@hotmeshio/long-tail 0.23.1 → 0.24.0

package/build/system/mcp-servers/admin/schemas.d.ts

@@ -645,20 +645,20 @@ export declare const createUserSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         role: string;
         type: "admin" | "member" | "superadmin";
-        read_scope?: "self" | "all" | undefined;
-        write_scope?: "self" | "all" | "none" | undefined;
+        read_scope?: "all" | "self" | undefined;
+        write_scope?: "all" | "self" | "none" | undefined;
     }, {
         role: string;
         type: "admin" | "member" | "superadmin";
-        read_scope?: "self" | "all" | undefined;
-        write_scope?: "self" | "all" | "none" | undefined;
+        read_scope?: "all" | "self" | undefined;
+        write_scope?: "all" | "self" | "none" | undefined;
     }>, "many">>>;
 }, "strip", z.ZodTypeAny, {
     roles: {
         role: string;
         type: "admin" | "member" | "superadmin";
-        read_scope?: "self" | "all" | undefined;
-        write_scope?: "self" | "all" | "none" | undefined;
+        read_scope?: "all" | "self" | undefined;
+        write_scope?: "all" | "self" | "none" | undefined;
     }[];
     external_id: string;
     email?: string | undefined;
@@ -668,8 +668,8 @@ export declare const createUserSchema: z.ZodObject<{
     roles?: {
         role: string;
         type: "admin" | "member" | "superadmin";
-        read_scope?: "self" | "all" | undefined;
-        write_scope?: "self" | "all" | "none" | undefined;
+        read_scope?: "all" | "self" | undefined;
+        write_scope?: "all" | "self" | "none" | undefined;
     }[] | undefined;
     email?: string | undefined;
     display_name?: string | undefined;
@@ -684,14 +684,14 @@ export declare const addUserRoleSchema: z.ZodObject<{
     role: string;
     type: "admin" | "member" | "superadmin";
     user_id: string;
-    read_scope?: "self" | "all" | undefined;
-    write_scope?: "self" | "all" | "none" | undefined;
+    read_scope?: "all" | "self" | undefined;
+    write_scope?: "all" | "self" | "none" | undefined;
 }, {
     role: string;
     type: "admin" | "member" | "superadmin";
     user_id: string;
-    read_scope?: "self" | "all" | undefined;
-    write_scope?: "self" | "all" | "none" | undefined;
+    read_scope?: "all" | "self" | undefined;
+    write_scope?: "all" | "self" | "none" | undefined;
 }>;
 export declare const removeUserRoleSchema: z.ZodObject<{
     user_id: z.ZodString;
@@ -3420,21 +3420,21 @@ export declare const upsertScanRuleSchema: z.ZodObject<{
         markdown: z.ZodOptional<z.ZodString>;
         route: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        markdown?: string | undefined;
         route?: string | undefined;
-    }, {
         markdown?: string | undefined;
+    }, {
         route?: string | undefined;
+        markdown?: string | undefined;
     }>>;
     notPrimed: z.ZodOptional<z.ZodObject<{
         markdown: z.ZodOptional<z.ZodString>;
         route: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        markdown?: string | undefined;
         route?: string | undefined;
-    }, {
         markdown?: string | undefined;
+    }, {
         route?: string | undefined;
+        markdown?: string | undefined;
     }>>;
     enabled: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
@@ -3578,12 +3578,12 @@ export declare const upsertScanRuleSchema: z.ZodObject<{
     }[];
     enabled?: boolean | undefined;
     fallback?: {
-        markdown?: string | undefined;
         route?: string | undefined;
+        markdown?: string | undefined;
     } | undefined;
     notPrimed?: {
-        markdown?: string | undefined;
         route?: string | undefined;
+        markdown?: string | undefined;
     } | undefined;
 }, {
     name: string;
@@ -3726,12 +3726,12 @@ export declare const upsertScanRuleSchema: z.ZodObject<{
     }[];
     enabled?: boolean | undefined;
     fallback?: {
-        markdown?: string | undefined;
         route?: string | undefined;
+        markdown?: string | undefined;
     } | undefined;
     notPrimed?: {
-        markdown?: string | undefined;
         route?: string | undefined;
+        markdown?: string | undefined;
     } | undefined;
 }>;
 export declare const deleteScanRuleSchema: z.ZodObject<{

