postfast-mcp 0.8.3 → 0.10.0

package/dist/core/tool-def.d.ts

@@ -1,4 +1,6 @@
+import type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
 import type { ZodRawShape } from 'zod';
+import type { AppOptions } from './app.js';
 import type { BackendPort } from './backend-port.js';
 /** The two deployments a catalog tool can ship in. */
 export type Binding = 'stdio' | 'remote';
@@ -22,32 +24,42 @@ export interface ToolAnnotations {
 export type ResolvedToolAnnotations = ToolAnnotations & {
     title: string;
 };
+/** An icon listed on a tool in tools/list. */
+export interface ToolIcon {
+    src: string;
+    mimeType?: string;
+    sizes?: string[];
+}
 /**
  * One tool as authored in the catalog. `description`/`inputSchema` may be a
  * function of the binding for the few spots where the surfaces genuinely
- * differ (upload-tool references — stdio uploads local files, the remote
- * uploads conversation media/URLs). Everything else is binding-invariant.
- * The functions also receive `gated`: true only on a remote build with the
- * confirm gate on (BuildToolsOptions.confirmGate).
+ * differ: upload-tool references (stdio uploads local files, the remote
+ * uploads conversation media/URLs), and the remote binding's rule that every
+ * post and comment reply waits for the user's yes. Everything else is
+ * binding-invariant.
  */
 export interface ToolDef {
     name: string;
     /** Which binding(s) expose the tool. */
     binding: Binding | 'both';
     title: string;
-    description: string | ((binding: Binding, gated?: boolean) => string);
-    inputSchema: ZodRawShape | ((binding: Binding, gated?: boolean) => ZodRawShape);
+    description: string | ((binding: Binding) => string);
+    inputSchema: ZodRawShape | ((binding: Binding) => ZodRawShape);
     annotations: ToolAnnotations;
-    /** Replaces `annotations` when the confirm gate is on. */
-    gatedAnnotations?: ToolAnnotations;
+    /** Replaces `annotations` on the remote binding. */
+    remoteAnnotations?: ToolAnnotations;
     /** Extra tool metadata, e.g. the ChatGPT file-param marker on upload_media. */
     _meta?: Record<string, unknown>;
     /** False only for tools that are not scoped to a workspace (list_workspaces). */
     workspaceScoped?: boolean;
-    /** The tool exists only when the confirm gate is on. */
-    gatedOnly?: boolean;
-    /** The tool is dropped when the confirm gate is on. */
-    hiddenWhenGated?: boolean;
+    /** The tool signs confirm tokens, so it exists only with BuildToolsOptions.confirmGate. */
+    needsConfirmSecret?: boolean;
+    /** The tool exists only when the host turns the app on (BuildToolsOptions.app). */
+    appOnly?: boolean;
+    /** Icons for tools/list. Only app tools carry them. */
+    icons?: ToolIcon[];
+    /** Turns run()'s data into the call result; toolResult() when absent. */
+    toResult?: (data: unknown) => CallToolResult;
     /**
      * The BackendPort method this tool's run() dispatches to. When set and the
      * port instance lacks the method (an older adapter running a newer catalog),
@@ -59,10 +71,12 @@ export interface ToolDef {
      * Dispatch to the backend. `args` are the validated tool arguments minus
      * `workspaceId`, which is split off by the registrar and passed separately
      * (always undefined on stdio — the pf-api-key is already workspace-scoped).
-     * `ctx.confirmSecret` is set by buildTools() when the confirm gate is on.
+     * `ctx.confirmSecret` is set by buildTools() when the host passes
+     * confirmGate, `ctx.app` when the app is on.
      */
     run: (port: BackendPort, args: Record<string, unknown>, workspaceId?: string, ctx?: {
         confirmSecret?: string;
+        app?: AppOptions;
     }) => Promise<unknown>;
 }
 /** A ToolDef with binding-dependent fields resolved for one concrete binding. */
@@ -73,6 +87,8 @@ export interface ResolvedTool {
     inputSchema: ZodRawShape;
     annotations: ResolvedToolAnnotations;
     _meta?: Record<string, unknown>;
+    icons?: ToolIcon[];
     portMethod?: keyof BackendPort;
     run: ToolDef['run'];
+    toResult?: ToolDef['toResult'];
 }

