negotium 0.14.2 → 0.14.4

package/dist/main.js

@@ -281,7 +281,7 @@ function resolveWhisperBackend() {
 function codexAuthFilePath() {
   return process.env.NEGOTIUM_CODEX_AUTH_FILE || join(process.env.CODEX_HOME || join(homedir(), ".codex"), "auth.json");
 }
-var HOME, PROJECT_ROOT, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.3.2", BROWSER_RS_MIN_SECURE_VERSION = "0.2.1", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.7", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5-1", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, DEFAULT_TOPIC_EFFORT, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, WHISPER_BACKEND, MLX_WHISPER_BIN, WHISPER_MODEL_MLX, _envMaxTellDepth, MAX_TELL_DEPTH;
+var HOME, PROJECT_ROOT, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.4.0", BROWSER_RS_MIN_SECURE_VERSION = "0.2.1", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.7", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5-1", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, DEFAULT_TOPIC_EFFORT, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, WHISPER_BACKEND, MLX_WHISPER_BIN, WHISPER_MODEL_MLX, _envMaxTellDepth, MAX_TELL_DEPTH;
 var init_config = __esm(() => {
   init_config_helpers();
   init_logger();
@@ -2777,6 +2777,19 @@ function setNodeMcpServers(entries) {
 function getNodeMcpServers() {
   return nodeMcpEntries;
 }
+function isReservedRuntimeMcpServerName(name) {
+  return Object.hasOwn(MCP_CATALOG, name) || nodeMcpEntries.some((entry) => entry.key === name);
+}
+function mergeHostMcpServers(base, hostMcpServers) {
+  if (!hostMcpServers)
+    return base;
+  for (const name of Object.keys(hostMcpServers)) {
+    if (Object.hasOwn(base, name) || isReservedRuntimeMcpServerName(name)) {
+      throw new Error(`host MCP server name conflicts with node catalog: ${name}`);
+    }
+  }
+  return { ...base, ...hostMcpServers };
+}
 function buildNodeMcpSpecs(agent, filter) {
   const out = {};
   for (const entry of nodeMcpEntries) {
@@ -2953,7 +2966,7 @@ function getMcpServersForQuery(opts) {
     });
   }
   if (opts.sessionType === "manager") {
-    return getManagerMcpServers({
+    return mergeHostMcpServers(getManagerMcpServers({
       userId: opts.userId || "local",
       session: opts.session,
       topicId: opts.topicId,
@@ -2968,7 +2981,7 @@ function getMcpServersForQuery(opts) {
       autoContinue: opts.autoContinue,
       visualTools: opts.visualTools,
       fileDeliveryTools: opts.fileDeliveryTools
-    });
+    }), opts.hostMcpServers);
   }
   return getForumMcpServers({
     userId: opts.userId || "local",
@@ -3836,7 +3849,7 @@ var exports_version = {};
 __export(exports_version, {
   NEGOTIUM_VERSION: () => NEGOTIUM_VERSION
 });
-var NEGOTIUM_VERSION = "0.14.2";
+var NEGOTIUM_VERSION = "0.14.4";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn2 } from "child_process";
@@ -6320,8 +6333,11 @@ function toCodexMcpServers(claudeShape) {
     if (typeof s.url === "string" && s.type !== "sse") {
       out[codexName] = withCodexMcpServerOverrides(name, {
         url: s.url,
-        ...s.http_headers && typeof s.http_headers === "object" ? { http_headers: s.http_headers } : {},
-        ...s.env_http_headers && typeof s.env_http_headers === "object" ? { env_http_headers: s.env_http_headers } : {}
+        ...s.http_headers && typeof s.http_headers === "object" || s.headers && typeof s.headers === "object" ? {
+          http_headers: s.http_headers ?? s.headers
+        } : {},
+        ...s.env_http_headers && typeof s.env_http_headers === "object" ? { env_http_headers: s.env_http_headers } : {},
+        ...typeof s.timeout === "number" ? { tool_timeout_sec: Math.max(1, Math.ceil(s.timeout / 1000)) } : {}
       });
     }
   }
@@ -17731,6 +17747,487 @@ body{font-family:system-ui,-apple-system,"Segoe UI",sans-serif;background:var(--
 </style>`;
 });
 
+// ../../packages/core/src/runtime-gateway.ts
+function parseHostMcpServers(value) {
+  if (value === undefined)
+    return;
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new TypeError("hostMcpServers must be an object");
+  }
+  const parsedEntries = [];
+  for (const [name, raw] of Object.entries(value)) {
+    if (!HOST_MCP_SERVER_NAME.test(name)) {
+      throw new TypeError(`invalid host MCP server name: ${name}`);
+    }
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+      throw new TypeError(`hostMcpServers.${name} must be an object`);
+    }
+    const spec = raw;
+    const unsupported = Object.keys(spec).find((key) => !HOST_MCP_SERVER_KEYS.has(key));
+    if (unsupported) {
+      throw new TypeError(`hostMcpServers.${name}.${unsupported} is not allowed`);
+    }
+    if (spec.type !== "sse" && spec.type !== "http") {
+      throw new TypeError(`hostMcpServers.${name}.type must be sse or http`);
+    }
+    if (typeof spec.url !== "string") {
+      throw new TypeError(`hostMcpServers.${name}.url must be a string`);
+    }
+    let url;
+    try {
+      url = new URL(spec.url);
+    } catch {
+      throw new TypeError(`hostMcpServers.${name}.url must be a valid URL`);
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+      throw new TypeError(`hostMcpServers.${name}.url must use http or https`);
+    }
+    let headers;
+    if (spec.headers !== undefined) {
+      if (!spec.headers || typeof spec.headers !== "object" || Array.isArray(spec.headers)) {
+        throw new TypeError(`hostMcpServers.${name}.headers must be an object`);
+      }
+      const headerEntries = [];
+      for (const [key, headerValue] of Object.entries(spec.headers)) {
+        if (!HTTP_HEADER_NAME.test(key) || typeof headerValue !== "string") {
+          throw new TypeError(`hostMcpServers.${name}.headers must contain string values`);
+        }
+        try {
+          new Headers([[key, headerValue]]);
+        } catch {
+          throw new TypeError(`hostMcpServers.${name}.headers contains an invalid header`);
+        }
+        headerEntries.push([key, headerValue]);
+      }
+      headers = Object.fromEntries(headerEntries);
+    }
+    if (spec.timeout !== undefined && (typeof spec.timeout !== "number" || !Number.isFinite(spec.timeout) || spec.timeout <= 0)) {
