@intentface/latch-mcp 0.9.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Intentface
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,25 @@
+# @intentface/latch-mcp
+
+The MCP (Model Context Protocol) host for Latch — connect to MCP servers and expose their tools to agents, with per-tenant isolation and brokered auth.
+
+## What it does
+
+- **`createMcpHost`** — opens MCP server connections and surfaces their tools as agent tools. SSRF allowlist (`allowedHosts`) bounds which hosts a connection may reach; the server token/auth is brokered server-side and never reaches the model.
+- **`createMcpConnections`** — a `ConnectionRegistry` over a set of declared MCP connections (static `bearer`/`header` token, or interactive `oauth`). OAuth connections expose a gated `connect_<name>` tool so an agent can ask the user to authorize mid-chat (and auto-resume).
+- **`createMcpOAuth`** — the per-connection OAuth flow (authorize/callback/refresh), Vault-backed per caller. Supports **DCR** (dynamic client registration) and **pre-registered** clients (for providers without DCR — Google/GitHub/Slack).
+- **`createOAuthDiscoveryFetch`** — normalizes non-conformant discovery docs from proxied servers (force `https`, strip trailing-slash issuer) so the SDK's strict RFC checks pass.
+
+## Usage
+
+```ts
+import { createMcpConnections } from "@intentface/latch-mcp";
+
+const connections = createMcpConnections<Principal>({
+  callbackBaseUrl: `${baseURL}/api/latch/connections`,
+  connections: connectionDefs, // { name: { url, auth, normalize? } }
+});
+```
+
+## Where it fits
+
+A connection source for `@intentface/latch-core`'s registry. The platform also exposes user-added (UI/Vault-stored) MCP connections via the same primitives.

package/dist/approval.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=approval.test.d.ts.map

package/dist/approval.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.test.d.ts","sourceRoot":"","sources":["../src/approval.test.ts"],"names":[],"mappings":""}

package/dist/approval.test.js

@@ -0,0 +1,64 @@
+import { describe, expect, it } from "vitest";
+import { mcpApprovalValue, needsMcpApproval, nameHeuristicApproval, } from "./index.js";
+/**
+ * The approval policy's two-level shape: a policy decides per TOOL (from its
+ * descriptor/annotations), and may hand back a per-CALL function that decides
+ * from the model's arguments. The call form exists for meta-tool servers —
+ * one `execute_tool` multiplexing every operation carries a single annotation
+ * set, so a per-tool boolean can only gate everything or nothing.
+ */
+const READ_TOOL = {
+    name: "find_many_companies",
+    annotations: { readOnlyHint: true },
+};
+const WRITE_TOOL = {
+    name: "create_company",
+    annotations: { destructiveHint: true },
+};
+const META_TOOL = { name: "execute_tool" };
+describe("needsMcpApproval", () => {
+    it('"destructive" (default) keys on annotations', () => {
+        expect(needsMcpApproval(undefined, READ_TOOL)).toBe(false);
+        expect(needsMcpApproval(undefined, WRITE_TOOL)).toBe(true);
+        expect(needsMcpApproval("destructive", META_TOOL)).toBe(false); // no hints
+    });
+    it("passes a per-call function through from the predicate", () => {
+        const perCall = (input) => String(input?.toolName ?? "").startsWith("create_");
+        const gate = needsMcpApproval((tool) => (tool.name === "execute_tool" ? perCall : false), META_TOOL);
+        expect(gate).toBe(perCall);
+    });
+});
+describe("mcpApprovalValue — the SDK toolApproval map value", () => {
+    it("boolean policies map to 'user-approval' / undefined", () => {
+        expect(mcpApprovalValue("all", READ_TOOL)).toBe("user-approval");
+        expect(mcpApprovalValue("none", WRITE_TOOL)).toBeUndefined();
+        expect(mcpApprovalValue(undefined, WRITE_TOOL)).toBe("user-approval");
+        expect(mcpApprovalValue(undefined, READ_TOOL)).toBeUndefined();
+    });
+    it("a per-call policy gates by ARGUMENTS at call time", async () => {
+        const value = mcpApprovalValue((tool) => tool.name === "execute_tool"
+            ? (input) => /^(create|update|delete)_/.test(String(input?.toolName ?? ""))
+            : false, META_TOOL);
+        expect(typeof value).toBe("function");
+        const decide = value;
+        // The read that finding 1.2 saw gated — through the meta-tool — runs free…
+        expect(await decide({ toolName: "find_many_companies" })).toBeUndefined();
+        // …while the mutating operations still stop for a human.
