libre-webui 0.25.0 → 0.27.0

package/backend/dist/services/notificationService.js

@@ -0,0 +1,340 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Durable in-app notifications and outbound webhooks (NOTIFY-01).
+ *
+ * Notifications are SQL rows first (encrypted title/body, per-user cap,
+ * source-key deduplication) and only then fanned out: live delivery rides
+ * the per-user durable event stream `notify:<userId>`, and admin-managed
+ * webhook targets receive a redacted envelope through durable delivery
+ * jobs with bounded retries. Webhook payloads never include notification
+ * bodies, and targets pass the same egress guard as tool servers, so a
+ * webhook cannot be pointed at private infrastructure.
+ */
+import { createHmac, randomUUID } from 'node:crypto';
+import { isIP } from 'node:net';
+import { getPersistence } from '../persistence/index.js';
+import { PersistenceResourceLimitError, } from '../persistence/resourceTypes.js';
+import { encryptionService } from './encryptionService.js';
+import { getDurableEventGateway } from '../platform/events/index.js';
+import { notificationEventStreamId, PUSH_DELIVER_IDEMPOTENCY_SCOPE, PUSH_DELIVER_JOB_TYPE, WEBHOOK_DELIVER_IDEMPOTENCY_SCOPE, WEBHOOK_DELIVER_JOB_TYPE, } from '../platform/jobs/domainJobContracts.js';
+import { getDurableJobRuntime } from '../platform/jobs/durableJobRuntime.js';
+import { isAllowlistedPrivateHost, validateToolServerUrl, } from '../utils/toolEgress.js';
+import { isPublicIpAddress } from '../utils/webpageFetcher.js';
+import { createLogger } from '../utils/logger.js';
+import { MAX_NOTIFICATION_BODY_LENGTH, MAX_NOTIFICATION_PAGE_SIZE, MAX_NOTIFICATION_TITLE_LENGTH, MAX_NOTIFICATIONS_PER_USER, MAX_WEBHOOK_NAME_LENGTH, MAX_WEBHOOK_SECRET_LENGTH, MAX_WEBHOOK_TARGETS, MAX_WEBHOOK_URL_LENGTH, } from '../utils/resourceLimits.js';
+const logger = createLogger('notifications');
+export class NotificationError extends Error {
+    constructor(message, statusCode) {
+        super(message);
+        this.statusCode = statusCode;
+        this.name = 'NotificationError';
+    }
+}
+const NOTIFICATION_TYPES = [
+    'channel-mention',
+    'channel-dm',
+    'channel-invite',
+    'share',
+    'automation-failed',
+    'calendar-reminder',
+    'media-ready',
+    'media-failed',
+    'budget-alert',
+    'system',
+];
+const isNotificationType = (value) => NOTIFICATION_TYPES.includes(value);
+const repositories = () => getPersistence(encryptionService).repositories.resources;
+const decryptOptional = (value) => {
+    if (!value)
+        return undefined;
+    try {
+        return encryptionService.decrypt(value);
+    }
+    catch {
+        return undefined;
+    }
+};
+const mapNotification = (row) => ({
+    id: row.id,
+    type: isNotificationType(row.type) ? row.type : 'system',
+    title: decryptOptional(row.title) ?? '',
+    ...(row.body ? { body: decryptOptional(row.body) } : {}),
+    ...(row.href ? { href: row.href } : {}),
+    createdAt: row.created_at,
+    ...(row.read_at ? { readAt: row.read_at } : {}),
+});
+const mapWebhookTarget = (row) => ({
+    id: row.id,
+    name: row.name,
+    url: row.url,
+    hasSecret: Boolean(row.secret),
+    events: parseEvents(row.events),
+    enabled: row.enabled === 1,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at,
+});
+const parseEvents = (value) => {
+    try {
+        const decoded = JSON.parse(value);
+        return Array.isArray(decoded)
+            ? decoded.filter((entry) => typeof entry === 'string')
+            : [];
+    }
+    catch {
+        return [];
+    }
+};
+class NotificationService {
+    /**
+     * Persists the notification (deduplicated by source key), then fans it
+     * out live and to subscribed webhooks. Fan-out is best effort — the SQL
+     * row is the source of truth for the bell.
