@felan-ai/felan 0.8.0 → 0.10.0

package/NOTICE

@@ -6,6 +6,27 @@ This package composes the MIT-licensed @felan-ai/agent-core and Felan extension
 packages listed in package.json. Their package-level LICENSE and NOTICE files
 contain the applicable attribution and source provenance.
 
-The terminal application uses @earendil-works/pi-coding-agent 0.84.0 from
-https://github.com/earendil-works/pi, licensed under the MIT License.
+The terminal application uses @earendil-works/pi-coding-agent and
+@earendil-works/pi-tui 0.84.0 from https://github.com/earendil-works/pi,
+licensed under the MIT License.
 Copyright (c) 2025 Mario Zechner.
+
+The local powerline subscription host adapts provider request behavior from
+packages/pi-powerline in https://github.com/mslavov/pi-extensions at commit
+7e72e509fe45a5a87c4c2e176cb711de994a8c1d. Copyright (c) 2026 Milko Slavov.
+That source credits the MIT-licensed packages/sub-core from
+https://github.com/marckrenn/pi-sub for subscription provider and usage logic.
+Copyright (c) 2026 Marc Krenn.
+
+The local subagent navigator adapts the MIT-licensed agent navigator and
+transcript components from packages/pi-subagents in
+https://github.com/mslavov/pi-extensions at commit
+7e72e509fe45a5a87c4c2e176cb711de994a8c1d. Copyright (c) 2026 tintinweb.
+Modifications copyright (c) 2026 Milko Slavov.
+
+The local MCP OAuth host uses @napi-rs/keyring 1.3.0 from
+https://github.com/Brooooooklyn/keyring-node, licensed under the MIT License.
+Copyright (c) 2020 N-API for Rust.
+
+It uses open 11.0.0 from https://github.com/sindresorhus/open, licensed under
+the MIT License. Copyright (c) Sindre Sorhus.

package/README.md

@@ -38,7 +38,9 @@ packages, extensions, configured skill paths, prompts, themes, and Pi context
 files remain filtered. Agent Skills are loaded from `~/.agents/skills` and
 `<workspace>/.agents/skills` and are shared with local subagents.
 The built-in powerline reads `~/.felan/powerline.json` (or
-`$FELAN_AGENT_DIR/powerline.json`) once when it initializes.
+`$FELAN_AGENT_DIR/powerline.json`) once when it initializes. Its subscription
+segment obtains the active Codex or Claude OAuth token through Felan's
+`ModelRuntime` and requests usage from that provider's fixed endpoint.
 
 All built-in extensions are enabled by default. Toggle them in
 `~/.felan/settings.json`:
@@ -51,9 +53,11 @@ All built-in extensions are enabled by default. Toggle them in
     "tasks": true,
     "prewalk": true,
     "context": true,
+    "mcp": true,
     "webAccess": true,
     "backgroundBash": true,
     "codex": true,
+    "rtkOptimizer": true,
     "powerline": false
   }
 }
@@ -63,6 +67,50 @@ All built-in extensions are enabled by default. Toggle them in
 single questions or 1-4 question wizards as searchable overlays or inline
 dialogs, with multi-select, freeform answers, and optional comments.
 
+`mcp` provides one OAuth-only remote MCP gateway. It merges
+`$FELAN_AGENT_DIR/mcp.json` with `<cwd>/.mcp.json`; the project file has higher
+precedence for same-name servers. It does not discover `.pi/mcp.json`, Cursor,
+Claude, Codex, or other ambient host configuration. A minimal Felan-owned
+config is:
+
+```json
+{
+  "mcpServers": {
+    "notion": {
+      "url": "https://mcp.notion.com/mcp",
+      "auth": "oauth"
+    }
+  }
+}
+```
+
+Servers in the Felan-owned file must explicitly use `auth: "oauth"`. Standard
+project entries with `type: "http"` and a URL may omit `auth`; Felan treats
+those entries as OAuth. The initial port supports remote HTTP MCP servers
+through Streamable HTTP with classified SSE fallback. Unsupported project
+entries such as stdio, sockets, bearer tokens, and custom headers are skipped
+with a warning rather than executed. Direct tools and MCP Apps are not loaded.
+Optional per-server `oauth` fields are `clientId`, `clientSecret`,
+`clientSecretEnv`, `scope`, `redirectUri`, `clientName`, `clientUri`, and
+`authorizationParams`. Dynamic client registration is used when no client ID
+is configured. A client secret or `clientSecretEnv` requires `clientId`;
+prefer the environment reference over storing a client secret in the file.
+The default callback is `http://127.0.0.1:3118/callback`; set `redirectUri` to
+the exact pre-registered loopback callback when using a configured client.
+
+Run `/mcp` to inspect configured servers, list tools, reconnect, authenticate,
+or log out. `/mcp auth [server]` opens a server picker when its argument is
+omitted. Configuration is loaded at startup;
+run `/reload` after editing either file. The model uses the `mcp` gateway tool
+for search, describe, and remote tool calls. The local host follows the upstream
+adapter's browser + PKCE loopback flow and stores tokens and dynamic-client
+credentials in the OS credential store, bound to the Felan agent directory,
+server name, server URL, OAuth client/redirect/scope profile, and
+authorization-server issuer. It fails closed when that store is unavailable.
+Print-mode subagents never open a browser or callback listener; they can reuse
+credentials established by a root TUI session. MCP metadata and results are
+bounded and explicitly marked as untrusted remote content.
+
 `tasks` provides `TaskCreate`, `TaskUpdate`, `TaskList`, and `TaskGet` over one
 dependency-aware graph shared by the root session and every nested subagent.
 Task state lives under
@@ -88,6 +136,14 @@ ordinary coding tools when another model is selected. Root and nested sessions
 load the same optional request controls from `$FELAN_AGENT_DIR/codex.json`; see
 the extension package README for the three supported fields.
 
