@inneranimalmedia/agentsam-sdk 2.6.4 → 2.6.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (699) hide show
  1. package/AGENTSAM.md +40 -0
  2. package/README.md +15 -9
  3. package/apps/README.md +5 -0
  4. package/apps/cad-creator/README.md +4 -4
  5. package/apps/cad-creator/shared/cad/package.json +1 -1
  6. package/apps/client-cms-editor/AGENTS.md +17 -0
  7. package/apps/client-cms-editor/IMPORT_PROVENANCE.json +8 -0
  8. package/apps/client-cms-editor/README.md +100 -0
  9. package/apps/client-cms-editor/agentsam.app.json +74 -0
  10. package/apps/client-cms-editor/backend/README.md +5 -0
  11. package/apps/client-cms-editor/backend/package.json +39 -0
  12. package/apps/client-cms-editor/backend/src/api/client.ts +233 -0
  13. package/apps/client-cms-editor/backend/src/index.ts +6 -0
  14. package/apps/client-cms-editor/backend/src/model.ts +11 -0
  15. package/apps/client-cms-editor/backend/src/preview/bridge.ts +79 -0
  16. package/apps/client-cms-editor/backend/src/preview/urls.ts +55 -0
  17. package/apps/client-cms-editor/backend/src/routing/cms-route.js +293 -0
  18. package/apps/client-cms-editor/backend/src/routing/index.js +10 -0
  19. package/apps/client-cms-editor/backend/src/storefront.ts +52 -0
  20. package/apps/client-cms-editor/backend/tsconfig.json +20 -0
  21. package/apps/client-cms-editor/backend/worker/index.js +34 -0
  22. package/apps/client-cms-editor/backend/wrangler.jsonc +11 -0
  23. package/apps/client-cms-editor/bin/agentsam-cms.js +262 -0
  24. package/apps/client-cms-editor/bin/agentsam-cms.mjs +3 -0
  25. package/apps/client-cms-editor/frontend/index.html +12 -0
  26. package/apps/client-cms-editor/frontend/package.json +42 -0
  27. package/apps/client-cms-editor/frontend/src/AgentSamDrawer.tsx +156 -0
  28. package/apps/client-cms-editor/frontend/src/CmsAgentSurface.tsx +36 -0
  29. package/apps/client-cms-editor/frontend/src/adapters/heuristic.ts +29 -0
  30. package/apps/client-cms-editor/frontend/src/adapters/http.ts +628 -0
  31. package/apps/client-cms-editor/frontend/src/adapters/memory.ts +510 -0
  32. package/apps/client-cms-editor/frontend/src/editor/CmsEditor.tsx +213 -0
  33. package/apps/client-cms-editor/frontend/src/editor/CmsEditorProvider.tsx +20 -0
  34. package/apps/client-cms-editor/frontend/src/editor/canvas/PreviewCanvas.tsx +53 -0
  35. package/apps/client-cms-editor/frontend/src/editor/legacy/CmsEditorPrototype.tsx +1374 -0
  36. package/apps/client-cms-editor/frontend/src/editor/useCmsEditorController.ts +218 -0
  37. package/apps/client-cms-editor/frontend/src/env.d.ts +14 -0
  38. package/apps/client-cms-editor/frontend/src/index.ts +22 -0
  39. package/apps/client-cms-editor/frontend/src/lib/agent-host.ts +24 -0
  40. package/apps/client-cms-editor/frontend/src/lib/content-safety.ts +63 -0
  41. package/apps/client-cms-editor/frontend/src/main.tsx +91 -0
  42. package/apps/client-cms-editor/frontend/src/mount.tsx +113 -0
  43. package/apps/client-cms-editor/frontend/src/styles/agentsam-drawer.css +214 -0
  44. package/apps/client-cms-editor/frontend/src/styles/cmsShell.css +1739 -0
  45. package/apps/client-cms-editor/frontend/src/styles/studio.css +158 -0
  46. package/apps/client-cms-editor/frontend/src/surfaces/CmsDashboard.tsx +313 -0
  47. package/apps/client-cms-editor/frontend/src/surfaces/CmsGuidedChatHero.tsx +121 -0
  48. package/apps/client-cms-editor/frontend/src/surfaces/CmsHubPage.tsx +132 -0
  49. package/apps/client-cms-editor/frontend/src/surfaces/CmsSiteSwitcher.tsx +176 -0
  50. package/apps/client-cms-editor/frontend/src/surfaces/index.ts +5 -0
  51. package/apps/client-cms-editor/frontend/src/surfaces/types.ts +48 -0
  52. package/apps/client-cms-editor/frontend/tsconfig.json +36 -0
  53. package/apps/client-cms-editor/frontend/vite.config.ts +25 -0
  54. package/apps/client-cms-editor/package-lock.json +4671 -0
  55. package/apps/client-cms-editor/package.json +135 -0
  56. package/apps/client-cms-editor/reference/DONOR_README.md +52 -0
  57. package/apps/client-cms-editor/reference/DONOR_package-lock.json +1253 -0
  58. package/apps/client-cms-editor/reference/DONOR_tsconfig.json +15 -0
  59. package/apps/client-cms-editor/reference/harvest/HARVEST_RECEIPT.json +201 -0
  60. package/apps/client-cms-editor/reference/harvest/PROVENANCE_HISTORY.txt +10 -0
  61. package/apps/client-cms-editor/reference/harvest/README.md +8 -0
  62. package/apps/client-cms-editor/reference/harvest/plans/ARCHIVE-INTAKE.md +135 -0
  63. package/apps/client-cms-editor/reference/harvest/plans/CHATGPT-IDENTITY-HARVEST.md +83 -0
  64. package/apps/client-cms-editor/reference/harvest/plans/CMS-EDITOR-HARVEST.md +166 -0
  65. package/apps/client-cms-editor/reference/harvest/plans/HARVEST-INDEX.md +196 -0
  66. package/apps/client-cms-editor/reference/harvest/plans/INNERANIMALS-CONTENT-001.md +137 -0
  67. package/apps/client-cms-editor/reference/harvest/plans/NO-IMPLICIT-SIDE-EFFECTS.md +87 -0
  68. package/apps/client-cms-editor/reference/harvest/plans/STOREFRONT-SURFACE-MAP.md +140 -0
  69. package/apps/client-cms-editor/reference/harvest/plans/THEME-INNERANIMALS-HARVEST.md +137 -0
  70. package/apps/client-cms-editor/reference/harvest/plans/TOOLING-LAB.md +63 -0
  71. package/apps/client-cms-editor/reference/harvest/plans/harvest-manifest.json +97 -0
  72. package/apps/client-cms-editor/reference/harvest/plans/local-cms-harvest-schema.sql +328 -0
  73. package/apps/client-cms-editor/shared/cms/package.json +31 -0
  74. package/apps/client-cms-editor/shared/cms/src/adapter.ts +204 -0
  75. package/apps/client-cms-editor/shared/cms/src/agent-context.ts +37 -0
  76. package/apps/client-cms-editor/shared/cms/src/cloudflare-bindings.ts +51 -0
  77. package/apps/client-cms-editor/shared/cms/src/editor-types.ts +90 -0
  78. package/apps/client-cms-editor/shared/cms/src/host.ts +82 -0
  79. package/apps/client-cms-editor/shared/cms/src/index.ts +9 -0
  80. package/apps/client-cms-editor/shared/cms/src/map.ts +115 -0
  81. package/apps/client-cms-editor/shared/cms/src/publication.ts +24 -0
  82. package/apps/client-cms-editor/shared/cms/src/routes.ts +11 -0
  83. package/apps/client-cms-editor/shared/cms/src/starter-pack.ts +158 -0
  84. package/apps/client-cms-editor/shared/cms/tsconfig.json +12 -0
  85. package/bin/agentsam-rapid-rust +36 -0
  86. package/contracts/source-types.v1.json +353 -0
  87. package/docs/AUTH_IDENTITY_CONTRACT.md +2 -0
  88. package/docs/CMS_CONTEXTUAL_COMPOSER.md +1 -1
  89. package/docs/MACHINE_INTELLIGENCE.md +120 -0
  90. package/docs/PRODUCT_LIFECYCLE.md +566 -0
  91. package/docs/THEME_REFINERY.md +2 -2
  92. package/docs/WINDOWS_RUNTIME_INSTALL.md +30 -0
  93. package/docs/architecture/AGENTSAM_APPLICATION_CONTRACT.md +188 -0
  94. package/docs/architecture/AGENTSAM_RUNTIME_PROTOCOL.md +171 -0
  95. package/docs/architecture/LOCAL_STUDIO_CLOUDFLARE_OAUTH.md +12 -4
  96. package/docs/architecture/R2_SLUG_NAMESPACE.md +20 -0
  97. package/docs/architecture/WORK_PRODUCT_EXTRACTION.md +97 -0
  98. package/docs/brand/AGENT_SAM_ICON_GRAMMAR.md +70 -0
  99. package/docs/content-studio/HOST_MOUNT_CHECKLIST.md +71 -0
  100. package/docs/content-studio/REVISION_GATE_2026-09-27.md +501 -0
  101. package/docs/contracts/capability-install-planner.md +67 -0
  102. package/docs/contracts/environment-vocabulary.md +195 -0
  103. package/docs/contracts/google-cloud-oauth-setup.md +199 -0
  104. package/docs/local-studio/WORKMODE_DONOR_NOTES.md +1 -1
  105. package/docs/plans/LOCAL-STUDIO-GRADUATION-2026-09-26.md +290 -0
  106. package/docs/plans/LOCAL-STUDIO-REAL-APP-CONTRACT-ADDENDUM-2026-09-27.md +394 -0
  107. package/docs/plans/LOCAL_STUDIO_DESKTOP_RELEASE_2026-09-29.md +150 -0
  108. package/docs/plans/MACHINE-FIRST-APPS-TUI-2026-09-24.md +227 -0
  109. package/docs/plans/TOMORROW-EXTENSIVE-TODO-2026-09-26.md +221 -0
  110. package/docs/plans/TOMORROW-MACHINE-FIRST-BRIEFING.md +145 -0
  111. package/docs/plans/UNIVERSAL-INGEST-MACHINE-FIRST-2026-09-24.md +215 -0
  112. package/docs/plugins.md +2 -2
  113. package/docs/product/AGENTSAM_PRODUCT_EXPERIENCE_STANDARD.md +280 -0
  114. package/docs/product/LOCAL_STUDIO_DESKTOP_EXPERIENCE.md +139 -0
  115. package/docs/product/README.md +8 -0
  116. package/docs/rapid-rust-wasm.md +35 -0
  117. package/migrations/d1/0016_cloudflare_oauth_user_oauth_tokens_ssot.sql +14 -0
  118. package/migrations/d1/0017_identity_native_oauth.sql +21 -0
  119. package/native/agentsam-machine/Cargo.lock +426 -0
  120. package/native/agentsam-machine/Cargo.toml +9 -0
  121. package/native/agentsam-machine/cli/Cargo.toml +14 -0
  122. package/native/agentsam-machine/cli/src/main.rs +77 -0
  123. package/native/agentsam-machine/core/Cargo.toml +15 -0
  124. package/native/agentsam-machine/core/src/assets.rs +790 -0
  125. package/native/agentsam-machine/core/src/bound.rs +298 -0
  126. package/native/agentsam-machine/core/src/enrich.rs +706 -0
  127. package/native/agentsam-machine/core/src/frontend.rs +442 -0
  128. package/native/agentsam-machine/core/src/lib.rs +1086 -0
  129. package/native/agentsam-machine/core/src/liquid.rs +528 -0
  130. package/native/agentsam-machine/core/src/source_types.rs +78 -0
  131. package/package.json +110 -21
  132. package/packages/agentsam-brand/README.md +107 -12
  133. package/packages/agentsam-brand/bin/agentsam-brand.mjs +9 -0
  134. package/packages/agentsam-brand/package.json +41 -9
