@n8n/instance-ai 1.4.1 → 1.6.0

package/dist/agent/computer-use-prompt.d.ts

@@ -0,0 +1,5 @@
+import { type LocalGatewayStatus } from '../types';
+export declare function getComputerUsePrompt({ browserAvailable, localGateway, }: {
+    browserAvailable: boolean | undefined;
+    localGateway: LocalGatewayStatus | undefined;
+}): string;

package/dist/agent/computer-use-prompt.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getComputerUsePrompt = getComputerUsePrompt;
+const BROWSER_USE_EXTENSION_URL = 'https://chromewebstore.google.com/detail/n8n-browser-use/cegmdpndekdfpnafgacidejijecomlhh';
+function getComputerUsePrompt({ browserAvailable, localGateway, }) {
+    if (localGateway && localGateway.status !== 'disabledGlobally') {
+        const promptParts = [];
+        promptParts.push(`
+## Computer Use
+This instance support "Computer Use", which allows connecting to user's computer and execute following functionality:
+- *filesystem* - read and write files. Use it when users want to include their own files in the automation.
+- *shell* - Execute shell commands. Use it when you need or are asked to execute commands on user's computer
+- *browser* - Automate user's browser to access web pages and do tasks on user's behalf. Use it when you require access to user's browser session for example when creating credentials with user's accounts. Requires installing the "n8n Browser Use" Chrome extension from the Chrome Web Store: ${BROWSER_USE_EXTENSION_URL}
+- *screenshot*, *mouse-keyboard* - control user's computer mouse, keyboard and do screenshots (do not advertise or use this functionality if user does not explicitly ask for it)
+
+Users have control over this functionality and can enable only the tools they want to provide.
+Users can reconnect Computer Use with different set of functionality, so always rely on Computer Use status and the available tools and not the conversation history.
+
+### When to suggest or use Computer Use
+
+Proactively suggest Computer Use (or use it directly if connected) when you detect these signals:
+
+- **Credential / OAuth setup** — user needs to set up, create, configure, or connect credentials for any service that requires OAuth or API key generation through a web portal (Slack, Google, Microsoft, HubSpot, Notion, Stripe, Twilio, etc.) → *browser*
+- **Local file as context** — user mentions a file, PDF, CSV, spec, or requirements doc they want to use as reference while building a workflow → *filesystem*
+- **Documentation / output to files** — user asks to document, write up, export, or save a workflow description, runbook, or handover doc → *filesystem*
+- **Authenticated web research** — user wants to check something on a site they're logged into, or gather data from a web-based tool → *browser*
+- **Form / frontend testing** — user is building n8n forms or a web app with n8n as backend and wants end-to-end testing → *browser*
+- **Shell / environment** — user asks to run a command (curl, CLI, DB query), automate something locally, or debug connectivity → *shell*
+- **Platform migration** — user wants to migrate from Make, Zapier, or another automation platform, or replicate an existing workflow from it → *browser* + *filesystem*
+`);
+        promptParts.push(`
+### Computer Use status`);
+        switch (localGateway.status) {
+            case 'connected':
+                if (localGateway.capabilities.length > 0) {
+                    promptParts.push(`Computer Use is connected, the user has enabled following capabilities: ${localGateway.capabilities.join(',')}`);
+                    if (localGateway.capabilities.includes('filesystem')) {
+                        promptParts.push(`
+### Computer Use - Filesystem Exploration
+
+Keep exploration shallow: start at depth 1–2, prefer \`search\` over browsing, and read specific files rather than whole directories.`);
+                    }
+                    if (browserAvailable) {
+                        promptParts.push(`
+### Computer Use - Browser Automation rules
+
+You can control the user's browser using the browser_* tools. Since this is their real browser, you share it with them.
+
+#### Handing control to the user
+
+When the user needs to act in the browser, **end your turn** with a clear message explaining what they should do. Resume after they reply. Hand off when:
+- **Authentication** — login pages, OAuth, SSO, 2FA/MFA prompts
+- **CAPTCHAs or visual challenges** — you cannot solve these
+- **Accessing downloads** — you can click download buttons, but you cannot open or read downloaded files; ask the user to open the file and share the content you need
+- **Sensitive content on screen** — passwords, tokens, secrets visible in the browser
+- **User requests manual control** — they explicitly want to do something themselves
+
+After the user confirms they're done, take a snapshot to verify before continuing.
+
+#### Secrets and sensitive data
+
+**NEVER include passwords, API keys, tokens, or secrets in your chat messages** — even if visible on a page. If the user asks you to retrieve a secret, tell them to read it directly from their browser.
