@ganju/utils 0.0.14 → 0.0.16

package/dist/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2xBxB,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgGrB,CAAC;AAyDN,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;iBAmCpB,CAAC;AAWH,QAAA,MAAM,kBAAkB;;;;;;;;;;iBA+CtB,CAAC;AAqCH,QAAA,MAAM,gBAAgB;;;;;kBAOX,CAAC;AAEZ,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAcpB,CAAC;AAYH,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgCxB,CAAC;AA4LH,QAAA,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4DpC,CAAC;AA4BL,QAAA,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAkDzB,CAAC;AAuHH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6GlB,CAAC;AAGF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAG1E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIlE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAMtE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAGtE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMtE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIvE,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,kCAAkC,CAC1C,CAAC;AAKF,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IAIrB,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;CAChD;AAKD,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAKD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CAC1E;AAMD,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAChC,SAAS,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACzC,OAAO,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACtC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA0hCxB,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgGrB,CAAC;AAyDN,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4CpB,CAAC;AAWH,QAAA,MAAM,kBAAkB;;;;;;;;;;iBA+CtB,CAAC;AAqCH,QAAA,MAAM,gBAAgB;;;;;kBAOX,CAAC;AAEZ,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAcpB,CAAC;AAYH,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgCxB,CAAC;AA2OH,QAAA,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4DpC,CAAC;AA4BL,QAAA,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAkDzB,CAAC;AAuHH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4IlB,CAAC;AAGF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAG1E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAIlE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAMtE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAGtE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMtE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIvE,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,kCAAkC,CAC1C,CAAC;AAKF,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IAIrB,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;CAChD;AAKD,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAKD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CAC1E;AAMD,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAChC,SAAS,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACzC,OAAO,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACtC"}

package/dist/schema.js

@@ -5,9 +5,12 @@ const zod_1 = require("zod");
 const constants_1 = require("./constants");
 const llmBaseUrl_1 = require("./llmBaseUrl");
 const slug_1 = require("./slug");
+const ssrf_1 = require("./ssrf");
 const reservedToolName_1 = require("./reservedToolName");
 const slugifyTitle_1 = require("./slugifyTitle");
 const toolConfirmation_1 = require("./toolConfirmation");
+const channelCustomer_1 = require("./channelCustomer");
+const dataTypes_1 = require("./dataTypes");
 // A prompt title becomes a slash command; it must not collide with a command
 // the channel runner handles itself (e.g. `/link`).
 const PROMPT_TITLE = zod_1.z
@@ -149,6 +152,13 @@ const INVITATION_RESPOND = zod_1.z.object({
     userId: zod_1.z.uuid(),
     action: zod_1.z.enum(constants_1.constants.INVITATION_RESPONSES)
 });
+const TOOL_APPROVAL_GET = zod_1.z.object({
+    approvalId: zod_1.z.uuid()
+});
+const TOOL_APPROVAL_DECIDE = zod_1.z.object({
+    approvalId: zod_1.z.uuid(),
+    decision: zod_1.z.enum(constants_1.constants.TOOL_APPROVAL_DECISIONS)
+});
 const INVITATION_GET_BY_TOKEN = zod_1.z.object({
     token: zod_1.z.string().min(8).max(128)
 });
@@ -230,7 +240,8 @@ const ARTIFACT_CREATE_WEBSITE_VIEW = zod_1.z.object({
     title: zod_1.z.string().min(3).max(200),
     uri: zod_1.z
         .url('Enter a valid URL')
-        .refine(v => /^https?:\/\//i.test(v), 'Only http and https URLs are supported'),
+        .refine(v => /^https?:\/\//i.test(v), 'Only http and https URLs are supported')
+        .refine(v => !(0, ssrf_1.isBlockedUrl)(v), "This address points to a private network and can't be crawled"),
     description: zod_1.z.string().optional(),
     maxPages: zod_1.z.number().int().min(1).max(constants_1.constants.CRAWL_MAX_PAGES_LIMIT),
     maxDepth: zod_1.z.number().int().min(0).max(constants_1.constants.CRAWL_MAX_DEPTH_LIMIT)
@@ -239,7 +250,8 @@ const ARTIFACT_CREATE_WEBSITE = zod_1.z.object({
     title: zod_1.z.string().min(3).max(200),
     uri: zod_1.z
         .url('Enter a valid URL')
-        .refine(v => /^https?:\/\//i.test(v), 'Only http and https URLs are supported'),
+        .refine(v => /^https?:\/\//i.test(v), 'Only http and https URLs are supported')
+        .refine(v => !(0, ssrf_1.isBlockedUrl)(v), "This address points to a private network and can't be crawled"),
     description: zod_1.z.string().optional(),
     crawlConfig: zod_1.z.object({
         maxPages: zod_1.z.number().int().min(1).max(constants_1.constants.CRAWL_MAX_PAGES_LIMIT),
@@ -416,6 +428,183 @@ const ARTIFACT_REMOVE_RESOURCE = zod_1.z.object({
     userId: zod_1.z.uuid(),
     organizationId: zod_1.z.uuid()
 });
+const DATA_DATABASE_GET = zod_1.z.object({
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// The name is what the owner types to delete it; it defaults to the
+// project's slug. `replaceDeleted` starts over while a deleted database is
+// still in its grace period, giving up the chance to restore it.
