@frankieai/server 0.2.1 → 0.2.3

package/dist/chunk-NF6IJVES.js

@@ -0,0 +1,75 @@
+// src/config.ts
+import { readFile } from "fs/promises";
+import { resolve } from "path";
+import { parseFrankieConfig } from "@frankieai/core";
+var ConfigError = class extends Error {
+};
+async function loadConfigFromFile(path) {
+  const target = resolve(path ?? process.env["FRANKIE_CONFIG"] ?? "frankie.config.json");
+  let raw;
+  try {
+    raw = await readFile(target, "utf8");
+  } catch {
+    throw new ConfigError(
+      `Could not read Frankie config at ${target}. Set FRANKIE_CONFIG to point at your frankie.config.json.`
+    );
+  }
+  try {
+    return parseFrankieConfig(applyEnvOverrides(JSON.parse(raw)));
+  } catch (error) {
+    throw new ConfigError(`Invalid Frankie config at ${target}: ${error.message}`);
+  }
+}
+function applyEnvOverrides(raw, env = process.env) {
+  const out = { ...raw };
+  const model = { ...isRecord(out["model"]) ? out["model"] : {} };
+  if (env["FRANKIE_MODEL_PROVIDER"]) model["provider"] = env["FRANKIE_MODEL_PROVIDER"];
+  if (env["FRANKIE_MODEL"]) model["model"] = env["FRANKIE_MODEL"];
+  if (env["FRANKIE_MODEL_BASE_URL"]) model["baseUrl"] = env["FRANKIE_MODEL_BASE_URL"];
+  if (Object.keys(model).length > 0) out["model"] = model;
+  const auth = { ...isRecord(out["auth"]) ? out["auth"] : {} };
+  if (env["FRANKIE_ALLOWED_ORIGINS"]) {
+    auth["allowedOrigins"] = env["FRANKIE_ALLOWED_ORIGINS"].split(",").map((o) => o.trim()).filter(Boolean);
+  }
+  if (env["FRANKIE_PUBLISHABLE_KEY"]) auth["publishableKey"] = env["FRANKIE_PUBLISHABLE_KEY"];
+  if (Object.keys(auth).length > 0) out["auth"] = auth;
+  return out;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function resolveSecrets(config, env = process.env) {
+  const missing = [];
+  const jwtSecret = env[config.auth.jwtSecretEnv];
+  if (!config.auth.jwksUrl && !jwtSecret) missing.push(config.auth.jwtSecretEnv);
+  const sessionSecret = env[config.auth.sessionSecretEnv];
+  if (!sessionSecret) missing.push(config.auth.sessionSecretEnv);
+  const providerApiKey = env[config.model.apiKeyEnv];
+  if (!providerApiKey) missing.push(config.model.apiKeyEnv);
+  if (missing.length) {
+    throw new ConfigError(`Missing required environment variables: ${missing.join(", ")}`);
+  }
+  if (sessionSecret.length < 32) {
+    throw new ConfigError(`${config.auth.sessionSecretEnv} must be at least 32 characters.`);
+  }
+  return {
+    config,
+    secrets: {
+      jwtSecret,
+      sessionSecret,
+      providerApiKey
+    }
+  };
+}
+async function loadResolvedConfig(path) {
+  return resolveSecrets(await loadConfigFromFile(path));
+}
+
+export {
+  ConfigError,
+  loadConfigFromFile,
+  applyEnvOverrides,
+  resolveSecrets,
+  loadResolvedConfig
+};
+//# sourceMappingURL=chunk-NF6IJVES.js.map

