@every-app/sdk 0.3.0-rc.8 → 0.3.0

package/dist/internal/providerSpec.js

@@ -21,7 +21,7 @@
  * registry's (./providerRegistry.ts), run after this parse.
  */
 import { DEFAULT_WRITE_METHODS, authSettingNames, } from "./capabilities.js";
-import { oauthSpecOf, parseOAuthUserSpec } from "./oauthSpec.js";
+import { REMOVED_OAUTH_FIELDS, oauthSpecOf, parseOAuthUserSpec, } from "./oauthSpec.js";
 /** A provider id: lowercase, a letter first, 2 to 40 characters. */
 export const PROVIDER_ID = /^[a-z][a-z0-9-]{1,39}$/;
 /** A Gateway setting name a provider may hold: upper case, 3 to 64 characters. */
@@ -96,10 +96,6 @@ const KNOWN_FIELDS = new Set([
     "example",
     "verified",
     "tags",
-    // An `oauth2-user` spec's own (./oauthSpec.ts).
-    "scopeSets",
-    "alwaysRequested",
-    "tolerated",
     // An `ai` spec's own.
     "baseUrl",
     "models",
@@ -128,11 +124,7 @@ const NOT_AI_FIELDS = [
     "readMethods",
     "writeMethods",
     "accountWidePaths",
-    ...OAUTH_ONLY_FIELDS_LIST(),
 ];
-function OAUTH_ONLY_FIELDS_LIST() {
-    return ["scopeSets", "alwaysRequested", "tolerated"];
-}
 /** Fields an API-key spec has that an `oauth2-user` spec does not. */
 const API_KEY_ONLY_FIELDS = [
     "hostSetting",
@@ -144,11 +136,6 @@ const API_KEY_ONLY_FIELDS = [
     "rate",
     "verified",
 ];
-const OAUTH_ONLY_FIELDS = [
-    "scopeSets",
-    "alwaysRequested",
-    "tolerated",
-];
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -656,7 +643,11 @@ export function parseProviderSpec(input) {
             problems: [{ path: "(root)", message: "must be a JSON object" }],
         };
     }
+    const oauthSpec = isRecord(input["auth"]) && input["auth"]["kind"] === "oauth2-user";
     for (const field of Object.keys(input)) {
+        // An OAuth spec's removed fields get their own message below.
+        if (oauthSpec && Object.hasOwn(REMOVED_OAUTH_FIELDS, field))
+            continue;
         if (!KNOWN_FIELDS.has(field)) {
             problems.push({ path: field, message: "unknown field" });
         }
@@ -715,7 +706,12 @@ export function parseProviderSpec(input) {
         return parseAiSpec(input, problems, { id, name, description, docs, api });
     }
     if (isOAuth) {
-        const { access, readMethods, writeMethods } = grants(input, problems);
+        // Fields an OAuth spec had before scopes moved to each app's config,
+        // each refused with what to write instead.
+        for (const [field, message] of Object.entries(REMOVED_OAUTH_FIELDS)) {
+            if (input[field] !== undefined)
+                problems.push({ path: field, message });
+        }
         const hint = text(input["hint"], "hint", problems, { max: 500 });
         const example = text(input["example"], "example", problems, { max: 200 });
         const tags = tagList(input["tags"], problems);
@@ -746,11 +742,6 @@ export function parseProviderSpec(input) {
                 hosts,
                 ...(description === undefined ? {} : { description }),
                 ...(api === undefined ? {} : { reference: api }),
-                ...(access === undefined
-                    ? {}
-                    : { access: access }),
-                ...(readMethods === undefined ? {} : { readMethods }),
-                ...(writeMethods === undefined ? {} : { writeMethods }),
                 ...(hint === undefined ? {} : { hint }),
                 ...(example === undefined ? {} : { example }),
                 ...(tags === undefined ? {} : { tags }),
@@ -761,14 +752,6 @@ export function parseProviderSpec(input) {
         }
         return { ok: true, id, capability: parsed.capability };
     }
-    for (const field of OAUTH_ONLY_FIELDS) {
-        if (input[field] !== undefined) {
-            problems.push({
-                path: field,
-                message: "only an oauth2-user spec has it",
-            });
-        }
-    }
     const hostSetting = input["hostSetting"] === undefined
         ? undefined
         : secretName(input["hostSetting"], "hostSetting", problems);
@@ -1048,13 +1031,8 @@ export function describeSpecProblems(problems) {
  * gives the entry back.