+      throw new TypeError(`hostMcpServers.${name}.timeout must be a positive number`);
+    }
+    parsedEntries.push([
+      name,
+      {
+        type: spec.type,
+        url: url.toString(),
+        ...headers ? { headers } : {},
+        ...spec.timeout !== undefined ? { timeout: spec.timeout } : {}
+      }
+    ]);
+  }
+  return Object.fromEntries(parsedEntries);
+}
+function record(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+async function json(response) {
+  try {
+    return await response.json();
+  } catch {
+    throw new RuntimeGatewayError("Runtime Gateway returned invalid JSON", "protocol", response.status);
+  }
+}
+function validHealth(value) {
+  const body = record(value);
+  return Boolean(body?.ok === true && body.v === RUNTIME_GATEWAY_VERSION && Array.isArray(body.capabilities) && typeof body.cursor === "number");
+}
+function validAcknowledgedMessage(value) {
+  const message = record(value);
+  return Boolean(message && typeof message.id === "string" && typeof message.topicId === "string" && typeof message.authorId === "string" && typeof message.text === "string" && typeof message.createdAt === "string");
+}
+function validTurnAck(value) {
+  const body = record(value);
+  return Boolean(body?.ok === true && body.v === RUNTIME_GATEWAY_VERSION && body.accepted === true && typeof body.deduplicated === "boolean" && typeof body.requestId === "string" && typeof body.clientMessageId === "string" && typeof body.topicId === "string" && typeof body.messageId === "string" && (body.message === undefined || validAcknowledgedMessage(body.message)) && typeof body.cursor === "number");
+}
+function validManagerTopic(value) {
+  const topic = record(value);
+  return Boolean(typeof topic?.id === "string" && typeof topic.title === "string" && topic.kind === "manager" && Array.isArray(topic.participants));
+}
+function validDeletedMessage(value) {
+  const message = record(value);
+  return Boolean(typeof message?.id === "string" && typeof message.topicId === "string" && typeof message.authorId === "string" && typeof message.text === "string" && message.deleted === true && typeof message.createdAt === "string");
+}
+function validCronJob(value) {
+  const job = record(value);
+  return Boolean(typeof job?.id === "string" && typeof job.name === "string" && typeof job.executionPrincipalUserId === "string" && typeof job.actorOwnerUserId === "string" && typeof job.topicId === "string" && typeof job.schedule === "string" && typeof job.enabled === "boolean" && typeof job.nextRunAt === "string" && typeof job.canMutate === "boolean");
+}
+async function* parseRuntimeGatewaySse(body) {
+  const reader = body.getReader();
+  const decoder = new TextDecoder;
+  let buffer = "";
+  let event = "message";
+  let id;
+  let data = [];
+  const flush = () => {
+    if (data.length === 0)
+      return null;
+    const raw = data.join(`
+`);
+    data = [];
+    try {
+      return { event, id, data: JSON.parse(raw) };
+    } catch {
+      throw new RuntimeGatewayError("Runtime Gateway SSE event has invalid JSON", "protocol");
+    } finally {
+      event = "message";
+      id = undefined;
+    }
+  };
+  try {
+    while (true) {
+      const chunk = await reader.read();
+      if (chunk.done)
+        break;
+      buffer += decoder.decode(chunk.value, { stream: true }).replace(/\r\n/g, `
+`);
+      let newline = buffer.indexOf(`
+`);
+      while (newline >= 0) {
+        const line = buffer.slice(0, newline);
+        buffer = buffer.slice(newline + 1);
+        if (line === "") {
+          const parsed2 = flush();
+          if (parsed2)
+            yield parsed2;
+        } else if (line.startsWith("event:")) {
+          event = line.slice(6).trim() || "message";
+        } else if (line.startsWith("id:")) {
+          const parsed2 = Number.parseInt(line.slice(3).trim(), 10);
+          if (Number.isFinite(parsed2))
+            id = parsed2;
+        } else if (line.startsWith("data:")) {
+          data.push(line.slice(5).trimStart());
+        }
+        newline = buffer.indexOf(`
+`);
+      }
+    }
+    buffer += decoder.decode();
+    if (buffer.startsWith("data:"))
+      data.push(buffer.slice(5).trimStart());
+    const parsed = flush();
+    if (parsed)
+      yield parsed;
+  } finally {
+    reader.releaseLock();
+  }
+}
+
+class RuntimeGatewayClient {
+  options;
+  pathPrefix;
+  request;
+  requestTimeoutMs;
+  compactTimeoutMs;
+  constructor(options) {
+    this.options = options;
+    this.pathPrefix = options.pathPrefix ?? RUNTIME_GATEWAY_CONTROL_PATH;
+    this.request = options.fetch ?? fetch;
+    this.requestTimeoutMs = options.requestTimeoutMs ?? 5000;
+    this.compactTimeoutMs = options.compactTimeoutMs ?? 5 * 60000;
+  }
+  endpoint(path) {
+    if (!this.options.baseUrl || !this.options.token) {
+      throw new RuntimeGatewayError("Runtime Gateway is not configured", "config");
+    }
+    return `${this.options.baseUrl.replace(/\/+$/, "")}${this.pathPrefix}${path}`;
+  }
+  async authorization() {
+    try {
+      const token = typeof this.options.token === "function" ? await this.options.token() : this.options.token;
+      return `Bearer ${token}`;
+    } catch (error) {
+      throw new RuntimeGatewayError(error instanceof Error ? error.message : "Runtime Gateway token resolution failed", "config");
+    }
+  }
+  async send(path, init, timeoutMs) {
+    const authorization = await this.authorization();
+    try {
+      return await this.request(this.endpoint(path), {
+        ...init,
+        headers: { authorization, ...init.headers },
+        signal: timeoutMs === undefined ? init.signal : AbortSignal.timeout(timeoutMs)
+      });
+    } catch (error) {
+      if (error instanceof DOMException && error.name === "TimeoutError") {
+        throw new RuntimeGatewayError("Runtime Gateway request timed out", "timeout");
+      }
+      throw new RuntimeGatewayError("Runtime Gateway request failed", "transport");
+    }
+  }
+  async health() {
