flujo-ai 3.35.0 → 3.38.0

package/.next/server/chunks/544.js

@@ -72,7 +72,7 @@ ${c}`;return a?`${a}
 ${d}`:d}(a.function.description??"",i);if(c){let c=!!a.function.parameters?.properties?.task;return D(b,j,h,async a=>(L.push({name:b,args:a??{}}),ao.debug("Claude subscription requested handoff",{tool:b,callIndex:L.length,spawnable:c}),c)?{content:[{type:"text",text:"Worker spawned for this task. Call this tool again right now to spawn another parallel worker (one call per task). When you stop calling it, all spawned workers run concurrently and their merged results come back."}]}:(M=!0,{content:[{type:"text",text:"Handing off."}]}))}if(e)return D(b,j,h,async a=>{let c;ao.debug("Claude subscription local tool call",{tool:b});let d=Y(b,a),f=!1;try{c=JSON.stringify(await e(a??{}))}catch(a){c=`Error: ${a instanceof Error?a.message:String(a)}`,f=!0}return U({id:d,resultContent:c}),f?{content:[{type:"text",text:c}],isError:!0}:{content:[{type:"text",text:c}]}});let{server:k,tool:l,timeout:m,nodeId:n,uiResourceUri:p}=d,q=function(a,b,c){let d=`${at(a)}__${at(b)}`;d.length>110&&(d=d.slice(0,110));let e=d,f=2;for(;c.has(e);){let a=`_${f++}`;e=d.slice(0,110-a.length)+a}return c.add(e),e}(k,l,J);return K.set(q,{serverName:k,toolName:l,advertisedUri:p}),D(q,j,h,async a=>{let b,c;ao.debug("Claude subscription tool call",{server:k,tool:l,exposedAs:q});let d=Y(q,a),e=await _.mcpService.callTool(k,l,a??{},m??ad.aI,void 0,n,N.signal,"model");if(e.success){if(b=e.data,c=JSON.stringify(e.data),o)try{let a=await (0,aa.jR)(),e=await (0,ab.S)({conversationId:o,toolCallId:d,server:k,toolName:l,nodeId:n,content:c,settings:a});e.spilled&&(c=e.content,b={content:[{type:"text",text:e.content}]})}catch(a){ao.warn("boundToolResult failed on subscription path; keeping full result",a)}}else b={content:[{type:"text",text:c=`Error: ${e.error??"Unknown error"}`}],isError:!0};let f=await (0,ac.K)(k,l,p,e.data),g=(0,ac.A)(e),h=f?{...f,...!e.success?{isError:!0}:{},...g?{cancelledReason:g}:{}}:void 0;return U({id:d,resultContent:c,...h?{ui:h}:{}}),b})}).filter(a=>null!==a),$=Z.length>0?{[aq]:C({name:aq,version:"1.0.0",tools:Z})}:void 0,ah={...process.env};ah.CLAUDE_CODE_OAUTH_TOKEN=b,delete ah.ANTHROPIC_API_KEY;let an="string"!=typeof I;ao.debug("createCompletion via Claude Agent SDK",{model:a.name,toolCount:Z.length,hasSystem:!!E,hasImages:an,maxTurns:h&&h>0?h:ap});let aw=B({prompt:async function*(){yield{type:"user",parent_tool_use_id:null,message:{role:"user",content:I}}}(),options:{model:a.name,env:ah,abortController:N,maxTurns:h&&h>0?h:ap,includePartialMessages:!0,...a.reasoningEffort&&"minimal"!==a.reasoningEffort&&"ultra"!==a.reasoningEffort?{effort:a.reasoningEffort}:{},...x?{resume:x}:{},...E?{systemPrompt:E}:{},tools:[],disallowedTools:ar,...$?{mcpServers:$}:{},canUseTool:async(a,b,c)=>{if(!a.startsWith(`mcp__${aq}__`))return{behavior:"deny",message:`Tool ${a} is not permitted for this node.`};let d=a.replace(`mcp__${aq}__`,""),e=b??{};if(au(d)||W.has(c.toolUseID)||(T({id:c.toolUseID,name:d,argsJson:JSON.stringify(e)},X.get(c.toolUseID)),W.add(c.toolUseID),((a,b,c)=>{let d=V.get(a)??[];d.push({id:b,argsJson:c}),V.set(a,d)})(d,c.toolUseID,JSON.stringify(e))),k){let{approved:a,feedback:f}=await k({id:c.toolUseID,name:d,args:e});if(a)return{behavior:"allow",updatedInput:b};let g=f?`User rejected this tool call: ${f}`:"Tool call rejected by the user.",h=V.get(d);if(h){let a=h.findIndex(a=>a.id===c.toolUseID);a>=0&&h.splice(a,1),0===h.length&&V.delete(d)}let i=K.get(d),j=i?await (0,ac.K)(i.serverName,i.toolName,i.advertisedUri):void 0;return U({id:c.toolUseID,resultContent:g,...j?{ui:{...j,cancelledReason:g,isError:!0}}:{}}),{behavior:"deny",message:g}}return{behavior:"allow",updatedInput:b}}}}),ax="",ay="",az=0,aA=!1,aB=new Map,aC=async()=>{for await(let a of aw){let b=a.session_id;if("string"==typeof b&&b&&(w=b),n?.aborted)break;if(L.length>0&&(M||L.length>=32)){N.abort();break}if("stream_event"===a.type){let b=a.event;if("content_block_start"===b.type&&"tool_use"===b.content_block.type){let c=`stream_claude_${a.uuid}_tool_${b.index}`;aB.set(`${a.uuid}:${b.index}`,{messageId:c,toolUseId:b.content_block.id}),X.set(b.content_block.id,c),m?.({messageId:c,toolCallDelta:{index:0,id:b.content_block.id,nameDelta:b.content_block.name}})}else if("content_block_delta"===b.type){if("text_delta"===b.delta.type&&b.delta.text)m?.({messageId:`stream_claude_${a.uuid}`,contentDelta:b.delta.text});else if("input_json_delta"===b.delta.type&&b.delta.partial_json){let c=aB.get(`${a.uuid}:${b.index}`);c&&m?.({messageId:c.messageId,toolCallDelta:{index:0,argumentsDelta:b.delta.partial_json}})}}}else if("assistant"===a.type){let b=a.message,c=b?.content,d="",e=(0,j.pt)(c),f=0;if(Array.isArray(c)){for(let a of c)if(a?.type==="text"&&"string"==typeof a.text&&(d+=a.text),a?.type==="tool_use"&&"string"==typeof a.name){let b=a.name;au(b.includes("__")?b.slice(b.lastIndexOf("__")+2):b)&&f++}}if(L.length>0&&0===f){N.abort();break}(d||e.length>0)&&0===L.length&&(as(d)?ao.warn("Quarantined malformed Claude tool-call prose (#298)"):(ay+=d,S({role:"assistant",content:d,...e.length?{media:e}:{}},`stream_claude_${a.uuid}`),aA=!0)),b?.usage&&(z=b.usage,az+=b.usage.output_tokens??0)}else if("result"===a.type){if(y=a.usage,"success"===a.subtype)ax=a.result??"";else if(0===L.length){let b=a.errors,c=Array.isArray(b)&&b.length?b.join("; "):a.subtype;throw Error(`Claude subscription run failed: ${c}`)}}}};try{if(n){let a,b=new Promise((b,c)=>{a=()=>c(Error("Claude subscription run cancelled by user.")),n.addEventListener("abort",a,{once:!0})}),c=aC();try{await Promise.race([c,b])}finally{a&&n.removeEventListener("abort",a),c.catch(()=>{})}if(n.aborted&&0===L.length)throw Error("Claude subscription run cancelled by user.")}else await aC()}catch(a){if(0===L.length)throw H&&(s=H.key,al.delete(s)),a}finally{n?.removeEventListener("abort",O)}let aD=ax||ay,{promptTokens:aE,completionTokens:aF,cacheReadTokens:aG}=function(a,b){let c=a??b?.lastTurnUsage,d=c?.input_tokens??0,e=c?.cache_creation_input_tokens??0,f=c?.cache_read_input_tokens??0;return{promptTokens:d+e+f,completionTokens:a?a.output_tokens??0:b?.totalOutputTokens??0,cacheReadTokens:f}}(y,{lastTurnUsage:z,totalOutputTokens:az});if(L.length>0&&(A=L.map(a=>({id:`call_${(0,i.A)()}`,type:"function",function:{name:a.name,arguments:JSON.stringify(a.args)}}))),A?S({role:"assistant",content:null,tool_calls:A}):aA||S({role:"assistant",content:aD||""}),H){let a=!!am(H.key,H.prefixHash,d.length,G);L.length>0||!w?(t=H.key,al.delete(t)):(u=H.key,v={sessionId:w,prefixHash:H.prefixHash,seenMessageCount:d.length+P.length,leadingSystemMessageCount:G},al.set(u,{...v,updatedAt:Date.now()})),ao.debug("Claude session usage (#154)",{conversationId:o,nodeId:p,sessionResume:!!r,resumedThisTurn:!!x,reusableSessionAvailable:a,capturedSession:!!w,inputMessages:d.length,leadingSystemMessageCount:G,transcriptMessages:P.length,watermark:d.length+P.length,promptTokens:aE,cacheReadTokens:aG,completionTokens:aF,endedByHandoff:L.length>0})}return{completion:{id:`claude_sub_${(0,i.A)()}`,object:"chat.completion",created:Math.floor(Date.now()/1e3),model:a.name,choices:[{index:0,finish_reason:A?"tool_calls":"stop",logprobs:null,message:{role:"assistant",content:aD||null,refusal:null,...A?{tool_calls:A}:{}}}],usage:{prompt_tokens:aE,completion_tokens:aF,total_tokens:aE+aF,...aG>0?{prompt_tokens_details:{cached_tokens:aG}}:{}}},transcript:P}}}var ax=c(21820),ay=c.n(ax),az=c(33873),aA=c.n(az),aB=c(29021),aC=c(81630),aD=c.n(aC),aE=c(85853),aF=c(37464),aG=c(68780);let aH=(0,d.h)("backend/services/model/adapters/codexToolBridge");async function aI(a,b){let c=(0,ak.randomBytes)(16).toString("hex"),d=`/mcp/${c}`,e=aD().createServer(async(c,e)=>{if(!c.url||!c.url.startsWith(d))return void e.writeHead(404).end();let f=(()=>{let c=new aE.g({name:"flujo",version:"1.0.0"},{capabilities:{tools:{}},...b?{instructions:b}:{}});return c.setRequestHandler(aG.gW,async()=>({tools:a.map(a=>({name:a.name,description:a.description,inputSchema:a.inputSchema??{type:"object",properties:{}},...a.annotations?{annotations:a.annotations}:{}}))})),c.setRequestHandler(aG.FT,async b=>{let c=a.find(a=>a.name===b.params.name);if(!c)return{content:[{type:"text",text:`Unknown tool: ${b.params.name}`}],isError:!0};try{return await c.handler(b.params.arguments??{})}catch(a){return{content:[{type:"text",text:`Error: ${a instanceof Error?a.message:String(a)}`}],isError:!0}}}),c})(),g=new aF.D({sessionIdGenerator:void 0,enableJsonResponse:!0});try{await f.connect(g),await g.handleRequest(c,e)}catch(a){aH.error("Codex tool-bridge request failed",a),e.headersSent||(e.writeHead(500,{"content-type":"application/json"}),e.end(JSON.stringify({error:"Internal bridge error."})))}finally{try{await g.close()}catch{}try{await f.close()}catch{}}});await new Promise((a,b)=>{e.once("error",b),e.listen(0,"127.0.0.1",()=>a())});let f=e.address();if(!f||"string"==typeof f)throw e.close(),Error("Codex tool bridge failed to bind a loopback port.");let g=`http://127.0.0.1:${f.port}${d}`;return aH.debug("Codex tool bridge started",{port:f.port,toolCount:a.length}),{url:g,close:()=>new Promise(a=>{e.closeAllConnections?.(),e.close(()=>a())})}}async function aJ(){let a=process.env.CODEX_HOME?.trim()||aA().join(ay().homedir(),".codex"),b=aA().join(a,"models_cache.json");try{return(await aB.promises.stat(b)).isFile()?b:void 0}catch{return}}var aK=c(43326);let aL="auth.json";async function aM(a){let b=aA().join((0,aK.getDataDir)(),"db","codex-runtime");await aB.promises.mkdir(b,{recursive:!0,mode:448});let c=aA().join(b,"workspace");if(await aB.promises.mkdir(c,{recursive:!0,mode:448}),await aB.promises.writeFile(aA().join(b,"config.toml"),"# Managed by FLUJO. Codex runtime settings are supplied per invocation.\n",{encoding:"utf8",mode:384}),a){let a=aA().join(process.env.CODEX_HOME?.trim()||aA().join(ay().homedir(),".codex"),aL),c=aA().join(b,aL);if(aA().resolve(a)!==aA().resolve(c))try{await aB.promises.copyFile(a,c),await aB.promises.chmod(c,384).catch(()=>void 0)}catch(a){if("ENOENT"===a.code)await aB.promises.rm(c,{force:!0}).catch(()=>void 0);else throw a}}return{home:b,workingDirectory:c,env:{...Object.fromEntries(Object.entries(process.env).filter(a=>void 0!==a[1])),CODEX_HOME:b}}}let aN=new Map;function aO(a){return null===a||"object"!=typeof a?JSON.stringify(a)??"null":Array.isArray(a)?`[${a.map(aO).join(",")}]`:`{${Object.keys(a).sort().map(b=>`${JSON.stringify(b)}:${aO(a[b])}`).join(",")}}`}function aP(a){if(!a||"object"!=typeof a)return{value:a};let b={};for(let c of["role","content","name","tool_call_id","tool_calls","function_call","refusal"])void 0!==a[c]&&(b[c]=a[c]);return b}function aQ(a){return(0,ak.createHash)("sha256").update(aO(a.map(aP))).digest("hex")}function aR(a){aN.delete(a)}let aS=(0,d.h)("backend/services/model/adapters/codexAdapter"),aT="FLUJO MCP tools are the authoritative interface for the operations they expose. When filesystem__ tools are available, use them for all file operations; they run outside the Codex sandbox under FLUJO-managed roots and approvals, so a path may be valid even when it is outside the Codex working directory. Call filesystem__get_allowed_directories before guessing roots, and do not inspect the Codex runtime working directory unless the user explicitly asks.";function aU(a){return a.replace(/[^a-zA-Z0-9_-]/g,"_")}class aV{async createCompletion({model:a,apiKey:b,messages:d,tools:e,toolNameMap:f,localToolExecutors:g,requestToolApproval:h,onTranscriptMessage:k,onModelDelta:l,signal:m,conversationId:n,nodeId:o,runResourceMarkers:p,sessionResume:q}){var r;let s,t,u,v,w,x,{Codex:y}=await c.e(8321).then(c.bind(c,88321)),{systemPrompt:z,content:A}=av(d,p),B=new AbortController,C=()=>B.abort();m?.aborted?B.abort():m?.addEventListener("abort",C,{once:!0});let D=[],E=Date.now(),F=0,G=`${E}_${(0,i.A)()}`,H=a=>`stream_codex_${G}_${a}`,I=(a,b=`m_${(0,i.A)()}`)=>{let c={...a,id:b,timestamp:E+F++};D.push(c),k?.(c)},J=a=>{I({role:"assistant",content:"",tool_calls:[{id:a.id,type:"function",function:{name:a.name,arguments:a.argsJson}}]})},K=a=>{I({role:"tool",tool_call_id:a.id,content:a.resultContent,...a.ui?{ui:a.ui}:{}})},L=a=>{J(a),K(a)},M=[],N=!1,O=async(a,b,c,d)=>{if(!h)return null;let{approved:e,feedback:f}=await h({id:a,name:b,args:c});if(e)return null;let g=f?`User rejected this tool call: ${f}`:"Tool call rejected by the user.",i=await d?.(g);return K({id:a,resultContent:g,...i?{ui:i}:{}}),{content:[{type:"text",text:g}],isError:!0}},P=new Set,Q=(e??[]).filter(a=>"function"===a.type).map(a=>{let b=a.function.name,c=b.startsWith("handoff_to_")||"handoff"===b,d=f?.[b],e=g?.[b];if(!c&&!d&&!e)return null;let h=a.function.parameters,j=a.function.description??"";if(c){let a=!!h?.properties?.task;return{name:b,description:j,inputSchema:h,handler:async c=>(M.push({name:b,args:c??{}}),aS.debug("Codex requested handoff",{tool:b,callIndex:M.length,spawnable:a}),a)?{content:[{type:"text",text:"Worker spawned for this task. Call this tool again right now to spawn another parallel worker (one call per task). When you stop calling it, all spawned workers run concurrently and their merged results come back."}]}:(N=!0,{content:[{type:"text",text:"Handing off."}]})}}if(e)return{name:b,description:j,inputSchema:h,handler:async a=>{let c,d=`call_${(0,i.A)()}`;J({id:d,name:b,argsJson:JSON.stringify(a??{})});let f=await O(d,b,a??{});if(f)return f;aS.debug("Codex local tool call",{tool:b});let g=!1;try{c=JSON.stringify(await e(a??{}))}catch(a){c=`Error: ${a instanceof Error?a.message:String(a)}`,g=!0}return K({id:d,resultContent:c}),g?{content:[{type:"text",text:c}],isError:!0}:{content:[{type:"text",text:c}]}}};let{server:k,tool:l,timeout:m,nodeId:o,annotations:p,uiResourceUri:q}=d,r=function(a,b,c){let d=`${aU(a)}__${aU(b)}`;d.length>110&&(d=d.slice(0,110));let e=d,f=2;for(;c.has(e);){let a=`_${f++}`;e=d.slice(0,110-a.length)+a}return c.add(e),e}(k,l,P);return{name:r,description:j,inputSchema:h,...p?{annotations:p}:{},handler:async a=>{let b,c,d=`call_${(0,i.A)()}`;J({id:d,name:r,argsJson:JSON.stringify(a??{})});let e=await O(d,r,a??{},async a=>{let b=await (0,ac.K)(k,l,q);return b?{...b,cancelledReason:a,isError:!0}:void 0});if(e)return e;aS.debug("Codex tool call",{server:k,tool:l,exposedAs:r});let f=await _.mcpService.callTool(k,l,a??{},m??ad.aI,void 0,o,B.signal,"model");if(f.success){if(b=f.data,c=JSON.stringify(f.data),n)try{let a=await (0,aa.jR)(),e=await (0,ab.S)({conversationId:n,toolCallId:d,server:k,toolName:l,nodeId:o,content:c,settings:a});e.spilled&&(c=e.content,b={content:[{type:"text",text:e.content}]})}catch(a){aS.warn("boundToolResult failed on Codex path; keeping full result",a)}}else b={content:[{type:"text",text:c=`Error: ${f.error??"Unknown error"}`}],isError:!0};let g=await (0,ac.K)(k,l,q,f.data),h=(0,ac.A)(f),j=g?{...g,...!f.success?{isError:!0}:{},...h?{cancelledReason:h}:{}}:void 0;return K({id:d,resultContent:c,...j?{ui:j}:{}}),b}}}).filter(a=>null!==a),R=n&&o?`${n}::${o}`:void 0;!q&&R&&aR(R);let S=q&&n&&o?{key:R,prefixHash:function(a,b,c){let d=(0,ak.createHash)("sha256");return d.update(aO({model:a,systemPrompt:b??"",tools:[...c].sort((a,b)=>a.name.localeCompare(b.name)).map(({name:a,description:b,inputSchema:c,annotations:d})=>({name:a,description:b,inputSchema:c??null,annotations:d??null}))})),d.digest("hex")}(a.name,z,Q)}:void 0,T=A,U=z;if(S){let a=function(a,b,c){let d=aN.get(a);if(d&&d.prefixHash===b&&!(c.length<d.seenMessageCount)&&aQ(c.slice(0,d.seenMessageCount))===d.historyHash)return d}(S.key,S.prefixHash,d);if(a&&d.length>a.seenMessageCount){let b=av(d.slice(a.seenMessageCount),p);b.content.length>0&&(s=a.threadId,T=b.content,U=void 0,aS.debug("Codex resuming SDK thread",{conversationId:n,nodeId:o,threadId:s,seenMessageCount:a.seenMessageCount,deltaMessages:d.length-a.seenMessageCount}))}}let V=[],W=async()=>(t||(t=await aB.promises.mkdtemp(aA().join(ay().tmpdir(),"flujo-codex-"))),t),X=[];if(U&&X.push({type:"text",text:`<system_instructions>
 ${U}
 </system_instructions>`}),"string"==typeof T)X.push({type:"text",text:T});else for(let a of T)if("text"===a.type)X.push({type:"text",text:a.text});else if("image"===a.type)if("base64"===a.source.type){let b=await W(),c=a.source.media_type.split("/")[1]??"png",d=aA().join(b,`img_${V.length}.${c}`);await aB.promises.writeFile(d,Buffer.from(a.source.data,"base64")),V.push(d),X.push({type:"local_image",path:d})}else X.push({type:"text",text:`[image: ${a.source.url}]`});else"document"===a.type&&X.push({type:"text",text:"[PDF document attachment supplied; this Codex SDK version cannot attach non-image files.]"});let Y="",Z=!1,$=!1,ae=s;try{Q.length>0&&(u=await aI(Q,aT));let c=await aJ(),d=await aM(!b),e={service_tier:a.serviceTier??"default",developer_instructions:aT,features:{shell_tool:!1},...c?{model_catalog_json:c}:{},...u?{mcp_servers:{flujo:{url:u.url,default_tools_approval_mode:"approve"}}}:{}},f=new y({...b?{apiKey:b}:{},env:d.env,...Object.keys(e).length>0?{config:e}:{}}),g={model:a.name,...a.reasoningEffort?{modelReasoningEffort:a.reasoningEffort}:{},workingDirectory:d.workingDirectory,skipGitRepoCheck:!0,approvalPolicy:"never"},h=s?f.resumeThread(s,g):f.startThread(g);aS.debug("createCompletion via Codex SDK",{model:a.name,toolCount:Q.length,hasSystem:!!z,bridged:!!u,resumed:!!s,workingDirectory:d.workingDirectory,usingLocalModelCatalog:!!c});let k=1===X.length&&"text"===X[0].type?X[0].text:X,n=new Map;for(let a=0;a<2;a+=1){let b;try{let{events:c}=await h.runStreamed(0===a?k:"Continue the interrupted response from exactly where it stopped. Do not repeat content or tool calls already completed.",{signal:B.signal});for await(let a of c){if(m?.aborted)break;if("thread.started"===a.type){ae=a.thread_id;continue}if(M.length>0&&(N||M.length>=32)){B.abort();break}if("item.started"===a.type||"item.updated"===a.type||"item.completed"===a.type){let b=a.item;if("agent_message"===b.type){let a=n.get(b.id)??"",c=b.text.startsWith(a)?b.text.slice(a.length):b.text;c&&l?.({messageId:H(b.id),contentDelta:c}),n.set(b.id,b.text)}}if("item.completed"===a.type){let b=a.item,c=(0,j.pt)(b);if(c.length>0&&"agent_message"!==b.type)I({role:"assistant",content:"",media:c},H(b.id)),Z=!0;else if("agent_message"===b.type){let a=(0,j.pt)(b.content);if(M.length>0){B.abort();break}(b.text||a.length>0)&&(Y+=(Y?"\n\n":"")+b.text,I({role:"assistant",content:b.text,...a.length?{media:a}:{}},H(b.id)),Z=!0)}else"command_execution"===b.type?L({id:`call_${(0,i.A)()}`,name:"shell",argsJson:JSON.stringify({command:b.command}),resultContent:b.aggregated_output??""}):"error"===b.type&&aS.warn("Codex reported a non-fatal item",{message:b.message})}else"turn.completed"===a.type?(v=a.usage,$=!0):"turn.failed"===a.type&&(b=Error(a.error?.message??"unknown error"))}}catch(a){b=a instanceof Error?a:Error(String(a))}if(m?.aborted&&0===M.length)throw Error("Codex run cancelled by user.");if(!b||M.length>0)break;if(0===a&&!B.signal.aborted&&(!((r=b)instanceof Error)||"AbortError"!