+`rtkOptimizer` delegates command rewrites to an `rtk` executable available in
+the active runtime and compacts noisy command, read, and grep results. It
+supports both ordinary `bash` calls and Codex `exec_command` / `write_stdin`
+calls; Codex result envelopes remain intact while only their `Output:` payloads
+are compacted. Configuration is shared by root and nested sessions at
+`$FELAN_AGENT_DIR/storage/agent/rtk-optimizer/config.json`. Use `/rtk` for
+interactive settings, runtime verification, and session savings metrics.
+
 ## System prompt append
 
 The TUI reads one optional `$FELAN_AGENT_DIR/APPEND_SYSTEM.md` file when each
@@ -107,12 +163,18 @@ provides `Agent`, `list_subagents`,
 `get_subagent_result`, `steer_subagent`, and `cancel_subagent`. A root-scoped
 local host queues every run asynchronously, persists the latest child session
 metadata, delivers completion notices, supports bounded nesting, and uses the
-application's current workspace. The TUI status line shows active/recent child
-state, and runtime shutdown awaits active-child cancellation before Pi teardown.
+application's current workspace. The TUI shows each queued or running direct
+child in a full-width interactive rail beneath the powerline status rows, or
+beneath the editor when powerline is disabled. Press Down at the editor's newest
+prompt to enter the rail, use Up/Down to select a child, press Up on the first
+child to return to the editor, and press Enter to open that child in the agent
+navigator. Use `/agents` or `Alt+A` to open the navigator directly, follow live
+transcripts, send steering messages, or stop active work.
+Runtime shutdown awaits active-child cancellation before Pi teardown.
 Completed-child continuation uses the same child ID and Pi session file while
 replacing the latest result. The default list also
-includes `@felan-ai/ext-powerline` for an ANSI-aware footer; it is a direct TUI
-dependency and is not part of cloud composition.
+includes `@felan-ai/ext-powerline` for an ANSI-aware footer with subscription
+usage; it is a direct TUI dependency and is not part of cloud composition.
 
 Local agent definitions are loaded only from bundled Felan definitions,
 `~/.felan/agents/*.md` (or `$FELAN_AGENT_DIR/agents/*.md`), and

package/dist/application.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application.d.ts","sourceRoot":"","sources":["../src/application.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,cAAc,CAAC;AAGtB,MAAM,WAAW,oBAAqB,SAAQ,8BAA8B;IAC1E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAsB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CrF"}
+{"version":3,"file":"application.d.ts","sourceRoot":"","sources":["../src/application.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,oBAAqB,SAAQ,8BAA8B;IAC1E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAsB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCrF"}

package/dist/application.js

@@ -1,6 +1,5 @@
 import { InteractiveMode } from '@earendil-works/pi-coding-agent';
 import { createLocalFelanRuntime, } from './runtime.js';
-import { attachLocalSubagentPresenter } from './subagents/presenter.js';
 export async function runLocalFelan(options = {}) {
     const runtime = await createLocalFelanRuntime(options);
     const previousPiAgentDir = process.env.PI_CODING_AGENT_DIR;
@@ -14,13 +13,7 @@ export async function runLocalFelan(options = {}) {
             ...(options.initialMessage === undefined ? {} : { initialMessage: options.initialMessage }),
             ...(options.verbose === undefined ? {} : { verbose: options.verbose }),
         });
-        const detachPresenter = attachLocalSubagentPresenter(runtime, mode);
-        try {
-            await mode.run();
-        }
-        finally {
-            detachPresenter();
-        }
+        await mode.run();
     }
     finally {
         try {

