@tianshu-ai/tianshu 0.3.0

package/packages/server/dist/core/identity-resolvers.d.ts

@@ -0,0 +1,102 @@
+import type { Request } from "express";
+/**
+ * The result of running one resolver.
+ *
+ * - `null`         → resolver doesn't apply to this request; try the next one.
+ * - `{kind:"ok"}`  → resolved successfully; downstream middleware can use it.
+ * - `{kind:"deny"}`→ resolver matched but rejected (bad signature, expired
+ *                    token, banned user). Stop the chain; respond 401.
+ */
+export type IdentityResolution = {
+    kind: "ok";
+    tenantId: string;
+    userId: string;
+    /** Strategy that produced this result. Surfaces in
+     *  X-Tianshu-Identity-Source so operators can debug routing. */
+    source: string;
+    /** Free-form per-resolver context (token id, kid, ...). Audit /
+     *  log only; never trusted by downstream code. */
+    meta?: Readonly<Record<string, string>>;
+} | {
+    kind: "deny";
+    source: string;
+    reason: string;
+};
+export interface IdentityResolver {
+    /** Stable id, used for X-Tianshu-Identity-Source and config. */
+    readonly name: string;
+    /** Return null to defer; ok to claim; deny to short-circuit. */
+    resolve(req: Request): IdentityResolution | null;
+}
+declare const DEV_IDENTITY_COOKIE = "tianshu_identity";
+/**
+ * Cookie-based dev identity: `tianshu_identity=<tenant>/<user>`.
+ *
+ * Highest priority by convention because the web app sets it
+ * explicitly to override any other source. Kept dev-only — it's
+ * trivially forgeable and exists for local hacking + the
+ * URL-driven UX from the dev-identity feature.
+ */
+export declare const cookieResolver: IdentityResolver;
+/**
+ * Process-wide override via env vars: `TIANSHU_DEV_TENANT` /
+ * `TIANSHU_DEV_USER`. Reads `process.env` at request time so
+ * tests / nodemon-style restarts pick up changes.
+ */
+export declare const envResolver: IdentityResolver;
+/**
+ * Last-resort fallback. Always returns the dev tenant + dev user.
+ * Place this at the end of the chain so unauthenticated requests
+ * in dev mode have somewhere to land.
+ *
+ * In production, replace with a resolver that returns `deny`
+ * (forcing real auth) or omit entirely (so the chain runs out
+ * and the middleware 401s).
+ */
+export declare const defaultDevResolver: IdentityResolver;
+/**
+ * Run a resolver chain against an incoming request and return
+ * the first non-null resolution. Returns null if every resolver
+ * defers (the chain ran out without claiming) — callers must
+ * decide whether that's a 401 or a fallback.
+ *
+ * Shared between the HTTP middleware (Express request) and the
+ * WS upgrade handler (raw IncomingMessage cast to Request) so
+ * cookie / env / future strategies behave identically across
+ * both surfaces. WS used to skip the chain entirely and pin
+ * every connection to default/dev — a real isolation hole when
+ * the user had switched identity via cookie.
+ */
+export declare function runIdentityChain(req: {
+    headers: Record<string, string | string[] | undefined>;
+}, chain: readonly IdentityResolver[]): {
+    resolution: IdentityResolution | null;
+    error?: {
+        resolver: string;
+        message: string;
+    };
+};
+/**
+ * Default chain shipped with `npm run dev`. Cookie wins, then
+ * env, then everyone-is-dev.
+ *
+ * To plug a new strategy in (subdomain, JWT, api-key) call
+ * sites build a new array — the chain itself isn't a singleton.
+ */
+export declare const DEV_RESOLVER_CHAIN: readonly IdentityResolver[];
+/**
+ * Parse a `tianshu_identity=<tenant>/<user>` value out of a
+ * `Cookie:` header. Returns null when the cookie is absent /
+ * malformed; the resolver chain falls through.
+ *
+ * Validation pass:
+ *   - exactly one slash, both sides non-empty
+ *   - each side ≤ 64 chars, [A-Za-z0-9._-] only
+ * Garbage values never reach `ops.open()`.
+ */
+export declare function parseIdentityCookie(cookieHeader: string): {
+    tenantId: string;
+    userId: string;
+} | null;
+export { DEV_IDENTITY_COOKIE };
+//# sourceMappingURL=identity-resolvers.d.ts.map