package/dist/chunk-NF6IJVES.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config.ts"],"sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport { parseFrankieConfig, type FrankieConfig } from \"@frankieai/core\";\n\n/**\n * Secrets never live in the config file — the file names the env var that\n * holds each one. `ResolvedConfig` is the config plus the resolved values.\n */\nexport interface ResolvedConfig {\n  config: FrankieConfig;\n  secrets: {\n    /** HS256 secret the host signs end-user tokens with. Absent when using JWKS. */\n    jwtSecret?: string;\n    /** Signs Frankie's own session tokens. */\n    sessionSecret: string;\n    /** Key for the model provider named in `model.provider`. */\n    providerApiKey: string;\n  };\n}\n\nexport class ConfigError extends Error {}\n\nexport async function loadConfigFromFile(path?: string): Promise<FrankieConfig> {\n  const target = resolve(path ?? process.env[\"FRANKIE_CONFIG\"] ?? \"frankie.config.json\");\n  let raw: string;\n  try {\n    raw = await readFile(target, \"utf8\");\n  } catch {\n    throw new ConfigError(\n      `Could not read Frankie config at ${target}. Set FRANKIE_CONFIG to point at your frankie.config.json.`,\n    );\n  }\n  try {\n    return parseFrankieConfig(applyEnvOverrides(JSON.parse(raw) as Record<string, unknown>));\n  } catch (error) {\n    throw new ConfigError(`Invalid Frankie config at ${target}: ${(error as Error).message}`);\n  }\n}\n\n/**\n * A handful of fields have to move with the deployment rather than the config\n * file — the model and the origin allowlist are what an operator most often\n * wants to flip without a redeploy.\n */\nexport function applyEnvOverrides(\n  raw: Record<string, unknown>,\n  env: NodeJS.ProcessEnv = process.env,\n): Record<string, unknown> {\n  const out = { ...raw };\n\n  const model = { ...(isRecord(out[\"model\"]) ? out[\"model\"] : {}) };\n  if (env[\"FRANKIE_MODEL_PROVIDER\"]) model[\"provider\"] = env[\"FRANKIE_MODEL_PROVIDER\"];\n  if (env[\"FRANKIE_MODEL\"]) model[\"model\"] = env[\"FRANKIE_MODEL\"];\n  if (env[\"FRANKIE_MODEL_BASE_URL\"]) model[\"baseUrl\"] = env[\"FRANKIE_MODEL_BASE_URL\"];\n  if (Object.keys(model).length > 0) out[\"model\"] = model;\n\n  const auth = { ...(isRecord(out[\"auth\"]) ? out[\"auth\"] : {}) };\n  if (env[\"FRANKIE_ALLOWED_ORIGINS\"]) {\n    auth[\"allowedOrigins\"] = env[\"FRANKIE_ALLOWED_ORIGINS\"].split(\",\").map((o) => o.trim()).filter(Boolean);\n  }\n  if (env[\"FRANKIE_PUBLISHABLE_KEY\"]) auth[\"publishableKey\"] = env[\"FRANKIE_PUBLISHABLE_KEY\"];\n  if (Object.keys(auth).length > 0) out[\"auth\"] = auth;\n\n  return out;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nexport function resolveSecrets(config: FrankieConfig, env: NodeJS.ProcessEnv = process.env): ResolvedConfig {\n  const missing: string[] = [];\n\n  const jwtSecret = env[config.auth.jwtSecretEnv];\n  if (!config.auth.jwksUrl && !jwtSecret) missing.push(config.auth.jwtSecretEnv);\n\n  const sessionSecret = env[config.auth.sessionSecretEnv];\n  if (!sessionSecret) missing.push(config.auth.sessionSecretEnv);\n\n  const providerApiKey = env[config.model.apiKeyEnv];\n  if (!providerApiKey) missing.push(config.model.apiKeyEnv);\n\n  if (missing.length) {\n    throw new ConfigError(`Missing required environment variables: ${missing.join(\", \")}`);\n  }\n\n  if (sessionSecret!.length < 32) {\n    throw new ConfigError(`${config.auth.sessionSecretEnv} must be at least 32 characters.`);\n  }\n\n  return {\n    config,\n    secrets: {\n      jwtSecret,\n      sessionSecret: sessionSecret!,\n      providerApiKey: providerApiKey!,\n    },\n  };\n}\n\nexport async function loadResolvedConfig(path?: string): Promise<ResolvedConfig> {\n  return resolveSecrets(await loadConfigFromFile(path));\n}\n"],"mappings":";AAAA,SAAS,gBAAgB;AACzB,SAAS,eAAe;AACxB,SAAS,0BAA8C;AAkBhD,IAAM,cAAN,cAA0B,MAAM;AAAC;AAExC,eAAsB,mBAAmB,MAAuC;AAC9E,QAAM,SAAS,QAAQ,QAAQ,QAAQ,IAAI,gBAAgB,KAAK,qBAAqB;AACrF,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,SAAS,QAAQ,MAAM;AAAA,EACrC,QAAQ;AACN,UAAM,IAAI;AAAA,MACR,oCAAoC,MAAM;AAAA,IAC5C;AAAA,EACF;AACA,MAAI;AACF,WAAO,mBAAmB,kBAAkB,KAAK,MAAM,GAAG,CAA4B,CAAC;AAAA,EACzF,SAAS,OAAO;AACd,UAAM,IAAI,YAAY,6BAA6B,MAAM,KAAM,MAAgB,OAAO,EAAE;AAAA,EAC1F;AACF;AAOO,SAAS,kBACd,KACA,MAAyB,QAAQ,KACR;AACzB,QAAM,MAAM,EAAE,GAAG,IAAI;AAErB,QAAM,QAAQ,EAAE,GAAI,SAAS,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,EAAG;AAChE,MAAI,IAAI,wBAAwB,EAAG,OAAM,UAAU,IAAI,IAAI,wBAAwB;AACnF,MAAI,IAAI,eAAe,EAAG,OAAM,OAAO,IAAI,IAAI,eAAe;AAC9D,MAAI,IAAI,wBAAwB,EAAG,OAAM,SAAS,IAAI,IAAI,wBAAwB;AAClF,MAAI,OAAO,KAAK,KAAK,EAAE,SAAS,EAAG,KAAI,OAAO,IAAI;AAElD,QAAM,OAAO,EAAE,GAAI,SAAS,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,IAAI,CAAC,EAAG;AAC7D,MAAI,IAAI,yBAAyB,GAAG;AAClC,SAAK,gBAAgB,IAAI,IAAI,yBAAyB,EAAE,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAAA,EACxG;AACA,MAAI,IAAI,yBAAyB,EAAG,MAAK,gBAAgB,IAAI,IAAI,yBAAyB;AAC1F,MAAI,OAAO,KAAK,IAAI,EAAE,SAAS,EAAG,KAAI,MAAM,IAAI;AAEhD,SAAO;AACT;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEO,SAAS,eAAe,QAAuB,MAAyB,QAAQ,KAAqB;AAC1G,QAAM,UAAoB,CAAC;AAE3B,QAAM,YAAY,IAAI,OAAO,KAAK,YAAY;AAC9C,MAAI,CAAC,OAAO,KAAK,WAAW,CAAC,UAAW,SAAQ,KAAK,OAAO,KAAK,YAAY;AAE7E,QAAM,gBAAgB,IAAI,OAAO,KAAK,gBAAgB;AACtD,MAAI,CAAC,cAAe,SAAQ,KAAK,OAAO,KAAK,gBAAgB;AAE7D,QAAM,iBAAiB,IAAI,OAAO,MAAM,SAAS;AACjD,MAAI,CAAC,eAAgB,SAAQ,KAAK,OAAO,MAAM,SAAS;AAExD,MAAI,QAAQ,QAAQ;AAClB,UAAM,IAAI,YAAY,2CAA2C,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,EACvF;AAEA,MAAI,cAAe,SAAS,IAAI;AAC9B,UAAM,IAAI,YAAY,GAAG,OAAO,KAAK,gBAAgB,kCAAkC;AAAA,EACzF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,mBAAmB,MAAwC;AAC/E,SAAO,eAAe,MAAM,mBAAmB,IAAI,CAAC;AACtD;","names":[]}