+const DATA_DATABASE_CREATE = DATA_DATABASE_GET.extend({
+    name: zod_1.z.string().trim().min(1).max(100).optional(),
+    replaceDeleted: zod_1.z.boolean().optional()
+});
+const DATA_DATABASE_DELETE = DATA_DATABASE_GET.extend({
+    confirmName: zod_1.z.string().min(1)
+});
+// The bodies and query strings of the Data API. Each one is what a client
+// sends; the route schemas below add the path's ids. The database object
+// checks every rule again (names, types, relations), so these describe the
+// shape and leave the meaning to it.
+const DATA_IDENTIFIER = zod_1.z.string().min(1).max(63);
+const DATA_DEFAULT_VALUE = zod_1.z.union([
+    zod_1.z.string(),
+    zod_1.z.number(),
+    zod_1.z.boolean(),
+    zod_1.z.null()
+]);
+const DATA_TEXT = (max) => zod_1.z.string().max(max).nullable().optional();
+const DATA_COLUMN_INPUT = zod_1.z.strictObject({
+    name: DATA_IDENTIFIER,
+    type: zod_1.z.enum(dataTypes_1.DATA_COLUMN_TYPES),
+    label: DATA_TEXT(dataTypes_1.DATA_MAX_LABEL),
+    description: DATA_TEXT(dataTypes_1.DATA_MAX_DESCRIPTION),
+    required: zod_1.z.boolean().optional(),
+    unique: zod_1.z.boolean().optional(),
+    filterable: zod_1.z.boolean().optional(),
+    searchable: zod_1.z.boolean().optional(),
+    personal: zod_1.z.boolean().optional(),
+    values: zod_1.z.array(zod_1.z.string().min(1)).max(dataTypes_1.DATA_MAX_ENUM_VALUES).optional(),
+    table: DATA_IDENTIFIER.optional(),
+    onDelete: zod_1.z.enum(dataTypes_1.DATA_ON_DELETE).optional(),
+    min: zod_1.z.number().nullable().optional(),
+    default: DATA_DEFAULT_VALUE.optional()
+});
+// The CLI's schema file holds a list of these.
+const DATA_TABLE_INPUT = zod_1.z.strictObject({
+    name: DATA_IDENTIFIER,
+    label: DATA_TEXT(dataTypes_1.DATA_MAX_LABEL),
+    description: DATA_TEXT(dataTypes_1.DATA_MAX_DESCRIPTION),
+    displayColumn: DATA_IDENTIFIER.nullable().optional(),
+    access: zod_1.z.enum(dataTypes_1.DATA_ACCESS_LEVELS).optional(),
+    customerScoped: zod_1.z.boolean().optional(),
+    history: zod_1.z.boolean().optional(),
+    columns: zod_1.z.array(DATA_COLUMN_INPUT).max(dataTypes_1.DATA_MAX_COLUMNS)
+});
+const DATA_TABLE_PATCH = DATA_TABLE_INPUT.omit({ columns: true }).partial();
+// A null puts the setting back to its default.
+const DATA_COLUMN_PATCH = DATA_COLUMN_INPUT.partial();
+const DATA_TABLE_DROP_BODY = zod_1.z.strictObject({ confirmName: zod_1.z.string().min(1) });
+const DATA_ROW_VALUES = zod_1.z.record(zod_1.z.string(), zod_1.z.unknown());
+// A JSON value carried in a query string, e.g. `where={"status":"open"}`.
+const DATA_JSON_PARAM = zod_1.z.string().transform((text, ctx) => {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'This is JSON, e.g. {"status":"open"}'
+        });
+        return zod_1.z.NEVER;
+    }
+});
+// A comma-separated list in a query string: `sort=-created_at,name`.
+const DATA_LIST_PARAM = zod_1.z.string().transform(text => text
+    .split(',')
+    .map(item => item.trim())
+    .filter(Boolean));
+const DATA_ROW_LIST_QUERY = zod_1.z.strictObject({
+    where: DATA_JSON_PARAM.optional(),
+    sort: DATA_LIST_PARAM.optional(),
+    include: DATA_LIST_PARAM.optional(),
+    limit: zod_1.z.coerce.number().int().min(1).max(dataTypes_1.DATA_MAX_PAGE).optional(),
+    cursor: zod_1.z.string().max(2000).optional(),
+    q: zod_1.z.string().max(500).optional(),
+    timeZone: zod_1.z.string().max(64).optional()
+});
+const DATA_ROW_GET_QUERY = DATA_ROW_LIST_QUERY.pick({
+    include: true,
+    timeZone: true
+});
+const DATA_ROW_CREATE_BODY = zod_1.z.union([
+    zod_1.z.strictObject({ values: DATA_ROW_VALUES }),
+    zod_1.z.strictObject({
+        rows: zod_1.z.array(DATA_ROW_VALUES).min(1).max(dataTypes_1.DATA_MAX_INSERT_ROWS)
+    })
+]);
+const DATA_ROW_VERSION = zod_1.z.number().int().min(1);
+// `set` takes values, or relative changes such as { "stock": { "decrement": 2 } }.
