS[byte % 52];
+        if (out.length === len)
+          break;
+      }
+    }
+  }
+  return out;
+}
+function base62(bytes) {
+  let out = "";
+  for (const byte of bytes)
+    out += BASE62[byte % 62];
+  return out;
+}
+function generateBearerToken() {
+  return `xsk_${base62(randomBytes(24))}`;
+}
+
+// src/be/scripts/db.ts
+init_crypto();
+init_db();
+function normalizeScopeId(scope, scopeId) {
+  if (scope === "global")
+    return null;
+  if (!scopeId) {
+    throw new Error("scopeId is required for agent-scoped scripts");
+  }
+  return scopeId;
+}
+function rowToScript(row) {
+  return {
+    ...row,
+    scopeId: row.scopeId ?? null,
+    isScratch: row.isScratch === 1,
+    typeChecked: row.typeChecked === 1,
+    createdByAgentId: row.createdByAgentId ?? null
+  };
+}
+function rowToScriptVersion(row) {
+  return {
+    ...row,
+    changedByAgentId: row.changedByAgentId ?? null,
+    changeReason: row.changeReason ?? null
+  };
+}
+function insertScriptVersion(args) {
+  getDb().prepare(`INSERT INTO script_versions (
+        id, scriptId, version, source, description, intent, signatureJson,
+        contentHash, changedByAgentId, changedAt, changeReason
+      )
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(crypto.randomUUID(), args.scriptId, args.version, args.source, args.description, args.intent, args.signatureJson, args.contentHash, args.changedByAgentId ?? null, new Date().toISOString(), args.changeReason ?? null);
+}
+function insertScript(args) {
+  const now = new Date().toISOString();
+  const id = crypto.randomUUID();
+  const scopeId = normalizeScopeId(args.scope, args.scopeId);
+  const contentHash = computeContentHash(args.source);
+  const fsMode = args.fsMode ?? "none";
+  const isScratch = args.isScratch ? 1 : 0;
+  const typeChecked = args.typeChecked ? 1 : 0;
+  const txn = getDb().transaction(() => {
+    const row = getDb().prepare(`INSERT INTO scripts (
+          id, name, scope, scopeId, source, description, intent, signatureJson,
+          argsJsonSchema, contentHash, isScratch, typeChecked, fsMode, createdByAgentId, createdAt, updatedAt,
+          created_by, updated_by
+        )
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        RETURNING *`).get(id, args.name, args.scope, scopeId, args.source, args.description, args.intent, args.signatureJson, args.argsJsonSchema ?? null, contentHash, isScratch, typeChecked, fsMode, args.agentId ?? null, now, now, args.createdBy ?? null, args.createdBy ?? null);
+    if (!row)
+      throw new Error("Failed to insert script");
+    insertScriptVersion({
+      scriptId: row.id,
+      version: row.version,
+      source: row.source,
+      description: row.description,
+      intent: row.intent,
+      signatureJson: row.signatureJson,
+      contentHash: row.contentHash,
+      changedByAgentId: args.agentId ?? null,
+      changeReason: args.changeReason ?? "Initial creation"
+    });
+    return rowToScript(row);
+  });
+  return txn();
+}
+async function upsertScriptByName(args) {
+  const shouldEmbed = args.embeddingMode !== "skip";
+  const existing = getScript(args);
+  if (!existing) {
+    const script2 = insertScript(args);
+    if (!script2.isScratch && shouldEmbed) {
+      await embedScript(script2);
+    }
+    return {
+      script: script2,
+      isNew: true,
+      contentDeduped: false
+    };
+  }
+  const contentHash = computeContentHash(args.source);
+  if (existing.contentHash === contentHash) {
+    const fsMode2 = args.fsMode ?? existing.fsMode;
+    const isScratch2 = args.isScratch ?? existing.isScratch;
+    const typeChecked2 = args.typeChecked ?? existing.typeChecked;
+    const argsJsonSchema2 = args.argsJsonSchema !== undefined ? args.argsJsonSchema : existing.argsJsonSchema;
+    const trackedMetadataChanged = args.description !== existing.description || args.intent !== existing.intent || args.signatureJson !== existing.signatureJson || argsJsonSchema2 !== existing.argsJsonSchema;
+    const promotedFromScratch = existing.isScratch && !isScratch2;
+    if (fsMode2 !== existing.fsMode || isScratch2 !== existing.isScratch || typeChecked2 !== existing.typeChecked || trackedMetadataChanged) {
+      const row = getDb().prepare(`UPDATE scripts
+          SET description = ?, intent = ?, signatureJson = ?, argsJsonSchema = ?,
+            isScratch = ?, typeChecked = ?, fsMode = ?, updatedAt = ?, updated_by = ?
