nodal-agents 0.9.8 → 0.9.9

package/cli.js

@@ -12493,6 +12493,9 @@ var init_types2 = __esm({
 
 // ../../packages/shared/src/enums.ts
 import { z as z3 } from "zod";
+function isTerminalJobStatus(status) {
+  return TERMINAL_STATUSES.includes(status);
+}
 var JOB_CHANNELS, JobChannelSchema, JOB_STATUSES, JobStatusSchema, TERMINAL_STATUSES, LIVE_JOB_STATUSES, TASK_STATUSES, TaskStatusSchema, TASK_PRIORITIES, TaskPrioritySchema, AGENT_ROLES, AgentRoleSchema, ORCHESTRATOR_MODES, OrchestratorModeSchema, CONNECTOR_AUTH_TYPES, ConnectorAuthTypeSchema, APPROVAL_STATUSES, ApprovalStatusSchema, APPROVAL_RULE_ACTIONS, ApprovalRuleActionSchema, MEMORY_CATEGORIES, MemoryCategorySchema, MEMORY_SOURCES, MemorySourceSchema, MEMORY_LAYERS, MemoryLayerSchema, SCHEDULE_TYPES, ScheduleTypeSchema, SCHEDULE_LAST_STATUSES, ScheduleLastStatusSchema, ENTITY_MEMBER_ROLES, EntityMemberRoleSchema, ENTITY_INDUSTRIES, EntityIndustrySchema, OPERATION_RISK_LEVELS, OperationRiskLevelSchema, TOOL_CARDS, ToolCardSchema, MCP_TRANSPORTS, McpTransportSchema;
 var init_enums = __esm({
   "../../packages/shared/src/enums.ts"() {
@@ -12664,7 +12667,12 @@ var init_tool_cards = __esm({
       files: z4.array(
         z4.object({
           path: text2(CARD_LABEL_MAX),
-          action: z4.enum(["created", "modified", "written", "listed"]),
+          action: z4.enum(["created", "modified", "written", "listed", "moved", "copied"]),
+          /**
+           * Où était le fichier, pour `moved` et `copied` (#879) : `path` est
+           * où il se trouve maintenant. Absent pour tout autre geste.
+           */
+          from: text2(CARD_LABEL_MAX).optional(),
           bytes: z4.number().int().nonnegative().optional(),
           /** Ce que l'outil dit de ce fichier (« 3 lignes ajoutées · feuille Data »). */
           detail: text2(CARD_LABEL_MAX).optional(),
@@ -13915,7 +13923,7 @@ function findModelCatalogEntry(provider, modelId) {
   const same = entries.filter((e) => modelIdKey(e.modelId) === key);
   return same.length === 1 ? same[0] : void 0;
 }
-var MODEL_CATALOG, VISION_MODEL_IDS, VISION_MODEL_KEYS, CATALOG_MODEL_KEYS;
+var MODEL_CATALOG, VISION_MODEL_IDS, PDF_MODEL_IDS, VISION_MODEL_KEYS, PDF_MODEL_KEYS, CATALOG_MODEL_KEYS;
 var init_model_catalog = __esm({
   "../../packages/shared/src/model-catalog.ts"() {
     "use strict";
@@ -14335,6 +14343,7 @@ var init_model_catalog = __esm({
           label: "Claude Opus 5",
           capabilities: {
             tools: true,
+            cacheControl: true,
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
@@ -14350,6 +14359,7 @@ var init_model_catalog = __esm({
           label: "Claude Sonnet 5",
           capabilities: {
             tools: true,
+            cacheControl: true,
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
@@ -14365,6 +14375,7 @@ var init_model_catalog = __esm({
           label: "Claude Fable 5",
           capabilities: {
             tools: true,
+            cacheControl: true,
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
@@ -14388,6 +14399,7 @@ var init_model_catalog = __esm({
           label: "Claude Fable 5.1",
           capabilities: {
             tools: true,
+            cacheControl: true,
             reasoningControl: {
               kind: "effort",
               levels: ["low", "medium", "high", "max"],
@@ -14412,6 +14424,7 @@ var init_model_catalog = __esm({
           label: "Claude Sonnet 5.5",
           capabilities: {
             tools: true,
+            cacheControl: true,
             reasoningControl: {
               kind: "effort",
               levels: ["low", "medium", "high", "max"],
@@ -14440,6 +14453,7 @@ var init_model_catalog = __esm({
           label: "Claude Haiku 5.5",
           capabilities: {
             tools: true,
+            cacheControl: true,
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
@@ -14604,6 +14618,7 @@ var init_model_catalog = __esm({
           label: "Claude Haiku 4.5",
           capabilities: {
             tools: true,
+            cacheControl: true,
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 2e5,
@@ -14621,6 +14636,7 @@ var init_model_catalog = __esm({
           label: "Claude Opus 4.7",
           capabilities: {
             tools: true,
+            cacheControl: true,
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
@@ -14636,6 +14652,7 @@ var init_model_catalog = __esm({
           label: "Claude Opus 4.8",
           capabilities: {
             tools: true,
+            cacheControl: true,
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
@@ -14651,6 +14668,7 @@ var init_model_catalog = __esm({
           label: "Claude Sonnet 4.6",
           capabilities: {
             tools: true,
+            cacheControl: true,
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
@@ -15433,10 +15451,52 @@ var init_model_catalog = __esm({
       "kimi-k2.7-code",
       "kimi-k3"
     ]);
+    PDF_MODEL_IDS = /* @__PURE__ */ new Set([
+      "claude-opus-5",
+      "claude-sonnet-5",
+      "claude-fable-5",
+      "claude-opus-4-8",
+      "claude-sonnet-4-6",
+      "claude-haiku-4-5-20251001",
+      "gemini-3.7-flash",
+      "gemini-3.5-flash",
+      "gemini-3.1-pro-preview",
+      "mistral-large-latest",
+      "anthropic/claude-opus-5",
+      "anthropic/claude-sonnet-5",
+      "anthropic/claude-fable-5",
+      "anthropic/claude-fable-5.1",
+      "anthropic/claude-sonnet-5.5",
+      "anthropic/claude-haiku-5.5",
+      "openai/gpt-5.6-luna",
+      "openai/gpt-5.6-luna-pro",
+      "openai/gpt-5.6-terra-pro",
+      "openai/gpt-5.6-terra",
+      "openai/gpt-5.6-sol",
+      "openai/gpt-5.6-sol-pro",
+      "openai/gpt-6-astra",
+      "openai/gpt-6-astra-pro",
+      "anthropic/claude-haiku-4.5",
+      "anthropic/claude-opus-4.7",
+      "anthropic/claude-opus-4.8",
+      "anthropic/claude-sonnet-4.6",
+      "google/gemini-3.1-flash-lite-preview",
+      "google/gemini-3.1-pro-preview",
+      "google/gemini-3.5-flash",
+      "google/gemini-3.6-flash",
+      "google/gemini-3.7-flash",
+      "x-ai/grok-4.5",
+      "x-ai/grok-4.6",
+      "x-ai/grok-4.7"
+    ]);
     for (const entries of Object.values(MODEL_CATALOG)) {
-      for (const e of entries) e.capabilities.vision = VISION_MODEL_IDS.has(e.modelId);
+      for (const e of entries) {
+        e.capabilities.vision = VISION_MODEL_IDS.has(e.modelId);
+        e.capabilities.pdf = PDF_MODEL_IDS.has(e.modelId);
+      }
     }
     VISION_MODEL_KEYS = new Set([...VISION_MODEL_IDS].map(modelIdKey));
+    PDF_MODEL_KEYS = new Set([...PDF_MODEL_IDS].map(modelIdKey));
     CATALOG_MODEL_KEYS = new Set(
       Object.values(MODEL_CATALOG).flatMap((entries) => entries.map((e) => modelIdKey(e.modelId)))
     );
@@ -17922,6 +17982,22 @@ var init_approval_tool_default = __esm({
   }
 });
 
+// ../../packages/shared/src/readonly-preset.ts
+var READONLY_PRESET_TOOLS;
+var init_readonly_preset = __esm({
+  "../../packages/shared/src/readonly-preset.ts"() {
+    "use strict";
+    READONLY_PRESET_TOOLS = [
+      "file_write",
+      "file_edit",
+      "file_move",
+      "skill_file_write",
+      "run_command",
+      "run_skill_script"
+    ];
+  }
+});
+
 // ../../packages/shared/src/question-answer.ts
 var init_question_answer = __esm({
   "../../packages/shared/src/question-answer.ts"() {
@@ -18309,6 +18385,8 @@ var init_verification_surfaces = __esm({
       fileOps: [
         "file_write",
         "file_edit",
+        // Déplacer ou copier un fichier (#879) : il en crée un, et en retire un.
+        "file_move",
         "docx_create",
         "docx_append_paragraphs",
         "docx_replace_text",
@@ -18338,6 +18416,105 @@ var init_verification_surfaces = __esm({
   }
 });
 
+// ../../packages/shared/src/sandbox-settings.ts
+import { z as z27 } from "zod";
+function parseSandboxFolders(raw) {
+  const parsed = SandboxFoldersSchema.safeParse(raw);
+  if (!parsed.success) {
+    throw new Error(
+      `${SANDBOX_SETTINGS_UNREADABLE}: sandbox_folders ${parsed.error.issues.map((i) => `${i.path.join(".") || "(root)"} ${i.message}`).join("; ")}`
+    );
+  }
+  return parsed.data;
+}
+var SandboxFoldersSchema, DEFAULT_WORKSPACE_SANDBOX, SANDBOX_SETTINGS_UNREADABLE, SandboxStatusSchema, ALLOWED_FOLDER_SOURCES, COMMANDS_PLACEMENTS, SandboxAgentSchema, SandboxStateSchema;
+var init_sandbox_settings = __esm({
+  "../../packages/shared/src/sandbox-settings.ts"() {
+    "use strict";
+    SandboxFoldersSchema = z27.object({
+      /** Les dossiers ajoutés, chemins absolus, dans l'ordre de l'ajout. */
+      added: z27.array(z27.string().min(1)),
+      /** Les dossiers DÉTECTÉS que l'utilisateur a retirés, chemins absolus. */
+      removed: z27.array(z27.string().min(1))
+    }).strict();
+    DEFAULT_WORKSPACE_SANDBOX = Object.freeze({
+      enabled: true,
+      folders: Object.freeze({ added: [], removed: [] })
+    });
+    SANDBOX_SETTINGS_UNREADABLE = "SANDBOX_SETTINGS_UNREADABLE";
+    SandboxStatusSchema = z27.discriminatedUnion("state", [
+      z27.object({
+        state: z27.literal("available"),
+        backend: z27.string(),
+        /** Chaque limite commence par son code stable (`SANDBOX_…: …`). */
+        limits: z27.array(z27.string()).optional()
+      }),
+      z27.object({
+        state: z27.literal("unavailable"),
+        code: z27.string(),
+        /** La raison telle que le backend ou l'OS l'a donnée : une donnée, citée. */
+        reason: z27.string()
+      })
+    ]);
+    ALLOWED_FOLDER_SOURCES = [
+      "tool-cache",
+      "comfyui",
+      "ollama",
+      "huggingface",
+      "docker",
+      "user"
+    ];
+    COMMANDS_PLACEMENTS = ["sandbox", "outside", "unknown"];
+    SandboxAgentSchema = z27.object({
+      id: z27.string(),
+      name: z27.string(),
+      /** La valeur de `agents.runtime` (`nodal`, `claude-code`, `codex`…). */
+      runtime: z27.string(),
+      commands: z27.enum(COMMANDS_PLACEMENTS)
+    });
+    SandboxStateSchema = z27.object({
+      /** Le système du runner (`win32`, `darwin`, `linux`…). */
+      platform: z27.string(),
+      status: SandboxStatusSchema,
+      /** L'interrupteur de l'espace. */
+      enabled: z27.boolean(),
+      /** Les dossiers permis, composés (détectés − retirés + ajoutés), chacun avec son état. */
+      allowedFolders: z27.array(
+        z27.object({
+          path: z27.string(),
+          source: z27.enum(ALLOWED_FOLDER_SOURCES),
+          state: z27.enum(["allowed", "removed", "missing", "refused"])
+        })
+      ),
+      /**
+       * Les dossiers des agents actifs, UN par dossier réel (le même dossier
+       * attaché à deux agents n'apparaît qu'une fois, avec les deux), dans l'ordre
+       * de leur premier agent. Le regroupement est fait par le runner, qui sait
+       * comparer deux chemins sur ce système.
+       */
+      agentFolders: z27.array(z27.object({ path: z27.string(), agents: z27.array(SandboxAgentSchema) })),
+      /** Les agents actifs sans dossier à eux : ils n'écrivent que dans le dossier partagé. */
+      agentsWithoutFolder: z27.array(SandboxAgentSchema),
+      /** Le dossier partagé de l'espace, que tout agent écrit ; `null` s'il n'a pas pu être créé. */
+      sharedFolder: z27.string().nullable(),
+      /**
+       * Combien de dossiers DISTINCTS une commande confinée peut écrire : les
+       * dossiers des agents, le partagé, et les dossiers permis à l'état `allowed`
+       * — hors le dossier attaché à une demande et le temporaire de chaque run, qui
+       * n'existent que pendant un run.
+       */
+      writableFolderCount: z27.number().int().nonnegative(),
+      /** Les dossiers de données de Nodal qu'une commande confinée ne lit pas. */
+      readRefused: z27.array(z27.string()),
+      /** Les ports de Nodal refusés par le proxy, ou le code qui dit qu'ils sont inconnus. */
+      network: z27.union([
+        z27.object({ deniedPorts: z27.array(z27.number().int()) }),
+        z27.object({ code: z27.string(), reason: z27.string() })
+      ])
+    });
+  }
+});
+
 // ../../packages/shared/src/fragment-diff.ts
 var init_fragment_diff = __esm({
   "../../packages/shared/src/fragment-diff.ts"() {
@@ -18570,6 +18747,7 @@ var init_src2 = __esm({
     init_approval_explain();
     init_approval_rules_chain();
     init_approval_tool_default();
+    init_readonly_preset();
     init_question_answer();
     init_elicitation();
     init_elicitation_card();
@@ -18596,6 +18774,7 @@ var init_src2 = __esm({
     init_verification();
     init_verification_manifest();
     init_verification_surfaces();
+    init_sandbox_settings();
     init_fragment_diff();
     init_failure_codes();
     init_job_result_kind();
@@ -18783,7 +18962,20 @@ var init_entities = __esm({
          * Combien d'heures un run peut TOURNER (attentes exclues), puis il est
          * arrêté avec ce qu'il a déjà écrit (issue #442). `0` = aucune limite.