+    const response = await this.send("/health", { method: "GET" }, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway health request failed", "http", response.status);
+    }
+    const body = await json(response);
+    if (!validHealth(body)) {
+      throw new RuntimeGatewayError("Runtime Gateway health response is incompatible", "protocol");
+    }
+    return body;
+  }
+  async submitTurn(input) {
+    const response = await this.send("/turns", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, ...input })
+    }, this.requestTimeoutMs);
+    if (response.status !== 202) {
+      throw new RuntimeGatewayError("Runtime Gateway turn was not accepted", "http", response.status);
+    }
+    const body = await json(response);
+    if (!validTurnAck(body)) {
+      throw new RuntimeGatewayError("Runtime Gateway turn acknowledgement is incompatible", "protocol");
+    }
+    return body;
+  }
+  async deriveTopic(topicId, input) {
+    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/derive`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, ...input })
+    }, this.requestTimeoutMs);
+    if (response.status !== 201) {
+      throw new RuntimeGatewayError("Runtime Gateway topic derive failed", "http", response.status);
+    }
+    const body = await json(response);
+    const topic = record(body)?.topic;
+    const topicRecord = record(topic);
+    if (!topicRecord || typeof topicRecord.id !== "string" || typeof topicRecord.title !== "string") {
+      throw new RuntimeGatewayError("Runtime Gateway topic derive response is incompatible", "protocol");
+    }
+    return topic;
+  }
+  async ensureManagerTopic(userId) {
+    const response = await this.send("/manager-topic", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, userId })
+    }, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway manager topic request failed", "http", response.status);
+    }
+    const body = record(await json(response));
+    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION || !validManagerTopic(body.topic)) {
+      throw new RuntimeGatewayError("Runtime Gateway manager topic response is incompatible", "protocol");
+    }
+    return body.topic;
+  }
+  async deleteMessage(topicId, messageId, actorUserId, allowAdmin = false) {
+    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/messages/${encodeURIComponent(messageId)}`, {
+      method: "DELETE",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        v: RUNTIME_GATEWAY_VERSION,
+        actorUserId,
+        ...allowAdmin ? { allowAdmin: true } : {}
+      })
+    }, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway message delete failed", "http", response.status);
+    }
+    const body = record(await json(response));
+    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION || !validDeletedMessage(body.message)) {
+      throw new RuntimeGatewayError("Runtime Gateway message delete response is incompatible", "protocol");
+    }
+    return body.message;
+  }
+  async cronRequest(path, init) {
+    const response = await this.send(path, init, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway cron request failed", "http", response.status);
+    }
+    const body = record(await json(response));
+    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION) {
+      throw new RuntimeGatewayError("Runtime Gateway cron response is incompatible", "protocol");
+    }
+    return body;
+  }
+  async listCronScripts() {
+    const body = await this.cronRequest("/cron/scripts", { method: "GET" });
+    if (!Array.isArray(body.scripts) || !body.scripts.every((value) => typeof value === "string")) {
+      throw new RuntimeGatewayError("Runtime Gateway cron scripts are incompatible", "protocol");
+    }
+    return body.scripts;
+  }
+  async listCronJobs(userId, actorUserId, actorIsAdmin = false) {
+    const search = new URLSearchParams({
+      user: userId,
+      actorUserId,
+      actorIsAdmin: actorIsAdmin ? "1" : "0"
+    });
+    const body = await this.cronRequest(`/cron/jobs?${search}`, { method: "GET" });
+    if (!Array.isArray(body.jobs) || !body.jobs.every(validCronJob)) {
+      throw new RuntimeGatewayError("Runtime Gateway cron jobs are incompatible", "protocol");
+    }
+    return body.jobs;
+  }
+  async createCronJob(input) {
+    const body = await this.cronRequest("/cron/jobs", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, ...input })
+    });
+    if (!validCronJob(body.job)) {
+      throw new RuntimeGatewayError("Runtime Gateway cron job is incompatible", "protocol");
+    }
+    return body.job;
+  }
+  async updateCronJob(jobId, userId, actorUserId, patch, actorIsAdmin = false) {
+    const body = await this.cronRequest(`/cron/jobs/${encodeURIComponent(jobId)}`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        v: RUNTIME_GATEWAY_VERSION,
+        userId,
+        actorUserId,
+        actorIsAdmin,
+        patch
+      })
+    });
+    if (!validCronJob(body.job)) {
+      throw new RuntimeGatewayError("Runtime Gateway cron job is incompatible", "protocol");
+    }
+    return body.job;
+  }
+  async deleteCronJob(jobId, userId, actorUserId, actorIsAdmin = false) {
+    const search = new URLSearchParams({
+      user: userId,
+      actorUserId,
+      actorIsAdmin: actorIsAdmin ? "1" : "0"
+    });
+    const body = await this.cronRequest(`/cron/jobs/${encodeURIComponent(jobId)}?${search}`, {
+      method: "DELETE"
+    });
+    if (typeof body.deleted !== "string") {
+      throw new RuntimeGatewayError("Runtime Gateway cron delete is incompatible", "protocol");
+    }
+    return body.deleted;
+  }
+  async* events(after, topicId, signal) {
+    const search = new URLSearchParams({ after: String(Math.max(0, after)) });
+    if (topicId)
+      search.set("topicId", topicId);
+    const response = await this.send(`/events?${search}`, { method: "GET", signal });
+    if (!response.ok || !response.body) {
+      throw new RuntimeGatewayError("Runtime Gateway event stream failed", "http", response.status);
+    }
+    yield* parseRuntimeGatewaySse(response.body);
+  }
+  async getTopicUsage(topicId, userId) {