package/packages/server/dist/core/identity-resolvers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-resolvers.d.ts","sourceRoot":"","sources":["../../src/core/identity-resolvers.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGvC;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IACE,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf;oEACgE;IAChE,MAAM,EAAE,MAAM,CAAC;IACf;sDACkD;IAClD,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzC,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAAC;CAClD;AAID,QAAA,MAAM,mBAAmB,qBAAqB,CAAC;AAE/C;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,EAAE,gBAY5B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,gBAazB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,gBAUhC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;CAAE,EAC/D,KAAK,EAAE,SAAS,gBAAgB,EAAE,GACjC;IAAE,UAAU,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAkB1F;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EAIzD,CAAC;AAIF;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,GACnB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAqB7C;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/packages/server/dist/core/identity-resolvers.js

@@ -0,0 +1,176 @@
+// Identity resolver chain — pluggable strategies for figuring out
+// who the current request belongs to.
+//
+// Why a chain rather than a single function:
+// the answer to "who is this request" comes from different
+// sources at different points in tianshu's life:
+//
+//   today (dev)     → cookie set by the web app, env vars for CLI
+//   soon (subdomain)→ alpha.tianshu-ai.com → tenant=alpha
+//   later (auth)    → JWT in Authorization header, OAuth callback
+//   maybe (api)     → x-api-key header for programmatic clients
+//   tests           → trivial stub returning whatever the test wants
+//
+// Each strategy is a small, independently-testable resolver.
+// Middleware runs them in order and uses the first match. A
+// resolver returning `null` means "I have nothing to say, ask the
+// next one"; returning `{kind:"deny"}` means "I matched but the
+// credentials are bad — short-circuit with 401".
+//
+// Adding a new strategy is a single file + one push to the
+// resolver array; the middleware itself never changes shape.
+import { DEV_TENANT_ID, DEV_USER_ID } from "./dev-mode.js";
+// ─── Built-in resolvers ─────────────────────────────────────────────
+const DEV_IDENTITY_COOKIE = "tianshu_identity";
+/**
+ * Cookie-based dev identity: `tianshu_identity=<tenant>/<user>`.
+ *
+ * Highest priority by convention because the web app sets it
+ * explicitly to override any other source. Kept dev-only — it's
+ * trivially forgeable and exists for local hacking + the
+ * URL-driven UX from the dev-identity feature.
+ */
+export const cookieResolver = {
+    name: "cookie",
+    resolve(req) {
+        const parsed = parseIdentityCookie(req.headers.cookie ?? "");
+        if (!parsed)
+            return null;
+        return {
+            kind: "ok",
+            tenantId: parsed.tenantId,
+            userId: parsed.userId,
+            source: "cookie",
+        };
+    },
+};
+/**
+ * Process-wide override via env vars: `TIANSHU_DEV_TENANT` /
+ * `TIANSHU_DEV_USER`. Reads `process.env` at request time so
+ * tests / nodemon-style restarts pick up changes.
+ */
+export const envResolver = {
+    name: "env",
+    resolve(_req) {
+        const tenantId = process.env.TIANSHU_DEV_TENANT?.trim();
+        const userId = process.env.TIANSHU_DEV_USER?.trim();
+        if (!tenantId && !userId)
+            return null;
+        return {
+            kind: "ok",
+            tenantId: tenantId || DEV_TENANT_ID,
+            userId: userId || DEV_USER_ID,
+            source: "env",
+        };
+    },
+};
+/**
+ * Last-resort fallback. Always returns the dev tenant + dev user.
+ * Place this at the end of the chain so unauthenticated requests
+ * in dev mode have somewhere to land.
+ *
+ * In production, replace with a resolver that returns `deny`
+ * (forcing real auth) or omit entirely (so the chain runs out
+ * and the middleware 401s).
+ */
+export const defaultDevResolver = {
+    name: "default-dev",
+    resolve(_req) {
+        return {
+            kind: "ok",
+            tenantId: DEV_TENANT_ID,
+            userId: DEV_USER_ID,
+            source: "default-dev",
+        };
+    },
+};
+/**
+ * Run a resolver chain against an incoming request and return
+ * the first non-null resolution. Returns null if every resolver
+ * defers (the chain ran out without claiming) — callers must
+ * decide whether that's a 401 or a fallback.
+ *
+ * Shared between the HTTP middleware (Express request) and the
+ * WS upgrade handler (raw IncomingMessage cast to Request) so
+ * cookie / env / future strategies behave identically across
+ * both surfaces. WS used to skip the chain entirely and pin
+ * every connection to default/dev — a real isolation hole when
+ * the user had switched identity via cookie.
+ */
+export function runIdentityChain(req, chain) {
+    for (const resolver of chain) {
+        let r;
+        try {
+            r = resolver.resolve(req);
+        }
+        catch (err) {
+            return {
+                resolution: null,
+                error: {
+                    resolver: resolver.name,
+                    message: err instanceof Error ? err.message : String(err),
+                },
+            };
+        }
+        if (r === null)
+            continue;
+        return { resolution: r };
+    }
+    return { resolution: null };
+}
+/**
+ * Default chain shipped with `npm run dev`. Cookie wins, then
+ * env, then everyone-is-dev.
+ *
+ * To plug a new strategy in (subdomain, JWT, api-key) call
+ * sites build a new array — the chain itself isn't a singleton.
+ */
+export const DEV_RESOLVER_CHAIN = [
+    cookieResolver,
+    envResolver,
+    defaultDevResolver,
+];
+// ─── Cookie parser (exported for tests + the web bridge) ────────────
+/**
+ * Parse a `tianshu_identity=<tenant>/<user>` value out of a
+ * `Cookie:` header. Returns null when the cookie is absent /
+ * malformed; the resolver chain falls through.
+ *
+ * Validation pass:
+ *   - exactly one slash, both sides non-empty
+ *   - each side ≤ 64 chars, [A-Za-z0-9._-] only
+ * Garbage values never reach `ops.open()`.
+ */
+export function parseIdentityCookie(cookieHeader) {
+    if (!cookieHeader)
+        return null;
+    for (const part of cookieHeader.split(/;\s*/)) {
+        const eq = part.indexOf("=");
+        if (eq <= 0)
+            continue;
+        const name = part.slice(0, eq).trim();
+        if (name !== DEV_IDENTITY_COOKIE)
+            continue;
+        let value;
+        try {
+            value = decodeURIComponent(part.slice(eq + 1).trim());
+        }
+        catch {
+            return null;
+        }
+        const slash = value.indexOf("/");
+        if (slash <= 0 || slash === value.length - 1)
+            continue;
+        const tenantId = value.slice(0, slash);
+        const userId = value.slice(slash + 1);
+        if (!isSafeId(tenantId) || !isSafeId(userId))
+            continue;
+        return { tenantId, userId };
+    }
+    return null;
+}
+export { DEV_IDENTITY_COOKIE };
+function isSafeId(s) {
+    return /^[A-Za-z0-9._-]+$/.test(s) && s.length <= 64;
+}
+//# sourceMappingURL=identity-resolvers.js.map