+
+#### When browser tools fail at runtime
+
+If a browser_* tool call fails because the browser is unreachable (e.g. connection lost, extension not responding), ask the user to verify the **n8n Browser Use** Chrome extension is installed and connected. If needed, they can reinstall from the Chrome Web Store: ${BROWSER_USE_EXTENSION_URL}`);
+                    }
+                    else {
+                        promptParts.push(`
+### Browser Automation (Disabled in Computer Use)
+
+Browser tools are not enabled in the user's Computer Use configuration. If the user asks for browser automation, tell them to (1) enable browser tools in their Computer Use config, and (2) install the n8n Browser Use Chrome extension from the Chrome Web Store: ${BROWSER_USE_EXTENSION_URL}`);
+                    }
+                }
+                else {
+                    promptParts.push('Computer Use is connected, but the user did not enable any capabilities');
+                }
+                break;
+            case 'disconnected':
+                promptParts.push(`Computer Use is not connected. Do NOT attempt to use Computer Use tools — they are not available. You can provide these instructions to establish a connection:
+1. open the right sidebar
+2. click on the "..." button next to "Computer Use"
+3. click on "Connect" and follow the instructions in the dialog`);
+                break;
+            case 'disabled':
+                promptParts.push(`Computer Use is not connected and not set-up. Do NOT attempt to use Computer Use tools — they are not available. You can provide these instructions to establish a connection:
+1. open the right sidebar
+2. click on "Setup computer use"
+3. follow the instructions in the dialog`);
+                break;
+            default:
+        }
+        return promptParts.join('\n');
+    }
+    return '';
+}
+//# sourceMappingURL=computer-use-prompt.js.map

package/dist/agent/computer-use-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"computer-use-prompt.js","sourceRoot":"","sources":["../../src/agent/computer-use-prompt.ts"],"names":[],"mappings":";;AAKA,oDA6GC;AAhHD,MAAM,yBAAyB,GAC9B,2FAA2F,CAAC;AAE7F,SAAgB,oBAAoB,CAAC,EACpC,gBAAgB,EAChB,YAAY,GAIZ;IACA,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAChE,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,WAAW,CAAC,IAAI,CAAC;;;;;sSAKmR,yBAAyB;;;;;;;;;;;;;;;;;CAiB9T,CAAC,CAAC;QAED,WAAW,CAAC,IAAI,CAAC;wBACK,CAAC,CAAC;QAExB,QAAQ,YAAY,CAAC,MAAM,EAAE,CAAC;YAC7B,KAAK,WAAW;gBACf,IAAI,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1C,WAAW,CAAC,IAAI,CACf,2EAA2E,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAChH,CAAC;oBACF,IAAI,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;wBACtD,WAAW,CAAC,IAAI,CAAC;;;sIAG+G,CAAC,CAAC;oBACnI,CAAC;oBACD,IAAI,gBAAgB,EAAE,CAAC;wBACtB,WAAW,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;2QAsBoP,yBAAyB,EAAE,CAAC,CAAC;oBACnS,CAAC;yBAAM,CAAC;wBACP,WAAW,CAAC,IAAI,CAAC;;;uQAGgP,yBAAyB,EAAE,CAAC,CAAC;oBAC/R,CAAC;gBACF,CAAC;qBAAM,CAAC;oBACP,WAAW,CAAC,IAAI,CACf,yEAAyE,CACzE,CAAC;gBACH,CAAC;gBAED,MAAM;YACP,KAAK,cAAc;gBAClB,WAAW,CAAC,IAAI,CACf;;;gEAG2D,CAC3D,CAAC;gBACF,MAAM;YACP,KAAK,UAAU;gBACd,WAAW,CAAC,IAAI,CACf;;;yCAGoC,CACpC,CAAC;gBACF,MAAM;YACP,QAAQ;QACT,CAAC;QAED,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,EAAE,CAAC;AACX,CAAC"}

package/dist/agent/instance-agent.js

@@ -4,30 +4,12 @@ exports.createInstanceAgent = createInstanceAgent;
 const agent_1 = require("@mastra/core/agent");
 const mastra_1 = require("@mastra/core/mastra");
 const processors_1 = require("@mastra/core/processors");
-const mcp_1 = require("@mastra/mcp");
-const nanoid_1 = require("nanoid");
 const memory_config_1 = require("../memory/memory-config");
 const tools_1 = require("../tools");
-const sanitize_mcp_schemas_1 = require("./sanitize-mcp-schemas");
 const system_prompt_1 = require("./system-prompt");
 const create_tools_from_mcp_server_1 = require("../tools/filesystem/create-tools-from-mcp-server");
 const langsmith_tracing_1 = require("../tracing/langsmith-tracing");
-function buildMcpServers(configs) {
-    const servers = {};
-    for (const server of configs) {
-        if (server.url) {
-            servers[server.name] = { url: new URL(server.url) };
-        }
-        else if (server.command) {
-            servers[server.name] = { command: server.command, args: server.args, env: server.env };
