@frankieai/server 0.2.0 → 0.2.1

package/dist/{chunk-R5XGMQR4.js → chunk-WFENEYOV.js}

@@ -84,115 +84,6 @@ function modelHasApi(model, api) {
   return hasApi(model, api);
 }
 
-// src/auth.ts
-import { createRemoteJWKSet, jwtVerify, SignJWT } from "jose";
-var AuthError = class extends Error {
-  constructor(message, code = "unauthorized") {
-    super(message);
-    this.code = code;
-  }
-  code;
-};
-var TokenService = class {
-  constructor(auth, secrets) {
-    this.auth = auth;
-    this.sessionKey = new TextEncoder().encode(secrets.sessionSecret);
-    this.userKey = secrets.jwtSecret ? new TextEncoder().encode(secrets.jwtSecret) : void 0;
-    if (!this.userKey && !auth.jwksUrl && !auth.allowAnonymous) {
-      throw new Error("Frankie auth needs either a JWT secret, a JWKS URL, or allowAnonymous.");
-    }
-  }
-  auth;
-  sessionKey;
-  userKey;
-  jwks;
-  /** Verify a host-signed user token. Throws `AuthError` on any failure. */
-  async verifyUserToken(token) {
-    const options = {
-      ...this.auth.jwtIssuer ? { issuer: this.auth.jwtIssuer } : {},
-      ...this.auth.jwtAudience ? { audience: this.auth.jwtAudience } : {},
-      clockTolerance: 30
-    };
-    let payload;
-    try {
-      if (this.auth.jwksUrl) {
-        this.jwks ??= createRemoteJWKSet(new URL(this.auth.jwksUrl));
-        ({ payload } = await jwtVerify(token, this.jwks, options));
-      } else if (this.userKey) {
-        ({ payload } = await jwtVerify(token, this.userKey, { ...options, algorithms: ["HS256"] }));
-      } else {
-        throw new AuthError("This tenant is not configured to accept user tokens.");
-      }
-    } catch (error) {
-      if (error instanceof AuthError) throw error;
-      throw new AuthError(`Could not verify the user token: ${error.message}`);
-    }
-    const subject = typeof payload.sub === "string" ? payload.sub : void 0;
-    if (!subject) throw new AuthError("The user token has no `sub` claim.");
-    return {
-      id: subject,
-      displayName: stringClaim(payload, "name") ?? stringClaim(payload, "preferred_username"),
-      email: stringClaim(payload, "email"),
-      anonymous: false,
-      claims: payload
-    };
-  }
-  /** Mint the bearer token the widget uses for the rest of the conversation. */
-  async issueSessionToken(input) {
-    const expiresAt = new Date(Date.now() + this.auth.sessionTtlSeconds * 1e3);
-    const token = await new SignJWT({
-      sid: input.sessionId,
-      uid: input.user.id,
-      anon: input.user.anonymous,
-      tid: input.tenantId
-    }).setProtectedHeader({ alg: "HS256", typ: "JWT" }).setIssuedAt().setIssuer("frankie").setAudience("frankie-widget").setExpirationTime(Math.floor(expiresAt.getTime() / 1e3)).sign(this.sessionKey);
-    return { token, expiresAt };
-  }
-  async verifySessionToken(token) {
-    try {
-      const { payload } = await jwtVerify(token, this.sessionKey, {
-        algorithms: ["HS256"],
-        issuer: "frankie",
-        audience: "frankie-widget"
-      });
-      const sessionId = stringClaim(payload, "sid");
-      const userId = stringClaim(payload, "uid");
-      const tenantId = stringClaim(payload, "tid");
-      if (!sessionId || !userId || !tenantId) throw new AuthError("Malformed session token.");
-      return { sessionId, userId, tenantId };
-    } catch (error) {
-      if (error instanceof AuthError) throw error;
-      throw new AuthError("Your chat session has expired. Reload the page to start a new one.");
-    }
-  }
-};
-function stringClaim(payload, key) {
-  const value = payload[key];
-  return typeof value === "string" ? value : void 0;
-}
-function isOriginAllowed(origin, allowed) {
-  if (allowed.length === 0) return origin === void 0;
-  if (!origin) return false;
-  return allowed.some((entry) => normaliseOrigin(entry) === normaliseOrigin(origin));
-}
-function normaliseOrigin(value) {
-  try {
-    const url = new URL(value);
-    return url.origin.toLowerCase();
-  } catch {
-    return value.trim().replace(/\/+$/, "").toLowerCase();
-  }
-}
-function safeEqual(a, b) {
