appilot-mcp 0.1.0 → 0.2.1

package/dist/remote/consent.js

@@ -1,50 +1,57 @@
-/**
- * The consent screen of the remote MCP service.
- *
- * This is the one page a person sees when connecting ChatGPT or Claude to their
- * Appilot instance. It asks for a service token rather than an Appilot password
- * on purpose: the connector needs a long-lived, scoped, revocable credential,
- * which is exactly what a service token is and exactly what a password is not.
- * A password would also make this host a credential-collection surface for the
- * whole account, and it can grant no less than everything.
- *
- * Plain server-rendered HTML with no external assets, so it renders inside the
- * in-app browsers ChatGPT and Claude use for the OAuth hop.
- */
+import { message, translateError } from './consentMessages.js';
+/** Server-rendered consent stays usable without JavaScript or third-party scripts. */
 const STYLE = `
-:root { color-scheme: light dark; }
+:root { color-scheme: light dark; --bg: 210 20% 98%; --card: 0 0% 100%; --text: 222 47% 11%; --muted: 215 16% 38%; --line: 214 25% 85%; --accent: 193 100% 30%; --tint: 193 65% 95%; --error: 0 74% 35%; }
 * { box-sizing: border-box; }
-body { margin: 0; padding: 2rem 1rem; font: 15px/1.55 ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;
-	background: #f6f7f9; color: #14161a; display: flex; justify-content: center; }
-main { width: 100%; max-width: 30rem; background: #fff; border: 1px solid #e3e6ea; border-radius: 12px; padding: 1.75rem; }
-h1 { font-size: 1.25rem; margin: 0 0 .35rem; }
-p { margin: 0 0 1rem; color: #52585f; }
-label { display: block; font-weight: 600; margin: 1rem 0 .35rem; }
-input[type=text], input[type=password], input[type=number] { width: 100%; padding: .6rem .7rem; font: inherit;
-	border: 1px solid #c8cdd3; border-radius: 8px; background: #fff; color: inherit; }
-input:focus-visible { outline: 2px solid #2f6feb; outline-offset: 1px; }
-small { display: block; color: #6b7280; margin-top: .3rem; }
-.scopes { list-style: none; padding: 0; margin: .5rem 0 0; }
-.scopes li { padding: .35rem 0; border-top: 1px solid #eef0f3; }
-.client { background: #f2f4f7; border-radius: 8px; padding: .75rem .9rem; margin-bottom: 1rem; }
-.actions { display: flex; gap: .6rem; margin-top: 1.5rem; }
-button { flex: 1; padding: .65rem 1rem; font: inherit; font-weight: 600; border-radius: 8px; cursor: pointer; border: 1px solid transparent; }
-button.approve { background: #14161a; color: #fff; }
-button.deny { background: #fff; border-color: #c8cdd3; color: #14161a; }
-.error { background: #fdecec; border: 1px solid #f3bcbc; color: #8a1c1c; border-radius: 8px; padding: .7rem .9rem; margin-bottom: 1rem; }
+body { margin: 0; background: hsl(var(--bg)); color: hsl(var(--text)); font: 16px/1.55 ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif; }
+a { color: hsl(var(--accent)); text-underline-offset: .2em; }
+.shell { min-height: 100svh; display: grid; grid-template-columns: minmax(0, 1fr); }
+.visual { display: none; }
+main { width: 100%; max-width: 42rem; margin: auto; padding: clamp(1.25rem, 5vw, 3.5rem); }
+.brand { display: block; width: 136px; height: 44px; object-fit: contain; object-position: left; margin-bottom: 2rem; }
+.eyebrow { color: hsl(var(--accent)); font-size: .8rem; font-weight: 650; letter-spacing: .08em; text-transform: uppercase; }
+h1 { font-size: clamp(1.65rem, 4vw, 2.15rem); letter-spacing: -.035em; line-height: 1.18; margin: .65rem 0 1rem; overflow-wrap: anywhere; }
+h2 { font-size: 1rem; margin: 0 0 .6rem; }
+p { margin: 0 0 1.25rem; color: hsl(var(--muted)); }
+strong { color: hsl(var(--text)); }
+.steps { display: flex; gap: 1.5rem; padding: 0; margin: 0 0 2rem; list-style: none; font-size: .8rem; color: hsl(var(--muted)); }
+.steps [aria-current=step] { color: hsl(var(--accent)); font-weight: 650; }
+.panel { padding: 1.2rem; border: 1px solid hsl(var(--line)); border-radius: .75rem; margin: 1.25rem 0; background: hsl(var(--card)); }
+.help { background: hsl(var(--tint)); border-color: transparent; }
+.help p { font-size: .875rem; margin-bottom: .75rem; }
+.help a { display: inline-flex; align-items: center; min-height: 44px; font-weight: 650; }
+label { display: block; font-weight: 600; margin: 1.25rem 0 .5rem; }
+input[type=password] { width: 100%; min-height: 48px; padding: .75rem; font: inherit; border: 1px solid hsl(var(--line)); border-radius: .5rem; background: hsl(var(--card)); color: inherit; }
+:focus-visible { outline: 3px solid hsl(var(--accent)); outline-offset: 3px; }
+small, .small { display: block; font-size: .8125rem; color: hsl(var(--muted)); margin-top: .5rem; }
+.scopes { list-style: none; margin: 0; padding: 0; }
+.scopes li { padding: .8rem 0; border-bottom: 1px solid hsl(var(--line)); }
+.scopes li:last-child { border-bottom: 0; }
+.scopes small { margin-top: .2rem; }
+dl { margin: 0; }
+dl > div { padding: .65rem 0; }
+dt { font-size: .8rem; color: hsl(var(--muted)); }
+dd { margin: .2rem 0 0; font-weight: 600; overflow-wrap: anywhere; }
+.actions { display: flex; flex-wrap: wrap; gap: .75rem; margin-top: 1.5rem; }