package/packages/server/dist/core/identity-resolvers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-resolvers.js","sourceRoot":"","sources":["../../src/core/identity-resolvers.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,sCAAsC;AACtC,EAAE;AACF,6CAA6C;AAC7C,2DAA2D;AAC3D,iDAAiD;AACjD,EAAE;AACF,kEAAkE;AAClE,0DAA0D;AAC1D,kEAAkE;AAClE,gEAAgE;AAChE,qEAAqE;AACrE,EAAE;AACF,6DAA6D;AAC7D,4DAA4D;AAC5D,kEAAkE;AAClE,gEAAgE;AAChE,iDAAiD;AACjD,EAAE;AACF,2DAA2D;AAC3D,6DAA6D;AAG7D,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAmC3D,uEAAuE;AAEvE,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAqB;IAC9C,IAAI,EAAE,QAAQ;IACd,OAAO,CAAC,GAAG;QACT,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAqB;IAC3C,IAAI,EAAE,KAAK;IACX,OAAO,CAAC,IAAI;QACV,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,QAAQ,IAAI,aAAa;YACnC,MAAM,EAAE,MAAM,IAAI,WAAW;YAC7B,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAqB;IAClD,IAAI,EAAE,aAAa;IACnB,OAAO,CAAC,IAAI;QACV,OAAO;YACL,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,aAAa;SACtB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAA+D,EAC/D,KAAkC;IAElC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,IAAI,CAA4B,CAAC;QACjC,IAAI,CAAC;YACH,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAY,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE;oBACL,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBAC1D;aACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAgC;IAC7D,cAAc;IACd,WAAW;IACX,kBAAkB;CACnB,CAAC;AAEF,uEAAuE;AAEvE;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAoB;IAEpB,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,IAAI,KAAK,mBAAmB;YAAE,SAAS;QAC3C,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;AACvD,CAAC"}