-  if (a.length !== b.length) return false;
-  let diff = 0;
-  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
-  return diff === 0;
-}
-function anonymousUser(seed) {
-  return { id: `anon_${seed}`, anonymous: true, claims: {} };
-}
-
 // src/agent/headers.ts
 function buildForwardedHeaders(source, session) {
   const headers = { ...source.headers };
@@ -211,8 +102,8 @@ function buildForwardedHeaders(source, session) {
   return headers;
 }
 
-// src/agent/mcp.ts
-import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+// src/agent/openapi.ts
+import { readFile } from "fs/promises";
 
 // src/connector-fetch.ts
 import { lookup } from "dns/promises";
@@ -307,145 +198,9 @@ async function readLimited(stream, max) {
 var trustedLocalConnectors = () => process.env["FRANKIE_TRUST_LOCAL_CONNECTORS"] === "true";
 var connectorFetch = (input, init) => trustedLocalConnectors() ? fetch(input, init) : publicConnectorFetch(input, init);
 
-// src/agent/mcp.ts
-import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
-import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+// src/agent/openapi.ts
 import { Type } from "@earendil-works/pi-ai";
 import { describeTool, evaluateToolPolicy } from "@frankieai/core";
-var MCP_TOOL_PREFIX = "mcp__";
-async function connectMcpTools(options) {
-  const clients = [];
-  const tools = [];
-  const failed = [];
-  const results = await Promise.all(
-    options.servers.filter((server) => server.enabled).map(async (server) => {
-      try {
-        return { server, client: await connectOne(server, options) };
-      } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        options.onWarning?.("mcp_connect_failed", { server: server.name, error: message });
-        failed.push({ name: server.name, error: message });
-        return null;
-      }
-    })
-  );
-  for (const result of results) {
-    if (!result) continue;
-    clients.push(result.client);
-    try {
-      const listed = await withTimeout(result.client.listTools(), options.connectTimeoutMs ?? 1e4, "MCP tool discovery timed out.");
-      for (const tool of listed.tools) {
-        if (result.server.selectedTools && !result.server.selectedTools.includes(tool.name)) continue;
-        const name = `${MCP_TOOL_PREFIX}${result.server.name}__${tool.name}`;
-        if (!evaluateToolPolicy(name, options.policy).allowed) continue;
-        tools.push(adaptTool(name, tool, result.client, options.callTimeoutMs));
-      }
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      options.onWarning?.("mcp_list_tools_failed", { server: result.server.name, error: message });
-      failed.push({ name: result.server.name, error: message });
-    }
-  }
-  return {
-    tools,
-    failed,
-    async close() {
-      await Promise.all(clients.map((client) => client.close().catch(() => void 0)));
-    }
-  };
-}
-async function connectOne(server, options) {
-  const headers = buildForwardedHeaders(server, options.session);
-  const url = new URL(server.url);
-  const transport = server.transport === "sse" ? new SSEClientTransport(url, { requestInit: { headers }, fetch: connectorFetch, eventSourceInit: { fetch: connectorFetch } }) : new StreamableHTTPClientTransport(url, { requestInit: { headers }, fetch: connectorFetch });
-  const client = new Client({ name: "frankie", version: "0.1.0" }, { capabilities: {} });
-  try {
-    await withTimeout(
-      client.connect(transport),
-      options.connectTimeoutMs ?? 1e4,
-      `MCP server "${server.name}" did not complete the handshake in time.`
-    );
-  } catch (error) {
-    await client.close().catch(() => void 0);
-    throw error;
-  }
-  return client;
-}
-function adaptTool(name, tool, client, callTimeoutMs = 6e4) {
-  return {
-    name,
-    label: describeTool(name, {}),
-    description: tool.description ?? `The ${tool.name} tool.`,
-    // MCP gives us JSON Schema; `Type.Unsafe` passes it through untouched
-    // rather than round-tripping it into a typebox equivalent and losing
-    // whatever the server actually declared.