+button { flex: 1; min-height: 48px; padding: .75rem 1rem; font: inherit; font-weight: 650; border-radius: .5rem; cursor: pointer; border: 1px solid hsl(var(--line)); background: hsl(var(--card)); color: inherit; }
+button.approve { flex: 2; background: hsl(var(--accent)); color: hsl(var(--card)); border-color: transparent; }
+button:hover { filter: brightness(.95); }
+.error { color: hsl(var(--error)); border-left: 3px solid currentColor; padding: .8rem 1rem; margin: 1rem 0; background: hsl(var(--card)); }
+details { margin-top: 1.25rem; }
+summary { cursor: pointer; min-height: 44px; padding: .6rem 0; font-size: .875rem; color: hsl(var(--muted)); }
+footer { margin-top: 2rem; border-top: 1px solid hsl(var(--line)); padding-top: 1rem; }
+@media (min-width: 1100px) {
+ .shell.with-visual { grid-template-columns: minmax(320px, .85fr) minmax(600px, 1.15fr); }
+ .visual { display: block; position: sticky; top: 0; height: 100svh; overflow: hidden; background: hsl(224 25% 10%); }
+ .visual img { width: 100%; height: 100%; object-fit: cover; }
+}
 @media (prefers-color-scheme: dark) {
-	body { background: #0f1115; color: #e8eaed; }
-	main { background: #171a1f; border-color: #2a2f36; }
-	p { color: #a4abb5; }
-	input[type=text], input[type=password], input[type=number] { background: #0f1115; border-color: #363c45; }
-	.client { background: #12151a; }
-	.scopes li { border-top-color: #2a2f36; }
-	button.approve { background: #e8eaed; color: #14161a; }
-	button.deny { background: #171a1f; border-color: #363c45; color: #e8eaed; }
-	.error { background: #2a1416; border-color: #5c2226; color: #f4b8bb; }
+ :root { --bg: 224 15% 7%; --card: 220 16% 11%; --text: 220 13% 93%; --muted: 218 12% 73%; --line: 220 10% 32%; --accent: 193 80% 70%; --tint: 200 25% 14%; --error: 0 90% 80%; }
+ button.approve { color: hsl(224 15% 7%); }
 }
+@media (forced-colors: active) { button.approve { border: 1px solid ButtonText; } }
 `;
-function escapeHtml(value) {
+export function escapeHtml(value) {
     return value
         .replace(/&/g, '&')
         .replace(/</g, '&lt;')
@@ -52,48 +59,64 @@ function escapeHtml(value) {
         .replace(/"/g, '&quot;')
         .replace(/'/g, '&#39;');
 }
-function page(title, body) {
-    return `<!doctype html>
-<html lang="en"><head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>${escapeHtml(title)}</title>
-<style>${STYLE}</style>
-</head><body><main>${body}</main></body></html>`;
+function page(title, body, backofficeUrl, locale = 'en') {
+    const asset = (path) => escapeHtml(new URL(path, backofficeUrl).toString());
+    return `<!doctype html><html lang="${locale}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="referrer" content="no-referrer"><title>${escapeHtml(title)} | Appilot</title><style>${STYLE}</style></head>
+<body><div class="shell ${backofficeUrl ? 'with-visual' : ''}">${backofficeUrl ? `<aside class="visual" aria-hidden="true"><img src="${asset('/auth-visual.webp')}" alt="" referrerpolicy="no-referrer"></aside>` : ''}<main>${backofficeUrl ? `<img class="brand" src="${asset('/logo.svg')}" alt="Appilot" referrerpolicy="no-referrer">` : '<div class="eyebrow">Appilot</div>'}${body}</main></div></body></html>`;
 }
-const SCOPE_COPY = {
-    'config:read': 'Read this app\'s configuration: views, controls, forms, action plans, knowledge.',
-    'config:write': 'Change that configuration, including importing a whole bundle.',
+const scopeKeys = {
+    'config:read': ['read', 'readHelp'],
+    'config:write': ['write', 'writeHelp'],
+    'provision:write': ['provision', 'provisionHelp'],
+    'feedback:write': ['feedback', 'feedbackHelp'],
 };
+function scopeTitle(scope, locale) {
+    const keys = scopeKeys[scope];
+    return keys ? message(keys[0], locale) : scope;
+}
+function scopeItems(scopes, locale) {
+    return `<ul class="scopes">${scopes
+        .map((scope) => {
+        const keys = scopeKeys[scope];
+        return `<li><strong>${escapeHtml(scopeTitle(scope, locale))}</strong><small>${keys ? escapeHtml(message(keys[1], locale)) : ''}</small></li>`;
+    })
+        .join('')}</ul>`;
+}
+function steps(step, locale) {
+    return `<ol class="steps" aria-label="${message('progress', locale)}"><li ${step === 1 ? 'aria-current="step"' : ''}>${message('verifyStep', locale)}</li><li ${step === 2 ? 'aria-current="step"' : ''}>${message('reviewStep', locale)}</li></ol>`;
+}
+function managementLink(url) {
+    return escapeHtml(new URL('/service-tokens', url).toString());
+}
 export function renderConsentPage(opts) {
-    const scopes = opts.scopes.length ? opts.scopes : ['config:read'];
-    const items = scopes
-        .map(s => `<li><strong>${escapeHtml(s)}</strong><br><small>${escapeHtml(SCOPE_COPY[s] ?? 'Unknown scope.')}</small></li>`)
-        .join('');
-    return page('Connect to Appilot', `
-<h1>Connect to Appilot</h1>
-<p>Give <strong>${escapeHtml(opts.clientName)}</strong> access to your Appilot configuration.</p>
-${opts.error ? `<div class="error">${escapeHtml(opts.error)}</div>` : ''}
-<div class="client">
-	<small>Instance</small>