+const DATA_ROW_UPDATE_BODY = zod_1.z.strictObject({
+    set: DATA_ROW_VALUES,
+    version: DATA_ROW_VERSION.optional()
+});
+const DATA_ROW_DELETE_BODY = zod_1.z.strictObject({
+    version: DATA_ROW_VERSION.optional()
+});
+const DATA_ROW_ID = zod_1.z.coerce.number().int().min(1);
+// Without `ids`, every row of the table.
+const DATA_DELETE_PREVIEW_BODY = zod_1.z.strictObject({
+    ids: zod_1.z.array(zod_1.z.number().int().min(1)).min(1).max(dataTypes_1.DATA_IMPACT_MAX_IDS).optional()
+});
+const DATA_WRITE_TARGET = {
+    table: DATA_IDENTIFIER,
+    id: zod_1.z
+        .union([
+        zod_1.z.number().int().min(1),
+        zod_1.z.strictObject({ $ref: zod_1.z.number().int().min(0) })
+    ])
+        .optional(),
+    where: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
+    expect: zod_1.z.number().int().min(0).optional(),
+    version: DATA_ROW_VERSION.optional()
+};
+// Applied together or not at all. A later step can use an earlier insert's
+// id as { "$ref": <step> }.
+const DATA_WRITE_OPERATION = zod_1.z.discriminatedUnion('op', [
+    zod_1.z.strictObject({
+        op: zod_1.z.literal('insert'),
+        table: DATA_IDENTIFIER,
+        values: DATA_ROW_VALUES.optional(),
+        rows: zod_1.z.array(DATA_ROW_VALUES).min(1).max(dataTypes_1.DATA_MAX_INSERT_ROWS).optional()
+    }),
+    zod_1.z.strictObject({
+        op: zod_1.z.literal('update'),
+        ...DATA_WRITE_TARGET,
+        set: DATA_ROW_VALUES
+    }),
+    zod_1.z.strictObject({ op: zod_1.z.literal('delete'), ...DATA_WRITE_TARGET })
+]);
+const DATA_WRITE_BODY = zod_1.z.strictObject({
+    operations: zod_1.z
+        .array(DATA_WRITE_OPERATION)
+        .min(1)
+        .max(dataTypes_1.DATA_MAX_WRITE_OPERATIONS)
+});
+const DATA_ROW_HISTORY_QUERY = zod_1.z.strictObject({
+    limit: zod_1.z.coerce.number().int().min(1).max(100).optional(),
+    cursor: zod_1.z.coerce.number().int().min(1).optional(),
+    timeZone: zod_1.z.string().max(64).optional()
+});
+// A time within the last 30 days, or a bookmark this API handed out (a drop,
+// a type change, or the restore to undo).
+const DATA_RESTORE_POINT_BODY = zod_1.z.union([
+    zod_1.z.strictObject({
+        timestamp: zod_1.z.union([zod_1.z.iso.datetime({ offset: true }), zod_1.z.number().int()])
+    }),
+    zod_1.z.strictObject({ bookmark: zod_1.z.string().min(1).max(200) })
+]);
+const DATA_EXPORT_BODY = zod_1.z.strictObject({
+    format: zod_1.z.enum(['jsonl', 'csv']).optional()
+});
+const DATA_EXPORT_QUERY = zod_1.z.strictObject({
+    exportId: zod_1.z.uuid().optional()
+});
+// Without `table`, the export's schema.json.
+const DATA_EXPORT_FILE_QUERY = zod_1.z.strictObject({
+    exportId: zod_1.z.uuid(),
+    table: DATA_IDENTIFIER.optional()
+});
+const DATA_CHANGE_LIST_QUERY = zod_1.z.strictObject({
+    limit: zod_1.z.coerce.number().int().min(1).max(100).optional(),
+    cursor: zod_1.z.uuid().optional()
+});
+const DATA_TABLE_PARAMS = DATA_DATABASE_GET.extend({ table: DATA_IDENTIFIER });
+const DATA_COLUMN_PARAMS = DATA_TABLE_PARAMS.extend({
+    column: DATA_IDENTIFIER
+});
+const DATA_ROW_PARAMS = DATA_TABLE_PARAMS.extend({ id: DATA_ROW_ID });
 const ARTIFACT_UPLOAD_RESOURCE_FILE = zod_1.z.object({
     resourceId: zod_1.z.uuid(),
     projectId: zod_1.z.uuid(),
@@ -600,18 +789,27 @@ const ORGANIZATION_UPDATE_LLM_VIEW = refineUpdateBaseUrl(ORGANIZATION_UPDATE_LLM
     userId: true,
     organizationId: true
 }));
-// `channel.config` is an open bag, so this stays loose — it only pins down the
-// keys we actually read, and passes everything else through untouched.
