@n8n/instance-ai 1.5.0 → 1.6.1

package/dist/agent/sanitize-mcp-schemas.js

@@ -1,21 +1,155 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpSchemaSanitizationError = exports.MCP_SCHEMA_MAX_UNION_OPTIONS = exports.MCP_SCHEMA_MAX_OBJECT_PROPERTIES = exports.MCP_SCHEMA_MAX_NODES = exports.MCP_SCHEMA_MAX_DEPTH = void 0;
+exports.assertMcpJsonSchemaWithinLimits = assertMcpJsonSchemaWithinLimits;
 exports.sanitizeZodType = sanitizeZodType;
 exports.ensureTopLevelObject = ensureTopLevelObject;
 exports.sanitizeInputSchema = sanitizeInputSchema;
 exports.sanitizeMcpToolSchemas = sanitizeMcpToolSchemas;
 const zod_1 = require("zod");
-function sanitizeZodType(schema, strict = false) {
+exports.MCP_SCHEMA_MAX_DEPTH = 32;
+exports.MCP_SCHEMA_MAX_NODES = 1_000;
+exports.MCP_SCHEMA_MAX_OBJECT_PROPERTIES = 250;
+exports.MCP_SCHEMA_MAX_UNION_OPTIONS = 100;
+class McpSchemaSanitizationError extends Error {
+    details;
+    constructor(message, details) {
+        super(message);
+        this.details = details;
+        this.name = 'McpSchemaSanitizationError';
+    }
+}
+exports.McpSchemaSanitizationError = McpSchemaSanitizationError;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function throwJsonSchemaLimitError(context, path, depth, message, limitType, limit, count) {
+    throw new McpSchemaSanitizationError(message, {
+        toolName: context.toolName,
+        path,
+        depth,
+        maxDepth: context.maxDepth,
+        limit,
+        limitType,
+        count,
+    });
+}
+function validateJsonSchemaNode(value, path, depth, context) {
+    if (depth > context.maxDepth) {
+        throwJsonSchemaLimitError(context, path, depth, `MCP schema exceeds maximum depth of ${context.maxDepth}`, 'depth', context.maxDepth, depth);
+    }
+    context.budget.nodes++;
+    if (context.budget.nodes > context.maxNodes) {
+        throwJsonSchemaLimitError(context, path, depth, `MCP schema exceeds maximum node count of ${context.maxNodes}`, 'nodes', context.maxNodes, context.budget.nodes);
+    }
+    if (Array.isArray(value)) {
+        for (const [index, item] of value.entries()) {
+            validateJsonSchemaNode(item, `${path}[${index}]`, depth + 1, context);
+        }
+        return;
+    }
+    if (!isRecord(value))
+        return;
+    const properties = value.properties;
+    if (isRecord(properties)) {
+        const propertyCount = Object.keys(properties).length;
+        if (propertyCount > context.maxObjectProperties) {
+            throwJsonSchemaLimitError(context, `${path}.properties`, depth + 1, `MCP schema object exceeds maximum property count of ${context.maxObjectProperties}`, 'objectProperties', context.maxObjectProperties, propertyCount);
+        }
+    }
+    for (const unionKey of ['anyOf', 'oneOf', 'allOf']) {
+        const unionOptions = value[unionKey];
+        if (Array.isArray(unionOptions) && unionOptions.length > context.maxUnionOptions) {
+            throwJsonSchemaLimitError(context, `${path}.${unionKey}`, depth + 1, `MCP schema union exceeds maximum option count of ${context.maxUnionOptions}`, 'unionOptions', context.maxUnionOptions, unionOptions.length);
+        }
+    }
+    for (const [key, child] of Object.entries(value)) {
+        validateJsonSchemaNode(child, `${path}.${key}`, depth + 1, context);
+    }
+}
+function assertMcpJsonSchemaWithinLimits(schema, options = {}) {
+    validateJsonSchemaNode(schema, '$.inputSchema', 0, {
+        toolName: options.toolName,
+        maxDepth: options.maxDepth ?? exports.MCP_SCHEMA_MAX_DEPTH,
+        maxNodes: options.maxNodes ?? exports.MCP_SCHEMA_MAX_NODES,
+        maxObjectProperties: options.maxObjectProperties ?? exports.MCP_SCHEMA_MAX_OBJECT_PROPERTIES,
+        maxUnionOptions: options.maxUnionOptions ?? exports.MCP_SCHEMA_MAX_UNION_OPTIONS,
+        budget: { nodes: 0 },
+    });
+}
+function sanitizeZodType(schema, strict = false, options = {}) {
+    return sanitizeZodTypeInner(schema, {
+        strict,
+        toolName: options.toolName,
+        path: options.path ?? '$',
+        depth: 0,
+        maxDepth: options.maxDepth ?? exports.MCP_SCHEMA_MAX_DEPTH,
+        maxNodes: options.maxNodes ?? exports.MCP_SCHEMA_MAX_NODES,
+        maxObjectProperties: options.maxObjectProperties ?? exports.MCP_SCHEMA_MAX_OBJECT_PROPERTIES,
+        maxUnionOptions: options.maxUnionOptions ?? exports.MCP_SCHEMA_MAX_UNION_OPTIONS,
+        budget: options.budget ?? { nodes: 0 },
+    });
+}
+function createLimitError(context, message, limitType, limit, count) {
+    return new McpSchemaSanitizationError(message, {
+        toolName: context.toolName,
+        path: context.path,
+        depth: context.depth,
+        maxDepth: context.maxDepth,
+        limit,
+        limitType,
+        count,
+    });
+}
+function createUnsupportedTypeError(context, schema) {
+    const definition = schema._def;
+    const zodType = typeof definition.typeName === 'string' ? definition.typeName : schema.constructor.name;
+    return new McpSchemaSanitizationError(`MCP schema contains unsupported Zod type ${zodType}`, {
+        toolName: context.toolName,
+        path: context.path,
+        depth: context.depth,
+        maxDepth: context.maxDepth,
+        limitType: 'unsupportedType',
+        zodType,
+    });
+}
+function isSupportedLeafSchema(schema) {
+    return (schema instanceof zod_1.z.ZodString ||
+        schema instanceof zod_1.z.ZodNumber ||
+        schema instanceof zod_1.z.ZodBoolean ||
+        schema instanceof zod_1.z.ZodDate ||
+        schema instanceof zod_1.z.ZodAny ||
+        schema instanceof zod_1.z.ZodUnknown ||
+        schema instanceof zod_1.z.ZodLiteral ||
+        schema instanceof zod_1.z.ZodEnum ||
+        schema instanceof zod_1.z.ZodNativeEnum);
+}
+function sanitizeZodTypeInner(schema, context) {
+    if (context.depth > context.maxDepth) {
+        throw createLimitError(context, `MCP schema exceeds maximum depth of ${context.maxDepth}`, 'depth', context.maxDepth, context.depth);
+    }
+    context.budget.nodes++;
+    if (context.budget.nodes > context.maxNodes) {
+        throw createLimitError(context, `MCP schema exceeds maximum node count of ${context.maxNodes}`, 'nodes', context.maxNodes, context.budget.nodes);
+    }
+    const sanitizeChild = (child, path) => sanitizeZodTypeInner(child, {
+        ...context,
+        path,
+        depth: context.depth + 1,
+    });
     if (schema instanceof zod_1.z.ZodNull) {
         return zod_1.z.string().optional();
     }
     if (schema instanceof zod_1.z.ZodNullable) {
-        return sanitizeZodType(schema.unwrap(), strict).optional();
+        return sanitizeChild(schema.unwrap(), `${context.path}?`).optional();
     }
     if (schema instanceof zod_1.z.ZodDiscriminatedUnion) {
         const disc = schema;
         const discriminator = disc.discriminator;
         const variants = [...disc.options.values()];
+        if (variants.length > context.maxUnionOptions) {
+            throw createLimitError(context, `MCP schema discriminated union exceeds maximum option count of ${context.maxUnionOptions}`, 'unionOptions', context.maxUnionOptions, variants.length);
+        }
         const actionMeta = [];
         const fieldMeta = new Map();
         for (const variant of variants) {
@@ -38,6 +172,10 @@ function sanitizeZodType(schema, strict = false) {
                 });
             }
         }
+        const mergedPropertyCount = fieldMeta.size + (actionMeta.length > 0 ? 1 : 0);
+        if (mergedPropertyCount > context.maxObjectProperties) {
+            throw createLimitError(context, `MCP schema object exceeds maximum property count of ${context.maxObjectProperties}`, 'objectProperties', context.maxObjectProperties, mergedPropertyCount);
