@xopcai/xopc 0.0.388 → 0.0.389

package/dist/src/agent/embedded/session-tool-result-guard.js

@@ -1,10 +1,10 @@
 import { init_string_coerce, normalizeOptionalString } from "../../utils/string-coerce.js";
 import { emitSessionTranscriptUpdate } from "../../session/transcript-events.js";
+import { extractToolCallsFromAssistant, extractToolResultId } from "../transcript/tool-call-id.js";
+import { makeMissingToolResult, sanitizeToolCallInputs } from "../transcript/session-transcript-repair.js";
 import { boundedJsonUtf8Bytes, firstEnumerableOwnKeys, jsonUtf8BytesOrInfinity } from "../../infra/json-utf8-bytes.js";
 import { formatContextLimitTruncationNotice } from "./tool-result-context-guard.js";
 import { resolveLiveToolResultMaxChars, truncateToolResultMessage } from "./tool-result-truncation.js";
-import { extractToolCallsFromAssistant, extractToolResultId } from "../transcript/tool-call-id.js";
-import { makeMissingToolResult, sanitizeToolCallInputs } from "../transcript/session-transcript-repair.js";
 //#region src/agent/embedded/session-tool-result-guard.ts
 init_string_coerce();
 /**

package/dist/src/agent/embedded/tool-result-truncation.js

@@ -1,6 +1,6 @@
 import { init_string_coerce, normalizeLowercaseStringOrEmpty } from "../../utils/string-coerce.js";
-import { formatContextLimitTruncationNotice } from "./tool-result-context-guard.js";
 import { isDataBatchResult, renderDataBatch } from "../data-acquisition/render.js";
+import { formatContextLimitTruncationNotice } from "./tool-result-context-guard.js";
 //#region src/agent/embedded/tool-result-truncation.ts
 init_string_coerce();
 const MAX_TOOL_RESULT_CONTEXT_SHARE = .3;

package/dist/src/agent/embedded/xopc-tools-bridge.js

@@ -1,6 +1,6 @@
-import { recordPersonalPerformance } from "../../personal-agent/performance.js";
 import { getXopcToolMetadata } from "./tool-metadata.js";
 import { withDataToolPermissions } from "../tools/dataBatch.js";
+import { recordPersonalPerformance } from "../../personal-agent/performance.js";
 //#region src/agent/embedded/xopc-tools-bridge.ts
 const APPLY_PATCH_BEGIN_MARKER = "*** Begin Patch";
 const APPLY_PATCH_END_MARKER = "*** End Patch";

package/dist/src/agent/external-tools/cliProvider.js

@@ -8,15 +8,15 @@ import { init_sqlite } from "../../storage/sqlite/index.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
 import "../../capabilities/runtime/dispatcher.js";
+import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
 import { connectorPrincipalForSession } from "../../connectors/principal.js";
+import { selectConnectorAccount } from "../../connectors/account-selection.js";
+import { cliContextPath } from "../../connectors/cli/process.js";
 import { validateActionInput } from "../../connectors/cli/protocol.js";
 import { getCliAdapter } from "../../connectors/cli/adapterRegistry.js";
 import { evaluateConnectorExecutionPolicy } from "../../connectors/policy.js";
 import { listConnectorInstances } from "../../connectors/instances.js";
-import { cliContextPath } from "../../connectors/cli/process.js";
 import { cliOwnerId, recoverCliExecutions } from "../../connectors/cli/store.js";
-import { selectConnectorAccount } from "../../connectors/account-selection.js";
-import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
 import { describeCliAction, executeCliAction } from "../../connectors/cli/runtime.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
 import { join } from "node:path";

package/dist/src/agent/external-tools/composio-provider.js

@@ -7,6 +7,7 @@ import { bindObjectiveAccount, connectionBinding, connectionBindings, connectorO
 import { init_sqlite } from "../../storage/sqlite/index.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
+import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
 import { canAccessConnectorAccount, currentAccountConnections } from "../../connectors/account-access.js";
 import { connectorPrincipalForSession } from "../../connectors/principal.js";
 import { connectorIdentitySummary } from "../../connectors/connector-identity.js";
@@ -15,9 +16,8 @@ import { ComposioSessionsAdapter } from "../../connectors/composio-sessions.js";
 import { getComposioToolkitScope, getConfiguredComposioAuthConfigs, isComposioActionAllowedByCatalog, scopeForComposioAction } from "../../connectors/composio.js";
 import { getConnectorDefinition } from "../../connectors/catalog.js";
 import { listConnectorInstances } from "../../connectors/instances.js";
-import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
-import { isToolInputSchema } from "../../connectors/connection-capabilities.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
+import { isToolInputSchema } from "../../connectors/connection-capabilities.js";
 import { ExternalToolSearchError } from "./search-error.js";
 //#region src/agent/external-tools/composio-provider.ts
 init_session_input_repository();