          */
-        maxRunHours: real("max_run_hours").notNull().default(0)
+        maxRunHours: real("max_run_hours").notNull().default(0),
+        /**
+         * L'interrupteur du bac à sable de l'espace (#876, migration 0153).
+         * Allumé par défaut. Coupé, les commandes de l'espace tournent sans
+         * confinement, chaque résultat le disant (`SANDBOX_DISABLED`). Relu par le
+         * runner à chaque lancement (`readWorkspaceSandbox`).
+         */
+        sandboxEnabled: boolean("sandbox_enabled").notNull().default(true),
+        /**
+         * Les gestes de l'utilisateur sur les dossiers permis (#876) : ses ajouts
+         * et les dossiers détectés qu'il a retirés, jamais la liste calculée. Lu
+         * par `parseSandboxFolders` (@nodal-agents/shared).
+         */
+        sandboxFolders: jsonb("sandbox_folders").notNull().default(sql`'{"added":[],"removed":[]}'::jsonb`)
       },
       (table) => [
         check(
@@ -21412,6 +21604,25 @@ var init_verification2 = __esm({
          * promesse ne se présume pas.
          */
         declared: boolean("declared").notNull().default(false),
+        /**
+         * Un appel de CE job a-t-il RETIRÉ ce livrable du disque ? (issue #916,
+         * migration 0155)
+         *
+         * Posé par le seam d'exécution sur une transition CONSTATÉE autour d'un
+         * appel du job : l'adresse était là avant, elle n'y est plus après. Levé
+         * par la transition inverse. Jamais déduit : un fichier qui disparaît hors
+         * des appels du job garde `false`, et sa preuve reste `exists` — rouge.
+         * Seule une ligne retirée ET déclarée déplacée (`moved_to_key`) est
+         * prouvée par son absence (`apps/runner/src/verification/removed.ts`).
+         */
+        removed: boolean("removed").notNull().default(false),
+        /**
+         * La clé de la destination où l'appel qui a retiré ce livrable l'avait
+         * DÉCLARÉ déplacé (`MutationTarget.movesTo`), quand elle retrouve une ligne
+         * d'état du même job (issue #916, migration 0155). NULL pour tout autre
+         * retrait : la preuve reste `exists`, rouge.
+         */
+        movedToKey: text("moved_to_key"),
         /** DecisionStatus — l'état lisible affiché à l'owner. */
         decisionStatus: text("decision_status").notNull(),
         /** Empreinte de la dernière commande de preuve exécutée (diagnostic, pas le hash d'approbation). */
@@ -22391,6 +22602,23 @@ var init_designated_chat = __esm({
   }
 });
 
+// ../../packages/db/src/queries/workspace-scope.ts
+async function workspaceOfScope(db, scope) {
+  if (scope.entityId) return scope.entityId;
+  if (scope.agentId) {
+    const [agent] = await db.select({ entityId: agents.entityId }).from(agents).where(eq(agents.id, scope.agentId)).limit(1);
+    if (agent?.entityId) return agent.entityId;
+  }
+  return null;
+}
+var init_workspace_scope = __esm({
+  "../../packages/db/src/queries/workspace-scope.ts"() {
+    "use strict";
+    init_drizzle_orm();
+    init_schema2();
+  }
+});
+
 // ../../packages/db/src/queries/conversation-handles.ts
 import { randomBytes as randomBytes3 } from "crypto";
 function newHandle() {
@@ -22508,11 +22736,8 @@ async function knownConversationIds(db, entityId) {
   return known;
 }
 async function workspaceOf(db, scope) {
-  if (scope.entityId) return scope.entityId;
-  if (scope.agentId) {
-    const [agent] = await db.select({ entityId: agents.entityId }).from(agents).where(eq(agents.id, scope.agentId)).limit(1);
-    if (agent?.entityId) return agent.entityId;
-  }
+  const entityId = await workspaceOfScope(db, scope);
+  if (entityId) return entityId;
   throw new ConversationScopeUnknownError(scope.subject ?? "a text for a model");
 }
 async function conversationIdsAsHandles(db, scope, value) {
@@ -22550,6 +22775,7 @@ var init_conversation_handles2 = __esm({
     init_channel_allowed_conversations();
     init_telegram_allowed_chats();
     init_agents();
+    init_workspace_scope();
     HANDLE_ALPHABET = "abcdefghijklmnopqrstuvwxyz234567";
     HANDLE_LENGTH = 10;
     ConversationScopeUnknownError = class extends Error {
@@ -23001,19 +23227,12 @@ async function setReadOnlyPresetRepo(db, entityId, agentId, enabled) {
     )
   );
 }
-var READONLY_PRESET_TOOLS;
 var init_approval_rules = __esm({
   "../../packages/db/src/repos/approval-rules.ts"() {
     "use strict";
     init_drizzle_orm();
+    init_src2();
     init_approvals();
-    READONLY_PRESET_TOOLS = [
-      "file_write",
-      "file_edit",
-      "skill_file_write",
-      "run_command",
-      "run_skill_script"
-    ];
   }
 });
 
@@ -23210,6 +23429,79 @@ var init_run_cost = __esm({
   }
 });
 
+// ../../packages/db/src/repos/run-state.ts
+function isLive(status) {
+  return status === null || !isTerminalJobStatus(status);
+}
+async function readRunState(db, entityId, headJobId) {
+  const [head] = await db.select({ status: agentJobs.status, result: agentJobs.result, error: agentJobs.error }).from(agentJobs).where(and(eq(agentJobs.id, headJobId), eq(agentJobs.entityId, entityId))).limit(1);
+  if (!head) return null;
+  const treeIds = await descendRunTree(db, entityId, [headJobId]);
+  const tree = await db.select({ id: agentJobs.id, status: agentJobs.status }).from(agentJobs).where(and(eq(agentJobs.entityId, entityId), inArray(agentJobs.id, treeIds)));
+  const liveJobIds = tree.filter((j) => isLive(j.status)).map((j) => j.id);
+  const pending = liveJobIds.length === 0 ? [] : await db.select({
+    requestId: approvalRequests.id,
+    jobId: approvalRequests.jobId,
+    kind: approvalRequests.kind,
+    toolName: approvalRequests.toolName,
+    toolInput: approvalRequests.toolInput,
+    requestedAt: approvalRequests.requestedAt
+  }).from(approvalRequests).where(
+    and(
+      eq(approvalRequests.entityId, entityId),
+      inArray(approvalRequests.jobId, liveJobIds),
+      eq(approvalRequests.status, "pending")
+    )
+  ).orderBy(approvalsOldestFirst);
+  const deliverables = await db.select({
+    jobId: jobDeliverableVerificationState.jobId,
+    canonicalKey: jobDeliverableVerificationState.canonicalKey,
+    displayPath: jobDeliverableVerificationState.displayPathSnapshot,
+    type: jobDeliverableVerificationState.deliverableType,
+    declared: jobDeliverableVerificationState.declared,
+    verification: jobDeliverableVerificationState.decisionStatus
+  }).from(jobDeliverableVerificationState).where(
+    and(
+      inArray(jobDeliverableVerificationState.jobId, treeIds),
+      eq(jobDeliverableVerificationState.addressed, true)
+    )
+  ).orderBy(
+    asc(jobDeliverableVerificationState.updatedAt),
+    asc(jobDeliverableVerificationState.id)
+  );
+  const status = liveJobIds.length > 0 ? pending.length > 0 ? "waiting_for_person" : "running" : head.status;
+  return {
+    headJobId,
+    headStatus: head.status,
+    status,
+    result: head.result,
+    error: head.error,
+    liveJobIds,
+    pendingRequests: pending.map((r) => ({
+      ...r,
+      requestedAt: r.requestedAt ? r.requestedAt.toISOString() : null
+    })),
+    deliverables: deliverables.map((d) => ({
+      jobId: d.jobId,
+      path: d.displayPath ?? d.canonicalKey,
+      type: d.type,
+      declared: d.declared,
+      verification: d.verification
+    }))
+  };
+}
+var init_run_state = __esm({
+  "../../packages/db/src/repos/run-state.ts"() {
+    "use strict";
+    init_drizzle_orm();
+    init_src2();
+    init_jobs();
+    init_approvals();
+    init_verification2();
+    init_run_tree();
+  }
+});
+
 // ../../packages/db/src/repos/agent-mcp-servers.ts
 async function attachMcpServerToAgent(db, input) {
   const { entityId, agentId, mcpServerId, enabledTools } = input;
@@ -23653,6 +23945,87 @@ var init_verification_surfaces2 = __esm({
   }
 });
 
+// ../../packages/db/src/repos/workspace-sandbox.ts
+async function readWorkspaceSandbox(db, entityId) {
+  return readSandboxRow(db, entityId, false);
+}
+async function readSandboxRow(db, entityId, lock) {
+  let row;
+  try {
+    const query = db.select({ enabled: entities.sandboxEnabled, folders: entities.sandboxFolders }).from(entities).where(eq(entities.id, entityId)).limit(1);
+    [row] = await (lock ? query.for("update") : query);
+  } catch (err) {
+    throw new Error(
+      `${SANDBOX_SETTINGS_UNREADABLE}: the workspace settings could not be read (${err instanceof Error ? err.message : String(err)})`,
+      { cause: err }
+    );
+  }
+  if (!row) throw new Error(`${SANDBOX_SETTINGS_UNREADABLE}: workspace ${entityId} not found`);
+  if (typeof row.enabled !== "boolean") {
+    throw new Error(`${SANDBOX_SETTINGS_UNREADABLE}: sandbox_enabled is not a boolean`);
+  }
+  return { enabled: row.enabled, folders: parseSandboxFolders(row.folders) };
+}
+function workspaceSandboxReader(db, workspace) {
+  return async () => {
+    const entityId = typeof workspace === "string" ? workspace : await workspaceOfScope(db, workspace);
+    if (!entityId) {
+      throw new Error(
+        `${SANDBOX_SETTINGS_UNREADABLE}: agent ${typeof workspace === "string" ? "" : workspace.agentId ?? ""} belongs to no workspace`
+      );
+    }
+    return readWorkspaceSandbox(db, entityId);
+  };
+}
+async function setWorkspaceSandboxEnabled(db, entityId, enabled) {
+  await db.update(entities).set({ sandboxEnabled: enabled, updatedAt: /* @__PURE__ */ new Date() }).where(eq(entities.id, entityId));
+}
+function applySandboxFolderGesture(folders, gesture, folderKey2) {
+  const k = folderKey2(gesture.path);
+  const has = (list) => list.some((p) => folderKey2(p) === k);
+  const without = (list) => list.filter((p) => folderKey2(p) !== k);
+  switch (gesture.op) {
+    case "add":
+      if (has(folders.removed)) {
+        return { folders: { ...folders, removed: without(folders.removed) }, outcome: "restored" };
+      }
+      if (has(folders.added)) return { folders, outcome: "already-allowed" };
+      if (gesture.awaitsConfirmation) return { folders, outcome: "needs-confirmation" };
+      return { folders: { ...folders, added: [...folders.added, gesture.path] }, outcome: "added" };
+    case "remove":
+      if (has(folders.added)) {
+        return { folders: { ...folders, added: without(folders.added) }, outcome: "forgotten" };
+      }
+      if (has(folders.removed)) return { folders, outcome: "unchanged" };
+      return {
+        folders: { ...folders, removed: [...folders.removed, gesture.path] },
+        outcome: "removed"
+      };
+    case "restore":
+      if (!has(folders.removed)) return { folders, outcome: "unchanged" };
+      return { folders: { ...folders, removed: without(folders.removed) }, outcome: "restored" };
+  }
+}
+async function changeWorkspaceSandboxFolders(db, entityId, gesture, folderKey2) {
+  return db.transaction(async (tx) => {
+    const current = await readSandboxRow(tx, entityId, true);
+    const next = applySandboxFolderGesture(current.folders, gesture, folderKey2);
+    if (next.folders !== current.folders) {
+      await tx.update(entities).set({ sandboxFolders: parseSandboxFolders(next.folders), updatedAt: /* @__PURE__ */ new Date() }).where(eq(entities.id, entityId));
+    }
+    return next.outcome;
+  });
+}
+var init_workspace_sandbox = __esm({
+  "../../packages/db/src/repos/workspace-sandbox.ts"() {
+    "use strict";
+    init_drizzle_orm();
+    init_src2();
+    init_workspace_scope();
+    init_schema2();
+  }
+});
+
 // ../../packages/db/src/repos/member-workspaces.ts
 async function listMemberWorkspaces(db, opts = {}) {
   const where = opts.withRootAgent ? and(hasMember(db), isNotNull(entities.rootAgentId)) : hasMember(db);
@@ -24255,6 +24628,7 @@ __export(src_exports, {
   agents: () => agents,
   and: () => and,
   appSettings: () => appSettings,
+  applySandboxFolderGesture: () => applySandboxFolderGesture,
   approvalCardMessages: () => approvalCardMessages,
   approvalRequestAttachments: () => approvalRequestAttachments,
   approvalRequests: () => approvalRequests,
@@ -24270,6 +24644,7 @@ __export(src_exports, {
   avg: () => avg,
   budgetReached: () => budgetReached,
   cancelJobTree: () => cancelJobTree,
+  changeWorkspaceSandboxFolders: () => changeWorkspaceSandboxFolders,
   channelAllowedConversations: () => channelAllowedConversations,
   channelBindings: () => channelBindings,
   chatMessages: () => chatMessages,
@@ -24305,6 +24680,7 @@ __export(src_exports, {
   decryptMcpServerEnv: () => decryptMcpServerEnv,
   deliverToConversationJob: () => deliverToConversationJob,
   desc: () => desc,
+  descendRunTree: () => descendRunTree,
   designateChat: () => designateChat,
   drainJobInbox: () => drainJobInbox,
   dropApprovalRulesForDetachedSkill: () => dropApprovalRulesForDetachedSkill,
@@ -24366,7 +24742,9 @@ __export(src_exports, {
   readAgentBudgetState: () => readAgentBudgetState,
   readAgentSpend: () => readAgentSpend,
   readRunCost: () => readRunCost,
+  readRunState: () => readRunState,