+        }
         const mergedShape = {};
         if (actionMeta.length > 0) {
             const enumValues = actionMeta.map((a) => a.value);
@@ -47,8 +185,8 @@ function sanitizeZodType(schema, strict = false) {
                 .describe(actionDescParts.join(' | '));
         }
         for (const [fieldName, entries] of fieldMeta) {
-            const sanitizedField = sanitizeZodType(entries[0].type, strict).optional();
-            if (strict && entries.length > 1) {
+            const sanitizedField = sanitizeChild(entries[0].type, `${context.path}.${fieldName}`).optional();
+            if (context.strict && entries.length > 1) {
                 const unwrapOptional = (t) => t instanceof zod_1.z.ZodOptional ? unwrapOptional(t.unwrap()) : t;
                 const enumEntries = entries.filter((e) => {
                     return unwrapOptional(e.type) instanceof zod_1.z.ZodEnum;
@@ -76,7 +214,7 @@ function sanitizeZodType(schema, strict = false) {
             const withDesc = entries.filter((e) => !!e.description);
             const uniqueDescs = new Set(withDesc.map((d) => d.description));
             if (uniqueDescs.size > 1) {
-                if (strict) {
+                if (context.strict) {
                     const conflictDetails = withDesc
                         .map((d) => `  Action "${d.action}": "${d.description}"`)
                         .join('\n');
@@ -102,9 +240,12 @@ function sanitizeZodType(schema, strict = false) {
     if (schema instanceof zod_1.z.ZodUnion) {
         const options = schema
             .options;
+        if (options.length > context.maxUnionOptions) {
+            throw createLimitError(context, `MCP schema union exceeds maximum option count of ${context.maxUnionOptions}`, 'unionOptions', context.maxUnionOptions, options.length);
+        }
         const nonNull = options.filter((o) => !(o instanceof zod_1.z.ZodNull));
         const hadNull = nonNull.length < options.length;
-        const sanitized = nonNull.map((o) => sanitizeZodType(o, strict));
+        const sanitized = nonNull.map((o, index) => sanitizeChild(o, `${context.path}.union[${index}]`));
         if (sanitized.length === 0) {
             return zod_1.z.string().optional();
         }
@@ -116,26 +257,65 @@ function sanitizeZodType(schema, strict = false) {
     }
     if (schema instanceof zod_1.z.ZodObject) {
         const shape = schema.shape;
+        const entries = Object.entries(shape);
+        if (entries.length > context.maxObjectProperties) {
+            throw createLimitError(context, `MCP schema object exceeds maximum property count of ${context.maxObjectProperties}`, 'objectProperties', context.maxObjectProperties, entries.length);
+        }
         const newShape = {};
-        for (const [key, value] of Object.entries(shape)) {
-            newShape[key] = sanitizeZodType(value, strict);
+        for (const [key, value] of entries) {
+            newShape[key] = sanitizeChild(value, `${context.path}.${key}`);
         }
         return zod_1.z.object(newShape);
     }
+    if (schema instanceof zod_1.z.ZodLazy) {
+        return sanitizeChild(schema.schema, `${context.path}.lazy`);
+    }
     if (schema instanceof zod_1.z.ZodOptional) {
-        return sanitizeZodType(schema.unwrap(), strict).optional();
+        return sanitizeChild(schema.unwrap(), `${context.path}?`).optional();
     }
     if (schema instanceof zod_1.z.ZodArray) {
-        return zod_1.z.array(sanitizeZodType(schema.element, strict));
+        return zod_1.z.array(sanitizeChild(schema.element, `${context.path}[]`));
     }
     if (schema instanceof zod_1.z.ZodDefault) {
         const inner = schema._def.innerType;
-        return sanitizeZodType(inner, strict).default(schema._def.defaultValue());
+        return sanitizeChild(inner, `${context.path}.default`).default(schema._def.defaultValue());
     }
     if (schema instanceof zod_1.z.ZodRecord) {
-        return zod_1.z.record(sanitizeZodType(schema.valueSchema, strict));
+        return zod_1.z.record(sanitizeChild(schema.valueSchema, `${context.path}.*`));
+    }
+    if (schema instanceof zod_1.z.ZodEffects) {
+        return sanitizeChild(schema.innerType(), `${context.path}.effect`);
+    }
+    if (schema instanceof zod_1.z.ZodPipeline) {
+        const pipeline = schema;
+        return zod_1.z.pipeline(sanitizeChild(pipeline._def.in, `${context.path}.pipeline.in`), sanitizeChild(pipeline._def.out, `${context.path}.pipeline.out`));
     }
-    return schema;
+    if (schema instanceof zod_1.z.ZodReadonly) {
+        return sanitizeChild(schema.unwrap(), `${context.path}.readonly`);
+    }
+    if (schema instanceof zod_1.z.ZodBranded) {
+        return sanitizeChild(schema.unwrap(), `${context.path}.brand`);
+    }
+    if (schema instanceof zod_1.z.ZodCatch) {
+        return sanitizeChild(schema.removeCatch(), `${context.path}.catch`);
+    }
+    if (schema instanceof zod_1.z.ZodMap ||
+        schema instanceof zod_1.z.ZodSet ||
+        schema instanceof zod_1.z.ZodPromise ||
+        schema instanceof zod_1.z.ZodFunction ||
+        schema instanceof zod_1.z.ZodIntersection ||
+        schema instanceof zod_1.z.ZodTuple ||
+        schema instanceof zod_1.z.ZodNaN ||
+        schema instanceof zod_1.z.ZodBigInt ||
+        schema instanceof zod_1.z.ZodUndefined ||
+        schema instanceof zod_1.z.ZodNever ||
+        schema instanceof zod_1.z.ZodVoid ||
+        schema instanceof zod_1.z.ZodSymbol) {
+        throw createUnsupportedTypeError(context, schema);
+    }
+    if (isSupportedLeafSchema(schema))
+        return schema;
+    throw createUnsupportedTypeError(context, schema);
 }
 function ensureTopLevelObject(schema) {
     if (schema instanceof zod_1.z.ZodObject || schema instanceof zod_1.z.ZodRecord) {
@@ -146,14 +326,41 @@ function ensureTopLevelObject(schema) {
 function sanitizeInputSchema(schema) {
     return ensureTopLevelObject(sanitizeZodType(schema, true));
 }
-function sanitizeMcpToolSchemas(tools) {
-    for (const tool of Object.values(tools)) {
+function sanitizeMcpToolSchemas(tools, options = {}) {
+    for (const [name, tool] of Object.entries(tools)) {
         const t = tool;
-        if (t.inputSchema) {
-            t.inputSchema = ensureTopLevelObject(sanitizeZodType(t.inputSchema));
+        const budget = { nodes: 0 };
+        try {
+            if (t.inputSchema) {
+                t.inputSchema = ensureTopLevelObject(sanitizeZodType(t.inputSchema, false, {
+                    maxDepth: options.maxDepth,
+                    maxNodes: options.maxNodes,
+                    maxObjectProperties: options.maxObjectProperties,
+                    maxUnionOptions: options.maxUnionOptions,
+                    toolName: name,
+                    path: '$.inputSchema',
+                    budget,
+                }));
+            }
+            if (t.outputSchema) {
+                t.outputSchema = sanitizeZodType(t.outputSchema, false, {
+                    maxDepth: options.maxDepth,
+                    maxNodes: options.maxNodes,
+                    maxObjectProperties: options.maxObjectProperties,
+                    maxUnionOptions: options.maxUnionOptions,
+                    toolName: name,
+                    path: '$.outputSchema',
+                    budget,
+                });
+            }
         }
-        if (t.outputSchema) {
-            t.outputSchema = sanitizeZodType(t.outputSchema);
+        catch (error) {
+            if (error instanceof McpSchemaSanitizationError) {
+                delete tools[name];
+                options.onError?.(error);
+                continue;
+            }
+            throw error;
         }
     }
     return tools;

