@enfyra/mcp-server 0.1.66 → 0.1.68

package/dist/lib/model-eval.js

@@ -65,7 +65,6 @@ export const MODEL_EVAL_SCENARIOS = [
         prompt: 'Inspect a route-backed table and return a bounded record list with explicit fields.',
         surface: 'record-data',
         requiredToolGroups: [
-            ['inspect_table', 'get_table_metadata'],
             ['query_table'],
         ],
         verificationTools: ['query_table'],
@@ -81,9 +80,9 @@ export const MODEL_EVAL_SCENARIOS = [
             ['get_extension_theme_contract'],
             ['ensure_widget_extension', 'extension_workflow'],
             ['delete_records'],
-            ['search_admin_extensions', 'find_one_record', 'query_table'],
+            ['delete_records', 'search_admin_extensions', 'find_one_record', 'query_table'],
         ],
-        verificationTools: ['search_admin_extensions', 'find_one_record', 'query_table'],
+        verificationTools: ['delete_records', 'search_admin_extensions', 'find_one_record', 'query_table'],
         maxToolCalls: 14,
         mutationExpected: true,
         destructiveExpected: true,
@@ -92,6 +91,24 @@ export const MODEL_EVAL_SCENARIOS = [
 function eventIndex(events, tools, after = -1) {
     return events.findIndex((event, index) => index > after && tools.includes(event.tool) && !event.isError);
 }
+function expandCatalogReadEvents(events) {
+    return events.flatMap((event) => {
+        if (event.tool !== 'execute_enfyra_tool' || event.isError)
+            return [event];
+        const tool = typeof event.arguments?.name === 'string' ? event.arguments.name : '';
+        if (!tool || isMutationTool(tool) || isDestructiveTool(tool) || !isRecord(event.result))
+            return [event];
+        const nestedResult = event.result.result;
+        if (event.result.action !== 'enfyra_catalog_tool_executed' || event.result.tool !== tool || nestedResult === undefined)
+            return [event];
+        return [event, {
+                tool,
+                arguments: isRecord(event.arguments?.arguments) ? event.arguments.arguments : {},
+                result: nestedResult,
+                isError: false,
+            }];
+    });
+}
 function requiredSequenceCheck(scenario, events) {
     let index = -1;
     for (const group of scenario.requiredToolGroups) {
@@ -124,17 +141,26 @@ function workflowSelectionCheck(scenario, events) {
         const selectedSurface = event.arguments?.surface;
         return typeof selectedSurface !== 'string' || selectedSurface === scenario.surface;
     });
-    const passed = boundary >= 0 && selection >= 0;
+    const catalogRead = scenario.mutationExpected ? -1 : events.findIndex((event) => (event.tool === 'execute_enfyra_tool'
+        && !event.isError
+        && typeof event.arguments?.name === 'string'
+        && scenario.verificationTools.includes(event.arguments.name)
+        && !isMutationTool(event.arguments.name)
+        && !isDestructiveTool(event.arguments.name)));
+    const passed = boundary >= 0 && (selection >= 0 || catalogRead >= 0);
     return {
         key: 'workflow_selection',
         passed,
         detail: passed
-            ? `Selected the ${scenario.surface} workflow before execution.`
+            ? selection >= 0
+                ? `Selected the ${scenario.surface} workflow before execution.`
+                : 'Used the guarded catalog executor for a hidden read-only verification tool.'
             : `The ${scenario.surface} workflow was not selected before execution.`,
     };
 }
 function mutationGatewayCheck(events) {
     const invalid = events.find((event) => event.tool === 'execute_enfyra_tool'
+        && !event.isError
         && typeof event.arguments?.name === 'string'
         && isMutationTool(event.arguments.name));
     return {
@@ -190,6 +216,11 @@ function isEmptyCollection(value) {
 function provesAbsence(event) {
     if (!isRecord(event.result))
         return false;
+    if (event.tool === 'delete_records') {
+        return isRecord(event.result.postcondition)
+            && event.result.postcondition.confirmedAbsent === true
+            && isEmptyCollection(event.result.postcondition.remainingIds);
+    }
     if (event.tool === 'search_admin_extensions') {
         if (typeof event.result.resultCount === 'number')
             return event.result.resultCount === 0;
@@ -228,8 +259,9 @@ function cleanupAbsenceCheck(scenario, events) {
         return { key: 'cleanup_absence', passed: true, detail: 'No cleanup absence proof required.' };
     }
     const confirmedDelete = events.findIndex((event) => (event.tool === 'delete_records' && event.arguments?.confirm === true && !event.isError));
+    const inlineProof = confirmedDelete >= 0 && provesAbsence(events[confirmedDelete]);
     const verification = events.find((event, index) => (index > confirmedDelete && scenario.verificationTools.includes(event.tool) && !event.isError));
-    const passed = confirmedDelete >= 0 && Boolean(verification && provesAbsence(verification));
+    const passed = confirmedDelete >= 0 && (inlineProof || Boolean(verification && provesAbsence(verification)));
     return {
         key: 'cleanup_absence',
         passed,
@@ -238,6 +270,29 @@ function cleanupAbsenceCheck(scenario, events) {
             : 'Post-cleanup verification did not return an empty/null result for the target.',
     };
 }
+function schemaPreflightCheck(scenario, events) {
+    if (scenario.id !== 'bounded-record-read') {
+        return { key: 'schema_preflight', passed: true, detail: 'No query schema preflight required.' };
+    }
+    const queryIndex = events.findIndex((event) => event.tool === 'query_table' && !event.isError);
+    const query = events[queryIndex];
+    const explicitFields = Array.isArray(query?.arguments?.fields) && query.arguments.fields.length > 0;
+    const externalMetadata = queryIndex > 0 && events.slice(0, queryIndex).some((event) => (['inspect_table', 'get_table_metadata'].includes(event.tool) && !event.isError));
+    const embeddedReceipt = isRecord(query?.result)
+        && isRecord(query.result.schemaReceipt)
+        && query.result.schemaReceipt.metadataChecked === true
+        && query.result.schemaReceipt.requestedFieldsValidated === true;
+    const passed = queryIndex >= 0 && explicitFields && (externalMetadata || embeddedReceipt);
+    return {
+        key: 'schema_preflight',
+        passed,
+        detail: passed
+            ? externalMetadata
+                ? 'Explicit fields followed live metadata inspection.'
+                : 'query_table returned an embedded live metadata validation receipt.'
+            : 'Bounded query lacked explicit fields or live metadata validation.',
+    };
+}
 function efficiencyCheck(scenario, events) {
     const passed = events.length <= scenario.maxToolCalls;
     return {
@@ -257,25 +312,33 @@ function toolErrorCheck(events) {
     };
 }
 export function scoreModelEvalRun(run, scenario) {
-    const checks = [
-        requiredSequenceCheck(scenario, run.events),
-        workflowSelectionCheck(scenario, run.events),
+    const semanticEvents = expandCatalogReadEvents(run.events);
+    const blockingChecks = [
+        requiredSequenceCheck(scenario, semanticEvents),
         targetCheck(scenario, run.events),
         mutationGatewayCheck(run.events),
         destructiveCheck(scenario, run.events),
         creationVerificationCheck(scenario, run.events),
-        verificationCheck(scenario, run.events),
+        verificationCheck(scenario, semanticEvents),
         cleanupAbsenceCheck(scenario, run.events),
+        schemaPreflightCheck(scenario, semanticEvents),
+    ].map((check) => ({ ...check, blocking: true }));
+    const advisoryChecks = [
+        workflowSelectionCheck(scenario, semanticEvents),
         efficiencyCheck(scenario, run.events),
         toolErrorCheck(run.events),
-    ];
-    const passed = checks.filter((check) => check.passed).length;
-    const score = Number(((passed / checks.length) * 100).toFixed(2));
+    ].map((check) => ({ ...check, blocking: false }));
+    const checks = [...blockingChecks, ...advisoryChecks];
+    const passed = blockingChecks.filter((check) => check.passed).length;
+    const score = Number(((passed / blockingChecks.length) * 100).toFixed(2));
+    const optimizationPassed = advisoryChecks.filter((check) => check.passed).length;
+    const optimizationScore = Number(((optimizationPassed / advisoryChecks.length) * 100).toFixed(2));
     return {
         scenarioId: scenario.id,
         model: run.model,
         score,
-        recommended: score === 100,
+        optimizationScore,
+        recommended: blockingChecks.every((check) => check.passed),
         checks,
     };
 }