-        }
-    }
-    return servers;
-}
-let cachedMcpTools = null;
-let cachedMcpServersKey = '';
-let cachedBrowserMcpTools = null;
-let cachedBrowserMcpKey = '';
+const mcp_tool_name_validation_1 = require("./mcp-tool-name-validation");
 let cachedMastra = null;
 let cachedMastraStorageKey = '';
 const ALWAYS_LOADED_TOOLS = new Set(['plan', 'delegate', 'ask-user', 'research']);
@@ -37,37 +19,6 @@ function getOrCreateToolSearchProcessor(tools) {
         search: { topK: 5 },
     });
 }
-async function getMcpTools(mcpServers) {
-    const key = JSON.stringify(mcpServers);
-    if (cachedMcpTools && cachedMcpServersKey === key)
-        return cachedMcpTools;
-    if (mcpServers.length === 0) {
-        cachedMcpTools = {};
-        cachedMcpServersKey = key;
-        return cachedMcpTools;
-    }
-    const mcpClient = new mcp_1.MCPClient({
-        id: `mcp-${(0, nanoid_1.nanoid)(6)}`,
-        servers: buildMcpServers(mcpServers),
-    });
-    cachedMcpTools = (0, sanitize_mcp_schemas_1.sanitizeMcpToolSchemas)(await mcpClient.listTools());
-    cachedMcpServersKey = key;
-    return cachedMcpTools;
-}
-async function getBrowserMcpTools(config) {
-    if (!config)
-        return {};
-    const key = JSON.stringify(config);
-    if (cachedBrowserMcpTools && cachedBrowserMcpKey === key)
-        return cachedBrowserMcpTools;
-    const browserClient = new mcp_1.MCPClient({
-        id: `browser-mcp-${(0, nanoid_1.nanoid)(6)}`,
-        servers: buildMcpServers([config]),
-    });
-    cachedBrowserMcpTools = (0, sanitize_mcp_schemas_1.sanitizeMcpToolSchemas)(await browserClient.listTools());
-    cachedBrowserMcpKey = key;
-    return cachedBrowserMcpTools;
-}
 function ensureMastraRegistered(agent, storage) {
     const key = storage.id ?? 'default';
     if (!cachedMastra || cachedMastraStorageKey !== key) {
@@ -77,25 +28,26 @@ function ensureMastraRegistered(agent, storage) {
     agent.__registerMastra(cachedMastra);
 }
 async function createInstanceAgent(options) {
-    const { modelId, context, orchestrationContext, mcpServers = [], memoryConfig, disableDeferredTools = false, } = options;
+    const { modelId, context, orchestrationContext, mcpServers = [], mcpManager, memoryConfig, disableDeferredTools = false, } = options;
     const domainTools = (0, tools_1.createAllTools)(context);
     const orchestratorDomainTools = (0, tools_1.createOrchestratorDomainTools)(context);
-    const mcpTools = await getMcpTools(mcpServers);
-    const browserMcpTools = await getBrowserMcpTools(orchestrationContext?.browserMcpConfig);
+    const mcpTools = await mcpManager.getRegularTools(mcpServers, context.logger);
+    const browserMcpTools = await mcpManager.getBrowserTools(orchestrationContext?.browserMcpConfig, context.logger);
+    const rawLocalMcpTools = context.localMcpServer
+        ? (0, create_tools_from_mcp_server_1.createToolsFromLocalMcpServer)(context.localMcpServer, context.logger)
+        : {};
     const browserToolNames = new Set([
         ...Object.keys(browserMcpTools),
         ...(context.localMcpServer?.getToolsByCategory('browser').map((t) => t.name) ?? []),
     ]);
     const allMcpTools = {};
-    const domainToolNames = new Set(Object.keys(domainTools));
-    for (const [name, tool] of Object.entries({ ...mcpTools, ...browserMcpTools })) {
-        if (!domainToolNames.has(name)) {
-            allMcpTools[name] = tool;
-        }
-    }
-    if (orchestrationContext && Object.keys(allMcpTools).length > 0) {
-        orchestrationContext.mcpTools = allMcpTools;
-    }
+    const warnSkippedMcpTool = (error) => {
+        context.logger?.warn('Skipped MCP tool with unsafe name', {
+            toolName: error.toolName,
+            source: error.source,
+            reason: error.message,
+        });
+    };
     const orchestrationTools = orchestrationContext
         ? (0, tools_1.createOrchestrationTools)(orchestrationContext)
         : {};
@@ -103,20 +55,44 @@ async function createInstanceAgent(options) {
         ...Object.keys(domainTools),
         ...Object.keys(orchestrationTools),
     ]);
-    const safeMcpTools = {};
-    for (const [name, tool] of Object.entries(mcpTools)) {
-        if (reservedToolNames.has(name))
-            continue;
-        safeMcpTools[name] = tool;
