@wiro-ai/wiro-mcp 1.4.1 → 1.5.1

package/dist/tools/cancel-agent-message.js

@@ -2,7 +2,8 @@ import { z } from 'zod';
 import { apiErrorMessage, errorResult } from '../utils/api.js';
 import { agentMessageSchema, formatAgentMessage, messageStateSchema, } from '../utils/agent-message.js';
 import { AGENT_INPUT_DESCRIPTION, agentRequestBody, callAgent, readAgentMessage, resolveAgentTarget, resolveReadSession, } from '../utils/agent-targets.js';
-import { notFoundMessage, projectAgentMessage } from '../utils/agent-turns.js';
+import { costPendingNote, isCostPending, notFoundMessage, projectAgentMessage } from '../utils/agent-turns.js';
+import { strictInput } from './schemas.js';
 // The cancel is written at once, but a turn that is already finishing can still
 // end normally, so the result is read back after a short pause.
 const READ_BACK_DELAY_MS = 1_500;
@@ -33,12 +34,12 @@ export function registerCancelAgentMessage(server, client) {
             + 'can still finish normally if it was already completing, so the final status is read back and '
             + 'returned. Usage up to the cancel stays billed. For Studio, model runs the turn already started keep '
             + 'running and cannot be stopped from here; list_studio_results shows them.',
-        inputSchema: {
+        inputSchema: strictInput({
             agent: z.string().min(1).describe(AGENT_INPUT_DESCRIPTION),
             message_id: z.string().min(1).describe('The message id from send_agent_message.'),
             session: z.string().optional().describe('The session the message was sent in. Required for Studio and '
                 + 'the Workflow Agent unless it was "default".'),
-        },
+        }),
         outputSchema: {
             agent: z.string(),
             agentKind: z.enum(['studio', 'workflow-agent', 'deployed']),
@@ -88,6 +89,8 @@ export function registerCancelAgentMessage(server, client) {
                 await delay(READ_BACK_DELAY_MS, extra.signal);
                 const row = await readAgentMessage(client, target, message_id, readSession, extra.signal);
                 message = projectAgentMessage(target, row, false).message;
+                if (isCostPending(row, true))
+                    notes.push(costPendingNote(target, row.status));
             }
             catch (error) {
                 if (extra.signal.aborted)

package/dist/tools/cancel-agent-message.js.map

@@ -1 +1 @@
-{"version":3,"file":"cancel-agent-message.js","sourceRoot":"","sources":["../../src/tools/cancel-agent-message.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE/E,gFAAgF;AAChF,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,SAAS,KAAK,CAAC,EAAU,EAAE,MAAmB;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;YAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAiB,EAAE,MAAkB;IAC9E,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,8FAA8F;cACvG,uGAAuG;cACvG,+FAA+F;cAC/F,sGAAsG;cACtG,0EAA0E;QAC9E,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACjF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D;kBACnG,6CAA6C,CAAC;SACnD;QACD,YAAY,EAAE;YACZ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;YACjB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;YAC3D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;YAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAClC,UAAU,EAAE,kBAAkB,CAAC,QAAQ,EAAE;YACzC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE;YACtC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SAC3B;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,MAAM,EACN,MAAM,EACN,QAAQ,EACR,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAClE,KAAK,CAAC,MAAM,CACb,CAAC;YACF,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG;gBACX,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,IAAI;gBACtB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,SAAS,EAAE,UAAU;aACtB,CAAC;YAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;gBAC9E,MAAM,KAAK,GAAG,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzE,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC9E,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxB,CAAC;gBACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,+BAA+B,MAAM,iCAAiC,CAAC,CAAC;gBACnF,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kEAAkE,MAAM,GAAG,EAAE,CAAC;oBACvH,iBAAiB,EAAE,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE;iBAClF,CAAC;YACJ,CAAC;YAED,IAAI,OAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9C,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1F,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,KAAK,CAAC;gBACtC,KAAK,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;YAC1F,CAAC;YACD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW;oBACrE,CAAC,CAAC,+FAA+F;oBACjG,CAAC,CAAC,yCAAyC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,oFAAoF;sBAC3F,iCAAiC,CAAC,CAAC;YACzC,CAAC;YAED,MAAM,KAAK,GAAG,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;YACrE,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,iBAAiB,EAAE;oBACjB,GAAG,IAAI;oBACP,cAAc,EAAE,IAAI;oBACpB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvF,KAAK;iBACN;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"cancel-agent-message.js","sourceRoot":"","sources":["../../src/tools/cancel-agent-message.