+        expect(await decide({ toolName: "create_person" })).toBe("user-approval");
+        expect(await decide({ toolName: "delete_company" })).toBe("user-approval");
+    });
+    it("supports an async per-call decision", async () => {
+        const value = mcpApprovalValue(() => async () => true, META_TOOL);
+        const decide = value;
+        expect(await decide({})).toBe("user-approval");
+    });
+});
+describe("nameHeuristicApproval (unchanged behavior)", () => {
+    it("annotations stay authoritative; verb heuristic only without hints", () => {
+        const policy = nameHeuristicApproval();
+        expect(policy(READ_TOOL)).toBe(false); // readOnlyHint wins
+        expect(policy({ name: "create_deal" })).toBe(true); // verb, no hints
+        expect(policy({ name: "list_deals" })).toBe(false);
+    });
+});
+//# sourceMappingURL=approval.test.js.map

package/dist/approval.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.test.js","sourceRoot":"","sources":["../src/approval.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,YAAY,CAAC;AAEpB;;;;;;GAMG;AAEH,MAAM,SAAS,GAAgB;IAC7B,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;CACpC,CAAC;AACF,MAAM,UAAU,GAAgB;IAC9B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;CACvC,CAAC;AACF,MAAM,SAAS,GAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAExD,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE,CACjC,MAAM,CAAE,KAA+B,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,gBAAgB,CAC3B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAC1D,SAAS,CACV,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjE,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC7D,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtE,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,KAAK,GAAG,gBAAgB,CAC5B,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,IAAI,KAAK,cAAc;YAC1B,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CACR,0BAA0B,CAAC,IAAI,CAC7B,MAAM,CAAE,KAA+B,EAAE,QAAQ,IAAI,EAAE,CAAC,CACzD;YACL,CAAC,CAAC,KAAK,EACX,SAAS,CACV,CAAC;QACF,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,KAAiE,CAAC;QACjF,2EAA2E;QAC3E,MAAM,CAAC,MAAM,MAAM,CAAC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1E,yDAAyD;QACzD,MAAM,CAAC,MAAM,MAAM,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,MAAM,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,KAAiE,CAAC;QACjF,MAAM,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB;QAC3D,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB;QACrE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/connections.d.ts

@@ -0,0 +1,180 @@
+import type { OAuthClientMetadata } from "@ai-sdk/mcp";
+import type { SecretResolver, Vault, ToolSource } from "@intentface/latch-core";
+import type { McpApprovalPolicy, McpToolInfo } from "./host.js";
+import type { McpOAuth } from "./oauth.js";
+/**
+ * Declarative MCP connections — the developer-facing surface.
+ *
+ * A customer writes one `defineMcpConnection({ url, description, auth })` per
+ * server (eve-style), then hands the set to `createMcpConnections`. The registry
+ * owns everything else: tool discovery, the SSRF allowlist, OAuth (PKCE/DCR,
+ * token storage in the Vault, discovery-doc normalization), and the synthetic
+ * `connect_<name>` tool that lets the agent ask the user to authorize mid-chat.
+ * The handler (`@intentface/latch-server`) drives the OAuth routes off it.
+ */
+/** How a connection authenticates. Build with `none` / `bearer` / `headers` / `oauth`. */
+export type McpConnectionAuth<P> = {
+    kind: "none";
+} | {
+    kind: "bearer";
+    getToken: (principal: P) => string | Promise<string>;
+} | {
+    kind: "headers";
+    headers: Record<string, string>;
+} | {
+    kind: "oauth";
+    options: OAuthAuthOptions;
+};
+/** Options for an interactive (Authorization Code + PKCE) OAuth connection. */
+export interface OAuthAuthOptions {
+    /** Requested scope string components, joined with spaces. */
+    scopes?: string[];
+    /**
+     * A pre-registered OAuth client. When set, Dynamic Client Registration (DCR)
+     * is SKIPPED and this client is used directly — required for auth servers that
+     * don't support DCR (Google, GitHub, Slack, …). Register our callback URL
+     * (`<callbackBaseUrl>/<name>/callback`) as an allowed redirect URI with the
+     * provider. Omit `clientSecret` for a public PKCE client.
