@devicai/ui 0.47.0 → 0.49.0

package/dist/esm/components/IntegrationsModal/McpServersSection.js

@@ -0,0 +1,232 @@
+import { jsxs, jsx } from 'react/jsx-runtime';
+import { useState, useRef, useCallback, useEffect } from 'react';
+import { McpConnectForm } from './McpConnectForm.js';
+
+/** A random value tying an OAuth round trip to the window that started it. */
+function newNonce() {
+    const c = typeof crypto !== "undefined" ? crypto : undefined;
+    if (c?.randomUUID)
+        return c.randomUUID();
+    return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
+}
+function stateOf(server) {
+    const status = server.connection?.status;
+    if (status === "active")
+        return { key: "connected", label: "Connected" };
+    if (status === "error")
+        return { key: "reconnect", label: "Needs attention" };
+    if (status === "pending_auth")
+        return { key: "reconnect", label: "Waiting for sign-in" };
+    return { key: "disconnected", label: "Not connected" };
+}
+function matches(server, query) {
+    const q = query.trim().toLowerCase();
+    if (!q)
+        return true;
+    return (server.name.toLowerCase().includes(q) ||
+        server.url.toLowerCase().includes(q) ||
+        (server.description ?? "").toLowerCase().includes(q));
+}
+/** Identity of a row, stable whether or not it has been connected yet. */
+function keyOf(server) {
+    return server.connection?.id ?? server.templateId ?? server.url;
+}
+/**
+ * The MCP servers section of the connected-apps panel.
+ *
+ * The end user sees one list: the servers their developer left ready to
+ * connect, the ones they added themselves, and — unless it was switched off —
+ * a button to add another. Both routes open the same form, because the only
+ * difference between them is who typed the url.
+ *
+ * Connecting opens a consent screen in a popup. The popup is opened empty
+ * *before* the request that produces its URL, because browsers only honour
+ * `window.open` inside the gesture that triggered it; opening it after the
+ * round trip is what gets it blocked. Two endings are watched, not one — a
+ * cancelled consent screen posts nothing back, so the close is watched too.
+ */
+function McpServersSection({ state, theme, query = "", }) {
+    const { servers, allowCustom, limits, loading, client, scope, refresh } = state;
+    const [actionError, setActionError] = useState(null);
+    const [busyKey, setBusyKey] = useState(null);
+    const [blockedUrl, setBlockedUrl] = useState(null);
+    /** The row whose form is open. `null` inside the object is "add your own". */
+    const [prompt, setPrompt] = useState(null);
+    const [formError, setFormError] = useState(null);
+    const pendingRef = useRef(null);
+    const popupRef = useRef(null);
+    const pollRef = useRef(null);
+    const finish = useCallback(() => {
+        if (pollRef.current !== null) {
+            window.clearInterval(pollRef.current);
+            pollRef.current = null;
+        }
+        pendingRef.current = null;
+        popupRef.current = null;
+        setBusyKey(null);
+        void refresh();
+    }, [refresh]);
+    // The callback page says it is done. A nudge, never the result: what is shown
+    // comes from re-reading the server, so a forged message costs one extra fetch
+    // and nothing else.
+    useEffect(() => {
+        const onMessage = (event) => {
+            const data = event.data;
+            if (!data || data.source !== "devic")
+                return;
+            if (data.type !== "mcp-connected")
+                return;
+            const pending = pendingRef.current;
+            if (!pending || data.returnTo !== pending.returnTo)
+                return;
+            popupRef.current?.close();
+            finish();
+        };
+        window.addEventListener("message", onMessage);
+        return () => window.removeEventListener("message", onMessage);
+    }, [finish]);
+    useEffect(() => () => {
+        if (pollRef.current !== null)
+            window.clearInterval(pollRef.current);
+    }, []);
+    const openPrompt = (server) => {
+        setFormError(null);
+        setActionError(null);
+        setBlockedUrl(null);
+        setPrompt({ server });
+    };
+    const submit = async (values) => {
+        if (!client || !prompt)
+            return;
+        const server = prompt.server;
+        const rowKey = server ? keyOf(server) : "new";
+        setBusyKey(rowKey);
+        setFormError(null);
+        const nonce = newNonce();
+        const returnTo = `${window.location.origin}/?devic_mcp=${nonce}`;
+        // Opened empty inside the submit gesture and navigated once the URL is
+        // known. Skipped when no browser is involved at all.
+        const popup = values.auth.mode === "oauth"
+            ? window.open("", "devic-mcp-oauth", "width=520,height=680,menubar=no,toolbar=no")
+            : null;
+        try {
+            const existing = server?.connection;
+            const result = existing
+                ? await client.reconnectMcpServer(existing.id, {
+                    ...scope,
+                    returnTo,
+                    auth: values.auth,
+                })
+                : await client.connectMcpServer({
+                    ...scope,
+                    returnTo,
+                    templateId: server?.templateId,
+                    url: values.url,
+                    name: values.name,
+                    auth: values.auth,
+                });
+            if (result.requiresClientCredentials) {
+                // Not a failure the user can do nothing about: they own the server, so
+                // the form reopens with the fields and the redirect URI to authorise.
+                popup?.close();
+                setBusyKey(null);
+                setPrompt({
+                    server,
+                    callbackUrl: result.callbackUrl,
+                    needsClientCredentials: true,
+                });
+                setFormError(result.error ?? null);
+                return;
+            }
+            if (result.status === "error") {
+                popup?.close();
+                setBusyKey(null);
+                setFormError(result.error ?? "The server could not be reached.");
+                return;
+            }
+            if (!result.authorizationUrl) {
+                // Connected outright: the key the user typed is the credential.
+                popup?.close();
+                setPrompt(null);
+                finish();
+                return;
+            }
+            pendingRef.current = { returnTo };
+            setPrompt(null);
+            if (popup && !popup.closed) {
+                popupRef.current = popup;
+                popup.location.href = result.authorizationUrl;
+                pollRef.current = window.setInterval(() => {
+                    if (popup.closed)
+                        finish();
+                }, 700);
+            }
+            else {
+                // Blocked (Safari, in-app browsers, extensions): hand over the URL.
+                setBlockedUrl({ url: result.authorizationUrl });
+                setBusyKey(null);
+            }
+        }
+        catch (err) {
+            popup?.close();
+            pendingRef.current = null;
+            setBusyKey(null);
+            setFormError(err instanceof Error ? err.message : String(err));
+        }
+    };
+    const disconnect = async (server) => {
+        const connection = server.connection;
+        if (!client || !connection || busyKey)
+            return;
+        setBusyKey(keyOf(server));
+        setActionError(null);
+        try {
+            await client.disconnectMcpServer(connection.id, scope);
+            await refresh();
+        }
+        catch (err) {
+            setActionError(err instanceof Error ? err.message : String(err));
+        }
+        finally {
+            setBusyKey(null);
+        }
+    };
+    const visible = servers.filter((s) => matches(s, query));
+    const atLimit = limits.used >= limits.maxServers;
+    // Nothing offered and nothing addable: the whole section would be a heading
+    // over an empty box, which says less than saying nothing.