package/dist/src/agent/external-tools/endpoint-provider.js

@@ -2,14 +2,14 @@ import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../c
 import { canonicalCapabilityJson } from "../../capabilities/runtime/dispatcher.js";
 import { init_src } from "../../../packages/computer-control-contract/src/index.js";
 import "../../../packages/browser-control-contract/src/index.js";
+import { externalToolRef, parseExternalToolRef } from "./refs.js";
 import { extractDocumentText } from "../../document-understanding/extract.js";
-import { EndpointToolExecutionError } from "../../endpoint-tools/invocation-service.js";
+import { prepareImageForModel } from "../image/prepare-image-for-model.js";
 import { processLocationTask } from "../../endpoint-tools/location-task.js";
 import { projectDeviceReading } from "../../endpoint-tools/result-projector.js";
-import { DeviceTargetResolver } from "../../endpoint-tools/target-resolver.js";
 import { getEndpointDeviceSettings } from "../../storage/sqlite/endpoint-device-settings-repository.js";
-import { externalToolRef, parseExternalToolRef } from "./refs.js";
-import { prepareImageForModel } from "../image/prepare-image-for-model.js";
+import { DeviceTargetResolver } from "../../endpoint-tools/target-resolver.js";
+import { EndpointToolExecutionError } from "../../endpoint-tools/invocation-service.js";
 import { createHash } from "node:crypto";
 //#region src/agent/external-tools/endpoint-provider.ts
 init_src();

package/dist/src/agent/external-tools/gateway-tools.js

@@ -7,11 +7,11 @@ import { getSessionMetadata } from "../../storage/sqlite/session-read-repository
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
 import { connectorPrincipalForSession } from "../../connectors/principal.js";
 import { listConnectorInstances } from "../../connectors/instances.js";
-import { getStoreConnectorInstallPlan, parseStoreConnectorCandidateRef, searchStoreConnectorInstallCandidates } from "../../capabilities/store-connector.js";
-import { connectionCandidates, resolveConnectionCandidate } from "../../connectors/connection-candidates.js";
 import { parseExternalToolRef } from "./refs.js";
 import { setXopcToolMetadata } from "../embedded/tool-metadata.js";
+import { getStoreConnectorInstallPlan, parseStoreConnectorCandidateRef, searchStoreConnectorInstallCandidates } from "../../capabilities/store-connector.js";
 import { assertPersonalRequestAccountAccess } from "../../personal-agent/request-access.js";
+import { connectionCandidates, resolveConnectionCandidate } from "../../connectors/connection-candidates.js";
 import { ExternalToolService } from "./service.js";
 import { EXTERNAL_TOOL_SOURCES } from "./types.js";
 import { bindExternalToolRegistry } from "./tool-registry.js";

package/dist/src/agent/image/generation/openai-images-provider.js

@@ -1,5 +1,6 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
+import { imageFileExtensionForMimeType } from "./image-assets.js";
 import { pickTimeoutMsOrFallback } from "../../../media-shared/http/deadline.js";
 import { privateNetworkPolicyToSsrfGuardOptions } from "../../../media-shared/http/private-network.js";
 import { resolveProviderHttpRequestConfig } from "../../../media-shared/http/resolve-provider-http-request-config.js";
@@ -8,7 +9,6 @@ import "../../../media-shared/http/index.js";
 import { ImageProviderError, validateImageRequest } from "../../../../packages/image-providers/src/validation.js";
 import { decodeBase64, imageFromBytes } from "../../../../packages/image-providers/src/http.js";
 import "../../../../packages/image-providers/src/index.js";
-import { imageFileExtensionForMimeType } from "./image-assets.js";
 //#region src/agent/image/generation/openai-images-provider.ts
 /** Strict implementation of the OpenAI Images REST protocol. */
 init_logger();