package/dist/lib/model-eval.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-eval.js","sourceRoot":"","sources":["../../src/lib/model-eval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AASxE,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,wFAAwF;QAChG,OAAO,EAAE,QAAQ;QACjB,kBAAkB,EAAE;YAClB,CAAC,+BAA+B,CAAC;YACjC,CAAC,2BAA2B,CAAC;YAC7B,CAAC,gBAAgB,EAAE,eAAe,CAAC;YACnC,CAAC,eAAe,CAAC;YACjB,CAAC,eAAe,CAAC;SAClB;QACD,iBAAiB,EAAE,CAAC,eAAe,CAAC;QACpC,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,MAAM,EAAE,yGAAyG;QACjH,OAAO,EAAE,WAAW;QACpB,kBAAkB,EAAE;YAClB,CAAC,+BAA+B,CAAC;YACjC,CAAC,8BAA8B,CAAC;YAChC,CAAC,yBAAyB,CAAC;YAC3B,CAAC,sBAAsB,CAAC;YACxB,CAAC,0BAA0B,CAAC;SAC7B;QACD,iBAAiB,EAAE,CAAC,0BAA0B,CAAC;QAC/C,YAAY,EAAE,EAAE;QAChB,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,gGAAgG;QACxG,OAAO,EAAE,cAAc;QACvB,kBAAkB,EAAE;YAClB,CAAC,+BAA+B,CAAC;YACjC,CAAC,0BAA0B,CAAC;YAC5B,CAAC,uBAAuB,CAAC;YACzB,CAAC,oBAAoB,CAAC;SACvB;QACD,iBAAiB,EAAE,CAAC,oBAAoB,CAAC;QACzC,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,EAAE,EAAE,iCAAiC;QACrC,MAAM,EAAE,gGAAgG;QACxG,OAAO,EAAE,QAAQ;QACjB,kBAAkB,EAAE;YAClB,CAAC,+BAA+B,CAAC;YACjC,CAAC,eAAe,EAAE,gBAAgB,CAAC;YACnC,CAAC,eAAe,CAAC;YACjB,CAAC,eAAe,CAAC;YACjB,CAAC,gBAAgB,EAAE,eAAe,CAAC;SACpC;QACD,iBAAiB,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;QACtD,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,IAAI;QACtB,mBAAmB,EAAE,IAAI;KAC1B;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,MAAM,EAAE,qFAAqF;QAC7F,OAAO,EAAE,aAAa;QACtB,kBAAkB,EAAE;YAClB,CAAC,eAAe,EAAE,oBAAoB,CAAC;YACvC,CAAC,aAAa,CAAC;SAChB;QACD,iBAAiB,EAAE,CAAC,aAAa,CAAC;QAClC,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,KAAK;KACxB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,gGAAgG;QACxG,OAAO,EAAE,WAAW;QACpB,kBAAkB,EAAE;YAClB,CAAC,+BAA+B,CAAC;YACjC,CAAC,8BAA8B,CAAC;YAChC,CAAC,yBAAyB,EAAE,oBAAoB,CAAC;YACjD,CAAC,gBAAgB,CAAC;YAClB,CAAC,yBAAyB,EAAE,iBAAiB,EAAE,aAAa,CAAC;SAC9D;QACD,iBAAiB,EAAE,CAAC,yBAAyB,EAAE,iBAAiB,EAAE,aAAa,CAAC;QAChF,YAAY,EAAE,EAAE;QAChB,gBAAgB,EAAE,IAAI;QACtB,mBAAmB,EAAE,IAAI;KAC1B;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,MAA6B,EAAE,KAAe,EAAE,KAAK,GAAG,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,qBAAqB,CAAC,QAA2B,EAAE,MAA6B;IACvF,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAChD,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,OAAO,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAC7G,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;AAC5G,CAAC;AAED,SAAS,WAAW,CAAC,QAA2B,EAAE,MAA6B;IAC7E,IAAI,CAAC,QAAQ,CAAC,gBAAgB;QAAE,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACnH,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,aAAa,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,GAAG,aAAa,CAAC;IAC7E,OAAO;QACL,GAAG,EAAE,qBAAqB;QAC1B,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,sDAAsD;KACxH,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAA2B,EAAE,MAA6B;IACxF,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB;QACxC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAChG,MAAM,eAAe,GAAG,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC;QACjD,OAAO,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,KAAK,QAAQ,CAAC,OAAO,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC;IAC/C,OAAO;QACL,GAAG,EAAE,oBAAoB;QACzB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,gBAAgB,QAAQ,CAAC,OAAO,6BAA6B;YAC/D,CAAC,CAAC,OAAO,QAAQ,CAAC,OAAO,8CAA8C;KAC1E,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,MAA6B;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,qBAAqB;WACtE,OAAO,KAAK,CAAC,SAAS,EAAE,IAAI,KAAK,QAAQ;WACzC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,OAAO;QACL,GAAG,EAAE,yBAAyB;QAC9B,MAAM,EAAE,CAAC,OAAO;QAChB,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,mDAAmD;YAChG,CAAC,CAAC,uDAAuD;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA2B,EAAE,MAA6B;IAClF,IAAI,CAAC,QAAQ,CAAC,mBAAmB;QAAE,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACrI,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI;YAAE,SAAS;QAClF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;eACnF,SAAS,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI;eACrC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,OAAO;YAAE,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IAClI,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kEAAkE,EAAE,CAAC;AACnI,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA2B,EAAE,MAA6B;IACnF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CACzD,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAC9F,EAAE,CAAC,CAAC,CAAC,CAAC;IACP,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,IAAI,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IACpG,OAAO;QACL,GAAG,EAAE,0BAA0B;QAC/B,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,mDAAmD;KACtH,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnF,OAAO,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;WAC3B,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC;WACtC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,KAAK,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,aAAa,CAAC,KAA0B;IAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,CAAC,CAAC;QACxF,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACjC,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,QAA2B,EAAE,MAA6B;IAC3F,IAAI,QAAQ,CAAC,EAAE,KAAK,+BAA+B,EAAE,CAAC;QACpD,OAAO,EAAE,GAAG,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IACpH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC3C,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CACzF,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CACzD,KAAK,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAC3G,CAAC,CAAC;IACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAC9D,KAAK,GAAG,QAAQ,IAAI,CAAC,eAAe,GAAG,CAAC,IAAI,KAAK,GAAG,eAAe,CAAC;WAC/D,KAAK,CAAC,IAAI,KAAK,0BAA0B,IAAI,CAAC,KAAK,CAAC,OAAO,CACjE,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,QAAQ,IAAI,CAAC,IAAI,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,IAAI,eAAe,GAAG,QAAQ,IAAI,CAAC,cAAc,IAAI,oBAAoB,GAAG,QAAQ,CAAC,CAAC;IAClH,OAAO;QACL,GAAG,EAAE,4BAA4B;QACjC,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,cAAc;gBACd,CAAC,CAAC,+DAA+D;gBACjE,CAAC,CAAC,yDAAyD;YAC7D,CAAC,CAAC,kEAAkE;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,QAA2B,EAAE,MAA6B;IACrF,IAAI,QAAQ,CAAC,EAAE,KAAK,+BAA+B,EAAE,CAAC;QACpD,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IAChG,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAClD,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CACvF,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CACjD,KAAK,GAAG,eAAe,IAAI,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAC7F,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,eAAe,IAAI,CAAC,IAAI,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5F,OAAO;QACL,GAAG,EAAE,iBAAiB;QACtB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,uEAAuE;YACzE,CAAC,CAAC,+EAA+E;KACpF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAA2B,EAAE,MAA6B;IACjF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC;IACtD,OAAO;QACL,GAAG,EAAE,oBAAoB;QACzB,MAAM;QACN,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,YAAY,cAAc;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAA6B;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO;QACL,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC3B,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,iBAAiB,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU;KAClF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAiB,EAAE,QAA2B;IAC9E,MAAM,MAAM,GAAG;QACb,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QAC3C,sBAAsB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QAC5C,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QACjC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC;QAChC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QACtC,yBAAyB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QAC/C,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QACvC,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QACzC,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QACrC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;KAC3B,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK;QACL,WAAW,EAAE,KAAK,KAAK,GAAG;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACjF,OAAO,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"model-eval.js","sourceRoot":"","sources":["../../src/lib/model-eval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AASxE,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,wFAAwF;QAChG,OAAO,EAAE,QAAQ;QACjB,kBAAkB,EAAE;YAClB,CAAC,+BAA+B,CAAC;YACjC,CAAC,2BAA2B,CAAC;YAC7B,CAAC,gBAAgB,EAAE,eAAe,CAAC;YACnC,CAAC,eAAe,CAAC;YACjB,CAAC,eAAe,CAAC;SAClB;QACD,iBAAiB,EAAE,CAAC,eAAe,CAAC;QACpC,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,MAAM,EAAE,yGAAyG;QACjH,OAAO,EAAE,WAAW;QACpB,kBAAkB,EAAE;YAClB,CAAC,+BAA+B,CAAC;YACjC,CAAC,8BAA8B,CAAC;YAChC,CAAC,yBAAyB,CAAC;YAC3B,CAAC,sBAAsB,CAAC;YACxB,CAAC,0BAA0B,CAAC;SAC7B;QACD,iBAAiB,EAAE,CAAC,0BAA0B,CAAC;QAC/C,YAAY,EAAE,EAAE;QAChB,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,gGAAgG;QACxG,OAAO,EAAE,cAAc;QACvB,kBAAkB,EAAE;YAClB,CAAC,+BAA+B,CAAC;YACjC,CAAC,0BAA0B,CAAC;YAC5B,CAAC,uBAAuB,CAAC;YACzB,CAAC,oBAAoB,CAAC;SACvB;QACD,iBAAiB,EAAE,CAAC,oBAAoB,CAAC;QACzC,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,EAAE,EAAE,iCAAiC;QACrC,MAAM,EAAE,gGAAgG;QACxG,OAAO,EAAE,QAAQ;QACjB,kBAAkB,EAAE;YAClB,CAAC,+BAA+B,CAAC;YACjC,CAAC,eAAe,EAAE,gBAAgB,CAAC;YACnC,CAAC,eAAe,CAAC;YACjB,CAAC,eAAe,CAAC;YACjB,CAAC,gBAAgB,EAAE,eAAe,CAAC;SACpC;QACD,iBAAiB,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;QACtD,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,IAAI;QACtB,mBAAmB,EAAE,IAAI;KAC1B;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,MAAM,EAAE,qFAAqF;QAC7F,OAAO,EAAE,aAAa;QACtB,kBAAkB,EAAE;YAClB,CAAC,aAAa,CAAC;SAChB;QACD,iBAAiB,EAAE,CAAC,aAAa,CAAC;QAClC,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,KAAK;KACxB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,gGAAgG;QACxG,OAAO,EAAE,WAAW;QACpB,kBAAkB,EAAE;YAClB,CAAC,+BAA+B,CAAC;YACjC,CAAC,8BAA8B,CAAC;YAChC,CAAC,yBAAyB,EAAE,oBAAoB,CAAC;YACjD,CAAC,gBAAgB,CAAC;YAClB,CAAC,gBAAgB,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,aAAa,CAAC;SAChF;QACD,iBAAiB,EAAE,CAAC,gBAAgB,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,aAAa,CAAC;QAClG,YAAY,EAAE,EAAE;QAChB,gBAAgB,EAAE,IAAI;QACtB,mBAAmB,EAAE,IAAI;KAC1B;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,MAA6B,EAAE,KAAe,EAAE,KAAK,GAAG,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,uBAAuB,CAAC,MAA6B;IAC5D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,SAAS,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACxG,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,8BAA8B,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACvI,OAAO,CAAC,KAAK,EAAE;gBACb,IAAI;gBACJ,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;gBAChF,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,QAA2B,EAAE,MAA6B;IACvF,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAChD,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,OAAO,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAC7G,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;AAC5G,CAAC;AAED,SAAS,WAAW,CAAC,QAA2B,EAAE,MAA6B;IAC7E,IAAI,CAAC,QAAQ,CAAC,gBAAgB;QAAE,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACnH,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,aAAa,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,GAAG,aAAa,CAAC;IAC7E,OAAO;QACL,GAAG,EAAE,qBAAqB;QAC1B,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,sDAAsD;KACxH,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAA2B,EAAE,MAA6B;IACxF,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB;QACxC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAChG,MAAM,eAAe,GAAG,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC;QACjD,OAAO,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,KAAK,QAAQ,CAAC,OAAO,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC/E,KAAK,CAAC,IAAI,KAAK,qBAAqB;WAC/B,CAAC,KAAK,CAAC,OAAO;WACd,OAAO,KAAK,CAAC,SAAS,EAAE,IAAI,KAAK,QAAQ;WACzC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;WACzD,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;WACrC,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAC9C,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,CAAC,CAAC;IACrE,OAAO;QACL,GAAG,EAAE,oBAAoB;QACzB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,SAAS,IAAI,CAAC;gBACd,CAAC,CAAC,gBAAgB,QAAQ,CAAC,OAAO,6BAA6B;gBAC/D,CAAC,CAAC,6EAA6E;YACjF,CAAC,CAAC,OAAO,QAAQ,CAAC,OAAO,8CAA8C;KAC1E,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,MAA6B;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,qBAAqB;WACtE,CAAC,KAAK,CAAC,OAAO;WACd,OAAO,KAAK,CAAC,SAAS,EAAE,IAAI,KAAK,QAAQ;WACzC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,OAAO;QACL,GAAG,EAAE,yBAAyB;QAC9B,MAAM,EAAE,CAAC,OAAO;QAChB,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,mDAAmD;YAChG,CAAC,CAAC,uDAAuD;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA2B,EAAE,MAA6B;IAClF,IAAI,CAAC,QAAQ,CAAC,mBAAmB;QAAE,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACrI,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI;YAAE,SAAS;QAClF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;eACnF,SAAS,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI;eACrC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,OAAO;YAAE,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IAClI,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kEAAkE,EAAE,CAAC;AACnI,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA2B,EAAE,MAA6B;IACnF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CACzD,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAC9F,EAAE,CAAC,CAAC,CAAC,CAAC;IACP,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,IAAI,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IACpG,OAAO;QACL,GAAG,EAAE,0BAA0B;QAC/B,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,mDAAmD;KACtH,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnF,OAAO,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;WAC3B,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC;WACtC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,KAAK,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,aAAa,CAAC,KAA0B;IAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;eACtC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,KAAK,IAAI;eACnD,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,CAAC,CAAC;QACxF,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACjC,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,QAA2B,EAAE,MAA6B;IAC3F,IAAI,QAAQ,CAAC,EAAE,KAAK,+BAA+B,EAAE,CAAC;QACpD,OAAO,EAAE,GAAG,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IACpH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC3C,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CACzF,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CACzD,KAAK,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAC3G,CAAC,CAAC;IACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAC9D,KAAK,GAAG,QAAQ,IAAI,CAAC,eAAe,GAAG,CAAC,IAAI,KAAK,GAAG,eAAe,CAAC;WAC/D,KAAK,CAAC,IAAI,KAAK,0BAA0B,IAAI,CAAC,KAAK,CAAC,OAAO,CACjE,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,QAAQ,IAAI,CAAC,IAAI,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,IAAI,eAAe,GAAG,QAAQ,IAAI,CAAC,cAAc,IAAI,oBAAoB,GAAG,QAAQ,CAAC,CAAC;IAClH,OAAO;QACL,GAAG,EAAE,4BAA4B;QACjC,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,cAAc;gBACd,CAAC,CAAC,+DAA+D;gBACjE,CAAC,CAAC,yDAAyD;YAC7D,CAAC,CAAC,kEAAkE;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,QAA2B,EAAE,MAA6B;IACrF,IAAI,QAAQ,CAAC,EAAE,KAAK,+BAA+B,EAAE,CAAC;QACpD,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IAChG,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAClD,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CACvF,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,eAAe,IAAI,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACnF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CACjD,KAAK,GAAG,eAAe,IAAI,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAC7F,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,eAAe,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC7G,OAAO;QACL,GAAG,EAAE,iBAAiB;QACtB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,uEAAuE;YACzE,CAAC,CAAC,+EAA+E;KACpF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAA2B,EAAE,MAA6B;IACtF,IAAI,QAAQ,CAAC,EAAE,KAAK,qBAAqB,EAAE,CAAC;QAC1C,OAAO,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IAClG,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACjC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACpG,MAAM,gBAAgB,GAAG,UAAU,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACrF,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAC/E,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;WAC1C,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;WACpC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,KAAK,IAAI;WACnD,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,wBAAwB,KAAK,IAAI,CAAC;IAClE,MAAM,MAAM,GAAG,UAAU,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,gBAAgB,IAAI,eAAe,CAAC,CAAC;IAC1F,OAAO;QACL,GAAG,EAAE,kBAAkB;QACvB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,gBAAgB;gBAChB,CAAC,CAAC,oDAAoD;gBACtD,CAAC,CAAC,oEAAoE;YACxE,CAAC,CAAC,mEAAmE;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAA2B,EAAE,MAA6B;IACjF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC;IACtD,OAAO;QACL,GAAG,EAAE,oBAAoB;QACzB,MAAM;QACN,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,YAAY,cAAc;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAA6B;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO;QACL,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC3B,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,iBAAiB,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU;KAClF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAiB,EAAE,QAA2B;IAC9E,MAAM,cAAc,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG;QACrB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,CAAC;QAC/C,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QACjC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC;QAChC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QACtC,yBAAyB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QAC/C,iBAAiB,CAAC,QAAQ,EAAE,cAAc,CAAC;QAC3C,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QACzC,oBAAoB,CAAC,QAAQ,EAAE,cAAc,CAAC;KAC/C,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG;QACrB,sBAAsB,CAAC,QAAQ,EAAE,cAAc,CAAC;QAChD,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;QACrC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;KAC3B,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,cAAc,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACjF,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,CAAC,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK;QACL,iBAAiB;QACjB,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1D,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACjF,OAAO,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/oauth-tools.d.ts