   readScheduleState: () => readScheduleState,
+  readWorkspaceSandbox: () => readWorkspaceSandbox,
   recordApprovalCardMessage: () => recordApprovalCardMessage,
   recordClaim: () => recordClaim,
   refreshAndPersistCredential: () => refreshAndPersistCredential,
@@ -24379,6 +24757,7 @@ __export(src_exports, {
   resolveOwnerConversation: () => resolveOwnerConversation,
   resolveScheduleNotifyChat: () => resolveScheduleNotifyChat,
   resolveSkillIdsBySlug: () => resolveSkillIdsBySlug,
+  runHeadOf: () => runHeadOf,
   runSpentUsd: () => runSpentUsd,
   scheduleState: () => scheduleState,
   sessions: () => sessions,
@@ -24395,6 +24774,7 @@ __export(src_exports, {
   setRunCommandRuleRepo: () => setRunCommandRuleRepo,
   setSkillFilesWritable: () => setSkillFilesWritable,
   setSkillScriptsAuthorized: () => setSkillScriptsAuthorized,
+  setWorkspaceSandboxEnabled: () => setWorkspaceSandboxEnabled,
   showConversationsTo: () => showConversationsTo,
   skillConnectors: () => skillConnectors,
   skillVersions: () => skillVersions,
@@ -24418,6 +24798,8 @@ __export(src_exports, {
   withTransaction: () => withTransaction,
   withinRunScope: () => withinRunScope,
   workspaceLocks: () => workspaceLocks,
+  workspaceOfScope: () => workspaceOfScope,
+  workspaceSandboxReader: () => workspaceSandboxReader,
   workspaceSlug: () => workspaceSlug,
   writeScheduleState: () => writeScheduleState,
   writeToRunHeadInbox: () => writeToRunHeadInbox
@@ -24432,6 +24814,7 @@ var init_src4 = __esm({
     init_master_key_guard();
     init_designated_chat();
     init_conversation_handles2();
+    init_workspace_scope();
     init_cli_sessions();
     init_telegram_allowed();
     init_skill_approval_rules();
@@ -24445,6 +24828,8 @@ var init_src4 = __esm({
     init_connectors2();
     init_agent_workspaces2();
     init_run_cost();
+    init_run_tree();
+    init_run_state();
     init_agent_mcp_servers();
     init_skills2();
     init_retention();
@@ -24452,6 +24837,7 @@ var init_src4 = __esm({
     init_schedule_state2();
     init_app_settings2();
     init_verification_surfaces2();
+    init_workspace_sandbox();
     init_member_workspaces();
     init_approval_cards();
     init_conversation_runs();
@@ -28109,7 +28495,7 @@ var init_src6 = __esm({
 // ../../packages/sandbox/src/policy.ts
 import { existsSync as existsSync15, mkdirSync as mkdirSync7, readdirSync as readdirSync5, readFileSync as readFileSync11, realpathSync as realpathSync2, statSync as statSync5 } from "fs";
 import { homedir as homedir4 } from "os";
-import { isAbsolute, join as join17, resolve as resolve4, sep } from "path";
+import { isAbsolute, join as join17, posix as posix3, resolve as resolve4, sep, win32 as win323 } from "path";
 function nodalDeniedEndpoints(env = process.env) {
   const ports = /* @__PURE__ */ new Set();
   const required = (name) => {
@@ -28138,6 +28524,19 @@ function nodalDeniedEndpoints(env = process.env) {
   return [...ports].map((port) => ({ port }));
 }
 function sandboxDeniedPaths(mustReach, machine = thisMachine()) {
+  const { homes, moved } = nodalDataLocations(machine);
+  for (const home of homes.values()) {
+    if (!existsSync15(home)) continue;
+    const reach = mustReach.find((r) => pathKey(r) === pathKey(home));
+    if (reach !== void 0) throw new NodalHomeReachError(reach);
+  }
+  const denied = [
+    ...[...homes.values()].flatMap((home) => deniedChildrenOf(home, mustReach)),
+    ...[...moved.values()].flatMap((entry) => deniedMovedEntry(entry, mustReach))
+  ];
+  return [...new Set(denied)];
+}
+function nodalDataLocations(machine) {
   const current = nodalInstanceRecord(machine.env, machine.home, machine.platform);
   const instances = [
     { home: current.home, moved: Object.values(current.entries) },
@@ -28150,21 +28549,14 @@ function sandboxDeniedPaths(mustReach, machine = thisMachine()) {
   const homes = /* @__PURE__ */ new Map();
   const moved = /* @__PURE__ */ new Map();
   for (const i of instances) {
-    homes.set(pathKey(i.home), i.home);
+    homes.set(keyOn(i.home, machine.platform), i.home);
     for (const entry of i.moved) {
-      if (!isWithin(entry, i.home)) moved.set(pathKey(entry), entry);
+      if (!withinOn(entry, i.home, machine.platform)) {
+        moved.set(keyOn(entry, machine.platform), entry);
+      }
     }
   }
-  for (const home of homes.values()) {
-    if (!existsSync15(home)) continue;
-    const reach = mustReach.find((r) => pathKey(r) === pathKey(home));
-    if (reach !== void 0) throw new NodalHomeReachError(reach);
-  }
-  const denied = [
-    ...[...homes.values()].flatMap((home) => deniedChildrenOf(home, mustReach)),
-    ...[...moved.values()].flatMap((entry) => deniedMovedEntry(entry, mustReach))
-  ];
-  return [...new Set(denied)];
+  return { homes, moved };
 }
 function real2(path) {
   try {
@@ -28173,14 +28565,27 @@ function real2(path) {
     return resolve4(path);
   }
 }
+function pathOf(platform) {
+  return platform === "win32" ? win323 : posix3;
+}
+function absOn(path, platform) {
+  return platform === process.platform ? real2(path) : pathOf(platform).resolve(path);
+}
+function keyOn(path, platform) {
+  const r = absOn(path, platform);
+  return platform === "win32" ? r.toLowerCase() : r;
+}
+function withinOn(child, parent, platform) {
+  const c = keyOn(child, platform);
+  const p = keyOn(parent, platform);
+  const s = pathOf(platform).sep;
+  return c === p || c.startsWith(p.endsWith(s) ? p : p + s);
+}
 function pathKey(path) {
-  const r = real2(path);
-  return process.platform === "win32" ? r.toLowerCase() : r;
+  return keyOn(path, process.platform);
 }
 function isWithin(child, parent) {
-  const c = pathKey(child);
-  const p = pathKey(parent);
-  return c === p || c.startsWith(p.endsWith(sep) ? p : p + sep);
+  return withinOn(child, parent, process.platform);
 }
 function deniedMovedEntry(entry, mustReach) {
   if (!existsSync15(entry)) return [];
@@ -28216,12 +28621,13 @@ function deniedChildrenOf(dataDir, mustReach) {
   }
   return children.filter((c) => !needed.has(cmp(c))).map((c) => join17(data, c));
 }
-var NodalPortsUnknown, SCHEME_DEFAULT_PORT, NodalHomeReachError, thisMachine;
+var noWorkspaceSandbox, NodalPortsUnknown, SCHEME_DEFAULT_PORT, NodalHomeReachError, thisMachine;
 var init_policy = __esm({
   "../../packages/sandbox/src/policy.ts"() {
     "use strict";
     init_nodal_home();
     init_nodal_instances();
+    noWorkspaceSandbox = () => Promise.resolve({ enabled: true, folders: { added: [], removed: [] } });
     NodalPortsUnknown = class extends Error {
       code = "SANDBOX_NODAL_PORTS_UNKNOWN";
       constructor(reason) {
@@ -28234,14 +28640,16 @@ var init_policy = __esm({
       "postgresql:": 5432
     };
     NodalHomeReachError = class extends Error {
-      constructor(path) {
+      constructor(path, within = path) {
         super(
-          `SANDBOX_REACH_IS_NODAL_HOME: ${path} is the home folder of a Nodal instance. A confined command cannot work in it without reading that instance\u2019s secrets. Point the workspace at a folder of its own, or move that instance (NODALAI_HOME).`
+          (pathKey(path) === pathKey(within) ? `SANDBOX_REACH_IS_NODAL_HOME: ${path} is the home folder of a Nodal instance. ` : `SANDBOX_REACH_IS_NODAL_HOME: ${path} is inside ${within}, the data of a Nodal instance. `) + "A confined command cannot work in it without reading that instance\u2019s secrets. Point the workspace at a folder of its own, or move that instance (NODALAI_HOME)."
         );
         this.path = path;
+        this.within = within;
         this.name = "NodalHomeReachError";
       }
       path;
+      within;
       code = "SANDBOX_REACH_IS_NODAL_HOME";
     };
     thisMachine = () => ({
@@ -30511,7 +30919,7 @@ var init_job_scope = __esm({
 });
 
 // ../../packages/sandbox/src/refused-writes.ts
-import { posix as posix3, win32 as win323 } from "path";
+import { posix as posix4, win32 as win324 } from "path";
 var init_refused_writes = __esm({
   "../../packages/sandbox/src/refused-writes.ts"() {
     "use strict";
@@ -30529,19 +30937,21 @@ function nodalProgramsSandbox() {
     }
   );
 }
-async function openNodalPrograms(sandbox = nodalProgramsSandbox()) {
+async function openNodalPrograms(opts) {
+  const sandbox = opts.sandbox ?? nodalProgramsSandbox();
   const status = await sandbox.status();
-  if (status.state !== "available" || !sandbox.backend) {
+  const settings = await opts.workspace();
+  if (status.state !== "available" || !sandbox.backend || !settings.enabled) {
     return { ...hostPrograms, confined: false, close: async () => void 0 };
   }
   const scope = new JobProcessScope(`nodal-programs-${++sessions2}`, sandbox);
-  const spawn6 = async (file, args, opts) => {
-    const env = opts.env ?? process.env;
-    const container = await scope.container(opts.writableRoots, env, opts.readableRoots);
+  const spawn6 = async (file, args, opts2) => {
+    const env = opts2.env ?? process.env;
+    const container = await scope.container(opts2.writableRoots, env, opts2.readableRoots);
     const p = await container.start({
       target: { file, args: [...args] },
       // Le dossier de départ doit être lisible DANS le conteneur.
-      cwd: opts.cwd ?? opts.readableRoots[0] ?? opts.writableRoots[0] ?? tmpdir2(),
+      cwd: opts2.cwd ?? opts2.readableRoots[0] ?? opts2.writableRoots[0] ?? tmpdir2(),
       env
     });
     if (!p.stdout || !p.stderr) throw new Error(`NODAL_PROGRAM_NO_PIPES: ${file}`);
@@ -30555,12 +30965,12 @@ async function openNodalPrograms(sandbox = nodalProgramsSandbox()) {
   return {
     confined: true,
     spawn: spawn6,
-    execFile: (file, args, opts) => execOver(spawn6, file, args, opts),
+    execFile: (file, args, opts2) => execOver(spawn6, file, args, opts2),
     close: () => scope.close()
   };
 }
-async function withNodalPrograms(fn, sandbox) {
-  const programs2 = await openNodalPrograms(sandbox);
+async function withNodalPrograms(fn, opts) {
+  const programs2 = await openNodalPrograms(opts);
   try {
     return await fn(programs2);
   } finally {
@@ -30743,7 +31153,8 @@ async function runCheckpointsRestore(sha, workspace) {
   }
   console.log(chalk6.yellow(`Restoring ${match.sha.slice(0, 8)} \u2014 ${match.label}`));
   const res = await withNodalPrograms(
-    (programs2) => restoreCheckpoint(checkpointsRoot(), ws, match.sha, programs2)
+    (programs2) => restoreCheckpoint(checkpointsRoot(), ws, match.sha, programs2),
+    { workspace: noWorkspaceSandbox }
   );
   console.log(chalk6.green(`  Restored ${ws}`));
   console.log(chalk6.gray(`  ${CHECKPOINT_COVERAGE_NOTE}`));
@@ -30932,7 +31343,7 @@ var init_zod_compat = __esm({
 });
 
 // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.32.1_zod@4.6.7/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
-import * as z27 from "zod/v4";
+import * as z28 from "zod/v4";
 function assertCompleteRequestPrompt(request) {
   if (request.params.ref.type !== "ref/prompt") {
     throw new TypeError(`Expected CompleteRequestPrompt, but got ${request.params.ref.type}`);
@@ -30953,26 +31364,26 @@ var init_types4 = __esm({
     SUPPORTED_PROTOCOL_VERSIONS = [LATEST_PROTOCOL_VERSION, "2025-06-18", "2025-03-26", "2024-11-05", "2024-10-07"];
     RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task";
     JSONRPC_VERSION = "2.0";
-    AssertObjectSchema = z27.custom((v) => v !== null && (typeof v === "object" || typeof v === "function"));
-    ProgressTokenSchema = z27.union([z27.string(), z27.number().int()]);
-    CursorSchema = z27.string();
-    TaskCreationParamsSchema = z27.looseObject({
+    AssertObjectSchema = z28.custom((v) => v !== null && (typeof v === "object" || typeof v === "function"));
+    ProgressTokenSchema = z28.union([z28.string(), z28.number().int()]);
+    CursorSchema = z28.string();
+    TaskCreationParamsSchema = z28.looseObject({
       /**
        * Requested duration in milliseconds to retain task from creation.
        */
-      ttl: z27.number().optional(),
+      ttl: z28.number().optional(),
       /**
        * Time in milliseconds to wait between task status requests.
        */
-      pollInterval: z27.number().optional()
+      pollInterval: z28.number().optional()
     });
-    TaskMetadataSchema = z27.object({
-      ttl: z27.number().optional()
+    TaskMetadataSchema = z28.object({
+      ttl: z28.number().optional()
     });
-    RelatedTaskMetadataSchema = z27.object({
-      taskId: z27.string()
+    RelatedTaskMetadataSchema = z28.object({
+      taskId: z28.string()
     });
-    RequestMetaSchema = z27.looseObject({
+    RequestMetaSchema = z28.looseObject({
       /**
        * If specified, the caller is requesting out-of-band progress notifications for this request (as represented by notifications/progress). The value of this parameter is an opaque token that will be attached to any subsequent notifications. The receiver is not obligated to provide these notifications.