+    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/usage?user=${encodeURIComponent(userId)}`, { method: "GET" }, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway topic usage request failed", "http", response.status);
+    }
+    const usage = record(record(await json(response))?.usage);
+    const read = (key) => {
+      const value = usage?.[key];
+      return typeof value === "number" && Number.isFinite(value) ? value : 0;
+    };
+    return {
+      queries: read("queries"),
+      inputTokens: read("inputTokens"),
+      outputTokens: read("outputTokens"),
+      cacheCreationInputTokens: read("cacheCreationInputTokens"),
+      cacheReadInputTokens: read("cacheReadInputTokens"),
+      estimatedCostUsd: read("estimatedCostUsd")
+    };
+  }
+  async abortTurn(topicId, userId) {
+    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/abort`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, userId })
+    }, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway turn abort failed", "http", response.status);
+    }
+    const body = record(await json(response));
+    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION || typeof body.aborted !== "boolean") {
+      throw new RuntimeGatewayError("Runtime Gateway turn abort response is incompatible", "protocol");
+    }
+    return body.aborted;
+  }
+  async resetSession(topicId, userId, reason, actorUserId) {
+    return this.sessionCommand(topicId, userId, "reset", reason, actorUserId);
+  }
+  async compactSession(topicId, userId, reason, actorUserId) {
+    return this.sessionCommand(topicId, userId, "compact", reason, actorUserId);
+  }
+  async sessionCommand(topicId, userId, command, reason, actorUserId) {
+    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/session/${command}`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        v: RUNTIME_GATEWAY_VERSION,
+        userId,
+        ...actorUserId ? { actorUserId } : {},
+        ...reason ? { reason } : {}
+      })
+    }, command === "compact" ? this.compactTimeoutMs : this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError(`Runtime Gateway session ${command} failed`, "http", response.status);
+    }
+    const body = record(await json(response));
+    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION) {
+      throw new RuntimeGatewayError(`Runtime Gateway session ${command} response is incompatible`, "protocol");
+    }
+    return typeof body.result === "string" ? body.result : undefined;
+  }
+}
+var RUNTIME_GATEWAY_VERSION = 1, RUNTIME_GATEWAY_CONTROL_PATH = "/api/v1/control/runtime/v1", RuntimeGatewayError, HOST_MCP_SERVER_NAME, HOST_MCP_SERVER_KEYS, HTTP_HEADER_NAME;
+var init_runtime_gateway = __esm(() => {
+  RuntimeGatewayError = class RuntimeGatewayError extends Error {
+    kind;
+    status;
+    constructor(message, kind, status) {
+      super(message);
+      this.kind = kind;
+      this.status = status;
+    }
+  };
+  HOST_MCP_SERVER_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+  HOST_MCP_SERVER_KEYS = new Set(["type", "url", "headers", "timeout"]);
+  HTTP_HEADER_NAME = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+});
+
+// ../../packages/core/src/storage/topic-host-mcp-grants.ts
+function getTopicHostMcpGrant(topicId) {
+  const row = db.query("SELECT servers_json FROM api_topic_host_mcp_grants WHERE topic_id = ?").get(topicId);
+  if (!row)
+    return null;
+  try {
+    return parseHostMcpServers(JSON.parse(row.servers_json)) ?? null;
+  } catch {
+    return null;
+  }
+}
+function recordTopicHostMcpGrant(topicId, servers) {
+  const validated = parseHostMcpServers(servers) ?? {};
+  if (Object.keys(validated).length === 0) {
+    deleteTopicHostMcpGrant(topicId);
+    return;
+  }
+  db.query(`INSERT INTO api_topic_host_mcp_grants (topic_id, servers_json, updated_at)
+     VALUES (?, ?, ?)
+     ON CONFLICT(topic_id) DO UPDATE SET
+       servers_json = excluded.servers_json,
+       updated_at = excluded.updated_at`).run(topicId, JSON.stringify(validated), new Date().toISOString());
+}
+function deleteTopicHostMcpGrant(topicId) {
+  db.query("DELETE FROM api_topic_host_mcp_grants WHERE topic_id = ?").run(topicId);
+}
+var init_topic_host_mcp_grants = __esm(async () => {
+  init_runtime_gateway();
+  await init_forum_db();
+  db.exec(`
+  CREATE TABLE IF NOT EXISTS api_topic_host_mcp_grants (
+    topic_id     TEXT PRIMARY KEY,
+    servers_json TEXT NOT NULL,
+    updated_at   TEXT NOT NULL
+  )
+`);
+});
+
 // ../../packages/core/src/storage/topic-tool-capabilities.ts
 function getTopicToolCapabilities(topicId) {
   const row = db.query(`SELECT visual_tools, file_delivery_tools
@@ -17918,6 +18415,7 @@ async function deleteTopicCascadeImpl(topic, userId, options, deletingAncestorId
       logger.warn({ err: err2, topicId, cwd }, "deleteTopicCascade: workspace cleanup failed");
     }
     deleteTopicVisuals(topicId);
+    deleteTopicHostMcpGrant(topicId);
     deleteTopicToolCapabilities(topicId);
     deleteTopicArchiveState(topicId);
     deleteMessagesForTopic(topicId);
@@ -17980,6 +18478,7 @@ var init_lifecycle = __esm(async () => {
   await init_token_stats();
   await init_topic_archive();
   await init_topic_archive_state();
+  await init_topic_host_mcp_grants();
   await init_topic_tool_capabilities();
   TopicArchiveRequiredError = class TopicArchiveRequiredError extends Error {
     code = "TOPIC_ARCHIVE_FAILED";
@@ -18101,8 +18600,8 @@ function parseAttachmentNames(raw) {
     return parsed.map((item) => {
       if (!item || typeof item !== "object")
         return;
-      const record = item;
-      const name = record.filename ?? record.name ?? record.id;
+      const record2 = item;
+      const name = record2.filename ?? record2.name ?? record2.id;
       return typeof name === "string" && name.trim() ? name.trim() : undefined;
     }).filter((name) => Boolean(name));
   } catch {
@@ -19481,6 +19980,7 @@ __export(exports_turn_runner, {
   resolveWikiMemoryMirror: () => resolveWikiMemoryMirror,
   resolveVisualMediaInput: () => resolveVisualMediaInput,
   resolveTurnToolCapabilities: () => resolveTurnToolCapabilities,
+  resolveTurnHostMcpServers: () => resolveTurnHostMcpServers,