package/dist/core/tools/accounts.js

@@ -80,8 +80,11 @@ export const accountTools = [
         name: 'generate_connect_link',
         binding: 'both',
         title: 'Generate Connect Link',
-        description: 'Generate a shareable link for external clients to connect their social accounts to the workspace. Can be scoped to specific platforms and return the user to your own app when done.',
-        inputSchema: {
+        description: (binding) => 'Generate a shareable link for external clients to connect their social accounts to the workspace. Can be scoped to specific platforms and return the user to your own app when done.' +
+            (binding === 'remote'
+                ? ' Email the link (sendEmail) only when the user asks you to and gives the address.'
+                : ''),
+        inputSchema: (binding) => ({
             expiryDays: z
                 .number()
                 .int()
@@ -89,7 +92,12 @@ export const accountTools = [
                 .max(30)
                 .default(7)
                 .describe('Link expiry in days (1-30, default 7)'),
-            sendEmail: z.boolean().default(false).describe('Send the link via email'),
+            sendEmail: z
+                .boolean()
+                .default(false)
+                .describe(binding === 'remote'
+                ? 'Send the link via email. Set it only when the user asks you to and gives the address.'
+                : 'Send the link via email'),
             email: z
                 .email()
                 .optional()
@@ -109,7 +117,7 @@ export const accountTools = [
                 .max(128)
                 .optional()
                 .describe('Your own reference for this link, echoed back unchanged on the return URL. Letters, digits and - . _ ~ : @ only.'),
-        },
+        }),
         // destructive: sendEmail delivers a real email that cannot be recalled, and the
         // minted link grants account-connect access until it expires.
         annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },

package/dist/core/tools/accounts.js.map

@@ -1 +1 @@
-{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../../../src/core/tools/accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,MAAM,CAAC,MAAM,YAAY,GAAc;IACrC;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,uiBAAuiB;QACziB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;KAClE;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,sKAAsK;QACxK,WAAW,EAAE;YACX,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;SAC9E;QACD,gEAAgE;QAChE,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAuB,EAAE,WAAW,CAAC;KACtE;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,4KAA4K;QAC9K,WAAW,EAAE;YACX,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SAC5E;QACD,mEAAmE;QACnE,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAC/B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAAuB,EAAE,WAAW,CAAC;KACvE;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EACT,oLAAoL;QACtL,WAAW,EAAE;YACX,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;SACxE;QACD,mEAAmE;QACnE,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAC/B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAuB,EAAE,WAAW,CAAC;KACnE;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,iuBAAiuB;QACnuB,WAAW,EAAE;YACX,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;YACnE,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,iFAAiF,CAAC;YAC9F,EAAE,EAAE,CAAC;iBACF,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,qEAAqE,CAAC;SACnF;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAC/B,IAAI,CAAC,kBAAkB,CAAC,IAAsC,EAAE,WAAW,CAAC;KAC/E;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,yUAAyU;QAC3U,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC;SAC/F;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;QAChF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAe,EAAE,WAAW,CAAC;KACvF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,sLAAsL;QACxL,WAAW,EAAE;YACX,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,EAAE,CAAC;iBACP,OAAO,CAAC,CAAC,CAAC;iBACV,QAAQ,CAAC,uCAAuC,CAAC;YACpD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;YACzE,KAAK,EAAE,CAAC;iBACL,KAAK,EAAE;iBACP,QAAQ,EAAE;iBACV,QAAQ,CAAC,mDAAmD,CAAC;YAChE,SAAS,EAAE,CAAC;iBACT,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;iBACxB,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CACP,gKAAgK,CACjK;YACH,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,GAAG,CAAC,IAAI,CAAC;iBACT,QAAQ,EAAE;iBACV,QAAQ,CACP,mMAAmM,CACpM;YACH,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,kHAAkH,CACnH;SACJ;QACD,gFAAgF;QAChF,8DAA8D;QAC9D,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;QAChF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAkC,EAAE,WAAW,CAAC;KAC5E;CACF,CAAC"}
+{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../../../src/core/tools/accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,MAAM,CAAC,MAAM,YAAY,GAAc;IACrC;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,uiBAAuiB;QACziB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;KAClE;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,sKAAsK;QACxK,WAAW,EAAE;YACX,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;SAC9E;QACD,gEAAgE;QAChE,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAuB,EAAE,WAAW,CAAC;KACtE;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,4KAA4K;QAC9K,WAAW,EAAE;YACX,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SAC5E;QACD,mEAAmE;QACnE,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAC/B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAAuB,EAAE,WAAW,CAAC;KACvE;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EACT,oLAAoL;QACtL,WAAW,EAAE;YACX,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;SACxE;QACD,mEAAmE;QACnE,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAC/B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAuB,EAAE,WAAW,CAAC;KACnE;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,iuBAAiuB;QACnuB,WAAW,EAAE;YACX,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;YACnE,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,iFAAiF,CAAC;YAC9F,EAAE,EAAE,CAAC;iBACF,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,qEAAqE,CAAC;SACnF;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAC/B,IAAI,CAAC,kBAAkB,CAAC,IAAsC,EAAE,WAAW,CAAC;KAC/E;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,yUAAyU;QAC3U,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC;SAC/F;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;QAChF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAe,EAAE,WAAW,CAAC;KACvF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CACvB,sLAAsL;YACtL,CAAC,OAAO,KAAK,QAAQ;gBACnB,CAAC,CAAC,mFAAmF;gBACrF,CAAC,CAAC,EAAE,CAAC;QACT,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzB,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,EAAE,CAAC;iBACP,OAAO,CAAC,CAAC,CAAC;iBACV,QAAQ,CAAC,uCAAuC,CAAC;YACpD,SAAS,EAAE,CAAC;iBACT,OAAO,EAAE;iBACT,OAAO,CAAC,KAAK,CAAC;iBACd,QAAQ,CACP,OAAO,KAAK,QAAQ;gBAClB,CAAC,CAAC,uFAAuF;gBACzF,CAAC,CAAC,yBAAyB,CAC9B;YACH,KAAK,EAAE,CAAC;iBACL,KAAK,EAAE;iBACP,QAAQ,EAAE;iBACV,QAAQ,CAAC,mDAAmD,CAAC;YAChE,SAAS,EAAE,CAAC;iBACT,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;iBACxB,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CACP,gKAAgK,CACjK;YACH,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,GAAG,CAAC,IAAI,CAAC;iBACT,QAAQ,EAAE;iBACV,QAAQ,CACP,mMAAmM,CACpM;YACH,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,kHAAkH,CACnH;SACJ,CAAC;QACF,gFAAgF;QAChF,8DAA8D;QAC9D,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;QAChF,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAkC,EAAE,WAAW,CAAC;KAC5E;CACF,CAAC"}