+     */
+    async publish(input) {
+        if (!input.title.trim())
+            return false;
+        const record = {
+            id: randomUUID(),
+            user_id: input.userId,
+            type: input.type,
+            title: encryptionService.encrypt(input.title.slice(0, MAX_NOTIFICATION_TITLE_LENGTH)),
+            body: input.body
+                ? encryptionService.encrypt(input.body.slice(0, MAX_NOTIFICATION_BODY_LENGTH))
+                : null,
+            href: input.href ?? null,
+            source_key: input.sourceKey ?? null,
+            created_at: Date.now(),
+            read_at: null,
+        };
+        const inserted = await repositories().notifications.insertWithLimit(record, MAX_NOTIFICATIONS_PER_USER);
+        if (!inserted)
+            return false;
+        try {
+            await getDurableEventGateway().append({
+                eventId: randomUUID(),
+                streamId: notificationEventStreamId(input.userId),
+                eventType: 'notify.item.v1',
+                subjectId: record.id,
+                actorUserId: input.userId,
+                payload: {
+                    mode: 'encrypted',
+                    value: {
+                        type: 'notification',
+                        notification: mapNotification(record),
+                    },
+                },
+            });
+        }
+        catch (error) {
+            logger.warn('Notification fan-out failed; the bell recovers on read', {
+                error,
+            });
+        }
+        await this.dispatchWebhooks(record).catch(error => {
+            logger.warn('Webhook dispatch failed', { error });
+        });
+        await this.dispatchPush(record).catch(error => {
+            logger.warn('Push dispatch failed', { error });
+        });
+        return true;
+    }
+    /**
+     * Enqueues one durable Web Push delivery per registered browser device.
+     * Best effort like webhooks: the inbox row is already the source of truth.
+     */
+    async dispatchPush(record) {
+        const subscriptions = await repositories().pushSubscriptions.listByUser(record.user_id);
+        if (subscriptions.length === 0)
+            return;
+        const message = {
+            title: decryptOptional(record.title) ?? '',
+            ...(record.body ? { body: decryptOptional(record.body) } : {}),
+            ...(record.href ? { href: record.href } : {}),
+            type: record.type,
+        };
+        const service = getDurableJobRuntime().service;
+        for (const subscription of subscriptions) {
+            await service.enqueue({
+                jobType: PUSH_DELIVER_JOB_TYPE,
+                actorUserId: record.user_id,
+                payload: {
+                    mode: 'encrypted',
+                    value: { subscriptionId: subscription.id, message },
+                },
+                idempotencyScope: PUSH_DELIVER_IDEMPOTENCY_SCOPE,
+                idempotencyKey: `${subscription.id}:${record.id}`,
+                maxAttempts: 3,
+            });
+        }
+    }
+    async list(userId, options) {
+        const limit = Math.min(Math.max(options.limit ?? 50, 1), MAX_NOTIFICATION_PAGE_SIZE);
+        const rows = await repositories().notifications.listByOwner(userId, {
+            ...(options.before !== undefined ? { before: options.before } : {}),
+            limit,
+            ...(options.unreadOnly ? { unreadOnly: true } : {}),
+        });
+        return rows.map(mapNotification);
+    }
+    async countUnread(userId) {
+        return repositories().notifications.countUnread(userId);
+    }
+    async markRead(userId, notificationId) {
+        return repositories().notifications.markRead(notificationId, userId, Date.now());
+    }
+    async markAllRead(userId) {
+        return repositories().notifications.markAllRead(userId, Date.now());
+    }
+    async delete(userId, notificationId) {
+        return repositories().notifications.deleteByOwner(notificationId, userId);
+    }
+    /**
+     * Enqueues one durable delivery per enabled target subscribed to this
+     * notification type. The webhook envelope is redacted: type, title, and
+     * identifiers only — never the notification body.