+          WHERE id = ?
+          RETURNING *`).get(args.description, args.intent, args.signatureJson, argsJsonSchema2 ?? null, isScratch2 ? 1 : 0, typeChecked2 ? 1 : 0, fsMode2, new Date().toISOString(), args.createdBy ?? null, existing.id);
+      if (!row)
+        throw new Error("Failed to update script metadata");
+      const script2 = rowToScript(row);
+      if (!script2.isScratch && shouldEmbed && (trackedMetadataChanged || promotedFromScratch)) {
+        await embedScript(script2);
+      }
+      return {
+        script: script2,
+        isNew: false,
+        contentDeduped: true
+      };
+    }
+    return {
+      script: existing,
+      isNew: false,
+      contentDeduped: true
+    };
+  }
+  const now = new Date().toISOString();
+  const newVersion = existing.version + 1;
+  const fsMode = args.fsMode ?? existing.fsMode;
+  const isScratch = args.isScratch ?? existing.isScratch;
+  const typeChecked = args.typeChecked ?? existing.typeChecked;
+  const argsJsonSchema = args.argsJsonSchema !== undefined ? args.argsJsonSchema : existing.argsJsonSchema;
+  const txn = getDb().transaction(() => {
+    const row = getDb().prepare(`UPDATE scripts
+        SET source = ?, description = ?, intent = ?, signatureJson = ?, argsJsonSchema = ?,
+          contentHash = ?, version = ?, isScratch = ?, typeChecked = ?, fsMode = ?, updatedAt = ?, updated_by = ?
+        WHERE id = ?
+        RETURNING *`).get(args.source, args.description, args.intent, args.signatureJson, argsJsonSchema ?? null, contentHash, newVersion, isScratch ? 1 : 0, typeChecked ? 1 : 0, fsMode, now, args.createdBy ?? null, existing.id);
+    if (!row)
+      throw new Error("Failed to update script");
+    insertScriptVersion({
+      scriptId: row.id,
+      version: row.version,
+      source: row.source,
+      description: row.description,
+      intent: row.intent,
+      signatureJson: row.signatureJson,
+      contentHash: row.contentHash,
+      changedByAgentId: args.agentId ?? null,
+      changeReason: args.changeReason ?? null
+    });
+    return rowToScript(row);
+  });
+  const script = txn();
+  if (!script.isScratch && shouldEmbed) {
+    await embedScript(script);
+  }
+  return {
+    script,
+    isNew: false,
+    contentDeduped: false
+  };
+}
+function getScript(args) {
+  const scopeId = normalizeScopeId(args.scope, args.scopeId);
+  const row = scopeId === null ? getDb().prepare("SELECT * FROM scripts WHERE name = ? AND scope = ? AND scopeId IS NULL").get(args.name, args.scope) : getDb().prepare("SELECT * FROM scripts WHERE name = ? AND scope = ? AND scopeId = ?").get(args.name, args.scope, scopeId);
+  return row ? rowToScript(row) : null;
+}
+function getScriptById(id) {
+  const row = getDb().prepare("SELECT * FROM scripts WHERE id = ?").get(id);
+  return row ? rowToScript(row) : null;
+}