+    if (!servers.length && !allowCustom)
+        return null;
+    return (jsxs("div", { className: "devic-int-mcp-section", children: [jsxs("div", { className: "devic-int-mcp-heading", children: [jsx("h4", { children: "MCP servers" }), jsx("span", { children: "Connect a server and its tools become available in this chat." })] }), actionError && jsx("div", { className: "devic-int-error", children: actionError }), blockedUrl && (jsxs("div", { className: "devic-int-notice", children: ["Your browser blocked the pop-up.", " ", jsx("a", { href: blockedUrl.url, target: "_blank", rel: "noopener noreferrer", onClick: () => {
+                            pendingRef.current = null;
+                            setBlockedUrl(null);
+                        }, children: "Open the authorisation page" }), " ", "and come back \u2014 then use Refresh."] })), visible.length > 0 && (jsx("div", { className: "devic-int-grid", children: visible.map((server) => {
+                    const cardState = stateOf(server);
+                    const rowKey = keyOf(server);
+                    const busy = busyKey === rowKey;
+                    const connection = server.connection;
+                    return (jsxs("div", { className: "devic-int-card", "data-state": cardState.key, children: [jsxs("div", { className: "devic-int-card-head", children: [server.logoUrl ? (jsx("img", { className: "devic-int-mcp-logo", src: server.logoUrl, alt: "", "aria-hidden": "true" })) : (jsx("span", { className: "devic-int-mcp-logo devic-int-mcp-logo-fallback", children: server.name.slice(0, 1).toUpperCase() })), jsxs("span", { className: "devic-int-state", children: [jsx("span", { className: "devic-int-dot", "data-ok": cardState.key === "connected", "data-off": cardState.key === "disconnected", "aria-hidden": "true" }), cardState.label] })] }), jsx("div", { className: "devic-int-name", title: server.name, children: server.name }), jsx("div", { className: "devic-int-description", title: server.description ?? server.url, children: server.description ?? server.url }), connection?.shared && (
+                            // Worth saying before they wonder why they cannot remove it.
+                            jsx("div", { className: "devic-int-mcp-note", children: "Connected for everyone on this account" })), connection?.status === "active" &&
+                                typeof connection.toolCount === "number" && (jsxs("div", { className: "devic-int-mcp-note", children: [connection.toolCount, " tool", connection.toolCount === 1 ? "" : "s", " available"] })), connection?.lastProbeError && (jsx("div", { className: "devic-int-mcp-note devic-int-mcp-note-warn", title: connection.lastProbeError, children: connection.lastProbeError })), jsx("button", { type: "button", className: `devic-int-btn devic-int-btn-block${cardState.key === "connected" ? "" : " devic-int-btn-primary"}`, onClick: () => openPrompt(server), disabled: busy ||
+                                    !!busyKey ||
+                                    connection?.readOnly ||
+                                    (!connection && atLimit), title: connection?.readOnly
+                                    ? "This server was connected for the whole account."
+                                    : !connection && atLimit
+                                        ? `You can have ${limits.maxServers} connected at a time.`
+                                        : undefined, children: busy
+                                    ? "Waiting…"
+                                    : cardState.key === "disconnected"
+                                        ? "Connect"
+                                        : "Reconnect" }), connection && !connection.readOnly && (jsx("button", { type: "button", className: "devic-int-btn devic-int-btn-block devic-int-mcp-remove", onClick: () => void disconnect(server), disabled: !!busyKey, children: "Disconnect" }))] }, rowKey));
+                }) })), allowCustom && (jsx("button", { type: "button", className: "devic-int-btn devic-int-mcp-add", onClick: () => openPrompt(null), disabled: loading || !!busyKey || atLimit, title: atLimit
+                    ? `You can have ${limits.maxServers} MCP server${limits.maxServers === 1 ? "" : "s"} connected at a time.`
+                    : undefined, children: "+ Add your own MCP" })), prompt && (jsx(McpConnectForm, { server: prompt.server, callbackUrl: prompt.callbackUrl, needsClientCredentials: prompt.needsClientCredentials, submitting: busyKey === (prompt.server ? keyOf(prompt.server) : "new"), error: formError, theme: theme, onCancel: () => {
+                    setPrompt(null);
+                    setFormError(null);
+                }, onSubmit: submit }))] }));
+}
+
+export { McpServersSection };
+//# sourceMappingURL=McpServersSection.js.map

package/dist/esm/components/IntegrationsModal/McpServersSection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpServersSection.js","sources":["../../../../src/components/IntegrationsModal/McpServersSection.tsx"],"sourcesContent":["import { useCallback, useEffect, useRef, useState, type JSX } from \"react\";\nimport type {\n  TenantMcpAuthInput,\n  TenantMcpConnectResult,\n  TenantMcpServer,\n} from \"../../api/types\";\nimport type { DevicTheme } from \"../theme\";\nimport { McpConnectForm } from \"./McpConnectForm\";\nimport type { TenantMcpState } from \"./useTenantMcp\";\n\nexport interface McpServersSectionProps {\n  state: TenantMcpState;\n  theme?: DevicTheme;\n  /** Filter typed in the modal's search box. */\n  query?: string;\n}\n\n/** Message the OAuth callback page posts back when an MCP connection is done. */\ninterface McpCallbackMessage {\n  source?: string;\n  type?: string;\n  status?: string;\n  returnTo?: string;\n}\n\n/** A random value tying an OAuth round trip to the window that started it. */\nfunction newNonce(): string {\n  const c = typeof crypto !== \"undefined\" ? crypto : undefined;\n  if (c?.randomUUID) return c.randomUUID();\n  return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;\n}\n\nfunction stateOf(server: TenantMcpServer): {\n  key: \"connected\" | \"reconnect\" | \"disconnected\";\n  label: string;\n} {\n  const status = server.connection?.status;\n  if (status === \"active\") return { key: \"connected\", label: \"Connected\" };\n  if (status === \"error\") return { key: \"reconnect\", label: \"Needs attention\" };\n  if (status === \"pending_auth\")\n    return { key: \"reconnect\", label: \"Waiting for sign-in\" };\n  return { key: \"disconnected\", label: \"Not connected\" };\n}\n\nfunction matches(server: TenantMcpServer, query: string): boolean {\n  const q = query.trim().toLowerCase();\n  if (!q) return true;\n  return (\n    server.name.toLowerCase().includes(q) ||\n    server.url.toLowerCase().includes(q) ||\n    (server.description ?? \"\").toLowerCase().includes(q)\n  );\n}\n\n/** Identity of a row, stable whether or not it has been connected yet. */\nfunction keyOf(server: TenantMcpServer): string {\n  return server.connection?.id ?? server.templateId ?? server.url;\n}\n\n/**\n * The MCP servers section of the connected-apps panel.