  */
 export function providerSpecOf(id, capability) {
-    if (capability.mode === "oauth_client") {
-        const spec = oauthSpecOf(id, capability);
-        if (!spec) {
-            throw new Error(`${id} is a catalog OAuth client without a Gateway-owned flow: it has no spec`);
-        }
-        return spec;
-    }
+    if (capability.mode === "oauth_client")
+        return oauthSpecOf(id, capability);
     if (capability.mode === "ai") {
         if (!capability.chat || !capability.models) {
             throw new Error(`${id} is a catalog AI entry without a model list: it has no spec`);
@@ -1149,6 +1127,6 @@ export function providerSpecOf(id, capability) {
 }
 /** The methods an app with `access: "write"` may use on `capability` besides its read methods. */
 export function writeMethodsOf(capability) {
-    return ((capability.mode === "ai" ? undefined : capability.writeMethods) ??
+    return ((capability.mode === "api_key" ? capability.writeMethods : undefined) ??
         DEFAULT_WRITE_METHODS);
 }

package/dist/internal/remoteMcp.d.ts

@@ -1,34 +1,65 @@
+/**
+ * Remote MCP apps: any remote MCP server registered on a gateway by URL
+ * (`everyapp mcp add <url>`, Admin → Apps → "Add MCP server",
+ * `everyapp_mcp_add`), served to members' AI clients as an MCP app of the
+ * Gateway's own, like a built-in provider app (./providerApps.ts) but with
+ * its tools read from the server and each call forwarded to it
+ * (docs/design/2026-10-mcp-by-url.md, docs/design/2026-11-mcp-apps-auth.md).
+ *
+ * The registration record is the app row's manifest: `id`, `name`,
+ * `description` and a `remote` block ({@link RemoteMcpBlock}): the one URL
+ * the Gateway ever fetches, its credential ({@link RemoteMcpAuth}: none, or
+ * a provider of the registry, whose key or OAuth connection the Gateway
+ * holds and binds to the provider's hosts), how a tool's risk is decided
+ * when the server's annotations don't say, the operator's per-tool
+ * overrides, and a revision the writers bump so the Gateway re-lists the
+ * tools on first use after a change. An app with a provider also lists it
+ * under `capabilities` ({@link remoteMcpAppManifest}), so the settings
+ * model treats its key or client as any app's.
+ *
+ * A credential the registrar gives at `mcp add` becomes a provider row of
+ * the app's own, `<appId>-mcp` ({@link remoteMcpProviderId}; the specs are
+ * built in ./mcpOAuth.ts): an API-key row for a static value
+ * (`<APPID>_MCP_TOKEN`), a discovered `oauth2-user` row for OAuth
+ * (`<APPID>_MCP_CLIENT_ID`, `_SECRET`).
+ *
+ * Everything here is pure and shared by the CLI, the perimeter's registry
+ * rules, the Gateway (which serves the row and validates again at every
+ * fetch) and the settings model (./appSettings.ts), so the rules cannot
+ * drift: what the URL may be, what the credential may be, how a server's
+ * tool names become the ToolBus's, and what risk a tool gets.