+     */
+    async dispatchWebhooks(record) {
+        const targets = await repositories().webhookTargets.list(MAX_WEBHOOK_TARGETS);
+        const subscribed = targets.filter(target => {
+            if (target.enabled !== 1)
+                return false;
+            const events = parseEvents(target.events);
+            return events.includes('*') || events.includes(record.type);
+        });
+        if (subscribed.length === 0)
+            return;
+        const service = getDurableJobRuntime().service;
+        for (const target of subscribed) {
+            await service.enqueue({
+                jobType: WEBHOOK_DELIVER_JOB_TYPE,
+                actorUserId: record.user_id,
+                payload: {
+                    mode: 'encrypted',
+                    value: {
+                        targetId: target.id,
+                        event: {
+                            event: 'notification.created',
+                            notificationId: record.id,
+                            notificationType: record.type,
+                            title: decryptOptional(record.title) ?? '',
+                            userId: record.user_id,
+                            createdAt: record.created_at,
+                        },
+                    },
+                },
+                idempotencyScope: WEBHOOK_DELIVER_IDEMPOTENCY_SCOPE,
+                idempotencyKey: `${target.id}:${record.id}`,
+                maxAttempts: 5,
+            });
+        }
+    }
+    // ------------------------------------------------------------------
+    // Admin-managed webhook targets
+    // ------------------------------------------------------------------
+    async listWebhookTargets() {
+        const rows = await repositories().webhookTargets.list(MAX_WEBHOOK_TARGETS);
+        return rows.map(mapWebhookTarget);
+    }
+    async saveWebhookTarget(actorUserId, input) {
+        const name = (input.name ?? '').trim();
+        if (!name || name.length > MAX_WEBHOOK_NAME_LENGTH) {
+            throw new NotificationError('Webhook name is required', 400);
+        }
+        if (!input.url || input.url.length > MAX_WEBHOOK_URL_LENGTH) {
+            throw new NotificationError('Webhook URL is required', 400);
+        }
+        // The same egress contract as tool servers: exact destination, no
+        // private or link-local addresses unless explicitly allowlisted. IP
+        // literals fail fast here; hostnames are re-resolved and re-checked on
+        // every delivery, which is the defense that matters against rebinding.
+        const url = validateToolServerUrl(input.url);
+        const literalHost = url.hostname.replace(/^\[|\]$/g, '');
+        if (isIP(literalHost) !== 0 &&
+            !isAllowlistedPrivateHost(url.hostname) &&
+            !isPublicIpAddress(literalHost)) {
+            throw new NotificationError('Webhook URLs cannot target private or local addresses', 400);
+        }
+        if ((input.secret?.length ?? 0) > MAX_WEBHOOK_SECRET_LENGTH) {
+            throw new NotificationError('Webhook secret is too long', 400);
+        }
+        const events = [...new Set(input.events)].filter(event => event === '*' || isNotificationType(event));
+        if (events.length === 0) {
+            throw new NotificationError('A webhook must subscribe to at least one event', 400);
+        }
+        const existing = input.id
+            ? await repositories().webhookTargets.findById(input.id)
+            : null;
+        const now = Date.now();
+        const record = {
+            id: existing?.id ?? input.id ?? randomUUID(),
+            name,
+            url: input.url,
+            secret: input.secret !== undefined
+                ? input.secret
+                    ? encryptionService.encrypt(input.secret)
+                    : null
+                : (existing?.secret ?? null),
+            events: JSON.stringify(events),
+            enabled: (input.enabled ?? true) ? 1 : 0,
+            created_by: existing?.created_by ?? actorUserId,
+            created_at: existing?.created_at ?? now,
+            updated_at: now,
+        };
+        try {
+            await repositories().webhookTargets.replaceWithLimit(record, MAX_WEBHOOK_TARGETS);
+        }
+        catch (error) {
+            if (error instanceof PersistenceResourceLimitError) {
+                throw new NotificationError(`At most ${MAX_WEBHOOK_TARGETS} webhook targets are supported`, 409);
