@microsoft/teamsfx-core 3.0.15-beta.2026072312.0 → 3.0.15-beta.2026072911.0

package/build/common/mcpToolFetcher.d.ts

@@ -14,11 +14,31 @@ export interface MCPFetchResult {
 export declare function fetchMCPTools(serverUrl: string): Promise<MCPFetchResult>;
 /** Read MCP tool definitions from a wrapped or raw JSON array. */
 export declare function readMCPToolsFromFile(filePath: string): Promise<MCPTool[]>;
+/**
+ * What a probe learned about the URL itself, independently of whether authorization is needed.
+ *
+ * - `confirmed`: something MCP-shaped answered — either a successful `initialize` or an OAuth
+ *   challenge. The URL is right.
+ * - `notEndpoint`: the server answered definitively and the answer was not MCP. The URL is
+ *   most likely wrong.
+ * - `undetermined`: nothing was learned (server error, timeout, DNS or transport failure).
+ *   Says nothing about the URL and must never be reported as a problem with it.
+ */
+export type MCPEndpointStatus = "confirmed" | "notEndpoint" | "undetermined";
 export interface MCPAuthProbeResult {
     requiresAuth: boolean;
     authMetadataUrl?: string;
+    /**
+     * Whether the URL was confirmed to be an MCP endpoint. Reported separately from `requiresAuth`
+     * because it says whether the URL is right, not whether authorization is missing. A mistyped
+     * URL commonly still serves an ordinary page on GET — the host's landing page, say — which
+     * makes it look reachable; only the `initialize` POST exposes that nothing MCP is there.
+     */
+    endpointStatus: MCPEndpointStatus;
+    /** The HTTP status behind a `notEndpoint` verdict. Absent for the other two states. */
+    responseStatus?: number;
 }
-/** Probe an MCP streamable-HTTP endpoint for an OAuth challenge. */
+/** Probe an MCP streamable-HTTP endpoint for an OAuth challenge and for the URL's validity. */
 export declare function probeMCPServerAuth(serverUrl: string): Promise<MCPAuthProbeResult>;
 export interface MCPOAuthMetadata {
     authorizationUrl: string;
@@ -26,6 +46,45 @@ export interface MCPOAuthMetadata {
     refreshUrl?: string;
     wellKnownUrl: string;
 }
+/**
+ * Build the ordered list of authorization-server metadata URLs to probe for an issuer.
+ *
+ * Providers disagree on which discovery form they serve: RFC 8414 §3.1 mandates inserting
+ * `/.well-known/oauth-authorization-server` between the host and the issuer path, while
+ * OpenID Connect Discovery §4 appends `/.well-known/openid-configuration` to the issuer.
+ * Microsoft Entra, for example, serves ONLY the appended OIDC form — the RFC 8414 insertion
+ * form returns 404 — so probing a single form silently loses the endpoints for whole classes
+ * of identity providers. Candidates are deduplicated (a host-only issuer collapses the
+ * insertion and append forms) and returned in RFC-preference order.
+ */
+export declare function buildWellKnownCandidates(issuer: string): string[];
+/**
+ * Build the ordered list of authorization-server metadata URLs to probe for an MCP server that
+ * never pointed at an authorization server.
+ *
+ * MCP servers written against the 2025-03-26 authorization spec are their own authorization
+ * server: they publish RFC 8414 metadata at the origin root and ship no RFC 9728
+ * protected-resource document at all. Such a server answers the 401 challenge with `realm`
+ * alone, so `resource_metadata` discovery dead-ends and the endpoints have to be derived from
+ * the server URL instead. Path-derived forms are probed first, because a host exposing several
+ * MCP endpoints may serve per-endpoint metadata; the origin root is the last resort.
+ */
+export declare function buildMCPServerWellKnownCandidates(mcpServerUrl: string): string[];
+/**
+ * Build the RFC 9728 protected-resource metadata URLs to probe for an MCP server that never
+ * advertised one.
+ *
+ * A server only hands out its `resource_metadata` location inside a `WWW-Authenticate`
+ * challenge, and a server that defers authorization to the individual tool calls answers an
+ * unauthenticated `initialize` with a plain 200 and no challenge at all — Google's Gmail,
+ * Calendar and Drive servers do exactly that, yet each publishes a protected-resource document
+ * naming `https://accounts.google.com/`. Waiting to be told therefore loses the metadata for a
+ * whole class of servers, so the document is derived from the resource URL instead, as MCP's
+ * authorization spec requires of clients. RFC 9728 §3.1 inserts the well-known segment between
+ * the host and the resource path; the path-less form follows for servers that publish at the
+ * origin root only.