        */
@@ -30982,7 +31393,7 @@ var init_types4 = __esm({
        */
       [RELATED_TASK_META_KEY]: RelatedTaskMetadataSchema.optional()
     });
-    BaseRequestParamsSchema = z27.object({
+    BaseRequestParamsSchema = z28.object({
       /**
        * See [General fields: `_meta`](/specification/draft/basic/index#meta) for notes on `_meta` usage.
        */
@@ -31000,42 +31411,42 @@ var init_types4 = __esm({
       task: TaskMetadataSchema.optional()
     });
     isTaskAugmentedRequestParams = (value) => TaskAugmentedRequestParamsSchema.safeParse(value).success;
-    RequestSchema = z27.object({
-      method: z27.string(),
+    RequestSchema = z28.object({
+      method: z28.string(),
       params: BaseRequestParamsSchema.loose().optional()
     });
-    NotificationsParamsSchema = z27.object({
+    NotificationsParamsSchema = z28.object({
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
       _meta: RequestMetaSchema.optional()
     });
-    NotificationSchema = z27.object({
-      method: z27.string(),
+    NotificationSchema = z28.object({
+      method: z28.string(),
       params: NotificationsParamsSchema.loose().optional()
     });
-    ResultSchema = z27.looseObject({
+    ResultSchema = z28.looseObject({
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
       _meta: RequestMetaSchema.optional()
     });
-    RequestIdSchema = z27.union([z27.string(), z27.number().int()]);
-    JSONRPCRequestSchema = z27.object({
-      jsonrpc: z27.literal(JSONRPC_VERSION),
+    RequestIdSchema = z28.union([z28.string(), z28.number().int()]);
+    JSONRPCRequestSchema = z28.object({
+      jsonrpc: z28.literal(JSONRPC_VERSION),
       id: RequestIdSchema,
       ...RequestSchema.shape
     }).strict();
     isJSONRPCRequest = (value) => JSONRPCRequestSchema.safeParse(value).success;
-    JSONRPCNotificationSchema = z27.object({
-      jsonrpc: z27.literal(JSONRPC_VERSION),
+    JSONRPCNotificationSchema = z28.object({
+      jsonrpc: z28.literal(JSONRPC_VERSION),
       ...NotificationSchema.shape
     }).strict();
     isJSONRPCNotification = (value) => JSONRPCNotificationSchema.safeParse(value).success;
-    JSONRPCResultResponseSchema = z27.object({
-      jsonrpc: z27.literal(JSONRPC_VERSION),
+    JSONRPCResultResponseSchema = z28.object({
+      jsonrpc: z28.literal(JSONRPC_VERSION),
       id: RequestIdSchema,
       result: ResultSchema
     }).strict();
@@ -31050,32 +31461,32 @@ var init_types4 = __esm({
       ErrorCode2[ErrorCode2["InternalError"] = -32603] = "InternalError";
       ErrorCode2[ErrorCode2["UrlElicitationRequired"] = -32042] = "UrlElicitationRequired";
     })(ErrorCode || (ErrorCode = {}));
-    JSONRPCErrorResponseSchema = z27.object({
-      jsonrpc: z27.literal(JSONRPC_VERSION),
+    JSONRPCErrorResponseSchema = z28.object({
+      jsonrpc: z28.literal(JSONRPC_VERSION),
       id: RequestIdSchema.optional(),
-      error: z27.object({
+      error: z28.object({
         /**
          * The error type that occurred.
          */
-        code: z27.number().int(),
+        code: z28.number().int(),
         /**
          * A short description of the error. The message SHOULD be limited to a concise single sentence.
          */
-        message: z27.string(),
+        message: z28.string(),
         /**
          * Additional information about the error. The value of this member is defined by the sender (e.g. detailed error information, nested errors etc.).
          */
-        data: z27.unknown().optional()
+        data: z28.unknown().optional()
       })
     }).strict();
     isJSONRPCErrorResponse = (value) => JSONRPCErrorResponseSchema.safeParse(value).success;
-    JSONRPCMessageSchema = z27.union([
+    JSONRPCMessageSchema = z28.union([
       JSONRPCRequestSchema,
       JSONRPCNotificationSchema,
       JSONRPCResultResponseSchema,
       JSONRPCErrorResponseSchema
     ]);
-    JSONRPCResponseSchema = z27.union([JSONRPCResultResponseSchema, JSONRPCErrorResponseSchema]);
+    JSONRPCResponseSchema = z28.union([JSONRPCResultResponseSchema, JSONRPCErrorResponseSchema]);
     EmptyResultSchema = ResultSchema.strict();
     CancelledNotificationParamsSchema = NotificationsParamsSchema.extend({
       /**
@@ -31087,28 +31498,28 @@ var init_types4 = __esm({
       /**
        * An optional string describing the reason for the cancellation. This MAY be logged or presented to the user.
        */
-      reason: z27.string().optional()
+      reason: z28.string().optional()
     });
     CancelledNotificationSchema = NotificationSchema.extend({
-      method: z27.literal("notifications/cancelled"),
+      method: z28.literal("notifications/cancelled"),
       params: CancelledNotificationParamsSchema
     });
-    IconSchema = z27.object({
+    IconSchema = z28.object({
       /**
        * URL or data URI for the icon.
        */
-      src: z27.string(),
+      src: z28.string(),
       /**
        * Optional MIME type for the icon.
        */
-      mimeType: z27.string().optional(),
+      mimeType: z28.string().optional(),
       /**
        * Optional array of strings that specify sizes at which the icon can be used.
        * Each string should be in WxH format (e.g., `"48x48"`, `"96x96"`) or `"any"` for scalable formats like SVG.
        *
        * If not provided, the client should assume that the icon can be used at any size.
        */
-      sizes: z27.array(z27.string()).optional(),
+      sizes: z28.array(z28.string()).optional(),
       /**
        * Optional specifier for the theme this icon is designed for. `light` indicates
        * the icon is designed to be used with a light background, and `dark` indicates
@@ -31116,9 +31527,9 @@ var init_types4 = __esm({
        *
        * If not provided, the client should assume the icon can be used with any theme.
        */
-      theme: z27.enum(["light", "dark"]).optional()
+      theme: z28.enum(["light", "dark"]).optional()
     });
-    IconsSchema = z27.object({
+    IconsSchema = z28.object({
       /**
        * Optional set of sized icons that the client can display in a user interface.
        *
@@ -31130,11 +31541,11 @@ var init_types4 = __esm({
        * - `image/svg+xml` - SVG images (scalable but requires security precautions)
        * - `image/webp` - WebP images (modern, efficient format)
        */
-      icons: z27.array(IconSchema).optional()
+      icons: z28.array(IconSchema).optional()
     });
-    BaseMetadataSchema = z27.object({
+    BaseMetadataSchema = z28.object({
       /** Intended for programmatic or logical use, but used as a display name in past specs or fallback */
-      name: z27.string(),
+      name: z28.string(),
       /**
        * Intended for UI and end-user contexts — optimized to be human-readable and easily understood,
        * even by those unfamiliar with domain-specific terminology.
@@ -31143,16 +31554,16 @@ var init_types4 = __esm({
        * where `annotations.title` should be given precedence over using `name`,
        * if present).
        */
-      title: z27.string().optional()
+      title: z28.string().optional()
     });
     ImplementationSchema = BaseMetadataSchema.extend({
       ...BaseMetadataSchema.shape,
       ...IconsSchema.shape,
-      version: z27.string(),
+      version: z28.string(),
       /**
        * An optional URL of the website for this implementation.
        */
-      websiteUrl: z27.string().optional(),
+      websiteUrl: z28.string().optional(),
       /**
        * An optional human-readable description of what this implementation does.
        *
@@ -31160,23 +31571,23 @@ var init_types4 = __esm({
        * and capabilities. For example, a server might describe the types of resources
        * or tools it provides, while a client might describe its intended use case.
        */
-      description: z27.string().optional()
+      description: z28.string().optional()
     });
-    FormElicitationCapabilitySchema = z27.intersection(z27.object({
-      applyDefaults: z27.boolean().optional()
-    }), z27.record(z27.string(), z27.unknown()));
-    ElicitationCapabilitySchema = z27.preprocess((value) => {
+    FormElicitationCapabilitySchema = z28.intersection(z28.object({
+      applyDefaults: z28.boolean().optional()
+    }), z28.record(z28.string(), z28.unknown()));
+    ElicitationCapabilitySchema = z28.preprocess((value) => {
       if (value && typeof value === "object" && !Array.isArray(value)) {
         if (Object.keys(value).length === 0) {
           return { form: {} };
         }
       }
       return value;
-    }, z27.intersection(z27.object({
+    }, z28.intersection(z28.object({
       form: FormElicitationCapabilitySchema.optional(),
       url: AssertObjectSchema.optional()
-    }), z27.record(z27.string(), z27.unknown()).optional()));
-    ClientTasksCapabilitySchema = z27.looseObject({
+    }), z28.record(z28.string(), z28.unknown()).optional()));
+    ClientTasksCapabilitySchema = z28.looseObject({
       /**
        * Present if the client supports listing tasks.
        */
@@ -31188,22 +31599,22 @@ var init_types4 = __esm({
       /**
        * Capabilities for task creation on specific request types.
        */
-      requests: z27.looseObject({
+      requests: z28.looseObject({
         /**
          * Task support for sampling requests.
          */
-        sampling: z27.looseObject({
+        sampling: z28.looseObject({
           createMessage: AssertObjectSchema.optional()
         }).optional(),
         /**
          * Task support for elicitation requests.
          */
-        elicitation: z27.looseObject({
+        elicitation: z28.looseObject({
           create: AssertObjectSchema.optional()
         }).optional()
       }).optional()
     });
-    ServerTasksCapabilitySchema = z27.looseObject({
+    ServerTasksCapabilitySchema = z28.looseObject({
       /**
        * Present if the server supports listing tasks.
        */
@@ -31215,24 +31626,24 @@ var init_types4 = __esm({
       /**
        * Capabilities for task creation on specific request types.
        */
-      requests: z27.looseObject({
+      requests: z28.looseObject({
         /**
          * Task support for tool requests.
          */
-        tools: z27.looseObject({
+        tools: z28.looseObject({
           call: AssertObjectSchema.optional()
         }).optional()
       }).optional()
     });
-    ClientCapabilitiesSchema = z27.object({
+    ClientCapabilitiesSchema = z28.object({
       /**
        * Experimental, non-standard capabilities that the client supports.
        */
-      experimental: z27.record(z27.string(), AssertObjectSchema).optional(),
+      experimental: z28.record(z28.string(), AssertObjectSchema).optional(),
       /**
        * Present if the client supports sampling from an LLM.
        */
-      sampling: z27.object({
+      sampling: z28.object({
         /**
          * Present if the client supports context inclusion via includeContext parameter.
          * If not declared, servers SHOULD only use `includeContext: "none"` (or omit it).
@@ -31250,11 +31661,11 @@ var init_types4 = __esm({
       /**
        * Present if the client supports listing roots.
        */
-      roots: z27.object({
+      roots: z28.object({
         /**
          * Whether the client supports issuing notifications for changes to the roots list.
          */
-        listChanged: z27.boolean().optional()
+        listChanged: z28.boolean().optional()
       }).optional(),
       /**
        * Present if the client supports task creation.
@@ -31263,25 +31674,25 @@ var init_types4 = __esm({
       /**
        * Extensions that the client supports. Keys are extension identifiers (vendor-prefix/extension-name).
        */
-      extensions: z27.record(z27.string(), AssertObjectSchema).optional()
+      extensions: z28.record(z28.string(), AssertObjectSchema).optional()
     });
     InitializeRequestParamsSchema = BaseRequestParamsSchema.extend({
       /**
        * The latest version of the Model Context Protocol that the client supports. The client MAY decide to support older versions as well.
        */
-      protocolVersion: z27.string(),
+      protocolVersion: z28.string(),
       capabilities: ClientCapabilitiesSchema,
       clientInfo: ImplementationSchema
     });
     InitializeRequestSchema = RequestSchema.extend({
-      method: z27.literal("initialize"),
+      method: z28.literal("initialize"),
       params: InitializeRequestParamsSchema
     });
-    ServerCapabilitiesSchema = z27.object({
+    ServerCapabilitiesSchema = z28.object({
       /**
        * Experimental, non-standard capabilities that the server supports.
        */
-      experimental: z27.record(z27.string(), AssertObjectSchema).optional(),
+      experimental: z28.record(z28.string(), AssertObjectSchema).optional(),
       /**
        * Present if the server supports sending log messages to the client.
        */
@@ -31293,33 +31704,33 @@ var init_types4 = __esm({
       /**
        * Present if the server offers any prompt templates.
        */
-      prompts: z27.object({
+      prompts: z28.object({
         /**
          * Whether this server supports issuing notifications for changes to the prompt list.
          */
-        listChanged: z27.boolean().optional()
+        listChanged: z28.boolean().optional()
       }).optional(),
       /**
        * Present if the server offers any resources to read.
        */
-      resources: z27.object({
+      resources: z28.object({
         /**
          * Whether this server supports clients subscribing to resource updates.
          */
-        subscribe: z27.boolean().optional(),
+        subscribe: z28.boolean().optional(),
         /**
          * Whether this server supports issuing notifications for changes to the resource list.
          */
-        listChanged: z27.boolean().optional()
+        listChanged: z28.boolean().optional()
       }).optional(),
       /**
        * Present if the server offers any tools to call.
        */
-      tools: z27.object({
+      tools: z28.object({
         /**
          * Whether this server supports issuing notifications for changes to the tool list.
          */
-        listChanged: z27.boolean().optional()
+        listChanged: z28.boolean().optional()
       }).optional(),
       /**
        * Present if the server supports task creation.
@@ -31328,13 +31739,13 @@ var init_types4 = __esm({
       /**
        * Extensions that the server supports. Keys are extension identifiers (vendor-prefix/extension-name).
        */
-      extensions: z27.record(z27.string(), AssertObjectSchema).optional()
+      extensions: z28.record(z28.string(), AssertObjectSchema).optional()
     });
     InitializeResultSchema = ResultSchema.extend({
       /**
        * The version of the Model Context Protocol that the server wants to use. This may not match the version that the client requested. If the client cannot support this version, it MUST disconnect.