package/dist/application.js.map

@@ -1 +1 @@
-{"version":3,"file":"application.js","sourceRoot":"","sources":["../src/application.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EACL,uBAAuB,GAExB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AAOxE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAgC,EAAE;IACpE,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC3D,MAAM,0BAA0B,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACrE,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,GAAG,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC;IAE/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,OAAO,EAAE;YACxC,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3F,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SACvE,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,4BAA4B,CAClD,OAAO,EACP,IAAqE,CACtE,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,eAAe,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACrC,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;YACvD,CAAC;YACD,IAAI,0BAA0B,KAAK,SAAS,EAAE,CAAC;gBAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,0BAA0B,CAAC;YACjE,CAAC;YACD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,mBAAmB,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"application.js","sourceRoot":"","sources":["../src/application.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EACL,uBAAuB,GAExB,MAAM,cAAc,CAAC;AAOtB,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAgC,EAAE;IACpE,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC3D,MAAM,0BAA0B,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACrE,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,GAAG,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC;IAE/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,OAAO,EAAE;YACxC,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3F,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SACvE,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACrC,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;YACvD,CAAC;YACD,IAAI,0BAA0B,KAAK,SAAS,EAAE,CAAC;gBAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,0BAA0B,CAAC;YACjE,CAAC;YACD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,mBAAmB,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/extensions.d.ts

@@ -1,6 +1,9 @@
-import type { ExtensionPackageImporter } from '@felan-ai/agent-core';
+import type { ExtensionPackageImporter, ModelRuntime } from '@felan-ai/agent-core';
 import { type SubagentHost } from '@felan-ai/ext-subagents';
+import { type LocalSubagentNavigatorHost } from './subagents/agent-navigator.js';
 export declare const askUserExtensionPackage = "@felan-ai/ext-ask-user";
+export declare const mcpExtensionPackage = "@felan-ai/ext-mcp";
+export declare const powerlineExtensionPackage = "@felan-ai/ext-powerline";
 export declare const subagentsExtensionPackage = "@felan-ai/ext-subagents";
 export declare const builtinExtensionPackages: {
     readonly subagents: "@felan-ai/ext-subagents";
@@ -8,15 +11,17 @@ export declare const builtinExtensionPackages: {
     readonly tasks: "@felan-ai/ext-tasks";
     readonly prewalk: "@felan-ai/ext-prewalk";
     readonly context: "@felan-ai/ext-context";
+    readonly mcp: "@felan-ai/ext-mcp";
     readonly webAccess: "@felan-ai/ext-web-access";
     readonly backgroundBash: "@felan-ai/ext-background-bash";
     readonly codex: "@felan-ai/ext-codex";
+    readonly rtkOptimizer: "@felan-ai/ext-rtk-optimizer";
     readonly powerline: "@felan-ai/ext-powerline";
 };
-export declare const localExtensionPackages: ("@felan-ai/ext-ask-user" | "@felan-ai/ext-subagents" | "@felan-ai/ext-tasks" | "@felan-ai/ext-prewalk" | "@felan-ai/ext-context" | "@felan-ai/ext-web-access" | "@felan-ai/ext-background-bash" | "@felan-ai/ext-codex" | "@felan-ai/ext-powerline")[];
+export declare const localExtensionPackages: ("@felan-ai/ext-subagents" | "@felan-ai/ext-ask-user" | "@felan-ai/ext-mcp" | "@felan-ai/ext-powerline" | "@felan-ai/ext-tasks" | "@felan-ai/ext-prewalk" | "@felan-ai/ext-context" | "@felan-ai/ext-web-access" | "@felan-ai/ext-background-bash" | "@felan-ai/ext-codex" | "@felan-ai/ext-rtk-optimizer")[];
 export type BuiltinExtensionName = keyof typeof builtinExtensionPackages;
 export type BuiltinExtensionSettings = Partial<Record<BuiltinExtensionName, boolean>>;
 export declare function resolveBuiltinExtensionPackages(settings: unknown): readonly string[];
 export declare const importLocalExtension: ExtensionPackageImporter;
-export declare function createLocalExtensionImporter(host: SubagentHost, importExtension?: ExtensionPackageImporter, shutdownHost?: () => Promise<void>): ExtensionPackageImporter;
+export declare function createLocalExtensionImporter(host: SubagentHost & LocalSubagentNavigatorHost, modelRuntime: ModelRuntime, importExtension?: ExtensionPackageImporter, shutdownHost?: () => Promise<void>): ExtensionPackageImporter;
 //# sourceMappingURL=extensions.d.ts.map