package/dist/core/tools/app.d.ts

@@ -0,0 +1,7 @@
+import type { ToolDef } from '../tool-def.js';
+/**
+ * The calendar app: a sidebar entrypoint, a conversation-tab entrypoint, the
+ * view's post details and its analytics call. Present only when the host passes
+ * BuildToolsOptions.app; every tool is hidden from the model.
+ */
+export declare const appTools: ToolDef[];

package/dist/core/tools/app.js

@@ -0,0 +1,323 @@
+import { z } from 'zod';
+import { APP_ICON, appToolMeta } from '../app.js';
+const DAY_MS = 24 * 60 * 60 * 1000;
+// The view shows 2 days back to 14 ahead in the viewer's time zone and trims
+// to local days; one extra day each side covers every time zone.
+const WINDOW_BACK_DAYS = 3;
+const WINDOW_AHEAD_DAYS = 15;
+const POSTS_LIMIT = 100;
+const DRAFTS_LIMIT = 20;
+/** Captions are cut here; the view clamps them to three lines. */
+const CAPTION_CHARS = 280;
+/** An opened post shows its full text up to here (Facebook allows about 63,000). */
+const FULL_TEXT_CHARS = 20_000;
+/** Result size ceiling, far below the 150,000-character limit (see fitBudget). */
+const RESULT_BUDGET_CHARS = 100_000;
+/** The switcher's list is a convenience: cap it, and never wait long for it. */
+const MAX_WORKSPACES = 100;
+const WORKSPACE_NAME_CHARS = 120;
+const WORKSPACES_TIMEOUT_MS = 5_000;
+const APP_ACTIONS = [
+    'open_in_postfast',
+    'review_in_chat',
+    'reconnect',
+    'connect_account',
+    'new_post_started',
+];
+/** The posts page tab that lists each status; everything else is on "scheduled". */
+const POSTS_TAB = {
+    DRAFT: 'draft',
+    FAILED: 'failed',
+    PUBLISHED: 'published',
+};
+function postsUrl(app, params) {
+    return `${app.webAppUrl}/dashboard/posts?${new URLSearchParams(params)}`;
+}
+function toAccount(account) {
+    return {
+        id: account.id,
+        platform: account.platform,
+        handle: account.platformUsername || account.displayName || null,
+        connectionStatus: account.connectionStatus,
+        disabledReason: account.disabledReason ?? null,
+        avatarUrl: account.avatarUrl ?? null,
+    };
+}
+/** The text cut to `max` characters, ending in an ellipsis when cut. */
+function shorten(text, max) {
+    const value = text ?? '';
+    return value.length > max
+        ? { text: `${value.slice(0, max - 1).trimEnd()}…`, truncated: true }
+        : { text: value, truncated: false };
+}
+function openUrlFor(app, post, workspaceId) {
+    return postsUrl(app, {
+        tab: POSTS_TAB[post.status] ?? 'scheduled',
+        editPostId: post.id,
+        ...(workspaceId ? { workspaceId } : {}),
+    });
+}
+function toPost(post, app, workspaceId) {
+    const { text, truncated } = shorten(post.content, CAPTION_CHARS);
+    return {
+        ...post,
+        content: text,
+        contentTruncated: truncated,
+        openUrl: openUrlFor(app, post, workspaceId),
+    };
+}
+const overBudget = (view) => JSON.stringify(view).length > RESULT_BUDGET_CHARS;
+/**
+ * Keeps the view under the budget, giving up the least useful data first:
+ * avatars of accounts without a listed post, then every avatar, then posts
+ * from the far end (the latest dated post or the oldest draft) with hasMore set.
+ */
+function fitBudget(view) {
+    if (!overBudget(view))
+        return view;
+    const listed = new Set([...view.posts, ...view.drafts].map((p) => p.socialMediaId));
+    for (const account of view.accounts)
+        if (!listed.has(account.id))
+            account.avatarUrl = null;
+    if (!overBudget(view))
+        return view;
+    for (const account of view.accounts)
+        account.avatarUrl = null;
+    while (overBudget(view) && (view.posts.length || view.drafts.length)) {
+        if (view.posts.length >= view.drafts.length) {
+            view.posts.pop();
+            view.hasMore = true;
+        }
+        else {
+            view.drafts.pop();
+            view.draftsHasMore = true;
+        }
+    }
+    return view;
+}
+/**
+ * The connection's workspaces for the view's switcher, from list_workspaces'
+ * `{ data: [{ id, name, isPersonal }] }`. A failed, slow or unexpected answer
+ * gives [] (no switcher) and never fails the calendar.
+ */
+async function loadWorkspaces(port) {
+    let raw;
+    let timer;
+    try {
+        raw = await Promise.race([
+            port.listWorkspaces(),
+            new Promise((resolve) => {
+                timer = setTimeout(resolve, WORKSPACES_TIMEOUT_MS, undefined);