package/packages/server/dist/core/index.d.ts

@@ -0,0 +1,13 @@
+export { ensureInside, getDeletedTenantPath, getGlobalConfigPath, getTenantConfigPath, getTenantDbPath, getTenantRoot, getTenantSecretsDir, getTenantSharedDir, getTenantUsersDir, getTenantsRoot, getTenantWorkspaceDir, getTianshuHome, getUserHomeDir, isSoftDeletedDirName, isSystemReserved, SOFT_DELETE_SUFFIX, } from "./paths.js";
+export { InvalidTenantIdError, isValidTenantId, validateTenantId, } from "./tenant-id.js";
+export { DEFAULTS, loadGlobalConfig, loadTenantConfig, mergeConfigs, resolveTenantConfig, TenantConfigForbiddenFieldError, writeGlobalConfig, writeTenantConfig, type BrandingConfig, type GlobalConfig, type McpServerEntry, type McpUserConfig, type ModelEntry, type ModelsCatalog, type OAuthProviderConfig, type PluginsConfig, type ProviderEntry, type ResolvedConfig, type TenantConfig, type WorkerSettings, } from "./config.js";
+export { McpManager, type McpUserToolsetSnapshot } from "./mcp-manager.js";
+export { DbPool, getDefaultPool } from "./db-pool.js";
+export { runMigrations, MIGRATIONS } from "./migrations/index.js";
+export { TenantContext, buildTenantContext } from "./tenant-context.js";
+export { GlobalOps, TenantAlreadyExistsError, TenantNotFoundError, type GlobalOpsOptions, } from "./global-ops.js";
+export { getTemplatesDir, ensureTenantConfigDefaults, seedTenantWorkspace, seedUserWorkspace, TENANT_TEMPLATE, USER_TEMPLATE, } from "./templates.js";
+export { bootstrapDevTenantIfNeeded, DEV_TENANT_ID, DEV_USER_EXTERNAL_ID, DEV_USER_ID, DEV_USER_PROVIDER, type BootstrapResult, } from "./dev-mode.js";
+export { tenantMiddleware, DEV_RESOLVER_CHAIN, runIdentityChain, cookieResolver, envResolver, defaultDevResolver, type RequestCtx, type TenantMiddlewareOpts, type IdentityResolver, type IdentityResolution, } from "./middleware.js";
+export { buildModel, findModel, getDefaultModel, listModels, resolveApiKey, type ResolvedModelInfo, } from "./llm.js";
+//# sourceMappingURL=index.d.ts.map

package/packages/server/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,+BAA+B,EAC/B,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,GACpB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,UAAU,EAAE,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE3E,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EACL,SAAS,EACT,wBAAwB,EACxB,mBAAmB,EACnB,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,0BAA0B,EAC1B,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,UAAU,EACV,SAAS,EACT,eAAe,EACf,UAAU,EACV,aAAa,EACb,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC"}