+ */
+export declare function buildProtectedResourceCandidates(mcpServerUrl: string): string[];
 /** Resolve OAuth endpoints from MCP resource or authorization-server metadata. */
-export declare function resolveMCPOAuthMetadata(authMetadataUrl?: string, wellKnownUrl?: string): Promise<MCPOAuthMetadata>;
+export declare function resolveMCPOAuthMetadata(authMetadataUrl?: string, wellKnownUrl?: string, mcpServerUrl?: string): Promise<MCPOAuthMetadata>;
 //# sourceMappingURL=mcpToolFetcher.d.ts.map

package/build/common/mcpToolFetcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcpToolFetcher.d.ts","sourceRoot":"","sources":["../../src/common/mcpToolFetcher.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,GAAG,CAAC;IACjB,YAAY,CAAC,EAAE,GAAG,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,2DAA2D;AAC3D,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA0E9E;AAED,kEAAkE;AAClE,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CA8B/E;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,oEAAoE;AACpE,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkCvF;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,kFAAkF;AAClF,wBAAsB,uBAAuB,CAC3C,eAAe,CAAC,EAAE,MAAM,EACxB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAkC3B"}
+{"version":3,"file":"mcpToolFetcher.d.ts","sourceRoot":"","sources":["../../src/common/mcpToolFetcher.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,GAAG,CAAC;IACjB,YAAY,CAAC,EAAE,GAAG,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,2DAA2D;AAC3D,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA0E9E;AAED,kEAAkE;AAClE,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CA8B/E;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,aAAa,GAAG,cAAc,CAAC;AAmC7E,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,cAAc,EAAE,iBAAiB,CAAC;IAClC,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA0DD,+FAA+F;AAC/F,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA8CvF;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAajE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAUhF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gCAAgC,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAU/E;AA4CD,kFAAkF;AAClF,wBAAsB,uBAAuB,CAC3C,eAAe,CAAC,EAAE,MAAM,EACxB,YAAY,CAAC,EAAE,MAAM,EACrB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAgD3B"}

package/build/common/mcpToolFetcher.js

@@ -5,6 +5,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.fetchMCPTools = fetchMCPTools;
 exports.readMCPToolsFromFile = readMCPToolsFromFile;
 exports.probeMCPServerAuth = probeMCPServerAuth;
+exports.buildWellKnownCandidates = buildWellKnownCandidates;
+exports.buildMCPServerWellKnownCandidates = buildMCPServerWellKnownCandidates;
+exports.buildProtectedResourceCandidates = buildProtectedResourceCandidates;
 exports.resolveMCPOAuthMetadata = resolveMCPOAuthMetadata;
 const tslib_1 = require("tslib");
 const axios_1 = tslib_1.__importDefault(require("axios"));
@@ -112,7 +115,92 @@ async function readMCPToolsFromFile(filePath) {
         };
     });
 }
-/** Probe an MCP streamable-HTTP endpoint for an OAuth challenge. */
+/** HTTP statuses treated as proof that no MCP endpoint is routed at the URL.
+ *
+ * Deliberately enumerated rather than "any 4xx": measurements across nine live servers only ever
+ * produced these three for a wrong URL (404 from routing, 405 from an endpoint that exists but
+ * rejects the method, 403 from a WAF in front of the app). Statuses such as 429 or 408 are
+ * transient and would slander a URL that is in fact correct. 400 is excluded on purpose: the
+ * transport spec requires a server to answer 400 when it rejects the `MCP-Protocol-Version`,
+ * so a valid endpoint may well produce one for this probe. */
+const NOT_AN_ENDPOINT_STATUSES = [403, 404, 405];
+/** How long to wait for a deprecated HTTP+SSE server to name its message endpoint. */
+const LEGACY_SSE_TIMEOUT_MS = 5000;
+/** Stop buffering an event stream that is not going to name an endpoint. */
+const LEGACY_SSE_MAX_BYTES = 8192;
+/**
+ * A 2xx alone proves nothing: a truncated URL on a host that serves a landing page answers 200
+ * with HTML. The JSON-RPC envelope in the payload is the actual proof. The body text is searched
+ * instead of the frames being parsed because that works for both `application/json` and the
+ * `text/event-stream` framing streamable-HTTP servers use — `jsonrpc` sits inside the `data:`
+ * payload either way. The quotes keep an HTML page that merely mentions the word from matching.
+ */
+function carriesJSONRPCEnvelope(body) {
+    if (typeof body === "string") {
+        return body.includes('"jsonrpc"');
+    }
+    if (body && typeof body === "object") {
+        return "jsonrpc" in body;
+    }
+    return false;
+}
+/**
+ * Read an event stream only as far as the first `endpoint` event, which is how a 2024-11-05
+ * server announces where its messages go. Anything else — the stream ending, an error, a
+ * stream that just keeps talking, a server that never answers — means no such announcement.
+ */
+function announcesLegacyMessageEndpoint(stream) {
+    return new Promise((resolve) => {
+        let buffered = "";
+        const settle = (found) => {
+            clearTimeout(timer);
+            stream.destroy();
+            resolve(found);
+        };
+        const timer = setTimeout(() => settle(false), LEGACY_SSE_TIMEOUT_MS);
+        stream.on("data", (chunk) => {
+            buffered += chunk.toString();
+            if (/^event:\s*endpoint\s*$/m.test(buffered)) {
+                settle(true);
+            }
+            else if (buffered.length > LEGACY_SSE_MAX_BYTES) {
+                settle(false);
+            }
+        });
+        stream.on("end", () => settle(false));
+        stream.on("error", () => settle(false));
+    });
+}
+/**
+ * Ask the URL, the way the MCP transport spec's backwards-compatibility rule prescribes,
+ * whether a deprecated HTTP+SSE server is listening there.