package/dist/src/agent/image/generation/runtime.js

@@ -3,12 +3,12 @@ import { init_logger } from "../../../utils/logger.js";
 import { PROVIDER_ENV_MAP, init_env_keys } from "../../../providers/env-keys.js";
 import { ImageProviderError } from "../../../../packages/image-providers/src/validation.js";
 import "../../../../packages/image-providers/src/index.js";
-import { getImageGenerationProvider, listImageGenerationProviders, listImageGenerationProvidersSummary as listImageGenerationProvidersSummary$1 } from "./provider-registry.js";
 import { describeFailoverError, isFailoverError } from "../../failover-error.js";
 import { buildNoCapabilityModelConfiguredMessage, recordCapabilityCandidateFailure, resolveCapabilityModelCandidates, throwCapabilityGenerationFailure } from "../../media-generation/runtime-shared.js";
 import "../../media-generation/index.js";
 import { parseImageGenerationModelRef } from "./model-ref.js";
 import { validateImageGenerationRequest } from "./validation.js";
+import { getImageGenerationProvider, listImageGenerationProviders, listImageGenerationProvidersSummary as listImageGenerationProvidersSummary$1 } from "./provider-registry.js";
 //#region src/agent/image/generation/runtime.ts
 init_env_keys();
 init_logger();

package/dist/src/agent/image/index.js

@@ -1,9 +1,9 @@
-import { getImageGenerationProvider, listImageGenerationProviders } from "./generation/provider-registry.js";
 import { getImageUnderstandingProvider, listImageUnderstandingProviders, registerImageUnderstandingProvider } from "./understanding/provider-registry.js";
 import { resolveImageModelConfigForTool } from "./tool-model-config.js";
 import { describeImages, describeImagesWithFallback } from "./understanding/runtime.js";
 import { modelSupportsVision, resolveImageHandlingStrategy } from "./vision-detection.js";
 import { runWithImageModelFallback } from "./image-model-fallback.js";
 import { loadImageForToolInput } from "./load-image-media.js";
+import { getImageGenerationProvider, listImageGenerationProviders } from "./generation/provider-registry.js";
 import { generateImage, listImageGenerationProvidersSummary } from "./generation/runtime.js";
 export { describeImages, describeImagesWithFallback, generateImage, getImageGenerationProvider, getImageUnderstandingProvider, listImageGenerationProviders, listImageGenerationProvidersSummary, listImageUnderstandingProviders, loadImageForToolInput, modelSupportsVision, registerImageUnderstandingProvider, resolveImageHandlingStrategy, resolveImageModelConfigForTool, runWithImageModelFallback };

package/dist/src/agent/image/load-image-media.js

@@ -1,5 +1,5 @@
-import { decodeDataUrl } from "./image-helpers.js";
 import { checkFileSafety } from "../prompt/safety.js";
+import { decodeDataUrl } from "./image-helpers.js";
 import { homedir } from "node:os";
 import path from "node:path";
 import { promises } from "node:fs";

package/dist/src/agent/inbound/attachment-pipeline.js

@@ -1,14 +1,14 @@
 import { stripRuntimeUserMessageEnvelope } from "../../../packages/gateway-contract/src/user-message-display.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
+import { extractProfileAgentId } from "../../config/agent-profile.js";
+import { readAgentMessageContent } from "../memory/agent-message-access.js";
+import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { mimeTypeFromMediaPath } from "../../media/store.js";
 import { readMediaReference } from "../../media/media-reference.js";
-import { isPersonalConversation } from "../../personal-agent/repository.js";
-import { extractProfileAgentId } from "../../config/agent-profile.js";
 import { MODEL_IMAGE_MAX_BYTES, MODEL_IMAGE_SOURCE_MAX_BYTES, prepareImageForModel } from "../image/prepare-image-for-model.js";
 import { isImageInboundAttachment } from "../../channels/attachments/attachment-classifiers.js";
 import "../../channels/attachments/inbound-persist.js";
 import { expandAtFileMentionsInPlainText } from "../context/expand-at-file-mentions.js";
-import { readAgentMessageContent } from "../memory/agent-message-access.js";
 import { resolveImageHandlingStrategy } from "../image/vision-detection.js";
 import { resolveInboundImageContentParts } from "../image/inbound-image-handling.js";
 //#region src/agent/inbound/attachment-pipeline.ts

package/dist/src/agent/inbound/inbound-loop.js

@@ -1,9 +1,9 @@
 import { runWithLogContext, updateAsyncLogContext } from "../../utils/logger/context.js";
 import { init_logger } from "../../utils/logger.js";
-import { MessageBusShutdownError } from "../../infra/bus/queue.js";
-import "../../infra/bus/index.js";
 import { shouldSkipResetOverlapCommand } from "../../session/reset-triggers.js";
 import { initSessionTurn } from "../../session/init-session-turn.js";
+import { MessageBusShutdownError } from "../../infra/bus/queue.js";
+import "../../infra/bus/index.js";
 import { runEmbeddedTurnForSession } from "../embedded/run-for-session.js";
 import { inboundMessageLogRequestId } from "../service-inbound-utils.js";
 //#region src/agent/inbound/inbound-loop.ts