+ */
+import { type Capability, type CapabilitySettings } from "./capabilities.js";
 import { type ToolRisk } from "./tools.js";
-export declare const REMOTE_MCP_AUTH_KINDS: readonly ["none", "bearer", "header", "basic", "oauth"];
+/** The kinds a stored `remote.auth` block may have. */
+export declare const REMOTE_MCP_AUTH_KINDS: readonly ["none", "provider"];
 export type RemoteMcpAuthKind = (typeof REMOTE_MCP_AUTH_KINDS)[number];
 /**
- * How the Gateway authenticates to the server. `secret` is the name of
- * the Gateway setting holding the value ({@link remoteMcpSecretName}),
- * never the value. `oauth` is recorded so the app can say what the server
- * wants; it is not served (the design's section 10).
+ * How the Gateway authenticates to the server: nothing, or a provider of
+ * the registry (a catalog entry such as `elevenlabs`, a registered row, or
+ * the row `everyapp mcp add` synthesizes for the app,
+ * {@link remoteMcpProviderId}). The credential lives with the provider and
+ * is bound to its hosts (`providers.value-bound-to-hosts`); the block only
+ * names it. With an OAuth provider each member connects their own
+ * account in the app.
  */
 export type RemoteMcpAuth = {
     kind: "none";
-}
-/** `Authorization: Bearer <value>`. */
- | {
-    kind: "bearer";
-    secret: string;
-}
-/** `<header>: <prefix><value>`. */
- | {
-    kind: "header";
-    secret: string;
-    header: string;
-    prefix?: string;
-}
-/** The value is `user:password`; sent as `Authorization: Basic <base64>`. */
- | {
-    kind: "basic";
-    secret: string;
 } | {
-    kind: "oauth";
+    kind: "provider";
+    provider: string;
 };
+/**
+ * What the registrar may ask for at `mcp add` (`--auth`): none, a static
+ * credential the add turns into a synthesized API-key provider row, or
+ * OAuth, a discovered `oauth2-user` row (./mcpOAuth.ts).
+ */
+export declare const REMOTE_MCP_CREDENTIAL_KINDS: readonly ["none", "bearer", "header", "query", "basic", "oauth"];
+export type RemoteMcpCredentialKind = (typeof REMOTE_MCP_CREDENTIAL_KINDS)[number];
+/** The static credential kinds: one value, placed as the synthesized row's `auth` says. */
+export type RemoteMcpStaticKind = Exclude<RemoteMcpCredentialKind, "none" | "oauth">;
+/** Why an old registration (`bearer`, `header`, `basic`, `oauth` with a `secret`) no longer parses. */
+export declare const REMOTE_MCP_AUTH_PREDATES = "this registration predates provider credentials; remove it and add it again";
 /**
  * How a tool's risk is decided for the app. `annotations`: from the
  * server's hints ({@link remoteToolRisk}); `read` or `write`: every tool,
@@ -57,13 +88,55 @@ export interface RemoteMcpManifest {
     name: string;
     description: string;
     remote: RemoteMcpBlock;
+    /** The provider the app's credential is, listed as a deployed app lists one ({@link remoteMcpAppManifest}). */
+    capabilities?: Record<string, RemoteMcpCapabilityEntry>;
 }
 /** The manifest fields the Gateway reads, as a stored manifest has them. */
 export interface RemoteMcpManifestLike {
     readonly remote?: unknown;
 }
-/** The default credential name for an app id: `treg` → `TREG_MCP_TOKEN`. */
-export declare function remoteMcpSecretName(id: string): string;
+/**
+ * Why `header` can't carry a remote MCP server's static credential, or
+ * null when it can: an HTTP header name the MCP transport and the Gateway
+ * don't set themselves.
+ */
+export declare function remoteMcpHeaderProblem(header: unknown): string | null;
+/**
+ * The provider row `everyapp mcp add` writes for an app's own credential:
+ * `<appId>-mcp` (`treg` → `treg-mcp`), its settings `TREG_MCP_*`.