+ *
+ * A 2024-11-05 server has no streamable-HTTP endpoint to POST to, so it answers the
+ * `initialize` POST with a 4xx — the spec names 405 and 404 explicitly. Reading that 4xx as
+ * proof of a wrong URL would therefore condemn a whole generation of valid servers. The spec's
+ * own disambiguation is to open an SSE stream with GET: an HTTP+SSE server replies
+ * `text/event-stream` and names its message endpoint in the first event.
+ */
+async function servesLegacySSETransport(serverUrl) {
+    try {
+        const response = await axios_1.default.get(serverUrl, {
+            timeout: LEGACY_SSE_TIMEOUT_MS,
+            responseType: "stream",
+            headers: { Accept: "text/event-stream" },
+        });
+        const contentType = String(response.headers?.["content-type"] ?? "");
+        if (!contentType.includes("text/event-stream")) {
+            response.data?.destroy?.();
+            return false;
+        }
+        return await announcesLegacyMessageEndpoint(response.data);
+    }
+    catch {
+        // A GET that fails says only that the old transport is not there either.
+        return false;
+    }
+}
+/** Probe an MCP streamable-HTTP endpoint for an OAuth challenge and for the URL's validity. */
 async function probeMCPServerAuth(serverUrl) {
     const initializeBody = {
         jsonrpc: "2.0",
@@ -125,17 +213,22 @@ async function probeMCPServerAuth(serverUrl) {
         },
     };
     try {
-        await axios_1.default.post(serverUrl, initializeBody, {
+        const response = await axios_1.default.post(serverUrl, initializeBody, {
             timeout: 10000,
             headers: {
                 "Content-Type": "application/json",
                 Accept: "application/json, text/event-stream",
             },
         });
-        return { requiresAuth: false };
+        return carriesJSONRPCEnvelope(response.data)
+            ? { requiresAuth: false, endpointStatus: "confirmed" }
+            : { requiresAuth: false, endpointStatus: "notEndpoint", responseStatus: response.status };
     }
     catch (error) {
-        if (error?.response?.status === 401 || error?.status === 401) {
+        const status = error?.response?.status ?? error?.status;
+        if (status === 401) {
+            // Only something that means to be a protected resource issues an OAuth challenge, so a
+            // 401 confirms the endpoint just as firmly as a successful initialize does.
             const wwwAuth = error?.response?.headers?.["www-authenticate"];
             let authMetadataUrl;
             if (wwwAuth) {
@@ -144,39 +237,168 @@ async function probeMCPServerAuth(serverUrl) {
                     authMetadataUrl = match[1];
                 }
             }
-            return { requiresAuth: true, authMetadataUrl };
+            return { requiresAuth: true, authMetadataUrl, endpointStatus: "confirmed" };
+        }
+        if (typeof status === "number" && NOT_AN_ENDPOINT_STATUSES.includes(status)) {
+            // The spec reads a 4xx here as "this may be the old transport", not as "wrong URL", so
+            // the verdict is not settled until HTTP+SSE has been ruled out.
+            return (await servesLegacySSETransport(serverUrl))
+                ? { requiresAuth: false, endpointStatus: "confirmed" }
+                : { requiresAuth: false, endpointStatus: "notEndpoint", responseStatus: status };
+        }
+        return { requiresAuth: false, endpointStatus: "undetermined" };
+    }
+}
+/**
+ * Build the ordered list of authorization-server metadata URLs to probe for an issuer.
+ *
+ * Providers disagree on which discovery form they serve: RFC 8414 §3.1 mandates inserting
+ * `/.well-known/oauth-authorization-server` between the host and the issuer path, while
+ * OpenID Connect Discovery §4 appends `/.well-known/openid-configuration` to the issuer.
+ * Microsoft Entra, for example, serves ONLY the appended OIDC form — the RFC 8414 insertion
+ * form returns 404 — so probing a single form silently loses the endpoints for whole classes
+ * of identity providers. Candidates are deduplicated (a host-only issuer collapses the
+ * insertion and append forms) and returned in RFC-preference order.
+ */
+function buildWellKnownCandidates(issuer) {
+    const issuerUrl = new URL(issuer);
+    const origin = `${issuerUrl.protocol}//${issuerUrl.host}`;
+    // A trailing slash makes providers such as Notion return 404 for the insertion form.