        */
-      protocolVersion: z27.string(),
+      protocolVersion: z28.string(),
       capabilities: ServerCapabilitiesSchema,
       serverInfo: ImplementationSchema,
       /**
@@ -31342,31 +31753,31 @@ var init_types4 = __esm({
        *
        * This can be used by clients to improve the LLM's understanding of available tools, resources, etc. It can be thought of like a "hint" to the model. For example, this information MAY be added to the system prompt.
        */
-      instructions: z27.string().optional()
+      instructions: z28.string().optional()
     });
     InitializedNotificationSchema = NotificationSchema.extend({
-      method: z27.literal("notifications/initialized"),
+      method: z28.literal("notifications/initialized"),
       params: NotificationsParamsSchema.optional()
     });
     PingRequestSchema = RequestSchema.extend({
-      method: z27.literal("ping"),
+      method: z28.literal("ping"),
       params: BaseRequestParamsSchema.optional()
     });
-    ProgressSchema = z27.object({
+    ProgressSchema = z28.object({
       /**
        * The progress thus far. This should increase every time progress is made, even if the total is unknown.
        */
-      progress: z27.number(),
+      progress: z28.number(),
       /**
        * Total number of items to process (or total progress required), if known.
        */
-      total: z27.optional(z27.number()),
+      total: z28.optional(z28.number()),
       /**
        * An optional message describing the current progress.
        */
-      message: z27.optional(z27.string())
+      message: z28.optional(z28.string())
     });
-    ProgressNotificationParamsSchema = z27.object({
+    ProgressNotificationParamsSchema = z28.object({
       ...NotificationsParamsSchema.shape,
       ...ProgressSchema.shape,
       /**
@@ -31375,7 +31786,7 @@ var init_types4 = __esm({
       progressToken: ProgressTokenSchema
     });
     ProgressNotificationSchema = NotificationSchema.extend({
-      method: z27.literal("notifications/progress"),
+      method: z28.literal("notifications/progress"),
       params: ProgressNotificationParamsSchema
     });
     PaginatedRequestParamsSchema = BaseRequestParamsSchema.extend({
@@ -31395,86 +31806,86 @@ var init_types4 = __esm({
        */
       nextCursor: CursorSchema.optional()
     });
-    TaskStatusSchema2 = z27.enum(["working", "input_required", "completed", "failed", "cancelled"]);
-    TaskSchema = z27.object({
-      taskId: z27.string(),
+    TaskStatusSchema2 = z28.enum(["working", "input_required", "completed", "failed", "cancelled"]);
+    TaskSchema = z28.object({
+      taskId: z28.string(),
       status: TaskStatusSchema2,
       /**
        * Time in milliseconds to keep task results available after completion.
        * If null, the task has unlimited lifetime until manually cleaned up.
        */
-      ttl: z27.union([z27.number(), z27.null()]),
+      ttl: z28.union([z28.number(), z28.null()]),
       /**
        * ISO 8601 timestamp when the task was created.
        */
-      createdAt: z27.string(),
+      createdAt: z28.string(),
       /**
        * ISO 8601 timestamp when the task was last updated.
        */
-      lastUpdatedAt: z27.string(),
-      pollInterval: z27.optional(z27.number()),
+      lastUpdatedAt: z28.string(),
+      pollInterval: z28.optional(z28.number()),
       /**
        * Optional diagnostic message for failed tasks or other status information.
        */
-      statusMessage: z27.optional(z27.string())
+      statusMessage: z28.optional(z28.string())
     });
     CreateTaskResultSchema = ResultSchema.extend({
       task: TaskSchema
     });
     TaskStatusNotificationParamsSchema = NotificationsParamsSchema.merge(TaskSchema);
     TaskStatusNotificationSchema = NotificationSchema.extend({
-      method: z27.literal("notifications/tasks/status"),
+      method: z28.literal("notifications/tasks/status"),
       params: TaskStatusNotificationParamsSchema
     });
     GetTaskRequestSchema = RequestSchema.extend({
-      method: z27.literal("tasks/get"),
+      method: z28.literal("tasks/get"),
       params: BaseRequestParamsSchema.extend({
-        taskId: z27.string()
+        taskId: z28.string()
       })
     });
     GetTaskResultSchema = ResultSchema.merge(TaskSchema);
     GetTaskPayloadRequestSchema = RequestSchema.extend({
-      method: z27.literal("tasks/result"),
+      method: z28.literal("tasks/result"),
       params: BaseRequestParamsSchema.extend({
-        taskId: z27.string()
+        taskId: z28.string()
       })
     });
     GetTaskPayloadResultSchema = ResultSchema.loose();
     ListTasksRequestSchema = PaginatedRequestSchema.extend({
-      method: z27.literal("tasks/list")
+      method: z28.literal("tasks/list")
     });
     ListTasksResultSchema = PaginatedResultSchema.extend({
-      tasks: z27.array(TaskSchema)
+      tasks: z28.array(TaskSchema)
     });
     CancelTaskRequestSchema = RequestSchema.extend({
-      method: z27.literal("tasks/cancel"),
+      method: z28.literal("tasks/cancel"),
       params: BaseRequestParamsSchema.extend({
-        taskId: z27.string()
+        taskId: z28.string()
       })
     });
     CancelTaskResultSchema = ResultSchema.merge(TaskSchema);
-    ResourceContentsSchema = z27.object({
+    ResourceContentsSchema = z28.object({
       /**
        * The URI of this resource.
        */
-      uri: z27.string(),
+      uri: z28.string(),
       /**
        * The MIME type of this resource, if known.
        */
-      mimeType: z27.optional(z27.string()),
+      mimeType: z28.optional(z28.string()),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.record(z27.string(), z27.unknown()).optional()
+      _meta: z28.record(z28.string(), z28.unknown()).optional()
     });
     TextResourceContentsSchema = ResourceContentsSchema.extend({
       /**
        * The text of the item. This must only be set if the item can actually be represented as text (not binary data).
        */
-      text: z27.string()
+      text: z28.string()
     });
-    Base64Schema = z27.string().refine((val) => {
+    Base64Schema = z28.string().refine((val) => {
       try {
         atob(val);
         return true;
@@ -31488,44 +31899,44 @@ var init_types4 = __esm({
        */
       blob: Base64Schema
     });
-    RoleSchema = z27.enum(["user", "assistant"]);
-    AnnotationsSchema = z27.object({
+    RoleSchema = z28.enum(["user", "assistant"]);
+    AnnotationsSchema = z28.object({
       /**
        * Intended audience(s) for the resource.
        */
-      audience: z27.array(RoleSchema).optional(),
+      audience: z28.array(RoleSchema).optional(),
       /**
        * Importance hint for the resource, from 0 (least) to 1 (most).
        */
-      priority: z27.number().min(0).max(1).optional(),
+      priority: z28.number().min(0).max(1).optional(),
       /**
        * ISO 8601 timestamp for the most recent modification.
        */
-      lastModified: z27.iso.datetime({ offset: true }).optional()
+      lastModified: z28.iso.datetime({ offset: true }).optional()
     });
-    ResourceSchema = z27.object({
+    ResourceSchema = z28.object({
       ...BaseMetadataSchema.shape,
       ...IconsSchema.shape,
       /**
        * The URI of this resource.
        */
-      uri: z27.string(),
+      uri: z28.string(),
       /**
        * A description of what this resource represents.
        *
        * This can be used by clients to improve the LLM's understanding of available resources. It can be thought of like a "hint" to the model.
        */
-      description: z27.optional(z27.string()),
+      description: z28.optional(z28.string()),
       /**
        * The MIME type of this resource, if known.
        */
-      mimeType: z27.optional(z27.string()),
+      mimeType: z28.optional(z28.string()),
       /**
        * The size of the raw resource content, in bytes (i.e., before base64 encoding or any tokenization), if known.
        *
        * This can be used by Hosts to display file sizes and estimate context window usage.
        */
-      size: z27.optional(z27.number()),
+      size: z28.optional(z28.number()),
       /**
        * Optional annotations for the client.
        */
@@ -31534,25 +31945,25 @@ var init_types4 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.optional(z27.looseObject({}))
+      _meta: z28.optional(z28.looseObject({}))
     });
-    ResourceTemplateSchema = z27.object({
+    ResourceTemplateSchema = z28.object({
       ...BaseMetadataSchema.shape,
       ...IconsSchema.shape,
       /**
        * A URI template (according to RFC 6570) that can be used to construct resource URIs.
        */
-      uriTemplate: z27.string(),
+      uriTemplate: z28.string(),
       /**
        * A description of what this template is for.
        *
        * This can be used by clients to improve the LLM's understanding of available resources. It can be thought of like a "hint" to the model.
        */
-      description: z27.optional(z27.string()),
+      description: z28.optional(z28.string()),
       /**
        * The MIME type for all resources that match this template. This should only be included if all resources matching this template have the same type.
        */
-      mimeType: z27.optional(z27.string()),
+      mimeType: z28.optional(z28.string()),
       /**
        * Optional annotations for the client.
        */
@@ -31561,19 +31972,19 @@ var init_types4 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.optional(z27.looseObject({}))
+      _meta: z28.optional(z28.looseObject({}))
     });
     ListResourcesRequestSchema = PaginatedRequestSchema.extend({
-      method: z27.literal("resources/list")
+      method: z28.literal("resources/list")
     });
     ListResourcesResultSchema = PaginatedResultSchema.extend({
-      resources: z27.array(ResourceSchema)
+      resources: z28.array(ResourceSchema)
     });
     ListResourceTemplatesRequestSchema = PaginatedRequestSchema.extend({
-      method: z27.literal("resources/templates/list")
+      method: z28.literal("resources/templates/list")
     });
     ListResourceTemplatesResultSchema = PaginatedResultSchema.extend({
-      resourceTemplates: z27.array(ResourceTemplateSchema)
+      resourceTemplates: z28.array(ResourceTemplateSchema)
     });
     ResourceRequestParamsSchema = BaseRequestParamsSchema.extend({
       /**
@@ -31581,97 +31992,97 @@ var init_types4 = __esm({
        *
        * @format uri
        */
-      uri: z27.string()
+      uri: z28.string()
     });
     ReadResourceRequestParamsSchema = ResourceRequestParamsSchema;
     ReadResourceRequestSchema = RequestSchema.extend({
-      method: z27.literal("resources/read"),
+      method: z28.literal("resources/read"),
       params: ReadResourceRequestParamsSchema
     });
     ReadResourceResultSchema = ResultSchema.extend({
-      contents: z27.array(z27.union([TextResourceContentsSchema, BlobResourceContentsSchema]))
+      contents: z28.array(z28.union([TextResourceContentsSchema, BlobResourceContentsSchema]))
     });
     ResourceListChangedNotificationSchema = NotificationSchema.extend({
-      method: z27.literal("notifications/resources/list_changed"),
+      method: z28.literal("notifications/resources/list_changed"),
       params: NotificationsParamsSchema.optional()
     });
     SubscribeRequestParamsSchema = ResourceRequestParamsSchema;
     SubscribeRequestSchema = RequestSchema.extend({
-      method: z27.literal("resources/subscribe"),
+      method: z28.literal("resources/subscribe"),
       params: SubscribeRequestParamsSchema
     });
     UnsubscribeRequestParamsSchema = ResourceRequestParamsSchema;
     UnsubscribeRequestSchema = RequestSchema.extend({
-      method: z27.literal("resources/unsubscribe"),
+      method: z28.literal("resources/unsubscribe"),
       params: UnsubscribeRequestParamsSchema
     });
     ResourceUpdatedNotificationParamsSchema = NotificationsParamsSchema.extend({
       /**
        * The URI of the resource that has been updated. This might be a sub-resource of the one that the client actually subscribed to.
        */
-      uri: z27.string()
+      uri: z28.string()
     });
     ResourceUpdatedNotificationSchema = NotificationSchema.extend({
-      method: z27.literal("notifications/resources/updated"),
+      method: z28.literal("notifications/resources/updated"),
       params: ResourceUpdatedNotificationParamsSchema
     });
-    PromptArgumentSchema = z27.object({
+    PromptArgumentSchema = z28.object({
       /**
        * The name of the argument.
        */
-      name: z27.string(),
+      name: z28.string(),
       /**
        * A human-readable description of the argument.
        */
-      description: z27.optional(z27.string()),
+      description: z28.optional(z28.string()),
       /**
        * Whether this argument must be provided.
        */
-      required: z27.optional(z27.boolean())
+      required: z28.optional(z28.boolean())
     });
-    PromptSchema = z27.object({
+    PromptSchema = z28.object({
       ...BaseMetadataSchema.shape,
       ...IconsSchema.shape,
       /**
        * An optional description of what this prompt provides
        */
-      description: z27.optional(z27.string()),
+      description: z28.optional(z28.string()),
       /**
        * A list of arguments to use for templating the prompt.
        */
-      arguments: z27.optional(z27.array(PromptArgumentSchema)),
+      arguments: z28.optional(z28.array(PromptArgumentSchema)),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.optional(z27.looseObject({}))
+      _meta: z28.optional(z28.looseObject({}))
     });
     ListPromptsRequestSchema = PaginatedRequestSchema.extend({
-      method: z27.literal("prompts/list")
+      method: z28.literal("prompts/list")
     });
     ListPromptsResultSchema = PaginatedResultSchema.extend({
-      prompts: z27.array(PromptSchema)
+      prompts: z28.array(PromptSchema)
     });
     GetPromptRequestParamsSchema = BaseRequestParamsSchema.extend({
       /**
        * The name of the prompt or prompt template.
        */
-      name: z27.string(),
+      name: z28.string(),
       /**
        * Arguments to use for templating the prompt.
        */
-      arguments: z27.record(z27.string(), z27.string()).optional()
+      arguments: z28.record(z28.string(), z28.string()).optional()
     });
     GetPromptRequestSchema = RequestSchema.extend({
-      method: z27.literal("prompts/get"),
+      method: z28.literal("prompts/get"),
       params: GetPromptRequestParamsSchema
     });
-    TextContentSchema = z27.object({
-      type: z27.literal("text"),
+    TextContentSchema = z28.object({
+      type: z28.literal("text"),
       /**
        * The text content of the message.
        */
-      text: z27.string(),
+      text: z28.string(),
       /**
        * Optional annotations for the client.