==r.name)&&(r instanceof Error?r.message:String(r??"")).includes("Connection closed mid-response. The response above may be incomplete.")){aS.warn("Codex connection closed mid-response; continuing the same thread once");continue}w=b.message;break}if(w&&0===M.length)throw Error(`Codex run failed: ${w}`)}catch(a){if(S&&aR(S.key),0===M.length)throw a}finally{m?.removeEventListener("abort",C),await u?.close().catch(()=>void 0),t&&await aB.promises.rm(t,{recursive:!0,force:!0}).catch(()=>void 0)}M.length>0&&(x=M.map(a=>({id:`call_${(0,i.A)()}`,type:"function",function:{name:a.name,arguments:JSON.stringify(a.args)}}))),x?I({role:"assistant",content:null,tool_calls:x}):Z||I({role:"assistant",content:Y||""}),S&&($&&!w&&!m?.aborted&&0===M.length&&ae?function(a,b){if(aN.delete(a),aN.size>=200){let a=aN.keys().next();a.done||aN.delete(a.value)}aN.set(a,{...b,updatedAt:Date.now()})}(S.key,{threadId:ae,prefixHash:S.prefixHash,seenMessageCount:d.length+D.length,historyHash:aQ([...d,...D])}):aR(S.key),aS.debug("Codex SDK thread usage",{conversationId:n,nodeId:o,sessionResume:!!q,resumedThisTurn:!!s,capturedThread:!!ae,completedTurn:$,inputMessages:d.length,transcriptMessages:D.length,watermark:d.length+D.length,endedByHandoff:M.length>0}));let af=v?.input_tokens??0,ag=v?.output_tokens??0,ah=v?.cached_input_tokens??0;return{completion:{id:`codex_${(0,i.A)()}`,object:"chat.completion",created:Math.floor(Date.now()/1e3),model:a.name,choices:[{index:0,finish_reason:x?"tool_calls":"stop",logprobs:null,message:{role:"assistant",content:Y||null,refusal:null,...x?{tool_calls:x}:{}}}],usage:{prompt_tokens:af,completion_tokens:ag,total_tokens:af+ag,...ah>0?{prompt_tokens_details:{cached_tokens:ah}}:{}}},transcript:D}}}function aW(a){switch(a.adapter){case"openai-responses":return new E;case"anthropic":return new P;case"gemini":return new Z;case"claude-cli":return new aw;case"codex-cli":return new aV;default:return new q}}},54413:(a,b,c)=>{"use strict";c.d(b,{C:()=>e,H:()=>d});let d=["flujo","filesystem","bash"];function e(a){return d.includes(a)}},58505:(a,b,c)=>{"use strict";c.d(b,{Ul:()=>g,g2:()=>f,ng:()=>j,pf:()=>h});let d=/\$\{kv:([^}]+)\}/g,e=["global","flow","folder"];function f(a){let b=(a??"").trim(),c=b.indexOf("/");if(c>0){let a=b.slice(0,c);if(e.includes(a))return{scope:a,key:b.slice(c+1).trim()}}return{scope:"folder",key:b}}function g(a,b){if("string"!=typeof a||0===a.length||!d.test(a))return a;let c=b??{};return a.replace(d,(a,b)=>{let d=b.trim(),e=c[d];return"string"==typeof e?e:(console.warn(`[resolveKvRefs] unknown kv reference "${d}"; substituting empty string`),"")})}function h(a){let b;if("string"!=typeof a||0===a.length)return[];let c=new Set;for(d.lastIndex=0;null!==(b=d.exec(a));){let a=b[1].trim();a&&c.add(a)}return[...c]}let i=/^[A-Za-z_][\w-]*$/;function j(a){return"string"==typeof a&&i.test(a)}},60184:(a,b,c)=>{"use strict";c.r(b),c.d(b,{INTERRUPTED_TOOL_RESULT_CONTENT:()=>E,_setConversationLogDirForTests:()=>n,allocateSeq:()=>s,appendFromBus:()=>w,appendRawForState:()=>x,deleteConversationLog:()=>A,flushConversationLog:()=>y,hasConversationLog:()=>I,latestSequence:()=>t,projectMessages:()=>B,readConversationLog:()=>z,reconcileConversationLog:()=>D,recoverMessagesFromLog:()=>G,repairDanglingToolCalls:()=>F,repairTruncatedConversationLog:()=>H});var d=c(29021),e=c(33873),f=c.n(e),g=c(75028),h=c(50846),i=c(43326);let j=(0,h.h)("backend/execution/flow/conversationLog"),k=new Set(["run:start","run:done","node:enter","node:exit","node:snapshot","node:changed-files","handoff","message","message:removed","tool:call","tool:result","usage","subflow:start","subflow:done","resource:read","resource:write","error"]),l=/^[A-Za-z0-9_-]+$/,m=f().join((0,i.getDataDir)(),"db","conversation-logs");function n(a){let b=m;return m=a,q.clear(),b}function o(a){return f().join(m,`${a}.jsonl`)}let p=new Map,q=new Map;function r(a){if(q.has(a))return;let b=-1;try{for(let c of(0,d.readFileSync)(o(a),"utf-8").split("\n"))if(0!==c.trim().length)try{let a=JSON.parse(c).seq;"number"==typeof a&&Number.isFinite(a)&&a>b&&(b=a)}catch{}}catch(b){"ENOENT"!==b.code&&j.warn(`Could not read conversation log ${a} to seed seq; starting at 0.`,{err:b})}q.set(a,b+1)}function s(a){r(a);let b=q.get(a);return q.set(a,b+1),b}async function t(a){return l.test(a)?(r(a),q.get(a)-1):-1}function u(a,b){let c=(p.get(a)??Promise.resolve()).catch(()=>{}).then(async()=>{await d.promises.mkdir(m,{recursive:!0}),await d.promises.appendFile(o(a),b)});return p.set(a,c),c.finally(()=>{p.get(a)===c&&p.delete(a)})}function v(a){return`${JSON.stringify(a)}
-`}function w(a){if(k.has(a.type)){if(!l.test(a.conversationId))return void j.warn("Refusing to log event for unsafe conversation id",{conversationId:a.conversationId});(function(a){try{if((0,g.isConversationDeleted)(a))return!1;let{FlowExecutor:b}=c(95708),d=b.conversationStates.get(a);if(!d)return!1;return!d.ephemeral}catch(b){return j.warn(`Could not resolve persistence policy for ${a}; not persisting.`,{err:b}),!1}})(a.conversationId)&&u(a.conversationId,v(a)).catch(b=>j.warn(`Failed to append event to conversation log ${a.conversationId}`,{err:b}))}}async function x(a,b){if(0===b.length||a.ephemeral)return;let c=a.conversationId;if(!c||!l.test(c)||(0,g.isConversationDeleted)(c))return;let d=b.map(a=>v({...a,conversationId:c,seq:s(c),timestamp:Date.now()})).join("");try{await u(c,d)}catch(a){j.warn(`Failed to append ${b.length} event(s) to conversation log ${c}`,{err:a})}}function y(a){let b=p.get(a);return b?b.then(()=>void 0,()=>void 0):Promise.resolve()}async function z(a){let b;if(!l.test(a))return;try{b=await d.promises.readFile(o(a),"utf-8")}catch(b){if("ENOENT"===b.code)return;j.error(`Error reading conversation log ${a}:`,b);return}let c=[],e=0;for(let a of b.split("\n"))if(0!==a.trim().length)try{c.push(JSON.parse(a))}catch{e++}return e>0&&j.warn(`Skipped ${e} unparseable line(s) in conversation log ${a} (truncated append?)`),c}async function A(a){if(l.test(a))try{await d.promises.unlink(o(a))}catch(b){"ENOENT"!==b.code&&j.warn(`Error deleting conversation log ${a}:`,b)}}function B(a){let b=[],c=new Map,d=new Map;for(let e of a)if("message"===e.type){let a=e.message;if(!a||!a.id||"system"===a.role)continue;let f=e.depth??0,g=a.id,h=c.get(g);if(void 0!==h&&/^stream_codex_item_/.test(g)){let a=(d.get(g)??1)+1;d.set(g,a),g=`${g}_legacy_${a}`,h=void 0}else d.has(g)||d.set(g,1);let i=g===a.id?a:{...a,id:g},j=f>0?{...i,depth:f}:{...i};void 0!==h?b[h]=j:(c.set(g,b.length),b.push(j))}else if("message:removed"===e.type){let a=c.get(e.messageId);if(void 0===a)continue;for(let[d,f]of(b.splice(a,1),c.delete(e.messageId),c))f>a&&c.set(d,f-1)}return b}function C(a){return JSON.stringify([a.role,a.content,a.tool_calls??null,a.disabled??!1,a.processNodeId??null])}async function D(a,b){if(a.ephemeral)return;let c=a.conversationId;if(!c||!l.test(c))return;let d=(a.messages??[]).filter(a=>"system"!==a.role&&!!a.id),e=await I(c)?b.filter(a=>"system"!==a.role&&!!a.id):[],f=new Map(e.map(a=>[a.id,a])),g=new Set(d.map(a=>a.id)),h=[];for(let a of d){let b=f.get(a.id);b&&C(b)===C(a)||h.push({type:"message",message:a})}for(let a of e)g.has(a.id)||h.push({type:"message:removed",messageId:a.id});await x(a,h)}let E="Tool execution interrupted (FLUJO restarted before this tool finished)";function F(a,b=E){let c=a.messages??[];if(0===c.length)return[];let d=new Set;for(let a of c)if("tool"===a.role){let b=a.tool_call_id;b&&d.add(b)}let e=[],f=[];for(let a=0;a<c.length;a++){let g=c[a];f.push(g);let h=g.tool_calls;if("assistant"!==g.role||!Array.isArray(h)||0===h.length)continue;let i=h.filter(a=>!!a.id&&!d.has(a.id));if(0===i.length)continue;let j=a+1;for(;j<c.length&&"tool"===c[j].role;)f.push(c[j]),j++;for(let a of i){let c={id:crypto.randomUUID(),role:"tool",tool_call_id:a.id,content:b,timestamp:Date.now(),...void 0!==g.processNodeId?{processNodeId:g.processNodeId}:{},...void 0!==g.depth?{depth:g.depth}:{}};f.push(c),e.push(c),d.add(a.id)}a=j-1}return 0===e.length?[]:(a.messages=f,e)}async function G(a){if(a.ephemeral)return!1;let b=a.conversationId;if(!b||!l.test(b))return!1;let c=await z(b);if(!c)return!1;let d=B(c).filter(a=>!((a.depth??0)>0)),e=(a.messages??[]).filter(a=>"system"!==a.role&&!!a.id).map(a=>a.id);if(d.length<=e.length)return!1;let f=new Set(d.map(a=>a.id));return!!e.every(a=>f.has(a))&&(j.info(`Recovered ${d.length-e.length} message(s) from the conversation log for ${b} (snapshot was behind).`),a.messages=d,!0)}async function H(a){if(a.ephemeral)return;let b=a.conversationId;if(!b||!l.test(b))return;let c=await z(b);if(!c)return;let e=B(c).filter(a=>!((a.depth??0)>0)),f=(a.messages??[]).filter(a=>"system"!==a.role&&!!a.id);if(e.length>=f.length)return;let g=new Set(f.map(a=>a.id));if(!e.every(a=>g.has(a.id)))return;let h=0,i=f.map(a=>v({type:"message",message:a,conversationId:b,seq:h++,timestamp:Date.now()})).join("");q.set(b,h);try{await function(a,b){let c=(p.get(a)??Promise.resolve()).catch(()=>{}).then(async()=>{await d.promises.mkdir(m,{recursive:!0}),await d.promises.writeFile(o(a),b)});return p.set(a,c),c.finally(()=>{p.get(a)===c&&p.delete(a)})}(b,i),j.info(`Rebuilt truncated conversation log for ${b} from snapshot (${e.length} → ${f.length} message(s)); issue #49 self-heal.`)}catch(a){j.warn(`Failed to rebuild truncated conversation log ${b}`,{err:a})}return f}async function I(a){if(!l.test(a))return!1;try{return await d.promises.access(o(a)),!0}catch{return!1}}},60453:(a,b,c)=>{"use strict";c.r(b),c.d(b,{MCPService:()=>aJ,mcpService:()=>aK});var d=c(32524),e=c(79748),f=c.n(e),g=c(33873),h=c.n(g),i=c(50846),j=c(43326),k=c(36445),l=c(74186),m=c(68780),n=c(73456),o=c(77213),p=c(68383),q=c(72904),r=c(92372),s=c(38844),t=c(4231),u=c(37601),v=c(58302),w=c(51605),x=c(3712),y=c(29021),z=c(21820),A=c(25096),B=c(17748);let C=new Set(["npx","bunx","uvx","pipx","dlx"]),D=new Set(["pnpm","yarn","bun","npm"]),E=new Set(["dlx","exec","x"]);function F(a,b=[]){let c=((a||"").split(/[\\/]/).filter(Boolean).pop()||"").toLowerCase().replace(/\.(cmd|exe|bat|ps1)$/i,"");if(C.has(c))return!0;if(D.has(c)){let a=(b[0]||"").toLowerCase();return E.has(a)}return!1}let G=new Set(["node","npm","npx"]);var H=c(62850),I=c(20433),J=c(53271),K=c(46496);let L=(0,i.h)("backend/services/mcp/sampling");function M(a){return a.sampling}function N(a){let b=M(a);return!!(b?.enabled&&b.modelId)}function O(a){let b=[];return async c=>{let d=M(a);if(!d?.enabled||!d.modelId)throw new m.Nh(m.O4.InvalidRequest,"Sampling is not enabled for this server");let e=d.maxCallsPerMinute??10,f=Date.now(),g=f-6e4;for(;b.length>0&&b[0]<g;)b.shift();if(b.length>=e)throw L.warn(`Sampling rate limit (${e}/min) hit for ${a.name}`),new m.Nh(m.O4.InvalidRequest,`Sampling rate limit of ${e}/min exceeded`);b.push(f);let h=await I.modelService.getModel(d.modelId);if(!h)throw new m.Nh(m.O4.InternalError,`Sampling model not found: ${d.modelId}`);let i=await I.modelService.resolveAndDecryptApiKey(h.ApiKey);if(!i)throw new m.Nh(m.O4.InternalError,"Could not resolve the sampling model API key");let j=c.params,k=function(a){let b=[];for(let c of(a.systemPrompt&&b.push({role:"system",content:a.systemPrompt}),a.messages||[])){let a=c.content,d=a?.type==="text"&&"string"==typeof a.text?a.text:`[unsupported ${a?.type||"non-text"} content omitted]`;b.push({role:c.role,content:d})}return b}(j),l="number"==typeof j.temperature?j.temperature:.7;L.info(`Sampling for ${a.name} via model ${h.name} (${k.length} messages)`);let n=(0,J.getCompletionAdapter)(h),o=d.maxTokens??(0,K.normalizeMaxTokens)(h.maxTokens),{completion:p}=await n.createCompletion({model:h,apiKey:i,messages:k,temperature:l,maxTokens:o}),q=p.choices?.[0]?.message?.content;return{role:"assistant",content:{type:"text",text:"string"==typeof q?q:""},model:h.name,stopReason:"endTurn"}}}var P=c(14214),Q=c(30767),R=c(97701);let S=(0,i.h)("backend/services/mcp/elicitation");function T(a){return a.elicitation}function U(a){let b=T(a);return!!b?.enabled}function V(a){return async b=>{if(!U(a))throw new m.Nh(m.O4.MethodNotFound,"Elicitation is not enabled for this server");let c=(0,Q.lx)(a.name);if(!c)return S.warn(`Elicitation request from ${a.name} outside an active run; auto-cancelling`),{action:"cancel"};if(c.getUnattended())return S.warn(`Elicitation request from ${a.name} in unattended run ${c.conversationId}; auto-cancelling`),{action:"cancel"};let d=b.params;if(d?.mode==="url")return S.warn(`Elicitation URL mode is not supported in V1 (server: ${a.name}); auto-cancelling`),{action:"cancel"};let e=d?.message??"Additional information required",f=d?.requestedSchema??{type:"object",properties:{}},g=crypto.randomUUID();S.info(`Suspending for elicitation ${g} from ${a.name} in conv ${c.conversationId}`),P.$.emitterFor(c.conversationId)({type:"run:awaiting_elicitation",elicitationId:g,message:e,requestedSchema:f});let h=await (0,R.gV)(g);return S.info(`Elicitation ${g} resolved with action=${h.action}`),h}}var W=c(34079),X=c(31659);function Y(a){return[function(a){let b=M(a);return b?.enabled?JSON.stringify({m:b.modelId,t:b.maxTokens,r:b.maxCallsPerMinute}):""}(a),function(a){let b=T(a);return b?.enabled?"e:1":""}(a),!0===a.enableMcpApps?"mcp-apps:on":"mcp-apps:off"].join("|")}let Z=(0,i.h)("backend/services/mcp/connection");async function $(a){let b=a;if(a.env&&"object"==typeof a.env){let c={};for(let[b,d]of Object.entries(a.env)){if(!b)continue;let a=d&&"object"==typeof d&&"value"in d?d.value??"":d??"";if(!a||(0,W.uh)(a))continue;let e=await (0,n.G)(a);e&&(c[b]=e)}b={...b,env:c}}if("streamable"!==a.transport&&"sse"!==a.transport||!a.headers||"object"!=typeof a.headers)return b;let c={};for(let[b,d]of Object.entries(a.headers)){if(!b)continue;let{value:a}=(0,W.at)(d,b);if(!a||(0,W.uh)(a))continue;let e=await (0,n.G)(a);e&&(c[b]=e)}return{...b,headers:c}}function _(a){let b={};for(let[c,d]of Object.entries(a)){if(!c)continue;let{value:a}=(0,W.at)(d,c);"string"==typeof a&&a.length>0&&(b[c]=a)}return b}function aa(a){let b={};if(a)for(let[c,d]of Object.entries(a))d&&"object"==typeof d&&"value"in d?b[c]=d.value:b[c]=d;return b}function ab(a){return JSON.stringify({command:a.command,args:a.args??[],env:aa(a.env),cwd:String(a.cwd??""),rootPath:a.rootPath??""})}function ac(a){return JSON.stringify({transport:a.transport,url:a.serverUrl??"",headers:a.headers??{},requestInit:a.requestInit??{},eventSourceInit:a.eventSourceInit??{},reconnectionOptions:a.reconnectionOptions??{},sessionId:a.sessionId??"",oauthClientId:a.oauthClientId??"",oauthClientInformation:a.oauthClientInformation??{},oauthClientSecret:a.oauthClientSecret??"",oauthTokens:a.oauthTokens??{}})}function ad(a){Z.debug("Entering createNewClient method");let b=N(a),c=U(a),d=!0===a.enableMcpApps,e=new t.K({name:`flujo-${a.name}-client`,version:"3.35.0"},{capabilities:{experimental:{},roots:{listChanged:!0},...b?{sampling:{}}:{},...c?{elicitation:{}}:{},...d?{extensions:{[X.OF]:{mimeTypes:[X.cM]}}}:{}}});return(0,H.FP)(e,a),b&&e.setRequestHandler(m.u9,O(a)),c&&e.setRequestHandler(m.$9,V(a)),e.__flujoCapKey=Y(a),e}function ae(a){if(Z.debug("Entering createTransport method"),"streamable"===a.transport){Z.info(`Creating streamable http transport for server ${a.name} with URL ${a.serverUrl}`);let b={};if(a.requestInit&&"object"==typeof a.requestInit&&(b.requestInit=a.requestInit),a.reconnectionOptions&&"object"==typeof a.reconnectionOptions&&(b.reconnectionOptions=a.reconnectionOptions),"string"==typeof a.sessionId&&a.sessionId.length>0&&(b.sessionId=a.sessionId),a.headers&&"object"==typeof a.headers){let c=_(a.headers);Object.keys(c).length>0&&(b.requestInit={...b.requestInit||{},headers:{...b.requestInit?.headers||{},...c}},Z.info(`Applied ${Object.keys(c).length} custom header(s) for ${a.name}: ${Object.keys(c).join(", ")}`))}a.oauthClientId||a.oauthClientInformation?(Z.info(`Setting up OAuth authentication for ${a.name}`),b.authProvider=(0,A.C)(a),a.oauthTokens?.access_token?(Z.debug(`OAuth provider configured for ${a.name} with existing tokens`),Z.debug(`Token expires in: ${a.oauthTokens.expires_in} seconds`)):Z.debug(`OAuth provider configured for ${a.name} - will initiate OAuth flow if needed`)):Z.debug(`No OAuth configuration found for ${a.name}`);let c=new w.j(new URL(a.serverUrl),b);return c.__flujoHttpKey=ac(a),c}if("sse"===a.transport){Z.info(`Creating legacy sse transport for server ${a.name} with URL ${a.serverUrl}`);let b={};if(a.requestInit&&"object"==typeof a.requestInit&&(b.requestInit=a.requestInit),a.eventSourceInit&&"object"==typeof a.eventSourceInit&&(b.eventSourceInit=a.eventSourceInit),a.headers&&"object"==typeof a.headers){let c=_(a.headers);Object.keys(c).length>0&&(b.requestInit={...b.requestInit||{},headers:{...b.requestInit?.headers||{},...c}},Z.info(`Applied ${Object.keys(c).length} custom header(s) for ${a.name}: ${Object.keys(c).join(", ")}`))}let c=new x.A(new URL(a.serverUrl),b);return c.__flujoHttpKey=ac(a),c}if("websocket"===a.transport)return Z.info(`Creating WebSocket transport for server ${a.name} with URL ${a.websocketUrl}`),new v.I(new URL(a.websocketUrl));{var b=a;if(Z.debug("Entering createStdioTransport method"),"stdio"!==b.transport)throw Error("Cannot create stdio transport for non-stdio config");let{command:c,args:d,env:e,cwd:f}=af(b);Z.info(`Creating StdioClientTransport for ${b.name} with stderr: 'pipe'`);let g=new u.oQ({command:c,args:d,env:e,cwd:f,stderr:"pipe"});return g.__flujoStdioKey=ab(b),g.stderr?Z.info(`Stderr stream is available for ${b.name}`):Z.warn(`Stderr stream is NOT available for ${b.name}`),g}}function af(a){let b=a.command,c=a.args?[...a.args]:[],d=`${o.VL}/${a.name}`;Z.info(`Creating stdio transport for server ${a.name}`),Z.debug(`Original command: ${b}`),Z.debug(`Original args: ${JSON.stringify(c)}`),Z.debug(`Server directory: ${d}`);let e=!g.isAbsolute(b)&&(b.includes("/")||b.includes("\\")),f=!b.includes("/")&&!b.includes("\\");if(Z.debug(`Is relative path: ${e}`),Z.debug(`Is just filename: ${f}`),"win32"===z.platform()&&b.toLowerCase().endsWith(".bat"))if(Z.debug(`Detected .bat file on Windows: ${b}`),f){let a=g.join((0,j.getDataDir)(),d,b);Z.debug(`Checking if file exists at: ${a}`);let e=y.existsSync(a);Z.debug(`File exists: ${e}`),e?(Z.debug(`Using full path to .bat file: ${a}`),c=["/c",a,...c]):(Z.warn(`WARNING: .bat file not found at ${a}`),c=["/c",b,...c]),b="cmd.exe"}else Z.debug(`Using cmd.exe with path as provided: ${b}`),c=["/c",b,...c],b="cmd.exe";let h=function(a,b){if(!a||!(!a.includes("/")&&!a.includes("\\")))return a;let c=a.toLowerCase();if(!G.has(c))return a;if("node"===c)return b.execPath||a;if(!b.execPath)return a;let d=b.dirname(b.execPath);for(let a of"win32"===b.platform?[`${c}.cmd`,`${c}.exe`,c]:[c]){let c=b.joinPath(d,a);if(b.fileExists(c))return c}return a}(b,{execPath:process.execPath,platform:z.platform(),dirname:g.dirname,joinPath:g.join,fileExists:y.existsSync});h!==b&&(Z.debug(`Resolved Node toolchain command "${b}" to absolute path: ${h}`),b=h),Z.debug(`Final command: ${b}`),Z.debug(`Final args: ${JSON.stringify(c)}`);let i=function({command:a,args:b=[],rootPath:c,cwd:d,serverName:e,defaultCwd:f}){let g=c||d||f;return e&&F(a,b)&&(g.split(/[\\/]/).filter(Boolean).pop()||"")===e&&function(a){let b=a.match(/^(.