+     */
+    clientId?: string;
+    clientSecret?: string;
+    /** Client name advertised during dynamic client registration. */
+    clientName?: string;
+    /** Token-endpoint auth method (default `"none"` — public PKCE client). */
+    tokenEndpointAuthMethod?: string;
+    /**
+     * Normalize a provider's non-conformant discovery documents (e.g. a proxied
+     * `http://` authorization-server reference, or a trailing-slash issuer the
+     * SDK's strict RFC 8414 check rejects). `forceScheme: "https"` is the common
+     * case; `hosts` bounds the rewrite to those hostnames.
+     */
+    normalize?: {
+        forceScheme?: "https" | "http";
+        hosts?: string[];
+    };
+    /**
+     * Omit the RFC 8707 `resource` parameter from the authorization request and
+     * token exchange even when the server's protected-resource metadata
+     * advertises one. Google's MCP servers (calendarmcp.googleapis.com, …) do
+     * advertise a resource, but the audience-bound token Google then mints is
+     * rejected by the MCP server itself (401 `invalid_token`); a plain
+     * scope-bearing token is accepted. Set `true` for those servers.
+     */
+    omitResource?: boolean;
+    /**
+     * Extra query params appended to the authorization redirect URL — provider
+     * extensions the SDK doesn't model, e.g. Google's
+     * `{ access_type: "offline", prompt: "consent" }` to be issued a refresh
+     * token (without it the connection silently dies when the 1h access token
+     * expires, since Google returns no refresh token by default).
+     */
+    authorizationParams?: Record<string, string>;
+    /** Extra client-metadata passthrough (merged into the generated metadata). */
+    clientMetadata?: Partial<OAuthClientMetadata>;
+}
+export declare const none: {
+    readonly kind: "none";
+};
+export declare function bearer<P>(opts: {
+    getToken: (principal: P) => string | Promise<string>;
+}): McpConnectionAuth<P>;
+export declare function headers<P = unknown>(headers: Record<string, string>): McpConnectionAuth<P>;
+export declare function oauth<P = unknown>(options?: OAuthAuthOptions): McpConnectionAuth<P>;
+/** A declarative MCP connection. The connection's *name* is the registry key. */
+export interface McpConnectionDef<P = unknown> {
+    /** MCP server URL (HTTP transport). */
+    url: string;
+    /** Human-readable purpose — surfaced to the user; helps the model choose it. */
+    description?: string;
+    /** Auth strategy (default: none). */
+    auth?: McpConnectionAuth<P>;
+    /** Restrict the exposed tools by their *server-local* name (pre-namespacing). */
+    tools?: {
+        allow?: string[];
+        block?: string[];
+    };
+    /**
+     * Which of this connection's tools require human approval. Default
+     * `"destructive"` — respect the MCP server's own annotations (gate tools it
+     * marks destructive / not read-only). `"all"`, `"none"`, or a per-tool
+     * predicate `(tool) => boolean` — which may instead return a per-CALL
+     * function `(input) => boolean | Promise<boolean>`, evaluated with the
+     * model's arguments each call, for meta-tool servers whose one tool
+     * multiplexes every operation (gate `execute_tool` only when
+     * `input.toolName` starts with `create_`).
+     * For policy that varies by caller, use {@link approvalFor} instead.
+     */
+    approval?: McpApprovalPolicy;
+    /**
+     * Per-principal approval resolver — awaited at open time to produce the
+     * approval policy for this caller (e.g. per-user permissions from a DB).
+     * Takes precedence over {@link approval} when set.
+     */
+    approvalFor?: (principal: P) => McpApprovalPolicy | Promise<McpApprovalPolicy>;
+    /**
+     * Tool visibility filter — a tool for which it returns `false` is dropped
+     * entirely (no tool, no approval entry). A per-tool predicate
+     * `(tool) => boolean`, for a hard block an approval policy can't express. For
+     * visibility that varies by caller, use {@link visibleToolsFor} instead.
+     */
+    visibleTools?: (tool: McpToolInfo) => boolean;
+    /**
+     * Per-principal visibility resolver — awaited at open time to produce the
+     * visibility predicate for this caller. Takes precedence over
+     * {@link visibleTools} when set.
+     */
+    visibleToolsFor?: (principal: P) => ((tool: McpToolInfo) => boolean) | Promise<(tool: McpToolInfo) => boolean>;
+    /**
+     * Permit this connection to reach a private/internal address. Off by default
+     * (the host blocks private/loopback/link-local IPs and DNS rebinding); set
+     * `true` only for a trusted local/in-cluster MCP server.