\n *\n * The end user sees one list: the servers their developer left ready to\n * connect, the ones they added themselves, and — unless it was switched off —\n * a button to add another. Both routes open the same form, because the only\n * difference between them is who typed the url.\n *\n * Connecting opens a consent screen in a popup. The popup is opened empty\n * *before* the request that produces its URL, because browsers only honour\n * `window.open` inside the gesture that triggered it; opening it after the\n * round trip is what gets it blocked. Two endings are watched, not one — a\n * cancelled consent screen posts nothing back, so the close is watched too.\n */\nexport function McpServersSection({\n  state,\n  theme,\n  query = \"\",\n}: McpServersSectionProps): JSX.Element | null {\n  const { servers, allowCustom, limits, loading, client, scope, refresh } = state;\n\n  const [actionError, setActionError] = useState<string | null>(null);\n  const [busyKey, setBusyKey] = useState<string | null>(null);\n  const [blockedUrl, setBlockedUrl] = useState<{ url: string } | null>(null);\n  /** The row whose form is open. `null` inside the object is \"add your own\". */\n  const [prompt, setPrompt] = useState<{\n    server: TenantMcpServer | null;\n    callbackUrl?: string;\n    needsClientCredentials?: boolean;\n  } | null>(null);\n  const [formError, setFormError] = useState<string | null>(null);\n\n  const pendingRef = useRef<{ returnTo: string } | null>(null);\n  const popupRef = useRef<Window | null>(null);\n  const pollRef = useRef<number | null>(null);\n\n  const finish = useCallback(() => {\n    if (pollRef.current !== null) {\n      window.clearInterval(pollRef.current);\n      pollRef.current = null;\n    }\n    pendingRef.current = null;\n    popupRef.current = null;\n    setBusyKey(null);\n    void refresh();\n  }, [refresh]);\n\n  // The callback page says it is done. A nudge, never the result: what is shown\n  // comes from re-reading the server, so a forged message costs one extra fetch\n  // and nothing else.\n  useEffect(() => {\n    const onMessage = (event: MessageEvent) => {\n      const data = event.data as McpCallbackMessage | undefined;\n      if (!data || data.source !== \"devic\") return;\n      if (data.type !== \"mcp-connected\") return;\n      const pending = pendingRef.current;\n      if (!pending || data.returnTo !== pending.returnTo) return;\n      popupRef.current?.close();\n      finish();\n    };\n    window.addEventListener(\"message\", onMessage);\n    return () => window.removeEventListener(\"message\", onMessage);\n  }, [finish]);\n\n  useEffect(\n    () => () => {\n      if (pollRef.current !== null) window.clearInterval(pollRef.current);\n    },\n    []\n  );\n\n  const openPrompt = (server: TenantMcpServer | null) => {\n    setFormError(null);\n    setActionError(null);\n    setBlockedUrl(null);\n    setPrompt({ server });\n  };\n\n  const submit = async (values: {\n    url?: string;\n    name?: string;\n    auth: TenantMcpAuthInput;\n  }) => {\n    if (!client || !prompt) return;\n    const server = prompt.server;\n    const rowKey = server ? keyOf(server) : \"new\";\n    setBusyKey(rowKey);\n    setFormError(null);\n\n    const nonce = newNonce();\n    const returnTo = `${window.location.origin}/?devic_mcp=${nonce}`;\n    // Opened empty inside the submit gesture and navigated once the URL is\n    // known. Skipped when no browser is involved at all.\n    const popup =\n      values.auth.mode === \"oauth\"\n        ? window.open(\n            \"\",\n            \"devic-mcp-oauth\",\n            \"width=520,height=680,menubar=no,toolbar=no\"\n          )\n        : null;\n\n    try {\n      const existing = server?.connection;\n      const result: TenantMcpConnectResult = existing\n        ? await client.reconnectMcpServer(existing.id, {\n            ...scope,\n            returnTo,\n            auth: values.auth,\n          })\n        : await client.connectMcpServer({\n            ...scope,\n            returnTo,\n            templateId: server?.templateId,\n            url: values.url,\n            name: values.name,\n            auth: values.auth,\n          });\n\n      if (result.requiresClientCredentials) {\n        // Not a failure the user can do nothing about: they own the server, so\n        // the form reopens with the fields and the redirect URI to authorise.\n        popup?.close();\n        setBusyKey(null);\n        setPrompt({\n          server,\n          callbackUrl: result.callbackUrl,\n          needsClientCredentials: true,\n        });\n        setFormError(result.error ?? null);\n        return;\n      }\n\n      if (result.status === \"error\") {\n        popup?.close();\n        setBusyKey(null);\n        setFormError(result.error ?? \"The server could not be reached.\");\n        return;\n      }\n\n      if (!result.authorizationUrl) {\n        // Connected outright: the key the user typed is the credential.\n        popup?.close();\n        setPrompt(null);\n        finish();\n        return;\n      }\n\n      pendingRef.current = { returnTo };\n      setPrompt(null);\n      if (popup && !popup.closed) {\n        popupRef.current = popup;\n        popup.location.href = result.authorizationUrl;\n        pollRef.current = window.setInterval(() => {\n          if (popup.closed) finish();\n        }, 700);\n      } else {\n        // Blocked (Safari, in-app browsers, extensions): hand over the URL.\n        setBlockedUrl({ url: result.authorizationUrl });\n        setBusyKey(null);\n      }\n    } catch (err) {\n      popup?.close();\n      pendingRef.current = null;\n      setBusyKey(null);\n      setFormError(err instanceof Error ? err.message : String(err));\n    }\n  };\n\n  const disconnect = async (server: TenantMcpServer) => {\n    const connection = server.connection;\n    if (!client || !connection || busyKey) return;\n    setBusyKey(keyOf(server));\n    setActionError(null);\n    try {\n      await client.disconnectMcpServer(connection.id, scope);\n      await refresh();\n    } catch (err) {\n      setActionError(err instanceof Error ? err.message : String(err));\n    } finally {\n      setBusyKey(null);\n    }\n  };\n\n  const visible = servers.filter((s) => matches(s, query));\n  const atLimit = limits.used >= limits.maxServers;\n\n  // Nothing offered and nothing addable: the whole section would be a heading\n  // over an empty box, which says less than saying nothing.