-	<div>${escapeHtml(opts.baseUrl)}</div>
-</div>
-<form method="post" action="${escapeHtml(opts.action)}">
-	<input type="hidden" name="request" value="${escapeHtml(opts.request)}">
-	<label for="pat">Service token</label>
-	<input id="pat" name="pat" type="password" autocomplete="off" spellcheck="false" required
-		placeholder="appilot_pat_..." aria-describedby="pat-help">
-	<small id="pat-help">Create one in the Backoffice under Settings, Service Tokens. Revoking it there cuts this connection off.</small>
-	<label for="app_id">Default app ID <span style="font-weight:400">(optional)</span></label>
-	<input id="app_id" name="app_id" type="number" min="1" inputmode="numeric" aria-describedby="app-help">
-	<small id="app-help">Used when a tool call does not name an app. An app-scoped token supplies its own.</small>
-	<ul class="scopes">${items}</ul>
-	<div class="actions">
-		<button class="deny" type="submit" name="action" value="deny">Cancel</button>
-		<button class="approve" type="submit" name="action" value="approve">Connect</button>
-	</div>
-</form>`);
+    const locale = opts.locale ?? 'en';
+    const m = (key, values) => escapeHtml(message(key, locale, values));
+    return page(message('connect', locale, { client: opts.clientName }), `${steps(1, locale)}<h1>${m('connect', { client: opts.clientName })}</h1><p>${m('intro')}</p>
+ <div class="panel help"><h2>${m('first')}</h2><p>${m('tokenIntro')}</p>${opts.backofficeUrl ? `<a href="${managementLink(opts.backofficeUrl)}" target="_blank" rel="noopener noreferrer">${m('open')} <span aria-hidden="true"> ↗</span></a><small>${m('openHelp')}</small>` : `<small>${m('privateHelp')}</small>`}</div>
+ ${opts.error ? `<div class="error" role="alert" id="token-error">${escapeHtml(opts.error)}</div>` : ''}
+ <form method="post" action="${escapeHtml(opts.action)}"><input type="hidden" name="request" value="${escapeHtml(opts.request)}">
+ <label for="pat">${m('token')}</label><input id="pat" name="pat" type="password" autocomplete="off" spellcheck="false" required placeholder="appilot_pat_…" aria-describedby="pat-help${opts.error ? ' token-error' : ''}" ${opts.error ? 'aria-invalid="true"' : ''}>
+ <small id="pat-help">${m('paste')}</small><details><summary>${m('requested')}</summary><p class="small">${m('next')}</p>${scopeItems(opts.scopes, locale)}</details>
+ <div class="actions"><button type="submit" name="action" value="deny" formnovalidate>${m('cancel')}</button><button class="approve" type="submit" name="action" value="approve">${m('review')}</button></div></form>
+ <footer><small>${m('footer', { url: opts.baseUrl })}</small></footer>`, opts.backofficeUrl, locale);
+}
+export function renderConfirmPage(opts) {
+    const locale = opts.locale ?? 'en';
+    const m = (key, values) => escapeHtml(message(key, locale, values));
+    const organization = opts.organizationName ||
+        (opts.organizationId != null
+            ? `${message('organization', locale)} #${opts.organizationId}`
+            : message('unknown', locale));
+    const app = opts.appName || (opts.appId != null ? `App #${opts.appId}` : message('allApps', locale));
+    return page(message('review', locale), `${steps(2, locale)}<h1>${m('reviewFor', { client: opts.clientName || 'AI assistant' })}</h1><p>${m('accepted')}</p>
+ <div class="panel"><dl><div><dt>${m('organization')}</dt><dd>${escapeHtml(organization)}</dd></div><div><dt>${m(opts.appScoped ? 'limited' : 'appAccess')}</dt><dd>${escapeHtml(app)}</dd></div></dl>${opts.appId != null && !opts.appScoped ? `<small>${m('defaultNote')}</small>` : ''}</div>
+ <h2>${m('can')}</h2>${scopeItems(opts.scopes, locale)}
+ ${opts.unavailableScopes?.length ? `<div class="panel help"><h2>${m('unavailable')}</h2><p class="small">${m('unavailableHelp', { scopes: opts.unavailableScopes.map((scope) => scopeTitle(scope, locale)).join(', ') })}</p></div>` : ''}
+ ${opts.withheldScopes.length ? `<details><summary>${m('excluded')}</summary>${scopeItems(opts.withheldScopes, locale)}</details>` : ''}
+ <form method="post" action="${escapeHtml(opts.action)}"><input type="hidden" name="request" value="${escapeHtml(opts.request)}"><div class="actions"><button type="submit" name="action" value="back">${m('back')}</button><button class="approve" type="submit" name="action" value="confirm">${m('allow')}</button></div><button style="margin-top:.75rem;width:100%" type="submit" name="action" value="deny">${m('cancelConnection')}</button></form>
+ <footer><small>${m('stop')} ${opts.backofficeUrl ? `<a href="${managementLink(opts.backofficeUrl)}" target="_blank" rel="noopener noreferrer">${m('open')}</a>` : ''}</small></footer>`, opts.backofficeUrl, locale);
 }
-export function renderErrorPage(title, detail) {
-    return page(title, `<h1>${escapeHtml(title)}</h1><div class="error">${escapeHtml(detail)}</div>`);
+export function renderErrorPage(title, detail, locale = 'en') {
+    const translatedTitle = locale === 'en' ? title : translateError(title, locale);