+    const mcpContextToolNames = (0, mcp_tool_name_validation_1.createClaimedToolNames)(reservedToolNames);
+    (0, mcp_tool_name_validation_1.addSafeMcpTools)(allMcpTools, rawLocalMcpTools, {
+        source: 'local gateway MCP',
+        claimedToolNames: mcpContextToolNames,
+        warn: warnSkippedMcpTool,
+    });
+    (0, mcp_tool_name_validation_1.addSafeMcpTools)(allMcpTools, mcpTools, {
+        source: 'external MCP',
+        claimedToolNames: mcpContextToolNames,
+        warn: warnSkippedMcpTool,
+    });
+    (0, mcp_tool_name_validation_1.addSafeMcpTools)(allMcpTools, browserMcpTools, {
+        source: 'browser MCP',
+        claimedToolNames: mcpContextToolNames,
+        warn: warnSkippedMcpTool,
+    });
+    const orchestratorLocalMcpTools = Object.fromEntries(Object.entries(rawLocalMcpTools).filter(([name]) => !browserToolNames.has(name)));
+    if (orchestrationContext && Object.keys(allMcpTools).length > 0) {
+        orchestrationContext.mcpTools = allMcpTools;
     }
-    const localMcpTools = context.localMcpServer
-        ? Object.fromEntries(Object.entries((0, create_tools_from_mcp_server_1.createToolsFromLocalMcpServer)(context.localMcpServer)).filter(([name]) => !browserToolNames.has(name)))
-        : {};
+    const claimedOrchestratorToolNames = (0, mcp_tool_name_validation_1.createClaimedToolNames)(reservedToolNames);
+    const safeLocalMcpTools = {};
+    (0, mcp_tool_name_validation_1.addSafeMcpTools)(safeLocalMcpTools, orchestratorLocalMcpTools, {
+        source: 'local gateway MCP',
+        claimedToolNames: claimedOrchestratorToolNames,
+        warn: warnSkippedMcpTool,
+    });
+    const safeMcpTools = {};
+    (0, mcp_tool_name_validation_1.addSafeMcpTools)(safeMcpTools, mcpTools, {
+        source: 'external MCP',
+        claimedToolNames: claimedOrchestratorToolNames,
+        warn: warnSkippedMcpTool,
+    });
     const allOrchestratorTools = {
         ...orchestratorDomainTools,
         ...orchestrationTools,
+        ...safeLocalMcpTools,
         ...safeMcpTools,
-        ...localMcpTools,
     };
     const tracedOrchestratorTools = orchestrationContext?.tracing?.wrapTools(allOrchestratorTools, {
         agentRole: 'orchestrator',
@@ -140,7 +116,7 @@ async function createInstanceAgent(options) {
     const systemPrompt = (0, system_prompt_1.getSystemPrompt)({
         researchMode: orchestrationContext?.researchMode,
         webhookBaseUrl: orchestrationContext?.webhookBaseUrl,
-        filesystemAccess: (context.localMcpServer?.getToolsByCategory('filesystem').length ?? 0) > 0,
+        formBaseUrl: orchestrationContext?.formBaseUrl,
         localGateway: context.localGatewayStatus,
         toolSearchEnabled: hasDeferrableTools,
         licenseHints: context.licenseHints,
@@ -162,7 +138,6 @@ async function createInstanceAgent(options) {
         tools: hasDeferrableTools ? coreTools : tracedOrchestratorTools,
         inputProcessors: toolSearchProcessor ? [toolSearchProcessor] : undefined,
         memory,
-        workspace: options.workspace,
     });
     (0, langsmith_tracing_1.mergeTraceRunInputs)(orchestrationContext?.tracing?.actorRun, (0, langsmith_tracing_1.buildAgentTraceInputs)({
         systemPrompt,

package/dist/agent/instance-agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"instance-agent.js","sourceRoot":"","sources":["../../src/agent/instance-agent.ts"],"names":[],"mappings":";;AA4GA,kDAiJC;AA5PD,8CAA2C;AAC3C,gDAA6C;AAC7C,wDAA+F;AAE/F,qCAAwC;AACxC,mCAAgC;AAEhC,2DAAuD;AACvD,oCAAmG;AACnG,iEAAgE;AAChE,mDAAkD;AAClD,mGAAiG;AACjG,oEAA0F;AAE1F,SAAS,eAAe,CACvB,OAA0B;IAK1B,MAAM,OAAO,GAGT,EAAE,CAAC;IACP,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACxF,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAID,IAAI,cAAc,GAAsB,IAAI,CAAC;AAC7C,IAAI,mBAAmB,GAAG,EAAE,CAAC;AAE7B,IAAI,qBAAqB,GAAsB,IAAI,CAAC;AACpD,IAAI,mBAAmB,GAAG,EAAE,CAAC;AAE7B,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,IAAI,sBAAsB,GAAG,EAAE,CAAC;AAKhC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAElF,SAAS,8BAA8B,CAAC,KAAiB;IAGxD,OAAO,IAAI,gCAAmB,CAAC;QAC9B,KAAK,EAAE,KAA4C;QACnD,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;KACnB,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,UAA6B;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,cAAc,IAAI,mBAAmB,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAEzE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