package/build/system/mcp-servers/admin/tasks.js

@@ -34,6 +34,8 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerTaskTools = registerTaskTools;
+const caller_auth_1 = require("../caller-auth");
+const helpers_1 = require("../../../api/escalations/helpers");
 const taskService = __importStar(require("../../../services/task"));
 const escalationService = __importStar(require("../../../services/escalation"));
 const schemas_1 = require("./schemas");
@@ -78,11 +80,14 @@ function registerTaskTools(server) {
         description: 'Get all tasks and escalations for a process (origin_id). ' +
             'Returns the full history of a multi-step workflow execution.',
         inputSchema: schemas_1.getProcessDetailSchema,
-    }, async (args) => {
-        const [tasks, escalations] = await Promise.all([
+    }, async (args, extra) => {
+        const caller = (0, caller_auth_1.externalCaller)(extra);
+        const [tasks, all] = await Promise.all([
             taskService.getProcessTasks(args.origin_id),
             escalationService.getEscalationsByOriginId(args.origin_id),
         ]);
+        const scope = caller ? await (0, helpers_1.getEscalationReadScope)(caller.userId) : null;
+        const escalations = scope ? all.filter((e) => (0, helpers_1.scopeAdmits)(scope, caller.userId, e)) : all;
         return {
             content: [{
                     type: 'text',

package/build/system/mcp-servers/admin/users.js

@@ -36,8 +36,17 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerUserTools = registerUserTools;
 const userService = __importStar(require("../../../services/user"));
 const roleService = __importStar(require("../../../services/role"));
+const list_schema_1 = require("../../../shared/list-schema");
 const users_1 = require("../../../api/users");
+const capabilities_1 = require("../../../modules/capabilities");
+const caller_auth_1 = require("../caller-auth");
 const schemas_1 = require("./schemas");
+/** An MCP error for a refused decision; null when the call may go on. */
+function refusal(decision) {
+    if (decision.allowed)
+        return null;
+    return { isError: true, content: [{ type: 'text', text: JSON.stringify({ error: decision.error }) }] };
+}
 function registerUserTools(server) {
     // mirrors GET /api/users
     server.registerTool('list_users', {
@@ -74,7 +83,11 @@ function registerUserTools(server) {
         description: 'Create a new user account with optional roles. The user can then ' +
             'claim and resolve escalations for their assigned roles.',
         inputSchema: schemas_1.createUserSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
+        const caller = (0, caller_auth_1.externalCaller)(extra);
+        const refused = caller ? refusal(await (0, capabilities_1.mayGrantRoles)(caller.userId, args.roles)) : null;
+        if (refused)
+            return refused;
         // roles carry optional read_scope/write_scope (default all/all); createUser
         // normalizes admin/superadmin to all/all and stores member scope verbatim.
         for (const r of args.roles) {
@@ -105,7 +118,14 @@ function registerUserTools(server) {
             'read_scope=self + write_scope=self for a one-time user who only handles ' +
             'their own pre-assigned escalation).',
         inputSchema: schemas_1.addUserRoleSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
+        const caller = (0, caller_auth_1.externalCaller)(extra);
+        if (caller) {
+            const decision = await (0, capabilities_1.mayGrantRole)(caller.userId, { role: args.role, type: args.type });
+            if (!decision.allowed) {
+                return { isError: true, content: [{ type: 'text', text: JSON.stringify({ error: decision.error }) }] };
+            }
+        }
         const read = args.read_scope ?? userService.DEFAULT_READ_SCOPE;
         const write = args.write_scope ?? userService.DEFAULT_WRITE_SCOPE;
         if (!userService.isValidScopePair(read, write)) {
@@ -127,7 +147,11 @@ function registerUserTools(server) {
         title: 'Remove User Role',
         description: 'Remove a role from a user.',
         inputSchema: schemas_1.removeUserRoleSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
+        const caller = (0, caller_auth_1.externalCaller)(extra);
+        const refused = caller ? refusal(await (0, capabilities_1.mayRevokeRole)(caller.userId, args.user_id, args.role)) : null;
+        if (refused)
+            return refused;
         const removed = await userService.removeUserRole(args.user_id, args.role);
         if (!removed) {
             return {
@@ -147,7 +171,11 @@ function registerUserTools(server) {
             'rename preserves the value. Identity-binding keys (badge scheme target facets) assert ' +
             'uniqueness among active users.',
         inputSchema: schemas_1.patchUserPropertiesSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
+        const caller = (0, caller_auth_1.externalCaller)(extra);
+        const refused = caller ? refusal(await (0, capabilities_1.mayManageAccount)(caller.userId, args.user_id)) : null;
+        if (refused)
+            return refused;
         const result = await (0, users_1.patchUserProperties)({
             id: args.user_id,
             set: args.set,
@@ -228,6 +256,13 @@ function registerUserTools(server) {
             'priority_threshold_minutes, priority_facet, entity_facet).',
         inputSchema: schemas_1.updateRoleSchema,
     }, async (args) => {
+        const listSchemaError = args.list_schema != null ? (0, list_schema_1.listSchemaRelationsError)(args.list_schema) : null;
+        if (listSchemaError) {
+            return {
+                content: [{ type: 'text', text: JSON.stringify({ error: `list_schema: ${listSchemaError}` }) }],
+                isError: true,
+            };
+        }
         const updated = await roleService.updateRoleMetadata(args.role, {
             title: args.title,
             description: args.description,