+     */
+    allowPrivateHost?: boolean;
+}
+/** Identity helper — keeps connection files declarative and typed. */
+export declare function defineMcpConnection<P = unknown>(def: McpConnectionDef<P>): McpConnectionDef<P>;
+export interface McpConnectionsConfig<P> {
+    vault: Vault<P>;
+    /** Read-side for bearer secrets, if any bearer connection resolves from the Vault. */
+    secrets?: SecretResolver<P>;
+    /** SSRF allowlist (see `createMcpHost`). */
+    allowedHosts: string[] | ((principal: P) => string[] | Promise<string[]>);
+    /** Connection set, keyed by name. */
+    connections: Record<string, McpConnectionDef<P>>;
+    /**
+     * Base URL the OAuth callback lands on, e.g.
+     * `https://app.example.com/api/latch/connections`. The registry appends
+     * `/<name>/callback` to build each connection's exact redirect URI.
+     */
+    callbackBaseUrl?: string;
+    /** Observe a connection that failed to open (skipped, not fatal). */
+    onConnectionError?: (name: string, error: unknown) => void;
+}
+/** Per-connection status for a tenant. */
+export interface ConnectionStatus {
+    name: string;
+    description?: string;
+    /** True if this connection uses interactive OAuth. */
+    oauth: boolean;
+    /** True if usable now (non-OAuth are always true; OAuth → tokens present). */
+    authorized: boolean;
+}
+export interface McpConnections<P> {
+    /** A `ToolSource` over ALL connections: authorized tools + connect_* tools. */
+    host: ToolSource<P>;
+    /**
+     * A `ToolSource` scoped to the named connections only — what the runtime uses
+     * to resolve an agent's `connections: [...]`. Unknown names are ignored.
+     */
+    hostFor(names: string[]): ToolSource<P>;
+    /** Declared connection names. */
+    names: string[];
+    /** The OAuth flow for a connection (undefined if it isn't an OAuth connection). */
+    oauth(name: string): McpOAuth<P> | undefined;
+    /** Per-connection status for the caller. */
+    status(principal: P): Promise<ConnectionStatus[]>;
+    /** Open just one connection and return its namespaced tool names (a connectivity probe). */
+    testTools(name: string, principal: P): Promise<string[]>;
+}
+export declare function createMcpConnections<P>(config: McpConnectionsConfig<P>): McpConnections<P>;
+//# sourceMappingURL=connections.d.ts.map

package/dist/connections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.d.ts","sourceRoot":"","sources":["../src/connections.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,KAAK,EACV,cAAc,EACd,KAAK,EAEL,UAAU,EACX,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAiB,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE/E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3C;;;;;;;;;GASG;AAEH,0FAA0F;AAC1F,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAC3B;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAEjD,+EAA+E;AAC/E,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACjE;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,8EAA8E;IAC9E,cAAc,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC/C;AAED,eAAO,MAAM,IAAI;;CAA4B,CAAC;AAE9C,wBAAgB,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE;IAC9B,QAAQ,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACtD,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAEvB;AAED,wBAAgB,OAAO,CAAC,CAAC,GAAG,OAAO,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,iBAAiB,CAAC,CAAC,CAAC,CAEtB;AAED,wBAAgB,KAAK,CAAC,CAAC,GAAG,OAAO,EAC/B,OAAO,GAAE,gBAAqB,GAC7B,iBAAiB,CAAC,CAAC,CAAC,CAEtB;AAED,iFAAiF;AACjF,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,OAAO;IAC3C,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC5B,iFAAiF;IACjF,KAAK,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC/C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/E;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC;IAC9C;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAChB,SAAS,EAAE,CAAC,KACT,CAAC,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC;IAChF;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,sEAAsE;AACtE,wBAAgB,mBAAmB,CAAC,CAAC,GAAG,OAAO,EAC7C,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,GACvB,gBAAgB,CAAC,CAAC,CAAC,CAErB;AAED,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACrC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAChB,sFAAsF;IACtF,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IAC5B,4CAA4C;IAC5C,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1E,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC5D;AAED,0CAA0C;AAC1C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,KAAK,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,cAAc,CAAC,CAAC;IAC/B,+EAA+E;IAC/E,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACxC,iCAAiC;IACjC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,mFAAmF;IACnF,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;IAC7C,4CAA4C;IAC5C,MAAM,CAAC,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAClD,4FAA4F;IAC5F,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC1D;AA8BD,wBAAgB,oBAAoB,CAAC,CAAC,EACpC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAC9B,cAAc,CAAC,CAAC,CAAC,CAoNnB"}