package/dist/control-server.js

@@ -1,13 +1,15 @@
 #!/usr/bin/env node
 import {
   createControlApp
-} from "./chunk-UZSHFMJN.js";
+} from "./chunk-37VMCQCI.js";
 import {
+  createFrankieApp,
   resolveStores
-} from "./chunk-WFENEYOV.js";
+} from "./chunk-MKN5663J.js";
 
 // src/control-server.ts
 import { serve } from "@hono/node-server";
+import { Hono } from "hono";
 async function main() {
   const port = Number(process.env["PORT"] ?? process.env["CONTROL_PORT"] ?? 8081);
   const host = process.env["HOST"] ?? "0.0.0.0";
@@ -16,7 +18,9 @@ async function main() {
     process.exit(1);
   }
   const { tenants: store, sessions, describe } = await resolveStores();
-  const app = createControlApp({ store, sessions });
+  const app = new Hono();
+  app.route("/", createControlApp({ store, sessions }));
+  app.route("/", createFrankieApp({ tenants: store, sessions }));
   serve({ fetch: app.fetch, port, hostname: host }, () => {
     console.log(
       JSON.stringify({

package/dist/control-server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/control-server.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * The control plane, as its own process: the admin API the dashboard and the\n * setup CLI talk to. It writes tenants into FRANKIE_TENANTS_DIR — the same\n * directory the data-plane server reads — so what you create here is served\n * there with no further wiring.\n *\n *   FRANKIE_ADMIN_TOKEN=…  FRANKIE_TENANTS_DIR=./.frankie/tenants  \\\n *   pnpm --filter @frankieai/server start:control\n */\nimport { serve } from \"@hono/node-server\";\nimport { createControlApp } from \"./control/app.js\";\nimport { resolveStores } from \"./control/resolve-store.js\";\n\nasync function main(): Promise<void> {\n  const port = Number(process.env[\"PORT\"] ?? process.env[\"CONTROL_PORT\"] ?? 8081);\n  const host = process.env[\"HOST\"] ?? \"0.0.0.0\";\n\n  if (!process.env[\"FRANKIE_ADMIN_TOKEN\"]) {\n    console.error(\"[frankie] Set FRANKIE_ADMIN_TOKEN to run the control plane.\");\n    process.exit(1);\n  }\n\n  const { tenants: store, sessions, describe } = await resolveStores();\n  const app = createControlApp({ store, sessions });\n\n  serve({ fetch: app.fetch, port, hostname: host }, () => {\n    console.log(\n      JSON.stringify({\n        ts: new Date().toISOString(),\n        level: \"info\",\n        event: \"control_listening\",\n        store: describe,\n        url: `http://${host}:${port}`,\n      }),\n    );\n  });\n}\n\nvoid main();\n"],"mappings":";;;;;;;;;AAUA,SAAS,aAAa;AAItB,eAAe,OAAsB;AACnC,QAAM,OAAO,OAAO,QAAQ,IAAI,MAAM,KAAK,QAAQ,IAAI,cAAc,KAAK,IAAI;AAC9E,QAAM,OAAO,QAAQ,IAAI,MAAM,KAAK;AAEpC,MAAI,CAAC,QAAQ,IAAI,qBAAqB,GAAG;AACvC,YAAQ,MAAM,6DAA6D;AAC3E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,EAAE,SAAS,OAAO,UAAU,SAAS,IAAI,MAAM,cAAc;AACnE,QAAM,MAAM,iBAAiB,EAAE,OAAO,SAAS,CAAC;AAEhD,QAAM,EAAE,OAAO,IAAI,OAAO,MAAM,UAAU,KAAK,GAAG,MAAM;AACtD,YAAQ;AAAA,MACN,KAAK,UAAU;AAAA,QACb,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC3B,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO;AAAA,QACP,KAAK,UAAU,IAAI,IAAI,IAAI;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAEA,KAAK,KAAK;","names":[]}
+{"version":3,"sources":["../src/control-server.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * The control plane, as its own process: the admin API the dashboard and the\n * setup CLI talk to. It writes tenants into FRANKIE_TENANTS_DIR — the same\n * directory the data-plane server reads — so what you create here is served\n * there with no further wiring.\n *\n *   FRANKIE_ADMIN_TOKEN=…  FRANKIE_TENANTS_DIR=./.frankie/tenants  \\\n *   pnpm --filter @frankieai/server start:control\n */\nimport { serve } from \"@hono/node-server\";\nimport { Hono } from \"hono\";\nimport { createFrankieApp } from \"./app.js\";\nimport { createControlApp } from \"./control/app.js\";\nimport { resolveStores } from \"./control/resolve-store.js\";\n\nasync function main(): Promise<void> {\n  const port = Number(process.env[\"PORT\"] ?? process.env[\"CONTROL_PORT\"] ?? 8081);\n  const host = process.env[\"HOST\"] ?? \"0.0.0.0\";\n\n  if (!process.env[\"FRANKIE_ADMIN_TOKEN\"]) {\n    console.error(\"[frankie] Set FRANKIE_ADMIN_TOKEN to run the control plane.\");\n    process.exit(1);\n  }\n\n  const { tenants: store, sessions, describe } = await resolveStores();\n  const app = new Hono();\n  app.route(\"/\", createControlApp({ store, sessions }));\n  app.route(\"/\", createFrankieApp({ tenants: store, sessions }));\n\n  serve({ fetch: app.fetch, port, hostname: host }, () => {\n    console.log(\n      JSON.stringify({\n        ts: new Date().toISOString(),\n        level: \"info\",\n        event: \"control_listening\",\n        store: describe,\n        url: `http://${host}:${port}`,\n      }),\n    );\n  });\n}\n\nvoid main();\n"],"mappings":";;;;;;;;;;AAUA,SAAS,aAAa;AACtB,SAAS,YAAY;AAKrB,eAAe,OAAsB;AACnC,QAAM,OAAO,OAAO,QAAQ,IAAI,MAAM,KAAK,QAAQ,IAAI,cAAc,KAAK,IAAI;AAC9E,QAAM,OAAO,QAAQ,IAAI,MAAM,KAAK;AAEpC,MAAI,CAAC,QAAQ,IAAI,qBAAqB,GAAG;AACvC,YAAQ,MAAM,6DAA6D;AAC3E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,EAAE,SAAS,OAAO,UAAU,SAAS,IAAI,MAAM,cAAc;AACnE,QAAM,MAAM,IAAI,KAAK;AACrB,MAAI,MAAM,KAAK,iBAAiB,EAAE,OAAO,SAAS,CAAC,CAAC;AACpD,MAAI,MAAM,KAAK,iBAAiB,EAAE,SAAS,OAAO,SAAS,CAAC,CAAC;AAE7D,QAAM,EAAE,OAAO,IAAI,OAAO,MAAM,UAAU,KAAK,GAAG,MAAM;AACtD,YAAQ;AAAA,MACN,KAAK,UAAU;AAAA,QACb,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC3B,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO;AAAA,QACP,KAAK,UAAU,IAAI,IAAI,IAAI;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAEA,KAAK,KAAK;","names":[]}