package/dist/src/agent/index.js

@@ -1,14 +1,14 @@
-import { extractToolCallsFromAssistant, extractToolResultId, sanitizeToolCallId, sanitizeToolCallIdsForCloudCodeAssist } from "./transcript/tool-call-id.js";
-import { makeMissingToolResult, repairToolUseResultPairing, sanitizeToolCallInputs, sanitizeToolUseResultPairing, stripToolResultDetails } from "./transcript/session-transcript-repair.js";
 import { resolveTranscriptPolicy } from "./transcript/transcript-policy.js";
 import { dropThinkingBlocks } from "./transcript/thinking.js";
+import { extractToolCallsFromAssistant, extractToolResultId, sanitizeToolCallId, sanitizeToolCallIdsForCloudCodeAssist } from "./transcript/tool-call-id.js";
+import { makeMissingToolResult, repairToolUseResultPairing, sanitizeToolCallInputs, sanitizeToolUseResultPairing, stripToolResultDetails } from "./transcript/session-transcript-repair.js";
 import { applySessionTranscriptHygiene, applySessionTranscriptHygieneForPersistence, applySessionTranscriptHygieneWithPolicy, resolvePolicyForModel, tryApplySessionTranscriptHygiene, tryApplySessionTranscriptHygieneForPersistence } from "./transcript/transcript-hygiene.js";
-import { AgentService } from "./service.js";
 import { createResponseMessage, createSignalMessage, createTaskMessage, isValidIPCMessage } from "./ipc/types.js";
 import { AgentInbox } from "./ipc/inbox.js";
 import { AgentBus } from "./ipc/bus.js";
 import { AgentSocketClient, AgentSocketServer, isSocketAvailable } from "./ipc/socket.js";
 import "./ipc/index.js";
+import { AgentService } from "./service.js";
 import { stripToolMessages } from "./transcript/strip-tool-messages.js";
 import "./transcript/index.js";
 export { AgentBus, AgentInbox, AgentService, AgentSocketClient, AgentSocketServer, applySessionTranscriptHygiene, applySessionTranscriptHygieneForPersistence, applySessionTranscriptHygieneWithPolicy, createResponseMessage, createSignalMessage, createTaskMessage, dropThinkingBlocks, extractToolCallsFromAssistant, extractToolResultId, isSocketAvailable, isValidIPCMessage, makeMissingToolResult, repairToolUseResultPairing, resolvePolicyForModel, resolveTranscriptPolicy, sanitizeToolCallId, sanitizeToolCallIdsForCloudCodeAssist, sanitizeToolCallInputs, sanitizeToolUseResultPairing, stripToolMessages, stripToolResultDetails, tryApplySessionTranscriptHygiene, tryApplySessionTranscriptHygieneForPersistence };

package/dist/src/agent/mcp/connection-drafts.d.ts

@@ -0,0 +1,50 @@
+import { type Config } from '../../config/schema.js';
+import { type McpConnectionProbe } from './connection-setup.js';
+export declare function mcpConfigRevision(value: unknown): string;
+export declare class McpDraftError extends Error {
+    readonly status: 400 | 404 | 409 | 429 | 500;
+    constructor(status: 400 | 404 | 409 | 429 | 500, message: string);
+}
+export type McpDraftInput = {
+    serverId: string;
+    sourceServerId?: string;
+    expectedServer?: unknown;
+    server: unknown;
+};
+/** Unsaved configuration and OAuth state belong to one principal and never enter the live registry. */
+export declare class McpConnectionDrafts {
+    private readonly options;
+    private readonly completed;
+    private readonly drafts;
+    constructor(options: {
+        readConfig: () => Config;
+        saveConfig: (config: Config, expectedConfig?: Config) => Promise<{
+            saved: boolean;
+            error?: string;
+            persisted?: boolean;
+            conflict?: boolean;
+        }>;
+    });
+    create(owner: string, input: McpDraftInput): Promise<{
+        id: `${string}-${string}-${string}-${string}-${string}`;
+        serverId: string;
+        expiresAt: number;
+    }>;
+    probe(owner: string, id: string): Promise<McpConnectionProbe>;
+    authorize(owner: string, id: string): import("./connection-setup.js").McpAuthorization;
+    authorization(owner: string, id: string): import("./connection-setup.js").McpAuthorization;
+    redirect(owner: string, id: string, url: string): void;
+    cancelAuthorization(owner: string, id: string): void;
+    tools(owner: string, id: string): Promise<import("./tool-catalog.js").McpCatalogTool[]>;
+    /** Caller serializes this with other Gateway config writes. Only this entry is merged into the latest config. */
+    commit(owner: string, id: string, enable?: boolean): Promise<{
+        reloadRequired?: boolean;
+        serverId: string;
+    }>;
+    remove(owner: string, id: string): void;
+    close(): void;
+    private get;
+    private assertIdle;
+    private assertAvailable;
+    private dispose;
+}