package/build/system/mcp-servers/admin/workflow-config.js

@@ -35,6 +35,8 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerWorkflowConfigTools = registerWorkflowConfigTools;
 const configService = __importStar(require("../../../services/config"));
+const workflow_invocation_1 = require("../../../services/workflow-invocation");
+const caller_auth_1 = require("../caller-auth");
 const lookup_cache_1 = require("../../../services/knowledge/lookup-cache");
 const lookup_refs_1 = require("../../../services/knowledge/lookup-refs");
 const ltconfig_1 = require("../../../modules/ltconfig");
@@ -101,7 +103,16 @@ function registerWorkflowConfigTools(server) {
             'to their defaults, so send the whole profile (start from get_workflow_config). ' +
             'Invalidates the config cache and restarts cron if schedule changes.',
         inputSchema: schemas_1.upsertWorkflowConfigSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
+        const caller = (0, caller_auth_1.externalCaller)(extra);
+        if (caller && args.execute_as) {
+            try {
+                await (0, workflow_invocation_1.assertMayActAs)(caller.userId, args.execute_as);
+            }
+            catch (err) {
+                return errorResult(err.message);
+            }
+        }
         if (args.icon && !(0, workflow_icons_1.isWorkflowIcon)(args.icon)) {
             return errorResult(`Unknown workflow icon "${args.icon}"; choose one of WORKFLOW_ICONS`);
         }