   resolveTopicTurnSession: () => resolveTopicTurnSession,
   resolveTopicTurnExecution: () => resolveTopicTurnExecution,
   resolveSessionRetry: () => resolveSessionRetry,
@@ -19837,6 +20337,12 @@ function resolveTurnToolCapabilities(topicId, params) {
     fileDeliveryTools: params.fileDeliveryTools ?? granted?.fileDeliveryTools ?? false
   };
 }
+function resolveTurnHostMcpServers(topic, sessionType) {
+  const effectiveSessionType = sessionType ?? (topic.kind === "manager" ? "manager" : "forum");
+  if (topic.kind !== "manager" || effectiveSessionType !== "manager")
+    return;
+  return getTopicHostMcpGrant(topic.id) ?? undefined;
+}
 function mergeSupersedingUserTurn(running, incoming) {
   const userMessages = [
     ...running.userMessages ?? [legacyUserTurnEnvelope(running.prompt, running.attachments)],
@@ -20056,6 +20562,7 @@ function startAiTurn(params) {
   const sessionName = params.sessionName ?? topic.title;
   const sessionType = params.sessionType;
   const { visualTools, fileDeliveryTools } = resolveTurnToolCapabilities(topicId, params);
+  const hostMcpServers = resolveTurnHostMcpServers(topic, sessionType);
   const onSessionId = params.onSessionId;
   const onSessionReset = params.onSessionReset;
   const bridgeSessionFromHistory = params.bridgeSessionFromHistory === true;
@@ -20555,6 +21062,7 @@ function startAiTurn(params) {
         autoContinue: allowAutoContinue && !silent,
         visualTools,
         fileDeliveryTools,
+        hostMcpServers,
         ...threadRootId ? { threadRootId } : {},
         peerBridge
       });
@@ -20898,6 +21406,7 @@ var init_turn_runner = __esm(async () => {
   await init_runtime_leases();
   await init_runtime_topic_state();
   await init_runtime_turn_requests();
+  await init_topic_host_mcp_grants();
   await init_topic_tool_capabilities();
   await init_wiki();
   init_wiki_summary_names();
@@ -21921,6 +22430,14 @@ function gatewayPayloadHash(params, requestId, actorUserId) {
   ])).digest("hex");
 }
 function submitRuntimeGatewayTurn(params) {
+  const hostMcpServers = parseHostMcpServers(params.hostMcpServers);
+  if (hostMcpServers !== undefined && params.topic.kind !== "manager") {
+    throw new TypeError("hostMcpServers is only allowed for manager topics");
+  }
+  const conflictingHostMcpName = Object.keys(hostMcpServers ?? {}).find(isReservedRuntimeMcpServerName);
+  if (conflictingHostMcpName) {
+    throw new TypeError(`host MCP server name conflicts with node catalog: ${conflictingHostMcpName}`);
+  }
   const requestId = params.requestId ?? params.clientMessageId;
   const actorUserId = params.actorUserId ?? params.userId;
   const sourceAdapter = params.sourceAdapter?.trim() || "runtime-gateway";
@@ -22001,6 +22518,9 @@ function submitRuntimeGatewayTurn(params) {
           }
         });
       }
+      if (hostMcpServers !== undefined) {
+        recordTopicHostMcpGrant(params.topic.id, hostMcpServers);
+      }
       const acceptedEvent = appendRuntimeEvent("runtime-gateway-ingress", {
         type: "ai-status",
         topicId: params.topic.id,
@@ -22032,7 +22552,9 @@ function submitRuntimeGatewayTurn(params) {
 }
 var RuntimeGatewayIdempotencyConflictError;
 var init_submit_runtime_gateway_turn = __esm(async () => {
+  init_mcp_config();
   init_file_hooks();
+  init_runtime_gateway();
   await init_api_messages();
   await init_api_topics();
   await init_forum_db();
@@ -22041,6 +22563,7 @@ var init_submit_runtime_gateway_turn = __esm(async () => {
   await init_runtime_leases();
   await init_runtime_topic_state();
   await init_runtime_turn_requests();
+  await init_topic_host_mcp_grants();
   await init_topic_tool_capabilities();
   RuntimeGatewayIdempotencyConflictError = class RuntimeGatewayIdempotencyConflictError extends Error {
     constructor(message = "clientMessageId or requestId is already bound to another turn") {
@@ -25328,6 +25851,7 @@ __export(exports_node_host, {
   killOwnedCodexTreesForShutdown: () => killOwnedCodexTreesForShutdown,
   killAllPlaywright: () => killAllPlaywright,
   killAllBgBash: () => killAllBgBash,
+  isReservedRuntimeMcpServerName: () => isReservedRuntimeMcpServerName,
   isParticipant: () => isParticipant,
   getVisibleTopics: () => getVisibleTopics,
   getTopicStats: () => getTopicStats,
@@ -26842,10 +27366,10 @@ var init_agent_health = __esm(async () => {
 
 // ../../packages/core/src/mcp/session-comm/tell-permissions.ts
 function resolveSubagentTellIdentity(currentTopicId, assertedParentTopicId) {
-  const record = currentTopicId ? getTopic(currentTopicId) : undefined;
-  const identityInvalid = Boolean(assertedParentTopicId && (!record?.isSubagent || record.parentTopicId !== assertedParentTopicId)) || Boolean(record?.isSubagent && !record.parentTopicId);
-  const restricted = identityInvalid || Boolean(assertedParentTopicId) || Boolean(record?.isSubagent);
-  const parentTopicId = identityInvalid ? undefined : assertedParentTopicId || (record?.isSubagent ? record.parentTopicId : undefined);
+  const record2 = currentTopicId ? getTopic(currentTopicId) : undefined;
+  const identityInvalid = Boolean(assertedParentTopicId && (!record2?.isSubagent || record2.parentTopicId !== assertedParentTopicId)) || Boolean(record2?.isSubagent && !record2.parentTopicId);
+  const restricted = identityInvalid || Boolean(assertedParentTopicId) || Boolean(record2?.isSubagent);
+  const parentTopicId = identityInvalid ? undefined : assertedParentTopicId || (record2?.isSubagent ? record2.parentTopicId : undefined);
   return { currentTopicId, parentTopicId, restricted };
 }
 function canSubagentTellTarget(identity, targetTopicId) {
@@ -28561,12 +29085,12 @@ function wikiLastConversation(args) {
       };
       for (const line of lines) {
         try {
-          const record = JSON.parse(line);
-          if (record.type === "message" && record.role === "user") {
+          const record2 = JSON.parse(line);
+          if (record2.type === "message" && record2.role === "user") {
             flush();
-            currentUser = record.text ?? "";
-          } else if (record.type === "message" && record.role === "assistant") {