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC/G,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,gFAAgF;AAChF,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,SAAS,KAAK,CAAC,EAAU,EAAE,MAAmB;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;YAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAiB,EAAE,MAAkB;IAC9E,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,8FAA8F;cACvG,uGAAuG;cACvG,+FAA+F;cAC/F,sGAAsG;cACtG,0EAA0E;QAC9E,WAAW,EAAE,WAAW,CAAC;YACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACjF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D;kBACnG,6CAA6C,CAAC;SACnD,CAAC;QACF,YAAY,EAAE;YACZ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;YACjB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;YAC3D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;YAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAClC,UAAU,EAAE,kBAAkB,CAAC,QAAQ,EAAE;YACzC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE;YACtC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SAC3B;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,MAAM,EACN,MAAM,EACN,QAAQ,EACR,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAClE,KAAK,CAAC,MAAM,CACb,CAAC;YACF,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG;gBACX,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,IAAI;gBACtB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,SAAS,EAAE,UAAU;aACtB,CAAC;YAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;gBAC9E,MAAM,KAAK,GAAG,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzE,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC9E,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxB,CAAC;gBACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,+BAA+B,MAAM,iCAAiC,CAAC,CAAC;gBACnF,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kEAAkE,MAAM,GAAG,EAAE,CAAC;oBACvH,iBAAiB,EAAE,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE;iBAClF,CAAC;YACJ,CAAC;YAED,IAAI,OAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9C,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1F,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC;gBAC1D,IAAI,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,KAAK,CAAC;gBACtC,KAAK,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;YAC1F,CAAC;YACD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW;oBACrE,CAAC,CAAC,+FAA+F;oBACjG,CAAC,CAAC,yCAAyC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,oFAAoF;sBAC3F,iCAAiC,CAAC,CAAC;YACzC,CAAC;YAED,MAAM,KAAK,GAAG,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;YACrE,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,iBAAiB,EAAE;oBACjB,GAAG,IAAI;oBACP,cAAc,EAAE,IAAI;oBACpB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvF,KAAK;iBACN;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/cancel-task.js

@@ -1,15 +1,15 @@
 import { z } from 'zod';
-import { taskActionOutputSchema } from './schemas.js';
+import { strictInput, taskActionOutputSchema } from './schemas.js';
 export function registerCancelTask(server, client) {
     server.registerTool('cancel_task', {
         title: 'Cancel a queued Wiro task',
         description: 'Cancel a model task that is still queued. It is refused once '
             + 'the task has started; `kill_task` stops a task in either state. A '
             + 'task cancelled while queued is never charged.',
-        inputSchema: {
+        inputSchema: strictInput({
             tasktoken: z.string().optional().describe('The task token returned from run_model.'),
             taskid: z.string().optional().describe('The task ID (alternative to tasktoken).'),
-        },
+        }),
         outputSchema: taskActionOutputSchema,
         annotations: {
             readOnlyHint: false,

package/dist/tools/cancel-task.js.map

@@ -1 +1 @@
-{"version":3,"file":"cancel-task.js","sourceRoot":"","sources":["../../src/tools/cancel-task.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,MAAkB;IACtE,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,+DAA+D;cACxE,oEAAoE;cACpE,+CAA+C;QACnD,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACpF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SAClF;QACD,YAAY,EAAE,sBAAsB;QACpC,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,yDAAyD,EAAE,CAAC;oBACrG,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CACpC,EAAE,SAAS,EAAE,MAAM,EAAE,EACrB,KAAK,CAAC,MAAM,CACb,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAI,MAAM,CAAC,MAAqC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC;gBAC7G,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,eAAe,GAAG,EAAE,EAAE,CAAC;oBAChE,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;gBAC1E,iBAAiB,EAAE;oBACjB,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE;wBACJ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3C;oBACD,OAAO,EAAE,8BAA8B;iBACxC;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,eAAe,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACnH,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"cancel-task.js","sourceRoot":"","sources":["../../src/tools/cancel-task.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEnE,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,MAAkB;IACtE,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,+DAA+D;cACxE,oEAAoE;cACpE,+CAA+C;QACnD,WAAW,EAAE,WAAW,CAAC;YACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACpF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SAClF,CAAC;QACF,YAAY,EAAE,sBAAsB;QACpC,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,yDAAyD,EAAE,CAAC;oBACrG,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CACpC,EAAE,SAAS,EAAE,MAAM,EAAE,EACrB,KAAK,CAAC,MAAM,CACb,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAI,MAAM,CAAC,MAAqC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC;gBAC7G,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,eAAe,GAAG,EAAE,EAAE,CAAC;oBAChE,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;gBAC1E,iBAAiB,EAAE;oBACjB,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE;wBACJ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3C;oBACD,OAAO,EAAE,8BAA8B;iBACxC;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,eAAe,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACnH,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/clone-workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"clone-workflow.d.ts","sourceRoot":"","sources":["../../src/tools/clone-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAS/C,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAmFjF"}