\n  if (!servers.length && !allowCustom) return null;\n\n  return (\n    <div className=\"devic-int-mcp-section\">\n      <div className=\"devic-int-mcp-heading\">\n        <h4>MCP servers</h4>\n        <span>Connect a server and its tools become available in this chat.</span>\n      </div>\n\n      {actionError && <div className=\"devic-int-error\">{actionError}</div>}\n\n      {blockedUrl && (\n        <div className=\"devic-int-notice\">\n          Your browser blocked the pop-up.{\" \"}\n          <a\n            href={blockedUrl.url}\n            target=\"_blank\"\n            rel=\"noopener noreferrer\"\n            onClick={() => {\n              pendingRef.current = null;\n              setBlockedUrl(null);\n            }}\n          >\n            Open the authorisation page\n          </a>{\" \"}\n          and come back — then use Refresh.\n        </div>\n      )}\n\n      {visible.length > 0 && (\n        <div className=\"devic-int-grid\">\n          {visible.map((server) => {\n            const cardState = stateOf(server);\n            const rowKey = keyOf(server);\n            const busy = busyKey === rowKey;\n            const connection = server.connection;\n            return (\n              <div\n                key={rowKey}\n                className=\"devic-int-card\"\n                data-state={cardState.key}\n              >\n                <div className=\"devic-int-card-head\">\n                  {server.logoUrl ? (\n                    <img\n                      className=\"devic-int-mcp-logo\"\n                      src={server.logoUrl}\n                      alt=\"\"\n                      aria-hidden=\"true\"\n                    />\n                  ) : (\n                    <span className=\"devic-int-mcp-logo devic-int-mcp-logo-fallback\">\n                      {server.name.slice(0, 1).toUpperCase()}\n                    </span>\n                  )}\n                  <span className=\"devic-int-state\">\n                    <span\n                      className=\"devic-int-dot\"\n                      data-ok={cardState.key === \"connected\"}\n                      data-off={cardState.key === \"disconnected\"}\n                      aria-hidden=\"true\"\n                    />\n                    {cardState.label}\n                  </span>\n                </div>\n\n                <div className=\"devic-int-name\" title={server.name}>\n                  {server.name}\n                </div>\n\n                <div\n                  className=\"devic-int-description\"\n                  title={server.description ?? server.url}\n                >\n                  {server.description ?? server.url}\n                </div>\n\n                {connection?.shared && (\n                  // Worth saying before they wonder why they cannot remove it.\n                  <div className=\"devic-int-mcp-note\">\n                    Connected for everyone on this account\n                  </div>\n                )}\n\n                {connection?.status === \"active\" &&\n                  typeof connection.toolCount === \"number\" && (\n                    <div className=\"devic-int-mcp-note\">\n                      {connection.toolCount} tool\n                      {connection.toolCount === 1 ? \"\" : \"s\"} available\n                    </div>\n                  )}\n\n                {connection?.lastProbeError && (\n                  <div\n                    className=\"devic-int-mcp-note devic-int-mcp-note-warn\"\n                    title={connection.lastProbeError}\n                  >\n                    {connection.lastProbeError}\n                  </div>\n                )}\n\n                <button\n                  type=\"button\"\n                  className={`devic-int-btn devic-int-btn-block${\n                    cardState.key === \"connected\" ? \"\" : \" devic-int-btn-primary\"\n                  }`}\n                  onClick={() => openPrompt(server)}\n                  disabled={\n                    busy ||\n                    !!busyKey ||\n                    connection?.readOnly ||\n                    (!connection && atLimit)\n                  }\n                  title={\n                    connection?.readOnly\n                      ? \"This server was connected for the whole account.\"\n                      : !connection && atLimit\n                        ? `You can have ${limits.maxServers} connected at a time.`\n                        : undefined\n                  }\n                >\n                  {busy\n                    ? \"Waiting…\"\n                    : cardState.key === \"disconnected\"\n                      ? \"Connect\"\n                      : \"Reconnect\"}\n                </button>\n\n                {connection && !connection.readOnly && (\n                  <button\n                    type=\"button\"\n                    className=\"devic-int-btn devic-int-btn-block devic-int-mcp-remove\"\n                    onClick={() => void disconnect(server)}\n                    disabled={!!busyKey}\n                  >\n                    Disconnect\n                  </button>\n                )}\n              </div>\n            );\n          })}\n        </div>\n      )}\n\n      {allowCustom && (\n        <button\n          type=\"button\"\n          className=\"devic-int-btn devic-int-mcp-add\"\n          onClick={() => openPrompt(null)}\n          disabled={loading || !!busyKey || atLimit}\n          title={\n            atLimit\n              ? `You can have ${limits.maxServers} MCP server${\n                  limits.maxServers === 1 ? \"\" : \"s\"\n                } connected at a time.