negotium 0.14.3 → 0.15.0

package/dist/agent-helpers.js

@@ -331,19 +331,13 @@ function loadOrCreateLocalSecret(envKey, filename, options = {}) {
     return stored;
   }
 }
-function resolveModelEnv(envKey, agentConst) {
-  return envText(envKey) ?? (agentConst === FALLBACK_AGENT ? FALLBACK_MODEL : undefined);
-}
-function resolveDefaultModel(agent, registryDefaultModel) {
-  return agent === SESSION_AGENT && SESSION_MODEL ? SESSION_MODEL : registryDefaultModel;
-}
 function resolveWhisperBackend() {
   return envText("WHISPER_BACKEND") === "mlx-whisper" ? "mlx-whisper" : "faster-whisper";
 }
 function codexAuthFilePath() {
   return process.env.NEGOTIUM_CODEX_AUTH_FILE || join(process.env.CODEX_HOME || join(homedir(), ".codex"), "auth.json");
 }
-var HOME, PROJECT_ROOT, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.4.0", BROWSER_RS_MIN_SECURE_VERSION = "0.2.1", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.7", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5-1", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, DEFAULT_TOPIC_EFFORT, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, WHISPER_BACKEND, MLX_WHISPER_BIN, WHISPER_MODEL_MLX, _envMaxTellDepth, MAX_TELL_DEPTH;
+var HOME, PROJECT_ROOT, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.4.0", BROWSER_RS_MIN_SECURE_VERSION = "0.2.1", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.7", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5-1", FALLBACK_AGENT, FALLBACK_MODEL, DEFAULT_TOPIC_EFFORT, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, WHISPER_BACKEND, MLX_WHISPER_BIN, WHISPER_MODEL_MLX, _envMaxTellDepth, MAX_TELL_DEPTH;
 var init_config = __esm(() => {
   init_config_helpers();
   init_logger();
@@ -431,12 +425,8 @@ var init_config = __esm(() => {
   AGENTS_PROMPTS_DIR = resolve2(PROJECT_ROOT, "src/prompts/agents");
   RESOURCES_DIR = resolve2(PROJECT_ROOT, "src/resources");
   FILE_TAG_REGEX = /\[FILE:(\/[^\]]+)\]/gi;
-  FALLBACK_AGENT = resolveAgentEnv("FALLBACK_AGENT", "maestro", "DEFAULT_AGENT");
-  SESSION_AGENT = resolveAgentEnv("SESSION_AGENT", FALLBACK_AGENT);
-  GATEWAY_AGENT = resolveAgentEnv("GATEWAY_AGENT", FALLBACK_AGENT);
+  FALLBACK_AGENT = resolveAgentEnv("FALLBACK_AGENT", "claude", "DEFAULT_AGENT");
   FALLBACK_MODEL = envText("FALLBACK_MODEL") ?? envText("DEFAULT_MODEL");
-  SESSION_MODEL = resolveModelEnv("SESSION_MODEL", SESSION_AGENT);
-  GATEWAY_MODEL = resolveModelEnv("GATEWAY_MODEL", GATEWAY_AGENT);
   DEFAULT_TOPIC_EFFORT = (() => {
     const raw = envText("NEGOTIUM_DEFAULT_EFFORT")?.toLowerCase();
     return raw && EFFORT_VALUES.includes(raw) ? raw : "medium";
@@ -1008,6 +998,19 @@ function refreshForumCatalogViews() {
   requiredForumMcpServers.splice(0, requiredForumMcpServers.length, ...required);
   optionalForumMcpServers.splice(0, optionalForumMcpServers.length, ...optional);
 }
+function isReservedRuntimeMcpServerName(name) {
+  return Object.hasOwn(MCP_CATALOG, name) || nodeMcpEntries.some((entry) => entry.key === name);
+}
+function mergeHostMcpServers(base, hostMcpServers) {
+  if (!hostMcpServers)
+    return base;