+            }),
+        ]);
+    }
+    catch {
+        return [];
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    const rows = Array.isArray(raw) ? raw : raw?.data;
+    if (!Array.isArray(rows))
+        return [];
+    const seen = new Set();
+    const list = [];
+    for (const row of rows) {
+        const { id, name, isPersonal } = (row ?? {});
+        if (typeof id !== 'string' || !id || seen.has(id))
+            continue;
+        seen.add(id);
+        const label = typeof name === 'string' ? name.trim() : '';
+        list.push({
+            id,
+            name: shorten(label || 'Untitled workspace', WORKSPACE_NAME_CHARS).text,
+            personal: isPersonal === true,
+        });
+        if (list.length === MAX_WORKSPACES)
+            break;
+    }
+    return list;
+}
+/** Personal first, then by name; the workspace on screen is always in the list. */
+function switcherList(workspaces, current) {
+    if (!workspaces.length)
+        return [];
+    const list = workspaces.some((w) => w.id === current.id)
+        ? workspaces
+        : [...workspaces, { ...current, personal: false }];
+    return list
+        .sort((a, b) => Number(b.personal) - Number(a.personal) ||
+        a.name.localeCompare(b.name, 'en', { sensitivity: 'base' }) ||
+        a.id.localeCompare(b.id))
+        .map(({ id, name }) => ({ id, name }));
+}
+/** Fails loudly on a payload the view could not render, instead of showing an empty calendar. */
+function assertCalendar(calendar) {
+    const ok = calendar &&
+        typeof calendar.workspace?.id === 'string' &&
+        Array.isArray(calendar.accounts) &&
+        Array.isArray(calendar.posts) &&
+        Array.isArray(calendar.drafts);
+    if (!ok)
+        throw new Error('The calendar could not be loaded: unexpected response from PostFast.');
+}
+async function loadCalendar(port, entrypoint, args, workspaceId, app) {
+    if (!app || !port.getAppCalendar) {
+        throw new Error('The PostFast calendar is not available on this connection.');
+    }
+    const now = Date.now();
+    const window = {
+        from: new Date(now - WINDOW_BACK_DAYS * DAY_MS).toISOString(),
+        to: new Date(now + WINDOW_AHEAD_DAYS * DAY_MS).toISOString(),
+    };
+    const [calendar, workspaces] = await Promise.all([
+        port.getAppCalendar({
+            ...window,
+            limit: POSTS_LIMIT,
+            draftsLimit: DRAFTS_LIMIT,
+            entrypoint,
+            refresh: args.refresh === true,
+        }, workspaceId),
+        loadWorkspaces(port),
+    ]);
+    assertCalendar(calendar);
+    const ws = calendar.workspace;
+    return fitBudget({
+        version: 1,
+        entrypoint,
+        generatedAt: new Date(now).toISOString(),
+        window,
+        workspace: { id: ws.id, name: ws.name },
+        workspaces: switcherList(workspaces, { id: ws.id, name: ws.name }),
+        accounts: calendar.accounts.map(toAccount),
+        posts: calendar.posts.map((post) => toPost(post, app, ws.id)),
+        drafts: calendar.drafts.map((post) => toPost(post, app, ws.id)),
+        hasMore: calendar.hasMore === true,
+        draftsHasMore: calendar.draftsHasMore === true,
+        links: {
+            posts: postsUrl(app, { workspaceId: ws.id }),
+            accounts: `${app.webAppUrl}/dashboard/accounts?${new URLSearchParams({ workspaceId: ws.id })}`,
+        },
+    });
+}
+/**
+ * The view gets everything in `_meta`, which stays out of the model's context,
+ * so the signed media URLs never reach it. The text and structuredContent
+ * carry counts only.
+ */
+function calendarResult(data) {
+    const view = data;
+    const counts = {
+        posts: view.posts.length,
+        drafts: view.drafts.length,
+        failed: view.posts.filter((p) => p.status === 'FAILED').length,
+        pendingApproval: [...view.posts, ...view.drafts].filter((p) => p.approvalStatus === 'PENDING_APPROVAL' && p.status !== 'PUBLISHED').length,
+    };
+    return {
+        content: [
+            {
+                type: 'text',
+                text: `Opened the PostFast calendar for ${view.workspace.name}: ${counts.posts} posts from ${view.window.from.slice(0, 10)} to ${view.window.to.slice(0, 10)} and ${counts.drafts} drafts without a date.`,
+            },
+        ],
+        structuredContent: { window: view.window, ...counts, hasMore: view.hasMore },