package/dist/connections.js

@@ -0,0 +1,255 @@
+import { tool, jsonSchema } from "ai";
+import { createMcpHost } from "./host.js";
+import { createMcpOAuth } from "./oauth.js";
+import { createOAuthDiscoveryFetch } from "./oauth-fetch.js";
+export const none = { kind: "none" };
+export function bearer(opts) {
+    return { kind: "bearer", getToken: opts.getToken };
+}
+export function headers(headers) {
+    return { kind: "headers", headers };
+}
+export function oauth(options = {}) {
+    return { kind: "oauth", options };
+}
+/** Identity helper — keeps connection files declarative and typed. */
+export function defineMcpConnection(def) {
+    return def;
+}
+/** Build the synthetic tool that asks the user to authorize a connection. */
+function connectTool(name, def) {
+    return tool({
+        description: `Connect the "${name}" integration` +
+            (def.description ? ` (${def.description})` : "") +
+            `. The user must authorize access first — calling this prompts them to ` +
+            `connect. Only call it when ${name}'s own tools are not already available.`,
+        inputSchema: jsonSchema({
+            type: "object",
+            properties: {},
+            additionalProperties: false,
+        }),
+        execute: async () => ({ connected: true, connection: name }),
+    });
+}
+/** True if a server-local tool name passes the connection's allow/block filter. */
+function toolAllowed(localName, filter) {
+    if (!filter)
+        return true;
+    if (filter.block?.includes(localName))
+        return false;
+    if (filter.allow && !filter.allow.includes(localName))
+        return false;
+    return true;
+}
+export function createMcpConnections(config) {
+    const entries = Object.entries(config.connections);
+    // One McpOAuth + normalizing fetch per OAuth connection, built up front.
+    const oauthByName = new Map();
+    const fetchByName = new Map();
+    for (const [name, def] of entries) {
+        if (def.auth?.kind !== "oauth")
+            continue;
+        const opts = def.auth.options;
+        const redirectUrl = config.callbackBaseUrl
+            ? `${config.callbackBaseUrl.replace(/\/$/, "")}/${name}/callback`
+            : undefined;
+        const normFetch = opts.normalize
+            ? createOAuthDiscoveryFetch(opts.normalize)
+            : undefined;
+        if (normFetch)
+            fetchByName.set(name, normFetch);
+        if (!redirectUrl) {
+            // Without a callback base we can't run the redirect flow; skip building
+            // the OAuth client (status will still report it as an OAuth connection).
+            continue;
+        }
+        const clientMetadata = {
+            client_name: opts.clientName ?? `Latch (${name})`,
+            redirect_uris: [redirectUrl],
+            grant_types: ["authorization_code", "refresh_token"],
+            response_types: ["code"],
+            token_endpoint_auth_method: opts.tokenEndpointAuthMethod ?? "none",
+            ...opts.clientMetadata,
+        };
+        oauthByName.set(name, createMcpOAuth({
+            vault: config.vault,
+            config: {
+                name,
+                serverUrl: def.url,
+                redirectUrl,
+                clientMetadata,
+                // Pre-registered client (skips DCR) when provided — for auth servers
+                // without dynamic registration.
+                clientInformation: opts.clientId
+                    ? { client_id: opts.clientId, client_secret: opts.clientSecret }
+                    : undefined,
+                scope: opts.scopes?.join(" "),
+                fetch: normFetch,
+                // `undefined` keeps the SDK default (exact origin match on the
+                // advertised resource); a defined hook returning undefined omits the
+                // resource parameter from the authorize + exchange requests.
+                validateResourceURL: opts.omitResource ? () => undefined : undefined,
+                authorizationParams: opts.authorizationParams,
+            },
+        }));
+    }
+    /** Resolve the real (server-backed) connections for a caller this turn. */
+    async function resolveConnections(principal) {
+        const out = [];
+        for (const [name, def] of entries) {
+            const auth = def.auth ?? none;
+            // `*For` resolvers vary by caller (awaited per turn); they take precedence
+            // over the static `approval`/`visibleTools`. A resolver failure skips just
+            // this connection (graceful degradation, like a connect-time failure)
+            // instead of rejecting the whole host.