+            }
+            throw error;
+        }
+        return mapWebhookTarget(record);
+    }
+    async deleteWebhookTarget(targetId) {
+        return repositories().webhookTargets.delete(targetId);
+    }
+    /** Signed delivery used by the durable webhook job. */
+    async deliverWebhook(targetId, event, signal) {
+        const target = await repositories().webhookTargets.findById(targetId);
+        if (!target || target.enabled !== 1)
+            return { delivered: false };
+        const body = JSON.stringify(event);
+        const headers = {
+            'Content-Type': 'application/json',
+        };
+        const secret = decryptOptional(target.secret);
+        if (secret) {
+            headers['X-Libre-Signature'] =
+                'sha256=' + createHmac('sha256', secret).update(body).digest('hex');
+        }
+        const { secureToolRequest } = await import('../utils/toolEgress.js');
+        const response = await secureToolRequest({
+            url: target.url,
+            method: 'POST',
+            headers,
+            body,
+            maxResponseBytes: 64 * 1024,
+            timeoutMs: 10000,
+            ...(signal ? { signal } : {}),
+        });
+        return { delivered: response.status < 300, status: response.status };
+    }
+}
+export const notificationService = new NotificationService();
+//# sourceMappingURL=notificationService.js.map

package/backend/dist/services/notificationService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notificationService.js","sourceRoot":"","sources":["../../src/services/notificationService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EACL,6BAA6B,GAG9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EACL,yBAAyB,EACzB,8BAA8B,EAC9B,qBAAqB,EACrB,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EACL,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,0BAA0B,EAC1B,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AAOpC,MAAM,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAE7C,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YACE,OAAe,EACN,UAAkB;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAC;0BAFN,UAAU;QAGnB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,kBAAkB,GAAgC;IACtD,iBAAiB;IACjB,YAAY;IACZ,gBAAgB;IAChB,OAAO;IACP,mBAAmB;IACnB,mBAAmB;IACnB,aAAa;IACb,cAAc;IACd,cAAc;IACd,QAAQ;CACT,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAA6B,EAAE,CACtE,kBAAwC,CAAC,QAAQ,CAAC,KAAe,CAAC,CAAC;AAEtE,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,cAAc,CAAC,iBAAiB,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC;AAE3D,MAAM,eAAe,GAAG,CAAC,KAAoB,EAAsB,EAAE;IACnE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,GAA6B,EAAoB,EAAE,CAAC,CAAC;IAC5E,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;IACxD,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;IACvC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,SAAS,EAAE,GAAG,CAAC,UAAU;IACzB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CACvB,GAA8B,EACX,EAAE,CAAC,CAAC;IACvB,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;IAC9B,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;IAC1B,SAAS,EAAE,GAAG,CAAC,UAAU;IACzB,SAAS,EAAE,GAAG,CAAC,UAAU;CAC1B,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,KAAa,EAAY,EAAE;IAC9C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAC3B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACvE,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAYF,MAAM,mBAAmB;IACvB;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,KAA+B;QAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,MAAM,GAA6B;YACvC,EAAE,EAAE,UAAU,EAAE;YAChB,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAC9B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,6BAA6B,CAAC,CACpD;YACD,IAAI,EAAE,KAAK,CAAC,IAAI;gBACd,CAAC,CAAC,iBAAiB,CAAC,OAAO,CACvB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAClD;gBACH,CAAC,CAAC,IAAI;YACR,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;YACxB,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,OAAO,EAAE,IAAI;SACd,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC,aAAa,CAAC,eAAe,CACjE,MAAM,EACN,0BAA0B,CAC3B,CAAC;QACF,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,sBAAsB,EAAE,CAAC,MAAM,CAAC;gBACpC,OAAO,EAAE,UAAU,EAAE;gBACrB,QAAQ,EAAE,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC;gBACjD,SAAS,EAAE,gBAAgB;gBAC3B,SAAS,EAAE,MAAM,CAAC,EAAE;gBACpB,WAAW,EAAE,KAAK,CAAC,MAAM;gBACzB,OAAO,EAAE;oBACP,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE;wBACL,IAAI,EAAE,cAAc;wBACpB,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC;qBACtC;iBACF;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE;gBACpE,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAChD,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAC5C,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,YAAY,CAAC,MAAgC;QACzD,MAAM,aAAa,GAAG,MAAM,YAAY,EAAE,CAAC,iBAAiB,CAAC,UAAU,CACrE,MAAM,CAAC,OAAO,CACf,CAAC;QACF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACvC,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;QACF,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC,OAAO,CAAC;QAC/C,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;YACzC,MAAM,OAAO,CAAC,OAAO,CAAC;gBACpB,OAAO,EAAE,qBAAqB;gBAC9B,WAAW,EAAE,MAAM,CAAC,OAAO;gBAC3B,OAAO,EAAE;oBACP,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE;iBACpD;gBACD,gBAAgB,EAAE,8BAA8B;gBAChD,cAAc,EAAE,GAAG,YAAY,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE;gBACjD,WAAW,EAAE,CAAC;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACR,MAAc,EACd,OAAkE;QAElE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAChC,0BAA0B,CAC3B,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE;YAClE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,KAAK;YACL,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,OAAO,YAAY,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,cAAsB;QACnD,OAAO,YAAY,EAAE,CAAC,aAAa,CAAC,QAAQ,CAC1C,cAAc,EACd,MAAM,EACN,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,OAAO,YAAY,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,cAAsB;QACjD,OAAO,YAAY,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,gBAAgB,CAC5B,MAAgC;QAEhC,MAAM,OAAO,GACX,MAAM,YAAY,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YACzC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACpC,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC,OAAO,CAAC;QAC/C,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,MAAM,OAAO,CAAC,OAAO,CAAC;gBACpB,OAAO,EAAE,wBAAwB;gBACjC,WAAW,EAAE,MAAM,CAAC,OAAO;gBAC3B,OAAO,EAAE;oBACP,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE;wBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;wBACnB,KAAK,EAAE;4BACL,KAAK,EAAE,sBAAsB;4BAC7B,cAAc,EAAE,MAAM,CAAC,EAAE;4BACzB,gBAAgB,EAAE,MAAM,CAAC,IAAI;4BAC7B,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;4BAC1C,MAAM,EAAE,MAAM,CAAC,OAAO;4BACtB,SAAS,EAAE,MAAM,CAAC,UAAU;yBAC7B;qBACF;iBACF;gBACD,gBAAgB,EAAE,iCAAiC;gBACnD,cAAc,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE;gBAC3C,WAAW,EAAE,CAAC;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,gCAAgC;IAChC,qEAAqE;IAErE,KAAK,CAAC,kBAAkB;QACtB,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,WAAmB,EACnB,KAOC;QAED,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;YACnD,MAAM,IAAI,iBAAiB,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;YAC5D,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,kEAAkE;QAClE,oEAAoE;QACpE,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACzD,IACE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YACvB,CAAC,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvC,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,iBAAiB,CACzB,uDAAuD,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,yBAAyB,EAAE,CAAC;YAC5D,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAC9C,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,kBAAkB,CAAC,KAAK,CAAC,CACpD,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,iBAAiB,CACzB,gDAAgD,EAChD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE;YACvB,CAAC,CAAC,MAAM,YAAY,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAA8B;YACxC,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE;YAC5C,IAAI;YACJ,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EACJ,KAAK,CAAC,MAAM,KAAK,SAAS;gBACxB,CAAC,CAAC,KAAK,CAAC,MAAM;oBACZ,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;oBACzC,CAAC,CAAC,IAAI;gBACR,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC;YAChC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC9B,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,WAAW;YAC/C,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,GAAG;YACvC,UAAU,EAAE,GAAG;SAChB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,YAAY,EAAE,CAAC,cAAc,CAAC,gBAAgB,CAClD,MAAM,EACN,mBAAmB,CACpB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,6BAA6B,EAAE,CAAC;gBACnD,MAAM,IAAI,iBAAiB,CACzB,WAAW,mBAAmB,gCAAgC,EAC9D,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QACxC,OAAO,YAAY,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,cAAc,CAClB,QAAgB,EAChB,KAA8B,EAC9B,MAAoB;QAEpB,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,mBAAmB,CAAC;gBAC1B,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC;YACvC,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI;YACJ,gBAAgB,EAAE,EAAE,GAAG,IAAI;YAC3B,SAAS,EAAE,KAAM;YACjB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACvE,CAAC;CACF;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,EAAE,CAAC"}