+        _meta: { 'postfast/calendar': view },
+    };
+}
+async function loadPost(port, args, workspaceId, app) {
+    if (!app || !port.getAppPost) {
+        throw new Error('Post details are not available on this connection.');
+    }
+    const post = await port.getAppPost(args, workspaceId);
+    if (!post || typeof post.id !== 'string' || !Array.isArray(post.mediaItems)) {
+        throw new Error('The post could not be loaded: unexpected response from PostFast.');
+    }
+    const { text, truncated } = shorten(post.content, FULL_TEXT_CHARS);
+    return {
+        ...post,
+        content: text,
+        contentTruncated: truncated,
+        openUrl: openUrlFor(app, post, post.workspaceId),
+    };
+}
+/** Like the calendar: the post goes to the view in `_meta`; the model sees ids only. */
+function postResult(data) {
+    const post = data;
+    return {
+        content: [{ type: 'text', text: `Opened post ${post.id} in the PostFast calendar.` }],
+        structuredContent: { postId: post.id, mediaCount: post.mediaItems.length },
+        _meta: { 'postfast/post': post },
+    };
+}
+const refreshField = z
+    .boolean()
+    .optional()
+    .describe('True when the open calendar reloads its data; omitted when it opens.');
+const calendarTool = (name, title, entrypoint, description) => ({
+    name,
+    binding: 'remote',
+    appOnly: true,
+    title,
+    description,
+    inputSchema: { refresh: refreshField },
+    annotations: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
+    icons: [APP_ICON],
+    _meta: appToolMeta(entrypoint),
+    portMethod: 'getAppCalendar',
+    run: (port, args, workspaceId, ctx) => loadCalendar(port, entrypoint, args, workspaceId, ctx?.app),
+    toResult: calendarResult,
+});
+const READ_ONLY_NOTE = 'Read-only: the calendar never approves, publishes, replies to or deletes anything; those go through the conversation.';
+/**
+ * The calendar app: a sidebar entrypoint, a conversation-tab entrypoint, the
+ * view's post details and its analytics call. Present only when the host passes
+ * BuildToolsOptions.app; every tool is hidden from the model.
+ */
+export const appTools = [
+    calendarTool('open_postfast', 'Content Calendar', 'global', `Opens the PostFast content calendar: posts from the last 2 days through the next 14, grouped by day, drafts without a date, and a filter by account. ${READ_ONLY_NOTE}`),
+    calendarTool('postfast_tab', 'PostFast Calendar', 'thread', `Opens the PostFast calendar in a tab beside this conversation: the same posts, drafts and account filter as the sidebar calendar. ${READ_ONLY_NOTE}`),
+    {
+        name: 'get_calendar_post',
+        binding: 'remote',
+        appOnly: true,
+        title: 'Calendar Post Details',
+        description: 'Called by the PostFast calendar when a post is opened: its full text, first comment and every image or video. Read-only.',
+        inputSchema: {
+            postId: z.uuid().describe('The post to open, from the calendar.'),
+        },
+        annotations: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
+        _meta: appToolMeta(),
+        portMethod: 'getAppPost',
+        run: (port, args, workspaceId, ctx) => loadPost(port, args, workspaceId, ctx?.app),
+        toResult: postResult,
+    },
+    {
+        name: 'record_app_action',
+        binding: 'remote',
+        appOnly: true,
+        title: 'Record Calendar Action',
+        description: 'Called by the PostFast calendar to record which of its buttons was used (open in PostFast, review in chat, reconnect, connect an account, new post), for product analytics. Changes no posts, accounts or settings.',
+        inputSchema: {
+            action: z.enum(APP_ACTIONS).describe('The button that was used.'),
+            entrypoint: z
+                .enum(['global', 'thread'])
+                .optional()
+                .describe('Where the calendar was opened: the sidebar (global) or a conversation tab (thread).'),
+        },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
+        _meta: appToolMeta(),
+        portMethod: 'recordAppAction',
+        run: async (port, args, workspaceId) => {
+            if (!port.recordAppAction)
+                throw new Error('Not available on this connection.');
+            await port.recordAppAction(args, workspaceId);
+            return { recorded: true };
+        },
+    },
+];
+//# sourceMappingURL=app.js.map