        */
@@ -31680,10 +32091,10 @@ var init_types4 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.record(z27.string(), z27.unknown()).optional()
+      _meta: z28.record(z28.string(), z28.unknown()).optional()
     });
-    ImageContentSchema = z27.object({
-      type: z27.literal("image"),
+    ImageContentSchema = z28.object({
+      type: z28.literal("image"),
       /**
        * The base64-encoded image data.
        */
@@ -31691,7 +32102,7 @@ var init_types4 = __esm({
       /**
        * The MIME type of the image. Different providers may support different image types.
        */
-      mimeType: z27.string(),
+      mimeType: z28.string(),
       /**
        * Optional annotations for the client.
        */
@@ -31700,10 +32111,10 @@ var init_types4 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.record(z27.string(), z27.unknown()).optional()
+      _meta: z28.record(z28.string(), z28.unknown()).optional()
     });
-    AudioContentSchema = z27.object({
-      type: z27.literal("audio"),
+    AudioContentSchema = z28.object({
+      type: z28.literal("audio"),
       /**
        * The base64-encoded audio data.
        */
@@ -31711,7 +32122,7 @@ var init_types4 = __esm({
       /**
        * The MIME type of the audio. Different providers may support different audio types.
        */
-      mimeType: z27.string(),
+      mimeType: z28.string(),
       /**
        * Optional annotations for the client.
        */
@@ -31720,34 +32131,34 @@ var init_types4 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.record(z27.string(), z27.unknown()).optional()
+      _meta: z28.record(z28.string(), z28.unknown()).optional()
     });
-    ToolUseContentSchema = z27.object({
-      type: z27.literal("tool_use"),
+    ToolUseContentSchema = z28.object({
+      type: z28.literal("tool_use"),
       /**
        * The name of the tool to invoke.
        * Must match a tool name from the request's tools array.
        */
-      name: z27.string(),
+      name: z28.string(),
       /**
        * Unique identifier for this tool call.
        * Used to correlate with ToolResultContent in subsequent messages.
        */
-      id: z27.string(),
+      id: z28.string(),
       /**
        * Arguments to pass to the tool.
        * Must conform to the tool's inputSchema.
        */
-      input: z27.record(z27.string(), z27.unknown()),
+      input: z28.record(z28.string(), z28.unknown()),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.record(z27.string(), z27.unknown()).optional()
+      _meta: z28.record(z28.string(), z28.unknown()).optional()
     });
-    EmbeddedResourceSchema = z27.object({
-      type: z27.literal("resource"),
-      resource: z27.union([TextResourceContentsSchema, BlobResourceContentsSchema]),
+    EmbeddedResourceSchema = z28.object({
+      type: z28.literal("resource"),
+      resource: z28.union([TextResourceContentsSchema, BlobResourceContentsSchema]),
       /**
        * Optional annotations for the client.
        */
@@ -31756,19 +32167,19 @@ var init_types4 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.record(z27.string(), z27.unknown()).optional()
+      _meta: z28.record(z28.string(), z28.unknown()).optional()
     });
     ResourceLinkSchema = ResourceSchema.extend({
-      type: z27.literal("resource_link")
+      type: z28.literal("resource_link")
     });
-    ContentBlockSchema = z27.union([
+    ContentBlockSchema = z28.union([
       TextContentSchema,
       ImageContentSchema,
       AudioContentSchema,
       ResourceLinkSchema,
       EmbeddedResourceSchema
     ]);
-    PromptMessageSchema = z27.object({
+    PromptMessageSchema = z28.object({
       role: RoleSchema,
       content: ContentBlockSchema
     });
@@ -31776,24 +32187,24 @@ var init_types4 = __esm({
       /**
        * An optional description for the prompt.
        */
-      description: z27.string().optional(),
-      messages: z27.array(PromptMessageSchema)
+      description: z28.string().optional(),
+      messages: z28.array(PromptMessageSchema)
     });
     PromptListChangedNotificationSchema = NotificationSchema.extend({
-      method: z27.literal("notifications/prompts/list_changed"),
+      method: z28.literal("notifications/prompts/list_changed"),
       params: NotificationsParamsSchema.optional()
     });
-    ToolAnnotationsSchema = z27.object({
+    ToolAnnotationsSchema = z28.object({
       /**
        * A human-readable title for the tool.
        */
-      title: z27.string().optional(),
+      title: z28.string().optional(),
       /**
        * If true, the tool does not modify its environment.
        *
        * Default: false
        */
-      readOnlyHint: z27.boolean().optional(),
+      readOnlyHint: z28.boolean().optional(),
       /**
        * If true, the tool may perform destructive updates to its environment.
        * If false, the tool performs only additive updates.
@@ -31802,7 +32213,7 @@ var init_types4 = __esm({
        *
        * Default: true
        */
-      destructiveHint: z27.boolean().optional(),
+      destructiveHint: z28.boolean().optional(),
       /**
        * If true, calling the tool repeatedly with the same arguments
        * will have no additional effect on the its environment.
@@ -31811,7 +32222,7 @@ var init_types4 = __esm({
        *
        * Default: false
        */
-      idempotentHint: z27.boolean().optional(),
+      idempotentHint: z28.boolean().optional(),
       /**
        * If true, this tool may interact with an "open world" of external
        * entities. If false, the tool's domain of interaction is closed.
@@ -31820,9 +32231,9 @@ var init_types4 = __esm({
        *
        * Default: true
        */
-      openWorldHint: z27.boolean().optional()
+      openWorldHint: z28.boolean().optional()
     });
-    ToolExecutionSchema = z27.object({
+    ToolExecutionSchema = z28.object({
       /**
        * Indicates the tool's preference for task-augmented execution.
        * - "required": Clients MUST invoke the tool as a task
@@ -31831,34 +32242,34 @@ var init_types4 = __esm({
        *
        * If not present, defaults to "forbidden".
        */
-      taskSupport: z27.enum(["required", "optional", "forbidden"]).optional()
+      taskSupport: z28.enum(["required", "optional", "forbidden"]).optional()
     });
-    ToolSchema = z27.object({
+    ToolSchema = z28.object({
       ...BaseMetadataSchema.shape,
       ...IconsSchema.shape,
       /**
        * A human-readable description of the tool.
        */
-      description: z27.string().optional(),
+      description: z28.string().optional(),
       /**
        * A JSON Schema 2020-12 object defining the expected parameters for the tool.
        * Must have type: 'object' at the root level per MCP spec.
        */
-      inputSchema: z27.object({
-        type: z27.literal("object"),
-        properties: z27.record(z27.string(), AssertObjectSchema).optional(),
-        required: z27.array(z27.string()).optional()
-      }).catchall(z27.unknown()),
+      inputSchema: z28.object({
+        type: z28.literal("object"),
+        properties: z28.record(z28.string(), AssertObjectSchema).optional(),
+        required: z28.array(z28.string()).optional()
+      }).catchall(z28.unknown()),
       /**
        * An optional JSON Schema 2020-12 object defining the structure of the tool's output
        * returned in the structuredContent field of a CallToolResult.
        * Must have type: 'object' at the root level per MCP spec.
        */
-      outputSchema: z27.object({
-        type: z27.literal("object"),
-        properties: z27.record(z27.string(), AssertObjectSchema).optional(),
-        required: z27.array(z27.string()).optional()
-      }).catchall(z27.unknown()).optional(),
+      outputSchema: z28.object({
+        type: z28.literal("object"),
+        properties: z28.record(z28.string(), AssertObjectSchema).optional(),
+        required: z28.array(z28.string()).optional()
+      }).catchall(z28.unknown()).optional(),
       /**
        * Optional additional tool information.
        */
@@ -31871,13 +32282,13 @@ var init_types4 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.record(z27.string(), z27.unknown()).optional()
+      _meta: z28.record(z28.string(), z28.unknown()).optional()
     });
     ListToolsRequestSchema = PaginatedRequestSchema.extend({
-      method: z27.literal("tools/list")
+      method: z28.literal("tools/list")
     });
     ListToolsResultSchema = PaginatedResultSchema.extend({
-      tools: z27.array(ToolSchema)
+      tools: z28.array(ToolSchema)
     });
     CallToolResultSchema = ResultSchema.extend({
       /**
@@ -31886,13 +32297,13 @@ var init_types4 = __esm({
        * If the Tool does not define an outputSchema, this field MUST be present in the result.
        * For backwards compatibility, this field is always present, but it may be empty.
        */
-      content: z27.array(ContentBlockSchema).default([]),
+      content: z28.array(ContentBlockSchema).default([]),
       /**
        * An object containing structured tool output.
        *
        * If the Tool defines an outputSchema, this field MUST be present in the result, and contain a JSON object that matches the schema.
        */
-      structuredContent: z27.record(z27.string(), z27.unknown()).optional(),
+      structuredContent: z28.record(z28.string(), z28.unknown()).optional(),
       /**
        * Whether the tool call ended in an error.
        *
@@ -31907,30 +32318,30 @@ var init_types4 = __esm({
        * server does not support tool calls, or any other exceptional conditions,
        * should be reported as an MCP error response.
        */
-      isError: z27.boolean().optional()
+      isError: z28.boolean().optional()
     });
     CompatibilityCallToolResultSchema = CallToolResultSchema.or(ResultSchema.extend({
-      toolResult: z27.unknown()
+      toolResult: z28.unknown()
     }));
     CallToolRequestParamsSchema = TaskAugmentedRequestParamsSchema.extend({
       /**
        * The name of the tool to call.
        */
-      name: z27.string(),
+      name: z28.string(),
       /**
        * Arguments to pass to the tool.
        */
-      arguments: z27.record(z27.string(), z27.unknown()).optional()
+      arguments: z28.record(z28.string(), z28.unknown()).optional()
     });
     CallToolRequestSchema = RequestSchema.extend({
-      method: z27.literal("tools/call"),
+      method: z28.literal("tools/call"),
       params: CallToolRequestParamsSchema
     });
     ToolListChangedNotificationSchema = NotificationSchema.extend({
-      method: z27.literal("notifications/tools/list_changed"),
+      method: z28.literal("notifications/tools/list_changed"),
       params: NotificationsParamsSchema.optional()
     });
-    ListChangedOptionsBaseSchema = z27.object({
+    ListChangedOptionsBaseSchema = z28.object({
       /**
        * If true, the list will be refreshed automatically when a list changed notification is received.
        * The callback will be called with the updated list.
@@ -31939,7 +32350,7 @@ var init_types4 = __esm({
        *
        * @default true
        */
-      autoRefresh: z27.boolean().default(true),
+      autoRefresh: z28.boolean().default(true),
       /**
        * Debounce time in milliseconds for list changed notification processing.
        *
@@ -31948,9 +32359,9 @@ var init_types4 = __esm({
        *
        * @default 300
        */
-      debounceMs: z27.number().int().nonnegative().default(300)
+      debounceMs: z28.number().int().nonnegative().default(300)
     });
-    LoggingLevelSchema = z27.enum(["debug", "info", "notice", "warning", "error", "critical", "alert", "emergency"]);
+    LoggingLevelSchema = z28.enum(["debug", "info", "notice", "warning", "error", "critical", "alert", "emergency"]);
     SetLevelRequestParamsSchema = BaseRequestParamsSchema.extend({
       /**
        * The level of logging that the client wants to receive from the server. The server should send all logs at this level and higher (i.e., more severe) to the client as notifications/logging/message.
@@ -31958,7 +32369,7 @@ var init_types4 = __esm({
       level: LoggingLevelSchema
     });
     SetLevelRequestSchema = RequestSchema.extend({
-      method: z27.literal("logging/setLevel"),
+      method: z28.literal("logging/setLevel"),
       params: SetLevelRequestParamsSchema
     });
     LoggingMessageNotificationParamsSchema = NotificationsParamsSchema.extend({
@@ -31969,80 +32380,80 @@ var init_types4 = __esm({
       /**
        * An optional name of the logger issuing this message.
        */
-      logger: z27.string().optional(),
+      logger: z28.string().optional(),
       /**
        * The data to be logged, such as a string message or an object. Any JSON serializable type is allowed here.
        */
-      data: z27.unknown()
+      data: z28.unknown()
     });
     LoggingMessageNotificationSchema = NotificationSchema.extend({
-      method: z27.literal("notifications/message"),
+      method: z28.literal("notifications/message"),
       params: LoggingMessageNotificationParamsSchema
     });
-    ModelHintSchema = z27.object({
+    ModelHintSchema = z28.object({
       /**
        * A hint for a model name.
        */
-      name: z27.string().optional()
+      name: z28.string().optional()
     });
-    ModelPreferencesSchema = z27.object({
+    ModelPreferencesSchema = z28.object({
       /**
        * Optional hints to use for model selection.
        */
-      hints: z27.array(ModelHintSchema).optional(),
+      hints: z28.array(ModelHintSchema).optional(),
       /**
        * How much to prioritize cost when selecting a model.
        */
-      costPriority: z27.number().min(0).max(1).optional(),
+      costPriority: z28.number().min(0).max(1).optional(),
       /**
        * How much to prioritize sampling speed (latency) when selecting a model.
        */
-      speedPriority: z27.number().min(0).max(1).optional(),
+      speedPriority: z28.number().min(0).max(1).optional(),
       /**
        * How much to prioritize intelligence and capabilities when selecting a model.