package/dist/agent/sanitize-mcp-schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize-mcp-schemas.js","sourceRoot":"","sources":["../../src/agent/sanitize-mcp-schemas.ts"],"names":[],"mappings":";;AAyBA,0CA8LC;AAQD,oDAOC;AAeD,kDAEC;AAcD,wDAYC;AAlQD,6BAAwB;AAUxB,SAAgB,eAAe,CAAC,MAAoB,EAAE,MAAM,GAAG,KAAK;IAEnE,IAAI,MAAM,YAAY,OAAC,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,eAAe,CAAE,MAAsC,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7F,CAAC;IAMD,IAAI,MAAM,YAAY,OAAC,CAAC,qBAAqB,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,MAA4E,CAAC;QAC1F,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAsC,CAAC;QAGjF,MAAM,UAAU,GAAmD,EAAE,CAAC;QACtE,MAAM,SAAS,GAAG,IAAI,GAAG,EAGtB,CAAC;QAEJ,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,WAAW,GAAG,EAAE,CAAC;YAErB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,IAAI,GAAG,KAAK,aAAa,IAAI,KAAK,YAAY,OAAC,CAAC,UAAU,EAAE,CAAC;oBAC5D,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAClC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBACzE,CAAC;YACF,CAAC;YAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,IAAI,GAAG,KAAK,aAAa;oBAAE,SAAS;gBACpC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAChD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC;oBACxB,MAAM,EAAE,WAAW;oBACnB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,IAAI,EAAE,KAAK;iBACX,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAGD,MAAM,WAAW,GAAkB,EAAE,CAAC;QAGtC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5C,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CACjE,CAAC;YACF,WAAW,CAAC,aAAa,CAAC,GAAG,OAAC;iBAC5B,IAAI,CAAC,UAAmC,CAAC;iBACzC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC;QAGD,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;YAC9C,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAK3E,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,cAAc,GAAG,CAAC,CAAe,EAAgB,EAAE,CACxD,CAAC,YAAY,OAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,EAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAE7E,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;oBACxC,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,OAAC,CAAC,OAAO,CAAC;gBACpD,CAAC,CAAC,CAAC;gBACH,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;wBACvC,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;wBACnC,OAAQ,GAAwC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACnF,CAAC,CAAC,CAAC;oBACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;oBACxC,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;wBAC3B,MAAM,eAAe,GAAG,WAAW;6BACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;4BACV,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;4BACnC,MAAM,IAAI,GAAI,GAAwC,CAAC,OAAO,CAAC;4BAC/D,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;wBACvD,CAAC,CAAC;6BACD,IAAI,CAAC,IAAI,CAAC,CAAC;wBACb,MAAM,IAAI,KAAK,CACd,4BAA4B,SAAS,6BAA6B;4BACjE,GAAG,eAAe,IAAI;4BACtB,iEAAiE,CAClE,CAAC;oBACH,CAAC;gBACF,CAAC;YACF,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC9B,CAAC,CAAC,EAA2C,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAC/D,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YAEhE,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,MAAM,EAAE,CAAC;oBACZ,MAAM,eAAe,GAAG,QAAQ;yBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,WAAW,GAAG,CAAC;yBACxD,IAAI,CAAC,IAAI,CAAC,CAAC;oBACb,MAAM,IAAI,KAAK,CACd,mCAAmC,SAAS,6BAA6B;wBACxE,GAAG,eAAe,IAAI;wBACtB,6EAA6E,CAC9E,CAAC;gBACH,CAAC;gBAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvF,WAAW,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5D,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;gBAI/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC;gBAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,YAAY,UAAU,EAAE,CAAC;gBACtF,WAAW,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACP,WAAW,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC;YACzC,CAAC;QACF,CAAC;QAED,OAAO,OAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,OAAO,GAAI,MAAwD;aACvE,OAAyB,CAAC;QAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAChD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAEjE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAE5B,OAAO,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,KAAK,GAAG,OAAC,CAAC,KAAK,CAAC,SAA4D,CAAC,CAAC;QACpF,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,GAAI,MAAqC,CAAC,KAAK,CAAC;QAC3D,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,OAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,eAAe,CAAE,MAAsC,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7F,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,OAAC,CAAC,KAAK,CAAC,eAAe,CAAE,MAAmC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACvF,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,KAAK,GAAI,MAAqC,CAAC,IAAI,CAAC,SAAS,CAAC;QACpE,OAAO,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAC3C,MAAqC,CAAC,IAAI,CAAC,YAAY,EAAE,CAC1D,CAAC;IACH,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,OAAC,CAAC,MAAM,CACd,eAAe,CAAE,MAAiD,CAAC,WAAW,EAAE,MAAM,CAAC,CACvF,CAAC;IACH,CAAC;IAGD,OAAO,MAAM,CAAC;AACf,CAAC;AAQD,SAAgB,oBAAoB,CAAC,MAAoB;IACxD,IAAI,MAAM,YAAY,OAAC,CAAC,SAAS,IAAI,MAAM,YAAY,OAAC,CAAC,SAAS,EAAE,CAAC;QACpE,OAAO,MAAM,CAAC;IACf,CAAC;IAGD,OAAO,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9B,CAAC;AAeD,SAAgB,mBAAmB,CAAyB,MAAS;IACpE,OAAO,oBAAoB,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAM,CAAC;AACjE,CAAC;AAcD,SAAgB,sBAAsB,CAAC,KAAiB;IACvD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,IAAmE,CAAC;QAC9E,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACnB,CAAC,CAAC,WAAW,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;YACpB,CAAC,CAAC,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC"}
+{"version":3,"file":"sanitize-mcp-schemas.js","sourceRoot":"","sources":["../../src/agent/sanitize-mcp-schemas.ts"],"names":[],"mappings":";;;AA+LA,0EAYC;AAUD,0CAgBC;AA0YD,oDAOC;AAeD,kDAEC;AAcD,wDAiDC;AAvrBD,6BAAwB;AAEX,QAAA,oBAAoB,GAAG,EAAE,CAAC;AAC1B,QAAA,oBAAoB,GAAG,KAAK,CAAC;AAC7B,QAAA,gCAAgC,GAAG,GAAG,CAAC;AACvC,QAAA,4BAA4B,GAAG,GAAG,CAAC;AAShD,MAAa,0BAA2B,SAAQ,KAAK;IAG1C;IAFV,YACC,OAAe,EACN,OASR;QAED,KAAK,CAAC,OAAO,CAAC,CAAC;QAXN,YAAO,GAAP,OAAO,CASf;QAGD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC1C,CAAC;CACD;AAjBD,gEAiBC;AA6CD,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAoC,EACpC,IAAY,EACZ,KAAa,EACb,OAAe,EACf,SAA6B,EAC7B,KAAa,EACb,KAAc;IAEd,MAAM,IAAI,0BAA0B,CAAC,OAAO,EAAE;QAC7C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI;QACJ,KAAK;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK;QACL,SAAS;QACT,KAAK;KACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC9B,KAAc,EACd,IAAY,EACZ,KAAa,EACb,OAAoC;IAEpC,IAAI,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC9B,yBAAyB,CACxB,OAAO,EACP,IAAI,EACJ,KAAK,EACL,uCAAuC,OAAO,CAAC,QAAQ,EAAE,EACzD,OAAO,EACP,OAAO,CAAC,QAAQ,EAChB,KAAK,CACL,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7C,yBAAyB,CACxB,OAAO,EACP,IAAI,EACJ,KAAK,EACL,4CAA4C,OAAO,CAAC,QAAQ,EAAE,EAC9D,OAAO,EACP,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CACpB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,sBAAsB,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,CAAC;QACD,OAAO;IACR,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAE7B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QACrD,IAAI,aAAa,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACjD,yBAAyB,CACxB,OAAO,EACP,GAAG,IAAI,aAAa,EACpB,KAAK,GAAG,CAAC,EACT,uDAAuD,OAAO,CAAC,mBAAmB,EAAE,EACpF,kBAAkB,EAClB,OAAO,CAAC,mBAAmB,EAC3B,aAAa,CACb,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;YAClF,yBAAyB,CACxB,OAAO,EACP,GAAG,IAAI,IAAI,QAAQ,EAAE,EACrB,KAAK,GAAG,CAAC,EACT,oDAAoD,OAAO,CAAC,eAAe,EAAE,EAC7E,cAAc,EACd,OAAO,CAAC,eAAe,EACvB,YAAY,CAAC,MAAM,CACnB,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,sBAAsB,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;AACF,CAAC;AAED,SAAgB,+BAA+B,CAC9C,MAAe,EACf,UAAqC,EAAE;IAEvC,sBAAsB,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,EAAE;QAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,4BAAoB;QAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,4BAAoB;QAClD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,wCAAgC;QACpF,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,oCAA4B;QACxE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;KACpB,CAAC,CAAC;AACJ,CAAC;AAUD,SAAgB,eAAe,CAC9B,MAAoB,EACpB,MAAM,GAAG,KAAK,EACd,UAAkC,EAAE;IAEpC,OAAO,oBAAoB,CAAC,MAAM,EAAE;QACnC,MAAM;QACN,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,GAAG;QACzB,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,4BAAoB;QAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,4BAAoB;QAClD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,wCAAgC;QACpF,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,oCAA4B;QACxE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;KACtC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACxB,OAAwB,EACxB,OAAe,EACf,SAA6B,EAC7B,KAAa,EACb,KAAc;IAEd,OAAO,IAAI,0BAA0B,CAAC,OAAO,EAAE;QAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK;QACL,SAAS;QACT,KAAK;KACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAClC,OAAwB,EACxB,MAAoB;IAEpB,MAAM,UAAU,GAAG,MAAM,CAAC,IAA8B,CAAC;IACzD,MAAM,OAAO,GACZ,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;IACzF,OAAO,IAAI,0BAA0B,CAAC,4CAA4C,OAAO,EAAE,EAAE;QAC5F,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,iBAAiB;QAC5B,OAAO;KACP,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAoB;IAClD,OAAO,CACN,MAAM,YAAY,OAAC,CAAC,SAAS;QAC7B,MAAM,YAAY,OAAC,CAAC,SAAS;QAC7B,MAAM,YAAY,OAAC,CAAC,UAAU;QAC9B,MAAM,YAAY,OAAC,CAAC,OAAO;QAC3B,MAAM,YAAY,OAAC,CAAC,MAAM;QAC1B,MAAM,YAAY,OAAC,CAAC,UAAU;QAC9B,MAAM,YAAY,OAAC,CAAC,UAAU;QAC9B,MAAM,YAAY,OAAC,CAAC,OAAO;QAC3B,MAAM,YAAY,OAAC,CAAC,aAAa,CACjC,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAoB,EAAE,OAAwB;IAC3E,IAAI,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,gBAAgB,CACrB,OAAO,EACP,uCAAuC,OAAO,CAAC,QAAQ,EAAE,EACzD,OAAO,EACP,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,KAAK,CACb,CAAC;IACH,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,gBAAgB,CACrB,OAAO,EACP,4CAA4C,OAAO,CAAC,QAAQ,EAAE,EAC9D,OAAO,EACP,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CACpB,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAE,IAAY,EAAgB,EAAE,CACzE,oBAAoB,CAAC,KAAK,EAAE;QAC3B,GAAG,OAAO;QACV,IAAI;QACJ,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC;KACxB,CAAC,CAAC;IAGJ,IAAI,MAAM,YAAY,OAAC,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,aAAa,CAClB,MAAsC,CAAC,MAAM,EAAE,EAChD,GAAG,OAAO,CAAC,IAAI,GAAG,CAClB,CAAC,QAAQ,EAAE,CAAC;IACd,CAAC;IAMD,IAAI,MAAM,YAAY,OAAC,CAAC,qBAAqB,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,MAA4E,CAAC;QAC1F,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAsC,CAAC;QACjF,IAAI,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;YAC/C,MAAM,gBAAgB,CACrB,OAAO,EACP,kEAAkE,OAAO,CAAC,eAAe,EAAE,EAC3F,cAAc,EACd,OAAO,CAAC,eAAe,EACvB,QAAQ,CAAC,MAAM,CACf,CAAC;QACH,CAAC;QAGD,MAAM,UAAU,GAAmD,EAAE,CAAC;QACtE,MAAM,SAAS,GAAG,IAAI,GAAG,EAGtB,CAAC;QAEJ,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,WAAW,GAAG,EAAE,CAAC;YAErB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,IAAI,GAAG,KAAK,aAAa,IAAI,KAAK,YAAY,OAAC,CAAC,UAAU,EAAE,CAAC;oBAC5D,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAClC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBACzE,CAAC;YACF,CAAC;YAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,IAAI,GAAG,KAAK,aAAa;oBAAE,SAAS;gBACpC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAChD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC;oBACxB,MAAM,EAAE,WAAW;oBACnB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,IAAI,EAAE,KAAK;iBACX,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,MAAM,mBAAmB,GAAG,SAAS,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACvD,MAAM,gBAAgB,CACrB,OAAO,EACP,uDAAuD,OAAO,CAAC,mBAAmB,EAAE,EACpF,kBAAkB,EAClB,OAAO,CAAC,mBAAmB,EAC3B,mBAAmB,CACnB,CAAC;QACH,CAAC;QAGD,MAAM,WAAW,GAAkB,EAAE,CAAC;QAGtC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5C,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CACjE,CAAC;YACF,WAAW,CAAC,aAAa,CAAC,GAAG,OAAC;iBAC5B,IAAI,CAAC,UAAmC,CAAC;iBACzC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC;QAGD,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;YAC9C,MAAM,cAAc,GAAG,aAAa,CACnC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EACf,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAC9B,CAAC,QAAQ,EAAE,CAAC;YAKb,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,cAAc,GAAG,CAAC,CAAe,EAAgB,EAAE,CACxD,CAAC,YAAY,OAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,EAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAE7E,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;oBACxC,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,OAAC,CAAC,OAAO,CAAC;gBACpD,CAAC,CAAC,CAAC;gBACH,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;wBACvC,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;wBACnC,OAAQ,GAAwC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACnF,CAAC,CAAC,CAAC;oBACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;oBACxC,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;wBAC3B,MAAM,eAAe,GAAG,WAAW;6BACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;4BACV,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;4BACnC,MAAM,IAAI,GAAI,GAAwC,CAAC,OAAO,CAAC;4BAC/D,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;wBACvD,CAAC,CAAC;6BACD,IAAI,CAAC,IAAI,CAAC,CAAC;wBACb,MAAM,IAAI,KAAK,CACd,4BAA4B,SAAS,6BAA6B;4BACjE,GAAG,eAAe,IAAI;4BACtB,iEAAiE,CAClE,CAAC;oBACH,CAAC;gBACF,CAAC;YACF,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC9B,CAAC,CAAC,EAA2C,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAC/D,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YAEhE,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,MAAM,eAAe,GAAG,QAAQ;yBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,WAAW,GAAG,CAAC;yBACxD,IAAI,CAAC,IAAI,CAAC,CAAC;oBACb,MAAM,IAAI,KAAK,CACd,mCAAmC,SAAS,6BAA6B;wBACxE,GAAG,eAAe,IAAI;wBACtB,6EAA6E,CAC9E,CAAC;gBACH,CAAC;gBAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvF,WAAW,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5D,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;gBAI/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC;gBAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,YAAY,UAAU,EAAE,CAAC;gBACtF,WAAW,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACP,WAAW,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC;YACzC,CAAC;QACF,CAAC;QAED,OAAO,OAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,OAAO,GAAI,MAAwD;aACvE,OAAyB,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;YAC9C,MAAM,gBAAgB,CACrB,OAAO,EACP,oDAAoD,OAAO,CAAC,eAAe,EAAE,EAC7E,cAAc,EACd,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,MAAM,CACd,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAChD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAC1C,aAAa,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,UAAU,KAAK,GAAG,CAAC,CACnD,CAAC;QAEF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAE5B,OAAO,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,KAAK,GAAG,OAAC,CAAC,KAAK,CAAC,SAA4D,CAAC,CAAC;QACpF,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,GAAI,MAAqC,CAAC,KAAK,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAClD,MAAM,gBAAgB,CACrB,OAAO,EACP,uDAAuD,OAAO,CAAC,mBAAmB,EAAE,EACpF,kBAAkB,EAClB,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,MAAM,CACd,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACpC,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,OAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,aAAa,CAAE,MAAkC,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC;IAC1F,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,aAAa,CAClB,MAAsC,CAAC,MAAM,EAAE,EAChD,GAAG,OAAO,CAAC,IAAI,GAAG,CAClB,CAAC,QAAQ,EAAE,CAAC;IACd,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,OAAC,CAAC,KAAK,CACb,aAAa,CAAE,MAAmC,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAChF,CAAC;IACH,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,KAAK,GAAI,MAAqC,CAAC,IAAI,CAAC,SAAS,CAAC;QACpE,OAAO,aAAa,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,OAAO,CAC5D,MAAqC,CAAC,IAAI,CAAC,YAAY,EAAE,CAC1D,CAAC;IACH,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,OAAC,CAAC,MAAM,CACd,aAAa,CACX,MAAiD,CAAC,WAAW,EAC9D,GAAG,OAAO,CAAC,IAAI,IAAI,CACnB,CACD,CAAC;IACH,CAAC;IAID,IAAI,MAAM,YAAY,OAAC,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,aAAa,CAClB,MAAqC,CAAC,SAAS,EAAE,EAClD,GAAG,OAAO,CAAC,IAAI,SAAS,CACxB,CAAC;IACH,CAAC;IAGD,IAAI,MAAM,YAAY,OAAC,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAmD,CAAC;QACrE,OAAO,OAAC,CAAC,QAAQ,CAChB,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,cAAc,CAAC,EAC9D,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,eAAe,CAAC,CAChE,CAAC;IACH,CAAC;IAKD,IAAI,MAAM,YAAY,OAAC,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,aAAa,CAClB,MAAsC,CAAC,MAAM,EAAE,EAChD,GAAG,OAAO,CAAC,IAAI,WAAW,CAC1B,CAAC;IACH,CAAC;IACD,IAAI,MAAM,YAAY,OAAC,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,aAAa,CAClB,MAA6C,CAAC,MAAM,EAAE,EACvD,GAAG,OAAO,CAAC,IAAI,QAAQ,CACvB,CAAC;IACH,CAAC;IACD,IAAI,MAAM,YAAY,OAAC,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,aAAa,CAClB,MAAmC,CAAC,WAAW,EAAE,EAClD,GAAG,OAAO,CAAC,IAAI,QAAQ,CACvB,CAAC;IACH,CAAC;IAED,IACC,MAAM,YAAY,OAAC,CAAC,MAAM;QAC1B,MAAM,YAAY,OAAC,CAAC,MAAM;QAC1B,MAAM,YAAY,OAAC,CAAC,UAAU;QAC9B,MAAM,YAAY,OAAC,CAAC,WAAW;QAC/B,MAAM,YAAY,OAAC,CAAC,eAAe;QACnC,MAAM,YAAY,OAAC,CAAC,QAAQ;QAC5B,MAAM,YAAY,OAAC,CAAC,MAAM;QAC1B,MAAM,YAAY,OAAC,CAAC,SAAS;QAC7B,MAAM,YAAY,OAAC,CAAC,YAAY;QAChC,MAAM,YAAY,OAAC,CAAC,QAAQ;QAC5B,MAAM,YAAY,OAAC,CAAC,OAAO;QAC3B,MAAM,YAAY,OAAC,CAAC,SAAS,EAC5B,CAAC;QACF,MAAM,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAGD,IAAI,qBAAqB,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAEjD,MAAM,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAQD,SAAgB,oBAAoB,CAAC,MAAoB;IACxD,IAAI,MAAM,YAAY,OAAC,CAAC,SAAS,IAAI,MAAM,YAAY,OAAC,CAAC,SAAS,EAAE,CAAC;QACpE,OAAO,MAAM,CAAC;IACf,CAAC;IAGD,OAAO,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9B,CAAC;AAeD,SAAgB,mBAAmB,CAAyB,MAAS;IACpE,OAAO,oBAAoB,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAM,CAAC;AACjE,CAAC;AAcD,SAAgB,sBAAsB,CACrC,KAAiB,EACjB,UAMI,EAAE;IAEN,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,IAAmE,CAAC;QAC9E,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACJ,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnB,CAAC,CAAC,WAAW,GAAG,oBAAoB,CACnC,eAAe,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE;oBACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;oBAChD,eAAe,EAAE,OAAO,CAAC,eAAe;oBACxC,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,eAAe;oBACrB,MAAM;iBACN,CAAC,CACF,CAAC;YACH,CAAC;YACD,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBACpB,CAAC,CAAC,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE;oBACvD,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;oBAChD,eAAe,EAAE,OAAO,CAAC,eAAe;oBACxC,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,gBAAgB;oBACtB,MAAM;iBACN,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;gBACjD,OAAQ,KAAiC,CAAC,IAAI,CAAC,CAAC;gBAChD,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;gBACzB,SAAS;YACV,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/agent/sub-agent-factory.d.ts