package/dist/core/tools/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/core/tools/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAmB,MAAM,WAAW,CAAC;AAenE,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,6EAA6E;AAC7E,iEAAiE;AACjE,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,kEAAkE;AAClE,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,oFAAoF;AACpF,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,kFAAkF;AAClF,MAAM,mBAAmB,GAAG,OAAO,CAAC;AACpC,gFAAgF;AAChF,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC,MAAM,WAAW,GAAG;IAClB,kBAAkB;IAClB,gBAAgB;IAChB,WAAW;IACX,iBAAiB;IACjB,kBAAkB;CACV,CAAC;AAEX,oFAAoF;AACpF,MAAM,SAAS,GAA2B;IACxC,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF,SAAS,QAAQ,CAAC,GAAe,EAAE,MAA8B;IAC/D,OAAO,GAAG,GAAG,CAAC,SAAS,oBAAoB,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,OAA2B;IAC5C,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI;QAC/D,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;QAC9C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;KACrC,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,OAAO,CAAC,IAA+B,EAAE,GAAW;IAC3D,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;IACzB,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG;QACvB,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE;QACpE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,GAAe,EAAE,IAAoC,EAAE,WAAoB;IAC7F,OAAO,QAAQ,CAAC,GAAG,EAAE;QACnB,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW;QAC1C,UAAU,EAAE,IAAI,CAAC,EAAE;QACnB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,IAAqB,EAAE,GAAe,EAAE,WAAmB;IACzE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACjE,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,IAAI;QACb,gBAAgB,EAAE,SAAS;QAC3B,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAqB,EAAE,EAAE,CAC3C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,mBAAmB,CAAC;AAEpD;;;;GAIG;AACH,SAAS,SAAS,CAAC,IAAqB;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACpF,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAC3F,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAC9D,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,IAAiB;IAC7C,IAAI,GAAY,CAAC;IACjB,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,cAAc,EAAE;YACrB,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBACtB,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,qBAAqB,EAAE,SAAS,CAAC,CAAC;YAChE,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,GAA6C,EAAE,IAAI,CAAC;IAC7F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAA6C,EAAE,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAA2D,CAAC;QACvG,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC;YACR,EAAE;YACF,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,IAAI;YACvE,QAAQ,EAAE,UAAU,KAAK,IAAI;SAC9B,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc;YAAE,MAAM;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mFAAmF;AACnF,SAAS,YAAY,CACnB,UAAoD,EACpD,OAAqB;IAErB,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;QACtD,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,OAAO,IAAI;SACR,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAC3B;SACA,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,iGAAiG;AACjG,SAAS,cAAc,CAAC,QAAqB;IAC3C,MAAM,EAAE,GACN,QAAQ;QACR,OAAO,QAAQ,CAAC,SAAS,EAAE,EAAE,KAAK,QAAQ;QAC1C,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAChC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC7B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;AACnG,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAiB,EACjB,UAAyB,EACzB,IAA6B,EAC7B,WAA+B,EAC/B,GAA2B;IAE3B,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,gBAAgB,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;QAC7D,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,iBAAiB,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;KAC7D,CAAC;IACF,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC/C,IAAI,CAAC,cAAc,CACjB;YACE,GAAG,MAAM;YACT,KAAK,EAAE,WAAW;YAClB,WAAW,EAAE,YAAY;YACzB,UAAU;YACV,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI;SAC/B,EACD,WAAW,CACZ;QACD,cAAc,CAAC,IAAI,CAAC;KACrB,CAAC,CAAC;IACH,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC9B,OAAO,SAAS,CAAC;QACf,OAAO,EAAE,CAAC;QACV,UAAU;QACV,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QACxC,MAAM;QACN,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;QACvC,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QAClE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;QAC1C,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,EAAE,QAAQ,CAAC,OAAO,KAAK,IAAI;QAClC,aAAa,EAAE,QAAQ,CAAC,aAAa,KAAK,IAAI;QAC9C,KAAK,EAAE;YACL,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,QAAQ,EAAE,GAAG,GAAG,CAAC,SAAS,uBAAuB,IAAI,eAAe,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE;SAC/F;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAa;IACnC,MAAM,IAAI,GAAG,IAAuB,CAAC;IACrC,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;QACxB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;QAC1B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;QAC9D,eAAe,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,kBAAkB,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAC3E,CAAC,MAAM;KACT,CAAC;IACF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,MAAM,CAAC,MAAM,yBAAyB;aAC3M;SACF;QACD,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;QAC5E,KAAK,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,IAAiB,EACjB,IAA6B,EAC7B,WAA+B,EAC/B,GAA2B;IAE3B,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAA8B,EAAE,WAAW,CAAC,CAAC;IAChF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACnE,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,IAAI;QACb,gBAAgB,EAAE,SAAS;QAC3B,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,SAAS,UAAU,CAAC,IAAa;IAC/B,MAAM,IAAI,GAAG,IAAyB,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,IAAI,CAAC,EAAE,4BAA4B,EAAE,CAAC;QACrF,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;QAC1E,KAAK,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,CAAC;KACnB,OAAO,EAAE;KACT,QAAQ,EAAE;KACV,QAAQ,CAAC,sEAAsE,CAAC,CAAC;AAEpF,MAAM,YAAY,GAAG,CACnB,IAAY,EACZ,KAAa,EACb,UAAyB,EACzB,WAAmB,EACV,EAAE,CAAC,CAAC;IACb,IAAI;IACJ,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,IAAI;IACb,KAAK;IACL,WAAW;IACX,WAAW,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;IACtC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;IACjF,KAAK,EAAE,CAAC,QAAQ,CAAC;IACjB,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC;IAC9B,UAAU,EAAE,gBAAgB;IAC5B,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC;IAClG,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC;AAEH,MAAM,cAAc,GAClB,uHAAuH,CAAC;AAE1H;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAc;IACjC,YAAY,CACV,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,wJAAwJ,cAAc,EAAE,CACzK;IACD,YAAY,CACV,cAAc,EACd,mBAAmB,EACnB,QAAQ,EACR,qIAAqI,cAAc,EAAE,CACtJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,0HAA0H;QAC5H,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;SAClE;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,KAAK,EAAE,WAAW,EAAE;QACpB,UAAU,EAAE,YAAY;QACxB,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC;QAClF,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,qNAAqN;QACvN,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YACjE,UAAU,EAAE,CAAC;iBACV,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;iBAC1B,QAAQ,EAAE;iBACV,QAAQ,CAAC,qFAAqF,CAAC;SACnG;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,KAAK;SACrB;QACD,KAAK,EAAE,WAAW,EAAE;QACpB,UAAU,EAAE,iBAAiB;QAC7B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;YACrC,IAAI,CAAC,IAAI,CAAC,eAAe;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAChF,MAAM,IAAI,CAAC,eAAe,CAAC,IAAgC,EAAE,WAAW,CAAC,CAAC;YAC1E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;KACF;CACF,CAAC"}