+    return page(translatedTitle, `<h1>${escapeHtml(translatedTitle)}</h1><div class="error" role="alert">${escapeHtml(locale === 'en' ? detail : translateError(detail, locale))}</div><p>${escapeHtml(message('restart', locale))}</p>`, undefined, locale);
 }

package/dist/remote/consentMessages.d.ts

@@ -0,0 +1,62 @@
+export type ConsentLocale = 'en' | 'es' | 'de';
+declare const en: {
+    readonly sessionUnavailable: "Account approval is temporarily unavailable. Try connecting again, or use a service token below.";
+    readonly connect: "Connect {client} to Appilot";
+    readonly intro: "Choose what your assistant can access. You will review the connection before granting permission.";
+    readonly first: "First time connecting?";
+    readonly tokenIntro: "Create a service token in Appilot. It is a private access key with the permissions and expiry you choose.";
+    readonly open: "Open service tokens";
+    readonly openHelp: "Opens in a new tab using your Backoffice session. An organization administrator must create the token. Keep this tab open.";
+    readonly privateHelp: "Open your instance's Backoffice, then Service tokens. An organization administrator must create the token.";
+    readonly token: "Service token";
+    readonly paste: "Paste the token you just created. Appilot will detect its organization and app automatically. Do not paste it in a chat.";
+    readonly requested: "Permissions this client is requesting";
+    readonly next: "The next step shows which of these permissions your token actually allows.";
+    readonly cancel: "Cancel";
+    readonly review: "Review connection";
+    readonly back: "Back";
+    readonly allow: "Allow access";
+    readonly cancelConnection: "Cancel connection";
+    readonly footer: "Connecting to {url}. You can revoke the token in Appilot to stop this connection.";
+    readonly progress: "Connection progress";
+    readonly verifyStep: "1. Verify token";
+    readonly reviewStep: "2. Review access";
+    readonly reviewFor: "Review access for {client}";
+    readonly accepted: "Your token was accepted. Confirm the organization and permissions below.";
+    readonly organization: "Organization";
+    readonly unknown: "Not reported by this instance";
+    readonly allApps: "All apps in this organization";
+    readonly limited: "Access limited to";
+    readonly appAccess: "App access";
+    readonly defaultNote: "This is a default app, not an access restriction. The token can still access other apps in the organization.";
+    readonly can: "This connection can";
+    readonly unavailable: "Some requested permissions are unavailable";
+    readonly unavailableHelp: "Your token does not allow: {scopes}. You can connect with the permissions above, or go back and use a different token.";
+    readonly excluded: "Permissions excluded from this connection";
+    readonly stop: "Access stops when the service token expires or you revoke it in Appilot.";
+    readonly restart: "Return to the app you were connecting and start the connection again.";
+    readonly read: "Read configuration";
+    readonly readHelp: "Inspect and audit your apps, including their knowledge content.";
+    readonly write: "Edit configuration";
+    readonly writeHelp: "Create, change, import, and delete configuration and knowledge content.";
+    readonly provision: "Set up apps and integrations";
+    readonly provisionHelp: "Create apps, manage domains, and issue widget keys within the token's access.";
+    readonly feedback: "Send issue reports to Appilot";
+    readonly feedbackHelp: "Share a report title, description, and technical context with Appilot. This sends information outside your organization.";
+    readonly expired: "This sign-in link expired";
+    readonly expiredHelp: "Start the connection again from the client that sent you here. A consent link is valid for ten minutes.";
+    readonly invalid: "Invalid request";
+    readonly invalidHelp: "That confirmation is incomplete. Start again.";
+    readonly wrongToken: "That does not look like a service token. Create one on the Service tokens page in your Backoffice.";
+    readonly verifyError: "We could not verify the token right now. Please try again.";
+    readonly rejected: "The instance rejected that service token. It may have been revoked or have expired.";
+    readonly noScopes: "The token does not include any requested permission. Use a token with the access you need.";
+    readonly failed: "Connection could not be completed";
+    readonly failedHelp: "The approval expired, was already used, or belongs to another browser. Start again from your assistant.";
+    readonly unavailableTitle: "Connection unavailable";
+    readonly unavailableDetail: "Appilot could not complete the connection. Please try again.";
+};
+export declare function consentLocale(header?: string): ConsentLocale;
+export declare function message(key: keyof typeof en, locale?: ConsentLocale, values?: Record<string, string>): string;
+export declare function translateError(text: string, locale: ConsentLocale): string;
+export {};

package/dist/remote/consentMessages.js

@@ -0,0 +1,196 @@
+const en = {
