crewly 1.20.264 → 1.20.266

package/dist/backend/backend/src/controllers/connector/remote-mcp-proxy.controller.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Agent → remote MCP proxy: `/api/connectors/remote-mcp/:id/mcp`.
+ *
+ * Agents' MCP configs point here instead of at the server, so the server's
+ * URL (Zoho's carries its key) and OAuth tokens never sit in an agent's
+ * config. Each request:
+ *
+ * 1. must come from an agent (its badge or session header — the owner and
+ *    anonymous callers are refused with 403, never 401: a 401 would make
+ *    Claude Code start its own localhost OAuth flow against us);
+ * 2. passes the server's `mcp:<id>` role allowlist;
+ * 3. is forwarded with the server's static headers plus a fresh
+ *    `Authorization: Bearer` for OAuth servers — streamable HTTP as is:
+ *    JSON or `text/event-stream` responses stream through, `Mcp-Session-Id`,
+ *    `MCP-Protocol-Version` and `Last-Event-ID` pass both ways;
+ * 4. on an upstream 401 the token is refreshed once and the request
+ *    retried; when that fails the owner gets a sign-in card (throttled) and
+ *    the agent gets a JSON-RPC error saying so.
+ *
+ * Nothing about the URL, token or body is logged.
+ *
+ * @module controllers/connector/remote-mcp-proxy.controller
+ */
+import type { Request, Response } from 'express';
+import { ConnectorAccessService } from '../../services/connector/connector-access.service.js';
+import { RemoteMcpService } from '../../services/connector/remote-mcp.service.js';
+import { RemoteMcpAuthService } from '../../services/connector/remote-mcp-auth.service.js';
+/** Upstream response shape the proxy needs (fetch's Response). */
+export interface UpstreamResponse {
+    status: number;
+    headers: {
+        get(name: string): string | null;
+    };
+    body: ReadableStream<Uint8Array> | null;
+    text(): Promise<string>;
+}
+/** Collaborators (tests inject). */
+export interface ProxyDeps {
+    servers: () => Pick<RemoteMcpService, 'get'>;
+    auth: () => Pick<RemoteMcpAuthService, 'usesOAuth' | 'getAccessToken' | 'onUnauthorized' | 'view'>;
+    access: () => Pick<ConnectorAccessService, 'isAllowed' | 'allowedRoles'>;
+    fetchImpl: (url: string, init: {
+        method: string;
+        headers: Record<string, string>;
+        body?: string;
+        signal: AbortSignal;
+    }) => Promise<UpstreamResponse>;
+}
+/**
+ * Replace collaborators (tests).
+ *
+ * @param next - Partial overrides
+ */
+export declare function setRemoteMcpProxyDeps(next: Partial<ProxyDeps>): void;
+/**
+ * The JSON-RPC id of a request body, if it is a request (not a notification).
+ *
+ * @param body - Raw body
+ * @returns The id, or undefined
+ */
+export declare function rpcIdOf(body: string | undefined): string | number | null | undefined;
+/**
+ * ALL /api/connectors/remote-mcp/:id/mcp
+ *
+ * @param req - Agent request (JSON-RPC over streamable HTTP)
+ * @param res - The server's answer, streamed
+ */
+export declare function proxyRemoteMcp(req: Request, res: Response): Promise<void>;
+//# sourceMappingURL=remote-mcp-proxy.controller.d.ts.map

package/dist/backend/backend/src/controllers/connector/remote-mcp-proxy.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-mcp-proxy.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/connector/remote-mcp-proxy.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sDAAsD,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAA8C,MAAM,gDAAgD,CAAC;AAC9H,OAAO,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAW3F,kEAAkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC9C,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IACxC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,oCAAoC;AACpC,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,EAAE,MAAM,IAAI,CAAC,oBAAoB,EAAE,WAAW,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,MAAM,CAAC,CAAC;IACnG,MAAM,EAAE,MAAM,IAAI,CAAC,sBAAsB,EAAE,WAAW,GAAG,cAAc,CAAC,CAAC;IACzE,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACtJ;AASD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CASpF;AAmBD;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAkH/E"}

package/dist/backend/backend/src/controllers/connector/remote-mcp-proxy.controller.js

@@ -0,0 +1,203 @@
+/**
+ * Agent → remote MCP proxy: `/api/connectors/remote-mcp/:id/mcp`.