+ */
+export declare function remoteMcpProviderId(appId: string): string;
+/** Whether `providerId` is `appId`'s synthesized row ({@link remoteMcpProviderId}). */
+export declare function isRemoteMcpProviderIdOf(providerId: string, appId: string): boolean;
+/** The static credential's setting on the synthesized row: `treg` → `TREG_MCP_TOKEN`. */
+export declare function remoteMcpTokenSetting(appId: string): string;
+/** The OAuth client id's setting on the synthesized row: `treg` → `TREG_MCP_CLIENT_ID`. */
+export declare function remoteMcpClientIdSetting(appId: string): string;
+/** The OAuth client secret's setting on the synthesized row: `treg` → `TREG_MCP_CLIENT_SECRET`. */
+export declare function remoteMcpClientSecretSetting(appId: string): string;
+/**
+ * The redirect URI of an app's synthesized OAuth row, what a server's
+ * client is registered with: `<gateway origin>/connect/<appId>-mcp/callback`.
+ */
+export declare function remoteMcpRedirectUri(gatewayUrl: string, appId: string): string;
+/** Where the Gateway serves its OAuth client metadata documents (public, bypassed behind Access). */
+export declare const REMOTE_MCP_CLIENT_METADATA_PREFIX = "/oauth-clients/";
+/**
+ * The Gateway's client id at a server that takes OAuth client ID metadata
+ * documents (CIMD) instead of registration: the URL of the document that
+ * describes the client, `<gateway origin>/oauth-clients/<appId>-mcp`.
+ * Null for a Gateway that isn't on https (a local one): an authorization
+ * server fetches the document, and only from https.
+ */
+export declare function remoteMcpClientMetadataUrl(gatewayUrl: string, appId: string): string | null;
+/**
+ * The hosts a provider sends its credential to, the hosts an MCP URL
+ * using it must be on: an API-key provider's `hosts` (and its host
+ * setting's value, given `settings`), an OAuth provider's API hosts. Null
+ * for a provider a remote MCP app can't use: an AI provider, a service,
+ * or an OAuth client the Gateway runs no flow for.
+ */
+export declare function remoteMcpProviderHosts(capability: Capability, settings?: CapabilitySettings): string[] | null;
 /** Whether `id` can be a remote MCP app's id (kebab-case, at most 32, not reserved, not a built-in's). */
 export declare function remoteMcpIdProblem(id: string): string | null;
 /**
@@ -88,14 +161,25 @@ export declare function reservedUpstreamHosts(): string[];
  * `https:` (or `http:` and loopback hosts only while the Gateway itself
  * runs on `http://`, local dev), a host name rather than an address, no
  * credentials or fragment in it, not the Gateway's own origin or one of
- * its app hosts, and not a provider whose key the Gateway holds. The
- * Gateway checks the stored URL again before every fetch, so a row edited
- * by hand is refused the same way.
- */
-export declare function remoteMcpUrlProblem(url: string, env: RemoteMcpUrlEnv): string | null;
-/** The credential name's problem, or null: in the family, and bounded. */
-export declare function remoteMcpSecretProblem(name: unknown): string | null;
-/** The auth block's problem, or the block as typed. */
+ * its app hosts, and not a provider whose key the Gateway holds
+ * ({@link reservedUpstreamHosts}) unless the app names that provider:
+ * `providerHosts` are the hosts of the provider the app's credential is
+ * (never an app's own synthesized row), and a reserved host among them is
+ * allowed (`mcp add https://api.elevenlabs.io/v1/mcp --provider
+ * elevenlabs`). The Gateway's own origin, its app domains and IPs stay
+ * refused always. The Gateway checks the stored URL again before every
+ * fetch, so a row edited by hand is refused the same way.