package/dist/src/agent/mcp/connection-drafts.js

@@ -0,0 +1,278 @@
+import { McpServerSchema, init_schema } from "../../config/schema.js";
+import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
+import { isManagedConnectorServer } from "../../connectors/materialize.js";
+import { createNativeMcpCredentials } from "./credential-store.js";
+import { loadMergedMcpConfig } from "./config.js";
+import { discoverMcpTools } from "./tool-catalog.js";
+import { cancelMcpAuthorization, getMcpAuthorization, probeMcpConnection, startMcpAuthorization, submitMcpRedirect } from "./connection-setup.js";
+import { createHash, randomUUID } from "node:crypto";
+//#region src/agent/mcp/connection-drafts.ts
+init_schema();
+const TTL_MS = 10 * 6e4;
+function canonical(value) {
+	if (Array.isArray(value)) return value.map(canonical);
+	if (value && typeof value === "object") return Object.fromEntries(Object.entries(value).filter(([, child]) => child !== void 0).sort(([a], [b]) => a.localeCompare(b)).map(([key, child]) => [key, canonical(child)]));
+	return value;
+}
+function mcpConfigRevision(value) {
+	return createHash("sha256").update(JSON.stringify(canonical(value)) ?? "null").digest("hex");
+}
+var McpDraftError = class extends Error {
+	constructor(status, message) {
+		super(message);
+		this.status = status;
+	}
+};
+/** Unsaved configuration and OAuth state belong to one principal and never enter the live registry. */
+var McpConnectionDrafts = class {
+	completed = /* @__PURE__ */ new Map();
+	drafts = /* @__PURE__ */ new Map();
+	constructor(options) {
+		this.options = options;
+	}
+	async create(owner, input) {
+		const current = this.options.readConfig();
+		if (!/^[a-zA-Z0-9_-]+$/.test(input.serverId) || input.sourceServerId && input.sourceServerId !== input.serverId) throw new McpDraftError(400, "Invalid or changed MCP server ID.");
+		const source = Object.hasOwn(current.mcp?.servers ?? {}, input.serverId) ? current.mcp?.servers?.[input.serverId] : void 0;
+		if (input.sourceServerId && (!source || isManagedConnectorServer(source))) throw new McpDraftError(409, "The original custom server no longer exists.");
+		if (input.sourceServerId && mcpConfigRevision(source) !== mcpConfigRevision(input.expectedServer)) throw new McpDraftError(409, "The original configuration changed. Reload before testing.");
+		this.assertAvailable(current, input.serverId, input.sourceServerId);
+		const parsed = McpServerSchema.safeParse(input.server);
+		if (!parsed.success) throw new McpDraftError(400, "Invalid MCP configuration.");
+		const revision = mcpConfigRevision(source);
+		const server = structuredClone(parsed.data);
+		for (const internal of [
+			"xopcConnector",
+			"xopcPlugin",
+			"xopcOAuthCredentialId",
+			"xopcConnectionCheck"
+		]) delete server[internal];
+		const workspace = getWorkspacePath(current) || process.cwd();
+		const config = structuredClone(current);
+		config.mcp = { servers: { [input.serverId]: {
+			...server,
+			enabled: true
+		} } };
+		const credentials = await createNativeMcpCredentials(true);
+		if (this.drafts.size >= 100 || [...this.drafts.values()].filter((draft) => draft.owner === owner).length >= 8) throw new McpDraftError(429, "Too many unsaved MCP connection tests.");
+		const id = randomUUID();
+		const timer = setTimeout(() => {
+			const draft = this.drafts.get(id);
+			if (draft && !draft.committing) this.dispose(draft);
+		}, TTL_MS);
+		timer.unref();
+		const draft = {
+			id,
+			owner,
+			serverId: input.serverId,
+			sourceServerId: input.sourceServerId,
+			revision,
+			workspace,
+			server,
+			config,
+			credentials,
+			controller: new AbortController(),
+			timer,
+			expiresAt: Date.now() + TTL_MS,
+			running: false,
+			committing: false
+		};
+		this.drafts.set(id, draft);
+		return {
+			id,
+			serverId: draft.serverId,
+			expiresAt: draft.expiresAt
+		};
+	}
+	async probe(owner, id) {
+		const draft = this.get(owner, id);
+		this.assertIdle(draft);
+		draft.authorizationId = void 0;
+		draft.running = true;