+    sessionUnavailable: 'Account approval is temporarily unavailable. Try connecting again, or use a service token below.',
+    connect: 'Connect {client} to Appilot',
+    intro: 'Choose what your assistant can access. You will review the connection before granting permission.',
+    first: 'First time connecting?',
+    tokenIntro: 'Create a service token in Appilot. It is a private access key with the permissions and expiry you choose.',
+    open: 'Open service tokens',
+    openHelp: 'Opens in a new tab using your Backoffice session. An organization administrator must create the token. Keep this tab open.',
+    privateHelp: "Open your instance's Backoffice, then Service tokens. An organization administrator must create the token.",
+    token: 'Service token',
+    paste: 'Paste the token you just created. Appilot will detect its organization and app automatically. Do not paste it in a chat.',
+    requested: 'Permissions this client is requesting',
+    next: 'The next step shows which of these permissions your token actually allows.',
+    cancel: 'Cancel',
+    review: 'Review connection',
+    back: 'Back',
+    allow: 'Allow access',
+    cancelConnection: 'Cancel connection',
+    footer: 'Connecting to {url}. You can revoke the token in Appilot to stop this connection.',
+    progress: 'Connection progress',
+    verifyStep: '1. Verify token',
+    reviewStep: '2. Review access',
+    reviewFor: 'Review access for {client}',
+    accepted: 'Your token was accepted. Confirm the organization and permissions below.',
+    organization: 'Organization',
+    unknown: 'Not reported by this instance',
+    allApps: 'All apps in this organization',
+    limited: 'Access limited to',
+    appAccess: 'App access',
+    defaultNote: 'This is a default app, not an access restriction. The token can still access other apps in the organization.',
+    can: 'This connection can',
+    unavailable: 'Some requested permissions are unavailable',
+    unavailableHelp: 'Your token does not allow: {scopes}. You can connect with the permissions above, or go back and use a different token.',
+    excluded: 'Permissions excluded from this connection',
+    stop: 'Access stops when the service token expires or you revoke it in Appilot.',
+    restart: 'Return to the app you were connecting and start the connection again.',
+    read: 'Read configuration',
+    readHelp: 'Inspect and audit your apps, including their knowledge content.',
+    write: 'Edit configuration',
+    writeHelp: 'Create, change, import, and delete configuration and knowledge content.',
+    provision: 'Set up apps and integrations',
+    provisionHelp: "Create apps, manage domains, and issue widget keys within the token's access.",
+    feedback: 'Send issue reports to Appilot',
+    feedbackHelp: 'Share a report title, description, and technical context with Appilot. This sends information outside your organization.',
+    expired: 'This sign-in link expired',
+    expiredHelp: 'Start the connection again from the client that sent you here. A consent link is valid for ten minutes.',
+    invalid: 'Invalid request',
+    invalidHelp: 'That confirmation is incomplete. Start again.',
+    wrongToken: 'That does not look like a service token. Create one on the Service tokens page in your Backoffice.',
+    verifyError: 'We could not verify the token right now. Please try again.',
+    rejected: 'The instance rejected that service token. It may have been revoked or have expired.',
+    noScopes: 'The token does not include any requested permission. Use a token with the access you need.',
+    failed: 'Connection could not be completed',
+    failedHelp: 'The approval expired, was already used, or belongs to another browser. Start again from your assistant.',
+    unavailableTitle: 'Connection unavailable',
+    unavailableDetail: 'Appilot could not complete the connection. Please try again.',
+};
+const es = {
+    sessionUnavailable: 'La aprobación desde tu cuenta no está disponible temporalmente. Intenta conectar otra vez o usa un token de servicio abajo.',
+    connect: 'Conectar {client} a Appilot',
+    intro: 'Elige a qué puede acceder tu asistente. Revisarás la conexión antes de permitir el acceso.',
+    first: '¿Es tu primera conexión?',
+    tokenIntro: 'Crea un token de servicio en Appilot. Es una clave privada con los permisos y el vencimiento que elijas.',
+    open: 'Abrir tokens de servicio',
+    openHelp: 'Se abre en otra pestaña con tu sesión del Backoffice. Una persona administradora debe crear el token. Mantén esta pestaña abierta.',
+    privateHelp: 'Abre el Backoffice de tu instancia y luego Tokens de servicio. Una persona administradora debe crear el token.',
+    token: 'Token de servicio',
+    paste: 'Pega el token que creaste. Appilot detectará su organización y aplicación. No lo pegues en un chat.',
+    requested: 'Permisos que solicita este cliente',
+    next: 'El siguiente paso muestra cuáles de estos permisos permite tu token.',
+    cancel: 'Cancelar',
+    review: 'Revisar conexión',
+    back: 'Volver',
+    allow: 'Permitir acceso',