-            currentAssistant += record.text ?? "";
+            currentUser = record2.text ?? "";
+          } else if (record2.type === "message" && record2.role === "assistant") {
+            currentAssistant += record2.text ?? "";
           }
         } catch {}
       }
@@ -31756,378 +32280,6 @@ var init_src3 = __esm(() => {
   init_spec();
 });
 
-// ../../packages/core/src/runtime-gateway.ts
-function record(value) {
-  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
-}
-async function json(response) {
-  try {
-    return await response.json();
-  } catch {
-    throw new RuntimeGatewayError("Runtime Gateway returned invalid JSON", "protocol", response.status);
-  }
-}
-function validHealth(value) {
-  const body = record(value);
-  return Boolean(body?.ok === true && body.v === RUNTIME_GATEWAY_VERSION && Array.isArray(body.capabilities) && typeof body.cursor === "number");
-}
-function validAcknowledgedMessage(value) {
-  const message = record(value);
-  return Boolean(message && typeof message.id === "string" && typeof message.topicId === "string" && typeof message.authorId === "string" && typeof message.text === "string" && typeof message.createdAt === "string");
-}
-function validTurnAck(value) {
-  const body = record(value);
-  return Boolean(body?.ok === true && body.v === RUNTIME_GATEWAY_VERSION && body.accepted === true && typeof body.deduplicated === "boolean" && typeof body.requestId === "string" && typeof body.clientMessageId === "string" && typeof body.topicId === "string" && typeof body.messageId === "string" && (body.message === undefined || validAcknowledgedMessage(body.message)) && typeof body.cursor === "number");
-}
-function validManagerTopic(value) {
-  const topic = record(value);
-  return Boolean(typeof topic?.id === "string" && typeof topic.title === "string" && topic.kind === "manager" && Array.isArray(topic.participants));
-}
-function validDeletedMessage(value) {
-  const message = record(value);
-  return Boolean(typeof message?.id === "string" && typeof message.topicId === "string" && typeof message.authorId === "string" && typeof message.text === "string" && message.deleted === true && typeof message.createdAt === "string");
-}
-function validCronJob(value) {
-  const job = record(value);
-  return Boolean(typeof job?.id === "string" && typeof job.name === "string" && typeof job.executionPrincipalUserId === "string" && typeof job.actorOwnerUserId === "string" && typeof job.topicId === "string" && typeof job.schedule === "string" && typeof job.enabled === "boolean" && typeof job.nextRunAt === "string" && typeof job.canMutate === "boolean");
-}
-async function* parseRuntimeGatewaySse(body) {
-  const reader = body.getReader();
-  const decoder = new TextDecoder;
-  let buffer = "";
-  let event = "message";
-  let id;
-  let data = [];
-  const flush = () => {
-    if (data.length === 0)
-      return null;
-    const raw = data.join(`
-`);
-    data = [];
-    try {
-      return { event, id, data: JSON.parse(raw) };
-    } catch {
-      throw new RuntimeGatewayError("Runtime Gateway SSE event has invalid JSON", "protocol");
-    } finally {
-      event = "message";
-      id = undefined;
-    }
-  };
-  try {
-    while (true) {
-      const chunk = await reader.read();
-      if (chunk.done)
-        break;
-      buffer += decoder.decode(chunk.value, { stream: true }).replace(/\r\n/g, `
-`);
-      let newline = buffer.indexOf(`
-`);
-      while (newline >= 0) {
-        const line = buffer.slice(0, newline);
-        buffer = buffer.slice(newline + 1);
-        if (line === "") {
-          const parsed2 = flush();
-          if (parsed2)
-            yield parsed2;
-        } else if (line.startsWith("event:")) {
-          event = line.slice(6).trim() || "message";
-        } else if (line.startsWith("id:")) {
-          const parsed2 = Number.parseInt(line.slice(3).trim(), 10);
-          if (Number.isFinite(parsed2))
-            id = parsed2;
-        } else if (line.startsWith("data:")) {
-          data.push(line.slice(5).trimStart());
-        }
-        newline = buffer.indexOf(`
-`);
-      }
-    }
-    buffer += decoder.decode();
-    if (buffer.startsWith("data:"))
-      data.push(buffer.slice(5).trimStart());
-    const parsed = flush();
-    if (parsed)
-      yield parsed;
-  } finally {
-    reader.releaseLock();
-  }
-}
-
-class RuntimeGatewayClient {
-  options;
-  pathPrefix;
-  request;
-  requestTimeoutMs;
-  compactTimeoutMs;
-  constructor(options) {
-    this.options = options;
-    this.pathPrefix = options.pathPrefix ?? RUNTIME_GATEWAY_CONTROL_PATH;
-    this.request = options.fetch ?? fetch;
-    this.requestTimeoutMs = options.requestTimeoutMs ?? 5000;
-    this.compactTimeoutMs = options.compactTimeoutMs ?? 5 * 60000;
-  }
-  endpoint(path) {
-    if (!this.options.baseUrl || !this.options.token) {
-      throw new RuntimeGatewayError("Runtime Gateway is not configured", "config");
-    }
-    return `${this.options.baseUrl.replace(/\/+$/, "")}${this.pathPrefix}${path}`;
-  }
-  async authorization() {
-    try {
-      const token = typeof this.options.token === "function" ? await this.options.token() : this.options.token;
-      return `Bearer ${token}`;
-    } catch (error2) {
-      throw new RuntimeGatewayError(error2 instanceof Error ? error2.message : "Runtime Gateway token resolution failed", "config");
-    }
-  }
-  async send(path, init, timeoutMs) {
-    const authorization = await this.authorization();
-    try {
-      return await this.request(this.endpoint(path), {
-        ...init,
-        headers: { authorization, ...init.headers },
-        signal: timeoutMs === undefined ? init.signal : AbortSignal.timeout(timeoutMs)
-      });
-    } catch (error2) {
-      if (error2 instanceof DOMException && error2.name === "TimeoutError") {
-        throw new RuntimeGatewayError("Runtime Gateway request timed out", "timeout");
-      }
-      throw new RuntimeGatewayError("Runtime Gateway request failed", "transport");
-    }
-  }
-  async health() {
-    const response = await this.send("/health", { method: "GET" }, this.requestTimeoutMs);