package/packages/server/dist/core/index.js

@@ -0,0 +1,18 @@
+// Public surface of the tenant infrastructure layer.
+//
+// Higher-level code (routes, middleware, CLI) should import from this
+// barrel rather than reaching into individual files. Anything not
+// re-exported here is internal and may change without notice.
+export { ensureInside, getDeletedTenantPath, getGlobalConfigPath, getTenantConfigPath, getTenantDbPath, getTenantRoot, getTenantSecretsDir, getTenantSharedDir, getTenantUsersDir, getTenantsRoot, getTenantWorkspaceDir, getTianshuHome, getUserHomeDir, isSoftDeletedDirName, isSystemReserved, SOFT_DELETE_SUFFIX, } from "./paths.js";
+export { InvalidTenantIdError, isValidTenantId, validateTenantId, } from "./tenant-id.js";
+export { DEFAULTS, loadGlobalConfig, loadTenantConfig, mergeConfigs, resolveTenantConfig, TenantConfigForbiddenFieldError, writeGlobalConfig, writeTenantConfig, } from "./config.js";
+export { McpManager } from "./mcp-manager.js";
+export { DbPool, getDefaultPool } from "./db-pool.js";
+export { runMigrations, MIGRATIONS } from "./migrations/index.js";
+export { TenantContext, buildTenantContext } from "./tenant-context.js";
+export { GlobalOps, TenantAlreadyExistsError, TenantNotFoundError, } from "./global-ops.js";
+export { getTemplatesDir, ensureTenantConfigDefaults, seedTenantWorkspace, seedUserWorkspace, TENANT_TEMPLATE, USER_TEMPLATE, } from "./templates.js";
+export { bootstrapDevTenantIfNeeded, DEV_TENANT_ID, DEV_USER_EXTERNAL_ID, DEV_USER_ID, DEV_USER_PROVIDER, } from "./dev-mode.js";
+export { tenantMiddleware, DEV_RESOLVER_CHAIN, runIdentityChain, cookieResolver, envResolver, defaultDevResolver, } from "./middleware.js";
+export { buildModel, findModel, getDefaultModel, listModels, resolveApiKey, } from "./llm.js";
+//# sourceMappingURL=index.js.map

package/packages/server/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,EAAE;AACF,sEAAsE;AACtE,kEAAkE;AAClE,8DAA8D;AAE9D,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,+BAA+B,EAC/B,iBAAiB,EACjB,iBAAiB,GAalB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,UAAU,EAA+B,MAAM,kBAAkB,CAAC;AAE3E,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EACL,SAAS,EACT,wBAAwB,EACxB,mBAAmB,GAEpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,0BAA0B,EAC1B,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,iBAAiB,GAElB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,kBAAkB,GAKnB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,UAAU,EACV,SAAS,EACT,eAAe,EACf,UAAU,EACV,aAAa,GAEd,MAAM,UAAU,CAAC"}

package/packages/server/dist/core/llm.d.ts

@@ -0,0 +1,45 @@
+import type { Api, Model } from "@earendil-works/pi-ai";
+import type { ModelsCatalog, ResolvedConfig } from "./config.js";
+export interface ResolvedModelInfo {
+    /** Full id, e.g. "anthropic/claude-sonnet-4-6". */
+    id: string;
+    providerId: string;
+    modelId: string;
+    name: string;
+    api: Api;
+    baseUrl: string;
+    group?: string;
+    reasoning: boolean;
+    contextWindow: number;
+    maxTokens: number;
+    supportsImages: boolean;
+    /** Per-image byte cap before we hand it to the provider. */
+    imageMaxBytes: number;
+    mode: "chat" | "image-gen";
+    compat?: Record<string, unknown>;
+    /** Raw apiKey string from config (may still contain ${VAR} placeholders). */
+    apiKeyTemplate?: string;
+}
+/** Walk a ResolvedConfig and emit one `ResolvedModelInfo` per (provider, model). */
+export declare function listModels(config: ResolvedConfig): ResolvedModelInfo[];
+/** Look up by full id `<provider>/<model>`. Returns undefined if missing. */
+export declare function findModel(config: ResolvedConfig, fullId: string): ResolvedModelInfo | undefined;
+/** Resolve the configured default model, falling back to the first listed. */
+export declare function getDefaultModel(config: ResolvedConfig): ResolvedModelInfo | undefined;
+/**
+ * Build a pi-ai `Model<Api>` from a ResolvedModelInfo.
+ */
+export declare function buildModel(info: ResolvedModelInfo): Model<Api>;
+/**
+ * Resolve the API key string for a model, expanding `${VAR}` placeholders.
+ * Falls back to `DEFAULT_API_KEY` env, then to `"test-key-1"` (the
+ * convention used by the closed-source repo's local SAP proxy).
+ */
+export declare function resolveApiKey(info: ResolvedModelInfo): string;
+/** `${VAR}` and `${VAR:-fallback}` → process.env[VAR] | fallback | "". */
+declare function expandEnvPlaceholders(value: string | undefined): string | undefined;
+export declare const __internal: {
+    expandEnvPlaceholders: typeof expandEnvPlaceholders;
+};
+export type { ModelsCatalog };
+//# sourceMappingURL=llm.d.ts.map