+ *
+ * Agents' MCP configs point here instead of at the server, so the server's
+ * URL (Zoho's carries its key) and OAuth tokens never sit in an agent's
+ * config. Each request:
+ *
+ * 1. must come from an agent (its badge or session header — the owner and
+ *    anonymous callers are refused with 403, never 401: a 401 would make
+ *    Claude Code start its own localhost OAuth flow against us);
+ * 2. passes the server's `mcp:<id>` role allowlist;
+ * 3. is forwarded with the server's static headers plus a fresh
+ *    `Authorization: Bearer` for OAuth servers — streamable HTTP as is:
+ *    JSON or `text/event-stream` responses stream through, `Mcp-Session-Id`,
+ *    `MCP-Protocol-Version` and `Last-Event-ID` pass both ways;
+ * 4. on an upstream 401 the token is refreshed once and the request
+ *    retried; when that fails the owner gets a sign-in card (throttled) and
+ *    the agent gets a JSON-RPC error saying so.
+ *
+ * Nothing about the URL, token or body is logged.
+ *
+ * @module controllers/connector/remote-mcp-proxy.controller
+ */
+import { Readable } from 'stream';
+import { LoggerService } from '../../services/core/logger.service.js';
+import { getCallerIdentity } from '../../middleware/caller-identity.middleware.js';
+import { resolveAgentCaller } from '../../utils/agent-caller.utils.js';
+import { ConnectorAccessService } from '../../services/connector/connector-access.service.js';
+import { RemoteMcpService, remoteMcpConnectorId } from '../../services/connector/remote-mcp.service.js';
+import { RemoteMcpAuthService } from '../../services/connector/remote-mcp-auth.service.js';
+import { REMOTE_MCP_CONSTANTS } from '../../constants.js';
+const logger = LoggerService.getInstance().createComponentLogger('RemoteMcpProxy');
+const C = REMOTE_MCP_CONSTANTS;
+/** Request headers passed upstream. */
+const FORWARD_REQUEST = ['content-type', 'accept', 'mcp-session-id', 'mcp-protocol-version', 'last-event-id'];
+/** Response headers passed back. */
+const FORWARD_RESPONSE = ['content-type', 'mcp-session-id', 'mcp-protocol-version', 'cache-control'];
+let deps = {
+    servers: () => RemoteMcpService.getInstance(),
+    auth: () => RemoteMcpAuthService.getInstance(),
+    access: () => ConnectorAccessService.getInstance(),
+    fetchImpl: (url, init) => fetch(url, init),
+};
+/**
+ * Replace collaborators (tests).
+ *
+ * @param next - Partial overrides
+ */
+export function setRemoteMcpProxyDeps(next) {
+    deps = { ...deps, ...next };
+}
+/**
+ * The JSON-RPC id of a request body, if it is a request (not a notification).
+ *
+ * @param body - Raw body
+ * @returns The id, or undefined
+ */
+export function rpcIdOf(body) {
+    if (!body)
+        return undefined;
+    try {
+        const parsed = JSON.parse(body);
+        const first = Array.isArray(parsed) ? parsed[0] : parsed;
+        return first && 'id' in first ? first.id : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Answer the agent without reaching the server.