package/backend/dist/services/openApiToolService.d.ts

@@ -0,0 +1,38 @@
+/**
+ * OpenAPI tool extraction and execution. A registered server's JSON spec is
+ * pinned at registration; each operation becomes one tool whose argument
+ * schema exposes the operation's query/path/header parameters by name plus a
+ * `body` property for the JSON request body. Execution reconstructs the call
+ * deterministically from the pinned operation detail — arguments never
+ * select the destination. GET operations are classified read-only; every
+ * other method is a side effect until an administrator overrides it.
+ */
+import type { OpenApiOperationDetail, ToolDefinition } from '../types/tools.js';
+export declare class OpenApiSpecError extends Error {
+    constructor(message: string);
+}
+/**
+ * Extract tool definitions from a parsed OpenAPI 3.x document. $ref schemas
+ * are resolved one level against #/components/schemas; deeper references
+ * degrade to a permissive object schema rather than failing registration.
+ */
+export declare function parseOpenApiSpec(spec: unknown, maximumTools: number): {
+    tools: ToolDefinition[];
+    title?: string;
+};
+export interface OpenApiExecution {
+    baseUrl: string;
+    detail: OpenApiOperationDetail;
+    args: Record<string, unknown>;
+    authHeaders: Record<string, string>;
+    timeoutMs: number;
+    maxResponseBytes: number;
+    signal?: AbortSignal;
+}
+export interface OpenApiExecutionResult {
+    text: string;
+    isError: boolean;
+    truncated: boolean;
+}
+export declare function executeOpenApiTool(execution: OpenApiExecution): Promise<OpenApiExecutionResult>;
+//# sourceMappingURL=openApiToolService.d.ts.map

package/backend/dist/services/openApiToolService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openApiToolService.d.ts","sourceRoot":"","sources":["../../src/services/openApiToolService.ts"],"names":[],"mappings":"AAiBA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAOhF,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AA+CD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,OAAO,EACb,YAAY,EAAE,MAAM,GACnB;IAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA+J7C;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACpB;AAMD,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,gBAAgB,GAC1B,OAAO,CAAC,sBAAsB,CAAC,CAgEjC"}

package/backend/dist/services/openApiToolService.js

@@ -0,0 +1,254 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { secureToolRequest } from '../utils/toolEgress.js';
+const SUPPORTED_METHODS = ['get', 'post', 'put', 'patch', 'delete'];
+const TOOL_NAME_PATTERN = /^[a-zA-Z0-9_-]{1,64}$/;
+const MAX_DESCRIPTION_LENGTH = 1024;
+export class OpenApiSpecError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'OpenApiSpecError';
+    }
+}
+const sanitizeToolName = (raw) => {
+    const cleaned = raw.replace(/[^a-zA-Z0-9_-]/g, '_').slice(0, 64);
+    return TOOL_NAME_PATTERN.test(cleaned) ? cleaned : '';
+};
+const fallbackToolName = (method, path) => {
+    const slug = path
+        .replace(/[{}]/g, '')
+        .split('/')
+        .filter(Boolean)
+        .join('_')
+        .replace(/[^a-zA-Z0-9_-]/g, '_');
+    return sanitizeToolName(`${method}_${slug || 'root'}`);
+};
+const boundedDescription = (operation) => {
+    const raw = (typeof operation.summary === 'string' && operation.summary) ||
+        (typeof operation.description === 'string' && operation.description) ||
+        '';
+    const trimmed = raw.replace(/\s+/g, ' ').trim();
+    return trimmed ? trimmed.slice(0, MAX_DESCRIPTION_LENGTH) : undefined;
+};
+/**
+ * Extract tool definitions from a parsed OpenAPI 3.x document. $ref schemas
+ * are resolved one level against #/components/schemas; deeper references
+ * degrade to a permissive object schema rather than failing registration.