+ */
+export declare function remoteMcpUrlProblem(url: string, env: RemoteMcpUrlEnv, options?: {
+    providerHosts?: readonly string[];
+}): string | null;
+/**
+ * The auth block's problem, or the block as typed: `{ kind: "none" }`,
+ * or `{ kind: "provider", provider }` naming a provider id. A
+ * block of the kinds before provider credentials (`bearer`, `header`,
+ * `basic`, `oauth`) is refused with {@link REMOTE_MCP_AUTH_PREDATES}: such
+ * a row serves nothing and reads as needing setup.
+ */
 export declare function parseRemoteMcpAuth(raw: unknown): {
     ok: true;
     auth: RemoteMcpAuth;
@@ -103,6 +187,8 @@ export declare function parseRemoteMcpAuth(raw: unknown): {
     ok: false;
     problem: string;
 };
+/** The provider the block names, or null for `none`. */
+export declare function remoteMcpProviderOf(auth: RemoteMcpAuth): string | null;
 /**
  * The `remote` block of a stored manifest, checked field by field (a row
  * edited by hand must not make the Gateway send a credential anywhere the
@@ -123,10 +209,14 @@ export declare function parseRemoteMcpBlock(raw: unknown): {
  * as needing setup, see app-setup).
  */
 export declare function remoteMcpOf(manifest: unknown): RemoteMcpBlock | null;
+/**
+ * Why a stored manifest's `remote` block can't be read, or null when it
+ * can or there is none: {@link REMOTE_MCP_AUTH_PREDATES} for a block from
+ * before provider credentials.
+ */
+export declare function remoteMcpBlockProblem(manifest: unknown): string | null;
 /** Whether a stored manifest declares a remote MCP server at all (well-formed or not). */
 export declare function hasRemoteMcpBlock(manifest: unknown): boolean;
-/** The credential's setting name the block declares, if its kind takes one. */
-export declare function remoteMcpSecretOf(auth: RemoteMcpAuth): string | null;
 /**
  * A description for a row that gave none: the server's origin, read as a
  * sentence. The origin only: a path or query may carry something the
@@ -134,6 +224,35 @@ export declare function remoteMcpSecretOf(auth: RemoteMcpAuth): string | null;
  * member with access and every AI client.
  */
 export declare function remoteMcpDefaultDescription(name: string, url: string): string;
+/** What a server says about itself in its MCP handshake (`serverInfo`). */
+export interface RemoteMcpServerInfo {
+    name?: string;
+    title?: string;
+    description?: string;
+}
+/**
+ * The name and description a row takes from its server's `serverInfo`, or
+ * null when nothing changes. A row is named by the server unless the
+ * registrar named it: a name that is still the app id (none given) or the
+ * server's own last title gives way to the server's `title` (or a `name`
+ * that reads as one, not a code identifier like `mcp-server`); a
+ * description that is still the default sentence or the server's last one
+ * gives way to the server's `description`. What the server said last is
+ * kept in the manifest's `server`, so a later change on the server follows
+ * and a name or description the registrar set (Edit in Admin → Apps) is never
+ * overwritten.
+ */
+export declare function remoteMcpServerNaming(input: {
+    id: string;
+    url: string;
+    /** The stored manifest JSON. */
+    manifest: string | null;
+    serverInfo: RemoteMcpServerInfo | undefined;
+}): {
+    manifest: string;
+    name: string;
+    description: string;
+} | null;
 /**
  * The operator's override for a server tool: by the server's name, or by
  * a name that becomes the same ToolBus name ({@link normalizeRemoteToolName}),
@@ -143,23 +262,46 @@ export declare function remoteMcpDefaultDescription(name: string, url: string):
 export declare function remoteToolOverride(block: Pick<RemoteMcpBlock, "tools">, upstreamName: string): RemoteMcpToolOverride | undefined;
 /** Whether a server's tool name can travel in an HTTP header (`Mcp-Name`): visible ASCII, bounded. */
 export declare function isHeaderSafeToolName(name: string): boolean;
-/** The manifest a remote MCP app's row stores, from what the registrar gave. */
+/**
+ * The entry a remote MCP app's manifest lists its provider under
+ * (`capabilities`), as a deployed app lists one: `{ access, why }` for an
+ * API-key provider, `{ scopes, why }` for an OAuth one.