-    parameters: Type.Unsafe(normaliseSchema(tool.inputSchema)),
-    async execute(_toolCallId, params, signal) {
-      const response = await withTimeout(
-        client.callTool(
-          { name: tool.name, arguments: params ?? {} },
-          void 0,
-          signal ? { signal } : void 0
-        ),
-        callTimeoutMs,
-        `The ${tool.name} tool did not respond in time.`
-      );
-      const content = toAgentContent(response.content);
-      if (response.isError) {
-        throw new Error(textOf(content) || `The ${tool.name} tool reported an error.`);
-      }
-      return { content, details: response.structuredContent ?? null };
-    }
-  };
-}
-function normaliseSchema(schema) {
-  if (typeof schema !== "object" || schema === null || Array.isArray(schema)) {
-    return { type: "object", properties: {} };
-  }
-  const copy = { ...schema };
-  if (copy["type"] !== "object") copy["type"] = "object";
-  if (typeof copy["properties"] !== "object" || copy["properties"] === null) copy["properties"] = {};
-  return copy;
-}
-function toAgentContent(content) {
-  if (!Array.isArray(content)) return [{ type: "text", text: "" }];
-  const out = [];
-  for (const part of content) {
-    if (typeof part !== "object" || part === null) continue;
-    const block = part;
-    if (block["type"] === "text" && typeof block["text"] === "string") {
-      out.push({ type: "text", text: block["text"] });
-    } else if (block["type"] === "image" && typeof block["data"] === "string" && typeof block["mimeType"] === "string") {
-      out.push({ type: "image", data: block["data"], mimeType: block["mimeType"] });
-    } else if (block["type"] === "resource") {
-      const resource = block["resource"];
-      const text = typeof resource === "object" && resource !== null && typeof resource["text"] === "string" ? String(resource["text"]) : "[resource omitted]";
-      out.push({ type: "text", text });
-    }
-  }
-  return out.length > 0 ? out : [{ type: "text", text: "" }];
-}
-function textOf(content) {
-  return content.map((part) => part.type === "text" ? part.text : "").filter(Boolean).join("\n").trim();
-}
-async function withTimeout(promise, ms, message) {
-  let timer;
-  try {
-    return await Promise.race([
-      promise,
-      new Promise((_resolve, reject) => {
-        timer = setTimeout(() => reject(new Error(message)), ms);
-      })
-    ]);
-  } finally {
-    if (timer) clearTimeout(timer);
-  }
-}
-
-// src/agent/openapi.ts
-import { readFile } from "fs/promises";
-import { Type as Type2 } from "@earendil-works/pi-ai";
-import { describeTool as describeTool2, evaluateToolPolicy as evaluateToolPolicy2 } from "@frankieai/core";
 import { parse as parseYaml } from "yaml";
 var API_TOOL_PREFIX = "api__";
 var OpenApiError = class extends Error {
@@ -465,7 +220,7 @@ async function inspectApiCapabilities(source, options = {}) {
       const operationId = typeof operation["operationId"] === "string" ? operation["operationId"] : `${method}_${slug(path)}`;
       if (source.operations.length > 0 && !source.operations.includes(operationId)) continue;
       const toolName = `${API_TOOL_PREFIX}${source.name}__${sanitize(operationId)}`;
-      if (options.policy && !evaluateToolPolicy2(toolName, options.policy).allowed) continue;
+      if (options.policy && !evaluateToolPolicy(toolName, options.policy).allowed) continue;
       const summary = typeof operation["summary"] === "string" ? operation["summary"] : void 0;
       capabilities.push({ operationId, method: httpMethod, path, ...summary ? { summary } : {} });
     }
@@ -509,14 +264,14 @@ async function buildOne(source, options) {
       if (source.operations.length > 0 && !source.operations.includes(operationId)) continue;
       if (source.selectedTools && !source.selectedTools.includes(operationId)) continue;
       const name = `${API_TOOL_PREFIX}${source.name}__${sanitize(operationId)}`;
-      if (!evaluateToolPolicy2(name, options.policy).allowed) continue;
+      if (!evaluateToolPolicy(name, options.policy).allowed) continue;
       const params = collectParameters(doc, item, operation);
       const body = collectRequestBody(doc, operation);