package/build/system/mcp-servers/admin/workflows.js

@@ -37,9 +37,26 @@ exports.registerWorkflowTools = registerWorkflowTools;
 const configService = __importStar(require("../../../services/config"));
 const registry_1 = require("../../../services/workers/registry");
 const workflow_invocation_1 = require("../../../services/workflow-invocation");
+const caller_auth_1 = require("../caller-auth");
+const capabilities_1 = require("../../../modules/capabilities");
+const run_read_1 = require("./run-read");
 const workflowApi = __importStar(require("../../../api/workflows"));
 const workflow_state_1 = require("../../../shared/workflow-state");
 const schemas_1 = require("./schemas");
+const SYSTEM_INVOKER = { userId: 'lt-system', role: 'superadmin' };
+/**
+ * Who a workflow is invoked as. A `/mcp` caller must satisfy the workflow's
+ * invocation roles and becomes the envelope identity. Key scopes are left
+ * off: at `/mcp` they decide which invoke tool is listed, not whether the
+ * invocation is allowed. Internal calls invoke as lt-system.
+ */
+async function resolveInvoker(workflowType, extra, executeAs) {
+    const caller = (0, caller_auth_1.externalCaller)(extra);
+    if (!caller)
+        return SYSTEM_INVOKER;
+    await (0, workflow_invocation_1.authorizeInvocation)({ workflowType, userId: caller.userId, executeAs });
+    return { userId: caller.userId, role: caller.role };
+}
 function registerWorkflowTools(server) {
     // mirrors GET /api/workflows/discovered
     server.registerTool('list_discovered_workflows', {
@@ -99,8 +116,9 @@ function registerWorkflowTools(server) {
             'the payload must satisfy. Returns the workflow ID immediately; the ' +
             'workflow runs durably in the background.',
         inputSchema: schemas_1.invokeWorkflowSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
         const config = await configService.getWorkflowConfig(args.workflow_type);
+        const invoker = await resolveInvoker(args.workflow_type, extra, args.execute_as);
         const rejected = await inputSchemaRejection(config, args);
         if (rejected)
             return rejected;
@@ -112,7 +130,7 @@ function registerWorkflowTools(server) {
             // WorkflowOptions passthrough — parity with the HTTP invoke route, which
             // spreads extra body keys into options. signalIn stays service-forced.
             options: args.options,
-            auth: { userId: 'lt-system', role: 'superadmin' },
+            auth: invoker,
         });
         return {
             content: [{
@@ -132,7 +150,7 @@ function registerWorkflowTools(server) {
             'flag fails with a clear error. Call get_workflow_config for the ' +
             'input_schema the payload must satisfy.',
         inputSchema: schemas_1.invokeWorkflowSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
         const config = await configService.getWorkflowConfig(args.workflow_type);
         if (!config?.invocable) {
             return {
@@ -152,6 +170,7 @@ function registerWorkflowTools(server) {
                 isError: true,
             };
         }
+        const invoker = await resolveInvoker(args.workflow_type, extra, args.execute_as);
         const rejected = await inputSchemaRejection(config, args);
         if (rejected)
             return rejected;
@@ -161,7 +180,7 @@ function registerWorkflowTools(server) {
             metadata: args.metadata,
             executeAs: args.execute_as,
             options: args.options,
-            auth: { userId: 'lt-system', role: 'superadmin' },
+            auth: invoker,
         });
         return {
             content: [{
@@ -179,11 +198,14 @@ function registerWorkflowTools(server) {
             'Resolution is namespace-aware: pass app_id to read a workflow (e.g. a ' +
             'child) running in a non-default HotMesh namespace.',
         inputSchema: schemas_1.getWorkflowStatusSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
         const reply = (body, isError = false) => ({
             content: [{ type: 'text', text: JSON.stringify(body) }],
             ...(isError ? { isError: true } : {}),
         });
+        if (!(await (0, capabilities_1.mayReadWorkflowRun)(await (0, caller_auth_1.callerAuth)(extra), args.workflow_id))) {
+            return reply({ error: run_read_1.RUN_READ_DENIED }, true);
+        }
         const found = await workflowApi.getWorkflowResult({
             workflowId: args.workflow_id,
             appId: args.app_id,

package/build/system/mcp-servers/admin/yaml-workflows.js

@@ -38,6 +38,8 @@ const yamlDb = __importStar(require("../../../services/yaml-workflow/db"));
 const yamlGenerator = __importStar(require("../../../services/yaml-workflow/generator"));
 const yamlDeployer = __importStar(require("../../../services/yaml-workflow/deployer"));
 const yamlWorkers = __importStar(require("../../../services/yaml-workflow/workers"));
+const deploy_1 = require("../../../api/yaml-workflows/deploy");
+const caller_auth_1 = require("../caller-auth");
 const task_1 = require("../../../services/task");
 const schemas_1 = require("./schemas");
 function registerYamlWorkflowTools(server) {
@@ -170,7 +172,7 @@ function registerYamlWorkflowTools(server) {
             'register workers. All sibling workflows sharing the same app_id ' +
             'are deployed together.',
         inputSchema: schemas_1.deployYamlWorkflowSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
         const wf = await yamlDb.getYamlWorkflow(args.id);
         if (!wf) {
             return {
@@ -178,6 +180,10 @@ function registerYamlWorkflowTools(server) {
                 isError: true,
             };
         }
+        const refused = await (0, deploy_1.deployRefusal)(wf, (0, caller_auth_1.externalCaller)(extra));
+        if (refused) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: refused.error }) }], isError: true };
+        }
         const deployVersion = wf.app_version || '1';
         const siblings = await yamlDb.listYamlWorkflowsByAppId(wf.app_id);
         await yamlDeployer.deployAppId(wf.app_id, deployVersion);