*[\\/])[^\\/]+[\\/]*$/);return b?b[1].replace(/[\\/]+$/,""):""}(g)||g}({command:a.command,args:a.args,rootPath:a.rootPath,cwd:a.cwd,serverName:a.name,defaultCwd:`${o.VL}/${a.name}`}),k=g.isAbsolute(i)?i:g.join((0,j.getDataDir)(),i);Z.debug(`cwd: ${k}`),Z.debug(`env: ${JSON.stringify(a.env)}`);let l=aa(a.env);return Z.verbose("Transformed environment variables",JSON.stringify(l)),{command:b,args:c,env:l,cwd:k}}function ag(a,b){return null!==a.exitCode||null!==a.signalCode?Promise.resolve(!0):new Promise(c=>{let d=()=>{clearTimeout(e),c(!0)},e=setTimeout(()=>{a.removeListener("exit",d),c(!1)},b);e.unref?.(),a.once("exit",d)})}async function ah(a,b,c,d){Z.debug("Entering safelyCloseClient method");let e=d?.gracePeriodMs??15e3,f=d?.killEscalationMs??5e3;try{let c=a.transport?._process;if(c&&"function"==typeof c.kill&&null===c.exitCode&&null===c.signalCode){try{c.stdin&&!c.stdin.destroyed&&(c.stdin.end(),Z.debug(`Closed stdin for graceful shutdown for ${b}`))}catch(a){Z.warn(`Error closing stdin for ${b}:`,a)}let a=await ag(c,e);if(!a){Z.warn(`Process did not exit within ${e}ms after stdin close, sending SIGTERM for ${b}`);try{c.kill("SIGTERM")}catch(a){Z.error(`Error sending SIGTERM for ${b}:`,a)}a=await ag(c,f)}if(a)Z.info(`Process exited gracefully for ${b}`);else{Z.warn(`Process did not respond to SIGTERM, sending SIGKILL for ${b}`);try{c.kill("SIGKILL")}catch(a){Z.error(`Error sending SIGKILL for ${b}:`,a)}}}await a.close(),Z.info(`Client closed successfully for ${b}`)}catch(a){Z.warn(`Error closing client for ${b}:`,a)}}let ai=(0,i.h)("backend/services/mcp/betaClient");async function aj(){try{let a=await (0,r.loadItem)(s.Z.SPEECH_SETTINGS,void 0);return!!a?.experimental?.mcpBetaProtocol}catch(a){return ai.warn("Failed to read mcpBetaProtocol setting; defaulting to disabled",{err:a}),!1}}function ak(a){return!0===a.__flujoBeta}function al(a){let b=N(a),c=U(a),d=!0===a.enableMcpApps,e=new p.Kj({name:`flujo-${a.name}-client`,version:"3.27.0"},{capabilities:{roots:{listChanged:!0},...b?{sampling:{}}:{},...c?{elicitation:{}}:{},...d?{extensions:{[X.OF]:{mimeTypes:[X.cM]}}}:{}},versionNegotiation:{mode:"auto"}});if(e.setRequestHandler("roots/list",(0,H.sG)(a)),b){let b=O(a);e.setRequestHandler("sampling/createMessage",async a=>b(a))}if(c){let b=V(a);e.setRequestHandler("elicitation/create",async a=>b(a))}return e.__flujoBeta=!0,e.__flujoCapKey=Y(a),ai.info(`Created v2-beta MCP client for ${a.name} (version negotiation: auto)`),e}function am(a){let b=a.requestInit&&"object"==typeof a.requestInit?a.requestInit:void 0;if(a.headers&&"object"==typeof a.headers){let c=_(a.headers);Object.keys(c).length>0&&(b={...b||{},headers:{...b?.headers||{},...c}})}return b}function an(a){if("websocket"===a.transport)throw Error("The v2-beta MCP SDK has no websocket transport; use the v1 path");if("streamable"===a.transport){let b={},c=am(a);c&&(b.requestInit=c),a.reconnectionOptions&&"object"==typeof a.reconnectionOptions&&(b.reconnectionOptions=a.reconnectionOptions),"string"==typeof a.sessionId&&a.sessionId.length>0&&(b.sessionId=a.sessionId),(a.oauthClientId||a.oauthClientInformation)&&(b.authProvider=(0,A.C)(a));let d=new p.jS(new URL(a.serverUrl),b);return d.__flujoHttpKey=ac(a),d.__flujoKind="streamable",ai.info(`Created v2-beta streamable transport for ${a.name}`),d}if("sse"===a.transport){let b={},c=am(a);c&&(b.requestInit=c),a.eventSourceInit&&"object"==typeof a.eventSourceInit&&(b.eventSourceInit=a.eventSourceInit);let d=new p.Am(new URL(a.serverUrl),b);return d.__flujoHttpKey=ac(a),d.__flujoKind="sse",ai.info(`Created v2-beta SSE transport for ${a.name}`),d}let{command:b,args:c,env:d,cwd:e}=af(a),f=new q.oQ({command:b,args:c,env:d,cwd:e,stderr:"pipe"});return f.__flujoStdioKey=ab(a),f.__flujoKind="stdio",ai.info(`Created v2-beta stdio transport for ${a.name}`),f}let ao=a=>new Promise(b=>setTimeout(b,a)),ap=(0,i.h)("backend/services/mcp/tools"),aq=0x80000000-1;async function ar(a,b,c="model"){if(ap.debug("Entering listServerTools method"),!a)return ap.warn(`Server ${b} not connected`),{tools:[],error:"Server not connected"};try{ap.info(`Listing tools for server ${b}`);let d=await a.listTools();ap.verbose("Raw response from MCP server:",d);let e=(d.tools||[]).map(a=>({name:a.name,description:a.description||"",inputSchema:a.inputSchema||{},...a.annotations?{annotations:a.annotations}:{},...a._meta?{_meta:a._meta}:{}})),f=(0,X.zm)(e,c);return ap.verbose(`Processed tools for ${c} audience:`,f),{tools:f}}catch(c){ap.warn(`Failed to list tools for server ${b}:`,c);let a=c instanceof Error?c.message:"Unknown error";return{tools:[],error:a.includes("Connection timeout")?a:`Failed to list tools: ${a}`}}}async function as(a,b,c,d,e,f,g,h="host"){if(ap.debug("Entering callTool method"),!a)return ap.warn(`Server ${b} not found`),{success:!1,error:`Server ${b} not found`,statusCode:404};let i=void 0!==e&&e>0?Math.min(1e3*e,aq):aq;try{if("app"===h||"model"===h){let d=await ar(a,b,"all");if(d.error)return{success:!1,error:`Could not verify MCP App access to tool '${c}' on '${b}': ${d.error}`,errorType:"tool-authorization-list",statusCode:502};let e=(0,X.F)(d.tools,b,c,h);if(!e.allowed)return ap.warn(`Rejected ${h} tool call: ${e.error}`),{success:!1,error:e.error,statusCode:e.statusCode}}ap.debug(`Original args for tool ${c}:`,d);let e=await (0,n.resolveGlobalVars)(d),j=function(a,b){if(!a)return{};let c={};for(let d in a){let e=a[d];null==e?(ap.debug(`Normalizing undefined/null value for parameter '${d}' in tool '${b}'`),d.includes("number")||d.endsWith("Count")||d.endsWith("Id")||d.endsWith("Limit")?(c[d]=0,ap.debug(`Using default value 0 for likely number parameter: ${d}`)):d.includes("bool")||d.startsWith("is")||d.startsWith("has")||d.startsWith("should")?(c[d]=!1,ap.debug(`Using default value false for likely boolean parameter: ${d}`)):d.includes("array")||d.endsWith("s")||d.endsWith("List")||d.endsWith("Items")?(c[d]=[],ap.debug(`Using empty array for likely array parameter: ${d}`)):d.includes("object")||d.endsWith("Options")||d.endsWith("Config")||d.endsWith("Settings")?(c[d]={},ap.debug(`Using empty object for likely object parameter: ${d}`)):(c[d]="",ap.debug(`Using empty string for parameter with unknown type: ${d}`))):c[d]=e}return c}("object"==typeof e&&null!==e?e:{},c);ap.debug(`Normalized args for tool ${c}:`,j),ap.debug(`Calling tool ${c} with SDK timeout ${i}ms`);let k={timeout:i,resetTimeoutOnProgress:!0,...g?{signal:g}:{},onprogress:a=>{ap.debug(`Progress for tool ${c}: ${a.progress}${void 0!==a.total?`/${a.total}`:""}${a.message?` — ${a.message}`:""}`),f?.(a)}},l=ak(a)?await a.callTool.call(a,{name:c,arguments:j},k):await a.callTool({name:c,arguments:j},void 0,k);if((0,o.h$)(l)){let d,e=l.task;ap.info(`Tool ${c} on ${b} returned task handle ${e.taskId} (status: ${e.status})`),f?.({progress:0,message:`Task ${e.taskId} created (${e.status})`});let h=Math.min(Math.max(e.pollInterval??5e3,1e3),3e4),j=new Set(["completed","failed","cancelled"]),k=e.status,m=0,n=j.has(k);if("completed"===k)return{success:!0,data:e.result,progressToken:e.taskId};if("failed"===k)return{success:!1,error:e.error??`Task ${e.taskId} failed`,progressToken:e.taskId};let o=()=>(d||(d=(async()=>{try{await a.request({method:"tasks/cancel",params:{taskId:e.taskId}},void 0,{timeout:1e4})}catch(a){ap.warn(`Best-effort cancellation failed for task ${e.taskId}:`,a)}})()),d),p=()=>{o()};g?.addEventListener("abort",p,{once:!0});try{for(;!j.has(k);){if(g?.aborted||(await ao(h),m+=h,g?.aborted))throw await o(),Error(`Tool call cancelled (task ${e.taskId})`);let b=await a.request({method:"tasks/get",params:{taskId:e.taskId}},void 0,{signal:g,timeout:i});if(g?.aborted)throw await o(),Error(`Tool call cancelled (task ${e.taskId})`);let c=b.task;if(k=c.status,n=j.has(k),ap.debug(`Task ${e.taskId} poll: status=${c.status}, elapsed=${m}ms`),f?.({progress:"completed"===c.status?100:Math.min(99,Math.round(m/1e3)),message:`Task ${e.taskId}: ${c.status}`}),"completed"===c.status)return{success:!0,data:c.result,progressToken:e.taskId};if("failed"===c.status)return{success:!1,error:c.error??`Task ${e.taskId} failed`,progressToken:e.taskId}}return{success:!1,error:`Tool '${c}' task ${e.taskId} was cancelled by the server.`,errorType:"cancelled",progressToken:e.taskId}}catch(a){throw n||await o(),a}finally{g?.removeEventListener("abort",p)}}return{success:!0,data:l}}catch(e){ap.warn(`Failed to call tool ${c} on server ${b}:`,e);let a=e instanceof Error?e.message:"Unknown error",d=500;if(g?.aborted)return{success:!1,error:`Tool '${c}' call was cancelled.`,errorType:"cancelled",toolName:c};if(e instanceof m.Nh&&e.code===m.O4.RequestTimeout){let a=Math.round(i/1e3);return ap.warn(`Tool ${c} execution timed out after ${a} seconds`),{success:!1,error:`Tool execution timed out after ${a} seconds`,errorType:"timeout",toolName:c,timeout:a,statusCode:408}}if(a.includes("401")||a.includes("Unauthorized")||a.includes("invalid_token")||a.includes("token_expired"))return ap.info(`OAuth authentication error detected for tool ${c} on server ${b}`),{success:!1,error:"OAuth authentication failed or tokens have expired. Please re-authenticate the server.",statusCode:401,requiresAuthentication:!0};return(a.includes("404")||a.includes("Not Found"))&&(ap.info(`404 error detected for tool ${c} on server ${b} - may indicate OAuth issues`),d=404,a="Tool endpoint not found (404). This may indicate OAuth authentication issues or the server may not be properly configured."),e instanceof m.Nh?(a=`Failed to call tool: ${a} (Code: ${e.code})`,-32601===e.code?d=404:-32602===e.code?d=400:-32603===e.code&&(d=500)):a=`Failed to call tool: ${a}`,{success:!1,error:a,statusCode:d}}}let at=(0,i.h)("backend/services/mcp/resources");async function au(a,b){if(at.debug("Entering listServerResources method"),!a)return at.warn(`Server ${b} not connected`),{resources:[],error:"Server not connected"};try{at.info(`Listing resources for server ${b}`);let c=(await a.listResources()).resources||[];return at.verbose("Processed resources:",c),{resources:c}}catch(c){if(c instanceof m.Nh&&-32601===c.code)return at.debug(`Server ${b} does not support resources/list`),{resources:[]};at.warn(`Failed to list resources for server ${b}:`,c);let a=c instanceof Error?c.message:"Unknown error";return{resources:[],error:a.includes("Connection timeout")?a:`Failed to list resources: ${a}`}}}async function av(a,b){if(at.debug("Entering listServerResourceTemplates method"),!a)return at.warn(`Server ${b} not connected`),{resourceTemplates:[],error:"Server not connected"};try{return at.info(`Listing resource templates for server ${b}`),{resourceTemplates:(await a.listResourceTemplates()).resourceTemplates||[]}}catch(c){if(c instanceof m.Nh&&-32601===c.code)return at.debug(`Server ${b} does not support resources/templates/list`),{resourceTemplates:[]};at.warn(`Failed to list resource templates for server ${b}:`,c);let a=c instanceof Error?c.message:"Unknown error";return{resourceTemplates:[],error:a.includes("Connection timeout")?a:`Failed to list resource templates: ${a}`}}}async function aw(a,b,c){if(at.debug("Entering readResource method"),!a)return at.warn(`Server ${b} not found`),{success:!1,error:`Server ${b} not found`,statusCode:404};try{let d=await (0,n.resolveGlobalVars)(c);at.info(`Reading resource ${d} from server ${b}`);let e=await a.readResource({uri:d});return{success:!0,data:e}}catch(e){at.warn(`Failed to read resource ${c} on server ${b}:`,e);let a=e instanceof Error?e.message:"Unknown error",d=500;return e instanceof m.Nh?(a=`Failed to read resource: ${a} (Code: ${e.code})`,-32601===e.code?d=404:-32602===e.code&&(d=400)):a=`Failed to read resource: ${a}`,{success:!1,error:a,statusCode:d}}}let ax=(0,i.h)("backend/services/mcp/prompts");async function ay(a,b){if(ax.debug("Entering listServerPrompts method"),!a)return ax.warn(`Server ${b} not connected`),{prompts:[],error:"Server not connected"};try{return ax.info(`Listing prompts for server ${b}`),{prompts:(await a.listPrompts()).prompts||[]}}catch(c){if(c instanceof m.Nh&&-32601===c.code)return ax.debug(`Server ${b} does not support prompts/list`),{prompts:[]};ax.warn(`Failed to list prompts for server ${b}:`,c);let a=c instanceof Error?c.message:"Unknown error";return{prompts:[],error:a.includes("Connection timeout")?a:`Failed to list prompts: ${a}`}}}async function az(a,b,c,d){if(ax.debug("Entering getPrompt method"),!a)return ax.warn(`Server ${b} not found`),{success:!1,error:`Server ${b} not found`,statusCode:404};try{let e;if(d&&Object.keys(d).length>0){let a=await (0,n.resolveGlobalVars)(d);e="object"==typeof a&&null!==a?a:void 0}ax.info(`Getting prompt ${c} from server ${b}`);let f=await a.getPrompt({name:c,arguments:e});return{success:!0,data:f}}catch(e){ax.warn(`Failed to get prompt ${c} on server ${b}:`,e);let a=e instanceof Error?e.message:"Unknown error",d=500;return e instanceof m.Nh?(a=`Failed to get prompt: ${a} (Code: ${e.code})`,-32601===e.code?d=404:-32602===e.code&&(d=400)):a=`Failed to get prompt: ${a}`,{success:!1,error:a,statusCode:d}}}var aA=c(40829),aB=c(49680);function aC(a){return"stdio"===a.transport&&F(a.command,a.args??[])}var aD=c(76054);let aE=(0,i.h)("backend/services/mcp/resourceNotifications");var aF=c(81495),aG=c(7658);void 0===global.__mcp_clients&&(global.__mcp_clients=new Map),void 0===global.__mcp_connecting&&(global.__mcp_connecting=new Set),void 0===global.__mcp_starting_up&&(global.__mcp_starting_up=!0),void 0===global.__mcp_active_transports&&(global.__mcp_active_transports=new Map),void 0===global.__mcp_client_generation&&(global.__mcp_client_generation=new Map),void 0===global.__mcp_tool_schema_hash&&(global.__mcp_tool_schema_hash=new Map);let aH=(0,i.h)("backend/services/mcp/index");function aI(a){if("streamable"!==a.transport&&"sse"!==a.transport)return!1;let b=a.headers;return!!b&&Object.entries(b).some(([a,b])=>"authorization"===a.toLowerCase()&&(0,W.at)(b,a).value.trim().length>0)}class aJ{async clearLegacyInferredOAuthScopesForHeaderAuth(a){try{let b=await this.loadServerConfigs();if(!Array.isArray(b))return;let c=b.findIndex(b=>b.name===a);if(-1===c||"streamable"!==b[c].transport)return;let d=b[c];if(!aI(d)||d.oauthScopes?.length!==1||"read"!==d.oauthScopes[0]||d.oauthClientId||d.oauthClientSecret||d.oauthClientMetadata||d.oauthClientInformation||d.oauthTokens||d.oauthCodeVerifier||d.authorizationUrl)return;b[c]={...d,oauthScopes:void 0};let e=await (0,l.q)(new Map(b.map(a=>[a.name,a])));e.success?aH.info(`Removed stale inferred OAuth scopes from header-authenticated server ${a}`):aH.warn(`Failed to remove stale inferred OAuth scopes from ${a}: ${e.error}`)}catch(b){aH.warn(`Failed to clean inferred OAuth scopes for ${a}: ${b instanceof Error?b.message:String(b)}`)}}get clients(){return global.__mcp_clients}get connectingServers(){return global.__mcp_connecting}get activeTransports(){return global.__mcp_active_transports}get clientGenerations(){return global.__mcp_client_generation}get toolSchemaHashes(){return global.__mcp_tool_schema_hash}static{this.MAX_STDERR_LOG_ENTRIES=200}appendStderrLog(a,b){let c=this.stderrLogs.get(a)||[];c.push(b),c.length>aJ.MAX_STDERR_LOG_ENTRIES&&c.splice(0,c.length-aJ.MAX_STDERR_LOG_ENTRIES),this.stderrLogs.set(a,c)}deregisterClient(a){this.clients.delete(a),this.activeTransports.delete(a)}onResourceListChanged(a){let b=this.resourceListVersion.get(a)??0;this.resourceListVersion.set(a,b+1),aH.debug(`onResourceListChanged: server=${a} version=${b+1}`)}onResourceUpdated(a,b){let c=this.pendingResourceUpdates.get(a)??new Set;c.add(b),this.pendingResourceUpdates.set(a,c),aH.debug(`onResourceUpdated: server=${a} uri=${b}`)}getResourceListVersion(a){return this.resourceListVersion.get(a)??0}async subscribeToResource(a,b){try{let c=this.getClient(a);if(!c)return;let d=c.getServerCapabilities?.();if(!d?.resources?.subscribe)return;await c.subscribeResource({uri:b}),aH.debug(`subscribeToResource: server=${a} uri=${b}`)}catch(c){aH.debug(`subscribeToResource: ignored error for ${a}/${b}:`,c)}}clearRetryTimer(a){let b=this.connectionRetryTimers.get(a);b&&(clearTimeout(b),this.connectionRetryTimers.delete(a),aH.debug(`Cleared retry timer for server ${a}`))}scheduleConnectionRetry(a,b){this.clearRetryTimer(a);let c=this.connectionRetryAttempts.get(a)||0;if(c>=5){aH.warn(`Maximum retry attempts (5) reached for server ${a}, stopping retries`),this.connectionRetryAttempts.delete(a);return}let d=Math.min(5e3*Math.pow(2,c),3e5);aH.info(`Scheduling connection retry for server ${a} in ${d}ms (attempt ${c+1}/5)`);let e=setTimeout(async()=>{aH.info(`Attempting to reconnect server ${a} (attempt ${c+1}/5)`);let b=await this.getServerConfig(a);if(!b){aH.info(`Server ${a} configuration not found, stopping retry attempts`),this.connectionRetryAttempts.delete(a);return}if(b.disabled){aH.info(`Server ${a} is now disabled, stopping retry attempts`),this.connectionRetryAttempts.delete(a);return}let d=this.getClient(a);if(d)try{await d.ping({timeout:5e3}),aH.info(`Server ${a} is already connected and responsive, cancelling retry`),this.connectionRetryAttempts.delete(a);return}catch(b){aH.warn(`Server ${a} has a registered client but ping failed (${b instanceof Error?b.message:String(b)}); reconnecting from scratch`)}this.connectionRetryAttempts.set(a,c+1);try{let e=d?await this.forceReconnect(a):await this.connectServer(b);if(e.success)aH.info(`Successfully reconnected server ${a} after ${c+1} attempts`),this.connectionRetryAttempts.delete(a);else{if(aH.warn(`Failed to reconnect server ${a}: ${e.error}`),e.requiresAuthentication){aH.info(`Server ${a} requires authentication, stopping retry attempts`),this.connectionRetryAttempts.delete(a);return}this.scheduleConnectionRetry(a,b)}}catch(c){aH.error(`Error during retry connection for server ${a}:`,c),this.scheduleConnectionRetry(a,b)}},d);this.connectionRetryTimers.set(a,e)}isStartingUp(){return!0===global.__mcp_starting_up}setStartingUp(a){global.__mcp_starting_up=a,aH.info(`Backend startup state set to: ${a?"starting":"complete"}`)}getClientGeneration(a){return this.clientGenerations.get(a)??0}setToolSchemaHash(a,b,c){this.toolSchemaHashes.set(`${a}\0${b}`,c)}getToolSchemaHash(a,b){return this.toolSchemaHashes.get(`${a}\0${b}`)}getClient(a){let b=this.clients.get(a);if(b&&(0,B.wk)(b)){aH.warn(`getClient: client for ${a} has a closed/aborted connection — evicting it`),this.clients.delete(a);return}return aH.debug(`getClient: Looking for client: ${a}`,b?"Found":"Not found"),b}async loadServerConfigs(){aH.debug("loadServerConfigs: Entering method");try{let a=await (0,l.loadServerConfigs)();if(!Array.isArray(a))return aH.warn("loadServerConfigs: Received non-array response",a),a;for(let b of(await (0,aG.XS)())){if(a.some(a=>a.name===b.name)){aH.warn(`loadServerConfigs: A stored server is named "${b.name}" — it shadows FLUJO's built-in server`);continue}a.push(b)}return aH.debug(`loadServerConfigs: Loaded ${a.length} server configs`),a}catch(a){return aH.warn("loadServerConfigs: Failed to load server configs:",a),{success:!1,error:`Failed to load server configs: ${a instanceof Error?a.message:"Unknown error"}`}}}async getServerConfig(a){aH.debug(`getServerConfig: Looking up config for server ${a}`);let b=await this.loadServerConfigs();if(!Array.isArray(b))return aH.warn(`getServerConfig: Failed to load configs for ${a}:`,b.error),null;let c=b.find(b=>b.name===a);return c||(aH.warn(`getServerConfig: Server ${a} not found in configs`),null)}async isServerDisabled(a){let b=await this.getServerConfig(a);return b?.disabled===!0}async isInternalServer(a){if(!