crewly 1.20.247 → 1.20.249

package/dist/cli/backend/src/services/connector/connector-access.service.js

@@ -0,0 +1,130 @@
+/**
+ * Which agents may use a connected account.
+ *
+ * A connector (Google Workspace, Canva, Microsoft To Do, …) is one grant for the whole
+ * instance, so without this every agent can read the owner's mail the
+ * moment the owner connects it. Skills carry `X-Agent-Session`, so the
+ * backend can tell which role is calling and refuse.
+ *
+ * The default is **open**: a connector with no allowlist is usable by every
+ * agent, which is what installs had before this existed. An allowlist names
+ * exactly the roles allowed — `orchestrator` included, so the owner can
+ * keep even the orc out of their inbox. The owner's own calls (the
+ * dashboard, no `X-Agent-Session`) are never gated.
+ *
+ * Stored at `<CREWLY_HOME>/connector-access.json`.
+ *
+ * @module services/connector/connector-access.service
+ */
+import * as path from 'path';
+import { getCrewlyHomePath } from '../core/crewly-home.utils.js';
+import { LoggerService } from '../core/logger.service.js';
+import { atomicWriteJson, safeReadJson } from '../../utils/file-io.utils.js';
+/** Connector ids the backend gates (must match the frontend catalog). */
+export const GATED_CONNECTORS = ['google-workspace', 'canva', 'microsoft-todo'];
+/** Filename under CREWLY_HOME. */
+const FILE_NAME = 'connector-access.json';
+/**
+ * Reads and writes the per-connector role allowlists.
+ */
+export class ConnectorAccessService {
+    static instance = null;
+    logger;
+    filePath;
+    cache = null;
+    /**
+     * @param crewlyHome - Override the home directory (tests)
+     */
+    constructor(crewlyHome) {
+        this.logger = LoggerService.getInstance().createComponentLogger('ConnectorAccess');
+        this.filePath = path.join(crewlyHome || getCrewlyHomePath(), FILE_NAME);
+    }
+    static getInstance() {
+        if (!ConnectorAccessService.instance)
+            ConnectorAccessService.instance = new ConnectorAccessService();
+        return ConnectorAccessService.instance;
+    }
+    /** Reset the singleton (tests). */
+    static resetInstance() {
+        ConnectorAccessService.instance = null;
+    }
+    /**
+     * Every rule on file.
+     *
+     * @returns Connector id → rule (connectors with no rule are absent)
+     */
+    async list() {
+        if (this.cache)
+            return this.cache;
+        const raw = await safeReadJson(this.filePath, {}, this.logger);
+        const clean = {};
+        for (const [id, rule] of Object.entries(raw ?? {})) {
+            const roles = Array.isArray(rule?.allowedRoles) ? rule.allowedRoles.map((r) => String(r).toLowerCase()).filter(Boolean) : [];
+            clean[id] = { allowedRoles: [...new Set(roles)] };
+        }
+        this.cache = clean;
+        return clean;
+    }
+    /**
+     * The allowlist for one connector.
+     *
+     * @param connectorId - Connector id
+     * @returns Its roles (empty = open to every agent)
+     */
+    async allowedRoles(connectorId) {
+        return (await this.list())[connectorId]?.allowedRoles ?? [];
+    }
+    /**
+     * Replace a connector's allowlist.
+     *
+     * @param connectorId - Connector id
+     * @param roles - Allowed roles; empty opens it to every agent
+     * @returns The stored rule
+     */
+    async setAllowedRoles(connectorId, roles) {
+        const normalized = [...new Set((roles ?? []).map((r) => String(r).trim().toLowerCase()).filter(Boolean))];
+        const map = { ...(await this.list()) };
+        map[connectorId] = { allowedRoles: normalized };
+        await atomicWriteJson(this.filePath, map);
+        this.cache = map;
+        this.logger.info('Connector access updated', { connectorId, allowedRoles: normalized });
+        return map[connectorId];
+    }
+    /**
+     * Drop a connector's rule (it goes back to open). Used when the connector
+     * itself is removed, so a later one with the same id starts open.
+     *
+     * @param connectorId - Connector id
+     * @returns True when a rule existed
+     */
+    async removeRule(connectorId) {
+        const map = { ...(await this.list()) };
+        if (!(connectorId in map))
+            return false;
+        delete map[connectorId];
+        await atomicWriteJson(this.filePath, map);
+        this.cache = map;
+        this.logger.info('Connector access rule removed', { connectorId });
+        return true;
+    }
+    /**
+     * Whether a caller may use a connector.
