@musnows/scriverse 1.0.9 → 1.0.10

package/dist/app.js

@@ -1400,9 +1400,14 @@ export function createRuntime(options) {
     });
     if (!options.liteLlmPriceCache && options.liteLlmPriceCachePath)
         liteLlmPriceCache.start();
-    const ai = new AiManager(store, credentialVault, options.fetchImpl ?? fetch, options.developmentServer === true || options.disableAiEndpointValidation === true
+    const disableAiEndpointValidation = options.developmentServer === true || options.disableAiEndpointValidation === true;
+    const validateAiEndpoint = disableAiEndpointValidation || options.disableAiProviderEndpointValidation === true
         ? undefined
-        : options.security ? (url) => assertSafeAiEndpoint(url, options.security?.allowPrivateAiEndpoints) : undefined, (task, actor) => {
+        : options.security ? (url) => assertSafeAiEndpoint(url, options.security?.allowPrivateAiEndpoints) : undefined;
+    const validateRemoteMcpEndpoint = disableAiEndpointValidation
+        ? undefined
+        : options.security ? (url) => assertSafeAiEndpoint(url, options.security?.allowPrivateAiEndpoints) : undefined;
+    const ai = new AiManager(store, credentialVault, options.fetchImpl ?? fetch, validateAiEndpoint, (task, actor) => {
         const requiredModules = analysisTaskReadModules(task.taskType, task.scope);
         const creator = actor ? null : database.get("SELECT created_by_user_id, created_via_api_key FROM analysis_tasks WHERE id = ?", String(task.id));
         const userId = actor?.userId ?? (typeof creator?.created_by_user_id === "string" ? creator.created_by_user_id : null);
@@ -1421,6 +1426,7 @@ export function createRuntime(options) {
         retrySleep: options.aiRetrySleep,
         aiChatImageMaxBytes: uploadLimits.chatImageBytes,
         liteLlmPriceCache,
+        remoteMcpValidateOutboundUrl: validateRemoteMcpEndpoint,
         allowPrivateAiEndpoints: options.security?.allowPrivateAiEndpoints === true
     });
     const imOrchestrator = new ImOrchestrator(store, auth, im, ai);