package/build/system/mcp-servers/caller-auth.d.ts

@@ -0,0 +1,18 @@
+import type { LTApiAuth } from '../../types/sdk';
+/** The `extra` argument the MCP SDK passes to a tool handler. */
+export interface ToolCallExtra {
+    authInfo?: unknown;
+}
+/**
+ * The lt-system bot as an api principal. The escalation RBAC helpers query a
+ * uuid column, so the bot's real UUID is resolved once and cached rather than
+ * passing its external_id. The bot is a superadmin.
+ */
+export declare function systemAuth(): Promise<LTApiAuth>;
+/**
+ * The authenticated caller when the call arrived at `/mcp`. The SDK forwards
+ * `req.auth` as `authInfo`; internal dispatch passes no `extra`.
+ */
+export declare function externalCaller(extra?: ToolCallExtra): LTApiAuth | undefined;
+/** The external caller, or the lt-system principal for internal calls. */
+export declare function callerAuth(extra?: ToolCallExtra): Promise<LTApiAuth>;

package/build/system/mcp-servers/caller-auth.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.systemAuth = systemAuth;
+exports.externalCaller = externalCaller;
+exports.callerAuth = callerAuth;
+const iam_1 = require("../../services/iam");
+let systemPrincipalId = null;
+/**
+ * The lt-system bot as an api principal. The escalation RBAC helpers query a
+ * uuid column, so the bot's real UUID is resolved once and cached rather than
+ * passing its external_id. The bot is a superadmin.
+ */
+async function systemAuth() {
+    if (!systemPrincipalId)
+        systemPrincipalId = await (0, iam_1.ensureSystemBot)();
+    return { userId: systemPrincipalId, role: 'superadmin' };
+}
+/**
+ * The authenticated caller when the call arrived at `/mcp`. The SDK forwards
+ * `req.auth` as `authInfo`; internal dispatch passes no `extra`.
+ */
+function externalCaller(extra) {
+    const auth = extra?.authInfo;
+    return auth?.userId ? auth : undefined;
+}
+/** The external caller, or the lt-system principal for internal calls. */
+async function callerAuth(extra) {
+    return externalCaller(extra) ?? systemAuth();
+}

package/build/system/mcp-servers/claude-code.js

@@ -37,6 +37,7 @@ exports.createClaudeCodeServer = createClaudeCodeServer;
 const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const zod_1 = require("zod");
 const logger_1 = require("../../lib/logger");
+const registered_tools_1 = require("../../services/mcp/registered-tools");
 const claudeCode = __importStar(require("../activities/claude-code"));
 // ── Schemas ──────────────────────────────────────────────────────────────────
 const executeTaskSchema = zod_1.z.object({
@@ -105,6 +106,6 @@ async function createClaudeCodeServer(options) {
             content: [{ type: 'text', text: JSON.stringify(result) }],
         };
     });
-    logger_1.loggerRegistry.info(`[lt-mcp:claude-code] ${name} ready (2 tools registered)`);
+    logger_1.loggerRegistry.info(`[lt-mcp:claude-code] ${name} ready (${(0, registered_tools_1.registeredToolCount)(instance)} tools registered)`);
     return instance;
 }

package/build/system/mcp-servers/db-query/index.js

@@ -5,6 +5,7 @@ exports.getDbServer = getDbServer;
 exports.stopDbServer = stopDbServer;
 const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const logger_1 = require("../../../lib/logger");
+const registered_tools_1 = require("../../../services/mcp/registered-tools");
 const tools_1 = require("./tools");
 let server = null;
 /**
@@ -28,7 +29,7 @@ async function createDbServer(options) {
         server = instance;
     }
     (0, tools_1.registerTools)(instance);
-    logger_1.loggerRegistry.info(`[lt-mcp:db-server] ${name} ready (6 tools registered)`);
+    logger_1.loggerRegistry.info(`[lt-mcp:db-server] ${name} ready (${(0, registered_tools_1.registeredToolCount)(instance)} tools registered)`);
     return instance;
 }
 /**