,cAAc,GAAG,EAAE,CAAC;QACpB,mBAAmB,GAAG,GAAG,CAAC;QAC1B,OAAO,cAAc,CAAC;IACvB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,eAAS,CAAC;QAC/B,EAAE,EAAE,OAAO,IAAA,eAAM,EAAC,CAAC,CAAC,EAAE;QACtB,OAAO,EAAE,eAAe,CAAC,UAAU,CAAC;KACpC,CAAC,CAAC;IACH,cAAc,GAAG,IAAA,6CAAsB,EAAC,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;IACrE,mBAAmB,GAAG,GAAG,CAAC;IAC1B,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAmC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,qBAAqB,IAAI,mBAAmB,KAAK,GAAG;QAAE,OAAO,qBAAqB,CAAC;IAEvF,MAAM,aAAa,GAAG,IAAI,eAAS,CAAC;QACnC,EAAE,EAAE,eAAe,IAAA,eAAM,EAAC,CAAC,CAAC,EAAE;QAC9B,OAAO,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;KAClC,CAAC,CAAC;IACH,qBAAqB,GAAG,IAAA,6CAAsB,EAAC,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;IAChF,mBAAmB,GAAG,GAAG,CAAC;IAC1B,OAAO,qBAAqB,CAAC;AAC9B,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAY,EAAE,OAA6B;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;IACpC,IAAI,CAAC,YAAY,IAAI,sBAAsB,KAAK,GAAG,EAAE,CAAC;QAIrD,YAAY,GAAG,IAAI,eAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACvC,sBAAsB,GAAG,GAAG,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;AACtC,CAAC;AAIM,KAAK,UAAU,mBAAmB,CAAC,OAAmC;IAC5E,MAAM,EACL,OAAO,EACP,OAAO,EACP,oBAAoB,EACpB,UAAU,GAAG,EAAE,EACf,YAAY,EACZ,oBAAoB,GAAG,KAAK,GAC5B,GAAG,OAAO,CAAC;IAGZ,MAAM,WAAW,GAAG,IAAA,sBAAc,EAAC,OAAO,CAAC,CAAC;IAE5C,MAAM,uBAAuB,GAAG,IAAA,qCAA6B,EAAC,OAAO,CAAC,CAAC;IAGvE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;IAKzF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;QAChC,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;QAC/B,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KACnF,CAAC,CAAC;IAIH,MAAM,WAAW,GAAe,EAAE,CAAC;IACnC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,eAAe,EAAE,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAC1B,CAAC;IACF,CAAC;IACD,IAAI,oBAAoB,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,oBAAoB,CAAC,QAAQ,GAAG,WAAW,CAAC;IAC7C,CAAC;IAID,MAAM,kBAAkB,GAAG,oBAAoB;QAC9C,CAAC,CAAC,IAAA,gCAAwB,EAAC,oBAAoB,CAAC;QAChD,CAAC,CAAC,EAAE,CAAC;IAKN,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;QACjC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;QAC3B,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;KAClC,CAAC,CAAC;IACH,MAAM,YAAY,GAAe,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1C,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,CAAC;IAKD,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc;QAC3C,CAAC,CAAC,MAAM,CAAC,WAAW,CAClB,MAAM,CAAC,OAAO,CAAC,IAAA,4DAA6B,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAC3E,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CACvC,CACD;QACF,CAAC,CAAC,EAAE,CAAC;IAEN,MAAM,oBAAoB,GAAe;QACxC,GAAG,uBAAuB;QAC1B,GAAG,kBAAkB;QACrB,GAAG,YAAY;QACf,GAAG,aAAa;KAChB,CAAC;IACF,MAAM,uBAAuB,GAC5B,oBAAoB,EAAE,OAAO,EAAE,SAAS,CAAC,oBAAoB,EAAE;QAC9D,SAAS,EAAE,cAAc;QACzB,IAAI,EAAE,CAAC,cAAc,CAAC;KACtB,CAAC,IAAI,oBAAoB,CAAC;IAE5B,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,eAAe,GAAe,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACpE,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxB,CAAC;aAAM,CAAC;YACP,eAAe,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAC9B,CAAC;IACF,CAAC;IAED,MAAM,kBAAkB,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5F,MAAM,mBAAmB,GAAG,kBAAkB;QAC7C,CAAC,CAAC,8BAA8B,CAAC,eAAe,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IAGb,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAA,4BAAY,EAAC,YAAY,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,IAAA,+BAAe,EAAC;QACpC,YAAY,EAAE,oBAAoB,EAAE,YAAY;QAChD,cAAc,EAAE,oBAAoB,EAAE,cAAc;QACpD,gBAAgB,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC5F,YAAY,EAAE,OAAO,CAAC,kBAAkB;QACxC,iBAAiB,EAAE,kBAAkB;QACrC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,GAAG,CAAC;QAC3C,cAAc,EAAE,OAAO,CAAC,cAAc;KACtC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,aAAK,CAAC;QACvB,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EAAE;YACb,IAAI,EAAE,QAAiB;YACvB,OAAO,EAAE,YAAY;YACrB,eAAe,EAAE;gBAChB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;aAClD;SACD;QACD,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;QAC/D,eAAe,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;QACxE,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,SAAS;KAC5B,CAAC,CAAC;IAEH,IAAA,uCAAmB,EAClB,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EACvC,IAAA,yCAAqB,EAAC;QACrB,YAAY;QACZ,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;QAC/D,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAC/D,OAAO;QACP,MAAM;QACN,iBAAiB,EAAE,kBAAkB;QACrC,eAAe,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC,CACF,CAAC;IAGF,sBAAsB,CAAC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;IAEpD,OAAO,KAAK,CAAC;AACd,CAAC"}