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 import { Hono } from 'hono';
-import { FrankieConfig, AuthConfig, WorkspaceSkill, ChatAttachment, FrankieServerEvent, McpServerConfig, ToolPolicy, ApiSourceConfig } from '@frankieai/core';
+import { FrankieConfig, AuthConfig, WorkspaceSkill, HostToolRequest, HostToolResult, ChatAttachment, FrankieServerEvent, McpServerConfig, ToolPolicy, ApiToolInventory, ApiSourceConfig } from '@frankieai/core';
+export { matchPath } from '@frankieai/core';
 import { AgentMessage, AgentTool } from '@earendil-works/pi-agent-core';
 import { JWTPayload } from 'jose';
 import { Models, Model, Api } from '@earendil-works/pi-ai';
@@ -138,6 +139,12 @@ interface SessionStore {
     listByUser(tenantId: string, userId: string): Promise<ChatSession[]>;
     /** Workspace-owner history view. This is only exposed through the authenticated control plane. */
     listByTenant(tenantId: string): Promise<ChatSession[]>;
+    /**
+     * Non-expired conversation count per tenant id, in one pass. Used by the
+     * workspace directory to show a workspace as "Live" once it has real chats —
+     * cheaper than a listByTenant call per workspace.
+     */
+    countsByTenant(): Promise<Record<string, number>>;
     update(id: string, patch: Partial<ChatSession>): Promise<void>;
     delete(id: string): Promise<void>;
 }
@@ -149,6 +156,7 @@ declare class MemorySessionStore implements SessionStore {
     get(id: string): Promise<ChatSession | undefined>;
     listByUser(tenantId: string, userId: string): Promise<ChatSession[]>;
     listByTenant(tenantId: string): Promise<ChatSession[]>;
+    countsByTenant(): Promise<Record<string, number>>;
     update(id: string, patch: Partial<ChatSession>): Promise<void>;
     delete(id: string): Promise<void>;
     private evictExpired;
@@ -285,8 +293,35 @@ interface RepositoryInstallRecord {
     pullRequestUrl?: string;
     requiresJwtSecret: boolean;
     failureMessage?: string;
+    /**
+     * Last-known rich readiness state, persisted from live GitHub inspection so the
+     * dashboard renders the current step instantly on reload and can fall back to
+     * it when GitHub is briefly unreachable (a stale token no longer wipes progress).
+     */
+    step?: string;
+    pullRequestState?: "draft" | "open" | "closed" | "merged";
+    checkRollup?: "success" | "pending" | "failure" | "none";
+    checkedAt?: string;
     updatedAt: string;
 }
+/**
+ * A Vercel integration installed for this workspace. The access token is a
+ * secret like `jwtSecret`: stored here, never returned by the public shape.
+ */
+interface VercelLinkRecord {
+    /** Token minted by the integration's OAuth exchange. Integration tokens don't expire. */
+    accessToken: string;
+    /** Vercel's id for this installation (`configurationId`), for support and uninstall. */
+    installationId: string;
+    /** Set when the integration was installed on a team rather than a personal account. */
+    teamId?: string;
+    /** The Vercel project linked to this workspace's repository, once matched. */
+    projectId?: string;
+    projectName?: string;
+    connectedAt: string;
+}
+/** `VercelLinkRecord` with the token stripped — what the dashboard sees. */
+type PublicVercelLink = Omit<VercelLinkRecord, "accessToken">;
 interface TenantRecord {
     apiSpecSync?: Record<string, {
         repository: string;
@@ -294,6 +329,11 @@ interface TenantRecord {
         commitSha: string;
         syncedAt: string;
     }>;
+    /** Last live connectivity/auth check per API source, so the dashboard doesn't need to re-run it on every load. */
+    apiConnectivityChecks?: Record<string, {
+        checkedAt: string;
+        ok: boolean;
+    }>;
     skillHistory?: FrankieConfig["skills"];
     id: string;
     /** Who owns this tenant — the dashboard user's stable id (e.g. "github:42"). */
@@ -305,12 +345,15 @@ interface TenantRecord {
     locked?: boolean;
     /** Durable repository-install state surfaced in the dashboard and setup chat. */
     repositoryInstall?: RepositoryInstallRecord;
+    /** Deployment provider connection, when the workspace has connected Vercel. */
+    vercel?: VercelLinkRecord;
     createdAt: string;
     updatedAt: string;
 }
 /** A tenant record with its secrets stripped — safe to return from the API. */
 interface PublicTenant {
     apiSpecSync?: TenantRecord["apiSpecSync"];
+    apiConnectivityChecks?: TenantRecord["apiConnectivityChecks"];
     skillHistory: FrankieConfig["skills"];
     skills: TenantRecord["config"]["skills"];
     id: string;
@@ -319,6 +362,8 @@ interface PublicTenant {
     publishableKey: string;
     allowedOrigins: string[];
     allowAnonymous: boolean;
+    /** How the hosted MCP treats a caller's bearer: verify it as a JWT, or forward it opaquely. */
+    userCredential: "jwt" | "opaque";
     connection: "knowledge" | "mcp" | "openapi";
     mcpServers: string[];
     apis: string[];
@@ -326,6 +371,8 @@ interface PublicTenant {
     connections: Array<{
         kind: "mcp" | "openapi";
         name: string;
+        /** Friendly label for the dashboard; `name` remains the stable identifier. */
+        displayName?: string;
         /** OpenAPI spec URL/path. */
         spec?: string;
         /** MCP server URL. */
@@ -337,6 +384,8 @@ interface PublicTenant {
             method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
             path: string;
             summary?: string;
+            /** True for a write operation whose only auth is a static/shared credential, not the calling user's own identity. */
+            authGap: boolean;
         }>;
         discoveredTools?: Array<{
             name: string;
@@ -344,7 +393,13 @@ interface PublicTenant {
         }>;
         selectedTools?: string[];
         exposeAsMcp?: boolean;
+        /** Where the source's operations run: "server" (Frankie's server) or "client" (the user's browser). */
+        execution?: "server" | "client";
         forwardsToken: boolean;
+        /** The header the user's credential is forwarded to your API as (empty when none). */
+        forwardTokenAs?: string;
+        /** Security scheme names with a credential configured (OpenAPI only). Never the values themselves. */
+        securedSchemes?: string[];
         /** Whether this source is currently enabled for chat. */
         enabled: boolean;
         /** Configuration health, not a simulated runtime probe. */
@@ -354,6 +409,8 @@ interface PublicTenant {
     locked: boolean;
     /** A submitted or in-progress SDK installation for this workspace. */
     repositoryInstall?: RepositoryInstallRecord;
+    /** The connected Vercel installation and matched project — never its token. */
+    vercel?: PublicVercelLink;
     /** The customer's brand theme for the widget, so the dashboard can edit it. */
     theme: TenantRecord["config"]["theme"];
     /** Opt-in chat capabilities (attachments, model picker) for the dashboard to edit. */
@@ -559,13 +616,28 @@ declare class PostgresSessionStore implements SessionStore {
     get(id: string): Promise<ChatSession | undefined>;
     listByUser(tenantId: string, userId: string): Promise<ChatSession[]>;
     listByTenant(tenantId: string): Promise<ChatSession[]>;
+    countsByTenant(): Promise<Record<string, number>>;
     update(id: string, patch: Partial<ChatSession>): Promise<void>;
     delete(id: string): Promise<void>;
 }
 