`\n              : undefined\n          }\n        >\n          + Add your own MCP\n        </button>\n      )}\n\n      {prompt && (\n        <McpConnectForm\n          server={prompt.server}\n          callbackUrl={prompt.callbackUrl}\n          needsClientCredentials={prompt.needsClientCredentials}\n          submitting={\n            busyKey === (prompt.server ? keyOf(prompt.server) : \"new\")\n          }\n          error={formError}\n          theme={theme}\n          onCancel={() => {\n            setPrompt(null);\n            setFormError(null);\n          }}\n          onSubmit={submit}\n        />\n      )}\n    </div>\n  );\n}\n\nexport default McpServersSection;\n"],"names":["_jsxs","_jsx"],"mappings":";;;;AAyBA;AACA,SAAS,QAAQ,GAAA;AACf,IAAA,MAAM,CAAC,GAAG,OAAO,MAAM,KAAK,WAAW,GAAG,MAAM,GAAG,SAAS;IAC5D,IAAI,CAAC,EAAE,UAAU;AAAE,QAAA,OAAO,CAAC,CAAC,UAAU,EAAE;IACxC,OAAO,CAAA,EAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA,CAAA,EAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA,CAAE;AAC5E;AAEA,SAAS,OAAO,CAAC,MAAuB,EAAA;AAItC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,MAAM;IACxC,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE;IACxE,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC7E,IAAI,MAAM,KAAK,cAAc;QAC3B,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,qBAAqB,EAAE;IAC3D,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe,EAAE;AACxD;AAEA,SAAS,OAAO,CAAC,MAAuB,EAAE,KAAa,EAAA;IACrD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;AACpC,IAAA,IAAI,CAAC,CAAC;AAAE,QAAA,OAAO,IAAI;IACnB,QACE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpC,QAAA,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AAExD;AAEA;AACA,SAAS,KAAK,CAAC,MAAuB,EAAA;AACpC,IAAA,OAAO,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,GAAG;AACjE;AAEA;;;;;;;;;;;;;AAaG;AACG,SAAU,iBAAiB,CAAC,EAChC,KAAK,EACL,KAAK,EACL,KAAK,GAAG,EAAE,GACa,EAAA;AACvB,IAAA,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK;IAE/E,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC;IACnE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC;IAC3D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAyB,IAAI,CAAC;;IAE1E,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAI1B,IAAI,CAAC;IACf,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC;AAE/D,IAAA,MAAM,UAAU,GAAG,MAAM,CAA8B,IAAI,CAAC;AAC5D,IAAA,MAAM,QAAQ,GAAG,MAAM,CAAgB,IAAI,CAAC;AAC5C,IAAA,MAAM,OAAO,GAAG,MAAM,CAAgB,IAAI,CAAC;AAE3C,IAAA,MAAM,MAAM,GAAG,WAAW,CAAC,MAAK;AAC9B,QAAA,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE;AAC5B,YAAA,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;AACrC,YAAA,OAAO,CAAC,OAAO,GAAG,IAAI;QACxB;AACA,QAAA,UAAU,CAAC,OAAO,GAAG,IAAI;AACzB,QAAA,QAAQ,CAAC,OAAO,GAAG,IAAI;QACvB,UAAU,CAAC,IAAI,CAAC;QAChB,KAAK,OAAO,EAAE;AAChB,IAAA,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;;;;IAKb,SAAS,CAAC,MAAK;AACb,QAAA,MAAM,SAAS,GAAG,CAAC,KAAmB,KAAI;AACxC,YAAA,MAAM,IAAI,GAAG,KAAK,CAAC,IAAsC;AACzD,YAAA,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;gBAAE;AACtC,YAAA,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe;gBAAE;AACnC,YAAA,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO;YAClC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;gBAAE;AACpD,YAAA,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE;AACzB,YAAA,MAAM,EAAE;AACV,QAAA,CAAC;AACD,QAAA,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC;QAC7C,OAAO,MAAM,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC;AAC/D,IAAA,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;AAEZ,IAAA,SAAS,CACP,MAAM,MAAK;AACT,QAAA,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;AAAE,YAAA,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;IACrE,CAAC,EACD,EAAE,CACH;AAED,IAAA,MAAM,UAAU,GAAG,CAAC,MAA8B,KAAI;QACpD,YAAY,CAAC,IAAI,CAAC;QAClB,cAAc,CAAC,IAAI,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC;AACnB,QAAA,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;AACvB,IAAA,CAAC;AAED,IAAA,MAAM,MAAM,GAAG,OAAO,MAIrB,KAAI;AACH,QAAA,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;YAAE;AACxB,QAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;AAC5B,QAAA,MAAM,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK;QAC7C,UAAU,CAAC,MAAM,CAAC;QAClB,YAAY,CAAC,IAAI,CAAC;AAElB,QAAA,MAAM,KAAK,GAAG,QAAQ,EAAE;QACxB,MAAM,QAAQ,GAAG,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA,YAAA,EAAe,KAAK,CAAA,CAAE;;;QAGhE,MAAM,KAAK,GACT,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK;cACjB,MAAM,CAAC,IAAI,CACT,EAAE,EACF,iBAAiB,EACjB,4CAA4C;cAE9C,IAAI;AAEV,QAAA,IAAI;AACF,YAAA,MAAM,QAAQ,GAAG,MAAM,EAAE,UAAU;YACnC,MAAM,MAAM,GAA2B;kBACnC,MAAM,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE;AAC3C,oBAAA,GAAG,KAAK;oBACR,QAAQ;oBACR,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB;AACH,kBAAE,MAAM,MAAM,CAAC,gBAAgB,CAAC;AAC5B,oBAAA,GAAG,KAAK;oBACR,QAAQ;oBACR,UAAU,EAAE,MAAM,EAAE,UAAU;oBAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;AAClB,iBAAA,CAAC;AAEN,YAAA,IAAI,MAAM,CAAC,yBAAyB,EAAE;;;gBAGpC,KAAK,EAAE,KAAK,EAAE;gBACd,UAAU,CAAC,IAAI,CAAC;AAChB,gBAAA,SAAS,CAAC;oBACR,MAAM;oBACN,WAAW,EAAE,MAAM,CAAC,WAAW;AAC/B,oBAAA,sBAAsB,EAAE,IAAI;AAC7B,iBAAA,CAAC;AACF,gBAAA,YAAY,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC;gBAClC;YACF;AAEA,YAAA,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE;gBAC7B,KAAK,EAAE,KAAK,EAAE;gBACd,UAAU,CAAC,IAAI,CAAC;AAChB,gBAAA,YAAY,CAAC,MAAM,CAAC,KAAK,IAAI,kCAAkC,CAAC;gBAChE;YACF;AAEA,YAAA,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;;gBAE5B,KAAK,EAAE,KAAK,EAAE;gBACd,SAAS,CAAC,IAAI,CAAC;AACf,gBAAA,MAAM,EAAE;gBACR;YACF;AAEA,YAAA,UAAU,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE;YACjC,SAAS,CAAC,IAAI,CAAC;AACf,YAAA,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;AAC1B,gBAAA,QAAQ,CAAC,OAAO,GAAG,KAAK;gBACxB,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,gBAAgB;gBAC7C,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,MAAK;oBACxC,IAAI,KAAK,CAAC,MAAM;AAAE,wBAAA,MAAM,EAAE;gBAC5B,CAAC,EAAE,GAAG,CAAC;YACT;iBAAO;;gBAEL,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC/C,UAAU,CAAC,IAAI,CAAC;YAClB;QACF;QAAE,OAAO,GAAG,EAAE;YACZ,KAAK,EAAE,KAAK,EAAE;AACd,YAAA,UAAU,CAAC,OAAO,GAAG,IAAI;YACzB,UAAU,CAAC,IAAI,CAAC;AAChB,YAAA,YAAY,CAAC,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE;AACF,IAAA,CAAC;AAED,IAAA,MAAM,UAAU,GAAG,OAAO,MAAuB,KAAI;AACnD,QAAA,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU;AACpC,QAAA,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,IAAI,OAAO;YAAE;AACvC,QAAA,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzB,cAAc,CAAC,IAAI,CAAC;AACpB,QAAA,IAAI;YACF,MAAM,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC;YACtD,MAAM,OAAO,EAAE;QACjB;QAAE,OAAO,GAAG,EAAE;AACZ,YAAA,cAAc,CAAC,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAClE;gBAAU;YACR,UAAU,CAAC,IAAI,CAAC;QAClB;AACF,IAAA,CAAC;AAED,IAAA,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU;;;AAIhD,IAAA,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW;AAAE,QAAA,OAAO,IAAI;IAEhD,QACEA,IAAA,CAAA,KAAA,EAAA,EAAK,SAAS,EAAC,uBAAuB,aACpCA,IAAA,CAAA,KAAA,EAAA,EAAK,SAAS,EAAC,uBAAuB,EAAA,QAAA,EAAA,CACpCC,GAAA,CAAA,IAAA,EAAA,EAAA,QAAA,EAAA,aAAA,EAAA,CAAoB,EACpBA,GAAA,CAAA,MAAA,EAAA,EAAA,QAAA,EAAA,+DAAA,EAAA,CAA0E,CAAA,EAAA,CACtE,EAEL,WAAW,IAAIA,GAAA,CAAA,KAAA,EAAA,EAAK,SAAS,EAAC,iBAAiB,EAAA,QAAA,EAAE,WAAW,EAAA,CAAO,EAEnE,UAAU,KACTD,IAAA,CAAA,KAAA,EAAA,EAAK,SAAS,EAAC,kBAAkB,EAAA,QAAA,EAAA,CAAA,kCAAA,EACE,GAAG,EACpCC,GAAA,CAAA,GAAA,EAAA,EACE,IAAI,EAAE,UAAU,CAAC,GAAG,EACpB,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,qBAAqB,EACzB,OAAO,EAAE,MAAK;AACZ,4BAAA,UAAU,CAAC,OAAO,GAAG,IAAI;4BACzB,aAAa,CAAC,IAAI,CAAC;wBACrB,CAAC,EAAA,QAAA,EAAA,6BAAA,EAAA,CAGC,EAAC,GAAG,EAAA,wCAAA,CAAA,EAAA,CAEJ,CACP,EAEA,OAAO,CAAC,MAAM,GAAG,CAAC,KACjBA,GAAA,CAAA,KAAA,EAAA,EAAK,SAAS,EAAC,gBAAgB,EAAA,QAAA,EAC5B,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