  135. package/packages/agentsam-brand/src/adapters/cloudflare-images.js +453 -0
  136. package/packages/agentsam-brand/src/adapters/cloudflare-r2.js +74 -0
  137. package/packages/agentsam-brand/src/adapters/d1-registry.js +26 -0
  138. package/packages/agentsam-brand/src/adapters/filesystem.js +59 -0
  139. package/packages/agentsam-brand/src/adapters/memory.js +31 -0
  140. package/packages/agentsam-brand/src/cli/controller.js +503 -0
  141. package/packages/agentsam-brand/src/cli/wizard.js +526 -0
  142. package/packages/agentsam-brand/src/core/capabilities.js +201 -0
  143. package/packages/agentsam-brand/src/core/derivatives.js +211 -0
  144. package/packages/agentsam-brand/src/core/errors.js +12 -0
  145. package/packages/agentsam-brand/src/core/ingest.js +195 -0
  146. package/packages/agentsam-brand/src/core/inspect.js +109 -0
  147. package/packages/agentsam-brand/src/core/keys.js +83 -0
  148. package/packages/agentsam-brand/src/core/naming.js +142 -0
  149. package/packages/agentsam-brand/src/core/optimize.js +316 -0
  150. package/packages/agentsam-brand/src/core/pack.js +305 -0
  151. package/packages/agentsam-brand/src/core/plan.js +276 -0
  152. package/packages/agentsam-brand/src/core/preview.js +159 -0
  153. package/packages/agentsam-brand/src/core/processors/cloudflare.js +68 -0
  154. package/packages/agentsam-brand/src/core/processors/contract.js +203 -0
  155. package/packages/agentsam-brand/src/core/processors/index.js +148 -0
  156. package/packages/agentsam-brand/src/core/processors/native.js +82 -0
  157. package/packages/agentsam-brand/src/core/processors/sharp.js +113 -0
  158. package/packages/agentsam-brand/src/core/processors/squoosh-binary.js +195 -0
  159. package/packages/agentsam-brand/src/core/promote.js +288 -0
  160. package/packages/agentsam-brand/src/core/receipts.js +155 -0
  161. package/packages/agentsam-brand/src/core/v2/compile.js +280 -0
  162. package/packages/agentsam-brand/src/core/v2/derivatives-semantic.js +207 -0
  163. package/packages/agentsam-brand/src/core/v2/ingest-graph.js +387 -0
  164. package/packages/agentsam-brand/src/core/v2/roles.js +180 -0
  165. package/packages/agentsam-brand/src/core/v2/schema.js +209 -0
  166. package/packages/agentsam-brand/src/core/v2/templates.js +114 -0
  167. package/packages/agentsam-brand/src/index.js +193 -36
  168. package/packages/agentsam-brand/src/presets/app-icon.json +16 -0
  169. package/packages/agentsam-brand/src/presets/favicon.json +17 -0
  170. package/packages/agentsam-brand/src/presets/hero.json +12 -0
  171. package/packages/agentsam-brand/src/presets/index.js +40 -0
  172. package/packages/agentsam-brand/src/presets/logo.json +12 -0
  173. package/packages/agentsam-brand/src/presets/model.json +8 -0
  174. package/packages/agentsam-brand/src/presets/og-image.json +10 -0
  175. package/packages/agentsam-brand/src/presets/product-shot.json +11 -0
  176. package/packages/agentsam-brand/src/presets/social-image.json +10 -0
  177. package/packages/agentsam-brand/src/presets/web-image.json +10 -0
  178. package/packages/agentsam-contracts/package.json +13 -3
  179. package/packages/agentsam-contracts/src/artifacts.ts +41 -0
  180. package/packages/agentsam-contracts/src/tools.ts +22 -0
  181. package/packages/agentsam-errors/package.json +13 -3
  182. package/packages/agentsam-knowledge/package.json +18 -4
  183. package/packages/agentsam-knowledge/src/autorag/index.js +11 -4
  184. package/packages/agentsam-knowledge/src/backends/index.js +33 -1
  185. package/packages/agentsam-knowledge/src/providers/index.js +6 -4
  186. package/packages/agentsam-knowledge/src/providers/ollama-endpoint.js +31 -0
  187. package/packages/agentsam-knowledge/test/autorag.test.mjs +81 -1
  188. package/packages/agentsam-nav/package.json +26 -8
  189. package/packages/agentsam-queue-control/README.md +1 -1
  190. package/packages/agentsam-queue-control/package.json +7 -2
  191. package/packages/agentsam-rapid-rust/Cargo.lock +344 -0
  192. package/packages/agentsam-rapid-rust/Cargo.toml +18 -0
  193. package/packages/agentsam-rapid-rust/README.md +5 -0
  194. package/packages/agentsam-rapid-rust/src/main.rs +718 -0
  195. package/packages/agentsam-rapid-rust/templates/api/Cargo.toml.tmpl +18 -0
  196. package/packages/agentsam-rapid-rust/templates/api/src/lib.rs.tmpl +17 -0
  197. package/packages/agentsam-rapid-rust/templates/common/README.md.tmpl +22 -0
  198. package/packages/agentsam-rapid-rust/templates/common/package.json.tmpl +12 -0
  199. package/packages/agentsam-rapid-rust/templates/common/wrangler.toml.tmpl +6 -0
  200. package/packages/agentsam-rapid-rust/templates/crypto-auth/Cargo.toml.tmpl +21 -0
  201. package/packages/agentsam-rapid-rust/templates/crypto-auth/src/lib.rs.tmpl +32 -0
  202. package/packages/agentsam-rapid-rust/templates/data-processor/Cargo.toml.tmpl +18 -0
  203. package/packages/agentsam-rapid-rust/templates/data-processor/src/lib.rs.tmpl +41 -0
  204. package/packages/agentsam-rapid-rust/templates/shared-core/Cargo.toml.tmpl +9 -0
  205. package/packages/agentsam-rapid-rust/templates/shared-core/core/Cargo.toml.tmpl +7 -0
  206. package/packages/agentsam-rapid-rust/templates/shared-core/core/src/lib.rs.tmpl +23 -0
  207. package/packages/agentsam-rapid-rust/templates/shared-core/worker/Cargo.toml.tmpl +12 -0
  208. package/packages/agentsam-rapid-rust/templates/shared-core/worker/src/lib.rs.tmpl +16 -0
  209. package/packages/agentsam-rapid-rust/templates/shared-core/wrangler.toml.tmpl +6 -0
  210. package/packages/agentsam-repository/package.json +13 -3
  211. package/packages/agentsam-repository/src/index.js +1 -0
  212. package/packages/agentsam-repository/src/merkle/semantic.js +3 -10
  213. package/packages/agentsam-repository/src/source-types.js +93 -0
  214. package/packages/agentsam-vault/README.md +96 -0
  215. package/packages/agentsam-vault/package.json +42 -0
  216. package/packages/agentsam-vault/src/contracts/credential.d.ts +78 -0
  217. package/packages/agentsam-vault/src/contracts/credential.js +132 -0
  218. package/packages/agentsam-vault/src/crypto/aes-gcm.d.ts +30 -0
  219. package/packages/agentsam-vault/src/crypto/aes-gcm.js +107 -0
  220. package/packages/agentsam-vault/src/crypto/oauth-envelope.js +150 -0
  221. package/packages/agentsam-vault/src/index.d.ts +9 -0
  222. package/packages/agentsam-vault/src/index.js +27 -0
  223. package/packages/agentsam-vault/src/providers/registry.js +90 -0
  224. package/packages/agentsam-vault/src/runtime/resolver.js +77 -0
  225. package/packages/agentsam-workbench/README.md +24 -0
  226. package/packages/agentsam-workbench/package.json +49 -0
  227. package/packages/agentsam-workbench/src/agent/AgentPanel.tsx +41 -0
  228. package/packages/agentsam-workbench/src/agent/ArtifactCard.tsx +9 -0
  229. package/packages/agentsam-workbench/src/agent/Composer.tsx +102 -0
  230. package/packages/agentsam-workbench/src/agent/ConnectedAgentPanel.tsx +194 -0
  231. package/packages/agentsam-workbench/src/agent/ContextualComposer.tsx +788 -0
  232. package/packages/agentsam-workbench/src/agent/GoalStatusStrip.tsx +38 -0
  233. package/packages/agentsam-workbench/src/agent/MiniAgentSam.tsx +86 -0
  234. package/packages/agentsam-workbench/src/agent/ModelSelect.tsx +19 -0
  235. package/packages/agentsam-workbench/src/agent/Thread.tsx +56 -0
  236. package/packages/agentsam-workbench/src/agent/ToolPermissionRequest.tsx +94 -0
  237. package/packages/agentsam-workbench/src/agent/ToolReceipt.tsx +11 -0
  238. package/packages/agentsam-workbench/src/agent/contextual-composer.css +611 -0
  239. package/packages/agentsam-workbench/src/agent/index.ts +12 -0
  240. package/packages/agentsam-workbench/src/agent/mini-agentsam.css +12 -0
  241. package/packages/agentsam-workbench/src/agent/tool-permission.css +134 -0
  242. package/packages/agentsam-workbench/src/browser/BrowserFrame.tsx +37 -0
  243. package/packages/agentsam-workbench/src/browser/index.ts +1 -0
  244. package/packages/agentsam-workbench/src/index.ts +6 -0
  245. package/packages/agentsam-workbench/src/project-control.css +160 -0
  246. package/packages/agentsam-workbench/src/projects/ProjectsSurface.tsx +131 -0
  247. package/packages/agentsam-workbench/src/projects/index.ts +1 -0
  248. package/packages/agentsam-workbench/src/shell/Breadcrumb.tsx +35 -0
  249. package/packages/agentsam-workbench/src/shell/ResizableStage.tsx +99 -0
  250. package/packages/agentsam-workbench/src/shell/SidePanel.tsx +5 -0
  251. package/packages/agentsam-workbench/src/shell/index.ts +4 -0
  252. package/packages/agentsam-workbench/src/shell/surfaceRegistry.ts +29 -0
  253. package/packages/agentsam-workbench/src/terminal/TerminalSurface.tsx +5 -0
  254. package/packages/agentsam-workbench/src/terminal/index.ts +1 -0
  255. package/packages/agentsam-workbench/src/timeline/GanttBoard.tsx +258 -0
  256. package/packages/agentsam-workbench/src/timeline/index.ts +1 -0
  257. package/packages/agentsam-workbench/tsconfig.json +13 -0
  258. package/packages/connectors/cloudflare/OAUTH_STORAGE_AUDIT.md +53 -0
  259. package/packages/connectors/cloudflare/package.json +16 -4
  260. package/packages/connectors/cloudflare/src/api-client.js +280 -0
  261. package/packages/connectors/cloudflare/src/capabilities.js +585 -0
  262. package/packages/connectors/cloudflare/src/credential.js +318 -0