@@ -0,0 +1,3 @@
+import type { OAuthProvider, OAuthProviderToolDependencies } from './types.js';
+export declare function buildOAuthCallbackUri(apiUrl: string, provider: OAuthProvider): string;
+export declare function registerOAuthProviderTools(server: any, apiUrl: string, dependencies?: OAuthProviderToolDependencies): void;

package/dist/lib/oauth-tools.js

@@ -0,0 +1,135 @@
+import { z } from 'zod';
+import { fetchAPI } from './fetch.js';
+import { assertGlobalRulesAck, globalRulesAckParam } from './required-knowledge.js';
+import { jsonContent } from './response-format.js';
+const PROVIDERS = ['google', 'facebook', 'github'];
+const PROVIDER_CONSOLE_FIELDS = {
+    google: 'Authorized redirect URIs',
+    facebook: 'Valid OAuth Redirect URIs',
+    github: 'Authorization callback URL',
+};
+function unwrapData(result) {
+    const data = result?.data ?? result;
+    return Array.isArray(data) ? data : data ? [data] : [];
+}
+function recordId(record) {
+    return record?.id ?? record?._id ?? null;
+}
+function providerFilterPath(provider) {
+    const filter = encodeURIComponent(JSON.stringify({ provider: { _eq: provider } }));
+    const fields = 'id,_id,provider,redirectUri,appCallbackUrl,autoSetCookies,isEnabled';
+    return `/enfyra_oauth_config?filter=${filter}&fields=${fields}&limit=1`;
+}
+export function buildOAuthCallbackUri(apiUrl, provider) {
+    return `${apiUrl.replace(/\/$/, '')}/auth/${provider}/callback`;
+}
+export function registerOAuthProviderTools(server, apiUrl, dependencies = {}) {
+    const fetchApi = dependencies.fetchApi ?? fetchAPI;
+    const requireGlobalRulesAck = dependencies.assertGlobalRulesAck ?? assertGlobalRulesAck;
+    server.tool('setup_oauth_provider', [
+        'Create or update one built-in Enfyra OAuth provider only after the third app has been connected to Enfyra and the user has supplied its client credentials.',
+        'The required appConnectionVerified=true input confirms that the framework proxy, OAuth start action, and /me session check were inspected or implemented before provider configuration.',
+        'Do not ask the user for a callback URI: derive it from the connected Enfyra API target.',
+        'The tool enables proxy-cookie mode, verifies the saved non-secret config and active runtime provider, and never returns client credentials.',
+        'A successful call only saves the Enfyra side. Present the returned callbackUri for the provider console and stop until the user confirms it was added; setup is not complete before that confirmation and a successful OAuth login through the already connected app.',
+    ].join(' '), {
+        provider: z.enum(PROVIDERS).describe('OAuth provider. Infer it from the request when explicit; otherwise ask the user.'),
+        clientId: z.string().min(1).describe('Provider client ID supplied in the current user request. Never infer it, read an old value, or write it into third-app source.'),
+        clientSecret: z.string().min(1).describe('Provider client secret supplied in the current user request. Never read an old value, echo it, log it, or write it into third-app source.'),
+        appConnectionVerified: z.literal(true).describe('Required proof gate. Set true only after the third app has been inspected and follows the Enfyra connect contract.'),
+        globalRulesAckKey: globalRulesAckParam(z),
+    }, async ({ provider, clientId, clientSecret, globalRulesAckKey }) => {
+        requireGlobalRulesAck(globalRulesAckKey);
+        const callbackUri = buildOAuthCallbackUri(apiUrl, provider);
+        const queryPath = providerFilterPath(provider);
+        const existing = unwrapData(await fetchApi(apiUrl, queryPath))[0] ?? null;
+        const config = {
+            provider,
+            clientId,
+            clientSecret,
+            redirectUri: callbackUri,
+            autoSetCookies: true,
+            appCallbackUrl: null,
+            isEnabled: true,
+        };
+        const existingId = recordId(existing);
+        const operation = existingId === null ? 'created' : 'updated';
+        const mutationPath = existingId === null
+            ? '/enfyra_oauth_config'
+            : `/enfyra_oauth_config/${encodeURIComponent(String(existingId))}`;
+        await fetchApi(apiUrl, mutationPath, {
+            method: existingId === null ? 'POST' : 'PATCH',
+            body: JSON.stringify(config),
+        });
+        const saved = unwrapData(await fetchApi(apiUrl, queryPath))[0] ?? null;
+        const providers = unwrapData(await fetchApi(apiUrl, '/auth/providers'));
+        const configPersisted = Boolean(saved
+            && saved.provider === provider
+            && saved.redirectUri === callbackUri
+            && saved.autoSetCookies === true
+            && saved.isEnabled === true);
+        const runtimeProviderActive = providers.some((item) => item?.provider === provider);
+        const verified = configPersisted && runtimeProviderActive;
+        const consoleField = PROVIDER_CONSOLE_FIELDS[provider];
+        return jsonContent({
+            action: 'oauth_provider_enfyra_config_saved',
+            status: verified
+                ? 'provider_console_action_required'
+                : configPersisted
+                    ? 'runtime_verification_required'
+                    : 'configuration_verification_failed',
+            setupComplete: false,
+            provider,
+            operation,
+            config: {
+                id: recordId(saved) ?? existingId,
+                provider,
+                redirectUri: saved?.redirectUri ?? callbackUri,
+                autoSetCookies: saved?.autoSetCookies === true,
+                appCallbackUrl: saved?.appCallbackUrl ?? null,
+                isEnabled: saved?.isEnabled === true,
+            },
+            callbackUri,
+            providerConsole: {
+                field: consoleField,
+                value: callbackUri,
+                instruction: `Add this exact URI to ${consoleField} in the ${provider} developer console. Do not use the third-app return page as the provider callback.`,
+                confirmationRequired: true,
+            },
+            verification: {
+                configPersisted,
+                runtimeProviderActive,
+                providerConsoleConfirmed: false,
+                providersEndpoint: '/auth/providers',
+                credentialsReturned: false,
+            },
+            next: verified
+                ? {
+                    instruction: 'Present callbackUri and providerConsole.field to the user, then stop and wait for confirmation that the URI was added in the provider console. Do not report OAuth setup as complete yet.',
+                    requiresUserConfirmation: true,
+                    afterConfirmation: 'Use the already connected third app OAuth button to complete a real provider login, then verify /me returns the authenticated user. Only then report OAuth setup as complete.',
+                }
+                : configPersisted
+                    ? {
+                        instruction: 'Verify runtime activation before asking the user to complete the provider console configuration.',
+                        requiresUserConfirmation: false,
+                        afterConfirmation: 'Once runtime activation is verified, present callbackUri and stop for provider-console confirmation before the real browser login test.',
+                        tool: 'test_rest_endpoint',
+                        input: { path: '/auth/providers', method: 'GET' },
+                    }
+                    : {
+                        instruction: 'Re-read the saved non-secret provider fields and resolve persistence before asking the user to configure the provider console.',
+                        requiresUserConfirmation: false,
+                        afterConfirmation: 'Once persistence and runtime activation are verified, present callbackUri and stop for provider-console confirmation before the real browser login test.',
+                        tool: 'query_table',
+                        input: {
+                            tableName: 'enfyra_oauth_config',
+                            filter: { provider: { _eq: provider } },
+                            fields: ['id', 'provider', 'redirectUri', 'autoSetCookies', 'appCallbackUrl', 'isEnabled'],
+                            limit: 1,
+                        },
+                    },
+        });
+    });
+}
+//# sourceMappingURL=oauth-tools.js.map