package/dist/extensions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../src/extensions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGrE,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAChE,eAAO,MAAM,yBAAyB,4BAA4B,CAAC;AACnE,eAAO,MAAM,wBAAwB;;;;;;;;;;CAU3B,CAAC;AACX,eAAO,MAAM,sBAAsB,yPAA0C,CAAC;AAE9E,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,wBAAwB,CAAC;AACzE,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC;AAItF,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAYpF;AAED,eAAO,MAAM,oBAAoB,EAAE,wBAKlC,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,YAAY,EAClB,eAAe,GAAE,wBAA+C,EAChE,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GACjC,wBAAwB,CAoB1B"}
+{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../src/extensions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAInF,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,gCAAgC,CAAC;AAExC,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAChE,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AACvD,eAAO,MAAM,yBAAyB,4BAA4B,CAAC;AACnE,eAAO,MAAM,yBAAyB,4BAA4B,CAAC;AACnE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;CAY3B,CAAC;AACX,eAAO,MAAM,sBAAsB,+SAA0C,CAAC;AAE9E,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,wBAAwB,CAAC;AACzE,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC;AAItF,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAYpF;AAED,eAAO,MAAM,oBAAoB,EAAE,wBAKlC,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,YAAY,GAAG,0BAA0B,EAC/C,YAAY,EAAE,YAAY,EAC1B,eAAe,GAAE,wBAA+C,EAChE,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GACjC,wBAAwB,CAsC1B"}

package/dist/extensions.js

@@ -1,7 +1,13 @@
 import { createAskUserExtension } from '@felan-ai/ext-ask-user';
 import { createTuiAskUserHost } from '@felan-ai/ext-ask-user/tui';
+import { createPowerlineExtension } from '@felan-ai/ext-powerline';
 import { createSubagentsExtension, } from '@felan-ai/ext-subagents';
+import { createLocalMcpExtension } from './mcp/index.js';
+import { createLocalSubscriptionUsageHost } from './powerline.js';
+import { registerLocalSubagentNavigator, } from './subagents/agent-navigator.js';
 export const askUserExtensionPackage = '@felan-ai/ext-ask-user';
+export const mcpExtensionPackage = '@felan-ai/ext-mcp';
+export const powerlineExtensionPackage = '@felan-ai/ext-powerline';
 export const subagentsExtensionPackage = '@felan-ai/ext-subagents';
 export const builtinExtensionPackages = {
     subagents: subagentsExtensionPackage,
@@ -9,10 +15,12 @@ export const builtinExtensionPackages = {
     tasks: '@felan-ai/ext-tasks',
     prewalk: '@felan-ai/ext-prewalk',
     context: '@felan-ai/ext-context',
+    mcp: mcpExtensionPackage,
     webAccess: '@felan-ai/ext-web-access',
     backgroundBash: '@felan-ai/ext-background-bash',
     codex: '@felan-ai/ext-codex',
-    powerline: '@felan-ai/ext-powerline',
+    rtkOptimizer: '@felan-ai/ext-rtk-optimizer',
+    powerline: powerlineExtensionPackage,
 };
 export const localExtensionPackages = Object.values(builtinExtensionPackages);
 const localExtensionPackageSet = new Set(localExtensionPackages);
@@ -37,16 +45,30 @@ export const importLocalExtension = async (packageName) => {
     }
     return import(packageName);
 };
-export function createLocalExtensionImporter(host, importExtension = importLocalExtension, shutdownHost) {
+export function createLocalExtensionImporter(host, modelRuntime, importExtension = importLocalExtension, shutdownHost) {
+    let powerlineLoaded = false;
+    let agentRailRenderer;
+    const powerline = createPowerlineExtension(createLocalSubscriptionUsageHost(modelRuntime), {
+        footerRows: (width) => agentRailRenderer?.(width) ?? [],
+    });
     return async (packageName) => {
         if (packageName === askUserExtensionPackage) {
             return { default: createAskUserExtension(createTuiAskUserHost()) };
         }
+        if (packageName === mcpExtensionPackage) {
+            return { default: createLocalMcpExtension() };
+        }
         if (packageName === subagentsExtensionPackage) {
             const subagents = createSubagentsExtension(host);
             return {
                 default: ((pi) => {
                     subagents(pi);
+                    registerLocalSubagentNavigator(pi, host, {
+                        renderRailInEditor: () => !powerlineLoaded,
+                        onRailRendererChange: (renderer) => {
+                            agentRailRenderer = renderer;
+                        },
+                    });
                     if (shutdownHost) {
                         pi.on('session_shutdown', async (event) => {
                             if (event.reason !== 'reload')
@@ -56,6 +78,10 @@ export function createLocalExtensionImporter(host, importExtension = importLocal
                 }),
             };
         }
+        if (packageName === powerlineExtensionPackage) {
+            powerlineLoaded = true;
+            return { default: powerline };
+        }
         return importExtension(packageName);
     };
 }