+     *
+     * @param connectorId - Connector id
+     * @param role - Caller role; undefined = the owner (always allowed)
+     * @returns True when allowed
+     */
+    async isAllowed(connectorId, role) {
+        if (!role)
+            return true; // the owner / dashboard
+        const roles = await this.allowedRoles(connectorId);
+        if (roles.length === 0)
+            return true; // no rule = open
+        return roles.includes(role.toLowerCase());
+    }
+    /** Drop the in-memory copy (tests, or an external edit of the file). */
+    invalidate() {
+        this.cache = null;
+    }
+}
+//# sourceMappingURL=connector-access.service.js.map

package/dist/cli/backend/src/services/connector/connector-access.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-access.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/connector/connector-access.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAW7E,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,CAAU,CAAC;AAKzF,kCAAkC;AAClC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C;;GAEG;AACH,MAAM,OAAO,sBAAsB;IACzB,MAAM,CAAC,QAAQ,GAAkC,IAAI,CAAC;IAC7C,MAAM,CAAkB;IACxB,QAAQ,CAAS;IAC1B,KAAK,GAA8B,IAAI,CAAC;IAEhD;;OAEG;IACH,YAAY,UAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,iBAAiB,EAAE,EAAE,SAAS,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,sBAAsB,CAAC,QAAQ;YAAE,sBAAsB,CAAC,QAAQ,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACrG,OAAO,sBAAsB,CAAC,QAAQ,CAAC;IACzC,CAAC;IAED,mCAAmC;IACnC,MAAM,CAAC,aAAa;QAClB,sBAAsB,CAAC,QAAQ,GAAG,IAAI,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAqB,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnF,MAAM,KAAK,GAAuB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7H,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,YAAY,IAAI,EAAE,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,KAAe;QACxD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1G,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;QAChD,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;QACxF,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,WAAmB,EAAE,IAAwB;QAC3D,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;QAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;QACtD,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,wEAAwE;IACxE,UAAU;QACR,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC"}

package/dist/cli/backend/src/services/connector/remote-mcp-launch.service.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Hand remote MCP servers to an agent at launch.
+ *
+ * For each server whose `mcp:<id>` allowlist admits the agent's role:
+ *
+ * | Runtime | How |
+ * |---|---|
+ * | Claude Code | `--mcp-config '<CREWLY_HOME>/runtime/remote-mcp/<session>/claude-mcp.json'` (adds to the project `.mcp.json`; no `--strict-mcp-config`) |
+ * | Codex | `-c "mcp_servers.<id>.url=$(cat '<file>')"` (+ `http_headers`), so the secret never appears on the typed command line |
+ * | Gemini CLI, Antigravity, OpenCode, crewly-agent | skipped with a log line |
+ *
+ * Every file is written under CREWLY_HOME with mode 0600 (directory 0700),
+ * never into the project. The returned flags carry only file paths.
+ *
+ * @module services/connector/remote-mcp-launch.service
+ */
+import { RemoteMcpService, type RemoteMcpServer } from './remote-mcp.service.js';
+/** Input for {@link buildRemoteMcpLaunchFlags}. */
+export interface RemoteMcpLaunchInput {
+    /** PTY session name. */
+    sessionName: string;
+    /** Agent role (decides the allowlists). */
+    role: string;
+    /** Runtime being launched. */
+    runtimeType: string;
+    /** Override CREWLY_HOME (tests). */
+    crewlyHome?: string;
+    /** Override the store (tests). */
+    service?: RemoteMcpService;
+}
+/** What {@link buildRemoteMcpLaunchFlags} decided. */
+export interface RemoteMcpLaunchResult {
+    /** Flags to add to the launch command (already shell-quoted). */
+    flags: string[];
+    /** Server ids handed to the agent. */
+    servers: string[];
+    /** Why nothing was added, when nothing was. */
+    skipped?: 'no-servers' | 'unsupported-runtime' | 'error';
+}
+/**
+ * The per-session directory for launch files.
+ *
+ * @param crewlyHome - CREWLY_HOME
+ * @param sessionName - PTY session name
+ * @returns Absolute directory
+ */
+export declare function remoteMcpSessionDir(crewlyHome: string, sessionName: string): string;
+/**
+ * Claude Code's `--mcp-config` body.