,KAAI;AACtB,oBAAA,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;AACjC,oBAAA,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;AAC5B,oBAAA,MAAM,IAAI,GAAG,OAAO,KAAK,MAAM;AAC/B,oBAAA,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU;AACpC,oBAAA,QACED,IAAA,CAAA,KAAA,EAAA,EAEE,SAAS,EAAC,gBAAgB,EAAA,YAAA,EACd,SAAS,CAAC,GAAG,EAAA,QAAA,EAAA,CAEzBA,IAAA,CAAA,KAAA,EAAA,EAAK,SAAS,EAAC,qBAAqB,EAAA,QAAA,EAAA,CACjC,MAAM,CAAC,OAAO,IACbC,GAAA,CAAA,KAAA,EAAA,EACE,SAAS,EAAC,oBAAoB,EAC9B,GAAG,EAAE,MAAM,CAAC,OAAO,EACnB,GAAG,EAAC,EAAE,EAAA,aAAA,EACM,MAAM,EAAA,CAClB,KAEFA,GAAA,CAAA,MAAA,EAAA,EAAM,SAAS,EAAC,gDAAgD,YAC7D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EAAA,CACjC,CACR,EACDD,IAAA,CAAA,MAAA,EAAA,EAAM,SAAS,EAAC,iBAAiB,EAAA,QAAA,EAAA,CAC/BC,GAAA,CAAA,MAAA,EAAA,EACE,SAAS,EAAC,eAAe,EAAA,SAAA,EAChB,SAAS,CAAC,GAAG,KAAK,WAAW,EAAA,UAAA,EAC5B,SAAS,CAAC,GAAG,KAAK,cAAc,EAAA,aAAA,EAC9B,MAAM,EAAA,CAClB,EACD,SAAS,CAAC,KAAK,IACX,CAAA,EAAA,CACH,EAENA,GAAA,CAAA,KAAA,EAAA,EAAK,SAAS,EAAC,gBAAgB,EAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAA,QAAA,EAC/C,MAAM,CAAC,IAAI,EAAA,CACR,EAENA,GAAA,CAAA,KAAA,EAAA,EACE,SAAS,EAAC,uBAAuB,EACjC,KAAK,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,GAAG,EAAA,QAAA,EAEtC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,GAAG,EAAA,CAC7B,EAEL,UAAU,EAAE,MAAM;;4BAEjBA,GAAA,CAAA,KAAA,EAAA,EAAK,SAAS,EAAC,oBAAoB,EAAA,QAAA,EAAA,wCAAA,EAAA,CAE7B,CACP,EAEA,UAAU,EAAE,MAAM,KAAK,QAAQ;AAC9B,gCAAA,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,KACtCD,IAAA,CAAA,KAAA,EAAA,EAAK,SAAS,EAAC,oBAAoB,EAAA,QAAA,EAAA,CAChC,UAAU,CAAC,SAAS,WACpB,UAAU,CAAC,SAAS,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,kBAClC,CACP,EAEF,UAAU,EAAE,cAAc,KACzBC,GAAA,CAAA,KAAA,EAAA,EACE,SAAS,EAAC,4CAA4C,EACtD,KAAK,EAAE,UAAU,CAAC,cAAc,EAAA,QAAA,EAE/B,UAAU,CAAC,cAAc,EAAA,CACtB,CACP,EAEDA,GAAA,CAAA,QAAA,EAAA,EACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAE,oCACT,SAAS,CAAC,GAAG,KAAK,WAAW,GAAG,EAAE,GAAG,wBACvC,CAAA,CAAE,EACF,OAAO,EAAE,MAAM,UAAU,CAAC,MAAM,CAAC,EACjC,QAAQ,EACN,IAAI;AACJ,oCAAA,CAAC,CAAC,OAAO;AACT,oCAAA,UAAU,EAAE,QAAQ;qCACnB,CAAC,UAAU,IAAI,OAAO,CAAC,EAE1B,KAAK,EACH,UAAU,EAAE;AACV,sCAAE;AACF,sCAAE,CAAC,UAAU,IAAI;AACf,0CAAE,CAAA,aAAA,EAAgB,MAAM,CAAC,UAAU,CAAA,qBAAA;0CACjC,SAAS,EAAA,QAAA,EAGhB;AACC,sCAAE;AACF,sCAAE,SAAS,CAAC,GAAG,KAAK;AAClB,0CAAE;AACF,0CAAE,WAAW,EAAA,CACV,EAER,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,KACjCA,gBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,wDAAwD,EAClE,OAAO,EAAE,MAAM,KAAK,UAAU,CAAC,MAAM,CAAC,EACtC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAA,QAAA,EAAA,YAAA,EAAA,CAGZ,CACV,KAnGI,MAAM,CAoGP;AAEV,gBAAA,CAAC,CAAC,EAAA,CACE,CACP,EAEA,WAAW,KACVA,GAAA,CAAA,QAAA,EAAA,EACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,iCAAiC,EAC3C,OAAO,EAAE,MAAM,UAAU,CAAC,IAAI,CAAC,EAC/B,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,EACzC,KAAK,EACH;AACE,sBAAE,CAAA,aAAA,EAAgB,MAAM,CAAC,UAAU,CAAA,WAAA,EAC/B,MAAM,CAAC,UAAU,KAAK,CAAC,GAAG,EAAE,GAAG,GACjC,CAAA,qBAAA;AACF,sBAAE,SAAS,EAAA,QAAA,EAAA,oBAAA,EAAA,CAIR,CACV,EAEA,MAAM,KACLA,GAAA,CAAC,cAAc,EAAA,EACb,MAAM,EAAE,MAAM,CAAC,MAAM,EACrB,WAAW,EAAE,MAAM,CAAC,WAAW,EAC/B,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,EACrD,UAAU,EACR,OAAO,MAAM,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,EAE5D,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,MAAK;oBACb,SAAS,CAAC,IAAI,CAAC;oBACf,YAAY,CAAC,IAAI,CAAC;gBACpB,CAAC,EACD,QAAQ,EAAE,MAAM,GAChB,CACH,CAAA,EAAA,CACG;AAEV;;;;"}

package/dist/esm/components/IntegrationsModal/index.d.ts

@@ -10,3 +10,9 @@ export { IntegrationLogo } from "./IntegrationLogo";
 export type { IntegrationLogoProps } from "./IntegrationLogo";
 export { useIntegrations } from "./useIntegrations";
 export type { IntegrationsState, IntegrationsScope, UseIntegrationsOptions, } from "./useIntegrations";
+export { McpServersSection } from "./McpServersSection";
+export type { McpServersSectionProps } from "./McpServersSection";
+export { McpConnectForm } from "./McpConnectForm";
+export type { McpConnectFormProps } from "./McpConnectForm";
+export { useTenantMcp } from "./useTenantMcp";
+export type { TenantMcpState, UseTenantMcpOptions } from "./useTenantMcp";

package/dist/esm/components/IntegrationsModal/useTenantMcp.d.ts

@@ -0,0 +1,40 @@
+import { DevicApiClient } from "../../api/client";
+import type { TenantMcpServer } from "../../api/types";
+import type { IntegrationsScope } from "./useIntegrations";
+export interface UseTenantMcpOptions extends IntegrationsScope {
+    apiKey?: string;
+    baseUrl?: string;
+    /**
+     * Fetch when this turns true, and only then. The modal passes its own open
+     * state, so a panel nobody opens costs no request at all.
+     */
+    enabled?: boolean;
+}
+export interface TenantMcpState {
+    servers: TenantMcpServer[];
+    loading: boolean;
+    error: string | null;
+    /** Whether this assistant offers MCP servers to its tenants at all. */
+    offered: boolean;
+    /** Whether the end user may add a server of their own. */
+    allowCustom: boolean;
+    limits: {
+        maxServers: number;
+        maxToolsPerServer: number;
+        used: number;
+    };
+    /** True once a first answer (or refusal) has arrived. */
+    settled: boolean;
+    refresh: () => Promise<void>;
+    client: DevicApiClient | null;
+    scope: IntegrationsScope;
+}
+/**
+ * The MCP servers an assistant offers its tenants, together with the ones this
+ * tenant has connected — loaded once and shared.
+ *
+ * Deliberately a sibling of `useIntegrations` rather than part of it: the two
+ * answer different endpoints, and folding them together would mean an assistant
+ * that offers only one of them pays for both on every open.
+ */
+export declare function useTenantMcp(options: UseTenantMcpOptions): TenantMcpState;

package/dist/esm/components/IntegrationsModal/useTenantMcp.js

@@ -0,0 +1,105 @@
+import { useMemo, useState, useCallback, useRef, useEffect } from 'react';
+import { DevicApiClient } from '../../api/client.js';
+import 'react/jsx-runtime';
+import { useOptionalDevicContext } from '../../provider/DevicContext.js';
+
+/** A 4xx here means "not for you", not "something broke". */
+function isRefusal(err) {
+    const status = err?.statusCode;
+    return typeof status === "number" && status >= 400 && status < 500;
+}
+const NO_LIMITS = { maxServers: 0, maxToolsPerServer: 0, used: 0 };
+/**
+ * The MCP servers an assistant offers its tenants, together with the ones this
+ * tenant has connected — loaded once and shared.
+ *
+ * Deliberately a sibling of `useIntegrations` rather than part of it: the two
+ * answer different endpoints, and folding them together would mean an assistant
+ * that offers only one of them pays for both on every open.
+ */
+function useTenantMcp(options) {
+    const { assistantId, tenantId, subtenantId, apiKey, baseUrl, enabled = true } = options;
+    const context = useOptionalDevicContext();
+    const resolvedBaseUrl = baseUrl || context?.baseUrl || "https://api.devic.ai";
+    const resolvedTenantId = tenantId || context?.tenantId;
+    const resolvedSubtenantId = subtenantId || context?.subtenantId;
+    const resolvedApiKey = apiKey || context?.apiKey;
+    const resolvedTenantSession = context?.getTenantSession;
+    const onSessionExpired = context?.onSessionExpired;
+    const client = useMemo(() => resolvedApiKey || resolvedTenantSession
+        ? new DevicApiClient({
+            apiKey: resolvedApiKey,
+            baseUrl: resolvedBaseUrl,
+            getTenantSession: resolvedTenantSession,
+            onSessionExpired,
+        })
+        : null, [resolvedApiKey, resolvedTenantSession, resolvedBaseUrl]);
+    const scope = useMemo(() => ({
+        assistantId,
+        tenantId: resolvedTenantId || undefined,
+        subtenantId: resolvedSubtenantId || undefined,
+    }), [assistantId, resolvedTenantId, resolvedSubtenantId]);
+    const [listing, setListing] = useState(null);
+    const [loading, setLoading] = useState(false);
+    const [error, setError] = useState(null);
+    const [settled, setSettled] = useState(false);
+    const refresh = useCallback(async () => {
+        if (!client) {
+            setError("No credentials configured");
+            setSettled(true);
+            return;
+        }
+        setLoading(true);
+        setError(null);
+        try {
+            setListing(await client.getMcpServers(scope));
+        }
+        catch (err) {
+            setListing(null);
+            setError(err instanceof Error ? err.message : String(err));
+            if (!isRefusal(err)) {
+                // A refusal is an ordinary answer — a disabled feature, a missing
+                // tenant — and stays quiet. A 500 is not, and swallowing it would
+                // leave an integrator with a panel that never appears and no reason.
+                console.warn("[devic-ui] could not load MCP servers", err);
+            }
+        }
+        finally {
+            setLoading(false);
+            setSettled(true);
+        }
+    }, [client, scope]);
+    // Once per scope, not once per render of whatever switched it on. A different
+    // tenant is a different listing, and the previous one is dropped first:
+    // showing it while the new one arrives would name servers that are not this
+    // user's.
+    const key = `${client ? "k" : "-"}|${scope.assistantId}|${scope.tenantId ?? ""}|${scope.subtenantId ?? ""}`;
+    const loadedKeyRef = useRef(null);
+    useEffect(() => {
+        if (!enabled || loadedKeyRef.current === key)
+            return;
+        if (loadedKeyRef.current !== null) {
+            setListing(null);
+            setSettled(false);
+        }
+        loadedKeyRef.current = key;
+        void refresh();
+    }, [enabled, key, refresh]);
+    return {
+        servers: listing?.servers ?? [],
+        loading,
+        error,
+        // Offered only once the server has said so. Anything hanging off this stays
+        // hidden until then, so nothing appears and then disappears.
+        offered: !!listing?.offered,
+        allowCustom: !!listing?.allowCustom,
+        limits: listing?.limits ?? NO_LIMITS,
+        settled,
+        refresh,
+        client,
+        scope,
+    };
+}
+
+export { useTenantMcp };
+//# sourceMappingURL=useTenantMcp.js.map

package/dist/esm/components/IntegrationsModal/useTenantMcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useTenantMcp.js","sources":["../../../../src/components/IntegrationsModal/useTenantMcp.ts"],"sourcesContent":["import { useCallback, useEffect, useMemo, useRef, useState } from \"react\";\nimport type { DevicApiError } from \"../../api/client\";\nimport { DevicApiClient } from \"../../api/client\";\nimport type { TenantMcpListing, TenantMcpServer } from \"../../api/types\";\nimport { useOptionalDevicContext } from \"../../provider\";\nimport type { IntegrationsScope } from \"./useIntegrations\";\n\nexport interface UseTenantMcpOptions extends IntegrationsScope {\n  apiKey?: string;\n  baseUrl?: string;\n  /**\n   * Fetch when this turns true, and only then. The modal passes its own open\n   * state, so a panel nobody opens costs no request at all.\n   */\n  enabled?: boolean;\n}\n\nexport interface TenantMcpState {\n  servers: TenantMcpServer[];\n  loading: boolean;\n  error: string | null;\n  /** Whether this assistant offers MCP servers to its tenants at all. */\n  offered: boolean;\n  /** Whether the end user may add a server of their own. */\n  allowCustom: boolean;\n  limits: { maxServers: number; maxToolsPerServer: number; used: number };\n  /** True once a first answer (or refusal) has arrived. */\n  settled: boolean;\n  refresh: () => Promise<void>;\n  client: DevicApiClient | null;\n  scope: IntegrationsScope;\n}\n\n/** A 4xx here means \"not for you\", not \"something broke\". */\nfunction isRefusal(err: unknown): boolean {\n  const status = (err as DevicApiError)?.statusCode;\n  return typeof status === \"number\" && status >= 400 && status < 500;\n}\n\nconst NO_LIMITS = { maxServers: 0, maxToolsPerServer: 0, used: 0 };\n\n/**\n * The MCP servers an assistant offers its tenants, together with the ones this\n * tenant has connected — loaded once and shared.\n *\n * Deliberately a sibling of `useIntegrations` rather than part of it: the two\n * answer different endpoints, and folding them together would mean an assistant\n * that offers only one of them pays for both on every open.\n */\nexport function useTenantMcp(options: UseTenantMcpOptions): TenantMcpState {\n  const { assistantId, tenantId, subtenantId, apiKey, baseUrl, enabled = true } =\n    options;\n\n  const context = useOptionalDevicContext();\n  const resolvedBaseUrl = baseUrl || context?.baseUrl || \"https://api.devic.ai\";\n  const resolvedTenantId = tenantId || context?.tenantId;\n  const resolvedSubtenantId = subtenantId || context?.subtenantId;\n  const resolvedApiKey = apiKey || context?.apiKey;\n  const resolvedTenantSession = context?.getTenantSession;\n  const onSessionExpired = context?.onSessionExpired;\n\n  const client = useMemo(\n    () =>\n      resolvedApiKey || resolvedTenantSession\n        ? new DevicApiClient({\n            apiKey: resolvedApiKey,\n            baseUrl: resolvedBaseUrl,\n            getTenantSession: resolvedTenantSession,\n            onSessionExpired,\n          })\n        : null,\n    [resolvedApiKey, resolvedTenantSession, resolvedBaseUrl]\n  );\n\n  const scope = useMemo(\n    () => ({\n      assistantId,\n      tenantId: resolvedTenantId || undefined,\n      subtenantId: resolvedSubtenantId || undefined,\n    }),\n    [assistantId, resolvedTenantId, resolvedSubtenantId]\n  );\n\n  const [listing, setListing] = useState<TenantMcpListing | null>(null);\n  const [loading, setLoading] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [settled, setSettled] = useState(false);\n\n  const refresh = useCallback(async () => {\n    if (!client) {\n      setError(\"No credentials configured\");\n      setSettled(true);\n      return;\n    }\n    setLoading(true);\n    setError(null);\n    try {\n      setListing(await client.getMcpServers(scope));\n    } catch (err) {\n      setListing(null);\n      setError(err instanceof Error ? err.message : String(err));\n      if (!isRefusal(err)) {\n        // A refusal is an ordinary answer — a disabled feature, a missing\n        // tenant — and stays quiet. A 500 is not, and swallowing it would\n        // leave an integrator with a panel that never appears and no reason.