-    if (!response.ok) {
-      throw new RuntimeGatewayError("Runtime Gateway health request failed", "http", response.status);
-    }
-    const body = await json(response);
-    if (!validHealth(body)) {
-      throw new RuntimeGatewayError("Runtime Gateway health response is incompatible", "protocol");
-    }
-    return body;
-  }
-  async submitTurn(input) {
-    const response = await this.send("/turns", {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, ...input })
-    }, this.requestTimeoutMs);
-    if (response.status !== 202) {
-      throw new RuntimeGatewayError("Runtime Gateway turn was not accepted", "http", response.status);
-    }
-    const body = await json(response);
-    if (!validTurnAck(body)) {
-      throw new RuntimeGatewayError("Runtime Gateway turn acknowledgement is incompatible", "protocol");
-    }
-    return body;
-  }
-  async deriveTopic(topicId, input) {
-    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/derive`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, ...input })
-    }, this.requestTimeoutMs);
-    if (response.status !== 201) {
-      throw new RuntimeGatewayError("Runtime Gateway topic derive failed", "http", response.status);
-    }
-    const body = await json(response);
-    const topic = record(body)?.topic;
-    const topicRecord = record(topic);
-    if (!topicRecord || typeof topicRecord.id !== "string" || typeof topicRecord.title !== "string") {
-      throw new RuntimeGatewayError("Runtime Gateway topic derive response is incompatible", "protocol");
-    }
-    return topic;
-  }
-  async ensureManagerTopic(userId) {
-    const response = await this.send("/manager-topic", {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, userId })
-    }, this.requestTimeoutMs);
-    if (!response.ok) {
-      throw new RuntimeGatewayError("Runtime Gateway manager topic request failed", "http", response.status);
-    }
-    const body = record(await json(response));
-    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION || !validManagerTopic(body.topic)) {
-      throw new RuntimeGatewayError("Runtime Gateway manager topic response is incompatible", "protocol");
-    }
-    return body.topic;
-  }
-  async deleteMessage(topicId, messageId, actorUserId, allowAdmin = false) {
-    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/messages/${encodeURIComponent(messageId)}`, {
-      method: "DELETE",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({
-        v: RUNTIME_GATEWAY_VERSION,
-        actorUserId,
-        ...allowAdmin ? { allowAdmin: true } : {}
-      })
-    }, this.requestTimeoutMs);
-    if (!response.ok) {
-      throw new RuntimeGatewayError("Runtime Gateway message delete failed", "http", response.status);
-    }
-    const body = record(await json(response));
-    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION || !validDeletedMessage(body.message)) {
-      throw new RuntimeGatewayError("Runtime Gateway message delete response is incompatible", "protocol");
-    }
-    return body.message;
-  }
-  async cronRequest(path, init) {
-    const response = await this.send(path, init, this.requestTimeoutMs);
-    if (!response.ok) {
-      throw new RuntimeGatewayError("Runtime Gateway cron request failed", "http", response.status);
-    }
-    const body = record(await json(response));
-    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION) {
-      throw new RuntimeGatewayError("Runtime Gateway cron response is incompatible", "protocol");
-    }
-    return body;
-  }
-  async listCronScripts() {
-    const body = await this.cronRequest("/cron/scripts", { method: "GET" });
-    if (!Array.isArray(body.scripts) || !body.scripts.every((value) => typeof value === "string")) {
-      throw new RuntimeGatewayError("Runtime Gateway cron scripts are incompatible", "protocol");
-    }
-    return body.scripts;
-  }
-  async listCronJobs(userId, actorUserId, actorIsAdmin = false) {
-    const search = new URLSearchParams({
-      user: userId,
-      actorUserId,
-      actorIsAdmin: actorIsAdmin ? "1" : "0"
-    });
-    const body = await this.cronRequest(`/cron/jobs?${search}`, { method: "GET" });
-    if (!Array.isArray(body.jobs) || !body.jobs.every(validCronJob)) {
-      throw new RuntimeGatewayError("Runtime Gateway cron jobs are incompatible", "protocol");
-    }
-    return body.jobs;
-  }
-  async createCronJob(input) {
-    const body = await this.cronRequest("/cron/jobs", {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, ...input })
-    });
-    if (!validCronJob(body.job)) {
-      throw new RuntimeGatewayError("Runtime Gateway cron job is incompatible", "protocol");
-    }
-    return body.job;
-  }
-  async updateCronJob(jobId, userId, actorUserId, patch, actorIsAdmin = false) {
-    const body = await this.cronRequest(`/cron/jobs/${encodeURIComponent(jobId)}`, {
-      method: "PATCH",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({
-        v: RUNTIME_GATEWAY_VERSION,
-        userId,
-        actorUserId,
-        actorIsAdmin,
-        patch
-      })
-    });
-    if (!validCronJob(body.job)) {
-      throw new RuntimeGatewayError("Runtime Gateway cron job is incompatible", "protocol");
-    }
-    return body.job;
-  }
-  async deleteCronJob(jobId, userId, actorUserId, actorIsAdmin = false) {
-    const search = new URLSearchParams({
-      user: userId,
-      actorUserId,
-      actorIsAdmin: actorIsAdmin ? "1" : "0"
-    });
-    const body = await this.cronRequest(`/cron/jobs/${encodeURIComponent(jobId)}?${search}`, {
-      method: "DELETE"
-    });
-    if (typeof body.deleted !== "string") {
-      throw new RuntimeGatewayError("Runtime Gateway cron delete is incompatible", "protocol");
-    }
-    return body.deleted;
-  }
-  async* events(after, topicId, signal) {
-    const search = new URLSearchParams({ after: String(Math.max(0, after)) });
-    if (topicId)
-      search.set("topicId", topicId);
-    const response = await this.send(`/events?${search}`, { method: "GET", signal });
-    if (!response.ok || !response.body) {