(0,aG.Co)(a))return!1;let b=await (0,l.loadServerConfigs)();return!Array.isArray(b)||!b.some(b=>b.name===a)}async connectServer(a){let b="string"==typeof a?a:a.name;if((0,aG.Co)(b)&&("string"!=typeof a?!0===a.builtIn:await this.isInternalServer(b)))return this.connectingServers.delete(b),{success:!0};let c=this.inFlightConnects.get(b);if(c)return aH.debug(`connectServer: reusing in-flight connection attempt for ${b}`),c;let d=this.connectServerInternal(a).finally(()=>{this.inFlightConnects.delete(b)});return this.inFlightConnects.set(b,d),d}async connectServerInternal(a){let b;if("string"==typeof a){aH.info(`connectServer: Looking up config for server ${a}`);let c=await this.getServerConfig(a);if(!c)return aH.warn(`connectServer: Server ${a} not found in configs`),{success:!1,error:`Server configuration for "${a}" not found. The server may have been deleted or not properly configured.`};b=c}else b=a;let c="string"==typeof a?b:await this.getServerConfig(b.name),e=c??b;if((c??b).disabled)return aH.info(`connectServer: Server ${b.name} is disabled — refusing to create a client/transport`),this.clearRetryTimer(b.name),this.connectionRetryAttempts.delete(b.name),{success:!1,error:`Server '${b.name}' is disabled. Enable it on the MCP page to use it.`};let f=(0,d.A)();aH.info(`connectServer: Starting connection for server ${b.name} [RequestID: ${f}]`),this.connectingServers.add(b.name);try{this.stderrLogs.set(b.name,[]),b=await $(b);let a=await aj()&&"websocket"!==b.transport,c=this.clients.get(b.name);if(c){let{needsNewClient:d,reason:e}=function(a,b,c=!1){if(Z.debug("Entering shouldRecreateClient method"),(0,B.wk)(a))return{needsNewClient:!0,reason:"Existing connection is closed"};if((a.__flujoCapKey??"")!==Y(b))return{needsNewClient:!0,reason:"Client capabilities (sampling/elicitation/MCP Apps) changed"};let d=!0===a.__flujoBeta,e=c&&"websocket"!==b.transport;if(d!==e)return{needsNewClient:!0,reason:e?"Beta MCP protocol enabled":"Beta MCP protocol disabled"};if(d){let c=a.transport;if(!c||c.__flujoKind!==b.transport)return{needsNewClient:!0,reason:`Transport type changed to ${b.transport}`};if("stdio"===b.transport){if(c.__flujoStdioKey!==ab(b))return{needsNewClient:!0,reason:"Connection parameters changed"}}else if(c.__flujoHttpKey!==ac(b))return{needsNewClient:!0,reason:`${b.transport} auth/connection parameters changed`};return{needsNewClient:!1}}if("websocket"===b.transport){if(!(a.transport instanceof v.I))return{needsNewClient:!0,reason:"Transport type changed to websocket"}}else if("streamable"===b.transport){if(!(a.transport instanceof w.j))return{needsNewClient:!0,reason:"Transport type changed to streamable"};let c=a.transport,d=c._url?.toString();if(void 0!==d&&d!==new URL(b.serverUrl).toString())return{needsNewClient:!0,reason:"Streamable server URL changed"};let e=c.__flujoHttpKey;if(!e)return{needsNewClient:!0,reason:"Existing streamable transport has no config key"};if(e!==ac(b))return{needsNewClient:!0,reason:"Streamable auth/connection parameters changed"}}else if("sse"===b.transport){if(!(a.transport instanceof x.A))return{needsNewClient:!0,reason:"Transport type changed to sse"};let c=a.transport,d=c._url?.toString();if(void 0!==d&&d!==new URL(b.serverUrl).toString())return{needsNewClient:!0,reason:"SSE server URL changed"};let e=c.__flujoHttpKey;if(!e)return{needsNewClient:!0,reason:"Existing sse transport has no config key"};if(e!==ac(b))return{needsNewClient:!0,reason:"SSE auth/connection parameters changed"}}else{if(!(a.transport instanceof u.oQ))return{needsNewClient:!0,reason:"Transport type changed to stdio"};if("stdio"!==b.transport)return{needsNewClient:!0,reason:"Transport type changed from stdio"};let c=a.transport.__flujoStdioKey;if(!c)return{needsNewClient:!0,reason:"Existing stdio transport has no config key"};if(c!==ab(b))return{needsNewClient:!0,reason:"Connection parameters changed"}}return{needsNewClient:!1}}(c,b,a);if(!d)return aH.info(`connectServer: Server ${b.name} is already connected`),this.lastConnectionError.delete(b.name),this.clearRetryTimer(b.name),this.connectionRetryAttempts.delete(b.name),await this.clearLegacyInferredOAuthScopesForHeaderAuth(b.name),{success:!0};aH.info(`connectServer: Existing client for ${b.name} is stale (${e}), recreating`),this.deregisterClient(b.name);try{await ah(c,b.name,b)}catch(a){aH.debug(`connectServer: error closing stale client for ${b.name}: ${a instanceof Error?a.message:String(a)}`)}c=void 0}c=a?al(b):ad(b);let d=a?an(b):ae(b);if(a){let a=c.setNotificationHandler?.bind(c);a&&(a("notifications/resources/list_changed",()=>{this.onResourceListChanged(b.name)}),a("notifications/resources/updated",a=>{let c=a?.params?.uri;c&&this.onResourceUpdated(b.name,c)}))}else!function(a,b,c,d){try{a.setNotificationHandler(m.hh,a=>{aE.debug(`resourceListChanged notification received for ${b}`),c(b)})}catch(a){aE.warn(`registerResourceNotificationHandlers: failed to register list_changed for ${b}`,a)}if(d)try{a.setNotificationHandler(m.cL,a=>{let c=a.params?.uri;c&&(aE.debug(`resourceUpdated notification received for ${b} uri=${c}`),d(b,c))})}catch(a){aE.warn(`registerResourceNotificationHandlers: failed to register resource_updated for ${b}`,a)}}(c,b.name,a=>this.onResourceListChanged(a),(a,b)=>this.onResourceUpdated(a,b));let e=d.stderr;if(e&&"function"==typeof e.on){let a=b.name;e.on("data",b=>{let c=b.toString();aH.warn(`stderr: [${a}]: ${c}`),this.appendStderrLog(a,c)})}d.onclose=()=>{if(this.activeTransports.get(b.name)!==d)return void aH.debug(`connectServer: ignoring close event from a stale/deregistered transport for ${b.name}`);aH.warn(`connectServer: Connection closed for server ${b.name}`),this.deregisterClient(b.name),this.getServerConfig(b.name).then(a=>{if(!a||a.disabled)return void aH.info(`Server ${b.name} is now disabled, skipping reconnection logic`);aH.info(`Connection closed for enabled server ${b.name}, scheduling reconnection`),this.scheduleConnectionRetry(b.name,a)}).catch(a=>{aH.warn(`Error checking server config for ${b.name} during onclose:`,a)})},d.onerror=a=>{if((0,B.lO)(a))return void aH.debug(`connectServer: transient SSE stream disconnect for ${b.name} (self-healing, ignored): ${a instanceof Error?a.message:String(a)}`);if(this.activeTransports.get(b.name)!==d)return void aH.debug(`connectServer: ignoring error event from a stale/deregistered transport for ${b.name}`);if(aH.error(`connectServer: Transport error for server ${b.name}:`),a instanceof Error){aH.error(`Error name: ${a.name}`),aH.error(`Error message: ${a.message}`),aH.error(`Error stack: ${a.stack}`);let b=a.code;void 0!==b&&aH.error(`Error code: ${b}`),aH.error(`Error chain: ${(0,B.jf)(a)}`)}else if(a&&"object"==typeof a){aH.error(`Error type: ${typeof a}`),aH.error(`Error constructor: ${a.constructor?.name||"Unknown"}`);let b=Object.getOwnPropertyNames(a);b.length>0?(aH.error(`Error properties: ${b.join(", ")}`),b.forEach(b=>{try{let c=a[b];aH.error(`  ${b}: ${"function"==typeof c?"[Function]":JSON.stringify(c)}`)}catch(a){aH.error(`  ${b}: [Unable to serialize: ${a}]`)}})):aH.error("Error object has no enumerable properties");try{let b=JSON.stringify(a);aH.error(`JSON stringified error: ${b}`)}catch(a){aH.error(`Cannot JSON stringify error: ${a}`)}}else aH.error(`Error value: ${String(a)} (type: ${typeof a})`);this.appendStderrLog(b.name,`Transport error: ${(0,B.jf)(a)}`),this.deregisterClient(b.name),this.getServerConfig(b.name).then(a=>{if(!a||a.disabled)return void aH.info(`Server ${b.name} is now disabled, skipping reconnection after transport error`);aH.info(`Transport error for enabled server ${b.name}, scheduling reconnection`),this.scheduleConnectionRetry(b.name,a)}).catch(a=>{aH.warn(`Error checking server config for ${b.name} during onerror:`,a)})},await c.connect(d),this.clients.set(b.name,c),this.activeTransports.set(b.name,d),this.clientGenerations.set(b.name,this.getClientGeneration(b.name)+1),this.lastConnectionError.delete(b.name),this.clearRetryTimer(b.name),this.connectionRetryAttempts.delete(b.name),await this.clearLegacyInferredOAuthScopesForHeaderAuth(b.name);let f=function(a){if(ak(a))try{return a.getNegotiatedProtocolVersion()}catch{return}}(c);return aH.info(`connectServer: Successfully connected to ${b.name}`+(f?` (beta SDK, negotiated MCP protocol ${f})`:"")),{success:!0}}catch(j){let a;aH.error(`connectServer: Failed to connect to server ${b.name}:`,j);let c=j instanceof Error?j.message:String(j),d=(0,B.uP)(j),f=(0,B.Ah)(j),g=aI(e);if(f&&!g&&("streamable"===b.transport||"sse"===b.transport)){let c=b.serverUrl;c&&(a=(await (0,aD.n)(c)).oauthCapable)}if(d||a){if(aH.info(`OAuth authentication error detected for server ${b.name}: ${c}`),"streamable"===b.transport&&a){let a=b;if(!a.oauthScopes||0===a.oauthScopes.length){aH.info(`Dynamically enabling OAuth for server ${b.name} after capability confirmation`);try{let c={...a,oauthScopes:["read"]},d=await this.loadServerConfigs();if(Array.isArray(d)){let a=d.findIndex(a=>a.name===b.name);-1!==a&&(d[a]=c,await (0,l.q)(new Map(d.map(a=>[a.name,a]))),aH.info(`Updated config for ${b.name} to enable OAuth`))}}catch(a){aH.warn(`Failed to update config for ${b.name} to enable OAuth:`,a)}}}return{success:!1,error:"OAuth authentication failed or tokens have expired. Please re-authenticate.",requiresAuthentication:!0,oauthCapable:!0}}if(f)return{success:!1,error:c,requiresAuthentication:!0,oauthCapable:a};let h=this.stderrLogs.get(b.name)||[],i=(0,B.ox)(j,b,h);return this.lastConnectionError.set(b.name,i),{success:!1,error:i}}finally{this.connectingServers.delete(b.name)}}async testConnection(a,b,c){aH.info(`testConnection: Testing connection to ${a.name||"(unnamed)"} via ${a.transport} transport`);let d=a=>{try{b?.(a)}catch{}},e=[],f=null,g=null;try{let b,h=a,i=c?.storedName||a.name;if(("streamable"===a.transport||"sse"===a.transport)&&i){let b=await this.loadServerConfigs(),c=Array.isArray(b)?b.find(a=>a.name===i):void 0,d=c?.headers,e=a.headers;h={...a,headers:(0,W.x0)(e,d)}}let j=await $(h),k=await aj()&&"websocket"!==j.transport;f=k?al(j):ad(j);let l=(g=k?an(j):ae(j)).stderr;l&&"function"==typeof l.on&&l.on("data",a=>{let b=a.toString();e.push(b),d({type:"stderr",data:b})}),g.onerror=a=>{let b=`Transport error: ${(0,B.jf)(a)}`;e.push(b),d({type:"stderr",data:b+"\n"})},d({type:"status",phase:"spawning",message:"Starting server / opening transport..."});let m=aC(a)?9e4:15e3,n=aC(a),o=new Promise((a,c)=>{b=setTimeout(()=>c(Error(`Connection timeout after ${m/1e3}s`+(n?" — the package may still be downloading via npx/uvx. Try running the Test again (the package is cached after the first download), or verify the command and network access.":""))),m)});d({type:"status",phase:"handshaking",message:"Performing MCP handshake..."});try{await Promise.race([f.connect(g),o])}finally{b&&clearTimeout(b)}d({type:"status",phase:"listing-tools",message:"Handshake OK — listing tools..."});let p=0;try{let a=await f.listTools();p=Array.isArray(a?.tools)?a.tools.length:0}catch(b){aH.debug(`testConnection: connected to ${a.name} but listTools failed: ${b instanceof Error?b.message:String(b)}`)}return aH.info(`testConnection: Successfully connected to ${a.name} (${p} tools)`),d({type:"result",success:!0,data:{toolCount:p}}),{success:!0,data:{toolCount:p}}}catch(g){let b;aH.warn(`testConnection: Failed to connect to ${a.name}:`,g);let c=(0,B.Ah)(g);if(c&&("streamable"===a.transport||"sse"===a.transport)){let c=a.serverUrl;c&&(b=(await (0,aD.n)(c)).oauthCapable)}let f=(0,B.ox)(g,a,e);return d({type:"result",success:!1,error:f,requiresAuthentication:c,oauthCapable:b}),{success:!1,error:f,requiresAuthentication:c,oauthCapable:b}}finally{if(f)try{await ah(f,a.name,a,{gracePeriodMs:3e3,killEscalationMs:2e3})}catch(b){aH.debug(`testConnection: error closing test client for ${a.name}: ${b instanceof Error?b.message:String(b)}`)}}}setNodeRoots(a,b,c){for(let d of(0,H.eS)(a,b,c))this.notifyRootsChanged(d)}notifyRootsChanged(a){let b=this.getClient(a);if(!b)return void aH.debug(`notifyRootsChanged: ${a} not connected, skipping notification`);try{b.sendRootsListChanged().catch(b=>{aH.warn(`notifyRootsChanged: failed to notify ${a}:`,b)}),aH.debug(`notifyRootsChanged: sent roots/list_changed to ${a}`)}catch(b){aH.warn(`notifyRootsChanged: failed to notify ${a}:`,b)}}async disconnectServer(a){if(aH.debug(`disconnectServer: Entering method for server ${a}`),await this.isInternalServer(a))return{success:!0};this.clearRetryTimer(a),this.connectionRetryAttempts.delete(a);let b=this.getClient(a);if(!b)return aH.warn(`disconnectServer: Server ${a} not found in clients map`),this.deregisterClient(a),{success:!1,error:`Server ${a} not found`};this.deregisterClient(a);try{let c=await this.getServerConfig(a);return await ah(b,a,c||void 0),aH.info(`disconnectServer: Disconnected server ${a}`),{success:!0}}catch(b){return aH.warn(`disconnectServer: Failed to disconnect server ${a}:`,b),{success:!1,error:`Failed to disconnect server: ${b instanceof Error?b.message:"Unknown error"}`}}}async forceReconnect(a){if(aH.info(`forceReconnect: Forcing fresh connection for server ${a}`),await this.isInternalServer(a))return{success:!0};let b=this.clients.get(a);if(b){this.deregisterClient(a);let c=await this.getServerConfig(a);try{await ah(b,a,c||void 0)}catch(b){aH.debug(`forceReconnect: error closing stale client for ${a}: ${b instanceof Error?b.message:String(b)}`)}}return this.connectServer(a)}async listServerTools(a,b="model"){if(aH.debug(`listServerTools: Entering method for server ${a}, audience ${b}`),await this.isInternalServer(a)){if(await this.isServerDisabled(a)){let b=`Server '${a}' is disabled. Enable it on the MCP page to use it.`;return aH.warn(`listServerTools: ${b}`),{tools:[],error:b}}let{internalToolDefinitionsFor:d}=await c.e(5463).then(c.bind(c,25463)),e=await d(a);return{tools:(0,X.zm)(e,b)}}if(await this.isServerDisabled(a)){let b=`Server '${a}' is disabled. Enable it on the MCP page to use it.`;return aH.warn(`listServerTools: ${b}`),{tools:[],error:b}}let d=this.getClient(a);d||aH.warn(`listServerTools: Client not found for ${a}`);let e=await ar(d,a,b);if(e.error){aH.warn(`listServerTools: Listing tools for ${a} failed (${e.error}); forcing reconnect and retrying once`);let c=await this.forceReconnect(a);if(!c.success)return aH.warn(`listServerTools: Reconnect for ${a} failed: ${c.error}`),{tools:[],error:c.error||e.error};d=this.clients.get(a),(e=await ar(d,a,b)).error?aH.warn(`listServerTools: Retry after reconnect still failed for ${a}:`,e.error):aH.info(`listServerTools: Recovered after reconnect for ${a}; listed ${e.tools.length} tools`)}else aH.info(`listServerTools: Listed ${e.tools.length} tools for ${a}`);return e}async callTool(a,b,d,e,f,g,h,i="host"){if(aH.debug(`callTool: Entering method for server ${a}, tool ${b}, source ${i}`),await this.isInternalServer(a)){if(await this.isServerDisabled(a)){let b=`Server '${a}' is disabled. Enable it on the MCP page to use it.`;return aH.warn(`callTool: ${b}`),{success:!1,error:b}}let{internalCallToolFor:e,internalToolDefinitionsFor:f}=await c.e(5463).then(c.bind(c,25463));if("app"===i||"model"===i){let c=await f(a),d=(0,X.F)(c,a,b,i);if(!d.allowed)return aH.warn(`callTool: Rejected ${i} call to built-in tool: ${d.error}`),{success:!1,error:d.error,statusCode:d.statusCode}}let h=await e(this,a,b,d,g,i);return aH.info(`callTool: Dispatched internal tool ${b} on ${a}`),{success:!0,data:h}}if(await this.isServerDisabled(a)){let b=`Server '${a}' is disabled. Enable it on the MCP page to use it.`;return aH.warn(`callTool: ${b}`),{success:!1,error:b}}let j=this.getClient(a);if(!j){aH.warn(`callTool: No client for ${a}; forcing reconnect before calling ${b}`);let c=await this.forceReconnect(a);c.success?j=this.clients.get(a):aH.warn(`callTool: Reconnect for ${a} failed: ${c.error}`)}let k=await as(j,a,b,d,e,f,h,i);return aH.info(`callTool: Called tool ${b} on ${a}`),k}async callToolFromApp(a,b,c,d,e){let f=await this.checkMcpAppAccess(a);if(f)return f;let g=await this.callTool(a,b,c,d,void 0,void 0,e,"app");if("tool-authorization-list"!==g.errorType)return g;aH.warn(`callToolFromApp: visibility lookup failed for ${a}/${b}; reconnecting and retrying once before dispatch`);let h=await this.forceReconnect(a);return h.success?g=await this.callTool(a,b,c,d,void 0,void 0,e,"app"):{success:!1,error:h.error||g.error,statusCode:g.statusCode}}async isMcpAppAccessEnabled(a){let b=await this.isInternalServer(a),c=await this.getServerConfig(a);return c?.disabled!==!0&&(!!b||c?.enableMcpApps===!0)}async checkMcpAppAccess(a){if(await this.isMcpAppAccessEnabled(a))return null;let b=`MCP Apps are not enabled for server '${a}'. Enable them on the MCP page before opening or using this app.`;return aH.warn(`MCP App access denied: ${b}`),{success:!1,error:b,statusCode:403}}async readResourceFromApp(a,b){let c=await this.checkMcpAppAccess(a);return c||this.readResource(a,b)}async listWithReconnect(a,b,c){if(await this.isInternalServer(a))return c;if(await this.isServerDisabled(a)){let b=`Server '${a}' is disabled. Enable it on the MCP page to use it.`;return aH.warn(`listWithReconnect: ${b}`),{...c,error:b}}let d=this.getClient(a);d||aH.warn(`listWithReconnect: Client not found for ${a}`);let e=await b(d,a);if(!e.error)return e;aH.warn(`listWithReconnect: Listing for ${a} failed (${e.error}); forcing reconnect and retrying once`);let f=await this.forceReconnect(a);return f.success?(d=this.clients.get(a),(e=await b(d,a)).error?aH.warn(`listWithReconnect: Retry after reconnect still failed for ${a}:`,e.error):aH.info(`listWithReconnect: Recovered after reconnect for ${a}`),e):(aH.warn(`listWithReconnect: Reconnect for ${a} failed: ${f.error}`),{...c,error:f.error||e.error})}async listServerResources(a){if(aH.debug(`listServerResources: Entering method for server ${a}`),a===aF._&&await this.isInternalServer(a)){let{internalListResources:a}=await c.e(8001).then(c.bind(c,28001));return a()}if(a===aG.K3){let{filesystemListResources:a}=await c.e(793).then(c.bind(c,10793));return a()}return this.listWithReconnect(a,au,{resources:[]})}async listServerResourceTemplates(a){if(aH.debug(`listServerResourceTemplates: Entering method for server ${a}`),a===aF._&&await this.isInternalServer(a)){let{internalListResourceTemplates:a}=await c.e(8001).then(c.bind(c,28001));return a()}return this.listWithReconnect(a,av,{resourceTemplates:[]})}async readResource(a,b){if(aH.debug(`readResource: Entering method for server ${a}, uri ${b}`),a===aF._&&await this.isInternalServer(a)){let{internalReadResource:a}=await c.e(8001).then(c.bind(c,28001));return a(b)}if(a===aG.K3){let{filesystemReadResource:a,isFilesystemAppUri:d,isTouchedFileUri:e,readTouchedFileResource:f}=await c.e(793).then(c.bind(c,10793));if(d(b))return a(b);if(e(b))return f(b)}let d=this.getClient(a);d||aH.warn(`readResource: Client not found for ${a}`);let e=await aw(d,a,b);return aH.info(`readResource: Read resource ${b} on ${a}`),e}async listServerPrompts(a){return aH.debug(`listServerPrompts: Entering method for server ${a}`),this.listWithReconnect(a,ay,{prompts:[]})}async getPrompt(a,b,c){aH.debug(`getPrompt: Entering method for server ${a}, prompt ${b}`);let d=this.getClient(a);d||aH.warn(`getPrompt: Client not found for ${a}`);let e=await az(d,a,b,c);return aH.info(`getPrompt: Got prompt ${b} on ${a}`),e}async resolveOAuthSecretForSave(a,b){return a===aB.RJ?b??"":a?a.startsWith("${global:")||a.startsWith("encrypted:")||a.startsWith("encrypted_failed:")?a:await (0,aA.Rs)(a):""}async resolveHeadersForSave(a,b){let c={};for(let[d,e]of Object.entries(a||{})){if(!d)continue;let{value:a,isSecret:f}=(0,W.at)(e,d);if(!f){""!