  263. package/packages/connectors/cloudflare/src/families/brand-protection.js +123 -0
  264. package/packages/connectors/cloudflare/src/families/keyless.js +114 -0
  265. package/packages/connectors/cloudflare/src/families/pages.js +151 -0
  266. package/packages/connectors/cloudflare/src/families/scanner.js +123 -0
  267. package/packages/connectors/cloudflare/src/families/snippets.js +207 -0
  268. package/packages/connectors/cloudflare/src/families/tag-gateway.js +46 -0
  269. package/packages/connectors/cloudflare/src/families/tags.js +124 -0
  270. package/packages/connectors/cloudflare/src/families/token-validation.js +95 -0
  271. package/packages/connectors/cloudflare/src/families/vectorize.js +127 -0
  272. package/packages/connectors/cloudflare/src/families/workflows.js +156 -0
  273. package/packages/connectors/cloudflare/src/index.js +103 -265
  274. package/packages/connectors/cloudflare/src/oauth-persist.js +336 -0
  275. package/packages/connectors/cloudflare/src/owner.js +42 -12
  276. package/packages/connectors/cloudflare/src/permission-options.js +1064 -0
  277. package/packages/connectors/cloudflare/src/routes.js +309 -144
  278. package/packages/connectors/cloudflare/src/scope-catalog.js +345 -0
  279. package/packages/connectors/cloudflare/src/vault.js +2 -2
  280. package/packages/connectors/cloudflare/tests/capabilities.test.mjs +276 -0
  281. package/packages/connectors/cloudflare/tests/connector.test.mjs +26 -30
  282. package/packages/connectors/cloudflare/tests/oauth-persist.test.mjs +125 -0
  283. package/packages/heuristic-theme/README.md +2 -2
  284. package/packages/heuristic-theme/package.json +8 -3
  285. package/packages/heuristic-theme/src/registry.js +2 -2
  286. package/packages/heuristic-theme/src/theme.js +1 -1
  287. package/packages/heuristic-theme/test/theme.test.mjs +1 -1
  288. package/packages/identity/.agentsam/features/oauth-login-portal/agentsam.feature.json +1 -1
  289. package/packages/identity/.agentsam/features/oauth-login-portal/providers.json +44 -4
  290. package/packages/identity/.agentsam/features/oauth-login-portal/resources.json +10 -4
  291. package/packages/identity/.agentsam/features/oauth-login-portal/routes.json +20 -0
  292. package/packages/identity/README.md +2 -2
  293. package/packages/identity/backend/README.md +1 -1
  294. package/packages/identity/migrations/D1_SCHEMA_MAPPING.md +18 -14
  295. package/packages/identity/migrations/apply-portable.js +109 -0
  296. package/packages/identity/migrations/sqlite/004_identity_oauth_consent_catalog.sql +48 -0
  297. package/packages/identity/migrations/sqlite/005_identity_company_native.sql +52 -0
  298. package/packages/identity/package.json +27 -5
  299. package/packages/identity/schema/agentsam.identity/manifest.json +101 -0
  300. package/packages/identity/scripts/local-identity-bridge.mjs +190 -0
  301. package/packages/identity/scripts/preview-auth-portal.mjs +8 -8
  302. package/packages/identity/src/adapters/cloudflare-d1/index.js +8 -372
  303. package/packages/identity/src/adapters/iam-compat/index.js +540 -0
  304. package/packages/identity/src/adapters/portable-d1/index.js +18 -0
  305. package/packages/identity/src/adapters/portable-store.js +479 -0
  306. package/packages/identity/src/adapters/sqlite/index.js +13 -309
  307. package/packages/identity/src/contracts/auth-config.js +27 -8
  308. package/packages/identity/src/contracts/external-identity.js +1 -1
  309. package/packages/identity/src/contracts/identity-store.js +56 -5
  310. package/packages/identity/src/contracts/provider.js +2 -0
  311. package/packages/identity/src/contracts/sign-in-options.js +104 -0
  312. package/packages/identity/src/core/constants.js +1 -1
  313. package/packages/identity/src/core/session-policy.js +31 -0
  314. package/packages/identity/src/frontend/auth-portal/README.md +2 -1
  315. package/packages/identity/src/frontend/auth-portal/pages/login.html +7 -6
  316. package/packages/identity/src/frontend/auth-portal/pages/reset.html +6 -5
  317. package/packages/identity/src/frontend/auth-portal/pages/signup.html +6 -5
  318. package/packages/identity/src/frontend/auth-portal/shared/company-branding.js +1 -1
  319. package/packages/identity/src/frontend/auth-portal/shared/desktop-identity-bridge.js +176 -0
  320. package/packages/identity/src/index.js +44 -1
  321. package/packages/identity/src/migrations/0001_identity_core.sql +19 -2
  322. package/packages/identity/src/migrations/0003_accounts_ssot.sql +20 -0
  323. package/packages/identity/src/migrations/README.md +23 -20
  324. package/packages/identity/src/oauth/README.md +10 -5
  325. package/packages/identity/src/oauth/consent-view.js +388 -0
  326. package/packages/identity/src/oauth/credentials.js +39 -20
  327. package/packages/identity/src/oauth/google-desktop-exchange.js +341 -0
  328. package/packages/identity/src/oauth/iam-platform.js +21 -9
  329. package/packages/identity/src/oauth/native-handoff.js +136 -0
  330. package/packages/identity/src/providers/chatgpt/headers.js +65 -0
  331. package/packages/identity/src/providers/chatgpt/index.js +86 -0
  332. package/packages/identity/src/providers/chatgpt/mapper.js +43 -0
  333. package/packages/identity/src/providers/chatgpt/paths.js +45 -0
  334. package/packages/identity/src/providers/cloudflare/oauth.js +3 -4
  335. package/packages/identity/src/providers/cloudflare/profile.js +49 -14
  336. package/packages/identity/src/providers/github/oauth.js +1 -2
  337. package/packages/identity/src/providers/github/profile.js +16 -2
  338. package/packages/identity/src/providers/iam/index.js +27 -5
  339. package/packages/identity/src/providers/index.js +11 -3
  340. package/packages/identity/src/server/identity-service.js +33 -3
  341. package/packages/identity/src/server/worker-router.js +171 -88
  342. package/packages/identity/tests/auth-config.test.mjs +3 -2
  343. package/packages/identity/tests/chatgpt-provider.test.mjs +75 -0
  344. package/packages/identity/tests/google-desktop-identity-login.test.mjs +210 -0
  345. package/packages/identity/tests/identity-init-scaffold.test.mjs +17 -3
  346. package/packages/identity/tests/identity-service.test.mjs +16 -0
  347. package/packages/identity/tests/lane1-identity-store-parity.test.mjs +527 -0
  348. package/packages/identity/tests/lane1-packed-consumer.test.mjs +175 -0
  349. package/packages/identity/tests/native-oauth-handoff.test.mjs +292 -0
  350. package/packages/identity/tests/native-session-worker.test.mjs +64 -0
  351. package/packages/identity/tests/oauth-consent-view.test.mjs +106 -0
  352. package/packages/identity/tests/oauth-credentials.test.mjs +21 -8
  353. package/packages/identity/tests/oauth-presets-accounts-ssot.test.mjs +58 -0
  354. package/packages/identity/tests/preview-auth-portal.test.mjs +5 -3
  355. package/packages/identity/tests/session-routes-policy.test.mjs +13 -1
  356. package/packages/identity/tests/worker-runtime-boundary.test.mjs +11 -0
  357. package/packages/providers/completeful/package.json +7 -2
  358. package/packages/runtime-protocol/src/index.js +154 -0
  359. package/packages/theme-church-site/package.json +17 -6
  360. package/packages/theme-church-site/src/harvest.json +4 -2
  361. package/packages/theme-church-site/src/index.js +7 -3
  362. package/packages/theme-church-site/test/theme.test.mjs +4 -2
  363. package/packages/theme-companions-site/package.json +17 -6
  364. package/packages/theme-companions-site/src/harvest.json +4 -2
  365. package/packages/theme-companions-site/src/index.js +7 -3
  366. package/packages/theme-companions-site/test/theme.test.mjs +4 -2
  367. package/packages/theme-floors-site/package.json +17 -6
  368. package/packages/theme-floors-site/src/harvest.json +4 -2
  369. package/packages/theme-floors-site/src/index.js +7 -3
  370. package/packages/theme-floors-site/test/theme.test.mjs +4 -2
  371. package/packages/theme-fuelnfree-site/package.json +17 -6
  372. package/packages/theme-fuelnfree-site/src/harvest.json +4 -2
  373. package/packages/theme-fuelnfree-site/src/index.js +7 -3
  374. package/packages/theme-fuelnfree-site/test/theme.test.mjs +4 -2
  375. package/packages/theme-handyman-site/package.json +17 -6
  376. package/packages/theme-handyman-site/src/harvest.json +4 -2
  377. package/packages/theme-handyman-site/src/index.js +7 -3
  378. package/packages/theme-handyman-site/test/theme.test.mjs +4 -2
  379. package/packages/theme-insurance-site/package.json +17 -6
  380. package/packages/theme-insurance-site/src/harvest.json +4 -2
  381. package/packages/theme-insurance-site/src/index.js +7 -3
  382. package/packages/theme-insurance-site/test/theme.test.mjs +4 -2
  383. package/packages/theme-scenes/README.md +164 -0
  384. package/packages/theme-scenes/package.json +54 -0
  385. package/packages/theme-scenes/src/blocks/index.js +30 -0
  386. package/packages/theme-scenes/src/contracts/index.js +286 -0
  387. package/packages/theme-scenes/src/demos/index.js +65 -0
  388. package/packages/theme-scenes/src/index.js +75 -0
  389. package/packages/theme-scenes/src/presets/index.js +263 -0
  390. package/packages/theme-scenes/src/registry.js +187 -0
  391. package/packages/theme-scenes/src/runtime/compile.js +119 -0
  392. package/packages/theme-scenes/src/scenes/index.js +146 -0
  393. package/packages/theme-scenes/src/shell/index.js +47 -0