@@ -12,4 +12,5 @@ export interface SubAgentOptions {
 }
 declare const SUB_AGENT_PROTOCOL = "## Output Discipline\n- You report to a parent agent, not a human. Be terse.\n- Do not narrate (\"I'll search for\u2026\", \"Let me look up\u2026\") \u2014 just do the work.\n- No emojis, filler phrases, or markdown headers in your text output.\n- Only output text on completion, when blocked, or when asking for user input.\n\n### Structured Result\nReturn a concise result summary: IDs created, statuses, counts, errors encountered.\n\n### Diagnostic Context (when relevant)\nIf you encountered errors, retried operations, or made non-obvious decisions, add a brief\ndiagnostic section at the end explaining:\n- What approaches you tried and why they failed\n- What blockers remain (missing credentials, permissions, API errors)\n- What assumptions you made\n\nKeep diagnostics to 2-3 sentences maximum. Omit entirely when the task succeeded cleanly.\n\n### Delegate Rules\n- One tool call at a time unless truly independent. Minimum tool calls needed.\n- You cannot delegate to other agents or create plans.\n- If you are stuck or need information only a human can provide (e.g. a chat ID, external resource name, account label), use the `ask-user` tool. Do not retry the same failing approach more than twice \u2014 ask the user instead. Never solicit API keys, tokens, or other secrets through `ask-user` \u2014 route credential collection through the credentials/browser-credential-setup flows instead.\n- Never ask the user to paste passwords, API keys, client secrets, tokens, cookies, connection strings, or private keys into chat or ask-user responses. Route secret entry through credential setup, browser credential setup, or existing credential selection instead.";
 export { SUB_AGENT_PROTOCOL };
+export declare function buildSubAgentPrompt(role: string, instructions: string, timeZone?: string): string;
 export declare function createSubAgent(options: SubAgentOptions): Agent;