+ *
+ * @param res - Response
+ * @param body - Raw request body (decides JSON-RPC error vs plain)
+ * @param message - What the agent should know
+ * @param httpStatus - Status when it is not a JSON-RPC request
+ */
+function refuse(res, body, message, httpStatus, rpcCode = -32000) {
+    const id = rpcIdOf(body);
+    if (id !== undefined) {
+        res.status(200).json({ jsonrpc: '2.0', id, error: { code: rpcCode, message } });
+        return;
+    }
+    res.status(httpStatus).json({ success: false, error: message });
+}
+/**
+ * ALL /api/connectors/remote-mcp/:id/mcp
+ *
+ * @param req - Agent request (JSON-RPC over streamable HTTP)
+ * @param res - The server's answer, streamed
+ */
+export async function proxyRemoteMcp(req, res) {
+    const id = String(req.params.id ?? '');
+    const raw = req.rawBody;
+    const body = req.method === 'POST' ? (raw ?? (req.body && Object.keys(req.body).length ? JSON.stringify(req.body) : undefined)) : undefined;
+    const identity = getCallerIdentity(req);
+    if (identity.kind !== 'agent') {
+        res.status(403).json({ success: false, error: 'agents_only', message: 'This endpoint is for Crewly agents. The owner manages servers in Connections.' });
+        return;
+    }
+    const caller = await resolveAgentCaller(req);
+    let server;
+    try {
+        server = await deps.servers().get(id);
+    }
+    catch {
+        server = undefined;
+    }
+    if (!server) {
+        refuse(res, body, 'No such remote MCP server on this machine.', 404);
+        return;
+    }
+    if (!(await deps.access().isAllowed(remoteMcpConnectorId(server.id), caller.role || 'unknown'))) {
+        const allowed = await deps.access().allowedRoles(remoteMcpConnectorId(server.id)).catch(() => []);
+        logger.warn('Remote MCP proxy: role not allowed', { id, session: caller.session, role: caller.role, allowed });
+        refuse(res, body, `Your role (${caller.role}) may not use ${server.label}. The owner limited it to: ${allowed.join(', ')}.`, 403);
+        return;
+    }
+    const auth = deps.auth();
+    const oauth = await auth.usesOAuth(server.id);
+    const needsSignIn = async () => {
+        void auth.onUnauthorized(server, caller.session).catch(() => undefined);
+        logger.info('Remote MCP proxy: owner sign-in needed', { id, session: caller.session });
+        refuse(res, body, `${server.label} needs the owner to sign in once. A sign-in link was sent to the owner in Slack (and is on the Connections page). Tell the owner, then try again after they authorize.`, 503, C.PROXY_NEEDS_AUTH_RPC_CODE);
+    };
+    let token = null;
+    if (oauth) {
+        token = await auth.getAccessToken(server.id);
+        if (!token) {
+            await needsSignIn();
+            return;
+        }
+    }
+    const controller = new AbortController();
+    // `close` on the response fires when the agent goes away (or we finish).
+    res.on('close', () => controller.abort());
+    const send = (bearer) => {
+        const headers = { ...(server.headers ?? {}) };
+        for (const name of FORWARD_REQUEST) {
+            const v = req.headers[name];
+            if (typeof v === 'string' && v)
+                headers[name] = v;
+        }
+        if (!headers['accept'])
+            headers['accept'] = 'application/json, text/event-stream';
+        if (bearer)
+            headers['Authorization'] = `Bearer ${bearer}`;
+        return deps.fetchImpl(server.url, { method: req.method, headers, ...(body !== undefined ? { body } : {}), signal: controller.signal });
+    };
+    let upstream;
+    try {
+        upstream = await send(token);
+        if (upstream.status === 401 && oauth) {
+            await upstream.text().catch(() => '');
+            const fresh = await auth.getAccessToken(server.id, { force: true });
+            if (!fresh) {
+                await needsSignIn();
+                return;
+            }
+            upstream = await send(fresh);
+            if (upstream.status === 401) {
+                await upstream.text().catch(() => '');
+                await needsSignIn();
+                return;
+            }
+        }
+        else if (upstream.status === 401) {
+            // A static-key server refused: the URL/key is wrong, or it moved to OAuth.
+            await upstream.text().catch(() => '');
+            logger.warn('Remote MCP proxy: upstream refused a static-key server', { id });
+            refuse(res, body, `${server.label} refused the request (401). The owner should press Test on it in Connections.`, 502);
+            return;
+        }
+    }
+    catch (err) {
+        if (controller.signal.aborted)
+            return;
+        logger.warn('Remote MCP proxy: upstream unreachable', { id, error: err instanceof Error ? err.name : 'unknown' });
+        refuse(res, body, `${server.label} is unreachable right now.`, 502);
+        return;
+    }
+    res.status(upstream.status);
+    for (const name of FORWARD_RESPONSE) {
+        const v = upstream.headers.get(name);
+        if (v)
+            res.setHeader(name, v);
+    }
+    if ((upstream.headers.get('content-type') ?? '').includes('text/event-stream')) {
+        res.setHeader('X-Accel-Buffering', 'no');
+        res.flushHeaders();
+    }
+    if (!upstream.body) {
+        res.end();
+        return;
+    }
+    const stream = Readable.fromWeb(upstream.body);
+    stream.on('error', () => {
+        if (!res.writableEnded)