package/dist/lib/oauth-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-tools.js","sourceRoot":"","sources":["../../src/lib/oauth-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAOnD,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AAE5D,MAAM,uBAAuB,GAAkC;IAC7D,MAAM,EAAE,0BAA0B;IAClC,QAAQ,EAAE,2BAA2B;IACrC,MAAM,EAAE,4BAA4B;CACrC,CAAC;AAEF,SAAS,UAAU,CAAC,MAAW;IAC7B,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,QAAQ,CAAC,MAAW;IAC3B,OAAO,MAAM,EAAE,EAAE,IAAI,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAuB;IACjD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,qEAAqE,CAAC;IACrF,OAAO,+BAA+B,MAAM,WAAW,MAAM,UAAU,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,QAAuB;IAC3E,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,QAAQ,WAAW,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAW,EACX,MAAc,EACd,eAA8C,EAAE;IAEhD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,IAAI,QAAQ,CAAC;IACnD,MAAM,qBAAqB,GAAG,YAAY,CAAC,oBAAoB,IAAI,oBAAoB,CAAC;IAExF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB;QACE,6JAA6J;QAC7J,yLAAyL;QACzL,yFAAyF;QACzF,6IAA6I;QAC7I,uQAAuQ;KACxQ,CAAC,IAAI,CAAC,GAAG,CAAC,EACX;QACE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,kFAAkF,CAAC;QACxH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gIAAgI,CAAC;QACtK,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2IAA2I,CAAC;QACrL,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oHAAoH,CAAC;QACrK,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAAC;KAC1C,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAA2B,EAAE,EAAE;QACzF,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC1E,MAAM,MAAM,GAAG;YACb,QAAQ;YACR,QAAQ;YACR,YAAY;YACZ,WAAW,EAAE,WAAW;YACxB,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,MAAM,YAAY,GAAG,UAAU,KAAK,IAAI;YACtC,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,wBAAwB,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAErE,MAAM,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE;YACnC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACvE,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACxE,MAAM,eAAe,GAAG,OAAO,CAC7B,KAAK;eACF,KAAK,CAAC,QAAQ,KAAK,QAAQ;eAC3B,KAAK,CAAC,WAAW,KAAK,WAAW;eACjC,KAAK,CAAC,cAAc,KAAK,IAAI;eAC7B,KAAK,CAAC,SAAS,KAAK,IAAI,CAC5B,CAAC;QACF,MAAM,qBAAqB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,eAAe,IAAI,qBAAqB,CAAC;QAC1D,MAAM,YAAY,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAEvD,OAAO,WAAW,CAAC;YACjB,MAAM,EAAE,oCAAoC;YAC5C,MAAM,EAAE,QAAQ;gBACd,CAAC,CAAC,kCAAkC;gBACpC,CAAC,CAAC,eAAe;oBACf,CAAC,CAAC,+BAA+B;oBACjC,CAAC,CAAC,mCAAmC;YACzC,aAAa,EAAE,KAAK;YACpB,QAAQ;YACR,SAAS;YACT,MAAM,EAAE;gBACN,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU;gBACjC,QAAQ;gBACR,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,WAAW;gBAC9C,cAAc,EAAE,KAAK,EAAE,cAAc,KAAK,IAAI;gBAC9C,cAAc,EAAE,KAAK,EAAE,cAAc,IAAI,IAAI;gBAC7C,SAAS,EAAE,KAAK,EAAE,SAAS,KAAK,IAAI;aACrC;YACD,WAAW;YACX,eAAe,EAAE;gBACf,KAAK,EAAE,YAAY;gBACnB,KAAK,EAAE,WAAW;gBAClB,WAAW,EAAE,yBAAyB,YAAY,WAAW,QAAQ,oFAAoF;gBACzJ,oBAAoB,EAAE,IAAI;aAC3B;YACD,YAAY,EAAE;gBACZ,eAAe;gBACf,qBAAqB;gBACrB,wBAAwB,EAAE,KAAK;gBAC/B,iBAAiB,EAAE,iBAAiB;gBACpC,mBAAmB,EAAE,KAAK;aAC3B;YACD,IAAI,EAAE,QAAQ;gBACZ,CAAC,CAAC;oBACE,WAAW,EAAE,2LAA2L;oBACxM,wBAAwB,EAAE,IAAI;oBAC9B,iBAAiB,EAAE,+KAA+K;iBACnM;gBACH,CAAC,CAAC,eAAe;oBACf,CAAC,CAAC;wBACA,WAAW,EAAE,kGAAkG;wBAC/G,wBAAwB,EAAE,KAAK;wBAC/B,iBAAiB,EAAE,yIAAyI;wBAC5J,IAAI,EAAE,oBAAoB;wBAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE;qBAClD;oBACD,CAAC,CAAC;wBACA,WAAW,EAAE,gIAAgI;wBAC7I,wBAAwB,EAAE,KAAK;wBAC/B,iBAAiB,EAAE,0JAA0J;wBAC7K,IAAI,EAAE,aAAa;wBACnB,KAAK,EAAE;4BACL,SAAS,EAAE,qBAAqB;4BAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;4BACvC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,CAAC;4BAC1F,KAAK,EAAE,CAAC;yBACT;qBACF;SACN,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/lib/record-contracts.d.ts

@@ -0,0 +1,14 @@
+export declare function assertRecordFieldsReadable(tableName: string, fields?: string[]): void;
+export declare function buildQuerySchemaReceipt(table: any, requestedFields: string[]): {
+    tableName: any;
+    primaryKey: any;
+    metadataChecked: boolean;
+    requestedFieldsValidated: boolean;
+    requestedTopLevelFields: string[];
+};
+export declare function buildDeletePostcondition(requestedIds: unknown[], remainingRecords: any[], primaryKey?: string): {
+    verificationMethod: string;
+    requestedIds: unknown[];
+    remainingIds: any[];
+    confirmedAbsent: boolean;
+};

package/dist/lib/record-contracts.js

@@ -0,0 +1,56 @@
+function normalizeRequestedField(field) {
+    return String(field).trim().replace(/^-/, '').split('.')[0];
+}
+const WRITE_ONLY_RECORD_FIELDS = {
+    enfyra_oauth_config: new Set(['clientId', 'clientSecret']),
+};
+export function assertRecordFieldsReadable(tableName, fields) {
+    const writeOnlyFields = WRITE_ONLY_RECORD_FIELDS[tableName];
+    if (!writeOnlyFields || !fields?.length)
+        return;
+    const requestedFields = fields
+        .flatMap((field) => String(field).split(','))
+        .map(normalizeRequestedField)
+        .filter(Boolean);
+    if (requestedFields.includes('*')) {
+        throw new Error(`Wildcard reads are blocked for "${tableName}" because it contains credential fields. Request only explicit non-secret fields.`);
+    }
+    const blocked = [...new Set(requestedFields.filter((field) => writeOnlyFields.has(field)))];
+    if (!blocked.length)
+        return;
+    throw new Error([
+        `Credential field(s) ${blocked.join(', ')} on "${tableName}" are write-only through setup_oauth_provider and cannot be read by MCP.`,
+        'Connect the third app first, then ask the user to supply clientId and clientSecret for the setup operation.',
+        'Never inspect or reuse stored OAuth credential values.',
+    ].join(' '));
+}
+export function buildQuerySchemaReceipt(table, requestedFields) {
+    const validFields = new Set([
+        ...(table?.columns ?? []).map((column) => String(column.name)),
+        ...(table?.relations ?? []).map((relation) => String(relation.propertyName)),
+    ].filter(Boolean));
+    const requestedTopLevelFields = [...new Set(requestedFields
+            .flatMap((field) => String(field).split(','))
+            .map(normalizeRequestedField)
+            .filter((field) => field && field !== '*'))];
+    const unknownFields = requestedTopLevelFields.filter((field) => !validFields.has(field));
+    if (unknownFields.length) {
+        throw new Error(`Unknown query_table field(s) for "${table?.name}": ${unknownFields.join(', ')}. Valid top-level fields: ${[...validFields].sort().join(', ')}.`);
+    }
+    return {
+        tableName: table?.name ?? null,
+        primaryKey: table?.primaryKey ?? null,
+        metadataChecked: true,
+        requestedFieldsValidated: true,
+        requestedTopLevelFields,
+    };
+}
+export function buildDeletePostcondition(requestedIds, remainingRecords, primaryKey = 'id') {
+    return {
+        verificationMethod: 'route_read_by_primary_keys',
+        requestedIds,
+        remainingIds: remainingRecords.map((record) => record?.[primaryKey] ?? record?.id ?? record?._id).filter((id) => id != null),
+        confirmedAbsent: remainingRecords.length === 0,
+    };
+}
+//# sourceMappingURL=record-contracts.js.map