package/dist/agent/sub-agent-factory.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SUB_AGENT_PROTOCOL = void 0;
+exports.buildSubAgentPrompt = buildSubAgentPrompt;
 exports.createSubAgent = createSubAgent;
 const agent_1 = require("@mastra/core/agent");
 const credential_guardrails_prompt_1 = require("./credential-guardrails.prompt");

package/dist/agent/sub-agent-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sub-agent-factory.js","sourceRoot":"","sources":["../../src/agent/sub-agent-factory.ts"],"names":[],"mappings":";;;AA4DA,wCA6BC;AAzFD,8CAA2C;AAG3C,iFAAsE;AACtE,qDAA+E;AAC/E,mDAAqD;AACrD,oEAA0F;AAsB1F,MAAM,kBAAkB,GAAG,GAAG,yCAAwB;;;;;;;;;;;;;;;;;IAiBlD,kCAAiB;IACjB,mDAAoB,EAAE,CAAC;AAElB,gDAAkB;AAE3B,SAAS,mBAAmB,CAAC,IAAY,EAAE,YAAoB,EAAE,QAAiB;IACjF,OAAO,GAAG,kBAAkB;EAC3B,IAAA,kCAAkB,EAAC,QAAQ,CAAC;;qCAEO,IAAI;;;EAGvC,YAAY,EAAE,CAAC;AACjB,CAAC;AAED,SAAgB,cAAc,CAAC,OAAwB;IACtD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEpF,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAG,IAAI,aAAK,CAAC;QACvB,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,cAAc,IAAI,EAAE;QAC1B,YAAY,EAAE;YACb,IAAI,EAAE,QAAiB;YACvB,OAAO,EAAE,YAAY;YACrB,eAAe,EAAE;gBAChB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;aAClD;SACD;QACD,KAAK,EAAE,OAAO;QACd,KAAK;KACL,CAAC,CAAC;IAEH,IAAA,uCAAmB,EAClB,QAAQ,EACR,IAAA,yCAAqB,EAAC;QACrB,YAAY;QACZ,KAAK;QACL,OAAO;KACP,CAAC,CACF,CAAC;IAEF,OAAO,KAAK,CAAC;AACd,CAAC"}
+{"version":3,"file":"sub-agent-factory.js","sourceRoot":"","sources":["../../src/agent/sub-agent-factory.ts"],"names":[],"mappings":";;;AAkDA,kDAQC;AAED,wCA6BC;AAzFD,8CAA2C;AAG3C,iFAAsE;AACtE,qDAA+E;AAC/E,mDAAqD;AACrD,oEAA0F;AAsB1F,MAAM,kBAAkB,GAAG,GAAG,yCAAwB;;;;;;;;;;;;;;;;;IAiBlD,kCAAiB;IACjB,mDAAoB,EAAE,CAAC;AAElB,gDAAkB;AAE3B,SAAgB,mBAAmB,CAAC,IAAY,EAAE,YAAoB,EAAE,QAAiB;IACxF,OAAO,GAAG,kBAAkB;EAC3B,IAAA,kCAAkB,EAAC,QAAQ,CAAC;;qCAEO,IAAI;;;EAGvC,YAAY,EAAE,CAAC;AACjB,CAAC;AAED,SAAgB,cAAc,CAAC,OAAwB;IACtD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEpF,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAG,IAAI,aAAK,CAAC;QACvB,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,cAAc,IAAI,EAAE;QAC1B,YAAY,EAAE;YACb,IAAI,EAAE,QAAiB;YACvB,OAAO,EAAE,YAAY;YACrB,eAAe,EAAE;gBAChB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;aAClD;SACD;QACD,KAAK,EAAE,OAAO;QACd,KAAK;KACL,CAAC,CAAC;IAEH,IAAA,uCAAmB,EAClB,QAAQ,EACR,IAAA,yCAAqB,EAAC;QACrB,YAAY;QACZ,KAAK;QACL,OAAO;KACP,CAAC,CACF,CAAC;IAEF,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/agent/system-prompt.d.ts

@@ -2,7 +2,7 @@ import type { LocalGatewayStatus } from '../types';
 interface SystemPromptOptions {
     researchMode?: boolean;
     webhookBaseUrl?: string;
-    filesystemAccess?: boolean;
+    formBaseUrl?: string;
     localGateway?: LocalGatewayStatus;
     toolSearchEnabled?: boolean;
     licenseHints?: string[];

package/dist/agent/system-prompt.js

@@ -3,9 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getDateTimeSection = getDateTimeSection;
 exports.getSystemPrompt = getSystemPrompt;
 const luxon_1 = require("luxon");
+const computer_use_prompt_1 = require("./computer-use-prompt");
 const credential_guardrails_prompt_1 = require("./credential-guardrails.prompt");
 const shared_prompts_1 = require("./shared-prompts");
-const BROWSER_USE_EXTENSION_URL = 'https://chromewebstore.google.com/detail/n8n-browser-use/cegmdpndekdfpnafgacidejijecomlhh';
 function getDateTimeSection(timeZone) {
     const now = timeZone ? luxon_1.DateTime.now().setZone(timeZone) : luxon_1.DateTime.now();
     const isoTime = now.toISO({ includeOffset: true });
@@ -16,101 +16,21 @@ function getDateTimeSection(timeZone) {
 The user's current local date and time is: ${isoTime}${tzLabel}.
 When you need to reference "now", use this date and time.`;
 }
-function getInstanceInfoSection(webhookBaseUrl) {
+function getInstanceInfoSection(webhookBaseUrl, formBaseUrl) {
     return `
 ## Instance Info
 
 Webhook base URL: ${webhookBaseUrl}
+Form base URL: ${formBaseUrl}
 
 Some trigger nodes expose HTTP endpoints. Always share the full production URL with the user after building a workflow that uses one of these triggers. Each type has a distinct URL pattern:
 
 - **Webhook Trigger**: ${webhookBaseUrl}/{path} (where {path} is the node's webhook path parameter).
-- **Form Trigger**: ${webhookBaseUrl}/{path} (or ${webhookBaseUrl}/{webhookId} if no custom path is set). Same pattern as Webhook — no /chat suffix.
+- **Form Trigger**: ${formBaseUrl}/{path} (or ${formBaseUrl}/{webhookId} if no custom path is set). The Form Trigger lives under /form/, NOT /webhook/ — they are separate URL prefixes. Do NOT use the Webhook base URL for Form Triggers.
 - **Chat Trigger**: ${webhookBaseUrl}/{webhookId}/chat (where {webhookId} is the node's unique webhook ID, visible in the workflow JSON). The /chat suffix is unique to Chat Trigger — do NOT append it to Form Trigger or Webhook URLs. The public chat UI is only accessible to end users when the node's "public" parameter is true and the workflow has been published. (This applies only to end-user HTTP access — your own testing via \`executions(action="run")\` and \`verify-built-workflow\` works regardless of publish state.) Do NOT guess the webhookId — read the workflow to find it.
 