  394. package/packages/theme-scenes/src/themes/index.js +129 -0
  395. package/packages/theme-scenes/src/visuals/index.js +41 -0
  396. package/packages/theme-scenes/test/theme-scenes.test.mjs +179 -0
  397. package/packages/theme-shinshu-site/package.json +17 -6
  398. package/packages/theme-shinshu-site/src/harvest.json +4 -2
  399. package/packages/theme-shinshu-site/src/index.js +7 -3
  400. package/packages/theme-shinshu-site/test/theme.test.mjs +4 -2
  401. package/packages/work-graph/package.json +14 -4
  402. package/packages/work-graph/src/index.js +34 -1
  403. package/packages/work-graph/src/renderers/gantt-model.js +24 -0
  404. package/packages/work-graph/test/work-graph.test.mjs +27 -7
  405. package/protocol/FILEMETA_V1.md +2 -2
  406. package/protocol/README.md +15 -7
  407. package/protocol/apps/agentsam.app.v1.schema.json +89 -7
  408. package/protocol/apps/agentsam.host-install.v1.schema.json +36 -0
  409. package/protocol/assets/README.md +9 -0
  410. package/protocol/assets/asset-record.v1.schema.json +64 -0
  411. package/protocol/capabilities/manifest.json +1 -1
  412. package/protocol/database/agentsam.schema-pack.v1.schema.json +72 -0
  413. package/protocol/presets/catalog.json +2 -2
  414. package/protocol/runtime/agentsam.runtime.v1.schema.json +75 -0
  415. package/protocol/scoring/README.md +10 -0
  416. package/protocol/scoring/scorecard.v1.schema.json +65 -0
  417. package/protocol/theme-refinery/lineage-registry.json +105 -0
  418. package/protocol/theme-refinery/product-metadata.schema.json +21 -1
  419. package/protocol/ui/icon-registry.mjs +1 -0
  420. package/registry/cms-rust-machine-20260928/installable-products.json +31 -0
  421. package/registry/cms-rust-machine-20260928/manifest.json +22 -0
  422. package/registry/cms-rust-machine-20260928/migration.sql +237 -0
  423. package/registry/cms-rust-machine-20260928/receipt.json +21 -0
  424. package/registry/cms-rust-machine-20260928/receipt.sql +27 -0
  425. package/scripts/build_rapid_rust_cli.py +83 -0
  426. package/skills/grok-auth/SKILL.md +110 -0
  427. package/skills/grok-auth/agentsam.skill.json +25 -0
  428. package/skills/grok-auth/references/grok-identity.md +64 -0
  429. package/skills/grok-auth/references/per-user-data.md +49 -0
  430. package/skills/grok-auth/references/prewired-and-env.md +54 -0
  431. package/skills/grok-auth/references/session-ui.md +133 -0
  432. package/skills/grok-auth/references/sign-in-methods.md +55 -0
  433. package/skills/grok-auth/references/wiring.md +71 -0
  434. package/skills/grok-building-games/SKILL.md +213 -0
  435. package/skills/grok-building-games/agentsam.skill.json +25 -0
  436. package/skills/grok-building-games/references/3d-libs.md +64 -0
  437. package/skills/grok-building-games/references/ai-pathfinding.md +122 -0
  438. package/skills/grok-building-games/references/audio.md +129 -0
  439. package/skills/grok-building-games/references/babylon.md +202 -0
  440. package/skills/grok-building-games/references/collision-physics.md +122 -0
  441. package/skills/grok-building-games/references/ecs-architecture.md +111 -0
  442. package/skills/grok-building-games/references/game-feel-juice.md +110 -0
  443. package/skills/grok-building-games/references/genres/board-card-chess.md +89 -0
  444. package/skills/grok-building-games/references/genres/endless-runner.md +83 -0
  445. package/skills/grok-building-games/references/genres/fps.md +105 -0
  446. package/skills/grok-building-games/references/genres/platformer-2d.md +97 -0
  447. package/skills/grok-building-games/references/genres/puzzle-match3-tetris.md +131 -0
  448. package/skills/grok-building-games/references/genres/racing-kart.md +106 -0
  449. package/skills/grok-building-games/references/genres/topdown-twin-stick.md +97 -0
  450. package/skills/grok-building-games/references/genres/tower-defense.md +84 -0
  451. package/skills/grok-building-games/references/genres/voxel-minecraft.md +89 -0
  452. package/skills/grok-building-games/references/input.md +139 -0
  453. package/skills/grok-building-games/references/phaser.md +277 -0
  454. package/skills/grok-building-games/references/procedural-generation.md +141 -0
  455. package/skills/grok-building-games/references/save-persistence.md +108 -0
  456. package/skills/grok-building-games/references/threejs-foundational.md +148 -0
  457. package/skills/grok-controls/SKILL.md +274 -0
  458. package/skills/grok-controls/agentsam.skill.json +25 -0
  459. package/skills/grok-design-ui/SKILL.md +122 -0
  460. package/skills/grok-design-ui/agentsam.skill.json +25 -0
  461. package/skills/grok-design-ui/references/animations.md +379 -0
  462. package/skills/grok-design-ui/references/performance.md +88 -0
  463. package/skills/grok-design-ui/references/refined-ui.md +384 -0
  464. package/skills/grok-design-ui/references/surfaces.md +247 -0
  465. package/skills/grok-design-ui/references/typography.md +123 -0
  466. package/skills/grok-game-animation-frames/SKILL.md +84 -0
  467. package/skills/grok-game-animation-frames/agentsam.skill.json +25 -0
  468. package/skills/grok-game-asset-core/SKILL.md +69 -0
  469. package/skills/grok-game-asset-core/agentsam.skill.json +25 -0
  470. package/skills/grok-game-character-consistency/SKILL.md +69 -0
  471. package/skills/grok-game-character-consistency/agentsam.skill.json +25 -0
  472. package/skills/grok-game-tilesets/SKILL.md +65 -0
  473. package/skills/grok-game-tilesets/agentsam.skill.json +25 -0
  474. package/skills/grok-game-ui-icons/SKILL.md +56 -0
  475. package/skills/grok-game-ui-icons/agentsam.skill.json +25 -0
  476. package/skills/grok-generate2dmap/LICENSE +21 -0
  477. package/skills/grok-generate2dmap/SKILL.md +120 -0
  478. package/skills/grok-generate2dmap/SOURCE.md +6 -0
  479. package/skills/grok-generate2dmap/agentsam.skill.json +25 -0
  480. package/skills/grok-generate2dmap/references/deliverables.md +101 -0
  481. package/skills/grok-generate2dmap/references/layered-map-contract.md +209 -0
  482. package/skills/grok-generate2dmap/references/map-strategies.md +341 -0
  483. package/skills/grok-generate2dmap/references/object-production-gate.md +24 -0
  484. package/skills/grok-generate2dmap/references/pipeline.md +149 -0
  485. package/skills/grok-generate2dmap/references/prop-pack-contract.md +174 -0
  486. package/skills/grok-generate2dmap/references/side-scroll-stages.md +29 -0
  487. package/skills/grok-generate2dmap/scripts/compose_layered_preview.py +157 -0
  488. package/skills/grok-generate2dmap/scripts/extract_prop_pack.py +369 -0
  489. package/skills/grok-generate2dsprite/LICENSE +21 -0
  490. package/skills/grok-generate2dsprite/SKILL.md +313 -0
  491. package/skills/grok-generate2dsprite/SOURCE.md +6 -0
  492. package/skills/grok-generate2dsprite/agentsam.skill.json +25 -0
  493. package/skills/grok-generate2dsprite/references/modes.md +124 -0
  494. package/skills/grok-generate2dsprite/references/prompt-rules.md +315 -0
  495. package/skills/grok-generate2dsprite/scripts/generate2dsprite.py +1031 -0
  496. package/skills/grok-generate2dsprite/scripts/make_layout_guide.py +109 -0
  497. package/skills/grok-imagine/SKILL.md +201 -0
  498. package/skills/grok-imagine/agentsam.skill.json +25 -0
  499. package/skills/grok-multiplayer-p2p/SKILL.md +111 -0
  500. package/skills/grok-multiplayer-p2p/agentsam.skill.json +25 -0
  501. package/skills/grok-multiplayer-p2p/references/react-binding.md +144 -0
  502. package/skills/grok-multiplayer-p2p/references/signaling-relay.md +269 -0
  503. package/skills/grok-neon/SKILL.md +157 -0
  504. package/skills/grok-neon/agentsam.skill.json +25 -0
  505. package/skills/grok-og/SKILL.md +102 -0
  506. package/skills/grok-og/agentsam.skill.json +25 -0
  507. package/skills/grok-og/references/brand-pass.md +53 -0
  508. package/skills/grok-og/references/custom-card.md +107 -0
  509. package/skills/grok-og/references/favicon-and-icons.md +48 -0
  510. package/skills/grok-og/references/og-type-contract.md +18 -0
  511. package/skills/grok-og/references/placeholder-card.md +21 -0
  512. package/skills/grok-og/references/x-banner.md +41 -0
  513. package/skills/grok-threejs/SKILL.md +67 -0
  514. package/skills/grok-threejs/agentsam.skill.json +25 -0
  515. package/skills/grok-threejs/references/llms-full.txt +2780 -0
  516. package/skills/grok-video2dsprite/LICENSE +21 -0
  517. package/skills/grok-video2dsprite/SKILL.md +236 -0
  518. package/skills/grok-video2dsprite/SOURCE.md +6 -0
  519. package/skills/grok-video2dsprite/agentsam.skill.json +25 -0
  520. package/skills/grok-video2dsprite/references/pipeline.md +90 -0
  521. package/skills/grok-video2dsprite/references/prompt-rules.md +63 -0
  522. package/skills/grok-video2dsprite/scripts/video2dsprite.py +490 -0
  523. package/skills/grok-xai-api/SKILL.md +152 -0
  524. package/skills/grok-xai-api/agentsam.skill.json +25 -0
  525. package/src/attachments/index.js +6 -0
  526. package/src/attachments/intake.js +235 -0
  527. package/src/capabilities/repository-snapshot.js +19 -2
  528. package/src/cli/command-catalog.js +53 -3
  529. package/src/cli/dispatch.js +1 -0
  530. package/src/cli.js +192 -26
  531. package/src/cloudflare/runtime-status.js +2 -1
  532. package/src/commands/account-auth.js +94 -8
  533. package/src/commands/app.js +307 -3
  534. package/src/commands/autorag.js +67 -13