        */
-      intelligencePriority: z27.number().min(0).max(1).optional()
+      intelligencePriority: z28.number().min(0).max(1).optional()
     });
-    ToolChoiceSchema = z27.object({
+    ToolChoiceSchema = z28.object({
       /**
        * Controls when tools are used:
        * - "auto": Model decides whether to use tools (default)
        * - "required": Model MUST use at least one tool before completing
        * - "none": Model MUST NOT use any tools
        */
-      mode: z27.enum(["auto", "required", "none"]).optional()
+      mode: z28.enum(["auto", "required", "none"]).optional()
     });
-    ToolResultContentSchema = z27.object({
-      type: z27.literal("tool_result"),
-      toolUseId: z27.string().describe("The unique identifier for the corresponding tool call."),
-      content: z27.array(ContentBlockSchema).default([]),
-      structuredContent: z27.object({}).loose().optional(),
-      isError: z27.boolean().optional(),
+    ToolResultContentSchema = z28.object({
+      type: z28.literal("tool_result"),
+      toolUseId: z28.string().describe("The unique identifier for the corresponding tool call."),
+      content: z28.array(ContentBlockSchema).default([]),
+      structuredContent: z28.object({}).loose().optional(),
+      isError: z28.boolean().optional(),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.record(z27.string(), z27.unknown()).optional()
+      _meta: z28.record(z28.string(), z28.unknown()).optional()
     });
-    SamplingContentSchema = z27.discriminatedUnion("type", [TextContentSchema, ImageContentSchema, AudioContentSchema]);
-    SamplingMessageContentBlockSchema = z27.discriminatedUnion("type", [
+    SamplingContentSchema = z28.discriminatedUnion("type", [TextContentSchema, ImageContentSchema, AudioContentSchema]);
+    SamplingMessageContentBlockSchema = z28.discriminatedUnion("type", [
       TextContentSchema,
       ImageContentSchema,
       AudioContentSchema,
       ToolUseContentSchema,
       ToolResultContentSchema
     ]);
-    SamplingMessageSchema = z27.object({
+    SamplingMessageSchema = z28.object({
       role: RoleSchema,
-      content: z27.union([SamplingMessageContentBlockSchema, z27.array(SamplingMessageContentBlockSchema)]),
+      content: z28.union([SamplingMessageContentBlockSchema, z28.array(SamplingMessageContentBlockSchema)]),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.record(z27.string(), z27.unknown()).optional()
+      _meta: z28.record(z28.string(), z28.unknown()).optional()
     });
     CreateMessageRequestParamsSchema = TaskAugmentedRequestParamsSchema.extend({
-      messages: z27.array(SamplingMessageSchema),
+      messages: z28.array(SamplingMessageSchema),
       /**
        * The server's preferences for which model to select. The client MAY modify or omit this request.
        */
@@ -32050,7 +32461,7 @@ var init_types4 = __esm({
       /**
        * An optional system prompt the server wants to use for sampling. The client MAY modify or omit this prompt.
        */
-      systemPrompt: z27.string().optional(),
+      systemPrompt: z28.string().optional(),
       /**
        * A request to include context from one or more MCP servers (including the caller), to be attached to the prompt.
        * The client MAY ignore this request.
@@ -32058,15 +32469,15 @@ var init_types4 = __esm({
        * Default is "none". Values "thisServer" and "allServers" are soft-deprecated. Servers SHOULD only use these values if the client
        * declares ClientCapabilities.sampling.context. These values may be removed in future spec releases.
        */
-      includeContext: z27.enum(["none", "thisServer", "allServers"]).optional(),
-      temperature: z27.number().optional(),
+      includeContext: z28.enum(["none", "thisServer", "allServers"]).optional(),
+      temperature: z28.number().optional(),
       /**
        * The requested maximum number of tokens to sample (to prevent runaway completions).
        *
        * The client MAY choose to sample fewer tokens than the requested maximum.
        */
-      maxTokens: z27.number().int(),
-      stopSequences: z27.array(z27.string()).optional(),
+      maxTokens: z28.number().int(),
+      stopSequences: z28.array(z28.string()).optional(),
       /**
        * Optional metadata to pass through to the LLM provider. The format of this metadata is provider-specific.
        */
@@ -32075,7 +32486,7 @@ var init_types4 = __esm({
        * Tools that the model may use during generation.
        * The client MUST return an error if this field is provided but ClientCapabilities.sampling.tools is not declared.
        */
-      tools: z27.array(ToolSchema).optional(),
+      tools: z28.array(ToolSchema).optional(),
       /**
        * Controls how the model uses tools.
        * The client MUST return an error if this field is provided but ClientCapabilities.sampling.tools is not declared.
@@ -32084,14 +32495,14 @@ var init_types4 = __esm({
       toolChoice: ToolChoiceSchema.optional()
     });
     CreateMessageRequestSchema = RequestSchema.extend({
-      method: z27.literal("sampling/createMessage"),
+      method: z28.literal("sampling/createMessage"),
       params: CreateMessageRequestParamsSchema
     });
     CreateMessageResultSchema = ResultSchema.extend({
       /**
        * The name of the model that generated the message.
        */
-      model: z27.string(),
+      model: z28.string(),
       /**
        * The reason why sampling stopped, if known.
        *
@@ -32102,7 +32513,7 @@ var init_types4 = __esm({
        *
        * This field is an open string to allow for provider-specific stop reasons.
        */
-      stopReason: z27.optional(z27.enum(["endTurn", "stopSequence", "maxTokens"]).or(z27.string())),
+      stopReason: z28.optional(z28.enum(["endTurn", "stopSequence", "maxTokens"]).or(z28.string())),
       role: RoleSchema,
       /**
        * Response content. Single content block (text, image, or audio).
@@ -32113,7 +32524,7 @@ var init_types4 = __esm({
       /**
        * The name of the model that generated the message.
        */
-      model: z27.string(),
+      model: z28.string(),
       /**
        * The reason why sampling stopped, if known.
        *
@@ -32125,144 +32536,144 @@ var init_types4 = __esm({
        *
        * This field is an open string to allow for provider-specific stop reasons.
        */
-      stopReason: z27.optional(z27.enum(["endTurn", "stopSequence", "maxTokens", "toolUse"]).or(z27.string())),
+      stopReason: z28.optional(z28.enum(["endTurn", "stopSequence", "maxTokens", "toolUse"]).or(z28.string())),
       role: RoleSchema,
       /**
        * Response content. May be a single block or array. May include ToolUseContent if stopReason is "toolUse".
        */
-      content: z27.union([SamplingMessageContentBlockSchema, z27.array(SamplingMessageContentBlockSchema)])
+      content: z28.union([SamplingMessageContentBlockSchema, z28.array(SamplingMessageContentBlockSchema)])
     });
-    BooleanSchemaSchema = z27.object({
-      type: z27.literal("boolean"),
-      title: z27.string().optional(),
-      description: z27.string().optional(),
-      default: z27.boolean().optional()
+    BooleanSchemaSchema = z28.object({
+      type: z28.literal("boolean"),
+      title: z28.string().optional(),
+      description: z28.string().optional(),
+      default: z28.boolean().optional()
     });
-    StringSchemaSchema = z27.object({
-      type: z27.literal("string"),
-      title: z27.string().optional(),
-      description: z27.string().optional(),
-      minLength: z27.number().optional(),
-      maxLength: z27.number().optional(),
-      format: z27.enum(["email", "uri", "date", "date-time"]).optional(),
-      default: z27.string().optional()
+    StringSchemaSchema = z28.object({
+      type: z28.literal("string"),
+      title: z28.string().optional(),
+      description: z28.string().optional(),
+      minLength: z28.number().optional(),
+      maxLength: z28.number().optional(),
+      format: z28.enum(["email", "uri", "date", "date-time"]).optional(),
+      default: z28.string().optional()
     });
-    NumberSchemaSchema = z27.object({
-      type: z27.enum(["number", "integer"]),
-      title: z27.string().optional(),
-      description: z27.string().optional(),
-      minimum: z27.number().optional(),
-      maximum: z27.number().optional(),
-      default: z27.number().optional()
+    NumberSchemaSchema = z28.object({
+      type: z28.enum(["number", "integer"]),
+      title: z28.string().optional(),
+      description: z28.string().optional(),
+      minimum: z28.number().optional(),
+      maximum: z28.number().optional(),
+      default: z28.number().optional()
     });
-    UntitledSingleSelectEnumSchemaSchema = z27.object({
-      type: z27.literal("string"),
-      title: z27.string().optional(),
-      description: z27.string().optional(),
-      enum: z27.array(z27.string()),
-      default: z27.string().optional()
+    UntitledSingleSelectEnumSchemaSchema = z28.object({
+      type: z28.literal("string"),
+      title: z28.string().optional(),
+      description: z28.string().optional(),
+      enum: z28.array(z28.string()),
+      default: z28.string().optional()
     });
-    TitledSingleSelectEnumSchemaSchema = z27.object({
-      type: z27.literal("string"),
-      title: z27.string().optional(),
-      description: z27.string().optional(),
-      oneOf: z27.array(z27.object({
-        const: z27.string(),
-        title: z27.string()
+    TitledSingleSelectEnumSchemaSchema = z28.object({
+      type: z28.literal("string"),
+      title: z28.string().optional(),
+      description: z28.string().optional(),
+      oneOf: z28.array(z28.object({
+        const: z28.string(),
+        title: z28.string()
       })),
-      default: z27.string().optional()
+      default: z28.string().optional()
     });
-    LegacyTitledEnumSchemaSchema = z27.object({
-      type: z27.literal("string"),
-      title: z27.string().optional(),
-      description: z27.string().optional(),
-      enum: z27.array(z27.string()),
-      enumNames: z27.array(z27.string()).optional(),
-      default: z27.string().optional()
+    LegacyTitledEnumSchemaSchema = z28.object({
+      type: z28.literal("string"),
+      title: z28.string().optional(),
+      description: z28.string().optional(),
+      enum: z28.array(z28.string()),
+      enumNames: z28.array(z28.string()).optional(),
+      default: z28.string().optional()
     });
-    SingleSelectEnumSchemaSchema = z27.union([UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema]);
-    UntitledMultiSelectEnumSchemaSchema = z27.object({
-      type: z27.literal("array"),
-      title: z27.string().optional(),
-      description: z27.string().optional(),
-      minItems: z27.number().optional(),
-      maxItems: z27.number().optional(),
-      items: z27.object({
-        type: z27.literal("string"),
-        enum: z27.array(z27.string())
+    SingleSelectEnumSchemaSchema = z28.union([UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema]);
+    UntitledMultiSelectEnumSchemaSchema = z28.object({
+      type: z28.literal("array"),
+      title: z28.string().optional(),
+      description: z28.string().optional(),
+      minItems: z28.number().optional(),
+      maxItems: z28.number().optional(),
+      items: z28.object({
+        type: z28.literal("string"),
+        enum: z28.array(z28.string())
       }),
-      default: z27.array(z27.string()).optional()
+      default: z28.array(z28.string()).optional()
     });
-    TitledMultiSelectEnumSchemaSchema = z27.object({
-      type: z27.literal("array"),
-      title: z27.string().optional(),
-      description: z27.string().optional(),
-      minItems: z27.number().optional(),
-      maxItems: z27.number().optional(),
-      items: z27.object({
-        anyOf: z27.array(z27.object({
-          const: z27.string(),
-          title: z27.string()
+    TitledMultiSelectEnumSchemaSchema = z28.object({
+      type: z28.literal("array"),
+      title: z28.string().optional(),
+      description: z28.string().optional(),
+      minItems: z28.number().optional(),
+      maxItems: z28.number().optional(),
+      items: z28.object({
+        anyOf: z28.array(z28.object({
+          const: z28.string(),
+          title: z28.string()
         }))
       }),
-      default: z27.array(z27.string()).optional()
+      default: z28.array(z28.string()).optional()
     });
-    MultiSelectEnumSchemaSchema = z27.union([UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema]);
-    EnumSchemaSchema = z27.union([LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema]);
-    PrimitiveSchemaDefinitionSchema = z27.union([EnumSchemaSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema]);
+    MultiSelectEnumSchemaSchema = z28.union([UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema]);
+    EnumSchemaSchema = z28.union([LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema]);
+    PrimitiveSchemaDefinitionSchema = z28.union([EnumSchemaSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema]);
     ElicitRequestFormParamsSchema = TaskAugmentedRequestParamsSchema.extend({
       /**
        * The elicitation mode.
        *
        * Optional for backward compatibility. Clients MUST treat missing mode as "form".
        */
-      mode: z27.literal("form").optional(),
+      mode: z28.literal("form").optional(),
       /**
        * The message to present to the user describing what information is being requested.
        */
-      message: z27.string(),
+      message: z28.string(),
       /**
        * A restricted subset of JSON Schema.
        * Only top-level properties are allowed, without nesting.
        */
-      requestedSchema: z27.object({
-        type: z27.literal("object"),
-        properties: z27.record(z27.string(), PrimitiveSchemaDefinitionSchema),
-        required: z27.array(z27.string()).optional()
+      requestedSchema: z28.object({
+        type: z28.literal("object"),
+        properties: z28.record(z28.string(), PrimitiveSchemaDefinitionSchema),
+        required: z28.array(z28.string()).optional()
       })
     });
     ElicitRequestURLParamsSchema = TaskAugmentedRequestParamsSchema.extend({
       /**
        * The elicitation mode.
        */
-      mode: z27.literal("url"),
+      mode: z28.literal("url"),
       /**
        * The message to present to the user explaining why the interaction is needed.
        */
-      message: z27.string(),
+      message: z28.string(),
       /**
        * The ID of the elicitation, which must be unique within the context of the server.
        * The client MUST treat this ID as an opaque value.
        */
-      elicitationId: z27.string(),
+      elicitationId: z28.string(),
       /**
        * The URL that the user should navigate to.
        */
-      url: z27.string().url()
+      url: z28.string().url()
     });
-    ElicitRequestParamsSchema = z27.union([ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema]);
+    ElicitRequestParamsSchema = z28.union([ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema]);
     ElicitRequestSchema = RequestSchema.extend({
-      method: z27.literal("elicitation/create"),
+      method: z28.literal("elicitation/create"),
       params: ElicitRequestParamsSchema
     });
     ElicitationCompleteNotificationParamsSchema = NotificationsParamsSchema.extend({
       /**
        * The ID of the elicitation that completed.
        */
-      elicitationId: z27.string()
+      elicitationId: z28.string()
     });
     ElicitationCompleteNotificationSchema = NotificationSchema.extend({
-      method: z27.literal("notifications/elicitation/complete"),
+      method: z28.literal("notifications/elicitation/complete"),
       params: ElicitationCompleteNotificationParamsSchema
     });
     ElicitResultSchema = ResultSchema.extend({
@@ -32272,98 +32683,98 @@ var init_types4 = __esm({
        * - "decline": User explicitly decline the action
        * - "cancel": User dismissed without making an explicit choice
        */
-      action: z27.enum(["accept", "decline", "cancel"]),
+      action: z28.enum(["accept", "decline", "cancel"]),
       /**
        * The submitted form data, only present when action is "accept".
        * Contains values matching the requested schema.
        * Per MCP spec, content is "typically omitted" for decline/cancel actions.
        * We normalize null to undefined for leniency while maintaining type compatibility.