+    const issuerPath = issuerUrl.pathname === "/" ? "" : issuerUrl.pathname.replace(/\/+$/, "");
+    return [
+        ...new Set([
+            `${origin}/.well-known/oauth-authorization-server${issuerPath}`,
+            `${origin}/.well-known/openid-configuration${issuerPath}`,
+            `${origin}${issuerPath}/.well-known/oauth-authorization-server`,
+            `${origin}${issuerPath}/.well-known/openid-configuration`,
+        ]),
+    ];
+}
+/**
+ * Build the ordered list of authorization-server metadata URLs to probe for an MCP server that
+ * never pointed at an authorization server.
+ *
+ * MCP servers written against the 2025-03-26 authorization spec are their own authorization
+ * server: they publish RFC 8414 metadata at the origin root and ship no RFC 9728
+ * protected-resource document at all. Such a server answers the 401 challenge with `realm`
+ * alone, so `resource_metadata` discovery dead-ends and the endpoints have to be derived from
+ * the server URL instead. Path-derived forms are probed first, because a host exposing several
+ * MCP endpoints may serve per-endpoint metadata; the origin root is the last resort.
+ */
+function buildMCPServerWellKnownCandidates(mcpServerUrl) {
+    const serverUrl = new URL(mcpServerUrl);
+    const origin = `${serverUrl.protocol}//${serverUrl.host}`;
+    return [
+        ...new Set([
+            ...buildWellKnownCandidates(mcpServerUrl),
+            `${origin}/.well-known/oauth-authorization-server`,
+            `${origin}/.well-known/openid-configuration`,
+        ]),
+    ];
+}
+/**
+ * Build the RFC 9728 protected-resource metadata URLs to probe for an MCP server that never
+ * advertised one.
+ *
+ * A server only hands out its `resource_metadata` location inside a `WWW-Authenticate`
+ * challenge, and a server that defers authorization to the individual tool calls answers an
+ * unauthenticated `initialize` with a plain 200 and no challenge at all — Google's Gmail,
+ * Calendar and Drive servers do exactly that, yet each publishes a protected-resource document
+ * naming `https://accounts.google.com/`. Waiting to be told therefore loses the metadata for a
+ * whole class of servers, so the document is derived from the resource URL instead, as MCP's
+ * authorization spec requires of clients. RFC 9728 §3.1 inserts the well-known segment between
+ * the host and the resource path; the path-less form follows for servers that publish at the
+ * origin root only.
+ */
+function buildProtectedResourceCandidates(mcpServerUrl) {
+    const serverUrl = new URL(mcpServerUrl);
+    const origin = `${serverUrl.protocol}//${serverUrl.host}`;
+    const resourcePath = serverUrl.pathname === "/" ? "" : serverUrl.pathname.replace(/\/+$/, "");
+    return [
+        ...new Set([
+            `${origin}/.well-known/oauth-protected-resource${resourcePath}`,
+            `${origin}/.well-known/oauth-protected-resource`,
+        ]),
+    ];
+}
+/**
+ * Read the RFC 9728 protected-resource document the server advertised and turn its first
+ * authorization server into discovery candidates. Returns an empty list when the document
+ * names no authorization server.
+ */
+async function candidatesFromProtectedResourceMetadata(authMetadataUrl, canFallBack) {
+    let response;
+    try {
+        response = await axios_1.default.get(authMetadataUrl);
+    }
+    catch (error) {
+        // A server advertising a document it cannot serve is broken, but the MCP server URL may
+        // still lead to the authorization server, so let the caller try that before failing.
+        if (canFallBack) {
+            return [];
         }
-        return { requiresAuth: false };
+        throw error;
+    }
+    const issuers = response.data?.authorization_servers;
+    if (response.status === 200 && Array.isArray(issuers) && issuers.length > 0) {
+        return buildWellKnownCandidates(issuers[0]);
     }
+    return [];
+}
+/**
+ * Look for a protected-resource document at the locations RFC 9728 derives from the MCP server
+ * URL. The first document naming an authorization server wins; a location that is absent only
+ * means this server publishes at the other one.