+ *
+ * @param servers - Allowed servers
+ * @returns `{ mcpServers: { <id>: { type: 'http', url, headers? } } }`
+ */
+export declare function buildClaudeMcpConfig(servers: RemoteMcpServer[]): {
+    mcpServers: Record<string, {
+        type: 'http';
+        url: string;
+        headers?: Record<string, string>;
+    }>;
+};
+/**
+ * A TOML inline table of headers (JSON strings are valid TOML basic strings).
+ *
+ * @param headers - Header map
+ * @returns e.g. `{ "Authorization" = "Bearer x" }`
+ */
+export declare function toTomlInlineTable(headers: Record<string, string>): string;
+/**
+ * Write the launch files for one agent and return the flags that load them.
+ * Never throws: on any failure the agent launches without remote MCP and
+ * the error is logged (without secrets).
+ *
+ * @param input - Session, role, runtime
+ * @returns Flags and the server ids handed over
+ */
+export declare function buildRemoteMcpLaunchFlags(input: RemoteMcpLaunchInput): Promise<RemoteMcpLaunchResult>;
+//# sourceMappingURL=remote-mcp-launch.service.d.ts.map

package/dist/cli/backend/src/services/connector/remote-mcp-launch.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-mcp-launch.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/connector/remote-mcp-launch.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH,OAAO,EAAE,gBAAgB,EAAmB,KAAK,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAIlG,mDAAmD;AACnD,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B;AAED,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,iEAAiE;IACjE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sCAAsC;IACtC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,YAAY,GAAG,qBAAqB,GAAG,OAAO,CAAC;CAC1D;AAYD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAGnF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAAA;CAAE,CAMhK;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAGzE;AAaD;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAgD3G"}

package/dist/cli/backend/src/services/connector/remote-mcp-launch.service.js

@@ -0,0 +1,132 @@
+/**
+ * Hand remote MCP servers to an agent at launch.
+ *
+ * For each server whose `mcp:<id>` allowlist admits the agent's role:
+ *
+ * | Runtime | How |
+ * |---|---|
+ * | Claude Code | `--mcp-config '<CREWLY_HOME>/runtime/remote-mcp/<session>/claude-mcp.json'` (adds to the project `.mcp.json`; no `--strict-mcp-config`) |
+ * | Codex | `-c "mcp_servers.<id>.url=$(cat '<file>')"` (+ `http_headers`), so the secret never appears on the typed command line |
+ * | Gemini CLI, Antigravity, OpenCode, crewly-agent | skipped with a log line |
+ *
+ * Every file is written under CREWLY_HOME with mode 0600 (directory 0700),
+ * never into the project. The returned flags carry only file paths.
+ *
+ * @module services/connector/remote-mcp-launch.service
+ */
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import { getCrewlyHomePath } from '../core/crewly-home.utils.js';
+import { LoggerService } from '../core/logger.service.js';
+import { REMOTE_MCP_CONSTANTS, RUNTIME_TYPES } from '../../constants.js';
+import { RemoteMcpService, writeSecretJson } from './remote-mcp.service.js';
+const C = REMOTE_MCP_CONSTANTS;
+/**
+ * Quote for a POSIX shell.
+ *
+ * @param value - Raw value
+ * @returns Single-quoted value
+ */
+function shq(value) {
+    return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+/**
+ * The per-session directory for launch files.
+ *
+ * @param crewlyHome - CREWLY_HOME
+ * @param sessionName - PTY session name
+ * @returns Absolute directory
+ */
+export function remoteMcpSessionDir(crewlyHome, sessionName) {
+    const safe = sessionName.replace(/[^A-Za-z0-9._-]/g, '_').replace(/^\.+/, '_') || '_';
+    return path.join(crewlyHome, C.RUNTIME_DIR, safe);
+}
+/**
+ * Claude Code's `--mcp-config` body.
+ *
+ * @param servers - Allowed servers
+ * @returns `{ mcpServers: { <id>: { type: 'http', url, headers? } } }`
+ */
+export function buildClaudeMcpConfig(servers) {
+    const mcpServers = {};
+    for (const s of servers) {
+        mcpServers[s.id] = { type: 'http', url: s.url, ...(s.headers && Object.keys(s.headers).length ? { headers: s.headers } : {}) };
+    }
+    return { mcpServers };
+}
+/**
+ * A TOML inline table of headers (JSON strings are valid TOML basic strings).