+            res.end();
+    });
+    stream.pipe(res);
+}
+//# sourceMappingURL=remote-mcp-proxy.controller.js.map

package/dist/backend/backend/src/controllers/connector/remote-mcp-proxy.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-mcp-proxy.controller.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/connector/remote-mcp-proxy.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sDAAsD,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAwB,MAAM,gDAAgD,CAAC;AAC9H,OAAO,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;AACnF,MAAM,CAAC,GAAG,oBAAoB,CAAC;AAE/B,uCAAuC;AACvC,MAAM,eAAe,GAAG,CAAC,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,eAAe,CAAC,CAAC;AAC9G,oCAAoC;AACpC,MAAM,gBAAgB,GAAG,CAAC,cAAc,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,eAAe,CAAC,CAAC;AAkBrG,IAAI,IAAI,GAAc;IACpB,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE;IAC7C,IAAI,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE;IAC9C,MAAM,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,WAAW,EAAE;IAClD,SAAS,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAyC;CACnF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAwB;IAC5D,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,IAAwB;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6E,CAAC;QAC5G,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzD,OAAO,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,MAAM,CAAC,GAAa,EAAE,IAAwB,EAAE,OAAe,EAAE,UAAkB,EAAE,OAAO,GAAG,CAAC,KAAK;IAC5G,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAChF,OAAO;IACT,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAY,EAAE,GAAa;IAC9D,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAI,GAAsC,CAAC,OAAO,CAAC;IAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtJ,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,+EAA+E,EAAE,CAAC,CAAC;QACzJ,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,MAAmC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,4CAA4C,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;QAC9G,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/G,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,cAAc,MAAM,CAAC,IAAI,iBAAiB,MAAM,CAAC,KAAK,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClI,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC5C,KAAK,IAAI,CAAC,cAAc,CAAC,MAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzE,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,MAAM,CACJ,GAAG,EACH,IAAI,EACJ,GAAG,MAAO,CAAC,KAAK,wKAAwK,EACxL,GAAG,EACH,CAAC,CAAC,yBAAyB,CAC5B,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,WAAW,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,yEAAyE;IACzE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;IAE1C,MAAM,IAAI,GAAG,CAAC,MAAqB,EAA6B,EAAE;QAChE,MAAM,OAAO,GAA2B,EAAE,GAAG,CAAC,MAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACvE,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,qCAAqC,CAAC;QAClF,IAAI,MAAM;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,MAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1I,CAAC,CAAC;IAEF,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;YACrC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,WAAW,EAAE,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACtC,MAAM,WAAW,EAAE,CAAC;gBACpB,OAAO;YACT,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACnC,2EAA2E;YAC3E,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9E,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,+EAA+E,EAAE,GAAG,CAAC,CAAC;YACvH,OAAO;QACT,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACtC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAClH,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC;YAAE,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QACzC,GAAG,CAAC,YAAY,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAsD,CAAC,CAAC;IACjG,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACtB,IAAI,CAAC,GAAG,CAAC,aAAa;YAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC"}

package/dist/backend/backend/src/controllers/connector/remote-mcp.controller.d.ts

@@ -10,6 +10,13 @@
  * - POST   /api/connectors/remote-mcp/:id/rename — same as PATCH (relay: GET/POST only)
  * - POST   /api/connectors/remote-mcp/:id/remove — same as DELETE (relay: GET/POST only)
  * - POST   /api/connectors/remote-mcp/:id/access — `{ allowedRoles }` for this server only
+ * - POST   /api/connectors/remote-mcp/:id/authorize — start (or reuse) an OAuth sign-in → `{ url, expiresAt, posted }`
+ *
+ * OAuth servers (Zoho MCP answers 401 + `resource_metadata`) are detected on
+ * add and on test: the response then carries `authorize: { url, expiresAt }`
+ * — a single-use Crewly Cloud link the owner can open on a phone — and the
+ * owner gets the same link as a Slack card. Each server's view carries
+ * `auth` (needs_auth / connected / error, scopes, expiry).
  *
  * Which agents get a server is its `mcp:<id>` allowlist
  * (`PUT /api/connectors/access/mcp:<id>`). Changes reach an agent the next
@@ -55,6 +62,15 @@ export declare function removeRemoteMcp(req: Request, res: Response): Promise<vo
  * @param res - `{ success, data: { ok, toolCount, tools, serverName? } | { ok: false, error } }`
  */
 export declare function testRemoteMcp(req: Request, res: Response): Promise<void>;
+/**
+ * POST /api/connectors/remote-mcp/:id/authorize — body `{ notify? }`.
+ * Starts (or reuses) an OAuth sign-in and returns its phone-friendly link;
+ * `notify: true` also posts it to the owner in Slack.