       tools.push({
         name,
-        label: describeTool2(name, {}),
+        label: describeTool(name, {}),
         description: describeOperation(operation, method, path),
-        parameters: Type2.Unsafe(toolSchema(params, body)),
+        parameters: Type.Unsafe(toolSchema(params, body)),
         async execute(_id, args, signal) {
           const input = isRecord(args) ? args : {};
           const url = buildUrl(baseUrl, path, params, input);
@@ -616,75 +371,321 @@ function toolSchema(params, body) {
     required.push("body");
   }
   return {
-    type: "object",
-    properties,
-    ...required.length ? { required } : {},
-    additionalProperties: false
+    type: "object",
+    properties,
+    ...required.length ? { required } : {},
+    additionalProperties: false
+  };
+}
+function buildUrl(baseUrl, path, params, input) {
+  let resolved = path;
+  for (const param of params) {
+    if (param.location !== "path") continue;
+    const value = input[param.name];
+    resolved = resolved.replace(`{${param.name}}`, encodeURIComponent(String(value ?? "")));
+  }
+  const url = new URL(`${baseUrl}${resolved.startsWith("/") ? "" : "/"}${resolved}`);
+  for (const param of params) {
+    if (param.location !== "query") continue;
+    const value = input[param.name];
+    if (value === void 0 || value === null) continue;
+    if (Array.isArray(value)) {
+      for (const entry of value) url.searchParams.append(param.name, String(entry));
+    } else {
+      url.searchParams.set(param.name, String(value));
+    }
+  }
+  return url.toString();
+}
+function describeOperation(operation, method, path) {
+  const summary = typeof operation["summary"] === "string" ? operation["summary"] : "";
+  const description = typeof operation["description"] === "string" ? operation["description"] : "";
+  const text = [summary, description].filter(Boolean).join(" - ");
+  return text || `${method.toUpperCase()} ${path}`;
+}
+function resolveRef(doc, node, depth = 0) {
+  if (!isRecord(node) || depth > 10) return node;
+  const ref = node["$ref"];
+  if (typeof ref !== "string" || !ref.startsWith("#/")) return node;
+  let current = doc;
+  for (const segment of ref.slice(2).split("/")) {
+    if (!isRecord(current)) return void 0;
+    current = current[segment.replace(/~1/g, "/").replace(/~0/g, "~")];
+  }
+  return resolveRef(doc, current, depth + 1);
+}
+function matchPath(glob, path) {
+  const escaped = glob.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+  const trailingDeep = escaped.endsWith("/**");
+  const body = trailingDeep ? escaped.slice(0, -3) : escaped;
+  const pattern = body.split("**").map((chunk) => chunk.replace(/\*/g, "[^/]*")).join(".*") + (trailingDeep ? "(?:/.*)?" : "");
+  return new RegExp(`^${pattern}$`).test(path);
+}
+function sanitize(value) {
+  return value.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, 48);
+}
+function slug(path) {
+  return path.replace(/[{}]/g, "").replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_|_$/g, "");
+}
+function truncate(value, max) {
+  return value.length <= max ? value : `${value.slice(0, max)}
+[truncated]`;
+}
+function asArray(value) {
+  return Array.isArray(value) ? value : [];
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+// src/agent/mcp.ts
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { Type as Type2 } from "@earendil-works/pi-ai";
+import { describeTool as describeTool2, evaluateToolPolicy as evaluateToolPolicy2 } from "@frankieai/core";
+var MCP_TOOL_PREFIX = "mcp__";
+async function connectMcpTools(options) {
+  const clients = [];
+  const tools = [];
+  const failed = [];
+  const results = await Promise.all(
+    options.servers.filter((server) => server.enabled).map(async (server) => {
+      try {
+        return { server, client: await connectOne(server, options) };
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        options.onWarning?.("mcp_connect_failed", { server: server.name, error: message });
+        failed.push({ name: server.name, error: message });
+        return null;
+      }
+    })
+  );
+  for (const result of results) {
+    if (!result) continue;