        */
-      content: z27.preprocess((val) => val === null ? void 0 : val, z27.record(z27.string(), z27.union([z27.string(), z27.number(), z27.boolean(), z27.array(z27.string())])).optional())
+      content: z28.preprocess((val) => val === null ? void 0 : val, z28.record(z28.string(), z28.union([z28.string(), z28.number(), z28.boolean(), z28.array(z28.string())])).optional())
     });
-    ResourceTemplateReferenceSchema = z27.object({
-      type: z27.literal("ref/resource"),
+    ResourceTemplateReferenceSchema = z28.object({
+      type: z28.literal("ref/resource"),
       /**
        * The URI or URI template of the resource.
        */
-      uri: z27.string()
+      uri: z28.string()
     });
-    PromptReferenceSchema = z27.object({
-      type: z27.literal("ref/prompt"),
+    PromptReferenceSchema = z28.object({
+      type: z28.literal("ref/prompt"),
       /**
        * The name of the prompt or prompt template
        */
-      name: z27.string()
+      name: z28.string()
     });
     CompleteRequestParamsSchema = BaseRequestParamsSchema.extend({
-      ref: z27.union([PromptReferenceSchema, ResourceTemplateReferenceSchema]),
+      ref: z28.union([PromptReferenceSchema, ResourceTemplateReferenceSchema]),
       /**
        * The argument's information
        */
-      argument: z27.object({
+      argument: z28.object({
         /**
          * The name of the argument
          */
-        name: z27.string(),
+        name: z28.string(),
         /**
          * The value of the argument to use for completion matching.
          */
-        value: z27.string()
+        value: z28.string()
       }),
-      context: z27.object({
+      context: z28.object({
         /**
          * Previously-resolved variables in a URI template or prompt.
          */
-        arguments: z27.record(z27.string(), z27.string()).optional()
+        arguments: z28.record(z28.string(), z28.string()).optional()
       }).optional()
     });
     CompleteRequestSchema = RequestSchema.extend({
-      method: z27.literal("completion/complete"),
+      method: z28.literal("completion/complete"),
       params: CompleteRequestParamsSchema
     });
     CompleteResultSchema = ResultSchema.extend({
-      completion: z27.looseObject({
+      completion: z28.looseObject({
         /**
          * An array of completion values. Must not exceed 100 items.
          */
-        values: z27.array(z27.string()).max(100),
+        values: z28.array(z28.string()).max(100),
         /**
          * The total number of completion options available. This can exceed the number of values actually sent in the response.
          */
-        total: z27.optional(z27.number().int()),
+        total: z28.optional(z28.number().int()),
         /**
          * Indicates whether there are additional completion options beyond those provided in the current response, even if the exact total is unknown.
          */
-        hasMore: z27.optional(z27.boolean())
+        hasMore: z28.optional(z28.boolean())
       })
     });
-    RootSchema = z27.object({
+    RootSchema = z28.object({
       /**
        * The URI identifying the root. This *must* start with file:// for now.
        */
-      uri: z27.string().startsWith("file://"),
+      uri: z28.string().startsWith("file://"),
       /**
        * An optional name for the root.
        */
-      name: z27.string().optional(),
+      name: z28.string().optional(),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z27.record(z27.string(), z27.unknown()).optional()
+      _meta: z28.record(z28.string(), z28.unknown()).optional()
     });
     ListRootsRequestSchema = RequestSchema.extend({
-      method: z27.literal("roots/list"),
+      method: z28.literal("roots/list"),
       params: BaseRequestParamsSchema.optional()
     });
     ListRootsResultSchema = ResultSchema.extend({
-      roots: z27.array(RootSchema)
+      roots: z28.array(RootSchema)
     });
     RootsListChangedNotificationSchema = NotificationSchema.extend({
-      method: z27.literal("notifications/roots/list_changed"),
+      method: z28.literal("notifications/roots/list_changed"),
       params: NotificationsParamsSchema.optional()
     });
-    ClientRequestSchema = z27.union([
+    ClientRequestSchema = z28.union([
       PingRequestSchema,
       InitializeRequestSchema,
       CompleteRequestSchema,
@@ -32382,14 +32793,14 @@ var init_types4 = __esm({
       ListTasksRequestSchema,
       CancelTaskRequestSchema
     ]);
-    ClientNotificationSchema = z27.union([
+    ClientNotificationSchema = z28.union([
       CancelledNotificationSchema,
       ProgressNotificationSchema,
       InitializedNotificationSchema,
       RootsListChangedNotificationSchema,
       TaskStatusNotificationSchema
     ]);
-    ClientResultSchema = z27.union([
+    ClientResultSchema = z28.union([
       EmptyResultSchema,
       CreateMessageResultSchema,
       CreateMessageResultWithToolsSchema,
@@ -32399,7 +32810,7 @@ var init_types4 = __esm({
       ListTasksResultSchema,
       CreateTaskResultSchema
     ]);
-    ServerRequestSchema = z27.union([
+    ServerRequestSchema = z28.union([
       PingRequestSchema,
       CreateMessageRequestSchema,
       ElicitRequestSchema,
@@ -32409,7 +32820,7 @@ var init_types4 = __esm({
       ListTasksRequestSchema,
       CancelTaskRequestSchema
     ]);
-    ServerNotificationSchema = z27.union([
+    ServerNotificationSchema = z28.union([
       CancelledNotificationSchema,
       ProgressNotificationSchema,
       LoggingMessageNotificationSchema,
@@ -32420,7 +32831,7 @@ var init_types4 = __esm({
       TaskStatusNotificationSchema,
       ElicitationCompleteNotificationSchema
     ]);
-    ServerResultSchema = z27.union([
+    ServerResultSchema = z28.union([
       EmptyResultSchema,
       InitializeResultSchema,
       CompleteResultSchema,
@@ -44076,13 +44487,13 @@ var init_stdio2 = __esm({
 });
 
 // ../../packages/mcp-server/src/tools.ts
-import { z as z28 } from "zod";
-var runTaskInputSchema, RUN_TASK_DESCRIPTION;
+import { z as z29 } from "zod";
+var runTaskInputSchema, RUN_TASK_DESCRIPTION, GET_TASK_MAX_WAIT_SECONDS, getTaskInputSchema, GET_TASK_DESCRIPTION;
 var init_tools = __esm({
   "../../packages/mcp-server/src/tools.ts"() {
     "use strict";
     init_src2();
-    runTaskInputSchema = z28.object({
+    runTaskInputSchema = z29.object({
       // LE contrat partage du slug (shared/agent-slug.ts) — la review a montre
       // que trois definitions divergentes rendaient un agent valide inciblable.
       agent: AgentSlugSchema.optional().describe(
@@ -44095,17 +44506,92 @@ var init_tools = __esm({
       // pour un autre espace que celui que l'appelant attend. C'est la prévention
       // dont un appelant a besoin quand son épinglage peut casser (le banc des
       // workflows : un essai ne doit jamais être créé hors de l'espace banc).
-      expectedWorkspaceId: z28.string().uuid().optional().describe(
+      expectedWorkspaceId: z29.string().uuid().optional().describe(
         "Optional ASSERTION, never a choice: the id of the workspace the job must be created in. When this server speaks for another workspace, run_task refuses before creating anything (mcp_workspace_mismatch). It cannot move a job: the workspace is always the one of the agent this server was launched for."
       ),
-      caller: z28.string().min(1).max(120).regex(/^[\w .:@/-]+$/, "caller must be a plain label (letters, digits, spaces, .:@/-_ only)").optional().describe(
+      caller: z29.string().min(1).max(120).regex(/^[\w .:@/-]+$/, "caller must be a plain label (letters, digits, spaces, .:@/-_ only)").optional().describe(
         'Optional label naming WHO is asking (e.g. "agent-dev-a", "quentin-terminal"). Purely declarative \u2014 recorded as provenance on the job, shown on the Runs page, and NEVER used for authorization: the job runs under the rules of the agent this server was launched for, whatever this says.'
       ),
-      instruction: z28.string().min(1).max(16e3).describe(
+      instruction: z29.string().min(1).max(16e3).describe(
         "La demande, en clair et auto-suffisante : l'agent qui l'ex\xE9cute ne voit RIEN de cette session MCP. Il travaille avec ses propres outils, skills et sous-agents, sous ses propres r\xE8gles d approbation."
       )
     });
-    RUN_TASK_DESCRIPTION = "Hand a request to this Nodal agent. Creates a TRACKED JOB the agent runs with its full toolset \u2014 connectors, skills, delegation to its team \u2014 under its own approval rules and budgets. Returns the job id immediately; the work itself runs asynchronously and lands on the Runs page. State the request faithfully and self-contained: the agent sees nothing of this MCP session.";
+    RUN_TASK_DESCRIPTION = "Hand a request to this Nodal agent. Creates a TRACKED JOB the agent runs with its full toolset \u2014 connectors, skills, delegation to its team \u2014 under its own approval rules and budgets. Returns the job id immediately; the work itself runs asynchronously. To get the answer, call `get_task` with that jobId (optionally with waitSeconds to wait for it). State the request faithfully and self-contained: the agent sees nothing of this MCP session.";
+    GET_TASK_MAX_WAIT_SECONDS = 60;
+    getTaskInputSchema = z29.object({
+      jobId: z29.string().uuid().describe("The jobId that run_task returned. Only jobs this MCP server created can be read."),
+      waitSeconds: z29.number().int().min(0).max(GET_TASK_MAX_WAIT_SECONDS).optional().describe(
+        `Optional, 0 to ${GET_TASK_MAX_WAIT_SECONDS}. Wait up to this many seconds for the job to finish or to need a person, and return as soon as it does. Omit or 0 to read the current state at once.`
+      )
+    });
+    GET_TASK_DESCRIPTION = "Read back a job that run_task created on this server: its status, the agent\u2019s result, its deliverables, and anything waiting for a person. Read-only. status is the state of the whole run, delegated work included: running, waiting_for_person (an approval or a question to answer on the Nodal dashboard; see waitingForPerson), completed, failed or cancelled. result is the agent\u2019s own answer, set once the run is over. Pass waitSeconds to wait for the run to finish or to need a person instead of polling.";
+  }
+});
+
+// ../../packages/mcp-server/src/get-task.ts
+function jobNotFound(jobId) {
+  return new Error(
+    `mcp_job_not_found: no job with id ${jobId} was created by this MCP server's workspace.`
+  );
+}
+async function readMcpRun(db, entityId, jobId) {
+  const [own] = await db.select({ id: agentJobs.id }).from(agentJobs).where(
+    and(eq(agentJobs.id, jobId), eq(agentJobs.entityId, entityId), eq(agentJobs.channel, "mcp"))
+  ).limit(1);
+  if (!own) return null;
+  return readRunState(db, entityId, jobId);
+}
+function isSettled(state) {
+  return state.status !== "running";
+}
+function pause(ms, signal) {
+  return new Promise((resolve6) => {
+    if (signal?.aborted) return resolve6();
+    const done = () => {
+      clearTimeout(timer2);
+      signal?.removeEventListener("abort", done);
+      resolve6();
+    };
+    const timer2 = setTimeout(done, ms);
+    signal?.addEventListener("abort", done, { once: true });
+  });
+}
+async function waitForRun(read, settled, opts) {
+  const now = opts.now ?? Date.now;
+  const deadline = now() + opts.waitMs;
+  for (; ; ) {
+    const state = await read();
+    const left = deadline - now();
+    if (settled(state) || opts.signal?.aborted || left <= 0) return state;
+    await pause(Math.min(opts.pollMs, left), opts.signal);
+  }
+}
+function getTaskReply(jobId, state) {
+  return {
+    jobId,
+    status: state.status,
+    jobStatus: state.headStatus,
+    result: state.result,
+    error: state.error,
+    liveJobs: state.liveJobIds.length,
+    deliverables: state.deliverables,
+    waitingForPerson: state.pendingRequests.map((r) => ({
+      requestId: r.requestId,
+      jobId: r.jobId,
+      kind: r.kind,
+      toolName: r.toolName,
+      about: r.toolInput,
+      requestedAt: r.requestedAt,
+      answerOn: "dashboard"
+    }))
+  };
+}
+var GET_TASK_POLL_MS;
+var init_get_task = __esm({
+  "../../packages/mcp-server/src/get-task.ts"() {
+    "use strict";
+    init_src4();
+    GET_TASK_POLL_MS = 1e3;
   }
 });
 
@@ -44295,7 +44781,7 @@ async function buildNodalMcpServer(opts) {
               text: JSON.stringify({
                 jobId: job?.id,
                 status: "pending",
-                note: "The job runs asynchronously under the agent\u2019s own rules; results land on the Runs page."
+                note: "The job runs asynchronously under the agent\u2019s own rules. Call get_task with this jobId to get its result."
               })
             }
           ]
@@ -44313,6 +44799,43 @@ async function buildNodalMcpServer(opts) {
       }
     }
   );
+  server.registerTool(
+    "get_task",
+    {
+      description: GET_TASK_DESCRIPTION,
+      inputSchema: getTaskInputSchema.shape,
+      annotations: { readOnlyHint: true }
+    },
+    async (args, extra) => {
+      try {
+        const { jobId, waitSeconds } = getTaskInputSchema.parse(args);
+        await assertMcpEnabled(opts.db, entityId);
+        const read = async () => {
+          const state2 = await readMcpRun(opts.db, entityId, jobId);
+          if (state2 === null) throw jobNotFound(jobId);
+          return state2;
+        };
+        const state = await waitForRun(read, isSettled, {
+          waitMs: (waitSeconds ?? 0) * 1e3,
+          pollMs: GET_TASK_POLL_MS,
+          signal: extra.signal
+        });
+        return {
+          content: [{ type: "text", text: JSON.stringify(getTaskReply(jobId, state)) }]
+        };
+      } catch (err) {
+        return {
+          isError: true,
+          content: [
+            {
+              type: "text",
+              text: err instanceof Error ? err.message : String(err)
+            }
+          ]
+        };
+      }
+    }
+  );
   return server;
 }
 async function startNodalMcpServer(opts) {
@@ -44334,6 +44857,7 @@ var init_server3 = __esm({
     init_src4();
     init_src2();
     init_tools();
+    init_get_task();
     DEFAULT_MAX_JOBS_IN_FLIGHT = MCP_MAX_JOBS_IN_FLIGHT;
     EN_COURS = ["pending", "processing", "awaiting_approval", "awaiting_delegation"];
   }