+ */
+export function parseOpenApiSpec(spec, maximumTools) {
+    if (!spec || typeof spec !== 'object') {
+        throw new OpenApiSpecError('The specification is not a JSON object');
+    }
+    const document = spec;
+    if (typeof document.openapi !== 'string' ||
+        !document.openapi.startsWith('3')) {
+        throw new OpenApiSpecError('Only OpenAPI 3.x JSON specifications are supported');
+    }
+    if (!document.paths || typeof document.paths !== 'object') {
+        throw new OpenApiSpecError('The specification declares no paths');
+    }
+    const schemas = document.components?.schemas ?? {};
+    const resolveSchema = (schema, depth = 0) => {
+        if (!schema || typeof schema !== 'object' || depth > 4) {
+            return { type: 'object' };
+        }
+        const record = schema;
+        const ref = record.$ref;
+        if (typeof ref === 'string') {
+            const match = ref.match(/^#\/components\/schemas\/([^/]+)$/);
+            const resolved = match ? schemas[match[1]] : undefined;
+            return resolved ? resolveSchema(resolved, depth + 1) : { type: 'object' };
+        }
+        const clone = { ...record };
+        if (clone.properties && typeof clone.properties === 'object') {
+            clone.properties = Object.fromEntries(Object.entries(clone.properties).map(([key, value]) => [key, resolveSchema(value, depth + 1)]));
+        }
+        if (clone.items)
+            clone.items = resolveSchema(clone.items, depth + 1);
+        return clone;
+    };
+    const tools = [];
+    const seen = new Set();
+    for (const [path, operations] of Object.entries(document.paths)) {
+        if (!operations || typeof operations !== 'object')
+            continue;
+        const sharedParameters = Array.isArray(operations.parameters)
+            ? operations
+                .parameters
+            : [];
+        for (const method of SUPPORTED_METHODS) {
+            const operation = operations[method];
+            if (!operation || typeof operation !== 'object')
+                continue;
+            let name = (typeof operation.operationId === 'string' &&
+                sanitizeToolName(operation.operationId)) ||
+                fallbackToolName(method, path);
+            if (!name)
+                continue;
+            let suffix = 2;
+            while (seen.has(name))
+                name = sanitizeToolName(`${name}_${suffix++}`);
+            seen.add(name);
+            const parameters = [];
+            const properties = {};
+            const required = [];
+            const declared = [
+                ...sharedParameters,
+                ...(Array.isArray(operation.parameters)
+                    ? operation.parameters
+                    : []),
+            ];
+            for (const parameter of declared) {
+                if (typeof parameter?.name !== 'string' ||
+                    (parameter.in !== 'query' &&
+                        parameter.in !== 'path' &&
+                        parameter.in !== 'header')) {
+                    continue;
+                }
+                if (parameter.name === 'body')
+                    continue;
+                const isRequired = parameter.required === true || parameter.in === 'path';
+                parameters.push({
+                    name: parameter.name,
+                    in: parameter.in,
+                    required: isRequired,
+                });
+                const schema = resolveSchema(parameter.schema ?? { type: 'string' });
+                properties[parameter.name] = {
+                    ...schema,
+                    ...(typeof parameter.description === 'string'
+                        ? { description: parameter.description.slice(0, 256) }
+                        : {}),
+                };
+                if (isRequired)
+                    required.push(parameter.name);
+            }
+            const bodyContent = operation.requestBody?.content ?? {};
+            const jsonBody = bodyContent['application/json'] ?? bodyContent['application/*+json'];
+            const hasBody = Boolean(jsonBody);
+            if (hasBody) {