+{"version":3,"file":"clone-workflow.d.ts","sourceRoot":"","sources":["../../src/tools/clone-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAU/C,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAmFjF"}

package/dist/tools/clone-workflow.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import { ApiResultError, asString, errorResult, requireApiSuccess, toInteger } from '../utils/api.js';
+import { quotedSpan } from '../utils/quoted-text.js';
 import { fullSlugOf, parseWorkflowSlug, workflowUrl } from '../utils/workflow.js';
-import { nextActionSchema } from './schemas.js';
+import { nextActionSchema, strictInput } from './schemas.js';
 export function registerCloneWorkflow(server, client) {
     server.registerTool('clone_workflow', {
         title: 'Clone a public Wiro workflow',
@@ -10,10 +11,10 @@ export function registerCloneWorkflow(server, client) {
             + 'just to run a public workflow; clone it to keep it or to edit it. A copy of a '
             + 'protected workflow keeps its steps hidden: you can run it and change its title, '
             + 'description and tags, but not its steps.',
-        inputSchema: {
+        inputSchema: strictInput({
             slug: z.string().min(1)
                 .describe('The full slug or page URL of a published workflow from list_workflows scope "public".'),
-        },
+        }),
         outputSchema: {
             fullSlug: z.string(),
             url: z.string(),
@@ -39,7 +40,7 @@ export function registerCloneWorkflow(server, client) {
             return {
                 content: [{
                         type: 'text',
-                        text: `## Workflow cloned\n\n**Title:** ${title}\n**Slug:** \`${fullSlug}\`\n**Page:** ${workflowUrl(fullSlug)}`
+                        text: `## Workflow cloned\n\n**Title:** ${quotedSpan(title)}\n**Slug:** \`${fullSlug}\`\n**Page:** ${workflowUrl(fullSlug)}`
                             + (isProtected ? '\n\nThe original is protected, so the copy\'s steps stay hidden. You can still run it.' : ''),
                     }],
                 structuredContent: {

package/dist/tools/clone-workflow.js.map

@@ -1 +1 @@
-{"version":3,"file":"clone-workflow.js","sourceRoot":"","sources":["../../src/tools/clone-workflow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAoB,MAAM,iBAAiB,CAAC;AACxH,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAMhD,MAAM,UAAU,qBAAqB,CAAC,MAAiB,EAAE,MAAkB;IACzE,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,uEAAuE;cAChF,+EAA+E;cAC/E,gFAAgF;cAChF,kFAAkF;cAClF,0CAA0C;QAC9C,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;iBACpB,QAAQ,CAAC,uFAAuF,CAAC;SACrG;QACD,YAAY,EAAE;YACZ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;YACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;YACjB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;YACxB,UAAU,EAAE,gBAAgB;SAC7B;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,iBAAiB,CAC9B,MAAM,MAAM,CAAC,IAAI,CAAgB,iBAAiB,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EACpG,mCAAmC,CACpC,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;YAC3H,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC;YAC9C,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAErD,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,oCAAoC,KAAK,iBAAiB,QAAQ,iBAAiB,WAAW,CAAC,QAAQ,CAAC,EAAE;8BAC5G,CAAC,WAAW,CAAC,CAAC,CAAC,wFAAwF,CAAC,CAAC,CAAC,EAAE,CAAC;qBAClH,CAAC;gBACF,iBAAiB,EAAE;oBACjB,QAAQ;oBACR,GAAG,EAAE,WAAW,CAAC,QAAQ,CAAC;oBAC1B,KAAK;oBACL,WAAW;oBACX,UAAU,EAAE;wBACV,IAAI,EAAE,cAAc;wBACpB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC7B,MAAM,EAAE,iEAAiE;qBAC1E;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;gBACpC,MAAM,SAAS,GAAG,8EAA8E;sBAC5F,qGAAqG;sBACrG,0GAA0G;sBAC1G,gHAAgH,CAAC;gBACrH,0EAA0E;gBAC1E,qCAAqC;gBACrC,IAAI,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC7D,OAAO,WAAW,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,wDAAwD;0BACjG,uBAAuB,SAAS,sDAAsD,CAAC,CAAC,CAAC;gBAC/F,CAAC;gBACD,kFAAkF;gBAClF,kFAAkF;gBAClF,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5C,OAAO,WAAW,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,oEAAoE;0BAC7G,sGAAsG;0BACtG,2CAA2C,SAAS,4CAA4C;0BAChG,4CAA4C,CAAC,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"clone-workflow.js","sourceRoot":"","sources":["../../src/tools/clone-workflow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAoB,MAAM,iBAAiB,CAAC;AACxH,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAM7D,MAAM,UAAU,qBAAqB,CAAC,MAAiB,EAAE,MAAkB;IACzE,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,uEAAuE;cAChF,+EAA+E;cAC/E,gFAAgF;cAChF,kFAAkF;cAClF,0CAA0C;QAC9C,WAAW,EAAE,WAAW,CAAC;YACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;iBACpB,QAAQ,CAAC,uFAAuF,CAAC;SACrG,CAAC;QACF,YAAY,EAAE;YACZ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;YACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;YACjB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;YACxB,UAAU,EAAE,gBAAgB;SAC7B;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,iBAAiB,CAC9B,MAAM,MAAM,CAAC,IAAI,CAAgB,iBAAiB,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EACpG,mCAAmC,CACpC,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;YAC3H,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC;YAC9C,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAErD,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