@frankieai/server 0.2.2 → 0.2.3

package/dist/control-server.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   createControlApp
-} from "./chunk-NSOMFNTK.js";
+} from "./chunk-37VMCQCI.js";
 import {
   createFrankieApp,
   resolveStores
-} from "./chunk-JOADNB5J.js";
+} from "./chunk-MKN5663J.js";
 
 // src/control-server.ts
 import { serve } from "@hono/node-server";

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { Hono } from 'hono';
-import { FrankieConfig, AuthConfig, WorkspaceSkill, ChatAttachment, FrankieServerEvent, McpServerConfig, ToolPolicy, ApiToolInventory, ApiSourceConfig } from '@frankieai/core';
+import { FrankieConfig, AuthConfig, WorkspaceSkill, HostToolRequest, HostToolResult, ChatAttachment, FrankieServerEvent, McpServerConfig, ToolPolicy, ApiToolInventory, ApiSourceConfig } from '@frankieai/core';
 export { matchPath } from '@frankieai/core';
 import { AgentMessage, AgentTool } from '@earendil-works/pi-agent-core';
 import { JWTPayload } from 'jose';
@@ -304,6 +304,24 @@ interface RepositoryInstallRecord {
     checkedAt?: string;
     updatedAt: string;
 }
+/**
+ * A Vercel integration installed for this workspace. The access token is a
+ * secret like `jwtSecret`: stored here, never returned by the public shape.
+ */
+interface VercelLinkRecord {
+    /** Token minted by the integration's OAuth exchange. Integration tokens don't expire. */
+    accessToken: string;
+    /** Vercel's id for this installation (`configurationId`), for support and uninstall. */
+    installationId: string;
+    /** Set when the integration was installed on a team rather than a personal account. */
+    teamId?: string;
+    /** The Vercel project linked to this workspace's repository, once matched. */
+    projectId?: string;
+    projectName?: string;
+    connectedAt: string;
+}
+/** `VercelLinkRecord` with the token stripped — what the dashboard sees. */
+type PublicVercelLink = Omit<VercelLinkRecord, "accessToken">;
 interface TenantRecord {
     apiSpecSync?: Record<string, {
         repository: string;
@@ -327,6 +345,8 @@ interface TenantRecord {
     locked?: boolean;
     /** Durable repository-install state surfaced in the dashboard and setup chat. */
     repositoryInstall?: RepositoryInstallRecord;
+    /** Deployment provider connection, when the workspace has connected Vercel. */
+    vercel?: VercelLinkRecord;
     createdAt: string;
     updatedAt: string;
 }
@@ -342,6 +362,8 @@ interface PublicTenant {
     publishableKey: string;
     allowedOrigins: string[];
     allowAnonymous: boolean;
+    /** How the hosted MCP treats a caller's bearer: verify it as a JWT, or forward it opaquely. */
+    userCredential: "jwt" | "opaque";
     connection: "knowledge" | "mcp" | "openapi";
     mcpServers: string[];
     apis: string[];
@@ -349,6 +371,8 @@ interface PublicTenant {
     connections: Array<{
         kind: "mcp" | "openapi";
         name: string;
+        /** Friendly label for the dashboard; `name` remains the stable identifier. */
+        displayName?: string;
         /** OpenAPI spec URL/path. */
         spec?: string;
         /** MCP server URL. */
@@ -369,7 +393,11 @@ interface PublicTenant {
         }>;
         selectedTools?: string[];
         exposeAsMcp?: boolean;
+        /** Where the source's operations run: "server" (Frankie's server) or "client" (the user's browser). */
+        execution?: "server" | "client";
         forwardsToken: boolean;
+        /** The header the user's credential is forwarded to your API as (empty when none). */
+        forwardTokenAs?: string;
         /** Security scheme names with a credential configured (OpenAPI only). Never the values themselves. */
         securedSchemes?: string[];
         /** Whether this source is currently enabled for chat. */
@@ -381,6 +409,8 @@ interface PublicTenant {
     locked: boolean;
     /** A submitted or in-progress SDK installation for this workspace. */
     repositoryInstall?: RepositoryInstallRecord;
+    /** The connected Vercel installation and matched project — never its token. */
+    vercel?: PublicVercelLink;
     /** The customer's brand theme for the widget, so the dashboard can edit it. */
     theme: TenantRecord["config"]["theme"];
     /** Opt-in chat capabilities (attachments, model picker) for the dashboard to edit. */
@@ -593,7 +623,21 @@ declare class PostgresSessionStore implements SessionStore {
 