 **These URLs are for sharing with the user only.** Do NOT include them in \`build-workflow-with-agent\` task descriptions — the builder cannot reach the n8n instance via HTTP and will fail if it tries to curl/fetch these URLs.`;
 }
-function getFilesystemSection(filesystemAccess, localGateway, webhookBaseUrl) {
-    if (localGateway?.status === 'disconnected') {
-        const capabilityLines = [];
-        if (localGateway.capabilities.includes('filesystem')) {
-            capabilityLines.push('- **Filesystem access** — browse, read, and search project files');
-        }
-        if (localGateway.capabilities.includes('browser')) {
-            capabilityLines.push("- **Browser control** — automate browser interactions on the user's machine");
-        }
-        const capList = capabilityLines.length > 0
-            ? capabilityLines.join('\n')
-            : '- Local machine access capabilities';
-        const instanceUrl = webhookBaseUrl ? new URL(webhookBaseUrl).origin : '<your-instance-url>';
-        return `
-## Computer Use (Not Connected)
-
-A **Computer Use** can connect this n8n instance to the user's local machine, providing:
-${capList}
-
-The gateway is not currently connected. When the user asks for something that requires local machine access (reading files, browsing, etc.), let them know they can connect by either:
-
-1. **Run via CLI:** \`npx @n8n/computer-use ${instanceUrl}\`
-
-Do NOT attempt to use Computer Use tools — they are not available until the gateway connects.`;
-    }
-    if (filesystemAccess) {
-        return `
-## Project Filesystem Access
-
-You have read-only access to the user's project files via the \`filesystem\` tool with actions: \`tree\`, \`search\`, \`read\`, \`list\`. Explore the project before building workflows that depend on user data shapes.
-
-Keep exploration shallow — start at depth 1-2, prefer \`search\` over browsing, read specific files not whole directories.`;
-    }
-    return `
-## No Filesystem Access
-
-You do NOT have access to the user's project files. The filesystem tool is not available. Do not attempt to use it or claim you can browse the user's codebase.`;
-}
-function getBrowserSection(browserAvailable, localGateway) {
-    if (!browserAvailable) {
-        if (localGateway?.status === 'disconnected') {
-            return `
-
-## Browser Automation (Unavailable)
-
-Browser tools require both the Computer Use daemon (see above) **and** the n8n Browser Use Chrome extension. If the user asks for browser automation, tell them to start the daemon and install the extension from the Chrome Web Store: ${BROWSER_USE_EXTENSION_URL}`;
-        }
-        if (localGateway?.status === 'connected') {
-            return `
-
-## Browser Automation (Disabled in Computer Use)
-
-Browser tools are not enabled in the user's Computer Use configuration. If the user asks for browser automation, tell them to (1) enable browser tools in their Computer Use config, and (2) install the n8n Browser Use Chrome extension from the Chrome Web Store: ${BROWSER_USE_EXTENSION_URL}`;
-        }
-        return '';
-    }
-    return `
-
-## Browser Automation
-
-You can control the user's browser using the browser_* tools. Since this is their real browser, you share it with them.
-
-### Handing control to the user
-
-When the user needs to act in the browser, **end your turn** with a clear message explaining what they should do. Resume after they reply. Hand off when:
-- **Authentication** — login pages, OAuth, SSO, 2FA/MFA prompts
-- **CAPTCHAs or visual challenges** — you cannot solve these
-- **Accessing downloads** — you can click download buttons, but you cannot open or read downloaded files; ask the user to open the file and share the content you need
-- **Sensitive content on screen** — passwords, tokens, secrets visible in the browser
-- **User requests manual control** — they explicitly want to do something themselves
-
-After the user confirms they're done, take a snapshot to verify before continuing.
-
-### Secrets and sensitive data
-
-**NEVER include passwords, API keys, tokens, or secrets in your chat messages** — even if visible on a page. If the user asks you to retrieve a secret, tell them to read it directly from their browser.
-
-### When browser tools fail at runtime
-
-If a browser_* tool call fails because the browser is unreachable (e.g. connection lost, extension not responding), ask the user to verify the **n8n Browser Use** Chrome extension is installed and connected. If needed, they can reinstall from the Chrome Web Store: ${BROWSER_USE_EXTENSION_URL}`;
-}
 function getReadOnlySection(branchReadOnly) {
     if (!branchReadOnly)
         return '';
@@ -128,16 +48,16 @@ The following operations remain available:
 - Publishing/unpublishing (activating/deactivating) workflows
 - Setting up, editing, and deleting credentials
 - Restoring workflow versions
-- Browsing the filesystem and fetching URLs
+- Browsing the filesystem, fetching URLs, and searching the web
 
 If the user asks for a blocked operation, explain that the instance is in read-only mode. Suggest they make the changes on a development or writable environment, push to version control, and pull the changes to this instance.
 `;
 }
 function getSystemPrompt(options = {}) {
-    const { researchMode, webhookBaseUrl, filesystemAccess, localGateway, toolSearchEnabled, licenseHints, timeZone, browserAvailable, branchReadOnly, } = options;
+    const { researchMode, webhookBaseUrl, formBaseUrl, localGateway, toolSearchEnabled, licenseHints, timeZone, browserAvailable, branchReadOnly, } = options;
     return `You are the n8n Instance Agent — an AI assistant embedded in an n8n instance. You help users build, run, debug, and manage workflows through natural language.
 ${getDateTimeSection(timeZone)}
-${webhookBaseUrl ? getInstanceInfoSection(webhookBaseUrl) : ''}
+${webhookBaseUrl && formBaseUrl ? getInstanceInfoSection(webhookBaseUrl, formBaseUrl) : ''}
 
 You have access to workflow, execution, and credential tools plus a specialized workflow builder. You also have delegation capabilities for complex tasks, and may have access to MCP tools for extended capabilities.
 
@@ -165,7 +85,7 @@ When \`credentials(action="setup")\` returns \`needsBrowserSetup=true\`, call \`
 
 Never use \`delegate\` to build, patch, fix, or update workflows — delegate does not have access to the builder sandbox, verification, or submit tools.
 
-To edit an existing workflow, call \`build-workflow-with-agent\` directly with \`bypassPlan: true\`, the existing \`workflowId\`, a one-sentence \`reason\`, and a \`task\` spec describing what to change. The orchestrator verifies the result afterwards via \`verify-built-workflow\` when the trigger is mockable (see **Post-build flow**). Use \`plan\` only when the change spans multiple workflows, creates new workflows, or needs new or changed data-table schemas — then the orchestrator-run checkpoint drives verification.
+To edit an existing workflow, call \`build-workflow-with-agent\` directly with \`bypassPlan: true\`, the existing \`workflowId\`, a one-sentence \`reason\`, and a \`task\` spec describing what to change. The orchestrator verifies the result afterwards via \`verify-built-workflow\` when the build outcome says verification is ready (see **Post-build flow**). Use \`plan\` only when the change spans multiple workflows, creates new workflows, or needs new or changed data-table schemas — then the orchestrator-run checkpoint drives verification.
 
 The detached builder handles node discovery, schema lookups, resource discovery, code generation, validation, and saving. Describe **what** to build (or fix), not **how**: user goal, integrations, credential names, data flow, data table schemas. Don't specify node types or parameter configurations. Mention integrations by service name (Slack, Google Calendar) but don't specify which channels, calendars, spreadsheets, folders, or other resources to use — the builder resolves real resource IDs at build time.
 
@@ -177,21 +97,22 @@ Always pass \`conversationContext\` when spawning background agents (\`build-wor
 
 **After spawning any background agent** (\`build-workflow-with-agent\`, \`delegate\`, \`plan\`, or \`create-tasks\`): do not write any text. The task card shows the user what's being built or done; restating it (e.g. the workflow name, what the agent will do) is redundant. Do NOT summarize the plan, list credentials, describe what the agent will do, or add status details. The agent's progress is already visible to the user in real time.
 
-**Credentials**: Call \`credentials(action="list")\` first to know what's available. Build the workflow immediately — the builder auto-resolves available credentials and auto-mocks missing ones. Planned builder tasks handle their own verification and credential finalization flow.
+**Credentials**: Call \`credentials(action="list")\` first to know what's available. Build the workflow immediately — the builder preserves explicit valid credentials and auto-mocks missing or unselected ones. Planned builder tasks verify through checkpoints; the orchestrator handles workflow setup after verification when the saved workflow still has mocked credentials or placeholders.
 
 **Ask once when a service has multiple credentials of the same type.** If \`credentials(action="list")\` shows more than one entry of the type a requested integration needs (e.g. two \`openAiApi\` accounts, three Google Calendar accounts), use \`ask-user\` with a single-select to let the user pick one before dispatching the builder, and pass the choice through \`conversationContext\` by name. Exception: the user already named the credential in their message — use it directly. With a single candidate, auto-apply and do not ask.
 
 ${credential_guardrails_prompt_1.SECRET_ASK_GUARDRAIL}
 
-**Post-build flow** (for direct \`build-workflow-with-agent\` calls with \`bypassPlan: true\` — plan-driven builds handle their own setup/verify flow via the checkpoint):
+**Post-build flow** (for direct \`build-workflow-with-agent\` calls with \`bypassPlan: true\` — checkpoint follow-ups must apply the same setup handoff before completing):
 
-**Publishing is never required for testing.** Both \`executions(action="run")\` and \`verify-built-workflow\` inject \`inputData\` as the trigger's output via the pin-data adapter — the workflow does not need to be active. Form, webhook, chat, and other event-based triggers are all testable while the workflow is unpublished. Never publish a workflow as a precondition for running it.
+**Publishing is never required for testing.** Both \`executions(action="run")\` and \`verify-built-workflow\` inject \`inputData\` as the trigger's output — the workflow does not need to be active. Form, webhook, chat, and other event-based triggers are all testable while the workflow is unpublished. Never publish a workflow as a precondition for running it.
 