==a&&(c[d]={value:a,metadata:{isSecret:!1}});continue}if((0,W.uh)(a)){let a=b?.[d];void 0!==a&&(c[d]=a);continue}if(a){if((0,W.T6)(a)||a.startsWith("encrypted:")||a.startsWith("encrypted_failed:")){c[d]={value:a,metadata:{isSecret:!0}};continue}c[d]={value:await (0,aA.Rs)(a),metadata:{isSecret:!0}}}}return c}async ensureRemoteServerRootDir(a){try{if(!["streamable","sse","websocket"].includes(a.transport))return;let b=(a.rootPath||"").trim();if(!b)return;let c=h().resolve((0,j.getDataDir)(),b);if(h().dirname(c)===c)return;await f().mkdir(c,{recursive:!0}),aH.debug(`ensureRemoteServerRootDir: ensured ${c} for ${a.name}`)}catch(b){aH.warn(`ensureRemoteServerRootDir: could not create root dir for ${a.name}:`,b)}}async updateServerConfig(a,b){if(aH.debug(`updateServerConfig: Entering method for server ${a}`),await this.isInternalServer(a)){let c=Object.keys(b).filter(a=>"name"!==a),d=void 0===b.name||b.name===a,e=c.length>0&&c.every(a=>"disabled"===a)&&"boolean"==typeof b.disabled&&d,f=(a===aG.K3||a===aG.PA)&&c.length>0&&c.every(a=>"roots"===a)&&Array.isArray(b.roots)&&d;if(e){await (0,aG.LV)(a,b.disabled),aH.info(`updateServerConfig: Toggled built-in server ${a} disabled=${b.disabled}`);let c=await this.loadServerConfigs();return(Array.isArray(c)?c.find(b=>b.name===a):void 0)??{success:!0}}if(f){await (0,aG.Eu)(a,b.roots),aH.info(`updateServerConfig: Set built-in ${a} roots (${b.roots.length})`);let c=await this.loadServerConfigs();return(Array.isArray(c)?c.find(b=>b.name===a):void 0)??{success:!0}}return{success:!1,error:`"${a}" is a FLUJO built-in server: only enabling/disabling it is allowed, not editing.`}}let c=await this.loadServerConfigs();if(!Array.isArray(c))return aH.warn("updateServerConfig: Failed to load configs:",c.error),c;let d=c.find(b=>b.name===a),e=!!d&&"string"==typeof b.name&&b.name!==a;if(e&&c.some(a=>a.name===b.name))return aH.warn(`updateServerConfig: Refusing to rename ${a} -> ${b.name}: name already in use`),{success:!1,error:`A server named "${b.name}" already exists`};if(!d&&b.name)aH.info(`updateServerConfig: Creating new server config for ${b.name}`),d={name:b.name,transport:"stdio",command:"",args:[],env:{},disabled:!1,autoApprove:[],_buildCommand:"",_installCommand:"",rootPath:""},c.push(d);else if(!d)return aH.warn(`updateServerConfig: Server ${a} not found`),{success:!1,error:`Server ${a} not found`};let f=b.oauthClientSecret;if(void 0!==f){let a=d.oauthClientSecret;b.oauthClientSecret=await this.resolveOAuthSecretForSave(f,a)}let g=b.headers;if(void 0!==g){let a=d.headers;b.headers=await this.resolveHeadersForSave(g,a)}let h={...d};h={...d,...b};let i=JSON.stringify(d.roots??[])!==JSON.stringify(h.roots??[])||(d.rootPath??"")!==(h.rootPath??""),j=c.findIndex(b=>b.name===a);-1!==j?c[j]=h:h.name&&c.push(h);let k=await (0,l.q)(new Map(c.map(a=>[a.name,a])));return k.success?(await this.ensureRemoteServerRootDir(h),e?(this.clients.has(a)?await this.disconnectServer(a):(this.clearRetryTimer(a),this.connectionRetryAttempts.delete(a)),this.stderrLogs.delete(a),this.lastConnectionError.delete(a),await this.handleConnectionStateChange(h.name,h)):await this.handleConnectionStateChange(a,h),i&&this.notifyRootsChanged(h.name),aH.info(`updateServerConfig: Successfully updated config for ${a}${e?` (renamed to ${h.name})`:""}`),h):(aH.warn(`updateServerConfig: Failed to save config for ${a}:`,k.error),k)}async handleConnectionStateChange(a,b){aH.debug(`handleConnectionStateChange: Entering method for server ${a}`);let c=!!this.getClient(a),d=!b.disabled;if(c&&!d){aH.info(`handleConnectionStateChange: Disconnecting disabled server ${a}`);try{await this.disconnectServer(a)}catch(b){aH.warn(`handleConnectionStateChange: Failed to disconnect server ${a} during update:`,b)}}else!c&&d?(aH.info(`handleConnectionStateChange: Connecting previously disabled server ${a}`),await this.connectServer(b)):c&&d?(aH.info(`handleConnectionStateChange: Re-applying config to connected server ${a}`),await this.connectServer(b)):d||(aH.info(`handleConnectionStateChange: Clearing retry timers for disabled server ${a}`),this.clearRetryTimer(a),this.connectionRetryAttempts.delete(a))}async clearRetryTimersForDisabledServers(){aH.debug("clearRetryTimersForDisabledServers: Checking for disabled servers with active retry timers");try{let a=await this.loadServerConfigs();if(!Array.isArray(a))return void aH.warn("clearRetryTimersForDisabledServers: Failed to load server configs");for(let b of a.filter(a=>a.disabled))this.connectionRetryTimers.has(b.name)&&(aH.info(`clearRetryTimersForDisabledServers: Clearing retry timer for disabled server ${b.name}`),this.clearRetryTimer(b.name),this.connectionRetryAttempts.delete(b.name))}catch(a){aH.error("clearRetryTimersForDisabledServers: Error clearing retry timers:",a)}}async deleteServerConfig(a){if(aH.debug(`deleteServerConfig: Entering method for server ${a}`),await this.isInternalServer(a))return{success:!1,error:`"${aF._}" is FLUJO's built-in server and cannot be deleted.`};this.clients.has(a)&&(aH.info(`deleteServerConfig: Disconnecting server ${a} before deletion`),await this.disconnectServer(a));let b=await this.loadServerConfigs();if(!Array.isArray(b))return aH.warn("deleteServerConfig: Failed to load configs:",b.error),b;let c=b.findIndex(b=>b.name===a);if(-1===c)return aH.warn(`deleteServerConfig: Server ${a} not found in configs`),{success:!1,error:`Server ${a} not found`};b.splice(c,1),aH.debug(`deleteServerConfig: Saving updated configs after deleting ${a}`);let d=await (0,l.q)(new Map(b.map(a=>[a.name,a])));return d.success?aH.info(`deleteServerConfig: Successfully deleted server ${a}`):aH.warn(`deleteServerConfig: Error saving configs after deleting ${a}:`,d.error),d}async getServerStatus(a){if(await this.isInternalServer(a))return await this.isServerDisabled(a)?{status:"disconnected"}:{status:"connected"};let b=await this.getServerConfig(a);if(!b)return aH.warn(`getServerStatus: Server ${a} not found`),{status:"error",message:`Server ${a} configuration not found. The server may have been deleted or not properly configured.`};if(b.disabled)return aH.debug(`getServerStatus: Server ${a} is disabled`),{status:"disconnected"};let c=!!this.getClient(a);if("streamable"===b.transport&&!c&&b.oauthScopes&&b.oauthScopes.length>0){if(!b.oauthTokens||!b.oauthTokens.access_token)return aH.info(`getServerStatus: Server ${a} requires OAuth authentication but has no valid tokens`),{status:"requires_authentication",message:"OAuth authentication required. Click the authenticate button to complete the OAuth flow."};if(!b.oauthTokens.refresh_token&&b.oauthTokens.expires_in&&b.oauthTokens.issued_at){let c=b.oauthTokens.issued_at,d=b.oauthTokens.expires_in;if(Math.floor(Date.now()/1e3)>=c+d)return aH.info(`getServerStatus: OAuth tokens for ${a} have expired and no refresh token is available`),{status:"requires_authentication",message:"OAuth tokens have expired. Please re-authenticate."}}}let d=(this.stderrLogs.get(a)||[]).join("\n").trim(),e=this.lastConnectionError.get(a);if(c||this.getClient(a))return aH.info(`getServerStatus: Server ${a} is connected`),{status:"connected",stderrOutput:d||void 0};{let b=this.isStartingUp()&&!this.lastConnectionError.has(a);if(this.connectingServers.has(a)||b)return aH.info(`getServerStatus: Server ${a} is still connecting`),{status:"connecting",message:"Server is starting up. This may take a few moments."};if(d&&(d.includes("OAuth authentication required")||d.includes("invalid_token")))return aH.info(`getServerStatus: OAuth authentication error detected for ${a}`),{status:"requires_authentication",message:"OAuth authentication required. Please complete the OAuth flow.",stderrOutput:d};let c=d||e;return c?(aH.info(`getServerStatus: Using ${d?"stderr output":"persisted connection error"} as error message for ${a}`),{status:"error",message:c,stderrOutput:d||void 0}):(aH.info(`getServerStatus: No specific error details available for ${a}`),{status:"error",message:`Server ${a} is configured but not connected. The server process may have crashed or been terminated.`,stderrOutput:void 0})}}async startEnabledServers(){aH.info("Starting all enabled servers"),this.setStartingUp(!0);try{await this.clearRetryTimersForDisabledServers();let a=await this.loadServerConfigs();if(!Array.isArray(a))return void aH.warn("Failed to load server configs, cannot start servers");let b=a.filter(a=>!a.disabled);aH.info(`Found ${b.length} enabled servers to start`),aH.debug(`${b}`),b.forEach(a=>this.connectingServers.add(a.name));let c=Math.max(1,Number(process.env.FLUJO_MCP_BOOT_CONCURRENCY)||2);aH.info(`Connecting ${b.length} enabled servers with boot concurrency ${c}`),await (0,k.P)(b,c,async a=>{aH.info(`Starting server: ${a.name}`),await this.connectServer(a).catch(b=>{aH.error(`Failed to start server ${a.name}:`,b)})})}finally{this.setStartingUp(!1)}}async getAvailableClients(){try{let a=await this.loadServerConfigs();if(!a||"error"in a)return aH.warn("getAvailableClients: Failed to load server configs:",a?.error),[];return(await Promise.all(a.map(async a=>{try{let b=await this.getServerStatus(a.name);return{name:a.name,status:"string"==typeof b?b:b.status,connected:"string"==typeof b?"connected"===b:"connected"===b.status}}catch(b){return aH.warn(`getAvailableClients: Error getting status for ${a.name}:`,b),{name:a.name,status:"error",connected:!1}}}))).map(a=>`${a.name} (${a.status})`)}catch(a){return aH.error("getAvailableClients: Error getting available clients:",a),[]}}constructor(){this.stderrLogs=new Map,this.lastConnectionError=new Map,this.inFlightConnects=new Map,this.connectionRetryTimers=new Map,this.connectionRetryAttempts=new Map,this.resourceListVersion=new Map,this.pendingResourceUpdates=new Map}}let aK=new aJ},60724:(a,b,c)=>{"use strict";c.d(b,{h:()=>k});var d=c(87821),e=c(20433),f=c(60453),g=c(50846),h=c(65007);let i=(0,g.h)("backend/utils/PromptRenderer");class j{async renderPrompt(a,b,c){let d=c?.renderMode||"rendered",e=c?.includeConversationHistory||!1;i.info(`Rendering prompt for node ${b} in flow ${a}`,{renderMode:d,includeConversationHistory:e});let{prompt:f,excludeModelPrompt:g,excludeStartNodePrompt:h,excludeSystemPrompt:j}=await this.findNodePrompt(b,a),k=c?.excludeModelPrompt!==void 0?c?.excludeModelPrompt:g,l=c?.excludeStartNodePrompt!==void 0?c?.excludeStartNodePrompt:h,m=c?.excludeSystemPrompt!==void 0?c?.excludeSystemPrompt:j;i.debug("Exclusion settings",{excludeModelPrompt:k,excludeStartNodePrompt:l,excludeSystemPrompt:m,fromOptions:{excludeModelPrompt:c?.excludeModelPrompt!==void 0,excludeStartNodePrompt:c?.excludeStartNodePrompt!==void 0,excludeSystemPrompt:c?.excludeSystemPrompt!==void 0}});let n="",o=null;if(!l){let b=await this.findStartNodePrompt(a);b&&(i.debug("Adding start node prompt",{length:b.length}),n+=b+"\n\n")}if(!k){let c=await this.findModelPrompt(b,a);c.prompt&&(i.debug("Adding model prompt",{modelId:c.modelId,length:c.prompt.length}),n+=c.prompt+"\n\n"),o=c.functionCallingSchema,c.reasoningSchema&&(n+=`Please use the following pattern to mark your reasoning: ${c.reasoningSchema}
+`}function w(a){if(k.has(a.type)){if(!l.test(a.conversationId))return void j.warn("Refusing to log event for unsafe conversation id",{conversationId:a.conversationId});(function(a){try{if((0,g.isConversationDeleted)(a))return!1;let{FlowExecutor:b}=c(95708),d=b.conversationStates.get(a);if(!d)return!1;return!d.ephemeral}catch(b){return j.warn(`Could not resolve persistence policy for ${a}; not persisting.`,{err:b}),!1}})(a.conversationId)&&u(a.conversationId,v(a)).catch(b=>j.warn(`Failed to append event to conversation log ${a.conversationId}`,{err:b}))}}async function x(a,b){if(0===b.length||a.ephemeral)return;let c=a.conversationId;if(!c||!l.test(c)||(0,g.isConversationDeleted)(c))return;let d=b.map(a=>v({...a,conversationId:c,seq:s(c),timestamp:Date.now()})).join("");try{await u(c,d)}catch(a){j.warn(`Failed to append ${b.length} event(s) to conversation log ${c}`,{err:a})}}function y(a){let b=p.get(a);return b?b.then(()=>void 0,()=>void 0):Promise.resolve()}async function z(a){let b;if(!l.test(a))return;try{b=await d.promises.readFile(o(a),"utf-8")}catch(b){if("ENOENT"===b.code)return;j.error(`Error reading conversation log ${a}:`,b);return}let c=[],e=0;for(let a of b.split("\n"))if(0!==a.trim().length)try{c.push(JSON.parse(a))}catch{e++}return e>0&&j.warn(`Skipped ${e} unparseable line(s) in conversation log ${a} (truncated append?)`),c}async function A(a){if(l.test(a))try{await d.promises.unlink(o(a))}catch(b){"ENOENT"!==b.code&&j.warn(`Error deleting conversation log ${a}:`,b)}}function B(a){let b=[],c=new Map,d=new Map;for(let e of a)if("message"===e.type){let a=e.message;if(!a||!a.id||"system"===a.role)continue;let f=e.depth??0,g=a.id,h=c.get(g);if(void 0!==h&&/^stream_codex_item_/.test(g)){let a=(d.get(g)??1)+1;d.set(g,a),g=`${g}_legacy_${a}`,h=void 0}else d.has(g)||d.set(g,1);let i=g===a.id?a:{...a,id:g},j=f>0?{...i,depth:f}:{...i};void 0!==h?b[h]=j:(c.set(g,b.length),b.push(j))}else if("message:removed"===e.type){let a=c.get(e.messageId);if(void 0===a)continue;for(let[d,f]of(b.splice(a,1),c.delete(e.messageId),c))f>a&&c.set(d,f-1)}return b}function C(a){return JSON.stringify([a.role,a.content,a.tool_calls??null,a.disabled??!1,a.processNodeId??null])}async function D(a,b){if(a.ephemeral)return;let c=a.conversationId;if(!c||!l.test(c))return;let d=(a.messages??[]).filter(a=>"system"!==a.role&&!!a.id),e=await I(c)?b.filter(a=>"system"!==a.role&&!!a.id):[],f=new Map(e.map(a=>[a.id,a])),g=new Set(d.map(a=>a.id)),h=[];for(let a of d){let b=f.get(a.id);b&&C(b)===C(a)||h.push({type:"message",message:a})}for(let a of e)g.has(a.id)||h.push({type:"message:removed",messageId:a.id});await x(a,h)}let E="Tool execution interrupted (FLUJO restarted before this tool finished)";function F(a,b=E){let c=a.messages??[];if(0===c.length)return[];let d=new Set;for(let a of c)if("tool"===a.role){let b=a.tool_call_id;b&&d.add(b)}let e=[],f=[];for(let a=0;a<c.length;a++){let g=c[a];f.push(g);let h=g.tool_calls;if("assistant"!==g.role||!Array.isArray(h)||0===h.length)continue;let i=h.filter(a=>!!a.id&&!d.has(a.id));if(0===i.length)continue;let j=a+1;for(;j<c.length&&"tool"===c[j].role;)f.push(c[j]),j++;for(let a of i){let c={id:crypto.randomUUID(),role:"tool",tool_call_id:a.id,content:b,timestamp:Date.now(),...void 0!==g.processNodeId?{processNodeId:g.processNodeId}:{},...void 0!==g.depth?{depth:g.depth}:{}};f.push(c),e.push(c),d.add(a.id)}a=j-1}return 0===e.length?[]:(a.messages=f,e)}async function G(a){if(a.ephemeral)return!1;let b=a.conversationId;if(!b||!l.test(b))return!1;let c=await z(b);if(!c)return!1;let d=B(c).filter(a=>!((a.depth??0)>0)),e=(a.messages??[]).filter(a=>"system"!==a.role&&!!a.id).map(a=>a.id);if(d.length<=e.length)return!1;let f=new Set(d.map(a=>a.id));return!!e.every(a=>f.has(a))&&(j.info(`Recovered ${d.length-e.length} message(s) from the conversation log for ${b} (snapshot was behind).`),a.messages=d,!0)}async function H(a){if(a.ephemeral)return;let b=a.conversationId;if(!b||!l.test(b))return;let c=await z(b);if(!c)return;let e=B(c).filter(a=>!((a.depth??0)>0)),f=(a.messages??[]).filter(a=>"system"!==a.role&&!!a.id);if(e.length>=f.length)return;let g=new Set(f.map(a=>a.id));if(!e.every(a=>g.has(a.id)))return;let h=0,i=f.map(a=>v({type:"message",message:a,conversationId:b,seq:h++,timestamp:Date.now()})).join("");q.set(b,h);try{await function(a,b){let c=(p.get(a)??Promise.resolve()).catch(()=>{}).then(async()=>{await d.promises.mkdir(m,{recursive:!0}),await d.promises.writeFile(o(a),b)});return p.set(a,c),c.finally(()=>{p.get(a)===c&&p.delete(a)})}(b,i),j.info(`Rebuilt truncated conversation log for ${b} from snapshot (${e.length} → ${f.length} message(s)); issue #49 self-heal.`)}catch(a){j.warn(`Failed to rebuild truncated conversation log ${b}`,{err:a})}return f}async function I(a){if(!l.test(a))return!1;try{return await d.promises.access(o(a)),!0}catch{return!1}}},60453:(a,b,c)=>{"use strict";c.r(b),c.d(b,{MCPService:()=>aJ,mcpService:()=>aK});var d=c(32524),e=c(79748),f=c.n(e),g=c(33873),h=c.n(g),i=c(50846),j=c(43326),k=c(36445),l=c(74186),m=c(68780),n=c(73456),o=c(77213),p=c(68383),q=c(72904),r=c(92372),s=c(38844),t=c(4231),u=c(37601),v=c(58302),w=c(51605),x=c(3712),y=c(29021),z=c(21820),A=c(25096),B=c(17748);let C=new Set(["npx","bunx","uvx","pipx","dlx"]),D=new Set(["pnpm","yarn","bun","npm"]),E=new Set(["dlx","exec","x"]);function F(a,b=[]){let c=((a||"").split(/[\\/]/).filter(Boolean).pop()||"").toLowerCase().replace(/\.(cmd|exe|bat|ps1)$/i,"");if(C.has(c))return!0;if(D.has(c)){let a=(b[0]||"").toLowerCase();return E.has(a)}return!1}let G=new Set(["node","npm","npx"]);var H=c(62850),I=c(20433),J=c(53271),K=c(46496);let L=(0,i.h)("backend/services/mcp/sampling");function M(a){return a.sampling}function N(a){let b=M(a);return!!(b?.enabled&&b.modelId)}function O(a){let b=[];return async c=>{let d=M(a);if(!d?.enabled||!d.modelId)throw new m.Nh(m.O4.InvalidRequest,"Sampling is not enabled for this server");let e=d.maxCallsPerMinute??10,f=Date.now(),g=f-6e4;for(;b.length>0&&b[0]<g;)b.shift();if(b.length>=e)throw L.warn(`Sampling rate limit (${e}/min) hit for ${a.name}`),new m.Nh(m.O4.InvalidRequest,`Sampling rate limit of ${e}/min exceeded`);b.push(f);let h=await I.modelService.getModel(d.modelId);if(!h)throw new m.Nh(m.O4.InternalError,`Sampling model not found: ${d.modelId}`);let i=await I.modelService.resolveAndDecryptApiKey(h.ApiKey);if(!i)throw new m.Nh(m.O4.InternalError,"Could not resolve the sampling model API key");let j=c.params,k=function(a){let b=[];for(let c of(a.systemPrompt&&b.push({role:"system",content:a.systemPrompt}),a.messages||[])){let a=c.content,d=a?.type==="text"&&"string"==typeof a.text?a.text:`[unsupported ${a?.type||"non-text"} content omitted]`;b.push({role:c.role,content:d})}return b}(j),l="number"==typeof j.temperature?j.temperature:.7;L.info(`Sampling for ${a.name} via model ${h.name} (${k.length} messages)`);let n=(0,J.getCompletionAdapter)(h),o=d.maxTokens??(0,K.normalizeMaxTokens)(h.maxTokens),{completion:p}=await n.createCompletion({model:h,apiKey:i,messages:k,temperature:l,maxTokens:o}),q=p.choices?.