+    clients.push(result.client);
+    try {
+      const listed = await withTimeout(result.client.listTools(), options.connectTimeoutMs ?? 1e4, "MCP tool discovery timed out.");
+      for (const tool of listed.tools) {
+        if (result.server.selectedTools && !result.server.selectedTools.includes(tool.name)) continue;
+        const name = `${MCP_TOOL_PREFIX}${result.server.name}__${tool.name}`;
+        if (!evaluateToolPolicy2(name, options.policy).allowed) continue;
+        tools.push(adaptTool(name, tool, result.client, options.callTimeoutMs));
+      }
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      options.onWarning?.("mcp_list_tools_failed", { server: result.server.name, error: message });
+      failed.push({ name: result.server.name, error: message });
+    }
+  }
+  return {
+    tools,
+    failed,
+    async close() {
+      await Promise.all(clients.map((client) => client.close().catch(() => void 0)));
+    }
+  };
+}
+async function connectOne(server, options) {
+  const headers = buildForwardedHeaders(server, options.session);
+  const url = new URL(server.url);
+  const transport = server.transport === "sse" ? new SSEClientTransport(url, { requestInit: { headers }, fetch: connectorFetch, eventSourceInit: { fetch: connectorFetch } }) : new StreamableHTTPClientTransport(url, { requestInit: { headers }, fetch: connectorFetch });
+  const client = new Client({ name: "frankie", version: "0.1.0" }, { capabilities: {} });
+  try {
+    await withTimeout(
+      client.connect(transport),
+      options.connectTimeoutMs ?? 1e4,
+      `MCP server "${server.name}" did not complete the handshake in time.`
+    );
+  } catch (error) {
+    await client.close().catch(() => void 0);
+    throw error;
+  }
+  return client;
+}
+function adaptTool(name, tool, client, callTimeoutMs = 6e4) {
+  return {
+    name,
+    label: describeTool2(name, {}),
+    description: tool.description ?? `The ${tool.name} tool.`,
+    // MCP gives us JSON Schema; `Type.Unsafe` passes it through untouched
+    // rather than round-tripping it into a typebox equivalent and losing
+    // whatever the server actually declared.
+    parameters: Type2.Unsafe(normaliseSchema(tool.inputSchema)),
+    async execute(_toolCallId, params, signal) {
+      const response = await withTimeout(
+        client.callTool(
+          { name: tool.name, arguments: params ?? {} },
+          void 0,
+          signal ? { signal } : void 0
+        ),
+        callTimeoutMs,
+        `The ${tool.name} tool did not respond in time.`
+      );
+      const content = toAgentContent(response.content);
+      if (response.isError) {
+        throw new Error(textOf(content) || `The ${tool.name} tool reported an error.`);
+      }
+      return { content, details: response.structuredContent ?? null };
+    }
   };
 }
-function buildUrl(baseUrl, path, params, input) {
-  let resolved = path;
-  for (const param of params) {
-    if (param.location !== "path") continue;
-    const value = input[param.name];
-    resolved = resolved.replace(`{${param.name}}`, encodeURIComponent(String(value ?? "")));
+function normaliseSchema(schema) {
+  if (typeof schema !== "object" || schema === null || Array.isArray(schema)) {
+    return { type: "object", properties: {} };
   }
-  const url = new URL(`${baseUrl}${resolved.startsWith("/") ? "" : "/"}${resolved}`);
-  for (const param of params) {
-    if (param.location !== "query") continue;
-    const value = input[param.name];
-    if (value === void 0 || value === null) continue;
-    if (Array.isArray(value)) {
-      for (const entry of value) url.searchParams.append(param.name, String(entry));
-    } else {
-      url.searchParams.set(param.name, String(value));
+  const copy = { ...schema };
+  if (copy["type"] !== "object") copy["type"] = "object";
+  if (typeof copy["properties"] !== "object" || copy["properties"] === null) copy["properties"] = {};
+  return copy;
+}
+function toAgentContent(content) {
+  if (!Array.isArray(content)) return [{ type: "text", text: "" }];
+  const out = [];
+  for (const part of content) {
+    if (typeof part !== "object" || part === null) continue;
