@guuey/create-agentic-app 0.1.3 → 0.2.0

package/dist/templates/openai-agents-sdk/src/agent-config.ts

@@ -7,7 +7,7 @@
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
 import { parseGuueyJson, type GuueyAgent } from "@guuey/config";
-import type { Invoke } from "@guuey/worker";
+import { listCredentials, type Invoke } from "@guuey/worker";
 
 /** GUUEY_AGENT_SNAPSHOT (set by the platform pod and by `guuey dev`) wins; guuey.json is the fallback. */
 export function loadAgent(invoke: Invoke): GuueyAgent {
@@ -26,9 +26,9 @@ export function systemPrompt(invoke: Invoke, agent: GuueyAgent): string | undefi
 
 /**
  * One resolved MCP endpoint this worker may connect to. `transport` rides
- * alongside `url`/`headers` (not hardcoded to `"http"`) because a federation
- * credential file — `<session>/.guuey/credentials/<name>.json`, shape
- * `{url, transport, headers}` per `@guuey/host`'s `CredentialFile` — may
+ * alongside `url`/`headers` (not hardcoded to `"http"`) because a credential
+ * file — `<session>/.guuey/credentials/<name>.json`, shape
+ * `{url, transport, headers}` per `@guuey/worker`'s `CredentialFile` — may
  * resolve a server onto the `sse` transport arm.
  */
 export interface McpEndpoint {
@@ -37,26 +37,33 @@ export interface McpEndpoint {
   headers: Record<string, string>;
 }
 
-/** Lowered entries are `external`; federation credentials (if any) arrive as per-session files. */
+/**
+ * Endpoint set = broker-written credential DIRECTORY (source of truth for
+ * federated + platform-injected servers — incl. guuey-memory/guuey-profile,
+ * invisible to the declared map by design) ∪ declared external entries that
+ * have no credential file (plain endpoints, static headers). Credential wins
+ * per name. One honest log line names both sets — no silent fallback.
+ */
 export function mcpEndpoints(invoke: Invoke, agent: GuueyAgent): Record<string, McpEndpoint> {
   const out: Record<string, McpEndpoint> = {};
   for (const [name, entry] of Object.entries(agent.mcpServers ?? {})) {
+    if (entry === false) continue; // `ggui: false` is the generative-UI opt-out, not a server entry
     if (entry.kind !== "external") continue; // hosted/proxied are lowered to external before a worker ever runs
-    let url = entry.url;
-    let transport: "http" | "sse" = entry.transport ?? "http";
-    let headers: Record<string, string> = { ...(entry.headers ?? {}) };
-    try {
-      const cred = JSON.parse(
-        readFileSync(join(invoke.fs.session, ".guuey", "credentials", `${name}.json`), "utf8")
-      ) as { url: string; transport: "http" | "sse"; headers: Record<string, string> };
-      url = cred.url;
-      transport = cred.transport;
-      headers = cred.headers;
-    } catch {
-      // no credential file — plain external endpoint; static headers apply
-    }
-    out[name] = { url, transport, headers };
+    out[name] = {
+      url: entry.url,
+      transport: entry.transport ?? "http",
+      headers: { ...(entry.headers ?? {}) },
+    };
   }
+  const creds = listCredentials(invoke.fs)();
+  for (const { name, cred } of creds) {
+    out[name] = { url: cred.url, transport: cred.transport, headers: cred.headers };
+  }
+  const credentialed = creds.map((c) => c.name);
+  const declaredOnly = Object.keys(out).filter((n) => !credentialed.includes(n));
+  console.log(
+    `[guuey] mcp endpoints: credentialed=[${credentialed.join(",")}] declared-only=[${declaredOnly.join(",")}]`
+  );
   return out;
 }
 

package/dist/templates/openai-agents-sdk/tsup.config.ts

@@ -1,9 +1,16 @@
 import { defineConfig } from "tsup";
 
 export default defineConfig({
-  entry: { "guuey.worker": "src/worker.ts" },
+  entry: { worker: "src/worker.ts" },
   format: ["esm"],
   outDir: ".",
   clean: false,
-  noExternal: [/./], // bundle everything — the deploy tarball must be runnable via `node guuey.worker.js`
+  // Dependencies stay EXTERNAL (tsup's default): @openai/agents' dependency
+  // tree is not ESM-bundle-safe (debug's dynamic require("tty"); circular
+  // class hierarchies in its MCP module — both crash a noExternal bundle at
+  // boot, caught by the first live openai pod gate). The platform installs
+  // deps from the lockfile at image-build time — the same registry-install
+  // path the google-adk graceful lane uses. The output is `worker.js` (via
+  // guuey.json#worker): the `guuey.worker.js` name specifically means
+  // "self-contained, skip install" to the platform's image build.
 });

package/dist/templates/openai-agents-sdk/web/package.json

@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "@mcp-ui/client": "^7.1.1",
-    "@silverprotocol/core": "0.3.2",
+    "@silverprotocol/core": "0.4.1",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/create-agentic-app",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "description": "Scaffold a guuey agentic app: code-mode agent + custom MCP + ggui + web, local pnpm dev, one-command guuey deploy.",
   "license": "MIT",
   "type": "module",
@@ -22,7 +22,8 @@
     "tsup": "^8.5.0",
     "typescript": "^5.8.0",
     "vitest": "^3.2.4",
-    "@guuey/config": "0.1.1"
+    "@guuey/config": "0.2.0",
+    "@guuey/worker": "0.2.0"
   },
   "publishConfig": {
     "access": "public"