 interface SkillGenerationInput {
     goal: string;
+    /** Approved tool identifiers this skill may use. Validated against on return. */
     tools: string[];
+    /**
+     * What each tool in `tools` actually does (method/path/summary, or an MCP
+     * tool's own description) — see `toolDescriptions()` in @frankieai/core.
+     * Without this the model has nothing to write concrete steps from but a
+     * bare identifier like `api__product__listItems`. Optional so older
+     * callers (and tests) that only have bare ids still work; the resulting
+     * draft is just less specific.
+     */
+    toolDetails?: Array<{
+        id: string;
+        description: string;
+    }>;
+    /** Present when refining an existing skill rather than starting fresh. */
     instructions?: string;
 }
 declare function generateSkill(resolved: ResolvedConfig, input: SkillGenerationInput): Promise<WorkspaceSkill>;
@@ -629,6 +673,22 @@ interface ControlOptions {
  */
 declare function createControlApp(options: ControlOptions): Hono;
 
+/**
+ * The per-turn handle an API tool uses to run itself in the user's browser
+ * instead of on Frankie's server. `available` says whether a live widget
+ * channel is bound for this session — false over the hosted MCP endpoint or any
+ * headless caller, where a browser-scoped call is impossible.
+ */
+interface ClientToolBridge {
+    readonly available: boolean;
+    /**
+     * Ask the browser to perform one HTTP call and resolve with its outcome.
+     * Rejects if no channel is bound, the turn is aborted, or the browser does
+     * not answer before `timeoutMs`.
+     */
+    execute(name: string, request: HostToolRequest, signal?: AbortSignal): Promise<HostToolResult>;
+}
+
 interface RunTurnParams {
     config: FrankieConfig;
     session: ChatSession;
@@ -642,6 +702,8 @@ interface RunTurnParams {
     modelOverride?: Model<Api>;
     /** Files attached to this turn, already validated against the feature flags. */
     attachments?: ChatAttachment[];
+    /** Browser channel for API sources marked `execution: "client"`, when a widget is connected. */
+    clientBridge?: ClientToolBridge;
     signal: AbortSignal;
     /** Called with the full transcript once the turn settles, to persist it. */
     onTranscript?: (messages: AgentMessage[]) => void;
@@ -694,6 +756,13 @@ interface BuildApiToolsOptions {
     session: ChatSession;
     policy: ToolPolicy;
     fetchImpl?: typeof fetch;
+    /**
+     * Bridge to the user's browser for sources marked `execution: "client"`. When
+     * absent (headless callers, the hosted MCP endpoint), a client-mode operation
+     * has no way to run and reports that clearly instead of falling back to a
+     * server-side call the user's session would not authorize.
+     */
+    clientBridge?: ClientToolBridge;
     onWarning?: (message: string, detail: Record<string, unknown>) => void;
 }
 interface ApiToolSet {
@@ -731,6 +800,8 @@ interface CollectToolsOptions {
     fetchImpl?: typeof fetch;
     /** Base URL of the account API for the built-in workspaceAdmin tools. */
     accountApiUrl?: string;
+    /** Browser channel for API sources marked `execution: "client"`. */
+    clientBridge?: ClientToolBridge;
     onWarning?: (message: string, detail: Record<string, unknown>) => void;
 }
 interface CollectedTools {

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   createControlApp
-} from "./chunk-NSOMFNTK.js";
+} from "./chunk-37VMCQCI.js";
 import {
   ConfigError,
   applyEnvOverrides,
@@ -42,7 +42,7 @@ import {
   runTurn,
   safeEqual,
   toPublicTenant
-} from "./chunk-JOADNB5J.js";
+} from "./chunk-MKN5663J.js";
 export {
   API_TOOL_PREFIX,
   AuthError,

package/dist/server.js

@@ -7,7 +7,7 @@ import {
   ModelResolutionError,
   createFrankieApp,
   resolveStores
-} from "./chunk-JOADNB5J.js";
+} from "./chunk-MKN5663J.js";
 
 // src/server.ts
 import { serve } from "@hono/node-server";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frankieai/server",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Frankie cloud agent server — auth, sessions, MCP wiring and streaming for the embedded onboarding agent.",
   "license": "MIT",
   "type": "module",
@@ -28,7 +28,7 @@
     "yaml": "^2.9.0",
     "zod": "^4.0.0",
     "pg": "^8.13.0",
-    "@frankieai/core": "0.2.2"
+    "@frankieai/core": "0.2.3"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",