+    cancelConnection: 'Cancelar conexión',
+    footer: 'Conexión con {url}. Puedes revocar el token en Appilot para detener esta conexión.',
+    progress: 'Progreso de la conexión',
+    verifyStep: '1. Verificar token',
+    reviewStep: '2. Revisar acceso',
+    reviewFor: 'Revisar acceso para {client}',
+    accepted: 'Tu token fue aceptado. Confirma la organización y los permisos.',
+    organization: 'Organización',
+    unknown: 'Esta instancia no lo informa',
+    allApps: 'Todas las aplicaciones de esta organización',
+    limited: 'Acceso limitado a',
+    appAccess: 'Acceso a aplicaciones',
+    defaultNote: 'Es una aplicación predeterminada; el token también permite acceder a otras aplicaciones de la organización.',
+    can: 'Esta conexión permite',
+    unavailable: 'Algunos permisos solicitados no están disponibles',
+    unavailableHelp: 'Tu token no permite: {scopes}. Puedes conectar con los permisos indicados o volver y usar otro token.',
+    excluded: 'Permisos excluidos de esta conexión',
+    stop: 'El acceso termina cuando el token vence o lo revocas en Appilot.',
+    restart: 'Vuelve a la aplicación que estabas conectando e inicia la conexión de nuevo.',
+    read: 'Leer configuración',
+    readHelp: 'Inspeccionar y auditar las aplicaciones y su contenido de conocimiento.',
+    write: 'Editar configuración',
+    writeHelp: 'Crear, cambiar, importar y eliminar configuración y conocimiento.',
+    provision: 'Configurar aplicaciones e integraciones',
+    provisionHelp: 'Crear aplicaciones, gestionar dominios y emitir claves de widget dentro del acceso del token.',
+    feedback: 'Enviar reportes de problemas a Appilot',
+    feedbackHelp: 'Compartir un título, una descripción y contexto técnico con Appilot. Envía información fuera de tu organización.',
+    expired: 'Este enlace de acceso venció',
+    expiredHelp: 'Inicia de nuevo la conexión desde el cliente que te envió aquí. El enlace es válido durante diez minutos.',
+    invalid: 'Solicitud inválida',
+    invalidHelp: 'La confirmación está incompleta. Vuelve a empezar.',
+    wrongToken: 'No parece un token de servicio. Crea uno en Tokens de servicio en el Backoffice.',
+    verifyError: 'No pudimos verificar el token. Inténtalo de nuevo.',
+    rejected: 'La instancia rechazó el token. Puede haber sido revocado o haber vencido.',
+    noScopes: 'El token no incluye ningún permiso solicitado. Usa uno con el acceso que necesitas.',
+    failed: 'No se pudo completar la conexión',
+    failedHelp: 'La aprobación venció, ya se utilizó o pertenece a otro navegador. Vuelve a empezar desde tu asistente.',
+    unavailableTitle: 'Conexión no disponible',
+    unavailableDetail: 'Appilot no pudo completar la conexión. Inténtalo de nuevo.',
+};
+const de = {
+    sessionUnavailable: 'Die Freigabe über Ihr Konto ist vorübergehend nicht verfügbar. Starten Sie erneut oder verwenden Sie unten ein Service-Token.',
+    connect: '{client} mit Appilot verbinden',
+    intro: 'Wählen Sie den Zugriff Ihres Assistenten. Vor der Freigabe prüfen Sie die Verbindung.',
+    first: 'Zum ersten Mal verbinden?',
+    tokenIntro: 'Erstellen Sie ein Service-Token in Appilot. Es ist ein privater Zugangsschlüssel mit den gewählten Berechtigungen und dem Ablaufdatum.',
+    open: 'Service-Tokens öffnen',
+    openHelp: 'Öffnet einen neuen Tab mit Ihrer Backoffice-Sitzung. Ein Administrator muss das Token erstellen. Lassen Sie diesen Tab geöffnet.',
+    privateHelp: 'Öffnen Sie das Backoffice Ihrer Instanz und dann Service-Tokens. Ein Administrator muss das Token erstellen.',
+    token: 'Service-Token',
+    paste: 'Fügen Sie das erstellte Token ein. Appilot erkennt Organisation und Anwendung. Fügen Sie es nicht in einen Chat ein.',
+    requested: 'Vom Client angeforderte Berechtigungen',
+    next: 'Im nächsten Schritt sehen Sie, welche Berechtigungen Ihr Token erlaubt.',
+    cancel: 'Abbrechen',
+    review: 'Verbindung prüfen',
+    back: 'Zurück',
+    allow: 'Zugriff erlauben',
+    cancelConnection: 'Verbindung abbrechen',
+    footer: 'Verbindung mit {url}. Sie können das Token in Appilot widerrufen, um die Verbindung zu beenden.',
+    progress: 'Verbindungsfortschritt',
+    verifyStep: '1. Token prüfen',
+    reviewStep: '2. Zugriff prüfen',
+    reviewFor: 'Zugriff für {client} prüfen',
+    accepted: 'Ihr Token wurde akzeptiert. Bestätigen Sie Organisation und Berechtigungen.',
+    organization: 'Organisation',
+    unknown: 'Von dieser Instanz nicht angegeben',
+    allApps: 'Alle Anwendungen dieser Organisation',
+    limited: 'Zugriff beschränkt auf',
+    appAccess: 'Anwendungszugriff',
+    defaultNote: 'Dies ist eine Standardanwendung. Das Token kann auch auf andere Anwendungen der Organisation zugreifen.',
+    can: 'Diese Verbindung erlaubt',
+    unavailable: 'Einige angeforderte Berechtigungen sind nicht verfügbar',
+    unavailableHelp: 'Ihr Token erlaubt nicht: {scopes}. Verbinden Sie sich mit den angezeigten Berechtigungen oder verwenden Sie ein anderes Token.',
+    excluded: 'Ausgeschlossene Berechtigungen',