  535. package/src/commands/billing.js +127 -0
  536. package/src/commands/brand.js +74 -60
  537. package/src/commands/cheat-sheet.js +179 -0
  538. package/src/commands/cloudflare-login.js +222 -0
  539. package/src/commands/cloudflare.js +453 -23
  540. package/src/commands/codebaseindex.js +51 -3
  541. package/src/commands/compute.js +4 -0
  542. package/src/commands/connections.js +11 -5
  543. package/src/commands/credentials.js +116 -0
  544. package/src/commands/gcloud-auth.js +427 -0
  545. package/src/commands/google-cloud.js +375 -0
  546. package/src/commands/identity-init.js +2 -2
  547. package/src/commands/knowledge.js +59 -2
  548. package/src/commands/machine-binary.js +103 -0
  549. package/src/commands/machine.js +137 -0
  550. package/src/commands/mcp.js +226 -33
  551. package/src/commands/ollama.js +3 -2
  552. package/src/commands/plugins.js +7 -2
  553. package/src/commands/product.js +36 -0
  554. package/src/commands/runtime-status.js +28 -9
  555. package/src/commands/runtime.js +313 -0
  556. package/src/commands/rust.js +24 -0
  557. package/src/commands/security.js +67 -4
  558. package/src/commands/setup.js +296 -0
  559. package/src/commands/shell.js +16 -3
  560. package/src/commands/start-local.js +2 -2
  561. package/src/commands/status.js +8 -1
  562. package/src/commands/terminal.js +171 -0
  563. package/src/commands/update.js +140 -0
  564. package/src/commands/whoami.js +329 -65
  565. package/src/features/resolve.js +2 -0
  566. package/src/index.js +4 -0
  567. package/src/indexing/ingest/inventory.js +254 -19
  568. package/src/indexing/ingest/materials.js +3 -9
  569. package/src/indexing/ingest/style-evidence.js +181 -0
  570. package/src/knowledge/engine.js +21 -2
  571. package/src/knowledge/runtime-discovery.js +127 -0
  572. package/src/knowledge/source.js +3 -3
  573. package/src/lib/account-session.js +11 -4
  574. package/src/lib/app-authority.js +172 -0
  575. package/src/lib/auth.js +94 -21
  576. package/src/lib/core-client.js +5 -6
  577. package/src/lib/credentials-audit.js +451 -0
  578. package/src/lib/deploy/health.js +24 -6
  579. package/src/lib/detect-context.js +7 -1
  580. package/src/lib/google-cloud-connection.js +270 -0
  581. package/src/lib/google-cloud-inventory.js +385 -0
  582. package/src/lib/google-desktop-oauth.js +372 -0
  583. package/src/lib/google-studio-brokered-oauth.js +158 -0
  584. package/src/lib/identity-scaffold.js +76 -18
  585. package/src/lib/init-options.js +192 -0
  586. package/src/lib/local-scaffold.js +48 -16
  587. package/src/lib/provider-command-remediation.js +308 -0
  588. package/src/lib/provider-credentials.js +8 -0
  589. package/src/lib/scaffold/index.js +8 -2
  590. package/src/lib/scaffold/mcp-server.js +43 -0
  591. package/src/lib/scaffold/templates/mcp-server/index.js +397 -0
  592. package/src/lib/scaffold/templates/mcp-server/presets.js +39 -0
  593. package/src/lib/scaffold/wizards/cms.js +93 -0
  594. package/src/lib/scaffold/wizards/mcp-server.js +61 -0
  595. package/src/lib/setup/contract.js +26 -0
  596. package/src/lib/setup/discover.js +116 -0
  597. package/src/lib/setup/execute.js +205 -0
  598. package/src/lib/setup/planner.js +134 -0
  599. package/src/lib/setup/recipes.js +235 -0
  600. package/src/lib/setup/runtime-persist.js +197 -0
  601. package/src/lib/setup/runtime.js +394 -0
  602. package/src/lib/slash-commands.js +2 -0
  603. package/src/lib/terminal/machine-identity.js +95 -0
  604. package/src/lib/terminal-local.js +164 -0
  605. package/src/lib/terminal-scopes.js +52 -0
  606. package/src/lib/whoami-capabilities.js +184 -0
  607. package/src/local-pty/server.js +34 -5
  608. package/src/mcp/authority.js +58 -108
  609. package/src/mcp/client-adapters.js +68 -144
  610. package/src/mcp/client.js +142 -122
  611. package/src/mcp/cloudflare-bundles.js +225 -0
  612. package/src/mcp/index.js +12 -0
  613. package/src/models/discovery.js +40 -22
  614. package/src/models/inventory-core.d.ts +105 -0
  615. package/src/models/inventory-core.js +54 -6
  616. package/src/plugins/cloudflare.js +1 -1
  617. package/src/providers/ollama-chat.js +2 -1
  618. package/src/sam/types.js +27 -2
  619. package/src/security/inventory.js +12 -2
  620. package/src/security/local-vault.js +2 -0
  621. package/src/security/logs.js +3 -0
  622. package/src/security/scan.js +1 -1
  623. package/src/ui/cli/help.js +41 -0
  624. package/test/account-session.test.mjs +3 -3
  625. package/test/app-authority-context.test.mjs +32 -0
  626. package/test/apps-scaffold-contract.test.mjs +3 -2
  627. package/test/cli/api-key-env-whoami.test.mjs +2 -2
  628. package/test/cli/catalog-authority.test.mjs +64 -0
  629. package/test/cli/codebaseindex-plan-ux.test.mjs +1 -1
  630. package/test/cli/machine-command.test.mjs +34 -0
  631. package/test/cli/mcp-client.test.mjs +21 -10
  632. package/test/cli/runtime-persist.test.mjs +56 -0
  633. package/test/cli/rust-command.test.mjs +21 -0
  634. package/test/credentials-audit.test.mjs +113 -0
  635. package/test/deploy-health-scan.test.mjs +29 -1
  636. package/test/fixtures/project-authority/customer-app/.agentsam/app.json +5 -0
  637. package/test/fixtures/project-authority/customer-app/apps/my-product/index.ts +1 -0
  638. package/test/fixtures/project-authority/customer-app/wrangler.toml +17 -0
  639. package/test/gcloud-auth.test.mjs +111 -0
  640. package/test/google-cloud-connection.test.mjs +83 -0
  641. package/test/google-cloud-inventory.test.mjs +64 -0
  642. package/test/init-options.test.mjs +35 -0
  643. package/test/integration/app-command.test.mjs +30 -0
  644. package/test/integration/autorag-project-authority.integration.test.mjs +51 -0
  645. package/test/integration/autorag-runtime-discovery.test.mjs +107 -0
  646. package/test/integration/cad-project.test.mjs +4 -1
  647. package/test/integration/cms-app-scaffold.test.mjs +77 -0
  648. package/test/integration/cms-site-tenancy-contract.test.mjs +31 -19
  649. package/test/integration/codebaseindex-ingest.test.mjs +89 -0
  650. package/test/integration/database-hosted-honesty.test.mjs +49 -0
  651. package/test/integration/desktop-keychain-boundary.test.mjs +45 -0
  652. package/test/integration/features-resolve.test.mjs +30 -11
  653. package/test/integration/hosted-work-host-authority.test.mjs +47 -0
  654. package/test/integration/inspect-path-cli.test.mjs +46 -0
  655. package/test/integration/inventory-eligibility.test.mjs +59 -0
  656. package/test/integration/inventory-evidence.test.mjs +125 -0
  657. package/test/integration/local-provider-bridge.test.mjs +65 -0
  658. package/test/integration/local-studio-settings-production.test.mjs +40 -0
  659. package/test/integration/lockfile-sync.test.mjs +26 -0
  660. package/test/integration/provider-env-cli.test.mjs +13 -3
  661. package/test/integration/runtime-status.integration.test.mjs +17 -1
  662. package/test/integration/theme-package-registry.test.mjs +31 -0
  663. package/test/knowledge.test.mjs +35 -1
  664. package/test/loopback-oauth.test.mjs +53 -0
  665. package/test/ollama.test.mjs +22 -0
  666. package/test/repository-snapshot-view.test.mjs +2 -2
  667. package/test/security.test.mjs +37 -0
  668. package/test/setup-planner.test.mjs +74 -0
  669. package/test/setup-runtime.test.mjs +51 -0
  670. package/test/terminal/local-pty.mock.test.mjs +3 -1
  671. package/test/terminal-machine-identity.test.mjs +88 -0
  672. package/test/whoami-resume.test.mjs +27 -6
  673. package/packages/agentsam-brand/test/brand-scan.test.mjs +0 -106
  674. package/packages/agentsam-nav/dist/Nav.d.ts +0 -43
  675. package/packages/agentsam-nav/dist/NavCollapsible.d.ts +0 -10
  676. package/packages/agentsam-nav/dist/NavContent.d.ts +0 -2
  677. package/packages/agentsam-nav/dist/NavFooter.d.ts +0 -2
  678. package/packages/agentsam-nav/dist/NavGroup.d.ts +0 -3
  679. package/packages/agentsam-nav/dist/NavHeader.d.ts +0 -2
  680. package/packages/agentsam-nav/dist/NavMenu.d.ts +0 -22
  681. package/packages/agentsam-nav/dist/NavProvider.d.ts +0 -35
  682. package/packages/agentsam-nav/dist/NavTrigger.d.ts +0 -2
  683. package/packages/agentsam-nav/dist/Surfaces.d.ts +0 -41
  684. package/packages/agentsam-nav/dist/browser.d.ts +0 -11
  685. package/packages/agentsam-nav/dist/browser.global.js +0 -132
  686. package/packages/agentsam-nav/dist/browser.js +0 -613
  687. package/packages/agentsam-nav/dist/contracts.d.ts +0 -76
  688. package/packages/agentsam-nav/dist/index.d.ts +0 -11
  689. package/packages/agentsam-nav/dist/index.js +0 -614
  690. package/packages/agentsam-nav/dist/legacy.css +0 -83
  691. package/packages/agentsam-nav/dist/shell.css +0 -113
  692. package/packages/agentsam-nav/dist/theme.css +0 -113
  693. package/packages/agentsam-nav/dist/utils.d.ts +0 -1
  694. package/packages/agentsam-repository/src/goap.js.bak-20260922011251 +0 -670
  695. package/packages/work-graph/prototype/README.md +0 -32
  696. package/packages/work-graph/prototype/data/demo-workgraph.js +0 -47
  697. package/packages/work-graph/prototype/renderers/timeline-model.js +0 -21
  698. package/packages/work-graph/prototype/renderers/workgraph-runtime.js +0 -38
  699. package/packages/work-graph/prototype-gnantt.html +0 -655
package/src/mcp/client.js CHANGED
@@ -1,5 +1,22 @@
1
+ /**
2
+ * MCP JSON-RPC client for AgentSam CLI (ping / tools/list / tools/call).