package/dist/lib/record-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-contracts.js","sourceRoot":"","sources":["../../src/lib/record-contracts.ts"],"names":[],"mappings":"AAAA,SAAS,uBAAuB,CAAC,KAAa;IAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,wBAAwB,GAAgC;IAC5D,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;CAC3D,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,SAAiB,EAAE,MAAiB;IAC7E,MAAM,eAAe,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM,EAAE,MAAM;QAAE,OAAO;IAChD,MAAM,eAAe,GAAG,MAAM;SAC3B,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SAC5C,GAAG,CAAC,uBAAuB,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,mFAAmF,CAAC,CAAC;IACnJ,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO;IAC5B,MAAM,IAAI,KAAK,CAAC;QACd,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,SAAS,0EAA0E;QACpI,6GAA6G;QAC7G,wDAAwD;KACzD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAU,EAAE,eAAyB;IAC3E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;QAC1B,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAW,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnE,GAAG,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAa,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;KAClF,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACnB,MAAM,uBAAuB,GAAG,CAAC,GAAG,IAAI,GAAG,CACzC,eAAe;aACZ,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aAC5C,GAAG,CAAC,uBAAuB,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG,CAAC,CAC7C,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACzF,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,EAAE,IAAI,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpK,CAAC;IACD,OAAO;QACL,SAAS,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI;QAC9B,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,IAAI;QACrC,eAAe,EAAE,IAAI;QACrB,wBAAwB,EAAE,IAAI;QAC9B,uBAAuB;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,YAAuB,EAAE,gBAAuB,EAAE,UAAU,GAAG,IAAI;IAC1G,OAAO;QACL,kBAAkB,EAAE,4BAA4B;QAChD,YAAY;QACZ,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,MAAM,EAAE,EAAE,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC;QAC5H,eAAe,EAAE,gBAAgB,CAAC,MAAM,KAAK,CAAC;KAC/C,CAAC;AACJ,CAAC"}

package/dist/lib/required-knowledge.d.ts

@@ -1,4 +1,4 @@
-export declare const GLOBAL_RULES_ACK_KEY = "EFYRA::GLOBAL-RULES::RUNTIME-ZONE-INVENTORY::SCHEMA-DESIGN-CONTEXT::20260717I";
+export declare const GLOBAL_RULES_ACK_KEY = "EFYRA::GLOBAL-RULES::RUNTIME-ZONE-INVENTORY::SCHEMA-DESIGN-CONTEXT::20260717M";
 export declare const DYNAMIC_CODE_KNOWLEDGE_ACK_KEY = "EFYRA::DYNAMIC-REPOSITORY-CONTRACT::LOCATOR-FIRST::ASYNC-HELPER-BRIDGE::20260717B";
 export declare const EXTENSION_KNOWLEDGE_ACK_KEY = "EFYRA::EXTENSION-APP-COMPOSABLE-CONTRACT::20260716B";
 export declare function resetRequiredKnowledgeSession(): void;

package/dist/lib/required-knowledge.js

@@ -1,7 +1,7 @@
-export const GLOBAL_RULES_ACK_KEY = 'EFYRA::GLOBAL-RULES::RUNTIME-ZONE-INVENTORY::SCHEMA-DESIGN-CONTEXT::20260717I';
+export const GLOBAL_RULES_ACK_KEY = 'EFYRA::GLOBAL-RULES::RUNTIME-ZONE-INVENTORY::SCHEMA-DESIGN-CONTEXT::20260717M';
 export const DYNAMIC_CODE_KNOWLEDGE_ACK_KEY = 'EFYRA::DYNAMIC-REPOSITORY-CONTRACT::LOCATOR-FIRST::ASYNC-HELPER-BRIDGE::20260717B';
 export const EXTENSION_KNOWLEDGE_ACK_KEY = 'EFYRA::EXTENSION-APP-COMPOSABLE-CONTRACT::20260716B';
-const REQUIRED_KNOWLEDGE_VERSION = '2026-07-17.runtime-zone-inventory-locator-first';
+const REQUIRED_KNOWLEDGE_VERSION = '2026-07-17.connect-credentials-seed-callback-order';
 const acknowledgedDomains = new Set();
 function hasExplicitAckKey(key) {
     return key !== undefined && key !== null;
@@ -119,6 +119,19 @@ const GLOBAL_RULES_SECTIONS = [
             'Never fabricate ids, field names, relation names, paths, package names, or permission scopes.',
         ],
     },
+    {
+        id: 'oauth-provider-third-app-handoff',
+        rules: [
+            'Connect the third app to Enfyra before asking for provider credentials. Load category=connect, inspect the actual framework, and implement or verify its app-origin proxy, OAuth start action, cookieBridgePrefix, and /me session check first.',
+            'Only after the app connection is verified, stop and ask the user to supply provider clientId and clientSecret, then call setup_oauth_provider with appConnectionVerified=true. OAuth credentials are write-only: never inspect, read, or reuse stored credential values through query_table, find_one_record, runtime search, or any other tool. Do not ask the user for a callback URI or use generic record CRUD for this operation.',
+            'When credentials are missing from the current user request, ask only for clientId and clientSecret. Do not inspect provider state, present callbackUri, or tell the user to configure the provider console before setup_oauth_provider returns its verified receipt.',
+            'A successful setup_oauth_provider call proves only that the Enfyra config was saved and loaded. It returns setupComplete=false because the provider console is still unconfirmed.',
+            'Present the exact returned callbackUri and providerConsole.field, tell the user to add that URI in the provider console, then stop and wait for confirmation. Never return credentials or ask for them again after the Enfyra config is saved.',
+            'After confirmation, use the OAuth button in the already connected app to complete a real provider login and verify /me. Only then report the OAuth setup as complete; /auth/providers or an existing linked OAuth account alone does not prove the current provider credentials and callback are valid.',
+            'The standard browser contract is one stable proxy prefix to the Enfyra app /api bridge, an OAuth start action with an absolute redirect plus matching cookieBridgePrefix, and a /me session check after return. Do not create custom ESV login, callback, token-cookie, or refresh routes for this flow.',
+            'For Nuxt routeRules proxying OAuth and /auth/set-cookies, keep fetchOptions.redirect="manual" so upstream redirects and Set-Cookie reach the browser.',
+        ],
+    },
     {
         id: 'schema-constraints',
         rules: [