+ *
+ * @param headers - Header map
+ * @returns e.g. `{ "Authorization" = "Bearer x" }`
+ */
+export function toTomlInlineTable(headers) {
+    const parts = Object.entries(headers).map(([k, v]) => `${JSON.stringify(k)} = ${JSON.stringify(v)}`);
+    return `{ ${parts.join(', ')} }`;
+}
+/**
+ * Write a 0600 text file.
+ *
+ * @param file - Destination
+ * @param body - Content
+ */
+async function writeSecretText(file, body) {
+    await fs.writeFile(file, body, { encoding: 'utf8', mode: 0o600 });
+    await fs.chmod(file, 0o600);
+}
+/**
+ * Write the launch files for one agent and return the flags that load them.
+ * Never throws: on any failure the agent launches without remote MCP and
+ * the error is logged (without secrets).
+ *
+ * @param input - Session, role, runtime
+ * @returns Flags and the server ids handed over
+ */
+export async function buildRemoteMcpLaunchFlags(input) {
+    const logger = LoggerService.getInstance().createComponentLogger('RemoteMcpLaunch');
+    const { sessionName, role, runtimeType } = input;
+    const crewlyHome = input.crewlyHome || getCrewlyHomePath();
+    const dir = remoteMcpSessionDir(crewlyHome, sessionName);
+    try {
+        const servers = await (input.service ?? RemoteMcpService.getInstance()).serversForRole(role);
+        // Start clean: a server removed or a role narrowed since the last launch must be gone.
+        await fs.rm(dir, { recursive: true, force: true });
+        if (servers.length === 0)
+            return { flags: [], servers: [], skipped: 'no-servers' };
+        const ids = servers.map((s) => s.id);
+        if (runtimeType !== RUNTIME_TYPES.CLAUDE_CODE && runtimeType !== RUNTIME_TYPES.CODEX_CLI) {
+            logger.info('Remote MCP servers: not supported for this runtime — skipped', { sessionName, runtimeType, servers: ids });
+            return { flags: [], servers: [], skipped: 'unsupported-runtime' };
+        }
+        await fs.mkdir(dir, { recursive: true, mode: 0o700 });
+        await fs.chmod(dir, 0o700);
+        if (runtimeType === RUNTIME_TYPES.CLAUDE_CODE) {
+            const file = path.join(dir, C.CLAUDE_CONFIG_FILE);
+            await writeSecretJson(file, buildClaudeMcpConfig(servers));
+            logger.info('Remote MCP servers: added via --mcp-config', { sessionName, role, servers: ids });
+            return { flags: ['--mcp-config', shq(file)], servers: ids };
+        }
+        const flags = [];
+        for (const s of servers) {
+            const urlFile = path.join(dir, `codex-${s.id}-url.toml`);
+            await writeSecretText(urlFile, JSON.stringify(s.url));
+            flags.push('-c', `"mcp_servers.${s.id}.url=$(cat ${shq(urlFile)})"`);
+            if (s.headers && Object.keys(s.headers).length > 0) {
+                const headersFile = path.join(dir, `codex-${s.id}-headers.toml`);
+                await writeSecretText(headersFile, toTomlInlineTable(s.headers));
+                flags.push('-c', `"mcp_servers.${s.id}.http_headers=$(cat ${shq(headersFile)})"`);
+            }
+        }
+        logger.info('Remote MCP servers: added via codex -c mcp_servers', { sessionName, role, servers: ids });
+        return { flags, servers: ids };
+    }
+    catch (err) {
+        logger.error('Remote MCP servers: could not prepare launch files — launching without them', {
+            sessionName,
+            runtimeType,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        return { flags: [], servers: [], skipped: 'error' };
+    }
+}
+//# sourceMappingURL=remote-mcp-launch.service.js.map

package/dist/cli/backend/src/services/connector/remote-mcp-launch.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-mcp-launch.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/connector/remote-mcp-launch.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAwB,MAAM,yBAAyB,CAAC;AAElG,MAAM,CAAC,GAAG,oBAAoB,CAAC;AA0B/B;;;;;GAKG;AACH,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,WAAmB;IACzE,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC;IACtF,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA0B;IAC7D,MAAM,UAAU,GAAoF,EAAE,CAAC;IACvG,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACjI,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA+B;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrG,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAA2B;IACzE,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;IACpF,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IACjD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,mBAAmB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC7F,uFAAuF;QACvF,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QACnF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAErC,IAAI,WAAW,KAAK,aAAa,CAAC,WAAW,IAAI,WAAW,KAAK,aAAa,CAAC,SAAS,EAAE,CAAC;YACzF,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACxH,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;QACpE,CAAC;QAED,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAE3B,IAAI,WAAW,KAAK,aAAa,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAClD,MAAM,eAAe,CAAC,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/F,OAAO,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;YACzD,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrE,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;gBACjE,MAAM,eAAe,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;gBACjE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,EAAE,uBAAuB,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,6EAA6E,EAAE;YAC1F,WAAW;YACX,WAAW;YACX,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/cli/backend/src/services/connector/remote-mcp.service.d.ts

@@ -0,0 +1,192 @@
+/**
+ * Remote MCP servers — streamable-HTTP MCP servers the owner connects once
+ * (Zoho MCP first, any other server the same way) and Crewly hands to every
+ * agent whose role may use them.