+ */
+async function candidatesFromDerivedProtectedResource(mcpServerUrl) {
+    for (const candidate of buildProtectedResourceCandidates(mcpServerUrl)) {
+        const candidates = await candidatesFromProtectedResourceMetadata(candidate, true);
+        if (candidates.length > 0) {
+            return candidates;
+        }
+    }
+    return [];
 }
 /** Resolve OAuth endpoints from MCP resource or authorization-server metadata. */
-async function resolveMCPOAuthMetadata(authMetadataUrl, wellKnownUrl) {
-    let resolvedWellKnownUrl = wellKnownUrl;
-    if (!resolvedWellKnownUrl) {
-        if (!authMetadataUrl) {
-            throw new Error((0, localizeUtils_1.getLocalizedString)("core.MCPForDA.mcpAuthMetadataUrlNotFound"));
-        }
-        const response = await axios_1.default.get(authMetadataUrl);
-        if (response.status === 200 &&
-            response.data &&
-            response.data.authorization_servers &&
-            response.data.authorization_servers.length > 0) {
-            const mcpServerMetadataUrl = response.data.authorization_servers[0];
-            const serverUrl = new URL(mcpServerMetadataUrl);
-            const serverPath = serverUrl.pathname === "/" ? "" : serverUrl.pathname;
-            resolvedWellKnownUrl = `${serverUrl.protocol}//${serverUrl.host}/.well-known/oauth-authorization-server${serverPath}`;
-        }
-        else {
-            throw new Error((0, localizeUtils_1.getLocalizedString)("core.MCPForDA.mcpServerMetadataUrlNotFound"));
-        }
-    }
-    const metadataResponse = await axios_1.default.get(resolvedWellKnownUrl);
-    const authorizationUrl = metadataResponse.data?.authorization_endpoint;
-    const tokenUrl = metadataResponse.data?.token_endpoint;
-    const refreshUrl = metadataResponse.data?.refresh_endpoint;
-    if (!authorizationUrl || !tokenUrl) {
-        throw new Error((0, localizeUtils_1.getLocalizedString)("core.MCPForDA.authUrlNotFound"));
-    }
-    return { authorizationUrl, tokenUrl, refreshUrl, wellKnownUrl: resolvedWellKnownUrl };
+async function resolveMCPOAuthMetadata(authMetadataUrl, wellKnownUrl, mcpServerUrl) {
+    let candidates;
+    if (wellKnownUrl) {
+        // An explicitly configured URL is authoritative — never substitute a guess for it.
+        candidates = [wellKnownUrl];
+    }
+    else {
+        candidates = authMetadataUrl
+            ? await candidatesFromProtectedResourceMetadata(authMetadataUrl, !!mcpServerUrl)
+            : [];
+        if (candidates.length === 0 && mcpServerUrl) {
+            // The authoritative answer, when the server publishes one, is its protected-resource
+            // document — so try that before assuming the server is its own authorization server.
+            candidates = await candidatesFromDerivedProtectedResource(mcpServerUrl);
+        }
+        if (candidates.length === 0 && mcpServerUrl) {
+            candidates = buildMCPServerWellKnownCandidates(mcpServerUrl);
+        }
+        if (candidates.length === 0) {
+            throw new Error((0, localizeUtils_1.getLocalizedString)(authMetadataUrl
+                ? "core.MCPForDA.mcpServerMetadataUrlNotFound"
+                : "core.MCPForDA.mcpAuthMetadataUrlNotFound"));
+        }
+    }
+    for (const candidate of candidates) {
+        try {
+            const metadataResponse = await axios_1.default.get(candidate);
+            const authorizationUrl = metadataResponse.data?.authorization_endpoint;
+            const tokenUrl = metadataResponse.data?.token_endpoint;
+            const refreshUrl = metadataResponse.data?.refresh_endpoint;
+            if (authorizationUrl && tokenUrl) {
+                return { authorizationUrl, tokenUrl, refreshUrl, wellKnownUrl: candidate };
+            }
+        }
+        catch {
+            // A 404 / unreachable candidate just means this provider uses a different
+            // discovery form; keep probing and report every attempt if all of them fail.
+        }
+    }
+    throw new Error((0, localizeUtils_1.getLocalizedString)("core.MCPForDA.authUrlNotFound", candidates.join(", ")));
 }
 //# sourceMappingURL=mcpToolFetcher.js.map

package/build/common/mcpToolFetcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcpToolFetcher.js","sourceRoot":"","sources":["../../src/common/mcpToolFetcher.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;AAqBlC,sCA0EC;AAGD,oDA8BC;AAQD,gDAkCC;AAUD,0DAqCC;;AAvND,0DAA0B;AAC1B,gEAA0B;AAC1B,mDAAqD;AAgBrD,2DAA2D;AACpD,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,IAAI,eAAmC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,eAAK,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,KAAK,EAAE,QAAQ,EAAE,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/D,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAC9D,IAAI,KAAK,EAAE,CAAC;oBACV,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,6DAA6D;QAC7D,iDAAiD;QACjD,MAAM,EAAE,MAAM,EAAE,GAAG,gEAAa,2CAA2C,GAAC,CAAC;QAC7E,6DAA6D;QAC7D,iDAAiD;QACjD,MAAM,EAAE,6BAA6B,EAAE,GACrC,gEAAa,oDAAoD,GAAC,CAAC;QAErE,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAEjE,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,KAAK,GAAc,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC;gBACxD,GAAG,IAAI;gBACP,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;aACpC,CAAC,CAAC,CAAC;YACJ,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,6DAA6D;YAC7D,iDAAiD;YACjD,MAAM,EAAE,MAAM,EAAE,GAAG,gEAAa,2CAA2C,GAAC,CAAC;YAC7E,6DAA6D;YAC7D,iDAAiD;YACjD,MAAM,EAAE,kBAAkB,EAAE,GAAG,gEAAa,yCAAyC,GAAC,CAAC;YAEvF,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAEjE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAc,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC;oBACxD,GAAG,IAAI;oBACP,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;iBACpC,CAAC,CAAC,CAAC;gBACJ,