,oCAAoC,UAAU,CAAC,KAAK,CAAC,iBAAiB,QAAQ,iBAAiB,WAAW,CAAC,QAAQ,CAAC,EAAE;8BACxH,CAAC,WAAW,CAAC,CAAC,CAAC,wFAAwF,CAAC,CAAC,CAAC,EAAE,CAAC;qBAClH,CAAC;gBACF,iBAAiB,EAAE;oBACjB,QAAQ;oBACR,GAAG,EAAE,WAAW,CAAC,QAAQ,CAAC;oBAC1B,KAAK;oBACL,WAAW;oBACX,UAAU,EAAE;wBACV,IAAI,EAAE,cAAc;wBACpB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC7B,MAAM,EAAE,iEAAiE;qBAC1E;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;gBACpC,MAAM,SAAS,GAAG,8EAA8E;sBAC5F,qGAAqG;sBACrG,0GAA0G;sBAC1G,gHAAgH,CAAC;gBACrH,0EAA0E;gBAC1E,qCAAqC;gBACrC,IAAI,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC7D,OAAO,WAAW,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,wDAAwD;0BACjG,uBAAuB,SAAS,sDAAsD,CAAC,CAAC,CAAC;gBAC/F,CAAC;gBACD,kFAAkF;gBAClF,kFAAkF;gBAClF,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5C,OAAO,WAAW,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,oEAAoE;0BAC7G,sGAAsG;0BACtG,2CAA2C,SAAS,4CAA4C;0BAChG,4CAA4C,CAAC,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/connect-agent-oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect-agent-oauth.d.ts","sourceRoot":"","sources":["../../src/tools/connect-agent-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AA2hB/C,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAmFrF"}
+{"version":3,"file":"connect-agent-oauth.d.ts","sourceRoot":"","sources":["../../src/tools/connect-agent-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAkqB/C,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CA2FrF"}

package/dist/tools/connect-agent-oauth.js

@@ -1,8 +1,10 @@
 import { z } from 'zod';
-import { asString, errorResult, errorText, isPlainObject, requireApiSuccess, } from '../utils/api.js';
-import { OAUTH_LINK_TTL_SECONDS, buildChainedSelections, buildPickerAccounts, chooseConnectionMode, connectionModeRequirements, connectionState, credentialGroup, dashboardAgentUrl, isAllowedRedirectUrl, loadCredentialMeta, ownAppRedirectUri, parseDiscoveredGroups, readOAuthStatus, readUserAgent, toAccountRefs, } from '../utils/agent-config.js';
+import { apiErrorMessage, asString, errorResult, errorText, isPlainObject, requireApiSuccess, } from '../utils/api.js';
+import { CONNECTION_NOT_CLEARED, OAUTH_LINK_TTL_SECONDS, accountLabel, agentStatusOf, buildChainedSelections, buildPickerAccounts, chooseConnectionMode, connectionModeRequirements, connectionRefusalText, connectionState, credentialGroup, customSkillEntries, dashboardAgentUrl, entriesTurnedOnBy, isAgentRunning, isAllowedRedirectUrl, isFilledValue, loadCredentialMeta, loadSkillRegistry, ownAppRedirectUri, parseDiscoveredGroups, pausedSkillTitles, readOAuthStatus, readUserAgent, skillTitles, toAccountRefs, turnOnSkillText, unusedCredential, unusedCredentialNote, writeOnlyModesNote, } from '../utils/agent-config.js';
 import { DEFAULT_WAIT_SECONDS, MAX_WAIT_SECONDS, pollUntil, reportProgress, } from '../utils/poll.js';
-import { nextActionSchema } from './schemas.js';
+import { jsonSpan } from '../utils/quoted-text.js';
+import { readStatusAdvice, skillOffTasksNote, startNeedsPlan, taskLabel, taskNamedByWiro, toAgentDetail, waitingTaskSentence, WIRO_PROJECT_CREDENTIAL } from '../utils/user-agent.js';
+import { nextActionSchema, strictInput } from './schemas.js';
 const accountSchema = z.object({ id: z.string(), name: z.string() });
 const outputSchema = {
     action: z.enum(['connect', 'status', 'select_accounts']),
@@ -43,7 +45,7 @@ const outputSchema = {
         mode: z.string(),
         available: z.boolean(),
         needsBrowser: z.boolean(),
-        fields: z.array(z.object({ field: z.string(), label: z.string(), isSet: z.boolean() })),
+        fields: z.array(z.object({ field: z.string(), label: z.string(), isSet: z.boolean(), writeOnly: z.boolean().optional() })),
         note: z.string(),
     })).optional(),
     ownAppRedirectUri: z.string().optional(),
@@ -52,9 +54,6 @@ const outputSchema = {
 };
 const DONE_STATES = new Set(['connected', 'pick_accounts', 'pick_child_items']);
 function oauthHint(message, meta) {
-    if (/not found or unauthorized/i.test(message)) {
-        return 'Integrations can only be connected with a project created by the person who deployed the agent: connect this server with such a project, by its API key or a browser sign-in.';
-    }
     if (/credentials not configured/i.test(message)) {
         return `Save your own ${meta.title} app keys with set_agent_credentials first (call it with credential "${meta.key}" to see the fields).`;
     }
@@ -93,7 +92,7 @@ function childStepOf(picker, groups, configured) {
     };
 }
 function accountsLine(accounts) {
-    return accounts.map(account => (account.name ? `${account.name} (${account.id})` : account.id)).join(', ');
+    return accounts.map(accountLabel).join(', ');
 }
 function result(action, context, state, message, extra = {}, textExtra = []) {
     const lines = [
@@ -103,7 +102,7 @@ function result(action, context, state, message, extra = {}, textExtra = []) {
         ...textExtra,
     ];
     if (isPlainObject(extra.nextAction)) {
-        lines.push('', `Next: call ${String(extra.nextAction.tool)} with ${JSON.stringify(extra.nextAction.arguments)}.`);
+        lines.push('', `Next: call ${String(extra.nextAction.tool)} with ${jsonSpan(extra.nextAction.arguments)}.`);
     }
     return {
         content: [{ type: 'text', text: lines.join('\n') }],
@@ -121,13 +120,52 @@ function result(action, context, state, message, extra = {}, textExtra = []) {
 function modeLines(modes) {
     return [
         '',
-        ...modes.filter(mode => mode.available).map(mode => `- **${mode.mode}**: ${mode.note}${mode.fields.length > 0 ? ` Fields: ${mode.fields.map(field => `${field.field}${field.isSet ? ' (set)' : ' (missing)'}`).join(', ')}.` : ''}`),