+// The channel settings an owner can write. Strict: a typo or a setting that
+// no longer exists is refused rather than stored, where nothing would read it.
 // `debounceMs` is how long a burst from one participant is buffered before the
 // agent answers it as a single turn; 0 disables buffering.
-const CHANNEL_CONFIG = zod_1.z.looseObject({
+const CHANNEL_CONFIG = zod_1.z.strictObject({
     debounceMs: zod_1.z
         .number()
         .int()
         .refine(value => value === constants_1.constants.CHANNEL_DEBOUNCE_DISABLED ||
         (value >= constants_1.constants.CHANNEL_DEBOUNCE_MIN_MS &&
             value <= constants_1.constants.CHANNEL_DEBOUNCE_MAX_MS), `debounceMs must be 0 (disabled) or between ${constants_1.constants.CHANNEL_DEBOUNCE_MIN_MS} and ${constants_1.constants.CHANNEL_DEBOUNCE_MAX_MS} ms`)
-        .optional()
+        .optional(),
+    // Replies one customer gets in 24 hours; 0 turns the limit off.
+    participantDailyLimit: zod_1.z
+        .number()
+        .int()
+        .min(channelCustomer_1.PARTICIPANT_DAILY_LIMIT_OFF)
+        .max(channelCustomer_1.PARTICIPANT_DAILY_LIMIT_MAX)
+        .optional(),
+    // Remember each customer's name, address, allergies and dates.
+    participantMemory: zod_1.z.boolean().optional()
 });
 const CHANNEL_CREATE = zod_1.z.object({
     platform: zod_1.z.enum(constants_1.constants.CHANNEL_PLATFORMS),
@@ -626,6 +824,9 @@ const CHANNEL_UPDATE = zod_1.z.object({
     channelId: zod_1.z.uuid(),
     status: zod_1.z.enum(constants_1.constants.CHANNEL_STATUS).optional(),
     config: CHANNEL_CONFIG.optional(),
+    // Keys to change on the stored config, merged by the database, so two
+    // settings saved at once don't overwrite each other.
+    configPatch: CHANNEL_CONFIG.optional(),
     credentials: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).optional(),
     llmId: zod_1.z.uuid().nullable().optional(),
     projectId: zod_1.z.uuid(),
@@ -827,6 +1028,15 @@ const MCP_PROXY_CONFIG = zod_1.z.object({
     allowedResources: zod_1.z.array(zod_1.z.string().min(1).max(2048)).max(500).optional(),
     allowedPrompts: zod_1.z.array(zod_1.z.string().min(1).max(256)).max(500).optional(),
     auth: MCP_PROXY_AUTH.default({ kind: constants_1.constants.MCP_PROXY_AUTH_KIND_NONE }),
+    // Whether the remote's own readOnlyHint / destructiveHint decide which of its
+    // tools are confirmed. Off (or absent), every proxied tool counts as
+    // sensitive unless the owner marked it below: a server that labels its
+    // delete "read-only" would otherwise skip the question.
+    trustAnnotations: zod_1.z.boolean().optional(),
+    // Remote tool names the owner marked as only reading. Read-only whatever the
+    // remote says, trusted or not. Left optional rather than defaulted, so a
+    // save that doesn't mention it keeps the stored marks.
+    readOnlyTools: zod_1.z.array(zod_1.z.string().min(1).max(256)).max(500).optional(),
     timeoutMs: zod_1.z
         .number()
         .int()
@@ -1080,6 +1290,49 @@ const ARTIFACT_CUSTOM_CODE_LIST_LOGS = zod_1.z.object({
     userId: zod_1.z.uuid(),
     organizationId: zod_1.z.uuid()
 });
+// Tool observability on the project home: per-tool health over a window.
+const PROJECT_TOOL_HEALTH = zod_1.z.object({
+    days: zod_1.z.coerce
+        .number()
+        .int()
+        .refine(days => constants_1.constants.OBSERVABILITY_RANGE_DAYS.includes(days), {
+        message: 'Range is not valid'
+    })
+        .default(7),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// The calls behind a row of that table, newest first. Paged by the id of the
+// last call shown, not its time: calls written in one insert share a
+// timestamp, and the client only sees it to the millisecond.
+const PROJECT_TOOL_CALLS = zod_1.z.object({
+    tool: zod_1.z.string().min(1).max(256).optional(),
+    status: zod_1.z.enum(['all', 'error']).default('all'),
+    limit: zod_1.z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(constants_1.constants.OBSERVABILITY_CALLS_MAX_LIMIT)
+        .default(constants_1.constants.OBSERVABILITY_CALLS_DEFAULT_LIMIT),
+    after: zod_1.z.uuid().optional(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// One recorded call, whole, and the session timeline it belongs to.