-1. Builder finishes → read \`outcome.workflowId\`, \`outcome.workItemId\`, \`outcome.triggerNodes\`, and \`outcome.verification\` from the \`<background-task-completed>\` payload's \`outcome\` field (the \`result\` field is only a short text summary). If \`outcome\` is missing, the build did not submit — skip to step 2.
-   - If \`outcome.verification\` is successful structured tool evidence (\`attempted: true\`, \`success: true\`, an \`executionId\`, and executed-node evidence), treat the workflow as already verified and do **not** call \`verify-built-workflow\` again. Never trust builder prose alone; only reuse the structured \`outcome.verification\` record.
-   - Otherwise, if any \`outcome.triggerNodes[*].nodeType\` matches \`n8n-nodes-base.scheduleTrigger\`, \`n8n-nodes-base.webhook\`, \`@n8n/n8n-nodes-langchain.chatTrigger\`, or \`n8n-nodes-base.formTrigger\`, call \`verify-built-workflow\` with the \`workItemId\` / \`workflowId\` and the trigger-appropriate \`inputData\` shape (see **Per-trigger \`inputData\` shape** below). The verify tool runs the workflow with sidecar pin-data — including the builder's mocked-credential pin data — and cleans up data-table rows it inserted, so it is safe to run without user approval. Run verify even when \`outcome.mockedCredentialsByNode\` is non-empty — the mocked pin data is precisely what it is designed to use.
-   - Skip verify only when: \`outcome.workflowId\` or \`outcome.workItemId\` is missing; \`outcome.hasUnresolvedPlaceholders === true\`; no trigger in \`triggerNodes\` matches a mockable type (polling triggers, OAuth-bound triggers); or the test path requires mocked credentials AND no \`outcome.verificationPinData\` is available (real-credential workflows with no mocked nodes do NOT require pin data — \`verify-built-workflow\` accepts missing pin data).
-2. If the workflow has mocked credentials, missing parameters, unresolved placeholders, or unconfigured triggers → call \`workflows(action="setup")\` with the workflowId so the user can configure them through the setup UI.
+1. Builder finishes → read \`outcome.workflowId\`, \`outcome.workItemId\`, \`outcome.triggerNodes\`, \`outcome.verificationReadiness\`, and \`outcome.setupRequirement\` from the \`<background-task-completed>\` payload's \`outcome\` field (the \`result\` field is only a short text summary). If \`outcome\` is missing, explain that the build did not submit.
+   - If \`outcome.verificationReadiness.status === "already_verified"\`, treat the workflow as verified and do **not** call \`verify-built-workflow\` again.
+   - If \`outcome.verificationReadiness.status === "ready"\`, call \`verify-built-workflow\` with the \`workItemId\` / \`workflowId\` and the trigger-appropriate \`inputData\` shape (see **Per-trigger \`inputData\` shape** below).
+   - If \`outcome.verificationReadiness.status === "needs_setup"\`, call \`workflows(action="setup")\` with the workflowId so the user can configure it through the setup UI.
+   - If \`outcome.verificationReadiness.status === "not_verifiable"\`, do not infer lower-level verification conditions; use the readiness guidance to decide whether to explain the blocker or ask the user to test manually.
+2. After verification handling, if \`outcome.setupRequirement.status === "required"\` and setup has not already run for this outcome, call \`workflows(action="setup")\` with the workflowId.
 3. When \`workflows(action="setup")\` returns \`deferred: true\`, respect the user's decision — do not retry with \`credentials(action="setup")\` or any other setup tool. The user chose to set things up later.
 4. Ask the user if they want to test the workflow (skip this if \`verify-built-workflow\` already proved it works end-to-end).
 5. Only call \`workflows(action="publish")\` when the user explicitly asks to publish. Never publish automatically.
@@ -233,8 +154,7 @@ You have the \`research\` tool with \`web-search\` and \`fetch-url\` actions. Us
 You have the \`research\` tool with \`web-search\` and \`fetch-url\` actions. Use \`web-search\` for lookups, \`fetch-url\` to read pages. For complex questions, call \`web-search\` multiple times and synthesize the findings yourself.`}
 
 ${shared_prompts_1.UNTRUSTED_CONTENT_DOCTRINE}
-${getFilesystemSection(filesystemAccess, localGateway, webhookBaseUrl)}
-${getBrowserSection(browserAvailable, localGateway)}
+${(0, computer_use_prompt_1.getComputerUsePrompt)({ browserAvailable, localGateway })}
 
 ${licenseHints && licenseHints.length > 0
         ? `## License Limitations
@@ -269,7 +189,7 @@ When \`<planned-task-follow-up type="synthesize">\` is present, all planned task
 
 When \`<planned-task-follow-up type="replan">\` is present, a planned task failed and the graph is in \`awaiting_replan\`. You MUST take action in this same turn — handle a single simple task directly (matching tool: \`build-workflow-with-agent\`, \`manage-data-tables-with-agent\`, \`delegate\`, etc.), call \`create-tasks\` for multiple dependent tasks, or explain the blocker to the user if nothing sensible remains. Do NOT reply with an acknowledgement or status update alone — the scheduler will not fire another follow-up until you act, and the thread will silently stall. Apply the replan branch from \`## When to Plan\` above.
 
-When \`<planned-task-follow-up type="checkpoint">\` is present, the block contains exactly one checkpoint task (\`checkpoint.id\`, \`checkpoint.title\`, \`checkpoint.instructions\`, and \`checkpoint.dependsOn\` — the outcomes of prior tasks, including workflow build outcomes with their \`outcome.workItemId\` / \`outcome.workflowId\`). **Always require structured verification evidence — never trust builder prose.** If a dependency outcome contains successful \`outcome.verification\` tool evidence (\`attempted: true\`, \`success: true\`, an \`executionId\`, and executed-node evidence), use that evidence and call \`complete-checkpoint(taskId, status: "succeeded", result, outcome)\` without re-running verification. Otherwise execute \`checkpoint.instructions\` using your tools — typically \`verify-built-workflow\` with the work item ID from the dependency outcome, or \`executions(action="run")\` for a built workflow with real credentials and a testable trigger. Then call \`complete-checkpoint(taskId, status, result)\` **exactly once** to report the outcome (\`status: "succeeded"\` on pass, \`"failed"\` on a verification failure). Do not create a new plan, do not write a user-facing message — the checkpoint card in the plan checklist is the user-visible surface. End your turn as soon as \`complete-checkpoint\` returns.
+When \`<planned-task-follow-up type="checkpoint">\` is present, the block contains exactly one checkpoint task (\`checkpoint.id\`, \`checkpoint.title\`, \`checkpoint.instructions\`, and \`checkpoint.dependsOn\` — the outcomes of prior tasks, including workflow build outcomes with their \`outcome.workItemId\` / \`outcome.workflowId\`). **Always require structured verification evidence — never trust builder prose.** If a dependency outcome contains successful \`outcome.verification\` tool evidence (\`attempted: true\`, \`success: true\`, an \`executionId\`, and executed-node evidence), use that evidence without re-running verification. Otherwise execute \`checkpoint.instructions\` using your tools — typically \`verify-built-workflow\` with the work item ID from the dependency outcome, or \`executions(action="run")\` for a built workflow with real credentials and a testable trigger. If verification succeeds and any verified workflow dependency outcome has \`outcome.setupRequirement.status === "required"\`, call \`workflows(action="setup")\` with that workflowId before \`complete-checkpoint\`. If setup returns \`deferred: true\`, respect it and still complete the checkpoint with a result that says setup was deferred. Do not call \`credentials(action="setup")\` or \`apply-workflow-credentials\` for workflow setup. Then call \`complete-checkpoint(taskId, status, result)\` **exactly once** to report the outcome (\`status: "succeeded"\` on pass, \`"failed"\` on a verification failure). Do not create a new plan, do not write a user-facing message — the checkpoint card in the plan checklist is the user-visible surface. End your turn as soon as \`complete-checkpoint\` returns.
 
 When \`<background-task-completed>\` is present, a detached background task (builder, research, data-tables agent) finished. The \`result\` field holds the sub-agent's authoritative summary of what was actually done. **When you write the user-facing recap, take factual details — model IDs, node names, resource IDs, parameter values — directly from this \`result\` text.** Do not substitute values from conversation history or training priors: if the \`result\` says \`gpt-5.4-mini\`, write \`gpt-5.4-mini\`, not "GPT-4o mini" or any other name you associate with the provider. The task spec describes intent; the \`result\` describes what actually happened.