+        ...modes.filter(mode => mode.available).map(mode => `- **${mode.mode}**: ${mode.note}${mode.fields.length > 0 ? ` Fields: ${mode.fields.map(field => `${field.field}${field.isSet ? ' (set)' : field.writeOnly ? '' : ' (missing)'}`).join(', ')}.` : ''}`),
     ];
 }
+/** The answer to a connect that the rule on unused credentials refuses, or null when it may go ahead. */
+function unusedCredentialRefusal(row, context, registry) {
+    const { credential, meta } = context;
+    const unused = unusedCredential(row, credential, registry);
+    if (!unused)
+        return null;
+    return [
+        `${meta.title} is not used by any of this agent's active skills, custom skills or scheduled tasks, so nothing was started.`,
+        unused.services.length > 0
+            ? `Services its skills connect with this tool: ${unused.services.join(', ')}.`
+            : 'None of its skills connect a service with this tool.',
+        turnOnSkillText(meta.title, credential, unused.skills),
+        credentialGroup(row, credential)?._connected === true ? `${meta.title} is still connected from before; disconnect_agent_oauth removes that connection.` : '',
+    ].filter(Boolean).join(' ');
+}
+/**
+ * What a finished sign-in does to the entries that need the service (entriesTurnedOnBy): the ones it turns on,
+ * the ones it turns on that stay paused for skills that are off, the tasks already on that start running, and
+ * those that still wait for skills. Each task is named as people see it, and each skill by its title. A task
+ * that is on runs only while the agent runs, so on an agent that is not running it would run once it starts.
+ */
+function turnsOnNote({ on, paused, starts, waiting }, { meta }, titles, running) {
+    if (on.length === 0 && paused.length === 0 && starts.length === 0 && waiting.length === 0)
+        return '';
+    const names = (entries) => entries.map(entry => taskLabel(entry.key, taskNamedByWiro(entry))).join(', ');
+    const startRunning = running
+        ? `${starts.length > 1 ? 'start' : 'starts'} running once ${meta.title} is connected`
+        : `would run once ${meta.title} is connected and the agent starts`;
+    const sentence = (on.length > 0 ? ` ${names(on)} ${on.length > 1 ? 'turn' : 'turns'} on once ${meta.title} is connected.` : '')
+        + paused.map(task => waitingTaskSentence(task.key, task.groups, titles, 'turns on but stays paused')).join('')
+        + (starts.length > 0 ? ` ${names(starts)} ${startRunning}.` : '')
+        + waiting.map(task => waitingTaskSentence(task.key, task.groups, titles, 'stays paused')).join('');
+    return [...on, ...starts].some(entry => entry.kind === 'scheduled_task') || paused.length > 0
+        ? `${sentence} Every run of a scheduled task uses credits; turn off any you do not want with manage_agent_custom_skill.`
+        : sentence;
+}
 async function connect(context, input) {
     const { client, agentGuid, credential, meta, signal } = context;
     const oauth = meta.oauth;
     const row = await readUserAgent(client, agentGuid, signal);
+    const refusal = unusedCredentialRefusal(row, context, await loadSkillRegistry(client, signal));
+    if (refusal)
+        return errorResult(new Error(refusal));
     const group = credentialGroup(row, credential);
     const modes = connectionModeRequirements(meta, group);
     const redirectUri = meta.connectionModes.includes('own') ? ownAppRedirectUri(meta) : undefined;
@@ -143,7 +181,8 @@ async function connect(context, input) {
     const mode = input.mode ?? chooseConnectionMode(meta, modes);
     const requirement = modes.find(candidate => candidate.mode === mode);
     if (!mode || !requirement) {
-        return result('connect', context, 'setup_needed', `Choose how to connect ${meta.title}: it needs your own app keys or a token saved first.`, { ...setupExtra, nextAction: describeAction }, modeLines(modes));
+        const savedKeysNote = writeOnlyModesNote(modes);
+        return result('connect', context, 'setup_needed', `Choose how to connect ${meta.title}: it needs your own app keys or a token saved first.${savedKeysNote ? ` ${savedKeysNote}` : ''}`, { ...setupExtra, nextAction: describeAction }, modeLines(modes));
     }
     if (!requirement.available) {
         return result('connect', context, 'setup_needed', `${requirement.note}`, { ...setupExtra, mode, nextAction: describeAction }, modeLines(modes));
@@ -151,13 +190,27 @@ async function connect(context, input) {
     if (mode === 'api_key' && !oauth.directProbe) {
         return result('connect', context, 'setup_needed', requirement.note, { ...setupExtra, mode, nextAction: describeAction }, modeLines(modes));
     }
-    const missing = requirement.fields.filter(field => !field.isSet);
+    // App keys read as empty even once saved, so for those the sign-in route below decides.
+    const missing = requirement.fields.filter(field => !field.isSet && !field.writeOnly);
     if (missing.length > 0) {
         return result('connect', context, 'setup_needed', `Mode ${mode} needs these saved first with set_agent_credentials: ${missing.map(field => `${field.label} (${field.field})`).join(', ')}. ${requirement.note}`, { ...setupExtra, mode, nextAction: describeAction });
     }
     const connectedBefore = group?._connected === true;
-    if (connectedBefore && !input.confirm) {
-        return result('connect', context, 'confirm_needed', `${meta.title} is already connected. Connecting again replaces that connection and its selected accounts; if the new sign-in or check fails, the agent is left without it.`, {
+    // A sign-in removes what is saved for the modes it leaves.