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YACxC,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IACE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC;gBAC/B,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC;gBACxC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAChC,CAAC;gBACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC3C,CAAC;YACD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED,kEAAkE;AAC3D,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,IAAI,CAAC,CAAC,MAAM,kBAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,IAAA,kCAAkB,EAAC,iCAAiC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,QAAe,CAAC;IACpB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;SAAM,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,IAAA,kCAAkB,EAAC,sCAAsC,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,IAAA,kCAAkB,EAAC,oCAAoC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChG,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YACxF,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,aAAa;YACrD,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,oEAAoE;AAC7D,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,MAAM,cAAc,GAAG;QACrB,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,CAAC;QACL,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE;YACN,eAAe,EAAE,YAAY;YAC7B,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE;SACpD;KACF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,eAAK,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE;YAC1C,OAAO,EAAE,KAAK;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,qCAAqC;aAC9C;SACF,CAAC,CAAC;QACH,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,KAAK,EAAE,QAAQ,EAAE,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/D,IAAI,eAAmC,CAAC;YACxC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAC9D,IAAI,KAAK,EAAE,CAAC;oBACV,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;AACH,CAAC;AASD,kFAAkF;AAC3E,KAAK,UAAU,uBAAuB,CAC3C,eAAwB,EACxB,YAAqB;IAErB,IAAI,oBAAoB,GAAG,YAAY,CAAC;IAExC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,IAAA,kCAAkB,EAAC,0CAA0C,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAClD,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;YACvB,QAAQ,CAAC,IAAI;YACb,QAAQ,CAAC,IAAI,CAAC,qBAAqB;YACnC,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAC9C,CAAC;YACD,MAAM,oBAAoB,GAAG,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;YACxE,oBAAoB,GAAG,GAAG,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,0CAA0C,UAAU,EAAE,CAAC;QACxH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,IAAA,kCAAkB,EAAC,4CAA4C,CAAC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,cAAc,CAAC;IACvD,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAE3D,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,IAAA,kCAAkB,EAAC,+BAA+B,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;AACxF,CAAC"}
+{"version":3,"file":"mcpToolFetcher.js","sourceRoot":"","sources":["../../src/common/mcpToolFetcher.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;AAsBlC,sCA0EC;AAGD,oDA8BC;AAsHD,gDA8CC;AAoBD,4DAaC;AAaD,8EAUC;AAgBD,4EAUC;AA6CD,0DAoDC;;AAtdD,0DAA0B;AAC1B,gEAA0B;AAE1B,mDAAqD;AAgBrD,2DAA2D;AACpD,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,IAAI,eAAmC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,eAAK,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,KAAK,EAAE,QAAQ,EAAE,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/D,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAC9D,IAAI,KAAK,EAAE,CAAC;oBACV,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,6DAA6D;QAC7D,iDAAiD;QACjD,MAAM,EAAE,MAAM,EAAE,GAAG,gEAAa,2CAA2C,GAAC,CAAC;QAC7E,6DAA6D;QAC7D,iDAAiD;QACjD,MAAM,EAAE,6BAA6B,EAAE,GACrC,gEAAa,oDAAoD,GAAC,CAAC;QAErE,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAEjE,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,KAAK,GAAc,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC;gBACxD,GAAG,IAAI;gBACP,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;aACpC,CAAC,CAAC,CAAC;YACJ,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,6DAA6D;YAC7D,iDAAiD;YACjD,MAAM,EAAE,MAAM,EAAE,GAAG,gEAAa,2CAA2C,GAAC,CAAC;YAC7E,6DAA6D;YAC7D,iDAAiD;YACjD,MAAM,EAAE,kBAAkB,EAAE,GAAG,gEAAa,yCAAyC,GAAC,CAAC;YAEvF,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAEjE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAc,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC;oBACxD,GAAG,IAAI;oBACP,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;iBACpC,CAAC,CAAC,CAAC;gBACJ,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YACxC,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IACE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC;gBAC/B,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC;gBACxC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAChC,CAAC;gBACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC3C,CAAC;YACD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED,kEAAkE;AAC3D,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,IAAI,CAAC,CAAC,MAAM,kBAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,IAAA,kCAAkB,EAAC,iCAAiC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,QAAe,CAAC;IACpB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;SAAM,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,IAAA,kCAAkB,EAAC,sCAAsC,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,IAAA,kCAAkB,EAAC,oCAAoC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChG,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YACxF,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,aAAa;YACrD,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAcD;;;;;;;8DAO8D;AAC9D,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAEjD,sFAAsF;AACtF,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAEnC,4EAA4E;AAC5E,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,IAAa;IAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,SAAS,IAAI,IAAI,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAgBD;;;;GAIG;AACH,SAAS,8BAA8B,CAAC,MAAgB;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE;YAChC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAC3C,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;gBAClD,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,wBAAwB,CAAC,SAAiB;IACvD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,SAAS,EAAE;YAC1C,OAAO,EAAE,qBAAqB;YAC9B,YAAY,EAAE,QAAQ;YACtB,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;SACzC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,MAAM,8BAA8B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,+FAA+F;AACxF,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,MAAM,cAAc,GAAG;QACrB,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,CAAC;QACL,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE;YACN,eAAe,EAAE,YAAY;YAC7B,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE;SACpD;KACF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE;YAC3D,OAAO,EAAE,KAAK;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,qCAAqC;aAC9C;SACF,CAAC,CAAC;QACH,OAAO,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC1C,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE;YACtD,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC9F,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,MAAM,GAAY,KAAK,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,EAAE,MAAM,CAAC;QACjE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,uFAAuF;YACvF,4EAA4E;YAC5E,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/D,IAAI,eAAmC,CAAC;YACxC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAC9D,IAAI,KAAK,EAAE,CAAC;oBACV,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;QAC9E,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,uFAAuF;YACvF,gEAAgE;YAChE,OAAO,CAAC,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;gBAChD,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE;gBACtD,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QACrF,CAAC;QACD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;IACjE,CAAC;AACH,CAAC;AASD;;;;;;;;;;GAUG;AACH,SAAgB,wBAAwB,CAAC,MAAc;IACrD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1D,qFAAqF;IACrF,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5F,OAAO;QACL,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,MAAM,0CAA0C,UAAU,EAAE;YAC/D,GAAG,MAAM,oCAAoC,UAAU,EAAE;YACzD,GAAG,MAAM,GAAG,UAAU,yCAAyC;YAC/D,GAAG,MAAM,GAAG,UAAU,mCAAmC;SAC1D,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,iCAAiC,CAAC,YAAoB;IACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1D,OAAO;QACL,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,wBAAwB,CAAC,YAAY,CAAC;YACzC,GAAG,MAAM,yCAAyC;YAClD,GAAG,MAAM,mCAAmC;SAC7C,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,gCAAgC,CAAC,YAAoB;IACnE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9F,OAAO;QACL,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,MAAM,wCAAwC,YAAY,EAAE;YAC/D,GAAG,MAAM,uCAAuC;SACjD,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uCAAuC,CACpD,eAAuB,EACvB,WAAoB;IAEpB,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wFAAwF;QACxF,qFAAqF;QACrF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sCAAsC,CAAC,YAAoB;IACxE,KAAK,MAAM,SAAS,IAAI,gCAAgC,CAAC,YAAY,CAAC,EAAE,CAAC;QACvE,MAAM,UAAU,GAAG,MAAM,uCAAuC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,kFAAkF;AAC3E,KAAK,UAAU,uBAAuB,CAC3C,eAAwB,EACxB,YAAqB,EACrB,YAAqB;IAErB,IAAI,UAAoB,CAAC;IAEzB,IAAI,YAAY,EAAE,CAAC;QACjB,mFAAmF;QACnF,UAAU,GAAG,CAAC,YAAY,CAAC,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,eAAe;YAC1B,CAAC,CAAC,MAAM,uCAAuC,CAAC,eAAe,EAAE,CAAC,CAAC,YAAY,CAAC;YAChF,CAAC,CAAC,EAAE,CAAC;QAEP,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YAC5C,qFAAqF;YACrF,qFAAqF;YACrF,UAAU,GAAG,MAAM,sCAAsC,CAAC,YAAY,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YAC5C,UAAU,GAAG,iCAAiC,CAAC,YAAY,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,IAAA,kCAAkB,EAChB,eAAe;gBACb,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,0CAA0C,CAC/C,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,IAAI,EAAE,sBAAsB,CAAC;YACvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,cAAc,CAAC;YACvD,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,CAAC;YAC3D,IAAI,gBAAgB,IAAI,QAAQ,EAAE,CAAC;gBACjC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;YAC7E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,6EAA6E;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,IAAA,kCAAkB,EAAC,+BAA+B,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC"}

package/build/common/templates-config.json

@@ -1,6 +1,6 @@
 {
     "version": "~6.12",
-    "localVersion": "6.12.1-beta.2026072312.0",
+    "localVersion": "6.12.1-beta.2026072911.0",
     "tagPrefix": "templates@",
     "v4tagPrefix": "templates-v4@",
     "vstagPrefix": "templates-vs@",
@@ -15,7 +15,7 @@
     "useLocalTemplate": true,
     "v4": {
         "range": "~6.13",
-        "bundled": false,
-        "localVersion": "6.13.2026072312"
+        "bundled": true,
+        "localVersion": "6.13.2026072911"
     }
 }