package/dist/extensions.js.map

@@ -1 +1 @@
-{"version":3,"file":"extensions.js","sourceRoot":"","sources":["../src/extensions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EACL,wBAAwB,GAEzB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AACnE,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,yBAAyB;IACpC,OAAO,EAAE,uBAAuB;IAChC,KAAK,EAAE,qBAAqB;IAC5B,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,uBAAuB;IAChC,SAAS,EAAE,0BAA0B;IACrC,cAAc,EAAE,+BAA+B;IAC/C,KAAK,EAAE,qBAAqB;IAC5B,SAAS,EAAE,yBAAyB;CAC5B,CAAC;AACX,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAK9E,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,sBAAsB,CAAC,CAAC;AAEtF,MAAM,UAAU,+BAA+B,CAAC,QAAiB;IAC/D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAEhF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;QAC3G,IAAI,OAAO,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,oBAAoB,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC;SAC5C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;SAC5C,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAA6B,KAAK,EAAE,WAAW,EAAE,EAAE;IAClF,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,oCAAoC,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAC1C,IAAkB,EAClB,kBAA4C,oBAAoB,EAChE,YAAkC;IAElC,OAAO,KAAK,EAAE,WAAW,EAAE,EAAE;QAC3B,IAAI,WAAW,KAAK,uBAAuB,EAAE,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,oBAAoB,EAAE,CAAC,EAAE,CAAC;QACrE,CAAC;QACD,IAAI,WAAW,KAAK,yBAAyB,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO;gBACL,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE;oBACf,SAAS,CAAC,EAAE,CAAC,CAAC;oBACd,IAAI,YAAY,EAAE,CAAC;wBACjB,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;4BACxC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;gCAAE,MAAM,YAAY,EAAE,CAAC;wBACtD,CAAC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC,CAAuD;aACzD,CAAC;QACJ,CAAC;QACD,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"extensions.js","sourceRoot":"","sources":["../src/extensions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EACL,wBAAwB,GAEzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EACL,8BAA8B,GAG/B,MAAM,gCAAgC,CAAC;AAExC,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AACvD,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AACnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AACnE,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,yBAAyB;IACpC,OAAO,EAAE,uBAAuB;IAChC,KAAK,EAAE,qBAAqB;IAC5B,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,uBAAuB;IAChC,GAAG,EAAE,mBAAmB;IACxB,SAAS,EAAE,0BAA0B;IACrC,cAAc,EAAE,+BAA+B;IAC/C,KAAK,EAAE,qBAAqB;IAC5B,YAAY,EAAE,6BAA6B;IAC3C,SAAS,EAAE,yBAAyB;CAC5B,CAAC;AACX,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAK9E,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,sBAAsB,CAAC,CAAC;AAEtF,MAAM,UAAU,+BAA+B,CAAC,QAAiB;IAC/D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAEhF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;QAC3G,IAAI,OAAO,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,oBAAoB,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC;SAC5C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;SAC5C,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAA6B,KAAK,EAAE,WAAW,EAAE,EAAE;IAClF,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,oCAAoC,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAC1C,IAA+C,EAC/C,YAA0B,EAC1B,kBAA4C,oBAAoB,EAChE,YAAkC;IAElC,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,iBAAgD,CAAC;IACrD,MAAM,SAAS,GAAG,wBAAwB,CAAC,gCAAgC,CAAC,YAAY,CAAC,EAAE;QACzF,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE;KACxD,CAAC,CAAC;IACH,OAAO,KAAK,EAAE,WAAW,EAAE,EAAE;QAC3B,IAAI,WAAW,KAAK,uBAAuB,EAAE,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,oBAAoB,EAAE,CAAC,EAAE,CAAC;QACrE,CAAC;QACD,IAAI,WAAW,KAAK,mBAAmB,EAAE,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,CAAC;QAChD,CAAC;QACD,IAAI,WAAW,KAAK,yBAAyB,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO;gBACL,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE;oBACf,SAAS,CAAC,EAAE,CAAC,CAAC;oBACd,8BAA8B,CAAC,EAAE,EAAE,IAAI,EAAE;wBACvC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,eAAe;wBAC1C,oBAAoB,EAAE,CAAC,QAAQ,EAAE,EAAE;4BACjC,iBAAiB,GAAG,QAAQ,CAAC;wBAC/B,CAAC;qBACF,CAAC,CAAC;oBACH,IAAI,YAAY,EAAE,CAAC;wBACjB,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;4BACxC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;gCAAE,MAAM,YAAY,EAAE,CAAC;wBACtD,CAAC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC,CAAuD;aACzD,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,KAAK,yBAAyB,EAAE,CAAC;YAC9C,eAAe,GAAG,IAAI,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/mcp/callback-server.d.ts