+    const removed = mode === oauth.directProbe?.mode
+        ? []
+        : meta.fields.filter(field => !field.oauthManaged
+            && field.onlyInModes?.length
+            && !field.onlyInModes.includes(mode)
+            && isFilledValue(group?.[field.key]));
+    const appKeys = requirement.fields.filter(field => field.writeOnly);
+    if ((connectedBefore || removed.length > 0) && !input.confirm) {
+        const saveKeysFirst = removed.length > 0 && appKeys.length > 0
+            ? ' Save the app keys first if they are not saved yet, so the sign-in can start.'
+            : '';
+        return result('connect', context, 'confirm_needed', `${connectedBefore
+            ? `${meta.title} is already connected. Connecting again replaces that connection and its selected accounts; if the new sign-in or check fails, the agent is left without it.`
+            : `Connecting ${meta.title} with mode ${mode} removes the saved ${removed.map(field => field.label).join(', ')}.`}${saveKeysFirst}`, {
             mode,
             nextAction: {
                 tool: 'connect_agent_oauth',
@@ -175,7 +228,8 @@ async function connect(context, input) {
     }
     if (oauth.directProbe && mode === oauth.directProbe.mode) {
         // The check reads the mode from the saved credential, so it is saved first.
-        if (asString(group?.authmethod) !== mode) {
+        const modeSaved = asString(group?.authmethod) !== mode;
+        if (modeSaved) {
             requireApiSuccess(await client.post('/UserAgent/CredentialUpsert', {
                 useragentguid: agentGuid,
                 fields: [{ credentialkey: credential, fieldname: 'authmethod', fieldvalue: mode }],
@@ -190,6 +244,8 @@ async function connect(context, input) {
             const code = asString(body.errorcode);
             const message = (body.errors ?? []).map(error => error?.message?.trim()).filter(Boolean).join(' ')
                 || `${meta.title} could not be checked.`;
+            if (message === CONNECTION_NOT_CLEARED)
+                return errorResult(new Error(message));
             const parts = [code ? `${message} (${code})` : message];
             if (code === 'direct_token_missing') {
                 parts.push(`Save ${requirement.fields.map(field => field.field).join(', ')} with set_agent_credentials first.`);
@@ -197,6 +253,12 @@ async function connect(context, input) {
             else if (connectedBefore) {
                 parts.push('Connect again to restore the connection.');
             }
+            // An error result reads as nothing done, so it says what the check still did.
+            if (modeSaved)
+                parts.push(`The mode is saved as ${mode}.`);
+            if ((modeSaved || code) && isAgentRunning(agentStatusOf(row))) {
+                parts.push('The running agent restarts, which takes about a minute.');
+            }
             return errorResult(new Error(parts.join(' ')));
         }
         const candidates = toAccountRefs(body.accounts, oauth.picker);
@@ -212,7 +274,7 @@ async function connect(context, input) {
                         ? 'Save the only available account.'
                         : 'Ask the user which accounts to use, then save only those.',
                 },
-            }, ['', ...candidates.map(account => `- ${account.name || account.id} (${account.id})`)]);
+            }, ['', ...candidates.map(account => `- ${accountLabel(account)}`)]);
         }
         return result('connect', context, 'connected', `${meta.title} is connected. A running agent restarts to use it.`, { mode });
     }
@@ -227,12 +289,23 @@ async function connect(context, input) {
     catch {
         since = '';
     }
-    const body = requireApiSuccess(await client.post('/UserAgentOAuth/OAuthConnect', {
+    const answer = await client.post('/UserAgentOAuth/OAuthConnect', {
         useragentguid: agentGuid,
         credentialkey: credential,
         authmethod: mode,
         redirecturl: redirectUrl,
-    }, signal), `Could not start the ${meta.title} sign-in.`);
+    }, signal);
+    if (answer.result !== true && appKeys.length > 0 && /credentials not configured/i.test(apiErrorMessage(answer, ''))) {
+        // What the sign-in removes may be gone already, so this answer goes by a fresh read.