+                properties.body = resolveSchema(jsonBody?.schema ?? { type: 'object' });
+                if (operation.requestBody?.required === true)
+                    required.push('body');
+            }
+            const definition = {
+                name,
+                sideEffect: method !== 'get',
+                enabled: true,
+                paramsSchema: {
+                    type: 'object',
+                    properties,
+                    ...(required.length > 0 ? { required } : {}),
+                },
+                detail: {
+                    method: method.toUpperCase(),
+                    path,
+                    parameters,
+                    hasBody,
+                    ...(hasBody ? { bodyContentType: 'application/json' } : {}),
+                },
+            };
+            const description = boundedDescription(operation);
+            if (description)
+                definition.description = description;
+            tools.push(definition);
+            if (tools.length >= maximumTools) {
+                return {
+                    tools,
+                    ...(typeof document.info?.title === 'string'
+                        ? { title: document.info.title }
+                        : {}),
+                };
+            }
+        }
+    }
+    if (tools.length === 0) {
+        throw new OpenApiSpecError('The specification declares no usable operations');
+    }
+    return {
+        tools,
+        ...(typeof document.info?.title === 'string'
+            ? { title: document.info.title }
+            : {}),
+    };
+}
+const HEADER_NAME_PATTERN = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+const scalar = (value) => typeof value === 'string' ? value : JSON.stringify(value ?? '');
+export async function executeOpenApiTool(execution) {
+    const { detail, args } = execution;
+    let path = detail.path;
+    const url = new URL(execution.baseUrl);
+    const headers = { ...execution.authHeaders };
+    for (const parameter of detail.parameters) {
+        const value = args[parameter.name];
+        if (value === undefined || value === null) {
+            if (parameter.required) {
+                return {
+                    text: `Missing required parameter: ${parameter.name}`,
+                    isError: true,
+                    truncated: false,
+                };
+            }
+            continue;
+        }
+        if (parameter.in === 'path') {
+            path = path
+                .split(`{${parameter.name}}`)
+                .join(encodeURIComponent(scalar(value)));
+        }
+        else if (parameter.in === 'query') {
+            url.searchParams.set(parameter.name, scalar(value));
+        }
+        else if (HEADER_NAME_PATTERN.test(parameter.name)) {
+            headers[parameter.name] = scalar(value).replace(/[\r\n]/g, ' ');
+        }
+    }
+    const basePath = url.pathname.replace(/\/$/, '');
+    const search = url.searchParams.toString();
+    const targetUrl = `${url.origin}${basePath}${path}${search ? `?${search}` : ''}`;
+    let body;
+    if (detail.hasBody && args.body !== undefined) {
+        headers['Content-Type'] = detail.bodyContentType ?? 'application/json';
+        body = JSON.stringify(args.body);
+    }
+    const response = await secureToolRequest({
+        url: targetUrl,
+        method: detail.method,
+        headers,
+        ...(body !== undefined ? { body } : {}),
+        timeoutMs: execution.timeoutMs,
+        maxResponseBytes: execution.maxResponseBytes,
+        ...(execution.signal ? { signal: execution.signal } : {}),
+    });
+    const contentType = response.headers['content-type'] ?? '';
+    let text = response.bodyText;
+    if (contentType.includes('application/json')) {
+        try {
+            text = JSON.stringify(JSON.parse(response.bodyText), null, 2);
+        }
+        catch {
+            // Keep the raw body when the declared type is wrong.
+        }
+    }
+    const isError = response.status >= 400;
+    return {
+        text: isError ? `HTTP ${response.status}\n${text}` : text,
+        isError,
+        truncated: response.truncated,
+    };
+}
+//# sourceMappingURL=openApiToolService.js.map