+{"version":3,"file":"instance-agent.js","sourceRoot":"","sources":["../../src/agent/instance-agent.ts"],"names":[],"mappings":";;AAiDA,kDAuLC;AAvOD,8CAA2C;AAC3C,gDAA6C;AAC7C,wDAA+F;AAG/F,2DAAuD;AACvD,oCAAmG;AACnG,mDAAkD;AAClD,mGAAiG;AACjG,oEAA0F;AAE1F,yEAIoC;AAEpC,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,IAAI,sBAAsB,GAAG,EAAE,CAAC;AAKhC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAElF,SAAS,8BAA8B,CAAC,KAAiB;IAGxD,OAAO,IAAI,gCAAmB,CAAC;QAC9B,KAAK,EAAE,KAA4C;QACnD,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;KACnB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAY,EAAE,OAA6B;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;IACpC,IAAI,CAAC,YAAY,IAAI,sBAAsB,KAAK,GAAG,EAAE,CAAC;QAIrD,YAAY,GAAG,IAAI,eAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACvC,sBAAsB,GAAG,GAAG,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;AACtC,CAAC;AAIM,KAAK,UAAU,mBAAmB,CAAC,OAAmC;IAC5E,MAAM,EACL,OAAO,EACP,OAAO,EACP,oBAAoB,EACpB,UAAU,GAAG,EAAE,EACf,UAAU,EACV,YAAY,EACZ,oBAAoB,GAAG,KAAK,GAC5B,GAAG,OAAO,CAAC;IAGZ,MAAM,WAAW,GAAG,IAAA,sBAAc,EAAC,OAAO,CAAC,CAAC;IAE5C,MAAM,uBAAuB,GAAG,IAAA,qCAA6B,EAAC,OAAO,CAAC,CAAC;IAIvE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9E,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,eAAe,CACvD,oBAAoB,EAAE,gBAAgB,EACtC,OAAO,CAAC,MAAM,CACd,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAAC,cAAc;QAC9C,CAAC,CAAC,IAAA,4DAA6B,EAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC;QACvE,CAAC,CAAC,EAAE,CAAC;IAKN,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;QAChC,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;QAC/B,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KACnF,CAAC,CAAC;IAIH,MAAM,WAAW,GAAe,EAAE,CAAC;IACnC,MAAM,kBAAkB,GAAG,CAAC,KAAiC,EAAE,EAAE;QAChE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,mCAAmC,EAAE;YACzD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;IACJ,CAAC,CAAC;IAGF,MAAM,kBAAkB,GAAG,oBAAoB;QAC9C,CAAC,CAAC,IAAA,gCAAwB,EAAC,oBAAoB,CAAC;QAChD,CAAC,CAAC,EAAE,CAAC;IAGN,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;QACjC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;QAC3B,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;KAClC,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,IAAA,iDAAsB,EAAC,iBAAiB,CAAC,CAAC;IACtE,IAAA,0CAAe,EAAC,WAAW,EAAE,gBAAgB,EAAE;QAC9C,MAAM,EAAE,mBAAmB;QAC3B,gBAAgB,EAAE,mBAAmB;QACrC,IAAI,EAAE,kBAAkB;KACxB,CAAC,CAAC;IACH,IAAA,0CAAe,EAAC,WAAW,EAAE,QAAQ,EAAE;QACtC,MAAM,EAAE,cAAc;QACtB,gBAAgB,EAAE,mBAAmB;QACrC,IAAI,EAAE,kBAAkB;KACxB,CAAC,CAAC;IACH,IAAA,0CAAe,EAAC,WAAW,EAAE,eAAe,EAAE;QAC7C,MAAM,EAAE,aAAa;QACrB,gBAAgB,EAAE,mBAAmB;QACrC,IAAI,EAAE,kBAAkB;KACxB,CAAC,CAAC;IAEH,MAAM,yBAAyB,GAAG,MAAM,CAAC,WAAW,CACnD,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAChF,CAAC;IACF,IAAI,oBAAoB,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,oBAAoB,CAAC,QAAQ,GAAG,WAAW,CAAC;IAC7C,CAAC;IAED,MAAM,4BAA4B,GAAG,IAAA,iDAAsB,EAAC,iBAAiB,CAAC,CAAC;IAC/E,MAAM,iBAAiB,GAAe,EAAE,CAAC;IACzC,IAAA,0CAAe,EAAC,iBAAiB,EAAE,yBAAyB,EAAE;QAC7D,MAAM,EAAE,mBAAmB;QAC3B,gBAAgB,EAAE,4BAA4B;QAC9C,IAAI,EAAE,kBAAkB;KACxB,CAAC,CAAC;IACH,MAAM,YAAY,GAAe,EAAE,CAAC;IACpC,IAAA,0CAAe,EAAC,YAAY,EAAE,QAAQ,EAAE;QACvC,MAAM,EAAE,cAAc;QACtB,gBAAgB,EAAE,4BAA4B;QAC9C,IAAI,EAAE,kBAAkB;KACxB,CAAC,CAAC;IAKH,MAAM,oBAAoB,GAAe;QACxC,GAAG,uBAAuB;QAC1B,GAAG,kBAAkB;QACrB,GAAG,iBAAiB;QACpB,GAAG,YAAY;KACf,CAAC;IACF,MAAM,uBAAuB,GAC5B,oBAAoB,EAAE,OAAO,EAAE,SAAS,CAAC,oBAAoB,EAAE;QAC9D,SAAS,EAAE,cAAc;QACzB,IAAI,EAAE,CAAC,cAAc,CAAC;KACtB,CAAC,IAAI,oBAAoB,CAAC;IAE5B,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,eAAe,GAAe,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACpE,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxB,CAAC;aAAM,CAAC;YACP,eAAe,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAC9B,CAAC;IACF,CAAC;IAED,MAAM,kBAAkB,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5F,MAAM,mBAAmB,GAAG,kBAAkB;QAC7C,CAAC,CAAC,8BAA8B,CAAC,eAAe,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IAGb,