package/build/system/mcp-servers/file-storage.js

@@ -38,6 +38,7 @@ const path = __importStar(require("path"));
 const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const zod_1 = require("zod");
 const logger_1 = require("../../lib/logger");
+const registered_tools_1 = require("../../services/mcp/registered-tools");
 const publish_1 = require("../../lib/events/publish");
 const fileStorage = __importStar(require("../activities/file-storage"));
 const MIME_MAP = {
@@ -116,6 +117,6 @@ async function createFileStorageServer(options) {
         }
         return { content: [{ type: 'text', text: JSON.stringify(result) }] };
     });
-    logger_1.loggerRegistry.info(`[lt-mcp:file-storage] ${name} ready (4 tools registered)`);
+    logger_1.loggerRegistry.info(`[lt-mcp:file-storage] ${name} ready (${(0, registered_tools_1.registeredToolCount)(instance)} tools registered)`);
     return instance;
 }

package/build/system/mcp-servers/http-fetch.js

@@ -37,6 +37,7 @@ exports.createHttpFetchServer = createHttpFetchServer;
 const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const zod_1 = require("zod");
 const logger_1 = require("../../lib/logger");
+const registered_tools_1 = require("../../services/mcp/registered-tools");
 const http = __importStar(require("../activities/http"));
 const httpRequestSchema = zod_1.z.object({
     url: zod_1.z.string().describe('URL to request'),
@@ -95,6 +96,6 @@ async function createHttpFetchServer(options) {
             return { content: [{ type: 'text', text: JSON.stringify({ error: err.message }) }], isError: true };
         }
     });
-    logger_1.loggerRegistry.info(`[lt-mcp:http-fetch] ${name} ready (3 tools registered)`);
+    logger_1.loggerRegistry.info(`[lt-mcp:http-fetch] ${name} ready (${(0, registered_tools_1.registeredToolCount)(instance)} tools registered)`);
     return instance;
 }

package/build/system/mcp-servers/human-queue.js

@@ -39,6 +39,8 @@ exports.stopServer = stopServer;
 const crypto = __importStar(require("crypto"));
 const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const logger_1 = require("../../lib/logger");
+const caller_auth_1 = require("./caller-auth");
+const registered_tools_1 = require("../../services/mcp/registered-tools");
 const escalationService = __importStar(require("../../services/escalation"));
 const resolver_validation_1 = require("../../services/escalation/resolver-validation");
 const enforcement_cache_1 = require("../../services/role/enforcement-cache");
@@ -275,11 +277,13 @@ async function createHumanQueueServer(options) {
             + 'escalation and wakes the waiting workflow with the full item collection. Duplicate or undeclared '
             + 'item keys are rejected. The payload validates against the same form_schema a single-item resolve uses.',
         inputSchema: human_queue_schemas_1.resolveBatchItemSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
         const rejected = await checkResolveToolPayload(args.escalation_id, args.payload);
         if (rejected)
             return rejected;
-        const result = await escalationService.resolveBatchItem(args.escalation_id, args.item_key, args.payload, { source: 'mcp_server' });
+        // The fill's actor is the caller: the person at /mcp, else lt-system.
+        const actor = (await (0, caller_auth_1.callerAuth)(extra)).userId;
+        const result = await escalationService.resolveBatchItem(args.escalation_id, args.item_key, args.payload, { source: 'mcp_server' }, undefined, undefined, actor);
         if (result.outcome !== 'accepted' && result.outcome !== 'completed') {
             return {
                 content: [{
@@ -427,7 +431,7 @@ async function createHumanQueueServer(options) {
                 }],
         };
     });
-    logger_1.loggerRegistry.info(`[lt-mcp:server] ${name} ready (7 tools registered)`);
+    logger_1.loggerRegistry.info(`[lt-mcp:server] ${name} ready (${(0, registered_tools_1.registeredToolCount)(server)} tools registered)`);
     return server;
 }
 /** Get the current MCP server instance. */