+  for (const name of Object.keys(hostMcpServers)) {
+    if (Object.hasOwn(base, name) || isReservedRuntimeMcpServerName(name)) {
+      throw new Error(`host MCP server name conflicts with node catalog: ${name}`);
+    }
+  }
+  return { ...base, ...hostMcpServers };
+}
 function buildNodeMcpSpecs(agent, filter) {
   const out = {};
   for (const entry of nodeMcpEntries) {
@@ -1184,7 +1187,7 @@ function getMcpServersForQuery(opts) {
     });
   }
   if (opts.sessionType === "manager") {
-    return getManagerMcpServers({
+    return mergeHostMcpServers(getManagerMcpServers({
       userId: opts.userId || "local",
       session: opts.session,
       topicId: opts.topicId,
@@ -1199,7 +1202,7 @@ function getMcpServersForQuery(opts) {
       autoContinue: opts.autoContinue,
       visualTools: opts.visualTools,
       fileDeliveryTools: opts.fileDeliveryTools
-    });
+    }), opts.hostMcpServers);
   }
   return getForumMcpServers({
     userId: opts.userId || "local",
@@ -3072,7 +3075,7 @@ var init_codex = __esm(async () => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.14.3";
+var NEGOTIUM_VERSION = "0.15.0";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn2 } from "child_process";
@@ -3565,8 +3568,7 @@ var init_maestro_registry = __esm(() => {
     "kimi-code": "kimi-k2.7-code",
     glm: "glm-5.3",
     "glm-pro": "glm-5.3",
-    "glm-flash": "glm-5.3-flash",
-    "glm-5.2": "glm-5.2"
+    "glm-flash": "glm-5.3-flash"
   };
   VALID_MODELS = new Set([...Object.keys(ALIAS_MAP2), ...Object.values(ALIAS_MAP2)]);
   VALID_EFFORTS3 = new Set(MAESTRO_EFFORT_VALUES);
@@ -5572,8 +5574,11 @@ function toCodexMcpServers(claudeShape) {
     if (typeof s.url === "string" && s.type !== "sse") {
       out[codexName] = withCodexMcpServerOverrides(name, {
         url: s.url,
-        ...s.http_headers && typeof s.http_headers === "object" ? { http_headers: s.http_headers } : {},
-        ...s.env_http_headers && typeof s.env_http_headers === "object" ? { env_http_headers: s.env_http_headers } : {}
+        ...s.http_headers && typeof s.http_headers === "object" || s.headers && typeof s.headers === "object" ? {
+          http_headers: s.http_headers ?? s.headers
+        } : {},
+        ...s.env_http_headers && typeof s.env_http_headers === "object" ? { env_http_headers: s.env_http_headers } : {},
+        ...typeof s.timeout === "number" ? { tool_timeout_sec: Math.max(1, Math.ceil(s.timeout / 1000)) } : {}
       });
     }
   }
@@ -6309,17 +6314,20 @@ import { join as join14 } from "path";
 async function* dispatchAgent(opts) {
   switch (opts.agent) {
     case "claude": {
-      const { claudeProvider: claudeProvider2 } = await init_claude_provider().then(() => exports_claude_provider);
+      claudeProviderImport ??= init_claude_provider().then(() => exports_claude_provider);
+      const { claudeProvider: claudeProvider2 } = await claudeProviderImport;
       yield* claudeProvider2(opts);
       return;
     }
     case "codex": {
-      const { codexProvider: codexProvider2 } = await init_codex_provider().then(() => exports_codex_provider);