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAA,4BAAY,EAAC,YAAY,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,IAAA,+BAAe,EAAC;QACpC,YAAY,EAAE,oBAAoB,EAAE,YAAY;QAChD,cAAc,EAAE,oBAAoB,EAAE,cAAc;QACpD,WAAW,EAAE,oBAAoB,EAAE,WAAW;QAC9C,YAAY,EAAE,OAAO,CAAC,kBAAkB;QACxC,iBAAiB,EAAE,kBAAkB;QACrC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,GAAG,CAAC;QAC3C,cAAc,EAAE,OAAO,CAAC,cAAc;KACtC,CAAC,CAAC;IAcH,MAAM,KAAK,GAAG,IAAI,aAAK,CAAC;QACvB,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EAAE;YACb,IAAI,EAAE,QAAiB;YACvB,OAAO,EAAE,YAAY;YACrB,eAAe,EAAE;gBAChB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;aAClD;SACD;QACD,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;QAC/D,eAAe,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;QACxE,MAAM;KACN,CAAC,CAAC;IAEH,IAAA,uCAAmB,EAClB,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EACvC,IAAA,yCAAqB,EAAC;QACrB,YAAY;QACZ,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;QAC/D,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAC/D,OAAO;QACP,MAAM;QACN,iBAAiB,EAAE,kBAAkB;QACrC,eAAe,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC,CACF,CAAC;IAGF,sBAAsB,CAAC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;IAEpD,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/agent/mcp-tool-name-validation.d.ts

@@ -0,0 +1,15 @@
+import type { ToolsInput } from '@mastra/core/agent';
+export declare class McpToolNameValidationError extends Error {
+    readonly toolName: string;
+    readonly source: string;
+    constructor(message: string, toolName: string, source: string);
+}
+export declare function isSafeMcpIdentifierName(name: string): boolean;
+export declare function normalizeMcpToolName(name: string): string;
+export declare function validateMcpToolName(name: string, source: string): string;
+export declare function createClaimedToolNames(names: Iterable<string>): Map<string, string>;
+export declare function addSafeMcpTools(target: ToolsInput, sourceTools: ToolsInput, options: {
+    source: string;
+    claimedToolNames: Map<string, string>;
+    warn?: (error: McpToolNameValidationError) => void;
+}): void;

package/dist/agent/mcp-tool-name-validation.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpToolNameValidationError = void 0;
+exports.isSafeMcpIdentifierName = isSafeMcpIdentifierName;
+exports.normalizeMcpToolName = normalizeMcpToolName;
+exports.validateMcpToolName = validateMcpToolName;
+exports.createClaimedToolNames = createClaimedToolNames;
+exports.addSafeMcpTools = addSafeMcpTools;
+const api_types_1 = require("@n8n/api-types");
+class McpToolNameValidationError extends Error {
+    toolName;
+    source;
+    constructor(message, toolName, source) {
+        super(message);
+        this.toolName = toolName;
+        this.source = source;
+        this.name = 'McpToolNameValidationError';
+    }
+}
+exports.McpToolNameValidationError = McpToolNameValidationError;
+const MCP_TOOL_NAME_PATTERN = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/;
+function isSafeMcpIdentifierName(name) {
+    const normalizedName = name.normalize('NFKC');
+    return (normalizedName === name &&
+        MCP_TOOL_NAME_PATTERN.test(name) &&
+        (0, api_types_1.isSafeObjectKey)(normalizedName.toLowerCase()));
+}
+function normalizeMcpToolName(name) {
+    return name
+        .normalize('NFKC')
+        .toLowerCase()
+        .replace(/[^a-z0-9]/g, '');
+}
+function validateMcpToolName(name, source) {
+    if (!isSafeMcpIdentifierName(name)) {
+        throw new McpToolNameValidationError(`MCP tool "${name}" from ${source} has an invalid name`, name, source);
+    }
+    return normalizeMcpToolName(name);
+}
+function createClaimedToolNames(names) {
+    const claimed = new Map();
+    for (const name of names) {
+        claimed.set(normalizeMcpToolName(name), name);
+    }
+    return claimed;
+}
+function addSafeMcpTools(target, sourceTools, options) {
+    for (const [name, tool] of Object.entries(sourceTools)) {
+        try {
+            const normalizedName = validateMcpToolName(name, options.source);
+            const claimedBy = options.claimedToolNames.get(normalizedName);
+            if (claimedBy) {
+                throw new McpToolNameValidationError(`MCP tool "${name}" from ${options.source} conflicts with "${claimedBy}"`, name, options.source);
+            }