+const PROJECT_TOOL_CALL = zod_1.z.object({
+    requestId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const PROJECT_MCP_SESSION = zod_1.z.object({
+    sessionId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
 // Reads the artifact's version history and which one is currently active.
 const ARTIFACT_CUSTOM_CODE_LIST_VERSIONS = zod_1.z.object({
     projectId: zod_1.z.uuid(),
@@ -1402,6 +1655,8 @@ exports.Schema = {
     PROJECT_INVITATION_REMOVE,
     INVITATION_RESPOND,
     INVITATION_GET_BY_TOKEN,
+    TOOL_APPROVAL_GET,
+    TOOL_APPROVAL_DECIDE,
     ORGANIZATION_MEMBER_LIST,
     ORGANIZATION_MEMBER_REMOVE,
     PROJECT_MEMBER_LIST,
@@ -1428,6 +1683,31 @@ exports.Schema = {
     ARTIFACT_UPDATE_RESOURCE_VIEW,
     ARTIFACT_GET_RESOURCE,
     ARTIFACT_GET_RESOURCE_BY_ID,
+    DATA_DATABASE_GET,
+    DATA_DATABASE_CREATE,
+    DATA_DATABASE_DELETE,
+    DATA_COLUMN_INPUT,
+    DATA_TABLE_INPUT,
+    DATA_TABLE_PATCH,
+    DATA_COLUMN_PATCH,
+    DATA_TABLE_DROP_BODY,
+    DATA_ROW_LIST_QUERY,
+    DATA_ROW_GET_QUERY,
+    DATA_ROW_CREATE_BODY,
+    DATA_ROW_UPDATE_BODY,
+    DATA_ROW_DELETE_BODY,
+    DATA_DELETE_PREVIEW_BODY,
+    DATA_WRITE_OPERATION,
+    DATA_WRITE_BODY,
+    DATA_ROW_HISTORY_QUERY,
+    DATA_RESTORE_POINT_BODY,
+    DATA_EXPORT_BODY,
+    DATA_EXPORT_QUERY,
+    DATA_EXPORT_FILE_QUERY,
+    DATA_CHANGE_LIST_QUERY,
+    DATA_TABLE_PARAMS,
+    DATA_COLUMN_PARAMS,
+    DATA_ROW_PARAMS,
     ARTIFACT_REMOVE_RESOURCE,
     ARTIFACT_UPLOAD_RESOURCE_FILE,
     ARTIFACT_DOWNLOAD_RESOURCE_FILE,
@@ -1481,6 +1761,10 @@ exports.Schema = {
     ARTIFACT_CUSTOM_CODE_ROLLBACK,
     ARTIFACT_CUSTOM_CODE_LIST_LOGS,
     ARTIFACT_CUSTOM_CODE_LIST_VERSIONS,
+    PROJECT_TOOL_HEALTH,
+    PROJECT_TOOL_CALLS,
+    PROJECT_TOOL_CALL,
+    PROJECT_MCP_SESSION,
     CUSTOM_CODE_INVOKE_REQUEST,
     CUSTOM_CODE_INVOKE_RESPONSE,
     CUSTOM_CODE_BROKER_CONNECTION,

package/dist/ssrf.d.ts

@@ -1,3 +1,4 @@
 export declare const ipv4InPrivateRange: (host: string) => boolean;
 export declare const isBlockedHost: (hostname: string) => boolean;
+export declare const isBlockedUrl: (url: string) => boolean;
 //# sourceMappingURL=ssrf.d.ts.map

package/dist/ssrf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssrf.d.ts","sourceRoot":"","sources":["../src/ssrf.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,KAAG,OAWjD,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,UAAU,MAAM,KAAG,OAehD,CAAC"}
+{"version":3,"file":"ssrf.d.ts","sourceRoot":"","sources":["../src/ssrf.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,KAAG,OAYjD,CAAC;AAeF,eAAO,MAAM,aAAa,GAAI,UAAU,MAAM,KAAG,OAiBhD,CAAC;AAIF,eAAO,MAAM,YAAY,GAAI,KAAK,MAAM,KAAG,OAS1C,CAAC"}

package/dist/ssrf.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isBlockedHost = exports.ipv4InPrivateRange = void 0;
+exports.isBlockedUrl = exports.isBlockedHost = exports.ipv4InPrivateRange = void 0;
 // Literal-host SSRF screening shared by the proxied tool dispatchers
-// (http-endpoint, mcp-proxy). The Workers runtime can't resolve DNS, so we can
+// (http-endpoint, mcp-proxy) and the website crawler. The Workers runtime can't resolve DNS, so we can
 // only screen literal hosts and IPs (not DNS rebinding). Private/loopback/
 // link-local ranges are always rejected; callers may further narrow with an
 // allowlist.