3
+ *
4
+ * Prefers Streamable HTTP (current MCP remote transport), falls back to SSE.
5
+ * Does not invent connection presets — callers pass a concrete serverConfig.
6
+ */
1
7
  import { Client } from '@modelcontextprotocol/sdk/client/index.js';
2
8
  import { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';
9
+ import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
10
+ import { createRequire } from 'node:module';
11
+
12
+ const require = createRequire(import.meta.url);
13
+ const PKG_VERSION = (() => {
14
+ try {
15
+ return require('../../package.json').version || '0.0.0';
16
+ } catch {
17
+ return '0.0.0';
18
+ }
19
+ })();
3
20
 
4
21
  function clean(value) {
5
22
  return value == null ? '' : String(value).trim();
@@ -7,57 +24,121 @@ function clean(value) {
7
24
 
8
25
  export function buildHeaders(serverConfig = {}) {
9
26
  const headers = {
10
- 'Accept': 'application/json, text/event-stream',
11
- 'User-Agent': 'AgentSam-SDK/2.6.3 (MCP Client)',
27
+ Accept: 'application/json, text/event-stream',
28
+ 'User-Agent': `AgentSam-SDK/${PKG_VERSION} (MCP Client)`,
12
29
  };
13
30
  const token = clean(serverConfig.auth?.token);
14
31
  if (token) {
15
- headers['Authorization'] = `Bearer ${token}`;
32
+ headers.Authorization = `Bearer ${token}`;
16
33
  }
17
34
  return headers;
18
35
  }
19
36
 
37
+ /**
38
+ * @template T
39
+ * @param {object} serverConfig
40
+ * @param {(client: import('@modelcontextprotocol/sdk/client/index.js').Client, transport: string) => Promise<T>} fn
41
+ * @param {{ timeoutMs?: number }} [options]
42
+ * @returns {Promise<{ ok: true, value: T, transport: string } | { ok: false, error: string, transport?: string }>}
43
+ */
44
+ export async function withMcpClient(serverConfig, fn, options = {}) {
45
+ const url = clean(serverConfig.url);
46
+ if (!url) return { ok: false, error: 'missing_mcp_server_url' };
47
+
48
+ const headers = buildHeaders(serverConfig);
49
+ const requestInit = { headers };
50
+ const errors = [];
51
+
52
+ const tryTransport = async (label, createTransport) => {
53
+ const transport = createTransport();
54
+ const client = new Client(
55
+ { name: 'agentsam-sdk', version: PKG_VERSION },
56
+ { capabilities: {} },
57
+ );
58
+ const timer = setTimeout(() => {
59
+ try { transport.close?.(); } catch { /* ignore */ }
60
+ }, options.timeoutMs || 15000);
61
+ try {
62
+ await client.connect(transport);
63
+ const value = await fn(client, label);
64
+ return { ok: true, value, transport: label };
65
+ } finally {
66
+ clearTimeout(timer);
67
+ try { await transport.close?.(); } catch { /* ignore */ }
68
+ }
69
+ };
70
+
71
+ try {
72
+ return await tryTransport(
73
+ 'streamable_http',
74
+ () => new StreamableHTTPClientTransport(new URL(url), { requestInit }),
75
+ );
76
+ } catch (err) {
77
+ errors.push(`streamable_http:${err?.message || err}`);
78
+ }
79
+
80
+ try {
81
+ return await tryTransport(
82
+ 'sse',
83
+ () => new SSEClientTransport(new URL(url), { requestInit }),
84
+ );
85
+ } catch (err) {
86
+ errors.push(`sse:${err?.message || err}`);
87
+ }
88
+
89
+ return { ok: false, error: errors.join(' | ') || 'mcp_connect_failed' };
90
+ }
91
+
20
92
  export async function pingMcpServer(serverConfig = {}, options = {}) {
21
93
  const url = clean(serverConfig.url);
22
94
  if (!url) throw new Error('missing_mcp_server_url');
23
95
 
24
96
  const startMs = Date.now();
25
- const headers = buildHeaders(serverConfig);
26
- const timeoutMs = options.timeoutMs || 5000;
97
+ const connected = await withMcpClient(
98
+ serverConfig,
99
+ async (client) => {
100
+ // listTools is a cheap post-initialize probe across CF portals
101
+ const tools = await client.listTools().catch(() => ({ tools: [] }));
102
+ return { toolCount: tools?.tools?.length ?? 0 };
103
+ },
104
+ { timeoutMs: options.timeoutMs || 8000 },
105
+ );
106
+
107
+ const latencyMs = Date.now() - startMs;
108
+ if (connected.ok) {
109
+ return {
110
+ ok: true,
111
+ status: 200,
112
+ statusText: 'connected',
113
+ latencyMs,
114
+ url,
115
+ transport: connected.transport,
116
+ toolCount: connected.value?.toolCount ?? null,
117
+ };
118
+ }
27
119
 
120
+ // Last-resort HTTP reachability (does not prove MCP session)
28
121
  try {
29
- const controller = new AbortController();
30
- const timer = setTimeout(() => controller.abort(), timeoutMs);
31
-
32
- // First attempt an HTTP OPTIONS or GET / health ping
122
+ const headers = buildHeaders(serverConfig);
33
123
  const res = await fetch(url, {
34
- method: 'GET',
35
- headers,
36
- signal: controller.signal,
37
- }).catch(async () => {
38
- // If GET returns 405/404, try POST with JSON-RPC ping
39
- return await fetch(url, {
40
- method: 'POST',
41
- headers: { ...headers, 'Content-Type': 'application/json' },
42
- body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'ping' }),
43
- signal: controller.signal,
44
- });
124
+ method: 'POST',
125
+ headers: { ...headers, 'Content-Type': 'application/json' },
126
+ body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'ping' }),
127
+ signal: AbortSignal.timeout(options.timeoutMs || 5000),
45
128
  });
46
-
47
- clearTimeout(timer);
48
- const latencyMs = Date.now() - startMs;
49
-
50
129
  return {
51
130
  ok: res.status < 500,
52
131
  status: res.status,
53
132
  statusText: res.statusText,
54
- latencyMs,
133
+ latencyMs: Date.now() - startMs,
55
134
  url,
135
+ transport: 'http_jsonrpc_ping',
136
+ warning: connected.error,
56
137
  };
57
138
  } catch (err) {
58
139
  return {
59
140
  ok: false,
60
- error: err.name === 'AbortError' ? 'timeout' : err.message,
141
+ error: connected.error || (err.name === 'TimeoutError' || err.name === 'AbortError' ? 'timeout' : err.message),
61
142
  latencyMs: Date.now() - startMs,
62
143
  url,
63
144
  };
@@ -65,108 +146,47 @@ export async function pingMcpServer(serverConfig = {}, options = {}) {
65
146
  }
66
147
 
67
148
  export async function listMcpTools(serverConfig = {}, options = {}) {
68
- const url = clean(serverConfig.url);
69
- if (!url) throw new Error('missing_mcp_server_url');
70
-
71
- const headers = buildHeaders(serverConfig);
72
-
73
- // Try standard JSON-RPC tools/list via POST first (fastest across Cloudflare Workers)
74
- try {
75
- const res = await fetch(url, {
76
- method: 'POST',
77
- headers: { ...headers, 'Content-Type': 'application/json' },
78
- body: JSON.stringify({
79
- jsonrpc: '2.0',
80
- id: 'tools-list-1',
81
- method: 'tools/list',
82
- params: {},
83
- }),
84
- signal: AbortSignal.timeout(options.timeoutMs || 8000),
85
- });
86
-
87
- if (res.ok) {
88
- const data = await res.json();
89
- if (data?.result?.tools && Array.isArray(data.result.tools)) {
90
- return {
91
- tools: data.result.tools,
92
- count: data.result.tools.length,
93
- transport: 'http_jsonrpc',
94
- };
95
- }
96
- }
97
- } catch {
98
- // Fall back to SSE transport below
99
- }
100
-
101
- // Fallback to SSE transport via @modelcontextprotocol/sdk
102
- try {
103
- const transport = new SSEClientTransport(new URL(url), {
104
- requestInit: { headers },
105
- });
106
- const client = new Client({ name: 'agentsam-sdk', version: '2.6.3' }, { capabilities: {} });
107
- await client.connect(transport);
108
- const toolsResult = await client.listTools();
109
- await transport.close();
110
-
149
+ const connected = await withMcpClient(
150
+ serverConfig,
151
+ async (client) => client.listTools(),
152
+ { timeoutMs: options.timeoutMs || 12000 },
153
+ );
154
+
155
+ if (connected.ok) {
156
+ const tools = connected.value?.tools || [];
111
157
  return {
112
- tools: toolsResult.tools || [],
113
- count: toolsResult.tools?.length || 0,
114
- transport: 'sse_sdk',
115
- };
116
- } catch (err) {
117
- return {
118
- tools: [],
119
- count: 0,
120
- error: err.message,
158
+ tools,
159
+ count: tools.length,
160
+ transport: connected.transport,
121
161
  };
122
162
  }
163
+
164
+ return {
165
+ tools: [],
166
+ count: 0,
167
+ error: connected.error,
168
+ };
123
169
  }
124
170
 
125
171
  export async function callMcpTool(serverConfig = {}, toolName, args = {}, options = {}) {
126
- const url = clean(serverConfig.url);
127
- if (!url) throw new Error('missing_mcp_server_url');
128
-
129
172
  const startMs = Date.now();
130
- const headers = buildHeaders(serverConfig);
131
-
132
- try {
133
- const res = await fetch(url, {
134
- method: 'POST',
135
- headers: { ...headers, 'Content-Type': 'application/json' },
136
- body: JSON.stringify({
137
- jsonrpc: '2.0',
138
- id: `call-${Date.now()}`,
139
- method: 'tools/call',
140
- params: {
141
- name: toolName,
142
- arguments: args,
143
- },
144
- }),
145
- signal: AbortSignal.timeout(options.timeoutMs || 30000),
146
- });
147
-
148
- const latencyMs = Date.now() - startMs;
149
- if (!res.ok) {
150
- return {
151
- ok: false,
152
- status: res.status,
153
- error: `HTTP ${res.status}: ${res.statusText}`,
154
- latencyMs,
155
- };
156
- }
157
-
158
- const data = await res.json();
159
- return {
160
- ok: !data.error && !data.result?.isError,
161
- result: data.result,
162
- error: data.error?.message || (data.result?.isError ? JSON.stringify(data.result.content) : null),
163
- latencyMs,
164
- };
165
- } catch (err) {
166
- return {
167
- ok: false,
168
- error: err.message,
169
- latencyMs: Date.now() - startMs,
170
- };
173
+ const connected = await withMcpClient(
174
+ serverConfig,
175
+ async (client) => client.callTool({ name: toolName, arguments: args }),
176
+ { timeoutMs: options.timeoutMs || 30000 },
177
+ );
178
+
179
+ const latencyMs = Date.now() - startMs;
180
+ if (!connected.ok) {
181
+ return { ok: false, error: connected.error, latencyMs };
171
182
  }
183
+
184
+ const result = connected.value;
185
+ return {
186
+ ok: !result?.isError,
187
+ result,
188
+ error: result?.isError ? JSON.stringify(result.content) : null,
189
+ latencyMs,
190
+ transport: connected.transport,
191
+ };
172
192
  }
@@ -0,0 +1,225 @@
1
+ /**
2
+ * Cloudflare-hosted MCP portal servers (tool bundles), not OAuth clients.