package/build/system/mcp-servers/oauth.js

@@ -37,7 +37,10 @@ exports.createOAuthServer = createOAuthServer;
 const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const zod_1 = require("zod");
 const logger_1 = require("../../lib/logger");
+const registered_tools_1 = require("../../services/mcp/registered-tools");
 const oauth = __importStar(require("../activities/oauth"));
+const capabilities_1 = require("../../modules/capabilities");
+const caller_auth_1 = require("./caller-auth");
 const getAccessTokenSchema = zod_1.z.object({
     provider: zod_1.z.string().describe('OAuth provider name (google, github, microsoft, anthropic, etc.)'),
     user_id: zod_1.z.string().describe('User ID to get token for'),
@@ -51,6 +54,21 @@ const revokeConnectionSchema = zod_1.z.object({
     user_id: zod_1.z.string().describe('User ID to revoke connection for'),
     label: zod_1.z.string().optional().describe('Credential label to revoke (default: "default")'),
 });
+/**
+ * A `/mcp` caller may use their own connections; another user's need
+ * superadmin. Internal calls from workflows are unrestricted.
+ */
+async function refuseOtherUser(userId, extra) {
+    const caller = (0, caller_auth_1.externalCaller)(extra);
+    if (!caller || caller.userId === userId)
+        return null;
+    if ((await (0, capabilities_1.resolveCapabilities)(caller)).superadmin)
+        return null;
+    return {
+        isError: true,
+        content: [{ type: 'text', text: JSON.stringify({ error: 'You can only use your own OAuth connections' }) }],
+    };
+}
 /**
  * Create an OAuth MCP server.
  *
@@ -69,7 +87,10 @@ async function createOAuthServer() {
             'authenticated API request — do not cache or reuse across workflow steps. ' +
             'Use the label parameter to select a specific credential when multiple exist.',
         inputSchema: getAccessTokenSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
+        const refused = await refuseOtherUser(args.user_id, extra);
+        if (refused)
+            return refused;
         const result = await oauth.getAccessToken(args);
         return {
             content: [{ type: 'text', text: JSON.stringify(result) }],
@@ -79,7 +100,10 @@ async function createOAuthServer() {
         title: 'List OAuth Connections',
         description: 'List all OAuth providers connected for a user. Returns provider, label, and credential type for each connection.',
         inputSchema: listConnectionsSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
+        const refused = await refuseOtherUser(args.user_id, extra);
+        if (refused)
+            return refused;
         const result = await oauth.listConnections(args);
         return {
             content: [{ type: 'text', text: JSON.stringify(result) }],
@@ -89,12 +113,15 @@ async function createOAuthServer() {
         title: 'Revoke OAuth Connection',
         description: 'Disconnect an OAuth provider for a user, removing stored tokens. Use label to target a specific credential.',
         inputSchema: revokeConnectionSchema,
-    }, async (args) => {
+    }, async (args, extra) => {
+        const refused = await refuseOtherUser(args.user_id, extra);
+        if (refused)
+            return refused;
         const result = await oauth.revokeConnection(args);
         return {
             content: [{ type: 'text', text: JSON.stringify(result) }],
         };
     });
-    logger_1.loggerRegistry.info('[lt-mcp:oauth] long-tail-oauth ready (3 tools registered)');
+    logger_1.loggerRegistry.info(`[lt-mcp:oauth] long-tail-oauth ready (${(0, registered_tools_1.registeredToolCount)(instance)} tools registered)`);
     return instance;
 }

package/build/system/mcp-servers/schema-exchange.js

@@ -37,6 +37,7 @@ exports.createSchemaExchangeServer = createSchemaExchangeServer;
 const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const zod_1 = require("zod");
 const logger_1 = require("../../lib/logger");
+const registered_tools_1 = require("../../services/mcp/registered-tools");
 const schemaExchange = __importStar(require("../activities/schema-exchange"));
 const exchangeSchema = zod_1.z.object({
     endpoint: zod_1.z.string().optional().describe('Service endpoint URL. Supports template variables resolved by the caller (e.g. /Patient/{id}).'),
@@ -88,6 +89,6 @@ async function createSchemaExchangeServer(options) {
         const result = schemaExchange.validateSchema(args.data, args.schema);
         return { content: [{ type: 'text', text: JSON.stringify(result) }] };
     });
-    logger_1.loggerRegistry.info(`[lt-mcp:schema-exchange] ${name} ready (2 tools registered)`);
+    logger_1.loggerRegistry.info(`[lt-mcp:schema-exchange] ${name} ready (${(0, registered_tools_1.registeredToolCount)(instance)} tools registered)`);
     return instance;
 }

package/build/system/mcp-servers/vision.d.ts

@@ -1,4 +1,5 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare const STORAGE_READ_DENIED = "Reading an image from managed storage requires builder access; pass an https URL or a data URI";
 /**
  * Create the Vision MCP server.
  *