[0]?.message?.content;return{role:"assistant",content:{type:"text",text:"string"==typeof q?q:""},model:h.name,stopReason:"endTurn"}}}var P=c(14214),Q=c(30767),R=c(97701);let S=(0,i.h)("backend/services/mcp/elicitation");function T(a){return a.elicitation}function U(a){let b=T(a);return!!b?.enabled}function V(a){return async b=>{if(!U(a))throw new m.Nh(m.O4.MethodNotFound,"Elicitation is not enabled for this server");let c=(0,Q.lx)(a.name);if(!c)return S.warn(`Elicitation request from ${a.name} outside an active run; auto-cancelling`),{action:"cancel"};if(c.getUnattended())return S.warn(`Elicitation request from ${a.name} in unattended run ${c.conversationId}; auto-cancelling`),{action:"cancel"};let d=b.params;if(d?.mode==="url")return S.warn(`Elicitation URL mode is not supported in V1 (server: ${a.name}); auto-cancelling`),{action:"cancel"};let e=d?.message??"Additional information required",f=d?.requestedSchema??{type:"object",properties:{}},g=crypto.randomUUID();S.info(`Suspending for elicitation ${g} from ${a.name} in conv ${c.conversationId}`),P.$.emitterFor(c.conversationId)({type:"run:awaiting_elicitation",elicitationId:g,message:e,requestedSchema:f});let h=await (0,R.gV)(g);return S.info(`Elicitation ${g} resolved with action=${h.action}`),h}}var W=c(34079),X=c(31659);function Y(a){return[function(a){let b=M(a);return b?.enabled?JSON.stringify({m:b.modelId,t:b.maxTokens,r:b.maxCallsPerMinute}):""}(a),function(a){let b=T(a);return b?.enabled?"e:1":""}(a),!0===a.enableMcpApps?"mcp-apps:on":"mcp-apps:off"].join("|")}let Z=(0,i.h)("backend/services/mcp/connection");async function $(a){let b=a;if(a.env&&"object"==typeof a.env){let c={};for(let[b,d]of Object.entries(a.env)){if(!b)continue;let a=d&&"object"==typeof d&&"value"in d?d.value??"":d??"";if(!a||(0,W.uh)(a))continue;let e=await (0,n.G)(a);e&&(c[b]=e)}b={...b,env:c}}if("streamable"!==a.transport&&"sse"!==a.transport||!a.headers||"object"!=typeof a.headers)return b;let c={};for(let[b,d]of Object.entries(a.headers)){if(!b)continue;let{value:a}=(0,W.at)(d,b);if(!a||(0,W.uh)(a))continue;let e=await (0,n.G)(a);e&&(c[b]=e)}return{...b,headers:c}}function _(a){let b={};for(let[c,d]of Object.entries(a)){if(!c)continue;let{value:a}=(0,W.at)(d,c);"string"==typeof a&&a.length>0&&(b[c]=a)}return b}function aa(a){let b={};if(a)for(let[c,d]of Object.entries(a))d&&"object"==typeof d&&"value"in d?b[c]=d.value:b[c]=d;return b}function ab(a){return JSON.stringify({command:a.command,args:a.args??[],env:aa(a.env),cwd:String(a.cwd??""),rootPath:a.rootPath??""})}function ac(a){return JSON.stringify({transport:a.transport,url:a.serverUrl??"",headers:a.headers??{},requestInit:a.requestInit??{},eventSourceInit:a.eventSourceInit??{},reconnectionOptions:a.reconnectionOptions??{},sessionId:a.sessionId??"",oauthClientId:a.oauthClientId??"",oauthClientInformation:a.oauthClientInformation??{},oauthClientSecret:a.oauthClientSecret??"",oauthTokens:a.oauthTokens??{}})}function ad(a){Z.debug("Entering createNewClient method");let b=N(a),c=U(a),d=!0===a.enableMcpApps,e=new t.K({name:`flujo-${a.name}-client`,version:"3.38.0"},{capabilities:{experimental:{},roots:{listChanged:!0},...b?{sampling:{}}:{},...c?{elicitation:{}}:{},...d?{extensions:{[X.OF]:{mimeTypes:[X.cM]}}}:{}}});return(0,H.FP)(e,a),b&&e.setRequestHandler(m.u9,O(a)),c&&e.setRequestHandler(m.$9,V(a)),e.__flujoCapKey=Y(a),e}function ae(a){if(Z.debug("Entering createTransport method"),"streamable"===a.transport){Z.info(`Creating streamable http transport for server ${a.name} with URL ${a.serverUrl}`);let b={};if(a.requestInit&&"object"==typeof a.requestInit&&(b.requestInit=a.requestInit),a.reconnectionOptions&&"object"==typeof a.reconnectionOptions&&(b.reconnectionOptions=a.reconnectionOptions),"string"==typeof a.sessionId&&a.sessionId.length>0&&(b.sessionId=a.sessionId),a.headers&&"object"==typeof a.headers){let c=_(a.headers);Object.keys(c).length>0&&(b.requestInit={...b.requestInit||{},headers:{...b.requestInit?.headers||{},...c}},Z.info(`Applied ${Object.keys(c).length} custom header(s) for ${a.name}: ${Object.keys(c).join(", ")}`))}a.oauthClientId||a.oauthClientInformation?(Z.info(`Setting up OAuth authentication for ${a.name}`),b.authProvider=(0,A.C)(a),a.oauthTokens?.access_token?(Z.debug(`OAuth provider configured for ${a.name} with existing tokens`),Z.debug(`Token expires in: ${a.oauthTokens.expires_in} seconds`)):Z.debug(`OAuth provider configured for ${a.name} - will initiate OAuth flow if needed`)):Z.debug(`No OAuth configuration found for ${a.name}`);let c=new w.j(new URL(a.serverUrl),b);return c.__flujoHttpKey=ac(a),c}if("sse"===a.transport){Z.info(`Creating legacy sse transport for server ${a.name} with URL ${a.serverUrl}`);let b={};if(a.requestInit&&"object"==typeof a.requestInit&&(b.requestInit=a.requestInit),a.eventSourceInit&&"object"==typeof a.eventSourceInit&&(b.eventSourceInit=a.eventSourceInit),a.headers&&"object"==typeof a.headers){let c=_(a.headers);Object.keys(c).length>0&&(b.requestInit={...b.requestInit||{},headers:{...b.requestInit?.headers||{},...c}},Z.info(`Applied ${Object.keys(c).length} custom header(s) for ${a.name}: ${Object.keys(c).join(", ")}`))}let c=new x.A(new URL(a.serverUrl),b);return c.__flujoHttpKey=ac(a),c}if("websocket"===a.transport)return Z.info(`Creating WebSocket transport for server ${a.name} with URL ${a.websocketUrl}`),new v.I(new URL(a.websocketUrl));{var b=a;if(Z.debug("Entering createStdioTransport method"),"stdio"!==b.transport)throw Error("Cannot create stdio transport for non-stdio config");let{command:c,args:d,env:e,cwd:f}=af(b);Z.info(`Creating StdioClientTransport for ${b.name} with stderr: 'pipe'`);let g=new u.oQ({command:c,args:d,env:e,cwd:f,stderr:"pipe"});return g.__flujoStdioKey=ab(b),g.stderr?Z.info(`Stderr stream is available for ${b.name}`):Z.warn(`Stderr stream is NOT available for ${b.name}`),g}}function af(a){let b=a.command,c=a.args?[...a.args]:[],d=`${o.VL}/${a.name}`;Z.info(`Creating stdio transport for server ${a.name}`),Z.debug(`Original command: ${b}`),Z.debug(`Original args: ${JSON.stringify(c)}`),Z.debug(`Server directory: ${d}`);let e=!g.isAbsolute(b)&&(b.includes("/")||b.includes("\\")),f=!b.includes("/")&&!b.includes("\\");if(Z.debug(`Is relative path: ${e}`),Z.debug(`Is just filename: ${f}`),"win32"===z.platform()&&b.toLowerCase().endsWith(".bat"))if(Z.debug(`Detected .bat file on Windows: ${b}`),f){let a=g.join((0,j.getDataDir)(),d,b);Z.debug(`Checking if file exists at: ${a}`);let e=y.existsSync(a);Z.debug(`File exists: ${e}`),e?(Z.debug(`Using full path to .bat file: ${a}`),c=["/c",a,...c]):(Z.warn(`WARNING: .bat file not found at ${a}`),c=["/c",b,...c]),b="cmd.exe"}else Z.debug(`Using cmd.exe with path as provided: ${b}`),c=["/c",b,...c],b="cmd.exe";let h=function(a,b){if(!a||!(!a.includes("/")&&!a.includes("\\")))return a;let c=a.toLowerCase();if(!G.has(c))return a;if("node"===c)return b.execPath||a;if(!b.execPath)return a;let d=b.dirname(b.execPath);for(let a of"win32"===b.platform?[`${c}.cmd`,`${c}.exe`,c]:[c]){let c=b.joinPath(d,a);if(b.fileExists(c))return c}return a}(b,{execPath:process.execPath,platform:z.platform(),dirname:g.dirname,joinPath:g.join,fileExists:y.existsSync});h!==b&&(Z.debug(`Resolved Node toolchain command "${b}" to absolute path: ${h}`),b=h),Z.debug(`Final command: ${b}`),Z.debug(`Final args: ${JSON.stringify(c)}`);let i=function({command:a,args:b=[],rootPath:c,cwd:d,serverName:e,defaultCwd:f}){let g=c||d||f;return e&&F(a,b)&&(g.split(/[\\/]/).filter(Boolean).pop()||"")===e&&function(a){let b=a.match(/^(.*[\\/])[^\\/]+[\\/]*$/);return b?b[1].replace(/[\\/]+$/,""):""}(g)||g}({command:a.command,args:a.args,rootPath:a.rootPath,cwd:a.cwd,serverName:a.name,defaultCwd:`${o.VL}/${a.name}`}),k=g.isAbsolute(i)?i:g.join((0,j.getDataDir)(),i);Z.debug(`cwd: ${k}`),Z.debug(`env: ${JSON.stringify(a.env)}`);let l=aa(a.env);return Z.verbose("Transformed environment variables",JSON.stringify(l)),{command:b,args:c,env:l,cwd:k}}function ag(a,b){return null!==a.exitCode||null!==a.signalCode?Promise.resolve(!0):new Promise(c=>{let d=()=>{clearTimeout(e),c(!0)},e=setTimeout(()=>{a.removeListener("exit",d),c(!1)},b);e.unref?.(),a.once("exit",d)})}async function ah(a,b,c,d){Z.debug("Entering safelyCloseClient method");let e=d?.gracePeriodMs??15e3,f=d?.killEscalationMs??5e3;try{let c=a.transport?._process;if(c&&"function"==typeof c.kill&&null===c.exitCode&&null===c.signalCode){try{c.stdin&&!c.stdin.destroyed&&(c.stdin.end(),Z.debug(`Closed stdin for graceful shutdown for ${b}`))}catch(a){Z.warn(`Error closing stdin for ${b}:`,a)}let a=await ag(c,e);if(!a){Z.warn(`Process did not exit within ${e}ms after stdin close, sending SIGTERM for ${b}`);try{c.kill("SIGTERM")}catch(a){Z.error(`Error sending SIGTERM for ${b}:`,a)}a=await ag(c,f)}if(a)Z.info(`Process exited gracefully for ${b}`);else{Z.warn(`Process did not respond to SIGTERM, sending SIGKILL for ${b}`);try{c.kill("SIGKILL")}catch(a){Z.error(`Error sending SIGKILL for ${b}:`,a)}}}await a.close(),Z.info(`Client closed successfully for ${b}`)}catch(a){Z.warn(`Error closing client for ${b}:`,a)}}let ai=(0,i.h)("backend/services/mcp/betaClient");async function aj(){try{let a=await (0,r.loadItem)(s.Z.SPEECH_SETTINGS,void 0);return!!a?.experimental?.mcpBetaProtocol}catch(a){return ai.warn("Failed to read mcpBetaProtocol setting; defaulting to disabled",{err:a}),!1}}function ak(a){return!0===a.__flujoBeta}function al(a){let b=N(a),c=U(a),d=!0===a.enableMcpApps,e=new p.Kj({name:`flujo-${a.name}-client`,version:"3.27.0"},{capabilities:{roots:{listChanged:!0},...b?{sampling:{}}:{},...c?{elicitation:{}}:{},...d?{extensions:{[X.OF]:{mimeTypes:[X.cM]}}}:{}},versionNegotiation:{mode:"auto"}});if(e.setRequestHandler("roots/list",(0,H.sG)(a)),b){let b=O(a);e.setRequestHandler("sampling/createMessage",async a=>b(a))}if(c){let b=V(a);e.setRequestHandler("elicitation/create",async a=>b(a))}return e.__flujoBeta=!0,e.__flujoCapKey=Y(a),ai.info(`Created v2-beta MCP client for ${a.name} (version negotiation: auto)`),e}function am(a){let b=a.requestInit&&"object"==typeof a.requestInit?a.requestInit:void 0;if(a.headers&&"object"==typeof a.headers){let c=_(a.headers);Object.keys(c).length>0&&(b={...b||{},headers:{...b?.headers||{},...c}})}return b}function an(a){if("websocket"===a.transport)throw Error("The v2-beta MCP SDK has no websocket transport; use the v1 path");if("streamable"===a.transport){let b={},c=am(a);c&&(b.requestInit=c),a.reconnectionOptions&&"object"==typeof a.reconnectionOptions&&(b.reconnectionOptions=a.reconnectionOptions),"string"==typeof a.sessionId&&a.sessionId.length>0&&(b.sessionId=a.sessionId),(a.oauthClientId||a.oauthClientInformation)&&(b.authProvider=(0,A.C)(a));let d=new p.jS(new URL(a.serverUrl),b);return d.__flujoHttpKey=ac(a),d.__flujoKind="streamable",ai.info(`Created v2-beta streamable transport for ${a.name}`),d}if("sse"===a.transport){let b={},c=am(a);c&&(b.requestInit=c),a.eventSourceInit&&"object"==typeof a.eventSourceInit&&(b.eventSourceInit=a.eventSourceInit);let d=new p.Am(new URL(a.serverUrl),b);return d.__flujoHttpKey=ac(a),d.__flujoKind="sse",ai.info(`Created v2-beta SSE transport for ${a.name}`),d}let{command:b,args:c,env:d,cwd:e}=af(a),f=new q.oQ({command:b,args:c,env:d,cwd:e,stderr:"pipe"});return f.__flujoStdioKey=ab(a),f.__flujoKind="stdio",ai.info(`Created v2-beta stdio transport for ${a.name}`),f}let ao=a=>new Promise(b=>setTimeout(b,a)),ap=(0,i.h)("backend/services/mcp/tools"),aq=0x80000000-1;async function ar(a,b,c="model"){if(ap.debug("Entering listServerTools method"),!a)return ap.warn(`Server ${b} not connected`),{tools:[],error:"Server not connected"};try{ap.info(`Listing tools for server ${b}`);let d=await a.listTools();ap.verbose("Raw response from MCP server:",d);let e=(d.tools||[]).map(a=>({name:a.name,description:a.description||"",inputSchema:a.inputSchema||{},...a.annotations?{annotations:a.annotations}:{},...a._meta?{_meta:a._meta}:{}})),f=(0,X.zm)(e,c);return ap.verbose(`Processed tools for ${c} audience:`,f),{tools:f}}catch(c){ap.warn(`Failed to list tools for server ${b}:`,c);let a=c instanceof Error?c.message:"Unknown error";return{tools:[],error:a.includes("Connection timeout")?a:`Failed to list tools: ${a}`}}}async function as(a,b,c,d,e,f,g,h="host"){if(ap.debug("Entering callTool method"),!a)return ap.warn(`Server ${b} not found`),{success:!1,error:`Server ${b} not found`,statusCode:404};let i=void 0!==e&&e>0?Math.min(1e3*e,aq):aq;try{if("app"===h||"model"===h){let d=await ar(a,b,"all");if(d.error)return{success:!1,error:`Could not verify MCP App access to tool '${c}' on '${b}': ${d.error}`,errorType:"tool-authorization-list",statusCode:502};let e=(0,X.F)(d.tools,b,c,h);if(!e.allowed)return ap.warn(`Rejected ${h} tool call: ${e.error}`),{success:!1,error:e.error,statusCode:e.statusCode}}ap.debug(`Original args for tool ${c}:`,d);let e=await (0,n.resolveGlobalVars)(d),j=function(a,b){if(!a)return{};let c={};for(let d in a){let e=a[d];null==e?(ap.debug(`Normalizing undefined/null value for parameter '${d}' in tool '${b}'`),d.includes("number")||d.endsWith("Count")||d.endsWith("Id")||d.endsWith("Limit")?(c[d]=0,ap.debug(`Using default value 0 for likely number parameter: ${d}`)):d.includes("bool")||d.startsWith("is")||d.startsWith("has")||d.startsWith("should")?(c[d]=!1,ap.debug(`Using default value false for likely boolean parameter: ${d}`)):d.includes("array")||d.endsWith("s")||d.endsWith("List")||d.endsWith("Items")?(c[d]=[],ap.debug(`Using empty array for likely array parameter: ${d}`)):d.includes("object")||d.endsWith("Options")||d.endsWith("Config")||d.endsWith("Settings")?(c[d]={},ap.debug(`Using empty object for likely object parameter: ${d}`)):(c[d]="",ap.debug(`Using empty string for parameter with unknown type: ${d}`))):c[d]=e}return c}("object"==typeof e&&null!==e?e:{},c);ap.debug(`Normalized args for tool ${c}:`,j),ap.debug(`Calling tool ${c} with SDK timeout ${i}ms`);let k={timeout:i,resetTimeoutOnProgress:!0,...g?{signal:g}:{},onprogress:a=>{ap.debug(`Progress for tool ${c}: ${a.progress}${void 0!==a.total?`/${a.total}`:""}${a.message?` — ${a.message}`:""}`),f?.(a)}},l=ak(a)?await a.callTool.call(a,{name:c,arguments:j},k):await a.callTool({name:c,arguments:j},void 0,k);if((0,o.h$)(l)){let d,e=l.task;ap.info(`Tool ${c} on ${b} returned task handle ${e.taskId} (status: ${e.status})`),f?.({progress:0,message:`Task ${e.taskId} created (${e.status})`});let h=Math.min(Math.max(e.pollInterval??5e3,1e3),3e4),j=new Set(["completed","failed","cancelled"]),k=e.status,m=0,n=j.has(k);if("completed"===k)return{success:!0,data:e.result,progressToken:e.taskId};if("failed"===k)return{success:!1,error:e.error??`Task ${e.taskId} failed`,progressToken:e.taskId};let o=()=>(d||(d=(async()=>{try{await a.request({method:"tasks/cancel",params:{taskId:e.taskId}},void 0,{timeout:1e4})}catch(a){ap.warn(`Best-effort cancellation failed for task ${e.taskId}:`,a)}})()),d),p=()=>{o()};g?.addEventListener("abort",p,{once:!0});try{for(;!j.has(k);){if(g?.aborted||(await ao(h),m+=h,g?.aborted))throw await o(),Error(`Tool call cancelled (task ${e.taskId})`);let b=await a.request({method:"tasks/get",params:{taskId:e.taskId}},void 0,{signal:g,timeout:i});if(g?.aborted)throw await o(),Error(`Tool call cancelled (task ${e.taskId})`);let c=b.task;if(k=c.status,n=j.has(k),ap.debug(`Task ${e.taskId} poll: status=${c.status}, elapsed=${m}ms`),f?.({progress:"completed"===c.status?100:Math.min(99,Math.round(m/1e3)),message:`Task ${e.taskId}: ${c.status}`}),"completed"===c.status)return{success:!0,data:c.result,progressToken:e.taskId};if("failed"===c.status)return{success:!1,error:c.error??`Task ${e.taskId} failed`,progressToken:e.taskId}}return{success:!1,error:`Tool '${c}' task ${e.taskId} was cancelled by the server.`,errorType:"cancelled",progressToken:e.taskId}}catch(a){throw n||await o(),a}finally{g?.removeEventListener("abort",p)}}return{success:!0,data:l}}catch(e){ap.warn(`Failed to call tool ${c} on server ${b}:`,e);let a=e instanceof Error?e.message:"Unknown error",d=500;if(g?.aborted)return{success:!1,error:`Tool '${c}' call was cancelled.`,errorType:"cancelled",toolName:c};if(e instanceof m.Nh&&e.code===m.O4.RequestTimeout){let a=Math.round(i/1e3);return ap.warn(`Tool ${c} execution timed out after ${a} seconds`),{success:!1,error:`Tool execution timed out after ${a} seconds`,errorType:"timeout",toolName:c,timeout:a,statusCode:408}}if(a.includes("401")||a.includes("Unauthorized")||a.includes("invalid_token")||a.includes("token_expired"))return ap.info(`OAuth authentication error detected for tool ${c} on server ${b}`),{success:!1,error:"OAuth authentication failed or tokens have expired. Please re-authenticate the server.",statusCode:401,requiresAuthentication:!0};return(a.includes("404")||a.includes("Not Found"))&&(ap.info(`404 error detected for tool ${c} on server ${b} - may indicate OAuth issues`),d=404,a="Tool endpoint not found (404). This may indicate OAuth authentication issues or the server may not be properly configured."),e instanceof m.Nh?(a=`Failed to call tool: ${a} (Code: ${e.code})`,-32601===e.code?d=404:-32602===e.code?d=400:-32603===e.code&&(d=500)):a=`Failed to call tool: ${a}`,{success:!1,error:a,statusCode:d}}}let at=(0,i.h)("backend/services/mcp/resources");async function au(a,b){if(at.debug("Entering listServerResources method"),!a)return at.warn(`Server ${b} not connected`),{resources:[],error:"Server not connected"};try{at.info(`Listing resources for server ${b}`);let c=(await a.listResources()).resources||[];return at.verbose("Processed resources:",c),{resources:c}}catch(c){if(c instanceof m.Nh&&-32601===c.code)return at.debug(`Server ${b} does not support resources/list`),{resources:[]};at.warn(`Failed to list resources for server ${b}:`,c);let a=c instanceof Error?c.message:"Unknown error";return{resources:[],error:a.includes("Connection timeout")?a:`Failed to list resources: ${a}`}}}async function av(a,b){if(at.debug("Entering listServerResourceTemplates method"),!a)return at.warn(`Server ${b} not connected`),{resourceTemplates:[],error:"Server not connected"};try{return at.info(`Listing resource templates for server ${b}`),{resourceTemplates:(await a.listResourceTemplates()).resourceTemplates||[]}}catch(c){if(c instanceof m.Nh&&-32601===c.code)return at.debug(`Server ${b} does not support resources/templates/list`),{resourceTemplates:[]};at.warn(`Failed to list resource templates for server ${b}:`,c);let a=c instanceof Error?c.message:"Unknown error";return{resourceTemplates:[],error:a.includes("Connection timeout")?a:`Failed to list resource templates: ${a}`}}}async function aw(a,b,c){if(at.debug("Entering readResource method"),!a)return at.warn(`Server ${b} not found`),{success:!1,error:`Server ${b} not found`,statusCode:404};try{let d=await (0,n.resolveGlobalVars)(c);at.info(`Reading resource ${d} from server ${b}`);let e=await a.readResource({uri:d});return{success:!0,data:e}}catch(e){at.warn(`Failed to read resource ${c} on server ${b}:`,e);let a=e instanceof Error?e.message:"Unknown error",d=500;return e instanceof m.Nh?