+ *
+ * @param req - Request
+ * @param res - `{ success, data: { url, expiresAt, posted } }`
+ */
+export declare function authorizeRemoteMcp(req: Request, res: Response): Promise<void>;
 /**
  * POST /api/connectors/remote-mcp/:id/access — body `{ allowedRoles: string[] }`
  * (empty = every agent). The same rule as `PUT /api/connectors/access/mcp:<id>`,

package/dist/backend/backend/src/controllers/connector/remote-mcp.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-mcp.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/connector/remote-mcp.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AASjD,4CAA4C;AAC5C,eAAO,MAAM,gBAAgB,qFAAqF,CAAC;AAsBnH;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ9E;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAc7E;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAahF;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhF;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAc9E;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBnF"}
+{"version":3,"file":"remote-mcp.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/connector/remote-mcp.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAYjD,4CAA4C;AAC5C,eAAO,MAAM,gBAAgB,qFAAqF,CAAC;AAwEnH;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ9E;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAkC7E;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAahF;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAahF;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB9E;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBnF;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBnF"}

package/dist/backend/backend/src/controllers/connector/remote-mcp.controller.js

@@ -10,6 +10,13 @@
  * - POST   /api/connectors/remote-mcp/:id/rename — same as PATCH (relay: GET/POST only)
  * - POST   /api/connectors/remote-mcp/:id/remove — same as DELETE (relay: GET/POST only)
  * - POST   /api/connectors/remote-mcp/:id/access — `{ allowedRoles }` for this server only
+ * - POST   /api/connectors/remote-mcp/:id/authorize — start (or reuse) an OAuth sign-in → `{ url, expiresAt, posted }`
+ *
+ * OAuth servers (Zoho MCP answers 401 + `resource_metadata`) are detected on
+ * add and on test: the response then carries `authorize: { url, expiresAt }`
+ * — a single-use Crewly Cloud link the owner can open on a phone — and the
+ * owner gets the same link as a Slack card. Each server's view carries
+ * `auth` (needs_auth / connected / error, scopes, expiry).
  *
  * Which agents get a server is its `mcp:<id>` allowlist
  * (`PUT /api/connectors/access/mcp:<id>`). Changes reach an agent the next
@@ -22,6 +29,8 @@ import { rejectNonOwner } from '../../middleware/caller-identity.middleware.js';
 import { RemoteMcpService, RemoteMcpValidationError, remoteMcpConnectorId, toView } from '../../services/connector/remote-mcp.service.js';
 import { ConnectorAccessService } from '../../services/connector/connector-access.service.js';
 import { probeRemoteMcp } from '../../services/connector/remote-mcp-probe.service.js';
+import { RemoteMcpAuthError, RemoteMcpAuthService } from '../../services/connector/remote-mcp-auth.service.js';
+import { parseWwwAuthenticate } from '../../services/connector/remote-mcp-oauth.js';
 const logger = LoggerService.getInstance().createComponentLogger('RemoteMcpController');
 /** Told to the owner after every change. */
 export const NEXT_LAUNCH_NOTE = 'Agents pick this up the next time they start (restart an agent to apply it now).';
@@ -43,6 +52,57 @@ function fail(res, err, what) {
     logger.error(`Remote MCP: ${what} failed`, { error: err instanceof Error ? err.message : String(err) });
     res.status(500).json({ success: false, error: 'internal', message: `Could not ${what} the remote MCP server` });
 }
+/**
+ * A server's view plus its sign-in state.
+ *
+ * @param server - Stored server
+ * @returns View with `auth` for OAuth servers
+ */
+async function viewWithAuth(server) {
+    const auth = await RemoteMcpAuthService.getInstance().view(server.id).catch(() => undefined);
+    return { ...toView(server), ...(auth ? { auth } : {}) };
+}
+/**
+ * Start a sign-in and describe the outcome for a response.
+ *
+ * @param server - Stored server
+ * @param challenge - Raw `WWW-Authenticate`, when a probe saw one
+ * @param notify - Post the Slack card too
+ * @returns `{ url, expiresAt, posted }`, or `{ error }`
+ */
+async function startSignIn(server, challenge, notify) {
+    try {
+        return await RemoteMcpAuthService.getInstance().startAuthorization(server, {
+            notify,
+            ...(challenge !== undefined ? { challenge: parseWwwAuthenticate(challenge) } : {}),
+        });
+    }
+    catch (err) {
+        const message = err instanceof RemoteMcpAuthError ? err.message : 'Could not start the sign-in.';
+        logger.warn('Remote MCP: sign-in not started', { id: server.id, error: message });
+        return { error: message };
+    }
+}
+/**
+ * Probe a server, with its OAuth token when it has one (refreshed once on 401).