package/packages/server/dist/core/llm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm.d.ts","sourceRoot":"","sources":["../../src/core/llm.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAc,aAAa,EAAiB,cAAc,EAAE,MAAM,aAAa,CAAC;AAE5F,MAAM,WAAW,iBAAiB;IAChC,mDAAmD;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAoCD,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,iBAAiB,EAAE,CAWtE;AAED,6EAA6E;AAC7E,wBAAgB,SAAS,CACvB,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,MAAM,GACb,iBAAiB,GAAG,SAAS,CAU/B;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,iBAAiB,GAAG,SAAS,CAMrF;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,KAAK,CAAC,GAAG,CAAC,CAc9D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAI7D;AA8BD,0EAA0E;AAC1E,iBAAS,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK5E;AAED,eAAO,MAAM,UAAU;;CAA4B,CAAC;AAGpD,YAAY,EAAE,aAAa,EAAE,CAAC"}

package/packages/server/dist/core/llm.js

@@ -0,0 +1,140 @@
+// Provider catalog → pi-ai `Model<Api>` resolution.
+//
+// The user-facing config (config.json `models.providers`) maps cleanly
+// onto pi-ai's runtime Model shape. We do that mapping here.
+//
+// Model IDs surfaced to the rest of the system are
+// `<providerId>/<modelEntry.id>`, e.g. `anthropic/claude-sonnet-4-6` or
+// `local-llama/Qwen3.6-35B-A3B-Q8_0.gguf`.
+//
+// Placeholder substitution (`${VAR}` / `${VAR:-fallback}`) happens at
+// request time, not at config-load time, so secrets do not sit in
+// process memory longer than necessary.
+const DEFAULT_API_BY_PROVIDER = {
+    anthropic: "anthropic-messages",
+    openai: "openai-completions",
+    google: "google-generative-ai",
+};
+// Provider per-image byte caps (base64 size, not raw).
+//
+// We default to 1 MB across the board even though Anthropic accepts
+// up to 5 MB and OpenAI/Gemini up to 20 MB. Reasoning:
+//   - Vision encoders internally downscale to ~1568px long edge
+//     anyway; bigger inputs gain nothing visible to the model but
+//     cost real money on per-pixel pricing.
+//   - Smaller payloads cut latency dramatically (round-trip
+//     dominates above ~2 MB on most networks; gateways like Bedrock
+//     impose 60s end-to-end timeouts that high-res phone photos
+//     blow through).
+//   - Tenants who genuinely need higher fidelity (medical imaging,
+//     OCR-heavy layouts) override per-model via
+//     `provider.models[].imageMaxBytes` in tenant config.
+const DEFAULT_IMAGE_MAX_BYTES_BY_PROVIDER = {
+    anthropic: 1 * 1024 * 1024,
+    openai: 1 * 1024 * 1024,
+    google: 1 * 1024 * 1024,
+};
+const DEFAULT_IMAGE_MAX_BYTES_FALLBACK = 1 * 1024 * 1024;
+function defaultImageMaxBytes(providerId) {
+    return (DEFAULT_IMAGE_MAX_BYTES_BY_PROVIDER[providerId] ??
+        DEFAULT_IMAGE_MAX_BYTES_FALLBACK);
+}
+/** Walk a ResolvedConfig and emit one `ResolvedModelInfo` per (provider, model). */
+export function listModels(config) {
+    const out = [];
+    const catalog = config.models;
+    if (!catalog)
+        return out;
+    for (const [providerId, provider] of Object.entries(catalog.providers)) {
+        if (!provider.models)
+            continue;
+        for (const m of provider.models) {
+            out.push(toModelInfo(providerId, provider, m));
+        }
+    }
+    return out;
+}
+/** Look up by full id `<provider>/<model>`. Returns undefined if missing. */
+export function findModel(config, fullId) {
+    const slash = fullId.indexOf("/");
+    if (slash < 0)
+        return undefined;
+    const providerId = fullId.slice(0, slash);
+    const modelId = fullId.slice(slash + 1);
+    const provider = config.models?.providers?.[providerId];
+    if (!provider)
+        return undefined;
+    const entry = provider.models?.find((m) => m.id === modelId);
+    if (!entry)
+        return undefined;
+    return toModelInfo(providerId, provider, entry);
+}
+/** Resolve the configured default model, falling back to the first listed. */
+export function getDefaultModel(config) {
+    if (config.defaultModel) {
+        const found = findModel(config, config.defaultModel);
+        if (found)
+            return found;
+    }
+    return listModels(config)[0];
+}
+/**
+ * Build a pi-ai `Model<Api>` from a ResolvedModelInfo.
+ */
+export function buildModel(info) {
+    return {
+        id: info.modelId,
+        name: info.name,
+        api: info.api,
+        provider: info.providerId,
+        baseUrl: info.baseUrl,
+        reasoning: info.reasoning,
+        input: info.supportsImages ? ["text", "image"] : ["text"],
+        cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+        contextWindow: info.contextWindow,
+        maxTokens: info.maxTokens,
+        ...(info.compat ? { compat: info.compat } : {}),
+    };
+}
+/**
+ * Resolve the API key string for a model, expanding `${VAR}` placeholders.
+ * Falls back to `DEFAULT_API_KEY` env, then to `"test-key-1"` (the
+ * convention used by the closed-source repo's local SAP proxy).
+ */
+export function resolveApiKey(info) {
+    const expanded = expandEnvPlaceholders(info.apiKeyTemplate);
+    if (expanded && expanded.length > 0)
+        return expanded;
+    return process.env.DEFAULT_API_KEY ?? "test-key-1";
+}
+// ─── internals ────────────────────────────────────────────────────
+function toModelInfo(providerId, provider, entry) {
+    const api = provider.api ?? DEFAULT_API_BY_PROVIDER[providerId] ?? "openai-completions";
+    return {
+        id: `${providerId}/${entry.id}`,
+        providerId,
+        modelId: entry.id,
+        name: entry.name ?? entry.id,
+        api,
+        baseUrl: provider.baseUrl ?? "",
+        group: provider.group,
+        reasoning: entry.reasoning ?? false,
+        contextWindow: entry.contextWindow ?? 128000,
+        maxTokens: entry.maxTokens ?? 4096,
+        supportsImages: entry.supportsImages ?? true,
+        imageMaxBytes: entry.imageMaxBytes ?? defaultImageMaxBytes(providerId),
+        mode: entry.mode === "image-gen" ? "image-gen" : "chat",
+        compat: entry.compat,
+        apiKeyTemplate: provider.apiKey,
+    };
+}
+/** `${VAR}` and `${VAR:-fallback}` → process.env[VAR] | fallback | "". */
+function expandEnvPlaceholders(value) {
+    if (!value)
+        return value;
+    return value.replace(/\$\{([A-Z0-9_]+)(?::-([^}]*))?\}/gi, (_m, name, fallback) => {
+        return process.env[name] ?? fallback ?? "";
+    });
+}
+export const __internal = { expandEnvPlaceholders };
+//# sourceMappingURL=llm.js.map