+ *
+ * Stored at `<CREWLY_HOME>/remote-mcp-servers.json` with mode 0600. The URL
+ * (Zoho's carries the server's API key) and any headers are secrets: they
+ * are never logged, never returned in full by {@link toView}, and never
+ * written into a project directory (a project `.mcp.json` would be
+ * committed). Agents get them through per-session files under CREWLY_HOME
+ * (see remote-mcp-launch.service).
+ *
+ * Each server is a gated connector `mcp:<id>` in
+ * {@link ConnectorAccessService}: open to every agent until the owner picks
+ * roles.
+ *
+ * @module services/connector/remote-mcp.service
+ */
+import { ConnectorAccessService } from './connector-access.service.js';
+/** Catalog preset a server was added from. */
+export type RemoteMcpProvider = 'zoho' | 'custom';
+/** One stored server (secrets included — never send this to a client). */
+export interface RemoteMcpServer {
+    /** Stable id; also the MCP server name agents see and the `mcp:<id>` access key. */
+    id: string;
+    /** Owner-facing name. */
+    label: string;
+    /** Streamable-HTTP endpoint (secret). */
+    url: string;
+    /** Extra request headers (secret values). */
+    headers?: Record<string, string>;
+    /** Catalog preset. */
+    provider?: RemoteMcpProvider;
+    /** ISO time it was added. */
+    createdAt: string;
+}
+/** What the API returns: no secrets. */
+export interface RemoteMcpServerView {
+    id: string;
+    label: string;
+    provider: RemoteMcpProvider;
+    /** Scheme + host only, e.g. `https://crm-123.zohomcp.com/…`. */
+    urlMasked: string;
+    /** Header names (values withheld). */
+    headerNames: string[];
+    createdAt: string;
+    /** Key of its role allowlist in connector access. */
+    connectorId: string;
+}
+/** Input for {@link RemoteMcpService.add}. */
+export interface AddRemoteMcpInput {
+    label: string;
+    url: string;
+    headers?: Record<string, string>;
+    provider?: string;
+}
+/** A validation failure the API turns into a 400. */
+export declare class RemoteMcpValidationError extends Error {
+    constructor(message: string);
+}
+/**
+ * The connector-access id of a server.
+ *
+ * @param id - Server id
+ * @returns `mcp:<id>`
+ */
+export declare function remoteMcpConnectorId(id: string): string;
+/**
+ * Show a URL without its secret parts: scheme and host only.
+ *
+ * @param url - Stored URL
+ * @returns e.g. `https://crm-123.zohomcp.com/…`, or `(hidden)` when it does not parse
+ */
+export declare function maskRemoteMcpUrl(url: string): string;
+/**
+ * Validate a server URL: https (http only for localhost), no whitespace,
+ * quotes or backslashes (it is embedded in launch files), bounded length.
+ *
+ * @param raw - Pasted URL
+ * @returns The trimmed URL
+ * @throws RemoteMcpValidationError when it is not usable (message never echoes the URL)
+ */
+export declare function validateRemoteMcpUrl(raw: unknown): string;
+/**
+ * Validate optional headers: token-shaped names, single-line values.
+ *
+ * @param raw - Headers object or undefined
+ * @returns Clean headers, or undefined when none
+ * @throws RemoteMcpValidationError on a bad name or value
+ */
+export declare function validateRemoteMcpHeaders(raw: unknown): Record<string, string> | undefined;
+/**
+ * Clean a label.