+		draft.probe = void 0;
+		draft.checkedAt = void 0;
+		try {
+			const result = await probeMcpConnection(draft.config, draft.workspace, draft.serverId, {
+				credentials: draft.credentials,
+				signal: draft.controller.signal
+			});
+			this.get(owner, id);
+			draft.probe = result;
+			if (result.state === "connected") draft.checkedAt = (/* @__PURE__ */ new Date()).toISOString();
+			return result;
+		} finally {
+			draft.running = false;
+		}
+	}
+	authorize(owner, id) {
+		const draft = this.get(owner, id);
+		this.assertIdle(draft);
+		if (draft.authorizationId) cancelMcpAuthorization(draft.authorizationId, owner);
+		draft.probe = void 0;
+		const attempt = startMcpAuthorization(draft.config, draft.workspace, draft.serverId, owner, {
+			credentials: draft.credentials,
+			authorizationScope: draft.id
+		});
+		draft.authorizationId = attempt.id;
+		return attempt;
+	}
+	authorization(owner, id) {
+		const draft = this.get(owner, id);
+		const result = draft.authorizationId && getMcpAuthorization(draft.authorizationId, owner, draft.config);
+		if (!result) throw new McpDraftError(404, "Draft authorization not found.");
+		if (result.state === "connected" && draft.probe?.state !== "connected") {
+			draft.probe = {
+				state: "connected",
+				toolCount: result.toolCount
+			};
+			draft.checkedAt = (/* @__PURE__ */ new Date()).toISOString();
+		}
+		return result;
+	}
+	redirect(owner, id, url) {
+		const draft = this.get(owner, id);
+		if (!draft.authorizationId || !submitMcpRedirect(draft.authorizationId, owner, url, draft.config)) throw new McpDraftError(400, "The callback address does not match this draft authorization.");
+	}
+	cancelAuthorization(owner, id) {
+		const draft = this.get(owner, id);
+		if (draft.committing) throw new McpDraftError(409, "This draft is being saved.");
+		if (draft.running) throw new McpDraftError(409, "A connection test is still running.");
+		if (draft.authorizationId) cancelMcpAuthorization(draft.authorizationId, owner);
+		draft.authorizationId = void 0;
+		draft.probe = void 0;
+	}
+	async tools(owner, id) {
+		const draft = this.get(owner, id);
+		this.assertIdle(draft);
+		if (draft.probe?.state !== "connected") throw new McpDraftError(409, "Test the connection first.");
+		draft.running = true;
+		try {
+			const tools = await discoverMcpTools(draft.config, draft.workspace, draft.serverId, {
+				credentials: draft.credentials,
+				signal: draft.controller.signal
+			});
+			this.get(owner, id);
+			return tools;
+		} finally {
+			draft.running = false;
+		}
+	}
+	/** Caller serializes this with other Gateway config writes. Only this entry is merged into the latest config. */
+	async commit(owner, id, enable = false) {
+		const completed = this.completed.get(id);
+		if (completed?.owner === owner) {
+			if (completed.enable !== enable) throw new McpDraftError(409, "This test has already been committed with different settings.");
+			return {
+				serverId: completed.serverId,
+				...completed.reloadRequired ? { reloadRequired: true } : {}
+			};
+		}
+		const draft = this.get(owner, id);
+		this.assertIdle(draft);
+		if (draft.authorizationId) this.authorization(owner, id);
+		if (draft.probe?.state !== "connected") throw new McpDraftError(409, "A successful connection test is required before saving.");
+		const current = this.options.readConfig();
+		if (mcpConfigRevision(current.mcp?.servers?.[draft.serverId]) !== draft.revision || (getWorkspacePath(current) || process.cwd()) !== draft.workspace) throw new McpDraftError(409, "Configuration changed after the test. Reload and test again.");
+		this.assertAvailable(current, draft.serverId, draft.sourceServerId);
+		draft.committing = true;
+		let alias;
+		let durable;
+		let published = false;
+		try {
+			const server = structuredClone(draft.server);
+			if (enable) server.enabled = true;
+			if (server.url) {
+				const state = await draft.credentials.forServer(draft.serverId, server.url).load();
+				const candidateAlias = `mcp_draft_${randomUUID().replaceAll("-", "")}`;