+      codexProviderImport ??= init_codex_provider().then(() => exports_codex_provider);
+      const { codexProvider: codexProvider2 } = await codexProviderImport;
       yield* codexProvider2(opts);
       return;
     }
     case "maestro": {
-      const { maestroProvider: maestroProvider2 } = await init_maestro_provider().then(() => exports_maestro_provider);
+      maestroProviderImport ??= init_maestro_provider().then(() => exports_maestro_provider);
+      const { maestroProvider: maestroProvider2 } = await maestroProviderImport;
       yield* maestroProvider2(opts);
       return;
     }
@@ -6412,6 +6420,7 @@ async function* runAgent(opts) {
     yield event;
   }
 }
+var claudeProviderImport, codexProviderImport, maestroProviderImport;
 var init_agents = __esm(async () => {
   await init_execution_host();
   await init_registry();
@@ -6695,6 +6704,7 @@ var exports_model_catalog = {};
 __export(exports_model_catalog, {
   selectableModel: () => selectableModel,
   resolveModelForAgent: () => resolveModelForAgent,
+  resolveDefaultModel: () => resolveDefaultModel,
   resolveCompactionExecution: () => resolveCompactionExecution,
   modelOwner: () => modelOwner,
   formatSelectableModel: () => formatSelectableModel,
@@ -6731,8 +6741,18 @@ function modelOwner(model) {
     return "codex";
   return MODEL_OWNER[model];
 }
+function resolveDefaultModel(agent, registry) {
+  if (agent !== FALLBACK_AGENT || !FALLBACK_MODEL)
+    return registry.defaultModel;
+  const candidate = canonicalModelId(FALLBACK_MODEL);
+  const owner = modelOwner(candidate);
+  if (owner && owner !== agent || !registry.validateModel(candidate)) {
+    return registry.defaultModel;
+  }
+  return candidate;
+}
 function resolveModelForAgent(agent, requested, registry) {
-  const defaultModel = resolveDefaultModel(agent, registry.defaultModel);
+  const defaultModel = resolveDefaultModel(agent, registry);
   if (!requested)
     return defaultModel;
   const candidate = canonicalModelId(requested);
@@ -6772,7 +6792,6 @@ var init_model_catalog = __esm(() => {
     "glm-pro": "maestro",
     "glm-flash": "maestro",
     "glm-5.3": "maestro",
-    "glm-5.2": "maestro",
     "glm-5.3-flash": "maestro"
   };
   SELECTABLE_MODELS = [
@@ -6876,16 +6895,6 @@ var init_model_catalog = __esm(() => {
       marginalTokenCost: "Approximate GLM API rate: $1.40/M input, $4.40/M output",
       estimatedUsage: "No subscription token cap; pay per token. Always uses thinking and supports a 1M-token context window; text-only input."
     },
-    {
-      model: "glm-5.2",
-      agent: "maestro",
-      description: "Previous-generation GLM flagship for cost-efficient everyday work.",
-      intelligenceTier: "sonnet",
-      routingSummary: "previous-gen flagship; 1M context; cost-efficient everyday work, cheaper than glm-5.3",
-      accessCost: "Zhipu AI pay-as-you-go API; no monthly subscription required",
-      marginalTokenCost: "Approximate GLM API rate: $0.95/M input, $3/M output",
-      estimatedUsage: "No subscription token cap; pay per token. Always uses thinking and supports a 1M-token context window; text-only input."