+ *
+ * @param server - Stored server
+ * @returns Probe result
+ */
+async function probeWithAuth(server) {
+    const auth = RemoteMcpAuthService.getInstance();
+    if (!(await auth.usesOAuth(server.id)))
+        return probeRemoteMcp(server);
+    const run = async (token) => probeRemoteMcp({ url: server.url, headers: { ...(server.headers ?? {}), ...(token ? { Authorization: `Bearer ${token}` } : {}) } });
+    const token = await auth.getAccessToken(server.id);
+    if (!token)
+        return { ok: false, error: 'Sign in to this server first.', needsAuth: true };
+    const first = await run(token);
+    if (first.ok || !first.needsAuth)
+        return first;
+    const fresh = await auth.getAccessToken(server.id, { force: true });
+    return fresh ? run(fresh) : first;
+}
 /**
  * GET /api/connectors/remote-mcp
  *
@@ -54,7 +114,7 @@ export async function listRemoteMcp(req, res) {
         return;
     try {
         const servers = await RemoteMcpService.getInstance().list();
-        res.json({ success: true, data: servers.map(toView) });
+        res.json({ success: true, data: await Promise.all(servers.map(viewWithAuth)) });
     }
     catch (err) {
         fail(res, err, 'list');
@@ -71,13 +131,35 @@ export async function addRemoteMcp(req, res) {
         return;
     try {
         const body = (req.body ?? {});
+        const clientId = typeof body.oauthClientId === 'string' ? body.oauthClientId.trim() : '';
+        const clientSecret = typeof body.oauthClientSecret === 'string' ? body.oauthClientSecret.trim() : '';
+        if ((clientId && !/^[\x21-\x7e]{1,256}$/.test(clientId)) || (clientSecret && !/^[\x21-\x7e]{1,512}$/.test(clientSecret))) {
+            res.status(400).json({ success: false, error: 'validation', message: 'The OAuth client ID / secret must be single-line text.' });
+            return;
+        }
         const server = await RemoteMcpService.getInstance().add({
             label: typeof body.label === 'string' ? body.label : '',
             url: typeof body.url === 'string' ? body.url : '',
             headers: body.headers,
             provider: typeof body.provider === 'string' ? body.provider : undefined,
         });
-        res.status(201).json({ success: true, data: toView(server), note: NEXT_LAUNCH_NOTE });
+        // Does it want OAuth? (Zoho MCP: 401 + resource_metadata.) Then start the
+        // sign-in right away and send the owner the phone link.
+        const auth = RemoteMcpAuthService.getInstance();
+        if (clientId)
+            await auth.setManualClient(server.id, { clientId, ...(clientSecret ? { clientSecret } : {}) });
+        const challenge = await auth.detect(server);
+        let authorize;
+        if (challenge) {
+            try {
+                await auth.markOAuth(server, challenge);
+                authorize = await startSignIn(server, undefined, true);
+            }
+            catch (err) {
+                authorize = { error: err instanceof RemoteMcpAuthError ? err.message : 'Could not work out how to sign in to this server.' };
+            }
+        }
+        res.status(201).json({ success: true, data: await viewWithAuth(server), ...(authorize ? { authorize } : {}), note: NEXT_LAUNCH_NOTE });
     }
     catch (err) {
         fail(res, err, 'add');
@@ -116,6 +198,8 @@ export async function removeRemoteMcp(req, res) {
         return;
     try {
         const removed = await RemoteMcpService.getInstance().remove(String(req.params.id ?? ''));
+        if (removed)
+            await RemoteMcpAuthService.getInstance().forget(String(req.params.id ?? '')).catch(() => undefined);
         if (!removed) {
             res.status(404).json({ success: false, error: 'not_found', message: 'No such remote MCP server' });
             return;
@@ -141,14 +225,51 @@ export async function testRemoteMcp(req, res) {
             res.status(404).json({ success: false, error: 'not_found', message: 'No such remote MCP server' });
             return;
         }
-        const result = await probeRemoteMcp(server);
-        logger.info('Remote MCP test', { id: server.id, ok: result.ok, toolCount: result.ok ? result.toolCount : undefined });
-        res.json({ success: true, data: result });
+        let result = await probeWithAuth(server);
+        let authorize;
+        if (!result.ok && result.needsAuth) {
+            authorize = await startSignIn(server, result.wwwAuthenticate, true);
+            result = { ok: false, needsAuth: true, error: 'The server wants you to sign in once. Open the authorize link (it works on your phone).' };
+        }
+        logger.info('Remote MCP test', { id: server.id, ok: result.ok, toolCount: result.ok ? result.toolCount : undefined, needsAuth: !result.ok && !!result.needsAuth });
+        // Never hand the raw challenge to a client.