\n        console.warn(\"[devic-ui] could not load MCP servers\", err);\n      }\n    } finally {\n      setLoading(false);\n      setSettled(true);\n    }\n  }, [client, scope]);\n\n  // Once per scope, not once per render of whatever switched it on. A different\n  // tenant is a different listing, and the previous one is dropped first:\n  // showing it while the new one arrives would name servers that are not this\n  // user's.\n  const key = `${client ? \"k\" : \"-\"}|${scope.assistantId}|${scope.tenantId ?? \"\"}|${scope.subtenantId ?? \"\"}`;\n  const loadedKeyRef = useRef<string | null>(null);\n  useEffect(() => {\n    if (!enabled || loadedKeyRef.current === key) return;\n    if (loadedKeyRef.current !== null) {\n      setListing(null);\n      setSettled(false);\n    }\n    loadedKeyRef.current = key;\n    void refresh();\n  }, [enabled, key, refresh]);\n\n  return {\n    servers: listing?.servers ?? [],\n    loading,\n    error,\n    // Offered only once the server has said so. Anything hanging off this stays\n    // hidden until then, so nothing appears and then disappears.\n    offered: !!listing?.offered,\n    allowCustom: !!listing?.allowCustom,\n    limits: listing?.limits ?? NO_LIMITS,\n    settled,\n    refresh,\n    client,\n    scope,\n  };\n}\n"],"names":[],"mappings":";;;;;AAiCA;AACA,SAAS,SAAS,CAAC,GAAY,EAAA;AAC7B,IAAA,MAAM,MAAM,GAAI,GAAqB,EAAE,UAAU;AACjD,IAAA,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;AACpE;AAEA,MAAM,SAAS,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;AAElE;;;;;;;AAOG;AACG,SAAU,YAAY,CAAC,OAA4B,EAAA;AACvD,IAAA,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,EAAE,GAC3E,OAAO;AAET,IAAA,MAAM,OAAO,GAAG,uBAAuB,EAAE;IACzC,MAAM,eAAe,GAAG,OAAO,IAAI,OAAO,EAAE,OAAO,IAAI,sBAAsB;AAC7E,IAAA,MAAM,gBAAgB,GAAG,QAAQ,IAAI,OAAO,EAAE,QAAQ;AACtD,IAAA,MAAM,mBAAmB,GAAG,WAAW,IAAI,OAAO,EAAE,WAAW;AAC/D,IAAA,MAAM,cAAc,GAAG,MAAM,IAAI,OAAO,EAAE,MAAM;AAChD,IAAA,MAAM,qBAAqB,GAAG,OAAO,EAAE,gBAAgB;AACvD,IAAA,MAAM,gBAAgB,GAAG,OAAO,EAAE,gBAAgB;IAElD,MAAM,MAAM,GAAG,OAAO,CACpB,MACE,cAAc,IAAI;UACd,IAAI,cAAc,CAAC;AACjB,YAAA,MAAM,EAAE,cAAc;AACtB,YAAA,OAAO,EAAE,eAAe;AACxB,YAAA,gBAAgB,EAAE,qBAAqB;YACvC,gBAAgB;SACjB;UACD,IAAI,EACV,CAAC,cAAc,EAAE,qBAAqB,EAAE,eAAe,CAAC,CACzD;AAED,IAAA,MAAM,KAAK,GAAG,OAAO,CACnB,OAAO;QACL,WAAW;QACX,QAAQ,EAAE,gBAAgB,IAAI,SAAS;QACvC,WAAW,EAAE,mBAAmB,IAAI,SAAS;KAC9C,CAAC,EACF,CAAC,WAAW,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CACrD;IAED,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC;IACrE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC;IACvD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC;AAE7C,IAAA,MAAM,OAAO,GAAG,WAAW,CAAC,YAAW;QACrC,IAAI,CAAC,MAAM,EAAE;YACX,QAAQ,CAAC,2BAA2B,CAAC;YACrC,UAAU,CAAC,IAAI,CAAC;YAChB;QACF;QACA,UAAU,CAAC,IAAI,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC;AACd,QAAA,IAAI;YACF,UAAU,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC/C;QAAE,OAAO,GAAG,EAAE;YACZ,UAAU,CAAC,IAAI,CAAC;AAChB,YAAA,QAAQ,CAAC,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,YAAA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;;;;AAInB,gBAAA,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,GAAG,CAAC;YAC5D;QACF;gBAAU;YACR,UAAU,CAAC,KAAK,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC;QAClB;AACF,IAAA,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;;;;;AAMnB,IAAA,MAAM,GAAG,GAAG,CAAA,EAAG,MAAM,GAAG,GAAG,GAAG,GAAG,CAAA,CAAA,EAAI,KAAK,CAAC,WAAW,CAAA,CAAA,EAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAA,CAAA,EAAI,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE;AAC3G,IAAA,MAAM,YAAY,GAAG,MAAM,CAAgB,IAAI,CAAC;IAChD,SAAS,CAAC,MAAK;AACb,QAAA,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,OAAO,KAAK,GAAG;YAAE;AAC9C,QAAA,IAAI,YAAY,CAAC,OAAO,KAAK,IAAI,EAAE;YACjC,UAAU,CAAC,IAAI,CAAC;YAChB,UAAU,CAAC,KAAK,CAAC;QACnB;AACA,QAAA,YAAY,CAAC,OAAO,GAAG,GAAG;QAC1B,KAAK,OAAO,EAAE;IAChB,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAE3B,OAAO;AACL,QAAA,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE;QAC/B,OAAO;QACP,KAAK;;;AAGL,QAAA,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO;AAC3B,QAAA,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW;AACnC,QAAA,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,SAAS;QACpC,OAAO;QACP,OAAO;QACP,MAAM;QACN,KAAK;KACN;AACH;;;;"}

package/dist/esm/hooks/useDevicChat.js

@@ -321,8 +321,9 @@ function useDevicChat(options) {
                 setIsLoading(false);
             }
             if (responses.length > 0) {
-                // Send tool responses back to the API
-                await clientRef.current.sendToolResponses(assistantId, chatUid, responses);
+                // Send tool responses back to the API, restating the tools so the
+                // continuation keeps them on offer
+                await clientRef.current.sendToolResponses(assistantId, chatUid, responses, toolSchemas);
                 // Only resume polling if no widgets are blocking
                 if (widgetCalls.length === 0) {
                     setShouldPoll(true);
@@ -335,7 +336,7 @@ function useDevicChat(options) {
             setError(error);
             onErrorRef.current?.(error);
         }
-    }, [chatUid, assistantId, handleToolCalls, extractPendingToolCalls]);
+    }, [chatUid, assistantId, handleToolCalls, extractPendingToolCalls, toolSchemas]);
     // Send a message
     const sendMessage = useCallback(async (message, sendOptions) => {
         if (!clientRef.current) {
@@ -601,9 +602,7 @@ function useDevicChat(options) {
         setPendingWidgetCalls(remaining);
         try {
             logRef.current.log('[useDevicChat] sending widget tool response', toolCallId);
-            await clientRef.current.sendToolResponses(assistantId, uid, [
-                { tool_call_id: toolCallId, content: response, role: 'tool' },
-            ]);
+            await clientRef.current.sendToolResponses(assistantId, uid, [{ tool_call_id: toolCallId, content: response, role: 'tool' }], toolSchemas);
             // Resume polling only if no more widget calls are blocking
             if (remaining.length === 0) {
                 setShouldPoll(true);
@@ -616,7 +615,7 @@ function useDevicChat(options) {
             setError(error);
             onErrorRef.current?.(error);
         }
-    }, [assistantId]);
+    }, [assistantId, toolSchemas]);
     // Cancel a pending widget tool call (sends an error response to the model)
     const cancelWidgetCall = useCallback(async (toolCallId, reason) => {
         await submitWidgetResponse(toolCallId, {