@@ -22,25 +22,61 @@ const ipv4InPrivateRange = (host) => {
         return true; // private
     if (a === 172 && b >= 16 && b <= 31)
         return true; // private
+    if (a === 100 && b >= 64 && b <= 127)
+        return true; // carrier-grade NAT
     return false;
 };
 exports.ipv4InPrivateRange = ipv4InPrivateRange;
+// The IPv4 address an IPv4-mapped IPv6 literal reaches. URL parsing rewrites
+// `[::ffff:127.0.0.1]` to `[::ffff:7f00:1]`, so both spellings are read.
+const mappedIpv4 = (host) => {
+    if (!host.startsWith('::ffff:'))
+        return null;
+    const rest = host.slice('::ffff:'.length);
+    if (rest.includes('.'))
+        return rest;
+    const match = /^([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(rest);
+    if (!match)
+        return null;
+    const hi = Number.parseInt(match[1], 16);
+    const lo = Number.parseInt(match[2], 16);
+    return [hi >> 8, hi & 0xff, lo >> 8, lo & 0xff].join('.');
+};
 const isBlockedHost = (hostname) => {
-    const host = hostname.toLowerCase().replace(/^\[|\]$/g, '');
+    const host = hostname
+        .toLowerCase()
+        .replace(/^\[|\]$/g, '')
+        .replace(/\.$/, '');
     if (!host)
         return true;
     if (host === 'localhost' || host.endsWith('.localhost'))
         return true;
-    if (host === '::1' || host === '::')
-        return true;
-    // IPv6 link-local (fe80::/10) and unique-local (fc00::/7).
-    if (host.startsWith('fe80:') ||
-        host.startsWith('fc') ||
-        host.startsWith('fd')) {
+    if (host.includes(':')) {
+        // An IPv6 literal. Its prefixes are only checked here: a domain name such
+        // as fdic.gov or fcbarcelona.com starts with the same letters.
+        if (host === '::1' || host === '::')
+            return true;
+        // Link-local (fe80::/10) and unique-local (fc00::/7).
+        if (/^fe[89ab]/.test(host) || /^f[cd]/.test(host))
+            return true;
+        const mapped = mappedIpv4(host);
+        return mapped !== null && (0, exports.ipv4InPrivateRange)(mapped);
+    }
+    return (0, exports.ipv4InPrivateRange)(host);
+};
+exports.isBlockedHost = isBlockedHost;
+// Whether a URL may not be fetched on a user's behalf: not http(s), not a URL
+// at all, or pointing at a private, loopback or link-local host.
+const isBlockedUrl = (url) => {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
         return true;
     }
-    if ((0, exports.ipv4InPrivateRange)(host))
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
         return true;
-    return false;
+    return (0, exports.isBlockedHost)(parsed.hostname);
 };
-exports.isBlockedHost = isBlockedHost;
+exports.isBlockedUrl = isBlockedUrl;

package/dist/toolConfirmation.d.ts

@@ -54,5 +54,53 @@ export declare const isSensitiveTool: (annotations: {
     readOnlyHint?: boolean;
     destructiveHint?: boolean;
 } | null | undefined) => boolean;
+export interface ProxiedToolTrust {
+    trustHints: boolean;
+    readOnly: boolean;
+}
+export declare const proxiedToolTrust: (config: {
+    trustAnnotations?: unknown;
+    readOnlyTools?: unknown;
+} | null | undefined, remoteToolName: string) => ProxiedToolTrust;
+/**
+ * The annotations a proxied tool is registered with. A remote server's hints
+ * are its own claim about itself, and one that marks a delete read-only would
+ * skip every confirmation — so unless the organization chose to trust that
+ * server, the read-only and destructive hints are dropped and the tool reads
+ * as sensitive by the defaults above. A tool the owner marked as only reading
+ * is read-only whatever the remote says, trusted or not. Clients see the
+ * same, so they ask about the same tools. The harmless parts (title,
+ * openWorldHint, idempotentHint) pass through.
+ */
+export declare const proxiedToolAnnotations: <T extends {
+    readOnlyHint?: boolean;
+    destructiveHint?: boolean;
+}>(annotations: T | null | undefined, trust: ProxiedToolTrust) => Partial<T> | undefined;
+/**
+ * An install's new config with the owner's trust marks carried over from the
+ * stored one wherever the new one doesn't say. A save that only knew about
+ * the allow-lists (an older dashboard, a script) must not quietly turn the
+ * marks off; one that sends them, even as false or empty, decides.
+ */
+export declare const keepProxiedToolMarks: (stored: unknown, incoming: unknown) => unknown;
+/** Whether a proxied tool is confirmed, decided as its registration is. */
+export declare const isSensitiveProxiedTool: (annotations: {
+    readOnlyHint?: boolean;
+    destructiveHint?: boolean;
+} | null | undefined, trust: ProxiedToolTrust) => boolean;
 export declare const stableJson: (value: unknown) => string;
+export type ToolApprovalStatus = 'pending' | 'approved' | 'denied' | 'used' | 'expired';
+/**
+ * Where an approval stands. Spent and refused come first, since an answer
+ * stays the answer after the window closes; past its time, one never answered
+ * or never used can no longer be.