3
+ *
4
+ * Each entry is an MCP *server* you can register with `agentsam mcp add <name>`.
5
+ * OAuth consent stays granular via feature packs / capability ids — never the
6
+ * full ~315-scope catalog. Managing portals themselves needs mcp-portals.*.
7
+ */
8
+
9
+ import {
10
+ scopesForCapabilities,
11
+ scopesForFeaturePacks,
12
+ } from '../../packages/connectors/cloudflare/src/capabilities.js';
13
+
14
+ /**
15
+ * @typedef {object} CloudflareMcpBundle
16
+ * @property {string} name
17
+ * @property {string} display_name
18
+ * @property {string} url
19
+ * @property {'none'|'bearer'|'cloudflare_portal_oauth'|'user_oauth_cloudflare'} auth_type
20
+ * @property {'streamable_http'|'sse'} protocol
21
+ * @property {string[]} feature_packs — AgentSam CF feature pack ids for AgentSam-side upgrade
22
+ * @property {string[]} capability_ids — finer granulation than packs
23
+ * @property {string[]} portal_manage_scopes — scopes to create/manage this portal via CF API
24
+ * @property {string} description
25
+ */
26
+
27
+ /** @type {readonly CloudflareMcpBundle[]} */
28
+ export const CLOUDFLARE_MCP_SERVER_BUNDLES = Object.freeze([
29
+ {
30
+ name: 'cloudflare-api',
31
+ display_name: 'Cloudflare API (Code Mode)',
32
+ url: 'https://mcp.cloudflare.com/mcp',
33
+ auth_type: 'cloudflare_portal_oauth',
34
+ protocol: 'streamable_http',
35
+ feature_packs: [],
36
+ capability_ids: [],
37
+ portal_manage_scopes: ['mcp-portals.read', 'mcp-portals.write'],
38
+ description: 'Full CF API via search/execute tools — Cloudflare hosts OAuth for this portal',
39
+ },
40
+ {
41
+ name: 'cloudflare-docs',
42
+ display_name: 'Cloudflare Docs',
43
+ url: 'https://docs.mcp.cloudflare.com/mcp',
44
+ auth_type: 'none',
45
+ protocol: 'streamable_http',
46
+ feature_packs: [],
47
+ capability_ids: [],
48
+ portal_manage_scopes: ['mcp-portals.read'],
49
+ description: 'Cloudflare developer documentation reference',
50
+ },
51
+ {
52
+ name: 'cloudflare-bindings',
53
+ display_name: 'Cloudflare Workers Bindings',
54
+ url: 'https://bindings.mcp.cloudflare.com/mcp',
55
+ auth_type: 'cloudflare_portal_oauth',
56
+ protocol: 'streamable_http',
57
+ feature_packs: ['data', 'compute', 'ai'],
58
+ capability_ids: [
59
+ 'cloudflare.workers',
60
+ 'cloudflare.d1',
61
+ 'cloudflare.kv',
62
+ 'cloudflare.r2',
63
+ 'cloudflare.workers_ai',
64
+ ],
65
+ portal_manage_scopes: ['mcp-portals.read', 'mcp-portals.write'],
66
+ description: 'Workers storage, AI, and compute bindings',
67
+ },
68
+ {
69
+ name: 'cloudflare-builds',
70
+ display_name: 'Cloudflare Workers Builds',
71
+ url: 'https://builds.mcp.cloudflare.com/mcp',
72
+ auth_type: 'cloudflare_portal_oauth',
73
+ protocol: 'streamable_http',
74
+ feature_packs: ['compute'],
75
+ capability_ids: ['cloudflare.workers'],
76
+ portal_manage_scopes: ['mcp-portals.read', 'mcp-portals.write'],
77
+ description: 'Workers Builds / CI insights (workers-ci.*)',
78
+ },
79
+ {
80
+ name: 'cloudflare-observability',
81
+ display_name: 'Cloudflare Observability',
82
+ url: 'https://observability.mcp.cloudflare.com/mcp',
83
+ auth_type: 'cloudflare_portal_oauth',
84
+ protocol: 'streamable_http',
85
+ feature_packs: ['compute'],
86
+ capability_ids: ['cloudflare.workers'],
87
+ portal_manage_scopes: ['mcp-portals.read', 'mcp-portals.write'],
88
+ description: 'Workers observability / logs / analytics',
89
+ },
90
+ {
91
+ name: 'cloudflare-browser',
92
+ display_name: 'Cloudflare Browser Rendering',
93
+ url: 'https://browser.mcp.cloudflare.com/mcp',
94
+ auth_type: 'cloudflare_portal_oauth',
95
+ protocol: 'streamable_http',
96
+ feature_packs: ['compute'],
97
+ capability_ids: ['cloudflare.browser_rendering'],
98
+ portal_manage_scopes: ['mcp-portals.read', 'mcp-portals.write'],
99
+ description: 'Fetch pages, markdown, screenshots',
100
+ },
101
+ {
102
+ name: 'cloudflare-logs',
103
+ display_name: 'Cloudflare Logpush',
104
+ url: 'https://logs.mcp.cloudflare.com/mcp',
105
+ auth_type: 'cloudflare_portal_oauth',
106
+ protocol: 'streamable_http',
107
+ feature_packs: ['analytics'],
108
+ capability_ids: [],
109
+ portal_manage_scopes: ['mcp-portals.read', 'mcp-portals.write'],
110
+ description: 'Logpush job health',
111
+ },
112
+ {
113
+ name: 'cloudflare-ai-gateway',
114
+ display_name: 'Cloudflare AI Gateway',
115
+ url: 'https://ai-gateway.mcp.cloudflare.com/mcp',
116
+ auth_type: 'cloudflare_portal_oauth',
117
+ protocol: 'streamable_http',
118
+ feature_packs: ['ai'],
119
+ capability_ids: ['cloudflare.workers_ai'],
120
+ portal_manage_scopes: ['mcp-portals.read', 'mcp-portals.write'],
121
+ description: 'AI Gateway request logs',
122
+ },
123
+ {
124
+ name: 'cloudflare-audit-logs',
125
+ display_name: 'Cloudflare Audit Logs',
126
+ url: 'https://auditlogs.mcp.cloudflare.com/mcp',
127
+ auth_type: 'cloudflare_portal_oauth',
128
+ protocol: 'streamable_http',
129
+ feature_packs: ['analytics'],
130
+ capability_ids: [],
131
+ portal_manage_scopes: ['mcp-portals.read', 'mcp-portals.write'],
132
+ description: 'Account audit log reports',
133
+ },
134
+ {
135
+ name: 'cloudflare-dns-analytics',
136
+ display_name: 'Cloudflare DNS Analytics',
137
+ url: 'https://dns-analytics.mcp.cloudflare.com/mcp',
138
+ auth_type: 'cloudflare_portal_oauth',
139
+ protocol: 'streamable_http',
140
+ feature_packs: ['dns', 'analytics'],
141
+ capability_ids: [],
142
+ portal_manage_scopes: ['mcp-portals.read', 'mcp-portals.write'],
143
+ description: 'DNS performance analytics',
144
+ },
145
+ {
146
+ name: 'cloudflare-graphql',
147
+ display_name: 'Cloudflare GraphQL',
148
+ url: 'https://graphql.mcp.cloudflare.com/mcp',
149
+ auth_type: 'cloudflare_portal_oauth',
150
+ protocol: 'streamable_http',
151
+ feature_packs: ['analytics'],
152
+ capability_ids: [],
153
+ portal_manage_scopes: ['mcp-portals.read', 'mcp-portals.write'],
154
+ description: 'Analytics via GraphQL',
155
+ },
156
+ {
157
+ name: 'cloudflare-containers',
158
+ display_name: 'Cloudflare Container Sandbox',
159
+ url: 'https://containers.mcp.cloudflare.com/mcp',
160
+ auth_type: 'cloudflare_portal_oauth',
161
+ protocol: 'streamable_http',
162
+ feature_packs: ['compute'],
163
+ capability_ids: ['cloudflare.containers'],
164
+ portal_manage_scopes: ['mcp-portals.read', 'mcp-portals.write'],
165
+ description: 'Ephemeral sandboxed containers',
166
+ },
167
+ ]);
168
+
169
+ export function listCloudflareMcpBundles() {
170
+ return [...CLOUDFLARE_MCP_SERVER_BUNDLES];
171
+ }
172
+
173
+ export function getCloudflareMcpBundle(name) {
174
+ const key = String(name || '').trim().toLowerCase();
175
+ if (!key) return null;
176
+ return CLOUDFLARE_MCP_SERVER_BUNDLES.find((b) => b.name === key) || null;
177
+ }
178
+
179
+ /**
180
+ * Scopes AgentSam should request (or upgrade) so a CF-connected user can
181
+ * manage / use the portal surface — not Cloudflare's own portal OAuth dance.