package/packages/server/dist/core/llm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm.js","sourceRoot":"","sources":["../../src/core/llm.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,EAAE;AACF,uEAAuE;AACvE,6DAA6D;AAC7D,EAAE;AACF,mDAAmD;AACnD,wEAAwE;AACxE,2CAA2C;AAC3C,EAAE;AACF,sEAAsE;AACtE,kEAAkE;AAClE,wCAAwC;AA0BxC,MAAM,uBAAuB,GAAwB;IACnD,SAAS,EAAE,oBAAoB;IAC/B,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,sBAAsB;CAC/B,CAAC;AAEF,uDAAuD;AACvD,EAAE;AACF,oEAAoE;AACpE,uDAAuD;AACvD,gEAAgE;AAChE,kEAAkE;AAClE,4CAA4C;AAC5C,4DAA4D;AAC5D,oEAAoE;AACpE,gEAAgE;AAChE,qBAAqB;AACrB,mEAAmE;AACnE,gDAAgD;AAChD,0DAA0D;AAC1D,MAAM,mCAAmC,GAA2B;IAClE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC1B,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IACvB,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;CACxB,CAAC;AACF,MAAM,gCAAgC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzD,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,OAAO,CACL,mCAAmC,CAAC,UAAU,CAAC;QAC/C,gCAAgC,CACjC,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,MAAsB;IAC/C,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC;IACzB,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,SAAS;QAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,SAAS,CACvB,MAAsB,EACtB,MAAc;IAEd,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAAuB;IAChD,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,OAAO;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,IAAI,CAAC,UAAU;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzD,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;QAC1D,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5D,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,YAAY,CAAC;AACrD,CAAC;AAED,qEAAqE;AAErE,SAAS,WAAW,CAClB,UAAkB,EAClB,QAAuB,EACvB,KAAiB;IAEjB,MAAM,GAAG,GACN,QAAQ,CAAC,GAAuB,IAAI,uBAAuB,CAAC,UAAU,CAAC,IAAI,oBAAoB,CAAC;IACnG,OAAO;QACL,EAAE,EAAE,GAAG,UAAU,IAAI,KAAK,CAAC,EAAE,EAAE;QAC/B,UAAU;QACV,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE;QAC5B,GAAG;QACH,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;QAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK;QACnC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,MAAM;QAC5C,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;QAC5C,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,oBAAoB,CAAC,UAAU,CAAC;QACtE,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;QACvD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,QAAQ,CAAC,MAAM;KAChC,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,qBAAqB,CAAC,KAAyB;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,oCAAoC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAChF,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,qBAAqB,EAAE,CAAC"}