+ */
+export type RemoteMcpCapabilityEntry = {
+    access: "read";
+    why: string;
+} | {
+    scopes: string[];
+    why: string;
+};
+/**
+ * The manifest a remote MCP app's row stores, from what the registrar
+ * gave. An app with a provider credential lists the provider under
+ * `capabilities` like a deployed app that uses it, so the settings model
+ * (./appSettings.ts) asks for its key or client, `secret list` names it
+ * and the connect flow asks for its scopes: nothing about a remote app's
+ * credential is special there. `providerCapability` is the provider as
+ * the registry resolves it (the synthesized row's, before it is written);
+ * for an OAuth provider the entry lists `scopes`, the server's own scope
+ * strings the connect asks for (discovery's, or none: the server decides).
+ */
 export declare function remoteMcpAppManifest(input: {
     id: string;
     name?: string | null;
     description?: string | null;
     remote: RemoteMcpBlock;
+    providerCapability?: Capability | null;
+    /** An OAuth provider's scopes the connect asks for. */
+    scopes?: readonly string[] | null;
 }): RemoteMcpManifest;
 /** How a tool got its risk: the server's hint, the app's default, the operator's override, or the fallback. */
 export type RemoteToolRiskSource = "hint" | "app" | "override" | "default";
 /**
  * A tool's risk for the Gateway. An override wins; then the app's `read`
- * or `write` default; then the server's hints, read conservatively: an
- * explicit `readOnlyHint: true` is `read`, an explicit `destructiveHint:
- * true` is `destructive` (hidden until approvals exist), and anything
- * else, a missing hint included, is `write`. The spec's missing-means-true
- * default for `destructiveHint` is not followed: it would hide every
- * unhinted tool.
+ * or `write` default; then the server's hints: an explicit `readOnlyHint:
+ * true` is `read`, and anything else, a missing hint included, is `write`.
+ * A write tool keeps the server's `destructiveHint`, so clients still ask
+ * before calling it.
  */
 export declare function remoteToolRisk(hints: {
     readOnlyHint?: unknown;
@@ -179,10 +321,12 @@ export declare function remoteToolEnabled(block: Pick<RemoteMcpBlock, "tools">,
  */
 export declare function normalizeRemoteToolName(name: string): string | null;
 /**
- * The request headers that carry the credential for `auth`, from the
- * setting's value. The value never appears anywhere else.
+ * Plain words for how the app authenticates, for lists and dialogs. With
+ * the provider's capability as the registry resolves it: "bearer token",
+ * "header X-Api-Key", "query parameter key", "user and password" (an
+ * API-key provider; "<kind>, <provider>'s key" when the provider isn't
+ * the app's own synthesized row), or "OAuth, each member connects" (an
+ * OAuth provider). Without it, the provider's id.