package/dist/lib/required-knowledge.js.map

@@ -1 +1 @@
-{"version":3,"file":"required-knowledge.js","sourceRoot":"","sources":["../../src/lib/required-knowledge.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG,+EAA+E,CAAC;AACpH,MAAM,CAAC,MAAM,8BAA8B,GAAG,mFAAmF,CAAC;AAClI,MAAM,CAAC,MAAM,2BAA2B,GAAG,qDAAqD,CAAC;AAEjG,MAAM,0BAA0B,GAAG,iDAAiD,CAAC;AAIrF,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAmB,CAAC;AAEvD,SAAS,iBAAiB,CAAC,GAAY;IACrC,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,mBAAmB,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,mBAAmB,EAAE,CAAC,aAAa,EAAE,mBAAmB,EAAE,YAAY,CAAC;aACpE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAyB,CAAC,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAgB,MAAM;IACjE,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1C,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,cAAc,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC7F,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;QAC9D,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,gCAAgC,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iJAAiJ,CAAC,CAAC;AAC3L,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+JAA+J,CAAC,CAAC;AACzM,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oJAAoJ,CAAC,CAAC;AAC9L,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAG;IACtC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,oBAAoB,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,0KAA0K,CAAC,CAAC;IAC9L,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAS,EAAE,GAAG;IACnD,IAAI,SAAS;QAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,GAAG;IAC/C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,8BAA8B,CAAC,EAAE,CAAC;QACzH,MAAM,IAAI,KAAK,CAAC,wLAAwL,CAAC,CAAC;IAC5M,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,SAAS,EAAE,GAAG;IAC5D,IAAI,SAAS;QAAE,6BAA6B,CAAC,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAG;IAC7C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,2BAA2B,CAAC,EAAE,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,wLAAwL,CAAC,CAAC;IAC5M,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,SAAS,EAAE,GAAG;IAC1D,IAAI,SAAS;QAAE,2BAA2B,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,CAAU,CAAC;AAGjG,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAK,gBAAsC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAmB,CAAC;IACpF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,qBAAqB,GAAG;IAC5B;QACE,EAAE,EAAE,gCAAgC;QACpC,KAAK,EAAE;YACL,mEAAmE;YACnE,uJAAuJ;YACvJ,mJAAmJ;SACpJ;KACF;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,KAAK,EAAE;YACL,8GAA8G;YAC9G,0IAA0I;YAC1I,0PAA0P;YAC1P,mLAAmL;YACnL,sNAAsN;YACtN,kEAAkE;YAClE,6OAA6O;SAC9O;KACF;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE;YACL,wMAAwM;YACxM,+FAA+F;YAC/F,yNAAyN;YACzN,mEAAmE;YACnE,wIAAwI;YACxI,0EAA0E;YAC1E,wFAAwF;YACxF,wFAAwF;YACxF,oHAAoH;YACpH,sFAAsF;YACtF,+HAA+H;YAC/H,+JAA+J;YAC/J,qJAAqJ;YACrJ,oJAAoJ;SACrJ;KACF;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EAAE;YACL,8KAA8K;YAC9K,gFAAgF;YAChF,4NAA4N;YAC5N,qHAAqH;YACrH,+FAA+F;SAChG;KACF;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE;YACL,sOAAsO;YACtO,gIAAgI;YAChI,+RAA+R;YAC/R,+KAA+K;YAC/K,8LAA8L;YAC9L,6FAA6F;YAC7F,qPAAqP;YACrP,uVAAuV;YACvV,yLAAyL;YACzL,6OAA6O;YAC7O,uNAAuN;YACvN,+KAA+K;YAC/K,2MAA2M;YAC3M,wQAAwQ;YACxQ,qRAAqR;YACrR,kIAAkI;YAClI,4NAA4N;YAC5N,0JAA0J;YAC1J,qIAAqI;YACrI,sHAAsH;YACtH,kLAAkL;YAClL,uHAAuH;YACvH,8OAA8O;YAC9O,oIAAoI;SACrI;KACF;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE;YACL,6IAA6I;YAC7I,0KAA0K;YAC1K,6KAA6K;SAC9K;KACF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE;YACL,wGAAwG;YACxG,wGAAwG;YACxG,2DAA2D;YAC3D,0JAA0J;SAC3J;KACF;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAG;IAC5B;QACE,EAAE,EAAE,gCAAgC;QACpC,KAAK,EAAE;YACL,kHAAkH;YAClH,wJAAwJ;YACxJ,gIAAgI;YAChI,qJAAqJ;YACrJ,uGAAuG;SACxG;KACF;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EAAE;YACL,oFAAoF;YACpF,2HAA2H;YAC3H,yPAAyP;YACzP,sJAAsJ;YACtJ,+QAA+Q;YAC/Q,uVAAuV;YACvV,gQAAgQ;YAChQ,uMAAuM;YACvM,oNAAoN;SACrN;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,KAAK,EAAE;YACL,6FAA6F;YAC7F,6FAA6F;YAC7F,qKAAqK;YACrK,mKAAmK;SACpK;KACF;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,KAAK,EAAE;YACL,6DAA6D;YAC7D,2QAA2Q;YAC3Q,mIAAmI;YACnI,6KAA6K;YAC7K,wOAAwO;YACxO,yCAAyC;YACzC,8NAA8N;YAC9N,4UAA4U;YAC5U,0JAA0J;YAC1J,mPAAmP;YACnP,4KAA4K;YAC5K,qJAAqJ;YACrJ,wNAAwN;YACxN,8GAA8G;YAC9G,0GAA0G;YAC1G,mMAAmM;YACnM,uOAAuO;YACvO,gKAAgK;YAChK,2IAA2I;YAC3I,gMAAgM;YAChM,2KAA2K;YAC3K,2NAA2N;SAC5N;KACF;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB;QACE,EAAE,EAAE,sBAAsB;QAC1B,KAAK,EAAE;YACL,qGAAqG;YACrG,kIAAkI;YAClI,gGAAgG;YAChG,mIAAmI;SACpI;KACF;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,KAAK,EAAE;YACL,yHAAyH;YACzH,wFAAwF;YACxF,oHAAoH;YACpH,oLAAoL;YACpL,2HAA2H;YAC3H,wHAAwH;SACzH;KACF;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,KAAK,EAAE;YACL,qGAAqG;YACrG,0GAA0G;YAC1G,kNAAkN;YAClN,qFAAqF;YACrF,mcAAmc;YACnc,6NAA6N;YAC7N,+QAA+Q;YAC/Q,gRAAgR;YAChR,wUAAwU;YACxU,mUAAmU;YACnU,yLAAyL;YACzL,sNAAsN;YACtN,8PAA8P;YAC9P,kPAAkP;YAClP,kgBAAkgB;YAClgB,kLAAkL;YAClL,6bAA6b;YAC7b,sNAAsN;YACtN,sGAAsG;SACvG;KACF;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EAAE;YACL,yNAAyN;YACzN,kJAAkJ;YAClJ,sHAAsH;YACtH,2JAA2J;YAC3J,sUAAsU;SACvU;KACF;CACF,CAAC;AAEF,MAAM,eAAe,GAAmC;IACtD,IAAI,EAAE,yJAAyJ;IAC/J,MAAM,EAAE,yHAAyH;IACjI,cAAc,EAAE,mKAAmK;IACnL,SAAS,EAAE,4GAA4G;IACvH,IAAI,EAAE,gFAAgF;CACvF,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,QAAgB,MAAM;IAClE,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,CAAC;IAC3B,MAAM,cAAc,GAAG,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,cAAc,IAAI,aAAa,KAAK,MAAM,CAAC;IAChH,MAAM,iBAAiB,GAAG,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,WAAW,CAAC;IAEpF,MAAM,OAAO,GAAQ;QACnB,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,eAAe,CAAC,aAAa,CAAC;QACvC,eAAe,EAAE,CAAC,aAAa,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChI,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnH,IAAI,EAAE,sPAAsP;QAC5P,iBAAiB,EAAE,oBAAoB;QACvC,iBAAiB,EAAE,8BAA8B;QACjD,eAAe,EAAE,2BAA2B;QAC5C,KAAK,EAAE;YACL,+HAA+H;SAChI;QACD,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;QAC9D,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;QACrE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;KAC/D,CAAC;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,4IAA4I,CAAC,CAAC;IACnK,CAAC;IACD,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,mJAAmJ,CAAC,CAAC;IAC1K,CAAC;IAED,uBAAuB;IACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"required-knowledge.js","sourceRoot":"","sources":["../../src/lib/required-knowledge.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG,+EAA+E,CAAC;AACpH,MAAM,CAAC,MAAM,8BAA8B,GAAG,mFAAmF,CAAC;AAClI,MAAM,CAAC,MAAM,2BAA2B,GAAG,qDAAqD,CAAC;AAEjG,MAAM,0BAA0B,GAAG,oDAAoD,CAAC;AAIxF,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAmB,CAAC;AAEvD,SAAS,iBAAiB,CAAC,GAAY;IACrC,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,mBAAmB,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,mBAAmB,EAAE,CAAC,aAAa,EAAE,mBAAmB,EAAE,YAAY,CAAC;aACpE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAyB,CAAC,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAgB,MAAM;IACjE,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1C,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,cAAc,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC7F,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;QAC9D,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,gCAAgC,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iJAAiJ,CAAC,CAAC;AAC3L,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+JAA+J,CAAC,CAAC;AACzM,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oJAAoJ,CAAC,CAAC;AAC9L,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAG;IACtC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,oBAAoB,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,0KAA0K,CAAC,CAAC;IAC9L,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAS,EAAE,GAAG;IACnD,IAAI,SAAS;QAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,GAAG;IAC/C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,8BAA8B,CAAC,EAAE,CAAC;QACzH,MAAM,IAAI,KAAK,CAAC,wLAAwL,CAAC,CAAC;IAC5M,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,SAAS,EAAE,GAAG;IAC5D,IAAI,SAAS;QAAE,6BAA6B,CAAC,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAG;IAC7C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,2BAA2B,CAAC,EAAE,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,wLAAwL,CAAC,CAAC;IAC5M,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,SAAS,EAAE,GAAG;IAC1D,IAAI,SAAS;QAAE,2BAA2B,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,CAAU,CAAC;AAGjG,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAK,gBAAsC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAmB,CAAC;IACpF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,qBAAqB,GAAG;IAC5B;QACE,EAAE,EAAE,gCAAgC;QACpC,KAAK,EAAE;YACL,mEAAmE;YACnE,uJAAuJ;YACvJ,mJAAmJ;SACpJ;KACF;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,KAAK,EAAE;YACL,8GAA8G;YAC9G,0IAA0I;YAC1I,0PAA0P;YAC1P,mLAAmL;YACnL,sNAAsN;YACtN,kEAAkE;YAClE,6OAA6O;SAC9O;KACF;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE;YACL,wMAAwM;YACxM,+FAA+F;YAC/F,yNAAyN;YACzN,mEAAmE;YACnE,wIAAwI;YACxI,0EAA0E;YAC1E,wFAAwF;YACxF,wFAAwF;YACxF,oHAAoH;YACpH,sFAAsF;YACtF,+HAA+H;YAC/H,+JAA+J;YAC/J,qJAAqJ;YACrJ,oJAAoJ;SACrJ;KACF;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EAAE;YACL,8KAA8K;YAC9K,gFAAgF;YAChF,4NAA4N;YAC5N,qHAAqH;YACrH,+FAA+F;SAChG;KACF;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,KAAK,EAAE;YACL,iPAAiP;YACjP,waAAwa;YACxa,sQAAsQ;YACtQ,mLAAmL;YACnL,gPAAgP;YAChP,ySAAyS;YACzS,0SAA0S;YAC1S,uJAAuJ;SACxJ;KACF;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE;YACL,sOAAsO;YACtO,gIAAgI;YAChI,+RAA+R;YAC/R,+KAA+K;YAC/K,8LAA8L;YAC9L,6FAA6F;YAC7F,qPAAqP;YACrP,uVAAuV;YACvV,yLAAyL;YACzL,6OAA6O;YAC7O,uNAAuN;YACvN,+KAA+K;YAC/K,2MAA2M;YAC3M,wQAAwQ;YACxQ,qRAAqR;YACrR,kIAAkI;YAClI,4NAA4N;YAC5N,0JAA0J;YAC1J,qIAAqI;YACrI,sHAAsH;YACtH,kLAAkL;YAClL,uHAAuH;YACvH,8OAA8O;YAC9O,oIAAoI;SACrI;KACF;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE;YACL,6IAA6I;YAC7I,0KAA0K;YAC1K,6KAA6K;SAC9K;KACF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE;YACL,wGAAwG;YACxG,wGAAwG;YACxG,2DAA2D;YAC3D,0JAA0J;SAC3J;KACF;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAG;IAC5B;QACE,EAAE,EAAE,gCAAgC;QACpC,KAAK,EAAE;YACL,kHAAkH;YAClH,wJAAwJ;YACxJ,gIAAgI;YAChI,qJAAqJ;YACrJ,uGAAuG;SACxG;KACF;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EAAE;YACL,oFAAoF;YACpF,2HAA2H;YAC3H,yPAAyP;YACzP,sJAAsJ;YACtJ,+QAA+Q;YAC/Q,uVAAuV;YACvV,gQAAgQ;YAChQ,uMAAuM;YACvM,oNAAoN;SACrN;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,KAAK,EAAE;YACL,6FAA6F;YAC7F,6FAA6F;YAC7F,qKAAqK;YACrK,mKAAmK;SACpK;KACF;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,KAAK,EAAE;YACL,6DAA6D;YAC7D,2QAA2Q;YAC3Q,mIAAmI;YACnI,6KAA6K;YAC7K,wOAAwO;YACxO,yCAAyC;YACzC,8NAA8N;YAC9N,4UAA4U;YAC5U,0JAA0J;YAC1J,mPAAmP;YACnP,4KAA4K;YAC5K,qJAAqJ;YACrJ,wNAAwN;YACxN,8GAA8G;YAC9G,0GAA0G;YAC1G,mMAAmM;YACnM,uOAAuO;YACvO,gKAAgK;YAChK,2IAA2I;YAC3I,gMAAgM;YAChM,2KAA2K;YAC3K,2NAA2N;SAC5N;KACF;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB;QACE,EAAE,EAAE,sBAAsB;QAC1B,KAAK,EAAE;YACL,qGAAqG;YACrG,kIAAkI;YAClI,gGAAgG;YAChG,mIAAmI;SACpI;KACF;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,KAAK,EAAE;YACL,yHAAyH;YACzH,wFAAwF;YACxF,oHAAoH;YACpH,oLAAoL;YACpL,2HAA2H;YAC3H,wHAAwH;SACzH;KACF;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,KAAK,EAAE;YACL,qGAAqG;YACrG,0GAA0G;YAC1G,kNAAkN;YAClN,qFAAqF;YACrF,mcAAmc;YACnc,6NAA6N;YAC7N,+QAA+Q;YAC/Q,gRAAgR;YAChR,wUAAwU;YACxU,mUAAmU;YACnU,yLAAyL;YACzL,sNAAsN;YACtN,8PAA8P;YAC9P,kPAAkP;YAClP,kgBAAkgB;YAClgB,kLAAkL;YAClL,6bAA6b;YAC7b,sNAAsN;YACtN,sGAAsG;SACvG;KACF;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EAAE;YACL,yNAAyN;YACzN,kJAAkJ;YAClJ,sHAAsH;YACtH,2JAA2J;YAC3J,sUAAsU;SACvU;KACF;CACF,CAAC;AAEF,MAAM,eAAe,GAAmC;IACtD,IAAI,EAAE,yJAAyJ;IAC/J,MAAM,EAAE,yHAAyH;IACjI,cAAc,EAAE,mKAAmK;IACnL,SAAS,EAAE,4GAA4G;IACvH,IAAI,EAAE,gFAAgF;CACvF,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,QAAgB,MAAM;IAClE,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,CAAC;IAC3B,MAAM,cAAc,GAAG,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,cAAc,IAAI,aAAa,KAAK,MAAM,CAAC;IAChH,MAAM,iBAAiB,GAAG,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,WAAW,CAAC;IAEpF,MAAM,OAAO,GAAQ;QACnB,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,eAAe,CAAC,aAAa,CAAC;QACvC,eAAe,EAAE,CAAC,aAAa,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChI,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnH,IAAI,EAAE,sPAAsP;QAC5P,iBAAiB,EAAE,oBAAoB;QACvC,iBAAiB,EAAE,8BAA8B;QACjD,eAAe,EAAE,2BAA2B;QAC5C,KAAK,EAAE;YACL,+HAA+H;SAChI;QACD,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;QAC9D,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;QACrE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;KAC/D,CAAC;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,4IAA4I,CAAC,CAAC;IACnK,CAAC;IACD,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,mJAAmJ,CAAC,CAAC;IAC1K,CAAC;IAED,uBAAuB;IACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/runtime-zone-tools.d.ts