+				durable = await createNativeMcpCredentials();
+				await durable.forServer(candidateAlias, server.url).save(state?.tokens ? {
+					...state,
+					codeVerifier: void 0,
+					oauthState: void 0
+				} : { serverUrl: server.url });
+				alias = candidateAlias;
+				server.xopcOAuthCredentialId = alias;
+			}
+			server.xopcConnectionCheck = {
+				checkedAt: draft.checkedAt,
+				toolCount: draft.probe.toolCount ?? 0,
+				revision: mcpConfigRevision(server)
+			};
+			const latest = this.options.readConfig();
+			if (mcpConfigRevision(latest.mcp?.servers?.[draft.serverId]) !== draft.revision || (getWorkspacePath(latest) || process.cwd()) !== draft.workspace) throw new McpDraftError(409, "Configuration changed while preparing the save. Test again.");
+			this.assertAvailable(latest, draft.serverId, draft.sourceServerId);
+			const next = structuredClone(latest);
+			next.mcp = {
+				...next.mcp,
+				servers: {
+					...next.mcp?.servers,
+					[draft.serverId]: server
+				}
+			};
+			const result = await this.options.saveConfig(next, structuredClone(latest));
+			published = result.persisted === true || alias !== void 0 && this.options.readConfig().mcp?.servers?.[draft.serverId]?.xopcOAuthCredentialId === alias;
+			if (result.conflict) throw new McpDraftError(409, "Configuration changed before writing. Reload and test again.");
+			if (!result.saved && !result.persisted) throw new McpDraftError(500, "Could not save MCP configuration. Retry or reload the current configuration.");
+			const reloadRequired = !result.saved;
+			published = true;
+			const timer = setTimeout(() => this.completed.delete(id), TTL_MS);
+			timer.unref();
+			this.completed.set(id, {
+				owner,
+				enable,
+				serverId: draft.serverId,
+				reloadRequired,
+				timer
+			});
+			this.dispose(draft);
+			return {
+				serverId: draft.serverId,
+				...reloadRequired ? { reloadRequired: true } : {}
+			};
+		} finally {
+			draft.committing = false;
+			if (alias && this.options.readConfig().mcp?.servers?.[draft.serverId]?.xopcOAuthCredentialId === alias) published = true;
+			if (!published && alias && durable && draft.server.url) durable.remove(alias, draft.server.url);
+			if (this.drafts.has(id) && draft.expiresAt <= Date.now()) this.dispose(draft);
+		}
+	}
+	remove(owner, id) {
+		const draft = this.drafts.get(id);
+		if (!draft || draft.owner !== owner) return;
+		if (draft.committing) throw new McpDraftError(409, "This draft is being saved.");
+		this.dispose(draft);
+	}
+	close() {
+		for (const draft of this.drafts.values()) this.dispose(draft);
+		for (const item of this.completed.values()) clearTimeout(item.timer);
+		this.completed.clear();
+	}
+	get(owner, id) {
+		const draft = this.drafts.get(id);
+		if (!draft || draft.owner !== owner) throw new McpDraftError(404, "MCP draft not found or expired.");
+		if (draft.expiresAt <= Date.now() && !draft.committing) {
+			this.dispose(draft);
+			throw new McpDraftError(404, "MCP draft expired.");
+		}
+		return draft;
+	}
+	assertIdle(draft) {
+		const auth = draft.authorizationId && getMcpAuthorization(draft.authorizationId, draft.owner, draft.config);
+		if (draft.running || draft.committing || auth && (auth.state === "starting" || auth.state === "authorizing")) throw new McpDraftError(409, "Another draft operation is still running.");
+	}
+	assertAvailable(config, id, sourceId) {
+		const all = loadMergedMcpConfig({
+			cfg: config,
+			workspaceDir: getWorkspacePath(config) || process.cwd()
+		}).config.mcpServers;
+		if (Object.keys(all).some((other) => other !== sourceId && other.replaceAll("-", "_") === id.replaceAll("-", "_"))) throw new McpDraftError(409, "The MCP server ID is already in use.");
+	}
+	dispose(draft) {
+		this.drafts.delete(draft.id);
+		clearTimeout(draft.timer);
+		draft.controller.abort();
+		if (draft.authorizationId) cancelMcpAuthorization(draft.authorizationId, draft.owner);
+	}
+};
+//#endregion
+export { McpConnectionDrafts, McpDraftError, mcpConfigRevision };