@@ -0,0 +1,11 @@
+export interface OAuthCallbackResult {
+    readonly code: string;
+    readonly iss?: string;
+}
+export interface OAuthCallbackReservation {
+    readonly redirectUri: string;
+    wait(): Promise<OAuthCallbackResult>;
+    release(): void;
+}
+export declare function reserveOAuthCallback(redirectUri: string, state: string, signal: AbortSignal, timeoutMs?: number): Promise<OAuthCallbackReservation>;
+//# sourceMappingURL=callback-server.d.ts.map

package/dist/mcp/callback-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback-server.d.ts","sourceRoot":"","sources":["../../src/mcp/callback-server.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,IAAI,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrC,OAAO,IAAI,IAAI,CAAC;CACjB;AAoBD,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,WAAW,EACnB,SAAS,SAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAenC"}

package/dist/mcp/callback-server.js

@@ -0,0 +1,221 @@
+import { createServer } from 'node:http';
+const DEFAULT_CALLBACK_TIMEOUT_MS = 5 * 60 * 1_000;
+const brokers = new Map();
+export async function reserveOAuthCallback(redirectUri, state, signal, timeoutMs = DEFAULT_CALLBACK_TIMEOUT_MS) {
+    if (!/^[A-Za-z0-9_-]{32,256}$/u.test(state))
+        throw new Error('OAuth state is invalid');
+    if (!Number.isInteger(timeoutMs) || timeoutMs <= 0)
+        throw new Error('OAuth callback timeout must be positive');
+    const endpoint = parseRedirectUri(redirectUri);
+    for (;;) {
+        let broker = brokers.get(endpoint.key);
+        if (!broker) {
+            broker = new EndpointBroker(endpoint);
+            brokers.set(endpoint.key, broker);
+        }
+        await broker.ready;
+        if (broker.accepting)
+            return broker.reserve(endpoint, state, signal, timeoutMs);
+        await broker.closed;
+    }
+}
+class EndpointBroker {
+    ready;
+    closed;
+    #endpoint;
+    #server;
+    #pending = new Map();
+    #accepting = true;
+    #resolveClosed;
+    constructor(endpoint) {
+        this.#endpoint = endpoint;
+        this.#server = createServer((request, response) => this.#handle(request, response));
+        this.closed = new Promise((resolve) => {
+            this.#resolveClosed = resolve;
+        });
+        this.ready = new Promise((resolve, reject) => {
+            const onError = (error) => {
+                this.#accepting = false;
+                brokers.delete(endpoint.key);
+                reject(new Error(`Could not start OAuth callback listener on ${endpoint.listenHost}:${endpoint.port}`, {
+                    cause: error,
+                }));
+                this.#resolveClosed();
+            };
+            this.#server.once('error', onError);
+            this.#server.listen(endpoint.port, endpoint.listenHost, () => {
+                this.#server.removeListener('error', onError);
+                this.#server.on('error', (error) => this.#failAll(error));
+                resolve();
+            });
+        });
+    }
+    get accepting() {
+        return this.#accepting;
+    }
+    reserve(endpoint, state, signal, timeoutMs) {
+        if (!this.#accepting)
+            throw new Error('OAuth callback listener is closing');
+        if (this.#pending.has(state))
+            throw new Error('OAuth callback state is already reserved');
+        signal.throwIfAborted();
+        let resolve;
+        let reject;
+        const promise = new Promise((resolvePromise, rejectPromise) => {
+            resolve = resolvePromise;
+            reject = rejectPromise;
+        });
+        const onAbort = () => this.#remove(state, abortReason(signal));
+        const timer = setTimeout(() => {
+            this.#remove(state, new Error('OAuth callback timed out'));
+        }, timeoutMs);
+        const cleanup = () => {
+            clearTimeout(timer);
+            signal.removeEventListener('abort', onAbort);
+        };
+        this.#pending.set(state, {
+            path: endpoint.path,
+            promise,
+            resolve,
+            reject,
+            cleanup,
+        });
+        signal.addEventListener('abort', onAbort, { once: true });
+        if (signal.aborted)
+            onAbort();
+        let released = false;
+        return {
+            redirectUri: endpoint.url.toString(),
+            wait: () => promise,
+            release: () => {
+                if (released)
+                    return;
+                released = true;
+                this.#remove(state, new Error('OAuth callback cancelled'));
+            },
+        };
+    }
+    #handle(request, response) {
+        setCallbackHeaders(response);