+ */
+export declare const toolApprovalStatus: (approval: {
+    expiresAt: Date;
+    approvedAt: Date | null;
+    deniedAt: Date | null;
+    usedAt: Date | null;
+}, now?: number) => ToolApprovalStatus;
+/** The dashboard page where the user answers one approval. */
+export declare const toolApprovalUrl: (webUrl: string, path: string, approvalId: string) => string;
 //# sourceMappingURL=toolConfirmation.d.ts.map

package/dist/toolConfirmation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"toolConfirmation.d.ts","sourceRoot":"","sources":["../src/toolConfirmation.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,uBAAuB;IAEtC,EAAE,EAAE,MAAM,CAAC;IAGX,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,CAAC,CAAC;CACJ;AAKD,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAO/E,eAAO,MAAM,YAAY,yCAA0C,CAAC;AAEpE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,UAAU,KACjB;IAAE,YAAY,EAAE,OAAO,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAKE,CAAC;AAmHvD,eAAO,MAAM,uBAAuB,GAAI,OAAO,MAAM,KAAG,MAAM,GAAG,IAOhE,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,SAAS,MAAM,GAAG,IAAI,KACrB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAG3B,CAAC;AAQF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,KAAK,GAAG,IAAI,EACpB,uBAAuB,MAAM,KAC5B,MAA4E,CAAC;AAEhF,eAAO,MAAM,uBAAuB,GAClC,IAAI,MAAM,KACT;IAAE,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAA;CAAE,GAAG,IAQ1D,CAAC;AAWF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAAI,MAAM,MAAM,KAAG,OAIlD,CAAC;AAmBF;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,GACpC,OAAO,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAClE,SAAS,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,KAChC,MAcc,CAAC;AAElB;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAC1B,aACI;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD,IAAI,GACJ,SAAS,KACZ,OAC2E,CAAC;AAI/E,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,MAY3C,CAAC"}
+{"version":3,"file":"toolConfirmation.d.ts","sourceRoot":"","sources":["../src/toolConfirmation.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,uBAAuB;IAEtC,EAAE,EAAE,MAAM,CAAC;IAGX,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,CAAC,CAAC;CACJ;AAKD,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAO/E,eAAO,MAAM,YAAY,yCAA0C,CAAC;AAEpE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,UAAU,KACjB;IAAE,YAAY,EAAE,OAAO,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAKE,CAAC;AAmHvD,eAAO,MAAM,uBAAuB,GAAI,OAAO,MAAM,KAAG,MAAM,GAAG,IAOhE,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,SAAS,MAAM,GAAG,IAAI,KACrB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAG3B,CAAC;AAQF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,KAAK,GAAG,IAAI,EACpB,uBAAuB,MAAM,KAC5B,MAA4E,CAAC;AAEhF,eAAO,MAAM,uBAAuB,GAClC,IAAI,MAAM,KACT;IAAE,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAA;CAAE,GAAG,IAQ1D,CAAC;AAWF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAAI,MAAM,MAAM,KAAG,OAIlD,CAAC;AAmBF;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,GACpC,OAAO,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAClE,SAAS,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,KAChC,MAcc,CAAC;AAElB;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAC1B,aACI;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD,IAAI,GACJ,SAAS,KACZ,OAC2E,CAAC;AAK/E,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,eAAO,MAAM,gBAAgB,GAC3B,QACI;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACvD,IAAI,GACJ,SAAS,EACb,gBAAgB,MAAM,KACrB,gBAKD,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,GACjC,CAAC,SAAS;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,EAE/D,aAAa,CAAC,GAAG,IAAI,GAAG,SAAS,EACjC,OAAO,gBAAgB,KACtB,OAAO,CAAC,CAAC,CAAC,GAAG,SAWf,CAAC;AAKF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,OAAO,EACf,UAAU,OAAO,KAChB,OAgBF,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,sBAAsB,GACjC,aACI;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD,IAAI,GACJ,SAAS,EACb,OAAO,gBAAgB,KACtB,OAAsE,CAAC;AAI1E,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,MAY3C,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B,SAAS,GACT,UAAU,GACV,QAAQ,GACR,MAAM,GACN,SAAS,CAAC;AAEd;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAC7B,UAAU;IACR,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;CACrB,EACD,MAAK,MAAmB,KACvB,kBAKF,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,eAAe,GAC1B,QAAQ,MAAM,EACd,MAAM,MAAM,EACZ,YAAY,MAAM,KACjB,MACuE,CAAC"}

package/dist/toolConfirmation.js

@@ -4,7 +4,7 @@
 // participant's next message is a plain yes. These are the pieces of that rule
 // that aren't the runner's own bookkeeping.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.stableJson = exports.isSensitiveTool = exports.formatConfirmationSummary = exports.isConfirmationReply = exports.parseConfirmationButton = exports.confirmationButtonId = exports.confirmationButtonLabels = exports.languageFromPhoneNumber = exports.annotationsForEffect = exports.TOOL_EFFECTS = void 0;