-    },
     {
       model: "glm-5.3-flash",
       agent: "maestro",
@@ -8487,19 +8496,19 @@ function ensurePersonalGeneral(userId, surface, opts = {}) {
       upsertTopic(existing);
     }
     if (!getApiTopicConfig(existing.id)) {
-      setApiTopicConfig(existing.id, { model: "deepseek-pro", modelLocked: true });
+      setApiTopicConfig(existing.id, {});
     }
     return existing;
   }
   const now = new Date().toISOString();
-  const registry = getRegistry("maestro");
+  const registry = getRegistry(FALLBACK_AGENT);
   const topic = {
     id: randomUUID5(),
     title: "General",
     description: PERSONAL_GENERAL_DESCRIPTION,
     kind: "manager",
-    agent: "maestro",
-    defaultModel: resolveDefaultModel("maestro", registry.defaultModel),
+    agent: FALLBACK_AGENT,
+    defaultModel: resolveDefaultModel(FALLBACK_AGENT, registry),
     defaultEffort: registry.defaultEffort ?? "medium",
     aiMode: "always",
     aiMention: false,
@@ -8510,7 +8519,7 @@ function ensurePersonalGeneral(userId, surface, opts = {}) {
     lastMessageAt: now
   };
   upsertTopic(topic);
-  setApiTopicConfig(topic.id, { model: "deepseek-pro", modelLocked: true });
+  setApiTopicConfig(topic.id, {});
   return topic;
 }
 function isLegacySharedGeneral(topicId) {
@@ -8518,6 +8527,7 @@ function isLegacySharedGeneral(topicId) {
 }
 var LEGACY_PERSONAL_GENERAL_DESCRIPTION = "\uB098\uB9CC\uC758 \uAC1C\uC778 \uACF5\uAC04\uC774\uC5D0\uC694. \uB300\uD654\uC640 AI \uC791\uC5C5\uC740 \uB2E4\uB978 \uC0AC\uC6A9\uC790\uC5D0\uAC8C \uACF5\uAC1C\uB418\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.", PERSONAL_GENERAL_DESCRIPTION = "Your private General. Messages and membership are visible only to you. Workspace memory, wiki, and skills are shared with your workspace.";
 var init_personal_general = __esm(async () => {
+  init_model_catalog();
   await init_registry();
   init_config();
   init_constants();
@@ -8607,7 +8617,7 @@ function createArchiverRuntime(host) {
     }
     const wikiDir = host.storage.getWikiDir();
     const safeTopic = host.config.sanitizeTopicName(topicTitle);
-    const agent = params.agent ?? "claude";
+    const agent = params.agent ?? FALLBACK_AGENT;
     const model = params.model;
     const outputLanguage = resolveMemoryLanguage();
     const generalReplyInstruction = `Reply with a short completion message in ${outputLanguage} for display in #General. ` + "Do not include tool-call logs or raw transcripts \u2014 just briefly name the summary / brief / articles you saved.";
@@ -12561,7 +12571,7 @@ var init_token_stats = __esm(async () => {
     "maestro:kimi-k3": { input: 3, cacheRead: 0.3, output: 15 },
     "maestro:kimi-k2.7-code": { input: 0.95, cacheRead: 0.19, output: 4 },
     "maestro:glm-5.3": { input: 1.4, cacheRead: 1.4, output: 4.4 },
-    "maestro:glm-5.2": { input: 0.95, cacheRead: 0.95, output: 3 },
+    "maestro:glm-5.2": { input: 1.4, cacheRead: 1.4, output: 4.4 },
     "maestro:glm-5.3-flash": { input: 0.15, cacheRead: 0.15, output: 0.5 },
     "maestro:deepseek-pro": { input: 0.435, cacheRead: 0.003625, output: 0.87 },
     "maestro:deepseek-flash": { input: 0.14, cacheRead: 0.0028, output: 0.28 }
@@ -15349,6 +15359,108 @@ body{font-family:system-ui,-apple-system,"Segoe UI",sans-serif;background:var(--
 </style>`;
 });
 
+// ../../packages/core/src/runtime-gateway.ts
+function parseHostMcpServers(value) {
+  if (value === undefined)
+    return;
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new TypeError("hostMcpServers must be an object");
+  }
+  const parsedEntries = [];