+        const fresh = removed.length > 0 ? await readUserAgent(client, agentGuid, signal).catch(() => null) : null;
+        const groupNow = fresh ? credentialGroup(fresh, credential) : group;
+        const gone = removed.filter(field => !isFilledValue(groupNow?.[field.key]));
+        const goneText = gone.length > 0
+            ? ` The sign-in did not start, and this call removed the saved ${gone.map(field => field.label).join(', ')}${connectedBefore && groupNow?._connected !== true ? `, so ${meta.title} is no longer connected` : ''}. To go back to it, save it again with set_agent_credentials.`
+            : '';
+        return result('connect', context, 'setup_needed', `Mode ${mode} needs these saved first with set_agent_credentials: ${appKeys.map(field => `${field.label} (${field.field})`).join(', ')}. ${requirement.note}${goneText}`, { ...setupExtra, connectionModes: connectionModeRequirements(meta, groupNow), mode, nextAction: describeAction });
+    }
+    const body = requireApiSuccess(answer, `Could not start the ${meta.title} sign-in.`);
     const authorizeUrl = asString(body.authorizeUrl);
     if (!authorizeUrl)
         throw new Error(`Wiro did not return a sign-in link for ${meta.title}.`);
@@ -240,7 +313,9 @@ async function connect(context, input) {
     const after = usesDashboard
         ? `After approving, the browser returns to the agent's page in the Wiro dashboard${oauth.picker ? ', which asks which accounts the agent should use' : ''}. Use a browser where the user is signed in to wiro.ai as the agent's owner.`
         : `After approving, the browser goes to ${redirectUrl}.`;
-    return result('connect', context, 'authorize_in_browser', `The user must open this link in their own browser and approve access. It works for ${OAUTH_LINK_TTL_SECONDS / 60} minutes. ${after} Give the link to the user and check the status once they say they are done.`, {
+    const turnsOn = entriesTurnedOnBy(row, credential);
+    const titles = await skillTitles(client, [...turnsOn.paused, ...turnsOn.waiting].flatMap(task => task.groups.flat()), signal);
+    return result('connect', context, 'authorize_in_browser', `The user must open this link in their own browser and approve access. It works for ${OAUTH_LINK_TTL_SECONDS / 60} minutes. ${after}${turnsOnNote(turnsOn, context, titles, isAgentRunning(agentStatusOf(row)))} Give the link to the user and check the status once they say they are done.`, {
         mode,
         authorizeUrl,
         expiresInSeconds: OAUTH_LINK_TTL_SECONDS,
@@ -258,7 +333,24 @@ async function connect(context, input) {
         },
     }, ['', authorizeUrl]);
 }
-function statusMessage(state, meta, snapshot) {
+/**
+ * What to do about access that reads as expired. A start is offered only when one can
+ * happen. Without the agent's row the offer stays: control_agent reads the agent again
+ * and says what comes first.
+ */
+function expiredAdvice(row) {
+    const startOrConnect = 'Start the agent with control_agent, or connect again.';
+    if (!row)
+        return startOrConnect;
+    const agent = toAgentDetail(row);
+    if ((agent.status === 0 || agent.status === 5) && !startNeedsPlan(agent))
+        return startOrConnect;
+    return agent.status === 3 || agent.status === 4
+        ? 'If the agent cannot use it, connect again.'
+        : `Connect again if the agent needs it. ${readStatusAdvice(agent)}`;
+}
+function statusMessage(state, meta, snapshot, unusedNote, row) {
+    const saved = row !== null && credentialGroup(row, meta.key)?._connected === true;
     const next = meta.oauth?.picker?.next;
     switch (state) {
         case 'connected': {
@@ -274,9 +366,11 @@ function statusMessage(state, meta, snapshot) {
         case 'waiting_for_user':
             return `The ${meta.title} sign-in has not finished yet. The link from connect works for ${OAUTH_LINK_TTL_SECONDS / 60} minutes; after that, connect again.`;
         case 'token_expired':
-            return `The saved ${meta.title} access has expired. Start the agent with control_agent, or connect again.`;
+            return `The saved ${meta.title} access has expired.${saved ? ` The connection is still saved, so get_my_agent lists ${meta.title} as connected.` : ''} ${unusedNote ?? expiredAdvice(row)}`;
         default:
-            return `${meta.title} is not connected. Start with action connect.`;
+            return saved
+                ? `This check found no current ${meta.title} sign-in, but a ${meta.title} connection is saved on this agent, so get_my_agent lists it as connected. ${unusedNote ?? 'If the agent cannot use it, connect again: that replaces the saved connection and asks for confirm: true.'}`
+                : `${meta.title} is not connected. ${unusedNote ?? 'Start with action connect.'}`;
     }
 }
 async function status(context, input, extra) {
@@ -296,6 +390,8 @@ async function status(context, input, extra) {
         throw new Error(`Could not read the ${meta.title} connection status.`);
     const state = stateOf(snapshot);
     let nextAction;
+    let unusedNote = null;
+    let row = null;
     if (state === 'waiting_for_user') {
         nextAction = {
             tool: 'connect_agent_oauth',
@@ -317,16 +413,33 @@ async function status(context, input, extra) {
         };
     }
     else if (state === 'not_connected' || state === 'token_expired') {
-        nextAction = {
-            tool: 'connect_agent_oauth',
-            arguments: { action: 'connect', agent_guid: agentGuid, credential },
-            reason: `Connect ${meta.title}.`,
-        };
+        // Only these states offer connect, so only they read the skills. A status is
+        // still answered when that read fails: connect goes by the rule anyway.
+        row = await readUserAgent(client, agentGuid, signal).catch(() => null);
+        unusedNote = row ? await unusedCredentialNote(client, row, credential, meta.title, signal) : null;
+        if (!unusedNote) {
+            nextAction = {
+                tool: 'connect_agent_oauth',
+                arguments: { action: 'connect', agent_guid: agentGuid, credential },
+                reason: `Connect ${meta.title}.`,
+            };
+        }
+    }
+    // Once connected, the scheduled tasks that need this service and still wait for a skill are named, with the
+    // skills they wait for. A status is still answered when the agent cannot be read.