+exports.toolApprovalUrl = exports.toolApprovalStatus = exports.stableJson = exports.isSensitiveProxiedTool = exports.keepProxiedToolMarks = exports.proxiedToolAnnotations = exports.proxiedToolTrust = exports.isSensitiveTool = exports.formatConfirmationSummary = exports.isConfirmationReply = exports.parseConfirmationButton = exports.confirmationButtonId = exports.confirmationButtonLabels = exports.languageFromPhoneNumber = exports.annotationsForEffect = exports.TOOL_EFFECTS = void 0;
 // What an owner says a tool they wrote does, in the words the dashboard asks
 // it in, and the MCP annotations each answer stands for: `read` only looks
 // things up, `write` changes things that can be undone, `sensitive` sends,
@@ -223,6 +223,62 @@ exports.formatConfirmationSummary = formatConfirmationSummary;
  */
 const isSensitiveTool = (annotations) => annotations?.readOnlyHint !== true && annotations?.destructiveHint !== false;
 exports.isSensitiveTool = isSensitiveTool;
+const proxiedToolTrust = (config, remoteToolName) => ({
+    trustHints: config?.trustAnnotations === true,
+    readOnly: Array.isArray(config?.readOnlyTools) &&
+        config.readOnlyTools.includes(remoteToolName)
+});
+exports.proxiedToolTrust = proxiedToolTrust;
+/**
+ * The annotations a proxied tool is registered with. A remote server's hints
+ * are its own claim about itself, and one that marks a delete read-only would
+ * skip every confirmation — so unless the organization chose to trust that
+ * server, the read-only and destructive hints are dropped and the tool reads
+ * as sensitive by the defaults above. A tool the owner marked as only reading
+ * is read-only whatever the remote says, trusted or not. Clients see the
+ * same, so they ask about the same tools. The harmless parts (title,
+ * openWorldHint, idempotentHint) pass through.
+ */
+const proxiedToolAnnotations = (annotations, trust) => {
+    const result = { ...annotations };
+    if (trust.readOnly) {
+        delete result.destructiveHint;
+        return { ...result, readOnlyHint: true };
+    }
+    if (!trust.trustHints) {
+        delete result.readOnlyHint;
+        delete result.destructiveHint;
+    }
+    return Object.keys(result).length > 0 ? result : undefined;
+};
+exports.proxiedToolAnnotations = proxiedToolAnnotations;
+// The install-config keys that hold the owner's trust marks above.
+const PROXIED_TOOL_MARK_KEYS = ['trustAnnotations', 'readOnlyTools'];
+/**
+ * An install's new config with the owner's trust marks carried over from the
+ * stored one wherever the new one doesn't say. A save that only knew about
+ * the allow-lists (an older dashboard, a script) must not quietly turn the
+ * marks off; one that sends them, even as false or empty, decides.
+ */
+const keepProxiedToolMarks = (stored, incoming) => {
+    if (!stored ||
+        typeof stored !== 'object' ||
+        !incoming ||
+        typeof incoming !== 'object') {
+        return incoming;
+    }
+    const merged = { ...incoming };
+    for (const key of PROXIED_TOOL_MARK_KEYS) {
+        if (merged[key] === undefined && key in stored) {
+            merged[key] = stored[key];
+        }
+    }
+    return merged;
+};
+exports.keepProxiedToolMarks = keepProxiedToolMarks;
+/** Whether a proxied tool is confirmed, decided as its registration is. */
+const isSensitiveProxiedTool = (annotations, trust) => (0, exports.isSensitiveTool)((0, exports.proxiedToolAnnotations)(annotations, trust));
+exports.isSensitiveProxiedTool = isSensitiveProxiedTool;
 // JSON with keys sorted at every depth, so two argument objects that say the
 // same thing serialize the same whatever order the model emitted them in.
 const stableJson = (value) => {
@@ -237,3 +293,21 @@ const stableJson = (value) => {
     return JSON.stringify(value) ?? 'null';
 };
 exports.stableJson = stableJson;
+/**
+ * Where an approval stands. Spent and refused come first, since an answer
+ * stays the answer after the window closes; past its time, one never answered
+ * or never used can no longer be.
+ */
+const toolApprovalStatus = (approval, now = Date.now()) => {
+    if (approval.usedAt)
+        return 'used';
+    if (approval.deniedAt)
+        return 'denied';
+    if (approval.expiresAt.getTime() <= now)
+        return 'expired';
+    return approval.approvedAt ? 'approved' : 'pending';
+};
+exports.toolApprovalStatus = toolApprovalStatus;
+/** The dashboard page where the user answers one approval. */
+const toolApprovalUrl = (webUrl, path, approvalId) => `${webUrl.replace(/\/+$/, '')}${path}/${encodeURIComponent(approvalId)}`;
+exports.toolApprovalUrl = toolApprovalUrl;