182
+ */
183
+ export function scopesForCloudflareMcpBundle(name, options = {}) {
184
+ const bundle = getCloudflareMcpBundle(name);
185
+ if (!bundle) return [];
186
+
187
+ const set = new Set();
188
+ if (options.includePortalManage !== false) {
189
+ for (const s of bundle.portal_manage_scopes || []) set.add(s);
190
+ }
191
+ for (const s of scopesForFeaturePacks(bundle.feature_packs || [], bundle.capability_ids || [])) {
192
+ set.add(s);
193
+ }
194
+ if (options.includeBaseline === false) {
195
+ // scopesForFeaturePacks always includes baseline; strip if caller asks
196
+ for (const s of ['account-settings.read', 'user-details.read', 'memberships.read', 'offline_access']) {
197
+ // keep offline_access — refresh still needed
198
+ if (s !== 'offline_access') set.delete(s);
199
+ }
200
+ }
201
+ return [...set];
202
+ }
203
+
204
+ /** Catalog rows for MCP authority (server presets). */
205
+ export function cloudflareBundlesAsServerCatalog() {
206
+ return CLOUDFLARE_MCP_SERVER_BUNDLES.map((b) => ({
207
+ name: b.name,
208
+ display_name: b.display_name,
209
+ url: b.url,
210
+ auth_type: b.auth_type,
211
+ protocol: b.protocol,
212
+ defaultClients: ['cursor'],
213
+ health_status: 'unknown',
214
+ avg_latency_ms: null,
215
+ error_rate: null,
216
+ description: b.description,
217
+ feature_packs: b.feature_packs,
218
+ capability_ids: b.capability_ids,
219
+ portal_manage_scopes: b.portal_manage_scopes,
220
+ provider: 'cloudflare',
221
+ kind: 'mcp_portal_bundle',
222
+ }));
223
+ }
224
+
225
+ export { scopesForCapabilities, scopesForFeaturePacks };
package/src/mcp/index.js CHANGED
@@ -22,6 +22,8 @@ export {
22
22
  DEFAULT_CLIENT_REGISTRY_URL,
23
23
  CLIENT_REGISTRY_CACHE_SCHEMA,
24
24
  SEED_EXTERNAL_CLIENT_REGISTRY,
25
+ SEED_OFFERABLE_MCP_SERVER_CONNECTIONS,
26
+ listOfferableMcpServerConnections,
25
27
  fetchExternalClientRegistry,
26
28
  listRegisteredClients,
27
29
  isClientRegistered,
@@ -37,8 +39,18 @@ export {
37
39
  pingMcpServer,
38
40
  listMcpTools,
39
41
  callMcpTool,
42
+ withMcpClient,
43
+ buildHeaders,
40
44
  } from './client.js';
41
45
 
46
+ export {
47
+ CLOUDFLARE_MCP_SERVER_BUNDLES,
48
+ listCloudflareMcpBundles,
49
+ getCloudflareMcpBundle,
50
+ scopesForCloudflareMcpBundle,
51
+ cloudflareBundlesAsServerCatalog,
52
+ } from './cloudflare-bundles.js';
53
+
42
54
  export {
43
55
  recordToolReceipt,
44
56
  getSessionToolReceipts,
@@ -100,15 +100,9 @@ function baseRecord(provider, id, values = {}) {
100
100
 
101
101
  function openAIModelCapabilities(id) {
102
102
  const fallback = fallbackRecord('openai', id);
103
- if (fallback?.capabilities) return {};
104
- if (/^text-embedding-/i.test(id)) return { agent_runtime: false, embeddings: true };
105
- if (/^(?:gpt-image|chatgpt-image|gpt-audio|gpt-realtime|sora|tts|whisper|omni-moderation)/i.test(id)) {
106
- return { agent_runtime: false };
107
- }
108
- if (/^(?:gpt-(?:4o|4\.1|5|6)|o[1-9])/i.test(id)) {
109
- return { agent_runtime: true, responses: true };
110
- }
111
- return { agent_runtime: false };
103
+ // /v1/models proves credential-scoped availability but does not expose
104
+ // per-model modality / Responses compatibility. Never guess from names.
105
+ return fallback?.capabilities ? {} : {};
112
106
  }
113
107
 
114
108
  async function fetchJson(fetchImpl, url, init) {
@@ -157,8 +151,8 @@ export async function discoverAnthropicModels(apiKey, fetchImpl = fetch) {
157
151
  return baseRecord('anthropic', id, {
158
152
  label: clean(row?.display_name) || id,
159
153
  source_url: 'https://api.anthropic.com/v1/models',
160
- capabilities: { messages: true, function_calling: true, prompt_caching: true },
161
- metadata: { created_at: row?.created_at || null, type: row?.type || null },
154
+ capabilities: { messages: true },
155
+ metadata: { created_at: row?.created_at || null, type: row?.type || null, capability_source: 'provider_endpoint_contract' },
162
156
  });
163
157
  })
164
158
  .filter(Boolean);
@@ -179,6 +173,8 @@ export async function discoverGeminiModels(apiKey, fetchImpl = fetch) {
179
173
  .map((row) => {
180
174
  const id = clean(row?.baseModelId || row?.name).replace(/^models\//, '');
181
175
  if (!id) return null;
176
+ const providerDescription = clean(row?.description);
177
+ const specializedOutput = /(?:text[- ]to[- ]speech|\btts\b|image generation|generate images?|transcription|transcribe|audio generation)/i.test(providerDescription);
182
178
  return baseRecord('gemini', id, {
183
179
  label: clean(row?.displayName) || id,
184
180
  context_window: positiveInt(row?.inputTokenLimit),
@@ -187,12 +183,15 @@ export async function discoverGeminiModels(apiKey, fetchImpl = fetch) {
187
183
  source_url: 'https://generativelanguage.googleapis.com/v1beta/models',
188
184
  capabilities: {
189
185
  generate_content: true,
190
- function_calling: true,
186
+ text_output: !specializedOutput,
191
187
  thinking: row?.thinking === true,
192
188
  },
193
189
  metadata: {
194
190
  version: row?.version || null,
191
+ description: providerDescription || null,
195
192
  supported_generation_methods: row?.supportedGenerationMethods || [],
193
+ capability_source: 'provider_api',
194
+ specialized_output: specializedOutput,
196
195
  },
197
196
  });
198
197
  })
@@ -238,22 +237,39 @@ function xaiPricing(row) {
238
237
  export async function discoverXaiModels(apiKey, fetchImpl = fetch) {
239
238
  if (!clean(apiKey)) return failure('credential unavailable', false);
240
239
  try {
241
- const body = await fetchJson(fetchImpl, 'https://api.x.ai/v1/models', {
242
- headers: { authorization: `Bearer ${clean(apiKey)}` },
243
- });
240
+ const auth = { authorization: 'Bearer ' + clean(apiKey) };
241
+ const body = await fetchJson(fetchImpl, 'https://api.x.ai/v1/models', { headers: auth });
242
+ let languageRows = [];
243
+ try {
244
+ const languageBody = await fetchJson(fetchImpl, 'https://api.x.ai/v1/language-models', { headers: auth });
245
+ languageRows = Array.isArray(languageBody?.models) ? languageBody.models : [];
246
+ } catch {
247
+ // Keep full availability even if capability discovery is temporarily unavailable.
248
+ }
249
+ const languageById = new Map(languageRows.map((row) => [clean(row?.id), row]).filter(([id]) => id));
244
250
  const models = (Array.isArray(body?.data) ? body.data : [])
245
251
  .map((row) => {
246
252
  const id = clean(row?.id);
247
- if (!id || /image|video|voice|embedding/i.test(id)) return null;
248
- return baseRecord('grok', id, {
249
- context_window: positiveInt(row?.context_length),
253
+ if (!id) return null;
254
+ const language = languageById.get(id) || null;
255
+ const outputModalities = Array.isArray(language?.output_modalities)
256
+ ? language.output_modalities.map(clean).filter(Boolean)
257
+ : [];
258
+ return baseRecord('xai', id, {
259
+ context_window: positiveInt(language?.context_length ?? row?.context_length),
250
260
  pricing: xaiPricing(row),
251
261
  source_url: 'https://api.x.ai/v1/models',
252
- capabilities: { responses: true, function_calling: true, prompt_caching: true },
262
+ capabilities: {
263
+ responses: Boolean(language),
264
+ text_output: Boolean(language) && outputModalities.includes('text'),
265
+ },
253
266
  metadata: {
254
- aliases: row?.aliases || [],
255
- created: row?.created || null,
256
- owned_by: row?.owned_by || null,
267
+ aliases: row?.aliases || language?.aliases || [],
268
+ created: row?.created || language?.created || null,
269
+ owned_by: row?.owned_by || language?.owned_by || null,
270
+ input_modalities: Array.isArray(language?.input_modalities) ? language.input_modalities : [],
271
+ output_modalities: outputModalities,
272
+ capability_source: language ? 'provider_api_language_models' : 'provider_api_models_only',
257
273
  },
258
274
  });
259
275
  })
@@ -288,6 +304,7 @@ export async function discoverCursorModels(apiKey, fetchImpl = fetch) {
288
304
  aliases: Array.isArray(row?.aliases) ? row.aliases : [],
289
305
  parameters: params,
290
306
  variants: Array.isArray(row?.variants) ? row.variants : [],
307
+ capability_source: 'provider_api',
291
308
  },
292
309
  });
293
310
  })
@@ -332,6 +349,7 @@ export async function discoverCloudflareModels(apiToken, accountId, fetchImpl =
332
349
  task,
333
350
  author: clean(row?.author) || null,
334
351
  description: clean(row?.description) || null,
352
+ capability_source: 'provider_api_task',
335
353
  },
336
354
  });
337
355
  })