+    stop: 'Der Zugriff endet, wenn das Token abläuft oder Sie es in Appilot widerrufen.',
+    restart: 'Kehren Sie zur Anwendung zurück und starten Sie die Verbindung erneut.',
+    read: 'Konfiguration lesen',
+    readHelp: 'Anwendungen und Wissensinhalte prüfen.',
+    write: 'Konfiguration bearbeiten',
+    writeHelp: 'Konfiguration und Wissensinhalte erstellen, ändern, importieren und löschen.',
+    provision: 'Anwendungen und Integrationen einrichten',
+    provisionHelp: 'Anwendungen erstellen, Domains verwalten und Widget-Schlüssel im Zugriffsumfang des Tokens ausstellen.',
+    feedback: 'Problemberichte an Appilot senden',
+    feedbackHelp: 'Titel, Beschreibung und technischen Kontext mit Appilot teilen. Dabei verlassen Informationen Ihre Organisation.',
+    expired: 'Dieser Anmeldelink ist abgelaufen',
+    expiredHelp: 'Starten Sie die Verbindung erneut im ursprünglichen Client. Der Link ist zehn Minuten gültig.',
+    invalid: 'Ungültige Anfrage',
+    invalidHelp: 'Die Bestätigung ist unvollständig. Starten Sie erneut.',
+    wrongToken: 'Dies scheint kein Service-Token zu sein. Erstellen Sie eines unter Service-Tokens im Backoffice.',
+    verifyError: 'Das Token konnte nicht geprüft werden. Versuchen Sie es erneut.',
+    rejected: 'Die Instanz hat das Token abgelehnt. Es wurde möglicherweise widerrufen oder ist abgelaufen.',
+    noScopes: 'Das Token enthält keine angeforderte Berechtigung. Verwenden Sie eines mit dem benötigten Zugriff.',
+    failed: 'Verbindung konnte nicht abgeschlossen werden',
+    failedHelp: 'Die Freigabe ist abgelaufen, wurde bereits verwendet oder gehört zu einem anderen Browser. Starten Sie erneut in Ihrem Assistenten.',
+    unavailableTitle: 'Verbindung nicht verfügbar',
+    unavailableDetail: 'Appilot konnte die Verbindung nicht abschließen. Versuchen Sie es erneut.',
+};
+export function consentLocale(header = '') {
+    const preferences = header
+        .split(',')
+        .map((part) => {
+        const [tag, weight] = part.trim().split(';q=');
+        return {
+            tag: tag.toLowerCase().split('-')[0],
+            q: weight === undefined ? 1 : Number(weight),
+        };
+    })
+        .filter((item) => item.q > 0)
+        .sort((a, b) => b.q - a.q);
+    return (preferences.find((item) => ['en', 'es', 'de'].includes(item.tag))?.tag ??
+        'en');
+}
+export function message(key, locale = 'en', values = {}) {
+    const template = ({ en, es, de }[locale] ?? en)[key];
+    return template.replace(/\{(\w+)\}/g, (_, name) => values[name] ?? `{${name}}`);
+}
+export function translateError(text, locale) {
+    const entry = Object.entries(en).find(([, value]) => value === text);
+    return entry
+        ? message(entry[0], locale)
+        : message('unavailableDetail', locale);
+}

package/dist/remote/handoff.d.ts

@@ -0,0 +1,10 @@
+import type { Response } from 'express';
+export declare const digest: (value: string) => string;
+export declare const cookieName: (id: string) => string;
+export declare function connectionRequest(baseUrl: string, secret: string, path: string, body: unknown): Promise<Record<string, any>>;
+export declare function startConnection(options: {
+    baseUrl: string;
+    secret: string;
+    backofficeUrl: string;
+    secure: boolean;
+}, requestState: string, clientId: string, clientName: string, scopes: string[], language: string, res: Response): Promise<void>;

package/dist/remote/handoff.js

@@ -0,0 +1,44 @@
+/** Server-to-server approval exchange. The browser carries only a one-use code. */
+import { createHash, randomBytes } from 'node:crypto';
+export const digest = (value) => createHash('sha256').update(value).digest('hex');
+export const cookieName = (id) => `appilot_connection_${id}`;
+export async function connectionRequest(baseUrl, secret, path, body) {
+    const response = await fetch(`${baseUrl}/mcp-connections/${path}`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'X-Appilot-Handoff': secret,
+        },
+        body: JSON.stringify(body),
+        signal: AbortSignal.timeout(10000),
+        redirect: 'error',
+    });
+    if (!response.ok)
+        throw new Error('Connection approval unavailable');
+    return response.json();
+}
+export async function startConnection(options, requestState, clientId, clientName, scopes, language, res) {
+    const proof = randomBytes(32).toString('hex');
+    const { id } = await connectionRequest(options.baseUrl, options.secret, 'requests', {
+        requestState,
+        requestHash: digest(requestState),
+        browserHash: digest(proof),
+        clientHash: digest(clientId),
+        clientName: clientName.slice(0, 100),
+        scopes,
+        language,
+    });
+    if (typeof id !== 'string' ||
+        !/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(id))
+        throw new Error('Invalid connection response');
+    res.cookie(cookieName(id), proof, {
+        httpOnly: true,
+        secure: options.secure,
+        sameSite: 'lax',
+        maxAge: 600000,
+        path: '/connect/callback',
+    });
+    const destination = new URL('/connections/authorize', options.backofficeUrl);