@@ -117,6 +117,13 @@ export declare function searchRuntimeZone(apiUrl: string, input: any): Promise<{
     zone: "admin_ui";
     zoneDescription: string;
     results: any[];
+    matchMode: string;
+    target: {
+        id: any;
+        name: any;
+    };
+    targetFound: boolean;
+    exactMatchCount: number;
     query: string;
     path: string;
     type: any;

package/dist/lib/runtime-zone-tools.js

@@ -360,10 +360,13 @@ export async function searchRuntimeZone(apiUrl, input) {
     if (!RUNTIME_ZONES.includes(zone))
         throw new Error(`Unsupported runtime zone: ${zone}`);
     if (zone === 'admin_ui') {
-        const inventory = !String(input.query ?? '').trim() && !String(input.path ?? '').trim();
+        const exactLookup = input.id != null || Boolean(String(input.name ?? '').trim());
+        const inventory = !String(input.query ?? '').trim() && !String(input.path ?? '').trim() && !exactLookup;
         const adminResult = await searchExtensions(apiUrl, {
             query: input.query,
             path: input.path,
+            id: input.id,
+            name: input.name,
             type: input.extensionType,
             includeDisabled: input.includeDisabled,
             maxResults: input.maxResults,
@@ -626,8 +629,8 @@ export function registerRuntimeZoneTools(server, ENFYRA_API_URL) {
         mode: z.enum(['search', 'inspect']).optional().default('search').describe('search returns ranked admin UI matches. inspect opens one result using id/name/path/query.'),
         query: z.string().optional().describe('Visible text, button label, menu label, component name, class, icon, source term, or UX phrase.'),
         path: z.string().optional().describe('Menu/page path such as /cloud/hosts when known.'),
-        id: z.union([z.string(), z.number()]).optional().describe('Extension id for mode=inspect; use nextInspect.input from search results.'),
-        name: z.string().optional().describe('Extension name for mode=inspect.'),
+        id: z.union([z.string(), z.number()]).optional().describe('Exact extension id for search verification, or the extension id for mode=inspect.'),
+        name: z.string().optional().describe('Exact extension name for search verification, or the extension name for mode=inspect.'),
         type: z.enum(['page', 'widget', 'global']).optional().describe('Narrows extension type.'),
         includeDisabled: z.boolean().optional().default(true),
         maxResults: z.number().int().min(1).max(25).optional().default(8),