-      throw new RuntimeGatewayError("Runtime Gateway event stream failed", "http", response.status);
-    }
-    yield* parseRuntimeGatewaySse(response.body);
-  }
-  async getTopicUsage(topicId, userId) {
-    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/usage?user=${encodeURIComponent(userId)}`, { method: "GET" }, this.requestTimeoutMs);
-    if (!response.ok) {
-      throw new RuntimeGatewayError("Runtime Gateway topic usage request failed", "http", response.status);
-    }
-    const usage = record(record(await json(response))?.usage);
-    const read = (key) => {
-      const value = usage?.[key];
-      return typeof value === "number" && Number.isFinite(value) ? value : 0;
-    };
-    return {
-      queries: read("queries"),
-      inputTokens: read("inputTokens"),
-      outputTokens: read("outputTokens"),
-      cacheCreationInputTokens: read("cacheCreationInputTokens"),
-      cacheReadInputTokens: read("cacheReadInputTokens"),
-      estimatedCostUsd: read("estimatedCostUsd")
-    };
-  }
-  async abortTurn(topicId, userId) {
-    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/abort`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, userId })
-    }, this.requestTimeoutMs);
-    if (!response.ok) {
-      throw new RuntimeGatewayError("Runtime Gateway turn abort failed", "http", response.status);
-    }
-    const body = record(await json(response));
-    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION || typeof body.aborted !== "boolean") {
-      throw new RuntimeGatewayError("Runtime Gateway turn abort response is incompatible", "protocol");
-    }
-    return body.aborted;
-  }
-  async resetSession(topicId, userId, reason, actorUserId) {
-    return this.sessionCommand(topicId, userId, "reset", reason, actorUserId);
-  }
-  async compactSession(topicId, userId, reason, actorUserId) {
-    return this.sessionCommand(topicId, userId, "compact", reason, actorUserId);
-  }
-  async sessionCommand(topicId, userId, command, reason, actorUserId) {
-    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/session/${command}`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({
-        v: RUNTIME_GATEWAY_VERSION,
-        userId,
-        ...actorUserId ? { actorUserId } : {},
-        ...reason ? { reason } : {}
-      })
-    }, command === "compact" ? this.compactTimeoutMs : this.requestTimeoutMs);
-    if (!response.ok) {
-      throw new RuntimeGatewayError(`Runtime Gateway session ${command} failed`, "http", response.status);
-    }
-    const body = record(await json(response));
-    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION) {
-      throw new RuntimeGatewayError(`Runtime Gateway session ${command} response is incompatible`, "protocol");
-    }
-    return typeof body.result === "string" ? body.result : undefined;
-  }
-}
-var RUNTIME_GATEWAY_VERSION = 1, RUNTIME_GATEWAY_CONTROL_PATH = "/api/v1/control/runtime/v1", RuntimeGatewayError;
-var init_runtime_gateway = __esm(() => {
-  RuntimeGatewayError = class RuntimeGatewayError extends Error {
-    kind;
-    status;
-    constructor(message, kind, status) {
-      super(message);
-      this.kind = kind;
-      this.status = status;
-    }
-  };
-});
-
 // ../../packages/core/src/cron-host.ts
 var init_cron_host = __esm(async () => {
   await init_topic_cleanup();
@@ -34504,6 +34656,7 @@ function createNodeControlHandler(options) {
             aiName: getGlobalAiName(),
             capabilities: [
               "turn-submit-idempotent",
+              "host-mcp-turn-injection",
               "turn-events-sse-resume",
               "canonical-topic-read",
               "canonical-message-read",
@@ -34728,6 +34881,16 @@ function createNodeControlHandler(options) {
           const requestId = body.requestId === undefined ? undefined : asRequestId(requiredText(body.requestId, "requestId"));
           const threadRootId = body.threadRootId === undefined ? undefined : asMessageId(requiredText(body.threadRootId, "threadRootId"));
           const parentId = body.parentId === undefined ? undefined : asMessageId(requiredText(body.parentId, "parentId"));
+          let hostMcpServers;
+          try {
+            hostMcpServers = parseHostMcpServers(body.hostMcpServers);
+          } catch (error2) {
+            throw new ControlRequestError(error2 instanceof Error ? error2.message : "invalid hostMcpServers");
+          }
+          const conflictingHostMcpName = Object.keys(hostMcpServers ?? {}).find(isReservedRuntimeMcpServerName);
+          if (conflictingHostMcpName) {
+            return jsonError(400, `host MCP server name conflicts with node catalog: ${conflictingHostMcpName}`);
+          }
           const attachments2 = body.attachments === undefined ? [] : Array.isArray(body.attachments) && body.attachments.every((value) => typeof value === "string" && value.trim()) ? body.attachments : (() => {
             throw new ControlRequestError("attachments must be an array of file ids");
           })();
@@ -34740,6 +34903,9 @@ function createNodeControlHandler(options) {
           if (!topic.participants.some((participant) => participant.userId === userId)) {
             return jsonError(404, "Topic not found");
           }
+          if (hostMcpServers !== undefined && topic.kind !== "manager") {
+            return jsonError(400, "hostMcpServers is only allowed for manager topics");
+          }
           if (attachments2.some((fileId) => !nodeFileStore.allows(fileId, { topicId, ownerUserId: userId }))) {
             return jsonError(404, "Attachment not found");
           }
@@ -34773,6 +34939,7 @@ function createNodeControlHandler(options) {
             silent: body.silent === true,
             visualTools: body.visualTools === true,
             fileDeliveryTools: body.fileDeliveryTools === true,
+            hostMcpServers,
             ...attachments2.length ? { attachments: attachments2 } : {},
             ...threadRootId ? { threadRootId } : {},
             ...parentId ? { parentId } : {}
@@ -51271,4 +51438,4 @@ switch (command) {
   }
 }
 
-//# debugId=1BEBC79E50C92F0764756E2164756E21
+//# debugId=F4E62DD52039241264756E2164756E21