+    const block = part;
+    if (block["type"] === "text" && typeof block["text"] === "string") {
+      out.push({ type: "text", text: block["text"] });
+    } else if (block["type"] === "image" && typeof block["data"] === "string" && typeof block["mimeType"] === "string") {
+      out.push({ type: "image", data: block["data"], mimeType: block["mimeType"] });
+    } else if (block["type"] === "resource") {
+      const resource = block["resource"];
+      const text = typeof resource === "object" && resource !== null && typeof resource["text"] === "string" ? String(resource["text"]) : "[resource omitted]";
+      out.push({ type: "text", text });
     }
   }
-  return url.toString();
+  return out.length > 0 ? out : [{ type: "text", text: "" }];
 }
-function describeOperation(operation, method, path) {
-  const summary = typeof operation["summary"] === "string" ? operation["summary"] : "";
-  const description = typeof operation["description"] === "string" ? operation["description"] : "";
-  const text = [summary, description].filter(Boolean).join(" - ");
-  return text || `${method.toUpperCase()} ${path}`;
+function textOf(content) {
+  return content.map((part) => part.type === "text" ? part.text : "").filter(Boolean).join("\n").trim();
 }
-function resolveRef(doc, node, depth = 0) {
-  if (!isRecord(node) || depth > 10) return node;
-  const ref = node["$ref"];
-  if (typeof ref !== "string" || !ref.startsWith("#/")) return node;
-  let current = doc;
-  for (const segment of ref.slice(2).split("/")) {
-    if (!isRecord(current)) return void 0;
-    current = current[segment.replace(/~1/g, "/").replace(/~0/g, "~")];
+async function withTimeout(promise, ms, message) {
+  let timer;
+  try {
+    return await Promise.race([
+      promise,
+      new Promise((_resolve, reject) => {
+        timer = setTimeout(() => reject(new Error(message)), ms);
+      })
+    ]);
+  } finally {
+    if (timer) clearTimeout(timer);
   }
-  return resolveRef(doc, current, depth + 1);
-}
-function matchPath(glob, path) {
-  const escaped = glob.replace(/[.+^${}()|[\]\\]/g, "\\$&");
-  const trailingDeep = escaped.endsWith("/**");
-  const body = trailingDeep ? escaped.slice(0, -3) : escaped;
-  const pattern = body.split("**").map((chunk) => chunk.replace(/\*/g, "[^/]*")).join(".*") + (trailingDeep ? "(?:/.*)?" : "");
-  return new RegExp(`^${pattern}$`).test(path);
 }
-function sanitize(value) {
-  return value.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, 48);
+
+// src/auth.ts
+import { createRemoteJWKSet, jwtVerify, SignJWT } from "jose";
+var AuthError = class extends Error {
+  constructor(message, code = "unauthorized") {
+    super(message);
+    this.code = code;
+  }
+  code;
+};
+var TokenService = class {
+  constructor(auth, secrets) {
+    this.auth = auth;
+    this.sessionKey = new TextEncoder().encode(secrets.sessionSecret);
+    this.userKey = secrets.jwtSecret ? new TextEncoder().encode(secrets.jwtSecret) : void 0;
+    if (!this.userKey && !auth.jwksUrl && !auth.allowAnonymous) {
+      throw new Error("Frankie auth needs either a JWT secret, a JWKS URL, or allowAnonymous.");
+    }
+  }
+  auth;
+  sessionKey;
+  userKey;
+  jwks;
+  /** Verify a host-signed user token. Throws `AuthError` on any failure. */
+  async verifyUserToken(token) {
+    const options = {
+      ...this.auth.jwtIssuer ? { issuer: this.auth.jwtIssuer } : {},
+      ...this.auth.jwtAudience ? { audience: this.auth.jwtAudience } : {},
+      clockTolerance: 30
+    };
+    let payload;
+    try {
+      if (this.auth.jwksUrl) {
+        this.jwks ??= createRemoteJWKSet(new URL(this.auth.jwksUrl));
+        ({ payload } = await jwtVerify(token, this.jwks, options));
+      } else if (this.userKey) {
+        ({ payload } = await jwtVerify(token, this.userKey, { ...options, algorithms: ["HS256"] }));
+      } else {
+        throw new AuthError("This tenant is not configured to accept user tokens.");
+      }
+    } catch (error) {
+      if (error instanceof AuthError) throw error;
+      throw new AuthError(`Could not verify the user token: ${error.message}`);
+    }
+    const subject = typeof payload.sub === "string" ? payload.sub : void 0;