package/build/component/generator/declarativeAgent/helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../../../../src/component/generator/declarativeAgent/helper.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,OAAO,EAIP,OAAO,EACP,eAAe,EACf,MAAM,EAEN,oBAAoB,EACpB,MAAM,EAEN,SAAS,EACT,OAAO,EACR,MAAM,wBAAwB,CAAC;AA4BhC,OAAO,KAAK,yBAAyB,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAY3D;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAWnF;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAEvF;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAElF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EACvB,4BAA4B,EAAE,MAAM,GACnC,OAAO,CAAC,MAAM,CAAC;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,CAAC,CA6C5E;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,6BAA6B,EAAE,MAAM,CAAC;CACvC;AAMD,wBAAsB,iBAAiB,CACrC,8BAA8B,EAAE,MAAM,EACtC,sBAAsB,EAAE,MAAM,EAC9B,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC,CAiGnD;AAED,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,oBAAoB,EAC9B,MAAM,EAAE,MAAM,GACb,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CA6E9B;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,OAAO,2DAEhE;AAED,wBAAsB,+BAA+B,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,oEAEtF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAsB,gBAAgB,CAAC,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,mDAE1E;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC,CAmE5C;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AACD,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAuC5D;AAED,wBAAsB,mBAAmB,CACvC,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAkP3C"}
+{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../../../../src/component/generator/declarativeAgent/helper.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,OAAO,EAIP,OAAO,EACP,eAAe,EACf,MAAM,EAEN,oBAAoB,EACpB,MAAM,EAEN,SAAS,EACT,OAAO,EACR,MAAM,wBAAwB,CAAC;AA4BhC,OAAO,KAAK,yBAAyB,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAY3D;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAWnF;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAEvF;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAElF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EACvB,4BAA4B,EAAE,MAAM,GACnC,OAAO,CAAC,MAAM,CAAC;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,CAAC,CA6C5E;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,6BAA6B,EAAE,MAAM,CAAC;CACvC;AAMD,wBAAsB,iBAAiB,CACrC,8BAA8B,EAAE,MAAM,EACtC,sBAAsB,EAAE,MAAM,EAC9B,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC,CAiGnD;AAED,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,oBAAoB,EAC9B,MAAM,EAAE,MAAM,GACb,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CA6E9B;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,OAAO,2DAEhE;AAED,wBAAsB,+BAA+B,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,oEAEtF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAsB,gBAAgB,CAAC,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,mDAE1E;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC,CAmE5C;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AACD,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAuC5D;AAED,wBAAsB,mBAAmB,CACvC,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAqP3C"}

package/build/component/generator/declarativeAgent/helper.js

@@ -492,7 +492,13 @@ async function generateForMCPForDA(destinationPath, inputs) {
                     if (injectResult.wellKnownUrlPlaceholderUsed) {
                         warnings.push({
                             type: "mcpAuthDcrWellKnownUrlPlaceholder",
-                            content: (0, localizeUtils_1.getLocalizedString)("core.MCPForDA.mcpAuthDcrPlaceholderWarning", mcpServerUrl),
+                            content: (0, localizeUtils_1.getLocalizedString)("core.MCPForDA.mcpAuthDcrPlaceholderWarning"),
+                        });
+                    }
+                    if (injectResult.oauthUrlPlaceholderUsed) {
+                        warnings.push({
+                            type: "mcpAuthOAuthUrlPlaceholder",
+                            content: (0, localizeUtils_1.getLocalizedString)("core.MCPForDA.mcpAuthOAuthPlaceholderWarning"),
                         });
                     }
                 }
@@ -572,6 +578,17 @@ async function generateForMCPForDAWithAuth(destinationPath, aiPluginFilePath, in
                     if (authProbe.authMetadataUrl) {
                         inputs[questionNames_1.QuestionNames.MCPForDAAuthMetadataUrl] = authProbe.authMetadataUrl;
                     }
+                    // This branch never fetches tools, so a mistyped server URL would otherwise leave no
+                    // trace at all: endpoint discovery falls back to the host and happily returns its
+                    // authorization server, and the scaffold looks complete. Warns on every `notEndpoint`
+                    // shape, not just 404 — this is advisory, so it can be broader than the blocking rule
+                    // applied when the URL is first entered.
+                    if (authProbe.endpointStatus === "notEndpoint") {
+                        warnings.push({
+                            type: "mcpServerUrlNotAnEndpoint",
+                            content: (0, localizeUtils_1.getLocalizedString)("core.MCPForDA.mcpServerUrlNotAnEndpoint", mcpServerUrl, String(authProbe.responseStatus)),
+                        });
+                    }
                 }
                 catch {
                     // Probe failed — continue; endpoint resolution below will best-effort
@@ -610,7 +627,13 @@ async function generateForMCPForDAWithAuth(destinationPath, aiPluginFilePath, in
                     if (injectResult.wellKnownUrlPlaceholderUsed) {
                         warnings.push({
                             type: "mcpAuthDcrWellKnownUrlPlaceholder",
-                            content: (0, localizeUtils_1.getLocalizedString)("core.MCPForDA.mcpAuthDcrPlaceholderWarning", mcpServerUrl),
+                            content: (0, localizeUtils_1.getLocalizedString)("core.MCPForDA.mcpAuthDcrPlaceholderWarning"),
+                        });
+                    }
+                    if (injectResult.oauthUrlPlaceholderUsed) {
+                        warnings.push({
+                            type: "mcpAuthOAuthUrlPlaceholder",
+                            content: (0, localizeUtils_1.getLocalizedString)("core.MCPForDA.mcpAuthOAuthPlaceholderWarning"),
                         });
                     }
                 }