 interface SkillGenerationInput {
     goal: string;
+    /** Approved tool identifiers this skill may use. Validated against on return. */
     tools: string[];
+    /**
+     * What each tool in `tools` actually does (method/path/summary, or an MCP
+     * tool's own description) — see `toolDescriptions()` in @frankieai/core.
+     * Without this the model has nothing to write concrete steps from but a
+     * bare identifier like `api__product__listItems`. Optional so older
+     * callers (and tests) that only have bare ids still work; the resulting
+     * draft is just less specific.
+     */
+    toolDetails?: Array<{
+        id: string;
+        description: string;
+    }>;
+    /** Present when refining an existing skill rather than starting fresh. */
     instructions?: string;
 }
 declare function generateSkill(resolved: ResolvedConfig, input: SkillGenerationInput): Promise<WorkspaceSkill>;
@@ -579,6 +651,16 @@ interface ControlOptions {
     sessions?: SessionStore;
     /** Bearer token that gates the admin API. A stand-in for real user auth. */
     adminToken?: string;
+    /**
+     * Optional shared secret for signed owner assertions. When set (here or via
+     * FRANKIE_CONTROL_ASSERTION_SECRET), the acting owner must be proven by a
+     * short-lived JWT the dashboard signs with the same secret — a plaintext
+     * `x-frankie-owner` header alone is refused. This closes the gap where the
+     * admin token by itself could select an arbitrary owner. Off by default, so
+     * existing deployments and unscoped admin-token callers are unaffected until
+     * the secret is configured on both the dashboard and the control plane.
+     */
+    ownerAssertionSecret?: string;
     logger?: (event: Record<string, unknown>) => void;
 }
 /**
@@ -591,6 +673,22 @@ interface ControlOptions {
  */
 declare function createControlApp(options: ControlOptions): Hono;
 