+    destination.searchParams.set('request', id);
+    res.redirect(303, destination.toString());
+}

package/dist/remote/httpServer.js

@@ -14,6 +14,8 @@ import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/
 import { mcpAuthRouter, getOAuthProtectedResourceMetadataUrl } from '@modelcontextprotocol/sdk/server/auth/router.js';
 import { requireBearerAuth } from '@modelcontextprotocol/sdk/server/auth/middleware/bearerAuth.js';
 import { createAppilotServer } from '../server.js';
+import { consentLocale } from './consentMessages.js';
+import { renderErrorPage } from './consent.js';
 import { AppilotOAuthProvider, SUPPORTED_SCOPES } from './oauth.js';
 /** Where the docs root lands a person who follows the OAuth metadata. */
 const CONFIGURE_WITH_AI_PATH = '/docs/developers/configure-with-ai/overview';
@@ -24,11 +26,20 @@ export function createRemoteApp(config, options = {}) {
         new AppilotOAuthProvider({
             publicUrl: config.publicUrl,
             baseUrl: config.baseUrl,
+            backofficeUrl: config.backofficeUrl,
+            handoffSecret: config.handoffSecret,
             secret: config.secret,
         });
     const mcpUrl = new URL('/mcp', config.publicUrl);
     const app = express();
     app.disable('x-powered-by');
+    app.use(['/authorize', '/consent', '/connect/callback'], (_req, res, next) => {
+        res.set('Cache-Control', 'no-store');
+        res.set('Referrer-Policy', 'no-referrer');
+        res.set('X-Content-Type-Options', 'nosniff');
+        res.set('Content-Security-Policy', `default-src 'none'; style-src 'unsafe-inline'; img-src 'self' ${config.backofficeUrl ?? ''}; base-uri 'none'; frame-ancestors 'none'`);
+        next();
+    });
     // Liveness for the platform. Deliberately says nothing a caller could not
     // already learn from the instance's own public capabilities endpoint.
     // Two paths for one probe. Cloud Run's frontend swallows /healthz before it
@@ -49,19 +60,28 @@ export function createRemoteApp(config, options = {}) {
         scopesSupported: [...SUPPORTED_SCOPES],
         serviceDocumentationUrl: new URL(CONFIGURE_WITH_AI_PATH, config.docsUrl),
     }));
+    app.get('/connect/callback', async (req, res) => {
+        try {
+            const id = typeof req.query.request === 'string' ? req.query.request : '';
+            const code = typeof req.query.code === 'string' ? req.query.code : '';
+            res.redirect(303, await provider.finishConnection(id, code, req.get('Cookie') ?? '', res));
+        }
+        catch {
+            res.status(400).type('html').send(renderErrorPage('Connection could not be completed', 'The approval expired, was already used, or belongs to another browser. Start again from your assistant.', consentLocale(req.get('Accept-Language'))));
+        }
+    });
     // The consent screen posts here. Form-encoded, same-origin, no JSON.
     app.post('/consent', express.urlencoded({ extended: false, limit: '64kb' }), async (req, res) => {
         try {
-            const outcome = await provider.handleConsent(req.body);
+            const outcome = await provider.handleConsent(req.body, consentLocale(req.get('Accept-Language')));
             if ('redirect' in outcome) {
                 res.redirect(302, outcome.redirect);
                 return;
             }
             res.status(outcome.status).set('Content-Type', 'text/html; charset=utf-8').send(outcome.html);
         }
-        catch (err) {
-            // The consent screen is person-facing, so a failure renders as a page.
-            res.status(500).set('Content-Type', 'text/html; charset=utf-8').send(`<!doctype html><meta charset="utf-8"><title>Connection failed</title><p>The connection could not be completed: ${err instanceof Error ? err.message.replace(/[<>&]/g, '') : 'unknown error'}</p>`);
+        catch {
+            res.status(500).set('Content-Type', 'text/html; charset=utf-8').send(renderErrorPage('Connection unavailable', 'Appilot could not complete the connection. Please try again.', consentLocale(req.get('Accept-Language'))));
         }
     });
     const requireAuth = requireBearerAuth({
@@ -72,12 +92,15 @@ export function createRemoteApp(config, options = {}) {
         const auth = req.auth;
         const extra = (auth?.extra ?? {});
         // One server and one transport per request. The connection profile is the
-        // caller's own: the deployment's fixed instance URL, their service token.
+        // caller's own: the deployment's fixed instance URL, their service token,
+        // and the scopes the person actually approved, which the tool surface
+        // enforces so the consent screen describes a real limit.
         const server = createAppilotServer({
             baseUrl: config.baseUrl,
             token: extra.pat,
             defaultAppId: extra.appId,
             transport: 'http',
+            grantedScopes: auth?.scopes ?? [],
         });
         const transport = new StreamableHTTPServerTransport({
             sessionIdGenerator: undefined,