package/packages/server/dist/core/mcp-manager.d.ts

@@ -0,0 +1,47 @@
+import { McpToolset, type ToolsetProvider } from "@tianshu/plugin-sdk";
+import { type McpServerEntry } from "./config.js";
+export interface McpUserToolsetSnapshot {
+    /** Server id from the tenant config entry. */
+    id: string;
+    /** Display name (defaults to id). */
+    displayName: string;
+    /** True when this id was present + enabled in tenant config and
+     *  thus exists in the toolsets map. False when present-but-disabled. */
+    enabled: boolean;
+    /** McpToolset.snapshot() when enabled; null otherwise. */
+    toolsetSnapshot: ReturnType<McpToolset["snapshot"]> | null;
+    /** ToolsetProvider handle (only when enabled). Used by the
+     *  registry to merge into agent tools. */
+    provider: ToolsetProvider | null;
+    /** Verbatim entry from tenant config, for the admin UI to render
+     *  in edit dialogs. */
+    entry: McpServerEntry;
+}
+/**
+ * Per-host singleton. The PluginRegistry holds one too \u2014 we kept
+ * the surface narrow on purpose so the registry can compose us
+ * without becoming this class's friend.
+ */
+export declare class McpManager {
+    private readonly home;
+    private state;
+    constructor(home?: string);
+    /** Build (or rebuild) the toolset map for one tenant from disk. */
+    reload(tenantId: string): void;
+    /** First-call lazy init. Idempotent. */
+    ensureForTenant(tenantId: string): void;
+    /** Snapshot of every user-configured server (enabled or not).
+     *  Plugin-contributed servers are NOT included \u2014 callers merge
+     *  with PluginRegistry.toolsetsForTenant() to get the unified
+     *  view. */
+    snapshotsForTenant(tenantId: string): McpUserToolsetSnapshot[];
+    /** Just the live ToolsetProviders. Used by PluginRegistry's
+     *  toolsForTenant() to add user MCP tools to the agent surface. */
+    providersForTenant(tenantId: string): ToolsetProvider[];
+    /** Drop tenant state on tenant DB pool eviction. */
+    invalidate(tenantId: string): void;
+    /** Build an McpToolset from one config entry. Pure factory \u2014 no
+     *  side effects beyond instantiating the SDK toolset. */
+    private makeToolset;
+}
+//# sourceMappingURL=mcp-manager.d.ts.map

package/packages/server/dist/core/mcp-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-manager.d.ts","sourceRoot":"","sources":["../../src/core/mcp-manager.ts"],"names":[],"mappings":"AAkCA,OAAO,EACL,UAAU,EACV,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAoB,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAcpE,MAAM,WAAW,sBAAsB;IACrC,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB;4EACwE;IACxE,OAAO,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,eAAe,EAAE,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC;IAC3D;8CAC0C;IAC1C,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC;2BACuB;IACvB,KAAK,EAAE,cAAc,CAAC;CACvB;AAED;;;;GAIG;AACH,qBAAa,UAAU;IAGT,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,KAAK,CAAuC;gBAEvB,IAAI,GAAE,MAAyB;IAE5D,mEAAmE;IACnE,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAsB9B,wCAAwC;IACxC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKvC;;;gBAGY;IACZ,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,EAAE;IAkB9D;uEACmE;IACnE,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,EAAE;IAMvD,oDAAoD;IACpD,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIlC;6DACyD;IACzD,OAAO,CAAC,WAAW;CAWpB"}