+        const data = result.ok ? result : { ok: false, error: result.error, ...(result.needsAuth ? { needsAuth: true } : {}) };
+        res.json({ success: true, data, ...(authorize ? { authorize } : {}), server: await viewWithAuth(server) });
     }
     catch (err) {
         fail(res, err, 'test');
     }
 }
+/**
+ * POST /api/connectors/remote-mcp/:id/authorize — body `{ notify? }`.
+ * Starts (or reuses) an OAuth sign-in and returns its phone-friendly link;
+ * `notify: true` also posts it to the owner in Slack.
+ *
+ * @param req - Request
+ * @param res - `{ success, data: { url, expiresAt, posted } }`
+ */
+export async function authorizeRemoteMcp(req, res) {
+    if (rejectNonOwner(req, res, AGENT_REFUSAL))
+        return;
+    try {
+        const server = await RemoteMcpService.getInstance().get(String(req.params.id ?? ''));
+        if (!server) {
+            res.status(404).json({ success: false, error: 'not_found', message: 'No such remote MCP server' });
+            return;
+        }
+        const notify = req.body?.notify === true;
+        const out = await startSignIn(server, undefined, notify);
+        if ('error' in out) {
+            res.status(409).json({ success: false, error: 'authorize_failed', message: out.error });
+            return;
+        }
+        res.setHeader('Cache-Control', 'no-store');
+        res.json({ success: true, data: out });
+    }
+    catch (err) {
+        fail(res, err, 'authorize');
+    }
+}
 /**
  * POST /api/connectors/remote-mcp/:id/access — body `{ allowedRoles: string[] }`
  * (empty = every agent). The same rule as `PUT /api/connectors/access/mcp:<id>`,

package/dist/backend/backend/src/controllers/connector/remote-mcp.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-mcp.controller.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/connector/remote-mcp.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,gDAAgD,CAAC;AAC1I,OAAO,EAAE,sBAAsB,EAAE,MAAM,sDAAsD,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAEtF,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;AAExF,4CAA4C;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,kFAAkF,CAAC;AAEnH,6BAA6B;AAC7B,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC;AAEtI;;;;;;GAMG;AACH,SAAS,IAAI,CAAC,GAAa,EAAE,GAAY,EAAE,IAAY;IACrD,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IACD,6DAA6D;IAC7D,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,IAAI,wBAAwB,EAAE,CAAC,CAAC;AAClH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAY,EAAE,GAAa;IAC7D,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,GAAa;IAC5D,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA8E,CAAC;QAC3G,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC;YACtD,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACvD,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACjD,OAAO,EAAE,IAAI,CAAC,OAA6C;YAC3D,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa;IAC/D,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,KAAK,GAAI,GAAG,CAAC,IAAwC,EAAE,KAAK,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChI,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa;IAC/D,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAY,EAAE,GAAa;IAC7D,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACtH,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,GAAa;IAClE,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA+B,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,mEAAmE,EAAE,CAAC,CAAC;YAC5I,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9H,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}
+{"version":3,"file":"remote-mcp.controller.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/connector/remote-mcp.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,gDAAgD,CAAC;AAC1I,OAAO,EAAE,sBAAsB,EAAE,MAAM,sDAAsD,CAAC;AAC9F,OAAO,EAAE,cAAc,EAA6B,MAAM,sDAAsD,CAAC;AACjH,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAA0B,MAAM,qDAAqD,CAAC;AACvI,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAGpF,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;AAExF,4CAA4C;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,kFAAkF,CAAC;AAEnH,6BAA6B;AAC7B,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC;AAEtI;;;;;;GAMG;AACH,SAAS,IAAI,CAAC,GAAa,EAAE,GAAY,EAAE,IAAY;IACrD,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IACD,6DAA6D;IAC7D,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,IAAI,wBAAwB,EAAE,CAAC,CAAC;AAClH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CAAC,MAAuB;IACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7F,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,WAAW,CAAC,MAAuB,EAAE,SAA6B,EAAE,MAAe;IAChG,IAAI,CAAC;QACH,OAAO,MAAM,oBAAoB,CAAC,WAAW,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE;YACzE,MAAM;YACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC;QACjG,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAAC,MAAuB;IAClD,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,KAAK,EAAE,KAAoB,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAChL,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1F,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAY,EAAE,GAAa;IAC7D,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,GAAa;IAC5D,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAoI,CAAC;QACjK,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,IAAI,CAAC,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACzH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC,CAAC;YACjI,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC;YACtD,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACvD,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACjD,OAAO,EAAE,IAAI,CAAC,OAA6C;YAC3D,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC,CAAC;QACH,0EAA0E;QAC1E,wDAAwD;QACxD,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,QAAQ;YAAE,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7G,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,SAA8D,CAAC;QACnE,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBACxC,SAAS,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,EAAE,KAAK,EAAE,GAAG,YAAY,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mDAAmD,EAAE,CAAC;YAC/H,CAAC;QACH,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACzI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa;IAC/D,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,KAAK,GAAI,GAAG,CAAC,IAAwC,EAAE,KAAK,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChI,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa;IAC/D,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzF,IAAI,OAAO;YAAE,MAAM,oBAAoB,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAY,EAAE,GAAa;IAC7D,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,IAAI,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,SAA8D,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACnC,SAAS,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YACpE,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,yFAAyF,EAAE,CAAC;QAC5I,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACnK,4CAA4C;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChI,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,GAAa;IAClE,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAI,GAAG,CAAC,IAAyC,EAAE,MAAM,KAAK,IAAI,CAAC;QAC/E,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,GAAa;IAClE,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA+B,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,mEAAmE,EAAE,CAAC,CAAC;YAC5I,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9H,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/dist/backend/backend/src/controllers/google/google-connect-card.d.ts

@@ -19,15 +19,26 @@ export interface SlackOrigin {
     threadTs?: string;
     botToken?: string;
 }
+/** Human names for the products, for the card's first line. */
+export declare const PRODUCT_LABELS: Record<string, string>;
 /**
  * Build the card. Pure, so the wording is testable without Slack.
  *
+ * A reconnect (`reconnect`) replaces the generic "Needs access" with the
+ * reason the harness hit — "Gmail needs re-authorization to save drafts" —
+ * and names the Google account, because an owner with two Gmail logins has
+ * to know which one to pick.
+ *
  * @param product - Product needing consent
  * @param url - The ticket link behind the button
  * @param expiresAt - When the link stops working
+ * @param reconnect - Why a working connection needs the owner again, and for which account
  * @returns Block Kit blocks and the fallback text
  */
-export declare function buildConnectCard(product: string, url: string, expiresAt: string): {
+export declare function buildConnectCard(product: string, url: string, expiresAt: string, reconnect?: {
+    message: string;
+    account?: string;
+}): {
     text: string;
     blocks: unknown[];
 };

package/dist/backend/backend/src/controllers/google/google-connect-card.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google-connect-card.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/google/google-connect-card.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKzE,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AASD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAwBrC;AAED,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,SAAS,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAClE,+CAA+C;IAC/C,UAAU,EAAE,CAAC,IAAI,EAAE;QACjB,QAAQ,EAAE,aAAa,EAAE,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,KAAK,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,8CAA8C;IAC9C,aAAa,EAAE,CACb,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,EAAE,EACjB,QAAQ,CAAC,EAAE,MAAM,KACd,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAID;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI,CAErE;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CA4DhF"}
+{"version":3,"file":"google-connect-card.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/google/google-connect-card.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKzE,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+DAA+D;AAC/D,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAIjD,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAoCrC;AAED,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,SAAS,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAClE,+CAA+C;IAC/C,UAAU,EAAE,CAAC,IAAI,EAAE;QACjB,QAAQ,EAAE,aAAa,EAAE,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,KAAK,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,8CAA8C;IAC9C,aAAa,EAAE,CACb,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,EAAE,EACjB,QAAQ,CAAC,EAAE,MAAM,KACd,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAID;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI,CAErE;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CA4DhF"}