(a=`Failed to read resource: ${a} (Code: ${e.code})`,-32601===e.code?d=404:-32602===e.code&&(d=400)):a=`Failed to read resource: ${a}`,{success:!1,error:a,statusCode:d}}}let ax=(0,i.h)("backend/services/mcp/prompts");async function ay(a,b){if(ax.debug("Entering listServerPrompts method"),!a)return ax.warn(`Server ${b} not connected`),{prompts:[],error:"Server not connected"};try{return ax.info(`Listing prompts for server ${b}`),{prompts:(await a.listPrompts()).prompts||[]}}catch(c){if(c instanceof m.Nh&&-32601===c.code)return ax.debug(`Server ${b} does not support prompts/list`),{prompts:[]};ax.warn(`Failed to list prompts for server ${b}:`,c);let a=c instanceof Error?c.message:"Unknown error";return{prompts:[],error:a.includes("Connection timeout")?a:`Failed to list prompts: ${a}`}}}async function az(a,b,c,d){if(ax.debug("Entering getPrompt method"),!a)return ax.warn(`Server ${b} not found`),{success:!1,error:`Server ${b} not found`,statusCode:404};try{let e;if(d&&Object.keys(d).length>0){let a=await (0,n.resolveGlobalVars)(d);e="object"==typeof a&&null!==a?a:void 0}ax.info(`Getting prompt ${c} from server ${b}`);let f=await a.getPrompt({name:c,arguments:e});return{success:!0,data:f}}catch(e){ax.warn(`Failed to get prompt ${c} on server ${b}:`,e);let a=e instanceof Error?e.message:"Unknown error",d=500;return e instanceof m.Nh?(a=`Failed to get prompt: ${a} (Code: ${e.code})`,-32601===e.code?d=404:-32602===e.code&&(d=400)):a=`Failed to get prompt: ${a}`,{success:!1,error:a,statusCode:d}}}var aA=c(40829),aB=c(49680);function aC(a){return"stdio"===a.transport&&F(a.command,a.args??[])}var aD=c(76054);let aE=(0,i.h)("backend/services/mcp/resourceNotifications");var aF=c(81495),aG=c(7658);void 0===global.__mcp_clients&&(global.__mcp_clients=new Map),void 0===global.__mcp_connecting&&(global.__mcp_connecting=new Set),void 0===global.__mcp_starting_up&&(global.__mcp_starting_up=!0),void 0===global.__mcp_active_transports&&(global.__mcp_active_transports=new Map),void 0===global.__mcp_client_generation&&(global.__mcp_client_generation=new Map),void 0===global.__mcp_tool_schema_hash&&(global.__mcp_tool_schema_hash=new Map);let aH=(0,i.h)("backend/services/mcp/index");function aI(a){if("streamable"!==a.transport&&"sse"!==a.transport)return!1;let b=a.headers;return!!b&&Object.entries(b).some(([a,b])=>"authorization"===a.toLowerCase()&&(0,W.at)(b,a).value.trim().length>0)}class aJ{async clearLegacyInferredOAuthScopesForHeaderAuth(a){try{let b=await this.loadServerConfigs();if(!Array.isArray(b))return;let c=b.findIndex(b=>b.name===a);if(-1===c||"streamable"!==b[c].transport)return;let d=b[c];if(!aI(d)||d.oauthScopes?.length!==1||"read"!==d.oauthScopes[0]||d.oauthClientId||d.oauthClientSecret||d.oauthClientMetadata||d.oauthClientInformation||d.oauthTokens||d.oauthCodeVerifier||d.authorizationUrl)return;b[c]={...d,oauthScopes:void 0};let e=await (0,l.q)(new Map(b.map(a=>[a.name,a])));e.success?aH.info(`Removed stale inferred OAuth scopes from header-authenticated server ${a}`):aH.warn(`Failed to remove stale inferred OAuth scopes from ${a}: ${e.error}`)}catch(b){aH.warn(`Failed to clean inferred OAuth scopes for ${a}: ${b instanceof Error?b.message:String(b)}`)}}get clients(){return global.__mcp_clients}get connectingServers(){return global.__mcp_connecting}get activeTransports(){return global.__mcp_active_transports}get clientGenerations(){return global.__mcp_client_generation}get toolSchemaHashes(){return global.__mcp_tool_schema_hash}static{this.MAX_STDERR_LOG_ENTRIES=200}appendStderrLog(a,b){let c=this.stderrLogs.get(a)||[];c.push(b),c.length>aJ.MAX_STDERR_LOG_ENTRIES&&c.splice(0,c.length-aJ.MAX_STDERR_LOG_ENTRIES),this.stderrLogs.set(a,c)}deregisterClient(a){this.clients.delete(a),this.activeTransports.delete(a)}onResourceListChanged(a){let b=this.resourceListVersion.get(a)??0;this.resourceListVersion.set(a,b+1),aH.debug(`onResourceListChanged: server=${a} version=${b+1}`)}onResourceUpdated(a,b){let c=this.pendingResourceUpdates.get(a)??new Set;c.add(b),this.pendingResourceUpdates.set(a,c),aH.debug(`onResourceUpdated: server=${a} uri=${b}`)}getResourceListVersion(a){return this.resourceListVersion.get(a)??0}async subscribeToResource(a,b){try{let c=this.getClient(a);if(!c)return;let d=c.getServerCapabilities?.();if(!d?.resources?.subscribe)return;await c.subscribeResource({uri:b}),aH.debug(`subscribeToResource: server=${a} uri=${b}`)}catch(c){aH.debug(`subscribeToResource: ignored error for ${a}/${b}:`,c)}}clearRetryTimer(a){let b=this.connectionRetryTimers.get(a);b&&(clearTimeout(b),this.connectionRetryTimers.delete(a),aH.debug(`Cleared retry timer for server ${a}`))}scheduleConnectionRetry(a,b){this.clearRetryTimer(a);let c=this.connectionRetryAttempts.get(a)||0;if(c>=5){aH.warn(`Maximum retry attempts (5) reached for server ${a}, stopping retries`),this.connectionRetryAttempts.delete(a);return}let d=Math.min(5e3*Math.pow(2,c),3e5);aH.info(`Scheduling connection retry for server ${a} in ${d}ms (attempt ${c+1}/5)`);let e=setTimeout(async()=>{aH.info(`Attempting to reconnect server ${a} (attempt ${c+1}/5)`);let b=await this.getServerConfig(a);if(!b){aH.info(`Server ${a} configuration not found, stopping retry attempts`),this.connectionRetryAttempts.delete(a);return}if(b.disabled){aH.info(`Server ${a} is now disabled, stopping retry attempts`),this.connectionRetryAttempts.delete(a);return}let d=this.getClient(a);if(d)try{await d.ping({timeout:5e3}),aH.info(`Server ${a} is already connected and responsive, cancelling retry`),this.connectionRetryAttempts.delete(a);return}catch(b){aH.warn(`Server ${a} has a registered client but ping failed (${b instanceof Error?b.message:String(b)}); reconnecting from scratch`)}this.connectionRetryAttempts.set(a,c+1);try{let e=d?await this.forceReconnect(a):await this.connectServer(b);if(e.success)aH.info(`Successfully reconnected server ${a} after ${c+1} attempts`),this.connectionRetryAttempts.delete(a);else{if(aH.warn(`Failed to reconnect server ${a}: ${e.error}`),e.requiresAuthentication){aH.info(`Server ${a} requires authentication, stopping retry attempts`),this.connectionRetryAttempts.delete(a);return}this.scheduleConnectionRetry(a,b)}}catch(c){aH.error(`Error during retry connection for server ${a}:`,c),this.scheduleConnectionRetry(a,b)}},d);this.connectionRetryTimers.set(a,e)}isStartingUp(){return!0===global.__mcp_starting_up}setStartingUp(a){global.__mcp_starting_up=a,aH.info(`Backend startup state set to: ${a?"starting":"complete"}`)}getClientGeneration(a){return this.clientGenerations.get(a)??0}setToolSchemaHash(a,b,c){this.toolSchemaHashes.set(`${a}\0${b}`,c)}getToolSchemaHash(a,b){return this.toolSchemaHashes.get(`${a}\0${b}`)}getClient(a){let b=this.clients.get(a);if(b&&(0,B.wk)(b)){aH.warn(`getClient: client for ${a} has a closed/aborted connection — evicting it`),this.clients.delete(a);return}return aH.debug(`getClient: Looking for client: ${a}`,b?"Found":"Not found"),b}async loadServerConfigs(){aH.debug("loadServerConfigs: Entering method");try{let a=await (0,l.loadServerConfigs)();if(!Array.isArray(a))return aH.warn("loadServerConfigs: Received non-array response",a),a;for(let b of(await (0,aG.XS)())){if(a.some(a=>a.name===b.name)){aH.warn(`loadServerConfigs: A stored server is named "${b.name}" — it shadows FLUJO's built-in server`);continue}a.push(b)}return aH.debug(`loadServerConfigs: Loaded ${a.length} server configs`),a}catch(a){return aH.warn("loadServerConfigs: Failed to load server configs:",a),{success:!1,error:`Failed to load server configs: ${a instanceof Error?a.message:"Unknown error"}`}}}async getServerConfig(a){aH.debug(`getServerConfig: Looking up config for server ${a}`);let b=await this.loadServerConfigs();if(!Array.isArray(b))return aH.warn(`getServerConfig: Failed to load configs for ${a}:`,b.error),null;let c=b.find(b=>b.name===a);return c||(aH.warn(`getServerConfig: Server ${a} not found in configs`),null)}async isServerDisabled(a){let b=await this.getServerConfig(a);return b?.disabled===!0}async isInternalServer(a){if(!(0,aG.Co)(a))return!1;let b=await (0,l.loadServerConfigs)();return!Array.isArray(b)||!b.some(b=>b.name===a)}async connectServer(a){let b="string"==typeof a?a:a.name;if((0,aG.Co)(b)&&("string"!=typeof a?!0===a.builtIn:await this.isInternalServer(b)))return this.connectingServers.delete(b),{success:!0};let c=this.inFlightConnects.get(b);if(c)return aH.debug(`connectServer: reusing in-flight connection attempt for ${b}`),c;let d=this.connectServerInternal(a).finally(()=>{this.inFlightConnects.delete(b)});return this.inFlightConnects.set(b,d),d}async connectServerInternal(a){let b;if("string"==typeof a){aH.info(`connectServer: Looking up config for server ${a}`);let c=await this.getServerConfig(a);if(!c)return aH.warn(`connectServer: Server ${a} not found in configs`),{success:!1,error:`Server configuration for "${a}" not found. The server may have been deleted or not properly configured.`};b=c}else b=a;let c="string"==typeof a?b:await this.getServerConfig(b.name),e=c??b;if((c??b).disabled)return aH.info(`connectServer: Server ${b.name} is disabled — refusing to create a client/transport`),this.clearRetryTimer(b.name),this.connectionRetryAttempts.delete(b.name),{success:!1,error:`Server '${b.name}' is disabled. Enable it on the MCP page to use it.`};let f=(0,d.A)();aH.info(`connectServer: Starting connection for server ${b.name} [RequestID: ${f}]`),this.connectingServers.add(b.name);try{this.stderrLogs.set(b.name,[]),b=await $(b);let a=await aj()&&"websocket"!==b.transport,c=this.clients.get(b.name);if(c){let{needsNewClient:d,reason:e}=function(a,b,c=!1){if(Z.debug("Entering shouldRecreateClient method"),(0,B.wk)(a))return{needsNewClient:!0,reason:"Existing connection is closed"};if((a.__flujoCapKey??"")!==Y(b))return{needsNewClient:!0,reason:"Client capabilities (sampling/elicitation/MCP Apps) changed"};let d=!0===a.__flujoBeta,e=c&&"websocket"!==b.transport;if(d!==e)return{needsNewClient:!0,reason:e?"Beta MCP protocol enabled":"Beta MCP protocol disabled"};if(d){let c=a.transport;if(!c||c.__flujoKind!==b.transport)return{needsNewClient:!0,reason:`Transport type changed to ${b.transport}`};if("stdio"===b.transport){if(c.__flujoStdioKey!==ab(b))return{needsNewClient:!0,reason:"Connection parameters changed"}}else if(c.__flujoHttpKey!==ac(b))return{needsNewClient:!0,reason:`${b.transport} auth/connection parameters changed`};return{needsNewClient:!1}}if("websocket"===b.transport){if(!(a.transport instanceof v.I))return{needsNewClient:!0,reason:"Transport type changed to websocket"}}else if("streamable"===b.transport){if(!(a.transport instanceof w.j))return{needsNewClient:!0,reason:"Transport type changed to streamable"};let c=a.transport,d=c._url?.toString();if(void 0!==d&&d!==new URL(b.serverUrl).toString())return{needsNewClient:!0,reason:"Streamable server URL changed"};let e=c.__flujoHttpKey;if(!e)return{needsNewClient:!0,reason:"Existing streamable transport has no config key"};if(e!==ac(b))return{needsNewClient:!0,reason:"Streamable auth/connection parameters changed"}}else if("sse"===b.transport){if(!(a.transport instanceof x.A))return{needsNewClient:!0,reason:"Transport type changed to sse"};let c=a.transport,d=c._url?.toString();if(void 0!==d&&d!==new URL(b.serverUrl).toString())return{needsNewClient:!0,reason:"SSE server URL changed"};let e=c.__flujoHttpKey;if(!e)return{needsNewClient:!0,reason:"Existing sse transport has no config key"};if(e!==ac(b))return{needsNewClient:!0,reason:"SSE auth/connection parameters changed"}}else{if(!(a.transport instanceof u.oQ))return{needsNewClient:!0,reason:"Transport type changed to stdio"};if("stdio"!==b.transport)return{needsNewClient:!0,reason:"Transport type changed from stdio"};let c=a.transport.__flujoStdioKey;if(!c)return{needsNewClient:!0,reason:"Existing stdio transport has no config key"};if(c!==ab(b))return{needsNewClient:!0,reason:"Connection parameters changed"}}return{needsNewClient:!1}}(c,b,a);if(!d)return aH.info(`connectServer: Server ${b.name} is already connected`),this.lastConnectionError.delete(b.name),this.clearRetryTimer(b.name),this.connectionRetryAttempts.delete(b.name),await this.clearLegacyInferredOAuthScopesForHeaderAuth(b.name),{success:!0};aH.info(`connectServer: Existing client for ${b.name} is stale (${e}), recreating`),this.deregisterClient(b.name);try{await ah(c,b.name,b)}catch(a){aH.debug(`connectServer: error closing stale client for ${b.name}: ${a instanceof Error?a.message:String(a)}`)}c=void 0}c=a?al(b):ad(b);let d=a?an(b):ae(b);if(a){let a=c.setNotificationHandler?.bind(c);a&&(a("notifications/resources/list_changed",()=>{this.onResourceListChanged(b.name)}),a("notifications/resources/updated",a=>{let c=a?.params?.uri;c&&this.onResourceUpdated(b.name,c)}))}else!function(a,b,c,d){try{a.setNotificationHandler(m.hh,a=>{aE.debug(`resourceListChanged notification received for ${b}`),c(b)})}catch(a){aE.warn(`registerResourceNotificationHandlers: failed to register list_changed for ${b}`,a)}if(d)try{a.setNotificationHandler(m.cL,a=>{let c=a.params?.uri;c&&(aE.debug(`resourceUpdated notification received for ${b} uri=${c}`),d(b,c))})}catch(a){aE.warn(`registerResourceNotificationHandlers: failed to register resource_updated for ${b}`,a)}}(c,b.name,a=>this.onResourceListChanged(a),(a,b)=>this.onResourceUpdated(a,b));let e=d.stderr;if(e&&"function"==typeof e.on){let a=b.name;e.on("data",b=>{let c=b.toString();aH.warn(`stderr: [${a}]: ${c}`),this.appendStderrLog(a,c)})}d.onclose=()=>{if(this.activeTransports.get(b.name)!==d)return void aH.debug(`connectServer: ignoring close event from a stale/deregistered transport for ${b.name}`);aH.warn(`connectServer: Connection closed for server ${b.name}`),this.deregisterClient(b.name),this.getServerConfig(b.name).then(a=>{if(!a||a.disabled)return void aH.info(`Server ${b.name} is now disabled, skipping reconnection logic`);aH.info(`Connection closed for enabled server ${b.name}, scheduling reconnection`),this.scheduleConnectionRetry(b.name,a)}).catch(a=>{aH.warn(`Error checking server config for ${b.name} during onclose:`,a)})},d.onerror=a=>{if((0,B.lO)(a))return void aH.debug(`connectServer: transient SSE stream disconnect for ${b.name} (self-healing, ignored): ${a instanceof Error?a.message:String(a)}`);if(this.activeTransports.get(b.name)!==d)return void aH.debug(`connectServer: ignoring error event from a stale/deregistered transport for ${b.name}`);if(aH.error(`connectServer: Transport error for server ${b.name}:`),a instanceof Error){aH.error(`Error name: ${a.name}`),aH.error(`Error message: ${a.message}`),aH.error(`Error stack: ${a.stack}`);let b=a.code;void 0!==b&&aH.error(`Error code: ${b}`),aH.error(`Error chain: ${(0,B.jf)(a)}`)}else if(a&&"object"==typeof a){aH.error(`Error type: ${typeof a}`),aH.error(`Error constructor: ${a.constructor?.name||"Unknown"}`);let b=Object.getOwnPropertyNames(a);b.length>0?(aH.error(`Error properties: ${b.join(", ")}`),b.forEach(b=>{try{let c=a[b];aH.error(`  ${b}: ${"function"==typeof c?"[Function]":JSON.stringify(c)}`)}catch(a){aH.error(`  ${b}: [Unable to serialize: ${a}]`)}})):aH.error("Error object has no enumerable properties");try{let b=JSON.stringify(a);aH.error(`JSON stringified error: ${b}`)}catch(a){aH.error(`Cannot JSON stringify error: ${a}`)}}else aH.error(`Error value: ${String(a)} (type: ${typeof a})`);this.appendStderrLog(b.name,`Transport error: ${(0,B.jf)(a)}`),this.deregisterClient(b.name),this.getServerConfig(b.name).then(a=>{if(!a||a.disabled)return void aH.info(`Server ${b.name} is now disabled, skipping reconnection after transport error`);aH.info(`Transport error for enabled server ${b.name}, scheduling reconnection`),this.scheduleConnectionRetry(b.name,a)}).catch(a=>{aH.warn(`Error checking server config for ${b.name} during onerror:`,a)})},await c.connect(d),this.clients.set(b.name,c),this.activeTransports.set(b.name,d),this.clientGenerations.set(b.name,this.getClientGeneration(b.name)+1),this.lastConnectionError.delete(b.name),this.clearRetryTimer(b.name),this.connectionRetryAttempts.delete(b.name),await this.clearLegacyInferredOAuthScopesForHeaderAuth(b.name);let f=function(a){if(ak(a))try{return a.getNegotiatedProtocolVersion()}catch{return}}(c);return aH.info(`connectServer: Successfully connected to ${b.name}`+(f?` (beta SDK, negotiated MCP protocol ${f})`:"")),{success:!0}}catch(j){let a;aH.error(`connectServer: Failed to connect to server ${b.name}:`,j);let c=j instanceof Error?j.message:String(j),d=(0,B.uP)(j),f=(0,B.Ah)(j),g=aI(e);if(f&&!g&&("streamable"===b.transport||"sse"===b.transport)){let c=b.serverUrl;c&&(a=(await (0,aD.n)(c)).oauthCapable)}if(d||a){if(aH.info(`OAuth authentication error detected for server ${b.name}: ${c}`),"streamable"===b.transport&&a){let a=b;if(!a.oauthScopes||0===a.oauthScopes.length){aH.info(`Dynamically enabling OAuth for server ${b.name} after capability confirmation`);try{let c={...a,oauthScopes:["read"]},d=await this.loadServerConfigs();if(Array.isArray(d)){let a=d.findIndex(a=>a.name===b.name);-1!==a&&(d[a]=c,await (0,l.q)(new Map(d.map(a=>[a.name,a]))),aH.info(`Updated config for ${b.name} to enable OAuth`))}}catch(a){aH.warn(`Failed to update config for ${b.name} to enable OAuth:`,a)}}}return{success:!1,error:"OAuth authentication failed or tokens have expired. Please re-authenticate.",requiresAuthentication:!0,oauthCapable:!0}}if(f)return{success:!1,error:c,requiresAuthentication:!0,oauthCapable:a};let h=this.stderrLogs.get(b.name)||[],i=(0,B.ox)(j,b,h);return this.lastConnectionError.set(b.name,i),{success:!1,error:i}}finally{this.connectingServers.delete(b.name)}}async testConnection(a,b,c){aH.info(`testConnection: Testing connection to ${a.name||"(unnamed)"} via ${a.transport} transport`);let d=a=>{try{b?.(a)}catch{}},e=[],f=null,g=null;try{let b,h=a,i=c?.storedName||a.name;if(("streamable"===a.transport||"sse"===a.transport)&&i){let b=await this.loadServerConfigs(),c=Array.isArray(b)?b.find(a=>a.name===i):void 0,d=c?.headers,e=a.headers;h={...a,headers:(0,W.x0)(e,d)}}let j=await $(h),k=await aj()&&"websocket"!==j.transport;f=k?al(j):ad(j);let l=(g=k?an(j):ae(j)).stderr;l&&"function"==typeof l.on&&l.on("data",a=>{let b=a.toString();e.push(b),d({type:"stderr",data:b})}),g.onerror=a=>{let b=`Transport error: ${(0,B.jf)(a)}`;e.push(b),d({type:"stderr",data:b+"\n"})},d({type:"status",phase:"spawning",message:"Starting server / opening transport..."});let m=aC(a)?9e4:15e3,n=aC(a),o=new Promise((a,c)=>{b=setTimeout(()=>c(Error(`Connection timeout after ${m/1e3}s`+(n?" — the package may still be downloading via npx/uvx. Try running the Test again (the package is cached after the first download), or verify the command and network access.":""))),m)});d({type:"status",phase:"handshaking",message:"Performing MCP handshake..."});try{await Promise.race([f.connect(g),o])}finally{b&&clearTimeout(b)}d({type:"status",phase:"listing-tools",message:"Handshake OK — listing tools..."