+    let pausedNote = '';
+    if (state === 'connected') {
+        row = await readUserAgent(client, agentGuid, signal).catch(() => null);
+        const paused = row
+            ? customSkillEntries(row).filter(entry => entry.kind === 'scheduled_task' && entry.skillOff
+                && (entry.requiresCredentials.includes(credential) || (entry.usableCredentials ?? []).includes(credential)))
+            : [];
+        pausedNote = skillOffTasksNote(paused, await pausedSkillTitles(client, paused, signal));
     }
     const childStep = snapshot.childStep
         ? { ...snapshot.childStep, label: picker?.next?.label ?? snapshot.childStep.picker }
         : undefined;
-    return result('status', context, state, statusMessage(state, meta, snapshot), {
+    return result('status', context, state, `${statusMessage(state, meta, snapshot, unusedNote, row)}${pausedNote}`, {
         ...(snapshot.connectedAt ? { connectedAt: snapshot.connectedAt } : {}),
         ...(snapshot.tokenExpiresAt ? { tokenExpiresAt: snapshot.tokenExpiresAt } : {}),
         accounts: snapshot.accounts,
@@ -368,8 +481,8 @@ async function selectAccounts(context, input) {
                     reason: 'Ask the user which ones to keep; this preselects all of them.',
                 },
             }, ['', ...groups.flatMap(group => [
-                    `- ${group.parent.name || group.parent.id} (${group.parent.id})${group.errorCode ? `: could not be read (${group.errorCode})` : ''}`,
-                    ...group.items.map(item => `  - ${item.name || item.id} (${item.id})`),
+                    `- ${accountLabel(group.parent)}${group.errorCode ? `: could not be read (${group.errorCode})` : ''}`,
+                    ...group.items.map(item => `  - ${accountLabel(item)}`),
                 ])]);
         }
         const built = buildChainedSelections(next, groups, input.selections);
@@ -438,13 +551,16 @@ export function registerConnectAgentOauth(server, client) {
             + 'save. action status: whether the sign-in finished (wait_seconds waits for '
             + 'the user). action select_accounts: saves which accounts the agent uses ({id, name} from '
             + 'connect), and with picker runs the extra step some providers have (Meta Ads pages, '
-            + 'Google Business locations). Connecting again replaces an existing connection and needs '
-            + 'confirm: true. A running agent restarts when a connection or selection is saved. '
-            + 'Remove a connection with disconnect_agent_oauth. Connect only a credential that the agent\'s '
-            + 'skills use (get_my_agent lists them). Only the person who deployed the agent can connect, so the '
+            + 'Google Business locations). Connecting again replaces an existing connection, and a sign-in removes a token saved for another mode; both need '
+            + 'confirm: true. A running agent restarts when a connection or selection is saved. Connecting a service '
+            + 'turns on the scheduled tasks that need it, and the result names any that stay paused until a skill they need is on; '
+            + 'turn off any you do not want. '
+            + 'Remove a connection with disconnect_agent_oauth. A credential that none of the agent\'s active '
+            + 'skills use, that no custom skill or scheduled task of the agent requires, and that its setup does not wait for, is refused before any link is made (get_my_agent '
+            + 'lists the skills; apply_agent_skills turns one on). Only the person who deployed the agent can connect, so the '
             + 'connected project must be one that person created. The agents playbook (get_playbook) has the '
             + 'full setup walkthrough.',
-        inputSchema: {
+        inputSchema: strictInput({
             action: z.enum(['connect', 'status', 'select_accounts']).default('connect')
                 .describe('connect (default) starts a connection, status checks it, select_accounts saves the accounts to use.'),
             agent_guid: z.string().min(1).describe('The deployed agent\'s guid, from list_my_agents.'),
@@ -468,12 +584,12 @@ export function registerConnectAgentOauth(server, client) {
             })).optional()
                 .describe('select_accounts with picker: what to use under each account. Accounts left out get nothing.'),
             confirm: z.boolean().default(false)
-                .describe('connect: true to replace an existing connection after the user agreed.'),
-        },
+                .describe('connect: true to replace an existing connection or a token saved for another mode, after the user agreed.'),
+        }),
         outputSchema,
         annotations: {
             readOnlyHint: false,
-            destructiveHint: false,
+            destructiveHint: true,
             idempotentHint: false,
             openWorldHint: true,
         },
@@ -485,7 +601,9 @@ export function registerConnectAgentOauth(server, client) {
             if (!meta)
                 return errorResult(new Error(`Unknown credential "${credential}".`));
             if (!meta.oauth) {
-                return errorResult(new Error(`${meta.title} is not a sign-in connection. Save its fields with set_agent_credentials (call it with credential "${credential}" to see them).`));
+                return errorResult(new Error(credential === WIRO_PROJECT_CREDENTIAL
+                    ? `${meta.title} is not a sign-in connection. Connect a Wiro project with bind_agent_project, with no key to paste.`
+                    : `${meta.title} is not a sign-in connection. Save its fields with set_agent_credentials (call it with credential "${credential}" to see them).`));
             }
             const context = { client, agentGuid: args.agent_guid, credential, meta, signal: extra.signal };
             if (args.action === 'status') {
@@ -501,7 +619,10 @@ export function registerConnectAgentOauth(server, client) {
             return await connect(context, { mode: args.mode, redirectUrl: args.redirect_url, confirm: args.confirm });
         }
         catch (error) {
-            return errorResult(withHint(error, meta ?? undefined));
+            const message = errorText(error);
+            return errorResult(/not found or unauthorized/i.test(message)
+                ? new Error(await connectionRefusalText(client, args.agent_guid, message, 'connected', extra.signal))
+                : withHint(error, meta ?? undefined));
         }
     });
 }