+        if (request.method !== 'GET' || !request.url) {
+            respond(response, 405, 'OAuth callback requires GET.');
+            return;
+        }
+        let url;
+        try {
+            url = new URL(request.url, this.#endpoint.url.origin);
+        }
+        catch {
+            respond(response, 400, 'Invalid OAuth callback.');
+            return;
+        }
+        const state = url.searchParams.get('state');
+        const pending = state ? this.#pending.get(state) : undefined;
+        if (!state || !pending || url.pathname !== pending.path) {
+            respond(response, 400, 'Invalid or expired OAuth callback.');
+            return;
+        }
+        const providerError = url.searchParams.get('error');
+        const code = url.searchParams.get('code');
+        if (providerError) {
+            this.#remove(state, new Error('OAuth authorization was denied'));
+            respond(response, 400, 'OAuth authorization was not completed. You can close this window.');
+            return;
+        }
+        if (!code) {
+            this.#remove(state, new Error('OAuth callback did not include an authorization code'));
+            respond(response, 400, 'OAuth callback did not include a code. You can close this window.');
+            return;
+        }
+        this.#pending.delete(state);
+        pending.cleanup();
+        pending.resolve({
+            code,
+            ...(url.searchParams.get('iss') === null ? {} : { iss: url.searchParams.get('iss') }),
+        });
+        respond(response, 200, 'OAuth authentication completed. You can close this window.');
+        this.#closeIfIdle();
+    }
+    #remove(state, error) {
+        const pending = this.#pending.get(state);
+        if (!pending)
+            return;
+        this.#pending.delete(state);
+        pending.cleanup();
+        pending.reject(error);
+        void pending.promise.catch(() => { });
+        this.#closeIfIdle();
+    }
+    #failAll(error) {
+        for (const state of [...this.#pending.keys()]) {
+            this.#remove(state, new Error('OAuth callback listener failed', { cause: error }));
+        }
+        this.#closeIfIdle();
+    }
+    #closeIfIdle() {
+        if (!this.#accepting || this.#pending.size > 0)
+            return;
+        this.#accepting = false;
+        setImmediate(() => {
+            if (this.#pending.size > 0) {
+                this.#accepting = true;
+                return;
+            }
+            this.#server.close(() => {
+                if (brokers.get(this.#endpoint.key) === this)
+                    brokers.delete(this.#endpoint.key);
+                this.#resolveClosed();
+            });
+        });
+    }
+}
+function parseRedirectUri(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch (error) {
+        throw new Error('OAuth redirectUri must be an absolute URL', { cause: error });
+    }
+    const hostname = url.hostname.toLowerCase();
+    const listenHost = hostname === '[::1]' || hostname === '::1'
+        ? '::1'
+        : hostname;
+    if (url.protocol !== 'http:'
+        || (listenHost !== '127.0.0.1' && listenHost !== '::1' && listenHost !== 'localhost')) {
+        throw new Error('OAuth redirectUri must use HTTP on localhost or a loopback address');
+    }
+    if (url.username || url.password || url.search || url.hash) {
+        throw new Error('OAuth redirectUri must not contain credentials, a query, or a fragment');
+    }
+    if (!url.port)
+        throw new Error('OAuth redirectUri must include an explicit port');
+    const port = Number.parseInt(url.port, 10);
+    if (!Number.isInteger(port) || port <= 0 || port > 65_535) {
+        throw new Error('OAuth redirectUri must include a valid port');
+    }
+    const path = url.pathname || '/';
+    return {
+        url,
+        listenHost,
+        port,
+        path,
+        key: `${listenHost}:${port}`,
+    };
+}
+function setCallbackHeaders(response) {
+    response.setHeader('cache-control', 'no-store');
+    response.setHeader('content-security-policy', "default-src 'none'; frame-ancestors 'none'; base-uri 'none'");
+    response.setHeader('content-type', 'text/plain; charset=utf-8');
+    response.setHeader('referrer-policy', 'no-referrer');
+    response.setHeader('x-content-type-options', 'nosniff');
+    response.setHeader('x-frame-options', 'DENY');
+}
+function respond(response, status, message) {
+    response.statusCode = status;
+    response.end(message);
+}
+function abortReason(signal) {
+    return signal.reason instanceof Error ? signal.reason : new Error('OAuth callback aborted');
+}
+//# sourceMappingURL=callback-server.js.map