+            options.claimedToolNames.set(normalizedName, name);
+            target[name] = tool;
+        }
+        catch (error) {
+            if (error instanceof McpToolNameValidationError) {
+                options.warn?.(error);
+                continue;
+            }
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=mcp-tool-name-validation.js.map

package/dist/agent/mcp-tool-name-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-name-validation.js","sourceRoot":"","sources":["../../src/agent/mcp-tool-name-validation.ts"],"names":[],"mappings":";;;AAgBA,0DAOC;AAED,oDAKC;AAED,kDASC;AAED,wDAMC;AAED,0CA8BC;AAhFD,8CAAiD;AAEjD,MAAa,0BAA2B,SAAQ,KAAK;IAG1C;IACA;IAHV,YACC,OAAe,EACN,QAAgB,EAChB,MAAc;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QAGvB,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC1C,CAAC;CACD;AATD,gEASC;AAED,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAE9D,SAAgB,uBAAuB,CAAC,IAAY;IACnD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,CACN,cAAc,KAAK,IAAI;QACvB,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAChC,IAAA,2BAAe,EAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAC7C,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAAC,IAAY;IAChD,OAAO,IAAI;SACT,SAAS,CAAC,MAAM,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,SAAgB,mBAAmB,CAAC,IAAY,EAAE,MAAc;IAC/D,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,0BAA0B,CACnC,aAAa,IAAI,UAAU,MAAM,sBAAsB,EACvD,IAAI,EACJ,MAAM,CACN,CAAC;IACH,CAAC;IACD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAgB,sBAAsB,CAAC,KAAuB;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAgB,eAAe,CAC9B,MAAkB,EAClB,WAAuB,EACvB,OAIC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC/D,IAAI,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,0BAA0B,CACnC,aAAa,IAAI,UAAU,OAAO,CAAC,MAAM,oBAAoB,SAAS,GAAG,EACzE,IAAI,EACJ,OAAO,CAAC,MAAM,CACd,CAAC;YACH,CAAC;YACD,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;gBACtB,SAAS;YACV,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/agent/sanitize-mcp-schemas.d.ts

@@ -1,6 +1,60 @@
 import type { ToolsInput } from '@mastra/core/agent';
 import { z } from 'zod';
-export declare function sanitizeZodType(schema: z.ZodTypeAny, strict?: boolean): z.ZodTypeAny;
+export declare const MCP_SCHEMA_MAX_DEPTH = 32;
+export declare const MCP_SCHEMA_MAX_NODES = 1000;
+export declare const MCP_SCHEMA_MAX_OBJECT_PROPERTIES = 250;
+export declare const MCP_SCHEMA_MAX_UNION_OPTIONS = 100;
+type McpSchemaLimitType = 'depth' | 'nodes' | 'objectProperties' | 'unionOptions' | 'unsupportedType';
+export declare class McpSchemaSanitizationError extends Error {
+    readonly details: {
+        toolName?: string;
+        path: string;
+        depth: number;
+        maxDepth: number;
+        limit?: number;
+        limitType?: McpSchemaLimitType;
+        count?: number;
+        zodType?: string;
+    };
+    constructor(message: string, details: {
+        toolName?: string;
+        path: string;
+        depth: number;
+        maxDepth: number;
+        limit?: number;
+        limitType?: McpSchemaLimitType;
+        count?: number;
+        zodType?: string;
+    });
+}
+interface SanitizeBudget {
+    nodes: number;
+}
+interface SanitizeZodTypeOptions {
+    maxDepth?: number;
+    maxNodes?: number;
+    maxObjectProperties?: number;
+    maxUnionOptions?: number;
+    toolName?: string;
+    path?: string;
+    budget?: SanitizeBudget;
+}
+interface ValidateJsonSchemaOptions {
+    maxDepth?: number;
+    maxNodes?: number;
+    maxObjectProperties?: number;
+    maxUnionOptions?: number;
+    toolName?: string;
+}
+export declare function assertMcpJsonSchemaWithinLimits(schema: unknown, options?: ValidateJsonSchemaOptions): void;
+export declare function sanitizeZodType(schema: z.ZodTypeAny, strict?: boolean, options?: SanitizeZodTypeOptions): z.ZodTypeAny;
 export declare function ensureTopLevelObject(schema: z.ZodTypeAny): z.ZodTypeAny;
 export declare function sanitizeInputSchema<T extends z.ZodTypeAny>(schema: T): T;
-export declare function sanitizeMcpToolSchemas(tools: ToolsInput): ToolsInput;
+export declare function sanitizeMcpToolSchemas(tools: ToolsInput, options?: {
+    maxDepth?: number;
+    maxNodes?: number;
+    maxObjectProperties?: number;
+    maxUnionOptions?: number;
+    onError?: (error: McpSchemaSanitizationError) => void;
+}): ToolsInput;
+export {};