+            let approval = def.approval;
+            let visible = def.visibleTools;
+            try {
+                if (def.approvalFor)
+                    approval = await def.approvalFor(principal);
+                if (def.visibleToolsFor)
+                    visible = await def.visibleToolsFor(principal);
+            }
+            catch (error) {
+                config.onConnectionError?.(name, error);
+                continue;
+            }
+            if (auth.kind === "oauth") {
+                const o = oauthByName.get(name);
+                // Include the live connection only once the caller has authorized.
+                if (o && (await o.isAuthorized(principal))) {
+                    out.push({
+                        name,
+                        url: def.url,
+                        authProvider: o.provider(principal),
+                        fetch: fetchByName.get(name),
+                        approval,
+                        visible,
+                        allowPrivateHost: def.allowPrivateHost,
+                    });
+                }
+            }
+            else if (auth.kind === "bearer") {
+                const token = await auth.getToken(principal);
+                out.push({
+                    name,
+                    url: def.url,
+                    auth: { type: "headers", headers: { Authorization: `Bearer ${token}` } },
+                    approval,
+                    visible,
+                    allowPrivateHost: def.allowPrivateHost,
+                });
+            }
+            else if (auth.kind === "headers") {
+                out.push({
+                    name,
+                    url: def.url,
+                    auth: { type: "headers", headers: auth.headers },
+                    approval,
+                    visible,
+                    allowPrivateHost: def.allowPrivateHost,
+                });
+            }
+            else {
+                out.push({
+                    name,
+                    url: def.url,
+                    approval,
+                    visible,
+                    allowPrivateHost: def.allowPrivateHost,
+                });
+            }
+        }
+        return out;
+    }
+    const filterByName = new Map(entries.map(([name, def]) => [name, def.tools]));
+    /**
+     * A tool source over the connections in `only` (or all, if undefined):
+     * each authorized connection's filtered tools, plus a gated `connect_<name>`
+     * for every OAuth connection in scope (present even when authorized, so an
+     * approved historical call can execute on resume).
+     */
+    function makeHost(only) {
+        const inScope = (name) => !only || only.has(name);
+        const hostInstance = createMcpHost({
+            secrets: config.secrets,
+            allowedHosts: config.allowedHosts,
+            onConnectionError: config.onConnectionError,
+            connections: async (principal) => (await resolveConnections(principal)).filter((c) => inScope(c.name)),
+        });
+        return {
+            async open(principal) {
+                const opened = await hostInstance.open(principal);
+                // Apply per-connection allow/block on the server-local tool name.
+                const tools = {};
+                for (const [key, t] of Object.entries(opened.tools)) {
+                    const us = key.indexOf("_");
+                    const conn = us === -1 ? key : key.slice(0, us);
+                    const local = us === -1 ? key : key.slice(us + 1);
+                    if (toolAllowed(local, filterByName.get(conn)))
+                        tools[key] = t;
+                }
+                // Start from the host's annotation-derived gating (only for the tools
+                // that survived the allow/block filter), then add the connect_* gates.
+                const toolApproval = {};
+                for (const [key, status] of Object.entries(opened.toolApproval)) {
+                    if (key in tools)
+                        toolApproval[key] = status;
+                }
+                const alwaysActive = [];
+                for (const [name, def] of entries) {
+                    if (def.auth?.kind !== "oauth" || !inScope(name))
+                        continue;
+                    const key = `connect_${name}`;
+                    tools[key] = connectTool(name, def);
+                    toolApproval[key] = "user-approval";
+                    alwaysActive.push(key); // keep the auth tool callable under enabledTools
+                }
+                return { tools, close: opened.close, toolApproval, alwaysActive };
+            },
+        };
+    }
+    return {
+        host: makeHost(),
+        hostFor: (names) => makeHost(new Set(names)),
+        names: entries.map(([name]) => name),
+        oauth: (name) => oauthByName.get(name),
+        async status(principal) {
+            const out = [];
+            for (const [name, def] of entries) {
+                const isOAuth = def.auth?.kind === "oauth";
+                const o = oauthByName.get(name);
+                out.push({
+                    name,
+                    description: def.description,
+                    oauth: isOAuth,
+                    authorized: isOAuth ? (o ? await o.isAuthorized(principal) : false) : true,
+                });
+            }
+            return out;
+        },
+        async testTools(name, principal) {
+            const def = config.connections[name];
+            if (!def)
+                throw new Error(`Unknown connection: ${name}`);
+            // Open a one-connection host so the probe doesn't touch other servers.