package/dist/mcp/callback-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback-server.js","sourceRoot":"","sources":["../../src/mcp/callback-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAEjG,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AA6BnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,KAAa,EACb,MAAmB,EACnB,SAAS,GAAG,2BAA2B;IAEvC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACvF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC/G,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAE/C,SAAS,CAAC;QACR,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC;QACnB,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAChF,MAAM,MAAM,CAAC,MAAM,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,cAAc;IACT,KAAK,CAAgB;IACrB,MAAM,CAAgB;IACtB,SAAS,CAAoB;IAC7B,OAAO,CAAS;IAChB,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACvD,UAAU,GAAG,IAAI,CAAC;IAClB,cAAc,CAAc;IAE5B,YAAY,QAA2B;QACrC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACpC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;gBAC/B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;gBACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7B,MAAM,CAAC,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE;oBACrG,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC,CAAC;gBACJ,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,CAAC,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;gBAC3D,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9C,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1D,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,OAAO,CACL,QAA2B,EAC3B,KAAa,EACb,MAAmB,EACnB,SAAiB;QAEjB,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC1F,MAAM,CAAC,cAAc,EAAE,CAAC;QAExB,IAAI,OAA+C,CAAC;QACpD,IAAI,MAA+B,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAsB,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;YACjF,OAAO,GAAG,cAAc,CAAC;YACzB,MAAM,GAAG,aAAa,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC7D,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO;YACP,OAAO;YACP,MAAM;YACN,OAAO;SACR,CAAC,CAAC;QACH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAE9B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO;YACL,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE;YACpC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO;YACnB,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAC7D,CAAC;SACF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,OAAwB,EAAE,QAAwB;QACxD,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC7C,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,8BAA8B,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;YACxD,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,oCAAoC,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACjE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,mEAAmE,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC;YACvF,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,mEAAmE,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,OAAO,CAAC;YACd,IAAI;YACJ,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAE,EAAE,CAAC;SACvF,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,4DAA4D,CAAC,CAAC;QACrF,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,KAAY;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,QAAQ,CAAC,KAAY;QACnB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO;QACvD,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,YAAY,CAAC,GAAG,EAAE;YAChB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;gBACtB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI;oBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACjF,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,KAAK;QAC3D,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,QAAQ,CAAC;IACb,IACE,GAAG,CAAC,QAAQ,KAAK,OAAO;WACrB,CAAC,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,WAAW,CAAC,EACrF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC;IACjC,OAAO;QACL,GAAG;QACH,UAAU;QACV,IAAI;QACJ,IAAI;QACJ,GAAG,EAAE,GAAG,UAAU,IAAI,IAAI,EAAE;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAwB;IAClD,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,yBAAyB,EAAE,6DAA6D,CAAC,CAAC;IAC7G,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IAChE,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,OAAO,CAAC,QAAwB,EAAE,MAAc,EAAE,OAAe;IACxE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,WAAW,CAAC,MAAmB;IACtC,OAAO,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC9F,CAAC"}

package/dist/mcp/config.d.ts

@@ -0,0 +1,20 @@
+import type { AgentRuntime } from '@felan-ai/agent-core';
+import { type McpConfig } from '@felan-ai/ext-mcp';
+export interface LocalMcpOAuthConfig {
+    readonly clientId?: string;
+    readonly clientSecret?: string;
+    readonly clientSecretEnv?: string;
+    readonly scope?: string;
+    readonly redirectUri?: string;
+    readonly clientName?: string;
+    readonly clientUri?: string;
+    readonly authorizationParams?: Readonly<Record<string, string>>;
+}
+export interface LocalMcpConfig {
+    readonly config: McpConfig;
+    readonly oauth: Readonly<Record<string, LocalMcpOAuthConfig>>;
+    readonly warnings: readonly string[];
+}
+export declare function readLocalMcpConfig(runtime: AgentRuntime, agentDir: string): Promise<LocalMcpConfig>;
+export declare function validateLocalMcpConfig(value: unknown, source?: string): LocalMcpConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/mcp/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/mcp/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAEL,KAAK,SAAS,EACf,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAwCD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAIzB;AA2CD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,SAAa,GAAG,cAAc,CAgC1F"}