+function getScriptVersion(args) {
+  if (args.version === undefined && args.contentHash === undefined) {
+    throw new Error("version or contentHash is required");
+  }
+  const row = args.version !== undefined ? getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? AND version = ?").get(args.scriptId, args.version) : getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? AND contentHash = ? ORDER BY version DESC LIMIT 1").get(args.scriptId, args.contentHash);
+  return row ? rowToScriptVersion(row) : null;
+}
+function listScripts(args) {
+  const conditions = [];
+  const params = [];
+  if (args?.scope) {
+    conditions.push("scope = ?");
+    params.push(args.scope);
+    if (args.scope === "global") {
+      conditions.push("scopeId IS NULL");
+    } else if (args.scopeId !== undefined) {
+      conditions.push("scopeId = ?");
+      params.push(normalizeScopeId(args.scope, args.scopeId));
+    }
+  } else if (args?.scopeId !== undefined) {
+    conditions.push("scopeId = ?");
+    params.push(args.scopeId ?? "");
+  }
+  if (!args?.includeScratch) {
+    conditions.push("isScratch = 0");
+  }
+  const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
+  return getDb().prepare(`SELECT * FROM scripts ${whereClause} ORDER BY scope ASC, scopeId ASC, name ASC`).all(...params).map(rowToScript);
+}
+function listScriptVersions(scriptId) {
+  return getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? ORDER BY version DESC").all(scriptId).map(rowToScriptVersion);
+}
+function deleteScript(args) {
+  const existing = getScript(args);
+  if (!existing)
+    return false;
+  const result = getDb().run("DELETE FROM scripts WHERE id = ?", [existing.id]);
+  return result.changes > 0;
+}
+var SCRIPT_API_ID_LEN = 12;
+function rowToScriptApi(row) {
+  return {
+    id: row.id,
+    scriptId: row.scriptId,
+    agentId: row.agentId,
+    authMode: row.authMode,
+    enabled: row.enabled === 1,
+    label: row.label ?? null,
+    callCount: row.callCount,
+    lastUsedAt: row.lastUsedAt ?? null,
+    createdAt: row.createdAt
+  };
+}
+function isUniqueConstraintError(err) {
+  return err instanceof Error && /UNIQUE constraint failed/i.test(err.message);
+}
+function createScriptApi(args) {
+  const now = new Date().toISOString();
+  const token = args.authMode === "bearer" ? generateBearerToken() : null;
+  const encrypted = token ? encryptSecret(token, getEncryptionKey()) : null;
+  const createdBy = args.createdBy ?? null;
+  for (let attempt = 0;attempt < 5; attempt++) {
+    const id = generateShortId(SCRIPT_API_ID_LEN);
+    try {
+      const row = getDb().prepare(`INSERT INTO script_apis
+             (id, scriptId, agentId, authMode, bearerTokenEncrypted, enabled, label,
+              callCount, lastUsedAt, createdAt, created_by, updated_by)
+           VALUES (?, ?, ?, ?, ?, 1, ?, 0, NULL, ?, ?, ?)