+            const probe = createMcpHost({
+                secrets: config.secrets,
+                allowedHosts: config.allowedHosts,
+                onConnectionError: config.onConnectionError,
+                connections: async (p) => {
+                    const all = await resolveConnections(p);
+                    return all.filter((c) => c.name === name);
+                },
+            });
+            const opened = await probe.open(principal);
+            try {
+                return Object.keys(opened.tools);
+            }
+            finally {
+                await opened.close();
+            }
+        },
+    };
+}
+//# sourceMappingURL=connections.js.map

package/dist/connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.js","sourceRoot":"","sources":["../src/connections.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAQtC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAkE7D,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAW,CAAC;AAE9C,MAAM,UAAU,MAAM,CAAI,IAEzB;IACC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,OAA+B;IAE/B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,KAAK,CACnB,UAA4B,EAAE;IAE9B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAqDD,sEAAsE;AACtE,MAAM,UAAU,mBAAmB,CACjC,GAAwB;IAExB,OAAO,GAAG,CAAC;AACb,CAAC;AAgDD,6EAA6E;AAC7E,SAAS,WAAW,CAAC,IAAY,EAAE,GAA6B;IAC9D,OAAO,IAAI,CAAC;QACV,WAAW,EACT,gBAAgB,IAAI,eAAe;YACnC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,wEAAwE;YACxE,8BAA8B,IAAI,yCAAyC;QAC7E,WAAW,EAAE,UAAU,CAAwB;YAC7C,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;YACd,oBAAoB,EAAE,KAAK;SAC5B,CAAC;QACF,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;KAC7D,CAAC,CAAC;AACL,CAAC;AAED,mFAAmF;AACnF,SAAS,WAAW,CAClB,SAAiB,EACjB,MAA0C;IAE1C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAA+B;IAE/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEnD,yEAAyE;IACzE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAyB,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO;YAAE,SAAS;QACzC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe;YACxC,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,IAAI,WAAW;YACjE,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS;YAC9B,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,SAAS;YAAE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,wEAAwE;YACxE,yEAAyE;YACzE,SAAS;QACX,CAAC;QACD,MAAM,cAAc,GAAwB;YAC1C,WAAW,EAAE,IAAI,CAAC,UAAU,IAAI,UAAU,IAAI,GAAG;YACjD,aAAa,EAAE,CAAC,WAAW,CAAC;YAC5B,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YACpD,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,0BAA0B,EAAE,IAAI,CAAC,uBAAuB,IAAI,MAAM;YAClE,GAAG,IAAI,CAAC,cAAc;SACvB,CAAC;QACF,WAAW,CAAC,GAAG,CACb,IAAI,EACJ,cAAc,CAAC;YACb,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE;gBACN,IAAI;gBACJ,SAAS,EAAE,GAAG,CAAC,GAAG;gBAClB,WAAW;gBACX,cAAc;gBACd,qEAAqE;gBACrE,gCAAgC;gBAChC,iBAAiB,EAAE,IAAI,CAAC,QAAQ;oBAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE;oBAChE,CAAC,CAAC,SAAS;gBACb,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;gBAC7B,KAAK,EAAE,SAAS;gBAChB,+DAA+D;gBAC/D,qEAAqE;gBACrE,6DAA6D;gBAC7D,mBAAmB,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACpE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;aAC9C;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,KAAK,UAAU,kBAAkB,CAAC,SAAY;QAC5C,MAAM,GAAG,GAAoB,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;YAC9B,2EAA2E;YAC3E,2EAA2E;YAC3E,sEAAsE;YACtE,uCAAuC;YACvC,IAAI,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC5B,IAAI,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC;YAC/B,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,WAAW;oBAAE,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;gBACjE,IAAI,GAAG,CAAC,eAAe;oBAAE,OAAO,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,iBAAiB,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACxC,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC1B,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChC,mEAAmE;gBACnE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;oBAC3C,GAAG,CAAC,IAAI,CAAC;wBACP,IAAI;wBACJ,GAAG,EAAE,GAAG,CAAC,GAAG;wBACZ,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;wBACnC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;wBAC5B,QAAQ;wBACR,OAAO;wBACP,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;qBACvC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC7C,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI;oBACJ,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE;oBACxE,QAAQ;oBACR,OAAO;oBACP,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;iBACvC,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACnC,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI;oBACJ,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;oBAChD,QAAQ;oBACR,OAAO;oBACP,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;iBACvC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI;oBACJ,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,QAAQ;oBACR,OAAO;oBACP,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAU,CAAC,CACzD,CAAC;IAEF;;;;;OAKG;IACH,SAAS,QAAQ,CAAC,IAAkB;QAClC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,aAAa,CAAI;YACpC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAC/B,CAAC,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACvE,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,CAAC,IAAI,CAAC,SAAS;gBAClB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAElD,kEAAkE;gBAClE,MAAM,KAAK,GAA4B,EAAE,CAAC;gBAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC5B,MAAM,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAChD,MAAM,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;oBAClD,IAAI,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACjE,CAAC;gBAED,sEAAsE;gBACtE,uEAAuE;gBACvE,MAAM,YAAY,GAA4B,EAAE,CAAC;gBACjD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;oBAChE,IAAI,GAAG,IAAI,KAAK;wBAAE,YAAY,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;gBAC/C,CAAC;gBACD,MAAM,YAAY,GAAa,EAAE,CAAC;gBAClC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;oBAClC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAC3D,MAAM,GAAG,GAAG,WAAW,IAAI,EAAE,CAAC;oBAC9B,KAAK,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBACpC,YAAY,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC;oBACpC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,iDAAiD;gBAC3E,CAAC;gBAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;YACpE,CAAC;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ,EAAE;QAChB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;QACpC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;QACtC,KAAK,CAAC,MAAM,CAAC,SAAS;YACpB,MAAM,GAAG,GAAuB,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC;gBAC3C,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChC,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI;oBACJ,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,KAAK,EAAE,OAAO;oBACd,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;iBAC3E,CAAC,CAAC;YACL,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS;YAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;YACzD,uEAAuE;YACvE,MAAM,KAAK,GAAG,aAAa,CAAI;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;oBACvB,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,CAAC,CAAC,CAAC;oBACxC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBAC5C,CAAC;aACF,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/host-output.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=host-output.test.d.ts.map

package/dist/host-output.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-output.test.d.ts","sourceRoot":"","sources":["../src/host-output.test.ts"],"names":[],"mappings":""}

package/dist/host-output.test.js

@@ -0,0 +1,51 @@
+import { describe, expect, it } from "vitest";
+import { withStructuredContentFallback } from "./host.js";
+const call = (output, original) => withStructuredContentFallback(original)({ toolCallId: "c1", input: {}, output });
+describe("withStructuredContentFallback", () => {
+    it("returns structuredContent as JSON when content is empty (Airtable-style)", () => {
+        const output = {
+            content: [],
+            structuredContent: { bases: [{ id: "app1", name: "ATS" }] },
+            isError: false,
+        };
+        expect(call(output)).toEqual({
+            type: "json",
+            value: { bases: [{ id: "app1", name: "ATS" }] },
+        });
+    });
+    it("falls back when content only holds blank text parts", () => {
+        const output = {
+            content: [{ type: "text", text: "  " }],
+            structuredContent: { ok: true },
+        };
+        expect(call(output)).toEqual({ type: "json", value: { ok: true } });
+    });
+    it("keeps the SDK mapping when content carries real text", () => {
+        const output = {
+            content: [{ type: "text", text: "3 bases found" }],
+            structuredContent: { bases: [] },
+        };
+        const original = () => ({ type: "content", value: [{ type: "text", text: "3 bases found" }] });
+        expect(call(output, original)).toEqual({
+            type: "content",
+            value: [{ type: "text", text: "3 bases found" }],
+        });
+    });
+    it("keeps the SDK mapping for non-text parts (images)", () => {
+        const output = {
+            content: [{ type: "image", data: "…", mimeType: "image/png" }],
+            structuredContent: { alt: "chart" },
+        };
+        const original = () => "sdk";
+        expect(call(output, original)).toBe("sdk");
+    });
+    it("leaves errors alone even with structuredContent present", () => {
+        const output = { content: [], structuredContent: { reason: "x" }, isError: true };
+        const original = () => "sdk-error-path";
+        expect(call(output, original)).toBe("sdk-error-path");
+    });
+    it("passes plain results through as JSON when no original mapper exists", () => {
+        expect(call({ anything: 1 })).toEqual({ type: "json", value: { anything: 1 } });
+    });
+});
+//# sourceMappingURL=host-output.test.js.map