+/**
+ * The per-turn handle an API tool uses to run itself in the user's browser
+ * instead of on Frankie's server. `available` says whether a live widget
+ * channel is bound for this session — false over the hosted MCP endpoint or any
+ * headless caller, where a browser-scoped call is impossible.
+ */
+interface ClientToolBridge {
+    readonly available: boolean;
+    /**
+     * Ask the browser to perform one HTTP call and resolve with its outcome.
+     * Rejects if no channel is bound, the turn is aborted, or the browser does
+     * not answer before `timeoutMs`.
+     */
+    execute(name: string, request: HostToolRequest, signal?: AbortSignal): Promise<HostToolResult>;
+}
+
 interface RunTurnParams {
     config: FrankieConfig;
     session: ChatSession;
@@ -604,6 +702,8 @@ interface RunTurnParams {
     modelOverride?: Model<Api>;
     /** Files attached to this turn, already validated against the feature flags. */
     attachments?: ChatAttachment[];
+    /** Browser channel for API sources marked `execution: "client"`, when a widget is connected. */
+    clientBridge?: ClientToolBridge;
     signal: AbortSignal;
     /** Called with the full transcript once the turn settles, to persist it. */
     onTranscript?: (messages: AgentMessage[]) => void;
@@ -656,6 +756,13 @@ interface BuildApiToolsOptions {
     session: ChatSession;
     policy: ToolPolicy;
     fetchImpl?: typeof fetch;
+    /**
+     * Bridge to the user's browser for sources marked `execution: "client"`. When
+     * absent (headless callers, the hosted MCP endpoint), a client-mode operation
+     * has no way to run and reports that clearly instead of falling back to a
+     * server-side call the user's session would not authorize.
+     */
+    clientBridge?: ClientToolBridge;
     onWarning?: (message: string, detail: Record<string, unknown>) => void;
 }
 interface ApiToolSet {
@@ -664,6 +771,8 @@ interface ApiToolSet {
         name: string;
         error: string;
     }>;
+    /** One entry per source that built successfully, for chat-facing visibility. */
+    apis: ApiToolInventory[];
 }
 /**
  * Turn a tenant's OpenAPI document into agent tools.
@@ -680,14 +789,10 @@ interface OpenApiDoc {
     }>;
     paths?: Record<string, unknown>;
     components?: Record<string, unknown>;
+    /** Document-wide default security requirement; each operation may override it. */
+    security?: unknown[];
 }
 declare function loadSpec(spec: string, fetchImpl?: typeof fetch): Promise<OpenApiDoc>;
-/**
- * `/projects/*` matches one path segment; `/projects/**` matches any depth and
- * the base path itself, since a tenant writing that plainly means "this part of
- * the API" rather than "everything under it but not it".
- */
-declare function matchPath(glob: string, path: string): boolean;
 
 interface CollectToolsOptions {
     config: FrankieConfig;
@@ -695,6 +800,8 @@ interface CollectToolsOptions {
     fetchImpl?: typeof fetch;
     /** Base URL of the account API for the built-in workspaceAdmin tools. */
     accountApiUrl?: string;
+    /** Browser channel for API sources marked `execution: "client"`. */
+    clientBridge?: ClientToolBridge;
     onWarning?: (message: string, detail: Record<string, unknown>) => void;
 }
 interface CollectedTools {
@@ -704,6 +811,8 @@ interface CollectedTools {
         name: string;
         error: string;
     }>;
+    /** OpenAPI sources that built successfully this turn, for chat-facing visibility. */
+    apis: ApiToolInventory[];
     close(): Promise<void>;
 }
 /**
@@ -743,4 +852,4 @@ declare function buildForwardedHeaders(source: ForwardingConfig, session: ChatSe
  */
 declare function buildSystemPrompt(config: FrankieConfig, session: ChatSession, availableTools?: string[]): string;
 