  */
-export declare function remoteMcpAuthHeaders(auth: RemoteMcpAuth, value: string): Record<string, string>;
-/** Plain words for an auth kind, for lists and dialogs. */
-export declare function remoteMcpAuthLabel(auth: RemoteMcpAuth): string;
+export declare function remoteMcpAuthLabel(auth: RemoteMcpAuth, capability?: Capability | null): string;
 //# sourceMappingURL=remoteMcp.d.ts.map

package/dist/internal/remoteMcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remoteMcp.d.ts","sourceRoot":"","sources":["../../src/internal/remoteMcp.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAiC,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE1E,eAAO,MAAM,qBAAqB,yDAMxB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE;AAClB,uCAAuC;GACrC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACpC,mCAAmC;GACjC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACrE,6EAA6E;GAC3E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,2CAI3B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,oBAAoB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC7C,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,kDAAkD;AAClD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAmCD,4EAA4E;AAC5E,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,0GAA0G;AAC1G,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAY5D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA8B7D;AAED,MAAM,WAAW,eAAe;IAC9B,mGAAmG;IACnG,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAMD,oFAAoF;AACpF,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAmBhD;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,eAAe,GACnB,MAAM,GAAG,IAAI,CAkEf;AAMD,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CASnE;AAED,uDAAuD;AACvD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,GACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAkDpE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,OAAO,GACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAyEtE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAIpE;AAED,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAE5D;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAQ7E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EACpC,YAAY,EAAE,MAAM,GACnB,qBAAqB,GAAG,SAAS,CASnC;AAED,sGAAsG;AACtG,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,cAAc,CAAC;CACxB,GAAG,iBAAiB,CAMpB;AAED,+GAA+G;AAC/G,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,KAAK,GAAG,UAAU,GAAG,SAAS,CAAC;AAE3E;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,EACxE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,EAC7C,YAAY,EAAE,MAAM,GACnB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAWlD;AAED,2DAA2D;AAC3D,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EACpC,YAAY,EAAE,MAAM,GACnB,OAAO,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAenE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,MAAM,GACZ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB;AASD,2DAA2D;AAC3D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAa9D"}
+{"version":3,"file":"remoteMcp.d.ts","sourceRoot":"","sources":["../../src/internal/remoteMcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,YAAY,CAAC;AAEpB,uDAAuD;AACvD,eAAO,MAAM,qBAAqB,+BAAgC,CAAC;AACnE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,kEAO9B,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/C,2FAA2F;AAC3F,MAAM,MAAM,mBAAmB,GAAG,OAAO,CACvC,uBAAuB,EACvB,MAAM,GAAG,OAAO,CACjB,CAAC;AAEF,uGAAuG;AACvG,eAAO,MAAM,wBAAwB,gFAC0C,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,2CAI3B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,oBAAoB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC7C,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,kDAAkD;AAClD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,+GAA+G;IAC/G,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CACzD;AAED,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAmCD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAQrE;AAOD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,uFAAuF;AACvF,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GACZ,OAAO,CAET;AAED,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,2FAA2F;AAC3F,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,mGAAmG;AACnG,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GACZ,MAAM,CAQR;AAED,qGAAqG;AACrG,eAAO,MAAM,iCAAiC,oBAAoB,CAAC;AAEnE;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GACZ,MAAM,GAAG,IAAI,CAUf;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,UAAU,EACtB,QAAQ,CAAC,EAAE,kBAAkB,GAC5B,MAAM,EAAE,GAAG,IAAI,CAMjB;AAED,0GAA0G;AAC1G,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAY5D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA8B7D;AAED,MAAM,WAAW,eAAe;IAC9B,mGAAmG;IACnG,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAMD,oFAAoF;AACpF,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAiBhD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAClD,MAAM,GAAG,IAAI,CAqEf;AAMD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,GACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0CpE;AAED,wDAAwD;AACxD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAEtE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,OAAO,GACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAyEtE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAIpE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAItE;AAED,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAE5D;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAQ7E;AAED,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAaD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC7C,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAuDjE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EACpC,YAAY,EAAE,MAAM,GACnB,qBAAqB,GAAG,SAAS,CASnC;AAED,sGAAsG;AACtG,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,cAAc,CAAC;IACvB,kBAAkB,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IACvC,uDAAuD;IACvD,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;CACnC,GAAG,iBAAiB,CA4BpB;AAED,+GAA+G;AAC/G,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,KAAK,GAAG,UAAU,GAAG,SAAS,CAAC;AAE3E;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,EACxE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,EAC7C,YAAY,EAAE,MAAM,GACnB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CASlD;AAED,2DAA2D;AAC3D,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EACpC,YAAY,EAAE,MAAM,GACnB,OAAO,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAenE;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,aAAa,EACnB,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,GAC7B,MAAM,CAuBR"}