+  for (const [name, raw] of Object.entries(value)) {
+    if (!HOST_MCP_SERVER_NAME.test(name)) {
+      throw new TypeError(`invalid host MCP server name: ${name}`);
+    }
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+      throw new TypeError(`hostMcpServers.${name} must be an object`);
+    }
+    const spec = raw;
+    const unsupported = Object.keys(spec).find((key) => !HOST_MCP_SERVER_KEYS.has(key));
+    if (unsupported) {
+      throw new TypeError(`hostMcpServers.${name}.${unsupported} is not allowed`);
+    }
+    if (spec.type !== "sse" && spec.type !== "http") {
+      throw new TypeError(`hostMcpServers.${name}.type must be sse or http`);
+    }
+    if (typeof spec.url !== "string") {
+      throw new TypeError(`hostMcpServers.${name}.url must be a string`);
+    }
+    let url;
+    try {
+      url = new URL(spec.url);
+    } catch {
+      throw new TypeError(`hostMcpServers.${name}.url must be a valid URL`);
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+      throw new TypeError(`hostMcpServers.${name}.url must use http or https`);
+    }
+    let headers;
+    if (spec.headers !== undefined) {
+      if (!spec.headers || typeof spec.headers !== "object" || Array.isArray(spec.headers)) {
+        throw new TypeError(`hostMcpServers.${name}.headers must be an object`);
+      }
+      const headerEntries = [];
+      for (const [key, headerValue] of Object.entries(spec.headers)) {
+        if (!HTTP_HEADER_NAME.test(key) || typeof headerValue !== "string") {
+          throw new TypeError(`hostMcpServers.${name}.headers must contain string values`);
+        }
+        try {
+          new Headers([[key, headerValue]]);
+        } catch {
+          throw new TypeError(`hostMcpServers.${name}.headers contains an invalid header`);
+        }
+        headerEntries.push([key, headerValue]);
+      }
+      headers = Object.fromEntries(headerEntries);
+    }
+    if (spec.timeout !== undefined && (typeof spec.timeout !== "number" || !Number.isFinite(spec.timeout) || spec.timeout <= 0)) {
+      throw new TypeError(`hostMcpServers.${name}.timeout must be a positive number`);
+    }
+    parsedEntries.push([
+      name,
+      {
+        type: spec.type,
+        url: url.toString(),
+        ...headers ? { headers } : {},
+        ...spec.timeout !== undefined ? { timeout: spec.timeout } : {}
+      }
+    ]);
+  }
+  return Object.fromEntries(parsedEntries);
+}
+var HOST_MCP_SERVER_NAME, HOST_MCP_SERVER_KEYS, HTTP_HEADER_NAME;
+var init_runtime_gateway = __esm(() => {
+  HOST_MCP_SERVER_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+  HOST_MCP_SERVER_KEYS = new Set(["type", "url", "headers", "timeout"]);
+  HTTP_HEADER_NAME = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+});
+
+// ../../packages/core/src/storage/topic-host-mcp-grants.ts
+function getTopicHostMcpGrant(topicId) {
+  const row = db.query("SELECT servers_json FROM api_topic_host_mcp_grants WHERE topic_id = ?").get(topicId);
+  if (!row)
+    return null;
+  try {
+    return parseHostMcpServers(JSON.parse(row.servers_json)) ?? null;
+  } catch {
+    return null;
+  }
+}
+function deleteTopicHostMcpGrant(topicId) {
+  db.query("DELETE FROM api_topic_host_mcp_grants WHERE topic_id = ?").run(topicId);
+}
+var init_topic_host_mcp_grants = __esm(async () => {
+  init_runtime_gateway();
+  await init_forum_db();
+  db.exec(`
+  CREATE TABLE IF NOT EXISTS api_topic_host_mcp_grants (
+    topic_id     TEXT PRIMARY KEY,
+    servers_json TEXT NOT NULL,
+    updated_at   TEXT NOT NULL
+  )
+`);
+});
+
 // ../../packages/core/src/storage/topic-tool-capabilities.ts