+    if (!subject) throw new AuthError("The user token has no `sub` claim.");
+    return {
+      id: subject,
+      displayName: stringClaim(payload, "name") ?? stringClaim(payload, "preferred_username"),
+      email: stringClaim(payload, "email"),
+      anonymous: false,
+      claims: payload
+    };
+  }
+  /** Mint the bearer token the widget uses for the rest of the conversation. */
+  async issueSessionToken(input) {
+    const expiresAt = new Date(Date.now() + this.auth.sessionTtlSeconds * 1e3);
+    const token = await new SignJWT({
+      sid: input.sessionId,
+      uid: input.user.id,
+      anon: input.user.anonymous,
+      tid: input.tenantId
+    }).setProtectedHeader({ alg: "HS256", typ: "JWT" }).setIssuedAt().setIssuer("frankie").setAudience("frankie-widget").setExpirationTime(Math.floor(expiresAt.getTime() / 1e3)).sign(this.sessionKey);
+    return { token, expiresAt };
+  }
+  async verifySessionToken(token) {
+    try {
+      const { payload } = await jwtVerify(token, this.sessionKey, {
+        algorithms: ["HS256"],
+        issuer: "frankie",
+        audience: "frankie-widget"
+      });
+      const sessionId = stringClaim(payload, "sid");
+      const userId = stringClaim(payload, "uid");
+      const tenantId = stringClaim(payload, "tid");
+      if (!sessionId || !userId || !tenantId) throw new AuthError("Malformed session token.");
+      return { sessionId, userId, tenantId };
+    } catch (error) {
+      if (error instanceof AuthError) throw error;
+      throw new AuthError("Your chat session has expired. Reload the page to start a new one.");
+    }
+  }
+};
+function stringClaim(payload, key) {
+  const value = payload[key];
+  return typeof value === "string" ? value : void 0;
 }
-function slug(path) {
-  return path.replace(/[{}]/g, "").replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_|_$/g, "");
+function isOriginAllowed(origin, allowed) {
+  if (allowed.length === 0) return origin === void 0;
+  if (!origin) return false;
+  return allowed.some((entry) => normaliseOrigin(entry) === normaliseOrigin(origin));
 }
-function truncate(value, max) {
-  return value.length <= max ? value : `${value.slice(0, max)}
-[truncated]`;
+function normaliseOrigin(value) {
+  try {
+    const url = new URL(value);
+    return url.origin.toLowerCase();
+  } catch {
+    return value.trim().replace(/\/+$/, "").toLowerCase();
+  }
 }
-function asArray(value) {
-  return Array.isArray(value) ? value : [];
+function safeEqual(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
 }
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+function anonymousUser(seed) {
+  return { id: `anon_${seed}`, anonymous: true, claims: {} };
 }
 
 // src/control/store.ts
-import { mkdir, readFile as readFile2, readdir, rm, writeFile } from "fs/promises";
+import { mkdir, readFile as readFile2, readdir, rename, rm, writeFile } from "fs/promises";
+import { randomUUID } from "crypto";
 import { join, resolve } from "path";
 import { parseFrankieConfig } from "@frankieai/core";
 var MEMBERS_FILE = "__members.json";
@@ -692,6 +693,7 @@ function toPublicTenant(record) {
   const { config } = record;
   return {
     skillHistory: record.skillHistory ?? [],
+    ...record.apiSpecSync ? { apiSpecSync: record.apiSpecSync } : {},
     skills: config.skills,
     id: record.id,
     ...record.ownerId ? { ownerId: record.ownerId } : {},
@@ -736,6 +738,40 @@ function toPublicTenant(record) {
   };
 }
 var FileTenantStore = class _FileTenantStore {
+  async listOrganizations() {
+    await this.load();
+    return [...new Set([...this.byId.values()].flatMap((record) => record.ownerId ? [record.ownerId] : []).concat([...this.members.values()].map((member) => member.org)))].sort();
+  }
+  adminPath(ownerId) {
+    if (!/^github:[1-9]\d*$/.test(ownerId)) throw new Error("Invalid platform user ID.");
+    return join(this.dir, "platform-admins", ownerId.slice(7) + ".json");
+  }
+  async getPlatformAdmin(ownerId) {
+    if (!/^github:[1-9]\d*$/.test(ownerId)) return null;
+    try {
+      return JSON.parse(await readFile2(this.adminPath(ownerId), "utf8"));
+    } catch (error) {