+ *
+ * @param raw - Label input
+ * @returns Trimmed label
+ * @throws RemoteMcpValidationError when empty
+ */
+export declare function normalizeRemoteMcpLabel(raw: unknown): string;
+/**
+ * Derive an id (MCP server name) from a label: lowercase slug, unique.
+ *
+ * @param label - Label
+ * @param taken - Ids already in use
+ * @returns e.g. `zoho`, `zoho-2`
+ */
+export declare function deriveRemoteMcpId(label: string, taken: Set<string>): string;
+/**
+ * Turn a stored server into its API shape.
+ *
+ * @param server - Stored server
+ * @returns The view (no URL, no header values)
+ */
+export declare function toView(server: RemoteMcpServer): RemoteMcpServerView;
+/**
+ * Reads and writes the remote MCP server store.
+ */
+export declare class RemoteMcpService {
+    private static instance;
+    private readonly logger;
+    private readonly filePath;
+    private readonly access;
+    private writeChain;
+    /**
+     * @param crewlyHome - Override the home directory (tests)
+     * @param access - Connector access service (tests)
+     */
+    constructor(crewlyHome?: string, access?: ConnectorAccessService);
+    static getInstance(): RemoteMcpService;
+    /** Reset the singleton (tests). */
+    static resetInstance(): void;
+    /** Absolute path of the store file. */
+    getFilePath(): string;
+    /**
+     * Every stored server, with secrets. Unreadable entries are dropped.
+     *
+     * @returns Servers in the order they were added
+     */
+    list(): Promise<RemoteMcpServer[]>;
+    /**
+     * One server, with secrets.
+     *
+     * @param id - Server id
+     * @returns The server or undefined
+     */
+    get(id: string): Promise<RemoteMcpServer | undefined>;
+    /**
+     * Add a server.
+     *
+     * @param input - Label, URL, optional headers and provider
+     * @returns The stored server
+     * @throws RemoteMcpValidationError on bad input or a full store
+     */
+    add(input: AddRemoteMcpInput): Promise<RemoteMcpServer>;
+    /**
+     * Rename a server (its id, and so its MCP name and allowlist, stay).
+     *
+     * @param id - Server id
+     * @param label - New label
+     * @returns The updated server, or undefined when there is none
+     */
+    rename(id: string, label: string): Promise<RemoteMcpServer | undefined>;
+    /**
+     * Remove a server and its allowlist.
+     *
+     * @param id - Server id
+     * @returns True when it existed
+     */
+    remove(id: string): Promise<boolean>;
+    /**
+     * Servers an agent role may use (its `mcp:<id>` allowlist passes).
+     *
+     * @param role - Agent role
+     * @returns Allowed servers, with secrets
+     */
+    serversForRole(role: string): Promise<RemoteMcpServer[]>;
+    /**
+     * Serialised read-modify-write; the file is written 0600.
+     *
+     * @param fn - Change to apply
+     * @returns The change's result
+     */
+    private mutate;
+}
+/**
+ * Write JSON readable only by the owner (0600), atomically.
+ *
+ * @param filePath - Destination
+ * @param data - JSON value
+ */
+export declare function writeSecretJson(filePath: string, data: unknown): Promise<void>;
+//# sourceMappingURL=remote-mcp.service.d.ts.map

package/dist/cli/backend/src/services/connector/remote-mcp.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-mcp.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/connector/remote-mcp.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAIvE,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAElD,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,oFAAoF;IACpF,EAAE,EAAE,MAAM,CAAC;IACX,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,sBAAsB;IACtB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wCAAwC;AACxC,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qDAAqD;AACrD,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOpD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAkBzD;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAYzF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAI5D;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAM3E;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,mBAAmB,CAUnE;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,UAAU,CAAuC;IAEzD;;;OAGG;gBACS,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,sBAAsB;IAMhE,MAAM,CAAC,WAAW,IAAI,gBAAgB;IAKtC,mCAAmC;IACnC,MAAM,CAAC,aAAa,IAAI,IAAI;IAI5B,uCAAuC;IACvC,WAAW,IAAI,MAAM;IAIrB;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAqBxC;;;;;OAKG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAI3D;;;;;;OAMG;IACG,GAAG,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAe7D;;;;;;OAMG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAY7E;;;;;OAKG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAY1C;;;;;OAKG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAU9D;;;;;OAKG;YACW,MAAM;CASrB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAWpF"}