+           RETURNING *`).get(id, args.scriptId, args.agentId, args.authMode, encrypted, args.label ?? null, now, createdBy, createdBy);
+      if (!row)
+        throw new Error("Failed to create script API endpoint");
+      if (token)
+        registerVolatileSecret(token, `script-api:${id}`);
+      return { ...rowToScriptApi(row), token };
+    } catch (err) {
+      if (isUniqueConstraintError(err) && attempt < 4)
+        continue;
+      throw err;
+    }
+  }
+  throw new Error("Failed to allocate a unique script API endpoint id");
+}
+function listScriptApisForScript(scriptId) {
+  return getDb().prepare("SELECT * FROM script_apis WHERE scriptId = ? ORDER BY createdAt DESC").all(scriptId).map(rowToScriptApi);
+}
+function getScriptApiById(id) {
+  const row = getDb().prepare("SELECT * FROM script_apis WHERE id = ?").get(id);
+  if (!row)
+    return null;
+  return { ...rowToScriptApi(row), bearerTokenEncrypted: row.bearerTokenEncrypted ?? null };
+}
+function getScriptApiSecret(id) {
+  const row = getDb().prepare("SELECT bearerTokenEncrypted FROM script_apis WHERE id = ?").get(id);
+  if (!row?.bearerTokenEncrypted)
+    return null;
+  const token = decryptSecret(row.bearerTokenEncrypted, getEncryptionKey());
+  registerVolatileSecret(token, `script-api:${id}`);
+  return token;
+}
+function updateScriptApi(id, args) {
+  const sets = [];
+  const vals = [];
+  if (args.enabled !== undefined) {
+    sets.push("enabled = ?");
+    vals.push(args.enabled ? 1 : 0);
+  }
+  if (args.label !== undefined) {
+    sets.push("label = ?");
+    vals.push(args.label);
+  }
+  if (args.updatedBy !== undefined) {
+    sets.push("updated_by = ?");
+    vals.push(args.updatedBy);
+  }
+  if (sets.length === 0) {
+    const row2 = getDb().prepare("SELECT * FROM script_apis WHERE id = ?").get(id);
+    return row2 ? rowToScriptApi(row2) : null;
+  }
+  vals.push(id);
+  const row = getDb().prepare(`UPDATE script_apis SET ${sets.join(", ")} WHERE id = ? RETURNING *`).get(...vals);
+  return row ? rowToScriptApi(row) : null;
+}
+function rotateScriptApiSecret(id, updatedBy) {
+  const existing = getScriptApiById(id);
+  if (!existing || existing.authMode !== "bearer")
+    return null;
+  const token = generateBearerToken();
+  const encrypted = encryptSecret(token, getEncryptionKey());
+  const row = getDb().prepare("UPDATE script_apis SET bearerTokenEncrypted = ?, updated_by = ? WHERE id = ? RETURNING *").get(encrypted, updatedBy ?? null, id);
+  if (!row)
+    return null;
+  registerVolatileSecret(token, `script-api:${id}`);
+  return { ...rowToScriptApi(row), token };
+}
+function deleteScriptApi(id) {
+  return getDb().run("DELETE FROM script_apis WHERE id = ?", [id]).changes > 0;
+}
+function recordScriptApiUsage(id) {
+  getDb().run("UPDATE script_apis SET callCount = callCount + 1, lastUsedAt = ? WHERE id = ?", [
+    new Date().toISOString(),
+    id
+  ]);
+}
 
 // src/scripts-runtime/import-allowlist.ts
 var import_typescript = __toESM(require_typescript(), 1);
@@ -169689,4 +170597,4 @@ function validateScriptImports(source) {
   return { ok: false, diagnostic: reason, imports: rejected };
 }
 
-export { CREDENTIAL_BINDINGS_CONFIG_KEY, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, SwarmConfigCredentialBindingStore, listRelationalCredentialBindings, upsertCredentialBinding, disableCredentialBinding, importLegacyCredentialBindings, listScriptConnections, upsertScriptConnection, setScriptConnectionEnabled, getScriptApiConnectionDescriptors, getScriptApiTypes, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, require_typescript, validateScriptImports };
+export { assertUrlSafe, publicEndpointSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, CREDENTIAL_BINDINGS_CONFIG_KEY, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, SwarmConfigCredentialBindingStore, getMcpOAuthToken, upsertMcpOAuthToken, applyMcpOAuthRefresh, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, listRelationalCredentialBindings, upsertCredentialBinding, disableCredentialBinding, importLegacyCredentialBindings, listScriptConnections, getScriptConnectionById, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, require_typescript, validateScriptImports };