+      if (error.code === "ENOENT") return null;
+      throw error;
+    }
+  }
+  async listPlatformAdmins() {
+    const dir = join(this.dir, "platform-admins");
+    await mkdir(dir, { recursive: true });
+    const files = (await readdir(dir)).filter((name) => /^[1-9]\d*\.json$/.test(name));
+    const records = await Promise.all(files.map((file) => this.getPlatformAdmin("github:" + file.slice(0, -5))));
+    return records.filter((record) => Boolean(record));
+  }
+  async putPlatformAdmin(admin) {
+    const path = this.adminPath(admin.ownerId);
+    await mkdir(join(this.dir, "platform-admins"), { recursive: true });
+    const temporary = path + "." + randomUUID() + ".tmp";
+    await writeFile(temporary, JSON.stringify(admin), { mode: 384 });
+    await rename(temporary, path);
+  }
+  async deletePlatformAdmin(ownerId) {
+    await rm(this.adminPath(ownerId), { force: true });
+  }
   dir;
   providerKeyEnv;
   env;
@@ -878,6 +914,9 @@ var PostgresTenantStore = class {
   }
   /** Create the table if it isn't there yet. Safe to call repeatedly. */
   async init() {
+    await this.db.query(`CREATE TABLE IF NOT EXISTS frankie_platform_admins (
+      owner_id text PRIMARY KEY, login text, granted_by text NOT NULL, created_at text NOT NULL
+    )`);
     await this.db.query(
       `CREATE TABLE IF NOT EXISTS frankie_tenants (
          id text PRIMARY KEY,
@@ -910,6 +949,36 @@ var PostgresTenantStore = class {
       createdAt: String(row.created_at)
     };
   }
+  adminRow(row) {
+    return { ownerId: String(row.owner_id), ...row.login ? { login: String(row.login) } : {}, grantedBy: String(row.granted_by), createdAt: String(row.created_at) };
+  }
+  async listOrganizations() {
+    await this.ensureReady();
+    const { rows } = await this.db.query("SELECT owner_id AS org FROM frankie_tenants WHERE owner_id IS NOT NULL UNION SELECT org FROM frankie_org_members");
+    return rows.map((row) => String(row.org)).sort();
+  }
+  async listPlatformAdmins() {
+    await this.ensureReady();
+    const { rows } = await this.db.query("SELECT * FROM frankie_platform_admins ORDER BY created_at ASC");
+    return rows.map((row) => this.adminRow(row));
+  }
+  async getPlatformAdmin(ownerId) {
+    await this.ensureReady();
+    const { rows } = await this.db.query("SELECT * FROM frankie_platform_admins WHERE owner_id = $1", [ownerId]);
+    return rows[0] ? this.adminRow(rows[0]) : null;
+  }
+  async putPlatformAdmin(admin) {
+    await this.ensureReady();
+    await this.db.query(
+      `INSERT INTO frankie_platform_admins (owner_id, login, granted_by, created_at)
+      VALUES ($1, $2, $3, $4) ON CONFLICT (owner_id) DO NOTHING`,
+      [admin.ownerId, admin.login ?? null, admin.grantedBy, admin.createdAt]
+    );
+  }
+  async deletePlatformAdmin(ownerId) {
+    await this.ensureReady();
+    await this.db.query("DELETE FROM frankie_platform_admins WHERE owner_id = $1", [ownerId]);
+  }
   async listMembers(org) {
     await this.ensureReady();
     const { rows } = await this.db.query(
@@ -1008,7 +1077,7 @@ var PostgresTenantStore = class {
 };
 
 // src/sessions.ts
-import { randomUUID } from "crypto";
+import { randomUUID as randomUUID2 } from "crypto";
 var MemorySessionStore = class {
   constructor(ttlMs = 6 * 60 * 60 * 1e3) {
     this.ttlMs = ttlMs;
@@ -1050,7 +1119,7 @@ var MemorySessionStore = class {
   }
 };
 function newSessionId() {
-  return randomUUID();
+  return randomUUID2();
 }
 
 // src/postgres-sessions.ts
@@ -1171,20 +1240,20 @@ export {
   resolveModel,
   resolveModelChoice,
   modelHasApi,
-  AuthError,
-  TokenService,
-  isOriginAllowed,
-  safeEqual,
-  anonymousUser,
   buildForwardedHeaders,
-  MCP_TOOL_PREFIX,
-  connectMcpTools,
   API_TOOL_PREFIX,
   OpenApiError,
   inspectApiCapabilities,
   buildApiTools,
   loadSpec,
   matchPath,
+  MCP_TOOL_PREFIX,
+  connectMcpTools,
+  AuthError,
+  TokenService,
+  isOriginAllowed,
+  safeEqual,
+  anonymousUser,
   toPublicTenant,
   FileTenantStore,
   PostgresTenantStore,
@@ -1194,4 +1263,4 @@ export {
   resolveStores,
   resolveTenantStore
 };
-//# sourceMappingURL=chunk-R5XGMQR4.js.map
+//# sourceMappingURL=chunk-WFENEYOV.js.map