 function getTopicToolCapabilities(topicId) {
   const row = db.query(`SELECT visual_tools, file_delivery_tools
@@ -15527,6 +15639,7 @@ async function deleteTopicCascadeImpl(topic, userId, options, deletingAncestorId
       logger.warn({ err: err2, topicId, cwd }, "deleteTopicCascade: workspace cleanup failed");
     }
     deleteTopicVisuals(topicId);
+    deleteTopicHostMcpGrant(topicId);
     deleteTopicToolCapabilities(topicId);
     deleteTopicArchiveState(topicId);
     deleteMessagesForTopic(topicId);
@@ -15589,6 +15702,7 @@ var init_lifecycle = __esm(async () => {
   await init_token_stats();
   await init_topic_archive();
   await init_topic_archive_state();
+  await init_topic_host_mcp_grants();
   await init_topic_tool_capabilities();
   TopicArchiveRequiredError = class TopicArchiveRequiredError extends Error {
     code = "TOPIC_ARCHIVE_FAILED";
@@ -17059,11 +17173,13 @@ __export(exports_turn_runner, {
   resolveWikiMemoryMirror: () => resolveWikiMemoryMirror,
   resolveVisualMediaInput: () => resolveVisualMediaInput,
   resolveTurnToolCapabilities: () => resolveTurnToolCapabilities,
+  resolveTurnHostMcpServers: () => resolveTurnHostMcpServers,
   resolveTopicTurnSession: () => resolveTopicTurnSession,
   resolveTopicTurnExecution: () => resolveTopicTurnExecution,
   resolveSessionRetry: () => resolveSessionRetry,
   resolveModelForAgent: () => resolveModelForAgent,
   resolveInitialTurnSessionId: () => resolveInitialTurnSessionId,
+  resolveDefaultModel: () => resolveDefaultModel,
   resolveCompactionExecution: () => resolveCompactionExecution,
   renderUserTurnBatch: () => renderUserTurnBatch,
   renderUserPromptBatch: () => renderUserPromptBatch,
@@ -17415,6 +17531,12 @@ function resolveTurnToolCapabilities(topicId, params) {
     fileDeliveryTools: params.fileDeliveryTools ?? granted?.fileDeliveryTools ?? false
   };
 }
+function resolveTurnHostMcpServers(topic, sessionType) {
+  const effectiveSessionType = sessionType ?? (topic.kind === "manager" ? "manager" : "forum");
+  if (topic.kind !== "manager" || effectiveSessionType !== "manager")
+    return;
+  return getTopicHostMcpGrant(topic.id) ?? undefined;
+}
 function mergeSupersedingUserTurn(running, incoming) {
   const userMessages = [
     ...running.userMessages ?? [legacyUserTurnEnvelope(running.prompt, running.attachments)],
@@ -17634,6 +17756,7 @@ function startAiTurn(params) {
   const sessionName = params.sessionName ?? topic.title;
   const sessionType = params.sessionType;
   const { visualTools, fileDeliveryTools } = resolveTurnToolCapabilities(topicId, params);
+  const hostMcpServers = resolveTurnHostMcpServers(topic, sessionType);
   const onSessionId = params.onSessionId;
   const onSessionReset = params.onSessionReset;
   const bridgeSessionFromHistory = params.bridgeSessionFromHistory === true;
@@ -18133,6 +18256,7 @@ function startAiTurn(params) {
         autoContinue: allowAutoContinue && !silent,
         visualTools,
         fileDeliveryTools,
+        hostMcpServers,
         ...threadRootId ? { threadRootId } : {},
         peerBridge
       });
@@ -18476,6 +18600,7 @@ var init_turn_runner = __esm(async () => {
   await init_runtime_leases();
   await init_runtime_topic_state();
   await init_runtime_turn_requests();
+  await init_topic_host_mcp_grants();
   await init_topic_tool_capabilities();
   await init_wiki();
   init_wiki_summary_names();
@@ -20538,4 +20663,4 @@ export {
   DEFAULT_SELF_CONFIG_PRODUCT
 };
 
-//# debugId=4F08424E019BC37B64756E2164756E21
+//# debugId=AF4C7F4033D476D264756E2164756E21