});let p=0;try{let a=await f.listTools();p=Array.isArray(a?.tools)?a.tools.length:0}catch(b){aH.debug(`testConnection: connected to ${a.name} but listTools failed: ${b instanceof Error?b.message:String(b)}`)}return aH.info(`testConnection: Successfully connected to ${a.name} (${p} tools)`),d({type:"result",success:!0,data:{toolCount:p}}),{success:!0,data:{toolCount:p}}}catch(g){let b;aH.warn(`testConnection: Failed to connect to ${a.name}:`,g);let c=(0,B.Ah)(g);if(c&&("streamable"===a.transport||"sse"===a.transport)){let c=a.serverUrl;c&&(b=(await (0,aD.n)(c)).oauthCapable)}let f=(0,B.ox)(g,a,e);return d({type:"result",success:!1,error:f,requiresAuthentication:c,oauthCapable:b}),{success:!1,error:f,requiresAuthentication:c,oauthCapable:b}}finally{if(f)try{await ah(f,a.name,a,{gracePeriodMs:3e3,killEscalationMs:2e3})}catch(b){aH.debug(`testConnection: error closing test client for ${a.name}: ${b instanceof Error?b.message:String(b)}`)}}}setNodeRoots(a,b,c){for(let d of(0,H.eS)(a,b,c))this.notifyRootsChanged(d)}notifyRootsChanged(a){let b=this.getClient(a);if(!b)return void aH.debug(`notifyRootsChanged: ${a} not connected, skipping notification`);try{b.sendRootsListChanged().catch(b=>{aH.warn(`notifyRootsChanged: failed to notify ${a}:`,b)}),aH.debug(`notifyRootsChanged: sent roots/list_changed to ${a}`)}catch(b){aH.warn(`notifyRootsChanged: failed to notify ${a}:`,b)}}async disconnectServer(a){if(aH.debug(`disconnectServer: Entering method for server ${a}`),await this.isInternalServer(a))return{success:!0};this.clearRetryTimer(a),this.connectionRetryAttempts.delete(a);let b=this.getClient(a);if(!b)return aH.warn(`disconnectServer: Server ${a} not found in clients map`),this.deregisterClient(a),{success:!1,error:`Server ${a} not found`};this.deregisterClient(a);try{let c=await this.getServerConfig(a);return await ah(b,a,c||void 0),aH.info(`disconnectServer: Disconnected server ${a}`),{success:!0}}catch(b){return aH.warn(`disconnectServer: Failed to disconnect server ${a}:`,b),{success:!1,error:`Failed to disconnect server: ${b instanceof Error?b.message:"Unknown error"}`}}}async forceReconnect(a){if(aH.info(`forceReconnect: Forcing fresh connection for server ${a}`),await this.isInternalServer(a))return{success:!0};let b=this.clients.get(a);if(b){this.deregisterClient(a);let c=await this.getServerConfig(a);try{await ah(b,a,c||void 0)}catch(b){aH.debug(`forceReconnect: error closing stale client for ${a}: ${b instanceof Error?b.message:String(b)}`)}}return this.connectServer(a)}async listServerTools(a,b="model"){if(aH.debug(`listServerTools: Entering method for server ${a}, audience ${b}`),await this.isInternalServer(a)){if(await this.isServerDisabled(a)){let b=`Server '${a}' is disabled. Enable it on the MCP page to use it.`;return aH.warn(`listServerTools: ${b}`),{tools:[],error:b}}let{internalToolDefinitionsFor:d}=await c.e(5463).then(c.bind(c,25463)),e=await d(a);return{tools:(0,X.zm)(e,b)}}if(await this.isServerDisabled(a)){let b=`Server '${a}' is disabled. Enable it on the MCP page to use it.`;return aH.warn(`listServerTools: ${b}`),{tools:[],error:b}}let d=this.getClient(a);d||aH.warn(`listServerTools: Client not found for ${a}`);let e=await ar(d,a,b);if(e.error){aH.warn(`listServerTools: Listing tools for ${a} failed (${e.error}); forcing reconnect and retrying once`);let c=await this.forceReconnect(a);if(!c.success)return aH.warn(`listServerTools: Reconnect for ${a} failed: ${c.error}`),{tools:[],error:c.error||e.error};d=this.clients.get(a),(e=await ar(d,a,b)).error?aH.warn(`listServerTools: Retry after reconnect still failed for ${a}:`,e.error):aH.info(`listServerTools: Recovered after reconnect for ${a}; listed ${e.tools.length} tools`)}else aH.info(`listServerTools: Listed ${e.tools.length} tools for ${a}`);return e}async callTool(a,b,d,e,f,g,h,i="host"){if(aH.debug(`callTool: Entering method for server ${a}, tool ${b}, source ${i}`),await this.isInternalServer(a)){if(await this.isServerDisabled(a)){let b=`Server '${a}' is disabled. Enable it on the MCP page to use it.`;return aH.warn(`callTool: ${b}`),{success:!1,error:b}}let{internalCallToolFor:e,internalToolDefinitionsFor:f}=await c.e(5463).then(c.bind(c,25463));if("app"===i||"model"===i){let c=await f(a),d=(0,X.F)(c,a,b,i);if(!d.allowed)return aH.warn(`callTool: Rejected ${i} call to built-in tool: ${d.error}`),{success:!1,error:d.error,statusCode:d.statusCode}}let h=await e(this,a,b,d,g,i);return aH.info(`callTool: Dispatched internal tool ${b} on ${a}`),{success:!0,data:h}}if(await this.isServerDisabled(a)){let b=`Server '${a}' is disabled. Enable it on the MCP page to use it.`;return aH.warn(`callTool: ${b}`),{success:!1,error:b}}let j=this.getClient(a);if(!j){aH.warn(`callTool: No client for ${a}; forcing reconnect before calling ${b}`);let c=await this.forceReconnect(a);c.success?j=this.clients.get(a):aH.warn(`callTool: Reconnect for ${a} failed: ${c.error}`)}let k=await as(j,a,b,d,e,f,h,i);return aH.info(`callTool: Called tool ${b} on ${a}`),k}async callToolFromApp(a,b,c,d,e){let f=await this.checkMcpAppAccess(a);if(f)return f;let g=await this.callTool(a,b,c,d,void 0,void 0,e,"app");if("tool-authorization-list"!==g.errorType)return g;aH.warn(`callToolFromApp: visibility lookup failed for ${a}/${b}; reconnecting and retrying once before dispatch`);let h=await this.forceReconnect(a);return h.success?g=await this.callTool(a,b,c,d,void 0,void 0,e,"app"):{success:!1,error:h.error||g.error,statusCode:g.statusCode}}async isMcpAppAccessEnabled(a){let b=await this.isInternalServer(a),c=await this.getServerConfig(a);return c?.disabled!==!0&&(!!b||c?.enableMcpApps===!0)}async checkMcpAppAccess(a){if(await this.isMcpAppAccessEnabled(a))return null;let b=`MCP Apps are not enabled for server '${a}'. Enable them on the MCP page before opening or using this app.`;return aH.warn(`MCP App access denied: ${b}`),{success:!1,error:b,statusCode:403}}async readResourceFromApp(a,b){let c=await this.checkMcpAppAccess(a);return c||this.readResource(a,b)}async listWithReconnect(a,b,c){if(await this.isInternalServer(a))return c;if(await this.isServerDisabled(a)){let b=`Server '${a}' is disabled. Enable it on the MCP page to use it.`;return aH.warn(`listWithReconnect: ${b}`),{...c,error:b}}let d=this.getClient(a);d||aH.warn(`listWithReconnect: Client not found for ${a}`);let e=await b(d,a);if(!e.error)return e;aH.warn(`listWithReconnect: Listing for ${a} failed (${e.error}); forcing reconnect and retrying once`);let f=await this.forceReconnect(a);return f.success?(d=this.clients.get(a),(e=await b(d,a)).error?aH.warn(`listWithReconnect: Retry after reconnect still failed for ${a}:`,e.error):aH.info(`listWithReconnect: Recovered after reconnect for ${a}`),e):(aH.warn(`listWithReconnect: Reconnect for ${a} failed: ${f.error}`),{...c,error:f.error||e.error})}async listServerResources(a){if(aH.debug(`listServerResources: Entering method for server ${a}`),a===aF._&&await this.isInternalServer(a)){let{internalListResources:a}=await c.e(8001).then(c.bind(c,28001));return a()}if(a===aG.K3){let{filesystemListResources:a}=await c.e(793).then(c.bind(c,10793));return a()}return this.listWithReconnect(a,au,{resources:[]})}async listServerResourceTemplates(a){if(aH.debug(`listServerResourceTemplates: Entering method for server ${a}`),a===aF._&&await this.isInternalServer(a)){let{internalListResourceTemplates:a}=await c.e(8001).then(c.bind(c,28001));return a()}return this.listWithReconnect(a,av,{resourceTemplates:[]})}async readResource(a,b){if(aH.debug(`readResource: Entering method for server ${a}, uri ${b}`),a===aF._&&await this.isInternalServer(a)){let{internalReadResource:a}=await c.e(8001).then(c.bind(c,28001));return a(b)}if(a===aG.K3){let{filesystemReadResource:a,isFilesystemAppUri:d,isTouchedFileUri:e,readTouchedFileResource:f}=await c.e(793).then(c.bind(c,10793));if(d(b))return a(b);if(e(b))return f(b)}let d=this.getClient(a);d||aH.warn(`readResource: Client not found for ${a}`);let e=await aw(d,a,b);return aH.info(`readResource: Read resource ${b} on ${a}`),e}async listServerPrompts(a){return aH.debug(`listServerPrompts: Entering method for server ${a}`),this.listWithReconnect(a,ay,{prompts:[]})}async getPrompt(a,b,c){aH.debug(`getPrompt: Entering method for server ${a}, prompt ${b}`);let d=this.getClient(a);d||aH.warn(`getPrompt: Client not found for ${a}`);let e=await az(d,a,b,c);return aH.info(`getPrompt: Got prompt ${b} on ${a}`),e}async resolveOAuthSecretForSave(a,b){return a===aB.RJ?b??"":a?a.startsWith("${global:")||a.startsWith("encrypted:")||a.startsWith("encrypted_failed:")?a:await (0,aA.Rs)(a):""}async resolveHeadersForSave(a,b){let c={};for(let[d,e]of Object.entries(a||{})){if(!d)continue;let{value:a,isSecret:f}=(0,W.at)(e,d);if(!f){""!==a&&(c[d]={value:a,metadata:{isSecret:!1}});continue}if((0,W.uh)(a)){let a=b?.[d];void 0!==a&&(c[d]=a);continue}if(a){if((0,W.T6)(a)||a.startsWith("encrypted:")||a.startsWith("encrypted_failed:")){c[d]={value:a,metadata:{isSecret:!0}};continue}c[d]={value:await (0,aA.Rs)(a),metadata:{isSecret:!0}}}}return c}async ensureRemoteServerRootDir(a){try{if(!["streamable","sse","websocket"].includes(a.transport))return;let b=(a.rootPath||"").trim();if(!b)return;let c=h().resolve((0,j.getDataDir)(),b);if(h().dirname(c)===c)return;await f().mkdir(c,{recursive:!0}),aH.debug(`ensureRemoteServerRootDir: ensured ${c} for ${a.name}`)}catch(b){aH.warn(`ensureRemoteServerRootDir: could not create root dir for ${a.name}:`,b)}}async updateServerConfig(a,b){if(aH.debug(`updateServerConfig: Entering method for server ${a}`),await this.isInternalServer(a)){let c=Object.keys(b).filter(a=>"name"!==a),d=void 0===b.name||b.name===a,e=c.length>0&&c.every(a=>"disabled"===a)&&"boolean"==typeof b.disabled&&d,f=(a===aG.K3||a===aG.PA)&&c.length>0&&c.every(a=>"roots"===a)&&Array.isArray(b.roots)&&d;if(e){await (0,aG.LV)(a,b.disabled),aH.info(`updateServerConfig: Toggled built-in server ${a} disabled=${b.disabled}`);let c=await this.loadServerConfigs();return(Array.isArray(c)?c.find(b=>b.name===a):void 0)??{success:!0}}if(f){await (0,aG.Eu)(a,b.roots),aH.info(`updateServerConfig: Set built-in ${a} roots (${b.roots.length})`);let c=await this.loadServerConfigs();return(Array.isArray(c)?c.find(b=>b.name===a):void 0)??{success:!0}}return{success:!1,error:`"${a}" is a FLUJO built-in server: only enabling/disabling it is allowed, not editing.`}}let c=await this.loadServerConfigs();if(!Array.isArray(c))return aH.warn("updateServerConfig: Failed to load configs:",c.error),c;let d=c.find(b=>b.name===a),e=!!d&&"string"==typeof b.name&&b.name!==a;if(e&&c.some(a=>a.name===b.name))return aH.warn(`updateServerConfig: Refusing to rename ${a} -> ${b.name}: name already in use`),{success:!1,error:`A server named "${b.name}" already exists`};if(!d&&b.name)aH.info(`updateServerConfig: Creating new server config for ${b.name}`),d={name:b.name,transport:"stdio",command:"",args:[],env:{},disabled:!1,autoApprove:[],_buildCommand:"",_installCommand:"",rootPath:""},c.push(d);else if(!d)return aH.warn(`updateServerConfig: Server ${a} not found`),{success:!1,error:`Server ${a} not found`};let f=b.oauthClientSecret;if(void 0!==f){let a=d.oauthClientSecret;b.oauthClientSecret=await this.resolveOAuthSecretForSave(f,a)}let g=b.headers;if(void 0!==g){let a=d.headers;b.headers=await this.resolveHeadersForSave(g,a)}let h={...d};h={...d,...b};let i=JSON.stringify(d.roots??[])!==JSON.stringify(h.roots??[])||(d.rootPath??"")!==(h.rootPath??""),j=c.findIndex(b=>b.name===a);-1!==j?c[j]=h:h.name&&c.push(h);let k=await (0,l.q)(new Map(c.map(a=>[a.name,a])));return k.success?(await this.ensureRemoteServerRootDir(h),e?(this.clients.has(a)?await this.disconnectServer(a):(this.clearRetryTimer(a),this.connectionRetryAttempts.delete(a)),this.stderrLogs.delete(a),this.lastConnectionError.delete(a),await this.handleConnectionStateChange(h.name,h)):await this.handleConnectionStateChange(a,h),i&&this.notifyRootsChanged(h.name),aH.info(`updateServerConfig: Successfully updated config for ${a}${e?` (renamed to ${h.name})`:""}`),h):(aH.warn(`updateServerConfig: Failed to save config for ${a}:`,k.error),k)}async handleConnectionStateChange(a,b){aH.debug(`handleConnectionStateChange: Entering method for server ${a}`);let c=!!this.getClient(a),d=!b.disabled;if(c&&!d){aH.info(`handleConnectionStateChange: Disconnecting disabled server ${a}`);try{await this.disconnectServer(a)}catch(b){aH.warn(`handleConnectionStateChange: Failed to disconnect server ${a} during update:`,b)}}else!c&&d?(aH.info(`handleConnectionStateChange: Connecting previously disabled server ${a}`),await this.connectServer(b)):c&&d?(aH.info(`handleConnectionStateChange: Re-applying config to connected server ${a}`),await this.connectServer(b)):d||(aH.info(`handleConnectionStateChange: Clearing retry timers for disabled server ${a}`),this.clearRetryTimer(a),this.connectionRetryAttempts.delete(a))}async clearRetryTimersForDisabledServers(){aH.debug("clearRetryTimersForDisabledServers: Checking for disabled servers with active retry timers");try{let a=await this.loadServerConfigs();if(!Array.isArray(a))return void aH.warn("clearRetryTimersForDisabledServers: Failed to load server configs");for(let b of a.filter(a=>a.disabled))this.connectionRetryTimers.has(b.name)&&(aH.info(`clearRetryTimersForDisabledServers: Clearing retry timer for disabled server ${b.name}`),this.clearRetryTimer(b.name),this.connectionRetryAttempts.delete(b.name))}catch(a){aH.error("clearRetryTimersForDisabledServers: Error clearing retry timers:",a)}}async deleteServerConfig(a){if(aH.debug(`deleteServerConfig: Entering method for server ${a}`),await this.isInternalServer(a))return{success:!1,error:`"${aF._}" is FLUJO's built-in server and cannot be deleted.`};this.clients.has(a)&&(aH.info(`deleteServerConfig: Disconnecting server ${a} before deletion`),await this.disconnectServer(a));let b=await this.loadServerConfigs();if(!Array.isArray(b))return aH.warn("deleteServerConfig: Failed to load configs:",b.error),b;let c=b.findIndex(b=>b.name===a);if(-1===c)return aH.warn(`deleteServerConfig: Server ${a} not found in configs`),{success:!1,error:`Server ${a} not found`};b.splice(c,1),aH.debug(`deleteServerConfig: Saving updated configs after deleting ${a}`);let d=await (0,l.q)(new Map(b.map(a=>[a.name,a])));return d.success?aH.info(`deleteServerConfig: Successfully deleted server ${a}`):aH.warn(`deleteServerConfig: Error saving configs after deleting ${a}:`,d.error),d}async getServerStatus(a){if(await this.isInternalServer(a))return await this.isServerDisabled(a)?{status:"disconnected"}:{status:"connected"};let b=await this.getServerConfig(a);if(!b)return aH.warn(`getServerStatus: Server ${a} not found`),{status:"error",message:`Server ${a} configuration not found. The server may have been deleted or not properly configured.`};if(b.disabled)return aH.debug(`getServerStatus: Server ${a} is disabled`),{status:"disconnected"};let c=!!this.getClient(a);if("streamable"===b.transport&&!c&&b.oauthScopes&&b.oauthScopes.length>0){if(!b.oauthTokens||!b.oauthTokens.access_token)return aH.info(`getServerStatus: Server ${a} requires OAuth authentication but has no valid tokens`),{status:"requires_authentication",message:"OAuth authentication required. Click the authenticate button to complete the OAuth flow."};if(!b.oauthTokens.refresh_token&&b.oauthTokens.expires_in&&b.oauthTokens.issued_at){let c=b.oauthTokens.issued_at,d=b.oauthTokens.expires_in;if(Math.floor(Date.now()/1e3)>=c+d)return aH.info(`getServerStatus: OAuth tokens for ${a} have expired and no refresh token is available`),{status:"requires_authentication",message:"OAuth tokens have expired. Please re-authenticate."}}}let d=(this.stderrLogs.get(a)||[]).join("\n").trim(),e=this.lastConnectionError.get(a);if(c||this.getClient(a))return aH.info(`getServerStatus: Server ${a} is connected`),{status:"connected",stderrOutput:d||void 0};{let b=this.isStartingUp()&&!this.lastConnectionError.has(a);if(this.connectingServers.has(a)||b)return aH.info(`getServerStatus: Server ${a} is still connecting`),{status:"connecting",message:"Server is starting up. This may take a few moments."};if(d&&(d.includes("OAuth authentication required")||d.includes("invalid_token")))return aH.info(`getServerStatus: OAuth authentication error detected for ${a}`),{status:"requires_authentication",message:"OAuth authentication required. Please complete the OAuth flow.",stderrOutput:d};let c=d||e;return c?(aH.info(`getServerStatus: Using ${d?"stderr output":"persisted connection error"} as error message for ${a}`),{status:"error",message:c,stderrOutput:d||void 0}):(aH.info(`getServerStatus: No specific error details available for ${a}`),{status:"error",message:`Server ${a} is configured but not connected. The server process may have crashed or been terminated.`,stderrOutput:void 0})}}async startEnabledServers(){aH.info("Starting all enabled servers"),this.setStartingUp(!0);try{await this.clearRetryTimersForDisabledServers();let a=await this.loadServerConfigs();if(!Array.isArray(a))return void aH.warn("Failed to load server configs, cannot start servers");let b=a.filter(a=>!a.disabled);aH.info(`Found ${b.length} enabled servers to start`),aH.debug(`${b}`),b.forEach(a=>this.connectingServers.add(a.name));let c=Math.max(1,Number(process.env.FLUJO_MCP_BOOT_CONCURRENCY)||2);aH.info(`Connecting ${b.length} enabled servers with boot concurrency ${c}`),await (0,k.P)(b,c,async a=>{aH.info(`Starting server: ${a.name}`),await this.connectServer(a).catch(b=>{aH.error(`Failed to start server ${a.name}:`,b)})})}finally{this.setStartingUp(!1)}}async getAvailableClients(){try{let a=await this.loadServerConfigs();if(!a||"error"in a)return aH.warn("getAvailableClients: Failed to load server configs:",a?.error),[];return(await Promise.all(a.map(async a=>{try{let b=await this.getServerStatus(a.name);return{name:a.name,status:"string"==typeof b?b:b.status,connected:"string"==typeof b?"connected"===b:"connected"===b.status}}catch(b){return aH.warn(`getAvailableClients: Error getting status for ${a.name}:`,b),{name:a.name,status:"error",connected:!1}}}))).map(a=>`${a.name} (${a.status})`)}catch(a){return aH.error("getAvailableClients: Error getting available clients:",a),[]}}constructor(){this.stderrLogs=new Map,this.lastConnectionError=new Map,this.inFlightConnects=new Map,this.connectionRetryTimers=new Map,this.connectionRetryAttempts=new Map,this.resourceListVersion=new Map,this.pendingResourceUpdates=new Map}}let aK=new aJ},60724:(a,b,c)=>{"use strict";c.d(b,{h:()=>k});var d=c(87821),e=c(20433),f=c(60453),g=c(50846),h=c(65007);let i=(0,g.h)("backend/utils/PromptRenderer");class j{async renderPrompt(a,b,c){let d=c?.renderMode||"rendered",e=c?.includeConversationHistory||!1;i.info(`Rendering prompt for node ${b} in flow ${a}`,{renderMode:d,includeConversationHistory:e});let{prompt:f,excludeModelPrompt:g,excludeStartNodePrompt:h,excludeSystemPrompt:j}=await this.findNodePrompt(b,a),k=c?.excludeModelPrompt!==void 0?c?.excludeModelPrompt:g,l=c?.excludeStartNodePrompt!==void 0?c?.excludeStartNodePrompt:h,m=c?.excludeSystemPrompt!==void 0?c?.excludeSystemPrompt:j;i.debug("Exclusion settings",{excludeModelPrompt:k,excludeStartNodePrompt:l,excludeSystemPrompt:m,fromOptions:{excludeModelPrompt:c?.excludeModelPrompt!==void 0,excludeStartNodePrompt:c?.excludeStartNodePrompt!==void 0,excludeSystemPrompt:c?.excludeSystemPrompt!==void 0}});let n="",o=null;if(!l){let b=await this.findStartNodePrompt(a);b&&(i.debug("Adding start node prompt",{length:b.length}),n+=b+"\n\n")}if(!k){let c=await this.findModelPrompt(b,a);c.prompt&&(i.debug("Adding model prompt",{modelId:c.modelId,length:c.prompt.length}),n+=c.prompt+"\n\n"),o=c.functionCallingSchema,c.reasoningSchema&&(n+=`Please use the following pattern to mark your reasoning: ${c.reasoningSchema}
 
 `),o&&(n+=`Please use the following pattern to use a tool: ${o}