package/dist/src/agent/mcp/connection-setup.d.ts

@@ -1,10 +1,11 @@
 import type { Config } from '../../config/schema.js';
+import { type McpSessionOptions } from './tool-catalog.js';
 export type McpConnectionProbe = {
     state: 'connected' | 'oauth_required' | 'token_required' | 'error';
     toolCount?: number;
     error?: string;
 };
-export declare function probeMcpConnection(config: Config, workspace: string, serverId: string): Promise<McpConnectionProbe>;
+export declare function probeMcpConnection(config: Config, workspace: string, serverId: string, options?: McpSessionOptions): Promise<McpConnectionProbe>;
 export type McpAuthorization = {
     id: string;
     serverId: string;
@@ -15,7 +16,9 @@ export type McpAuthorization = {
     error?: string;
 };
 /** A UI bridge to native pi's login command; no host-owned OAuth client or token store. */
-export declare function startMcpAuthorization(config: Config, workspace: string, serverId: string, owner: string): McpAuthorization;
+export declare function startMcpAuthorization(config: Config, workspace: string, serverId: string, owner: string, options?: McpSessionOptions & {
+    authorizationScope?: string;
+}): McpAuthorization;
 export declare function getMcpAuthorization(id: string, owner: string, config: Config): McpAuthorization | undefined;
 export declare function cancelMcpAuthorization(id: string, owner: string): boolean;
 export declare function submitMcpRedirect(id: string, owner: string, redirectUrl: string, config: Config): boolean;

package/dist/src/agent/mcp/connection-setup.js

@@ -71,11 +71,11 @@ async function advertisesOAuth(config, workspace, serverId) {
 	const legacy = await metadata(new URL("/.well-known/oauth-authorization-server", url));
 	return Boolean(legacy && legacy.issuer === url.origin && typeof legacy.authorization_endpoint === "string" && typeof legacy.token_endpoint === "string");
 }
-async function probeMcpConnection(config, workspace, serverId) {
+async function probeMcpConnection(config, workspace, serverId, options) {
 	try {
 		return {
 			state: "connected",
-			toolCount: (await discoverMcpTools(config, workspace, serverId)).length
+			toolCount: (await discoverMcpTools(config, workspace, serverId, options)).length
 		};
 	} catch (error) {
 		if (error instanceof McpAuthenticationRequiredError) try {
@@ -117,15 +117,17 @@ function cancel(attempt) {
 	}
 }
 /** A UI bridge to native pi's login command; no host-owned OAuth client or token store. */
-function startMcpAuthorization(config, workspace, serverId, owner) {
+function startMcpAuthorization(config, workspace, serverId, owner, options) {
 	const server = config.mcp?.servers?.[serverId];
 	if (!server?.url || server.enabled === false || isManagedConnectorServer(server) && server.xopcConnector.enabled === false) throw new Error("An enabled HTTP MCP server is required.");
 	httpUrl(server.url);
 	if (server.auth || Object.keys(server.headers ?? {}).some((name) => name.toLowerCase() === "authorization")) throw new Error("This server uses configured credentials. Remove Authorization before using OAuth.");
-	for (const attempt of attempts.values()) if (attempt.owner === owner && attempt.result.serverId === serverId) cancel(attempt);
+	const scope = options?.authorizationScope ?? serverId;
+	for (const attempt of attempts.values()) if (attempt.owner === owner && attempt.scope === scope) cancel(attempt);
 	if (attempts.size >= 100) throw new Error("Too many pending sign-ins. Try again later.");
 	const attempt = {
 		owner,
+		scope,
 		fingerprint: fingerprint(config, serverId),
 		controller: new AbortController(),
 		result: {
@@ -159,7 +161,7 @@ function startMcpAuthorization(config, workspace, serverId, owner) {
 				attempt.dispose = () => signal?.removeEventListener("abort", stop);
 			});
 		}
-	}).then((tools) => {
+	}, options).then((tools) => {
 		if (!attempt.controller.signal.aborted) {
 			attempt.result.state = "connected";
 			attempt.result.toolCount = tools.length;

package/dist/src/agent/mcp/credential-store.d.ts

@@ -0,0 +1,6 @@
+import type { McpExtensionOptions } from '@earendil-works/pi-coding-agent';
+export type NativeMcpCredentials = NonNullable<McpExtensionOptions['credentials']>;
+/** Use pi's own stores; never change PI_CODING_AGENT_DIR for an individual connection. */
+export declare function createNativeMcpCredentials(memory?: boolean): Promise<NativeMcpCredentials>;
+/** Credential identity may change on commit without changing the public tool namespace. */
+export declare function routeNativeMcpCredentials(store: NativeMcpCredentials, aliases: ReadonlyMap<string, string>): NativeMcpCredentials;