-export { API_TOOL_PREFIX, type ApiToolSet, AuthError, type BuildApiToolsOptions, type ChatSession, type CollectToolsOptions, type CollectedTools, ConfigError, type ConnectMcpOptions, type ControlOptions, type ControlStore, type CreateAppOptions, FileTenantStore, type ForwardingConfig, MCP_TOOL_PREFIX, type McpConnection, type McpHostOptions, MemoryRateLimiter, MemorySessionStore, MemoryTenantStore, ModelResolutionError, OpenApiError, PostgresSessionStore, PostgresTenantStore, type PublicTenant, type Queryable, type RateLimiter, type ResolvedConfig, type ResolvedModel, type ResolvedStore, type ResolvedStores, type RunTurnParams, type SessionStore, SingleTenantStore, type TenantRecord, TenantRegistry, type TenantRuntime, type TenantStore, TokenService, type VerifiedUser, anonymousUser, applyEnvOverrides, buildApiTools, buildForwardedHeaders, buildSystemPrompt, collectTools, connectMcpTools, createControlApp, createFrankieApp, createMcpHostApp, isOriginAllowed, loadConfigFromFile, loadResolvedConfig, loadSpec, matchPath, modelHasApi, newSessionId, resolveModel, resolveSecrets, resolveStores, resolveTenantStore, runTurn, safeEqual, toPublicTenant };
+export { API_TOOL_PREFIX, type ApiToolSet, AuthError, type BuildApiToolsOptions, type ChatSession, type CollectToolsOptions, type CollectedTools, ConfigError, type ConnectMcpOptions, type ControlOptions, type ControlStore, type CreateAppOptions, FileTenantStore, type ForwardingConfig, MCP_TOOL_PREFIX, type McpConnection, type McpHostOptions, MemoryRateLimiter, MemorySessionStore, MemoryTenantStore, ModelResolutionError, OpenApiError, PostgresSessionStore, PostgresTenantStore, type PublicTenant, type Queryable, type RateLimiter, type ResolvedConfig, type ResolvedModel, type ResolvedStore, type ResolvedStores, type RunTurnParams, type SessionStore, SingleTenantStore, type TenantRecord, TenantRegistry, type TenantRuntime, type TenantStore, TokenService, type VerifiedUser, anonymousUser, applyEnvOverrides, buildApiTools, buildForwardedHeaders, buildSystemPrompt, collectTools, connectMcpTools, createControlApp, createFrankieApp, createMcpHostApp, isOriginAllowed, loadConfigFromFile, loadResolvedConfig, loadSpec, modelHasApi, newSessionId, resolveModel, resolveSecrets, resolveStores, resolveTenantStore, runTurn, safeEqual, toPublicTenant };

package/dist/index.js

@@ -1,21 +1,13 @@
 import {
   createControlApp
-} from "./chunk-UZSHFMJN.js";
+} from "./chunk-37VMCQCI.js";
 import {
   ConfigError,
-  MemoryTenantStore,
-  SingleTenantStore,
-  TenantRegistry,
   applyEnvOverrides,
-  buildSystemPrompt,
-  collectTools,
-  createFrankieApp,
-  createMcpHostApp,
   loadConfigFromFile,
   loadResolvedConfig,
-  resolveSecrets,
-  runTurn
-} from "./chunk-XCIM765D.js";
+  resolveSecrets
+} from "./chunk-NF6IJVES.js";
 import {
   API_TOOL_PREFIX,
   AuthError,
@@ -23,15 +15,22 @@ import {
   MCP_TOOL_PREFIX,
   MemoryRateLimiter,
   MemorySessionStore,
+  MemoryTenantStore,
   ModelResolutionError,
   OpenApiError,
   PostgresSessionStore,
   PostgresTenantStore,
+  SingleTenantStore,
+  TenantRegistry,
   TokenService,
   anonymousUser,
   buildApiTools,
   buildForwardedHeaders,
+  buildSystemPrompt,
+  collectTools,
   connectMcpTools,
+  createFrankieApp,
+  createMcpHostApp,
   isOriginAllowed,
   loadSpec,
   matchPath,
@@ -40,9 +39,10 @@ import {
   resolveModel,
   resolveStores,
   resolveTenantStore,
+  runTurn,
   safeEqual,
   toPublicTenant
-} from "./chunk-WFENEYOV.js";
+} from "./chunk-MKN5663J.js";
 export {
   API_TOOL_PREFIX,
   AuthError,

package/dist/server.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   ConfigError,
-  createFrankieApp,
   loadResolvedConfig
-} from "./chunk-XCIM765D.js";
+} from "./chunk-NF6IJVES.js";
 import {
   ModelResolutionError,
+  createFrankieApp,
   resolveStores
-} from "./chunk-WFENEYOV.js";
+} from "./chunk-MKN5663J.js";
 
 // src/server.ts
 import { serve } from "@hono/node-server";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frankieai/server",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Frankie cloud agent server — auth, sessions, MCP wiring and streaming for the embedded onboarding agent.",
   "license": "MIT",
   "type": "module",
@@ -28,7 +28,7 @@
     "yaml": "^2.9.0",
     "zod": "^4.0.0",
     "pg": "^8.13.0",
-    "@frankieai/core": "0.2.1"
+    "@frankieai/core": "0.2.3"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",
@@ -39,6 +39,9 @@
     "pg-mem": "^3.0.5"
   },
   "module": "./dist/index.js",
+  "engines": {
+    "node": ">=20"
+  },
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",