package/dist/core/tools/inbox-confirm.d.ts

@@ -1,9 +1,8 @@
 import type { ToolDef } from '../tool-def.js';
 /**
  * Comment replies, Instagram private replies and comment deletions in two
- * steps, for hosts with the confirm gate on (there they replace
- * reply_to_inbox_item, send_inbox_private_reply and set_inbox_item_state
- * DELETE). prepare returns a preview and a signed token and calls nothing.
+ * steps, on the remote binding (where they replace reply_to_inbox_item,
+ * send_inbox_private_reply and set_inbox_item_state DELETE). prepare returns a preview and a signed token and calls nothing.
  * confirm repeats the same values, so the client's approval prompt for the
  * destructive call shows the real reply text, and any change fails the
  * signature. The token is not tied to a user: confirm runs with the caller's

package/dist/core/tools/inbox-confirm.js

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 import { redeem, sign } from '../confirm-token.js';
 const CONFIRM_ACTIONS = ['REPLY', 'PRIVATE_REPLY', 'DELETE'];
-/** The confirm-gate secret, handed to run() by buildTools() when the gate is on. */
+/** The confirm secret, handed to run() by buildTools() when the host passes confirmGate. */
 function secretOf(ctx) {
     if (!ctx?.confirmSecret) {
         throw new Error('The confirm gate is not configured on this server.');
@@ -10,9 +10,8 @@ function secretOf(ctx) {
 }
 /**
  * Comment replies, Instagram private replies and comment deletions in two
- * steps, for hosts with the confirm gate on (there they replace
- * reply_to_inbox_item, send_inbox_private_reply and set_inbox_item_state
- * DELETE). prepare returns a preview and a signed token and calls nothing.
+ * steps, on the remote binding (where they replace reply_to_inbox_item,
+ * send_inbox_private_reply and set_inbox_item_state DELETE). prepare returns a preview and a signed token and calls nothing.
  * confirm repeats the same values, so the client's approval prompt for the
  * destructive call shows the real reply text, and any change fails the
  * signature. The token is not tied to a user: confirm runs with the caller's
@@ -22,7 +21,7 @@ export const inboxConfirmTools = [
     {
         name: 'prepare_inbox_action',
         binding: 'remote',
-        gatedOnly: true,
+        needsConfirmSecret: true,
         title: 'Prepare Comment Reply or Deletion',
         description: "Prepare a reply to a comment, an Instagram private reply, or a comment deletion WITHOUT doing it. REPLY posts publicly under the comment; PRIVATE_REPLY sends an Instagram private reply that arrives as a direct message (one per comment, within 7 days; check the item's canPrivateReply); DELETE removes the comment on the platform permanently (not supported on Threads). Before a reply, check the conversation's canReply and maxReplyLength. Returns a preview and a confirmToken. Then show the user which comment it is (its author and text) and exactly what will happen, and wait for their yes in the conversation before calling confirm_inbox_action, even if they already told you what to write. Nothing reaches the platform in this step.",
         inputSchema: {
@@ -62,7 +61,7 @@ export const inboxConfirmTools = [
     {
         name: 'confirm_inbox_action',
         binding: 'remote',
-        gatedOnly: true,
+        needsConfirmSecret: true,
         title: 'Confirm Comment Reply or Deletion',
         description: 'Carry out a reply or deletion prepared with prepare_inbox_action. Pass its confirmToken with the same itemId, action and text (and workspaceId, if you used one); anything different is rejected. Call it only after the user has seen the preview and said yes in the conversation. Replies on Threads cannot be removed through PostFast, private replies cannot be unsent, and deletions cannot be undone. A token expires 15 minutes after it was prepared and works once. Failures return the underlying inbox.* codes (for example replyTooLong, privateReplyAlreadySent, deleteNotSupported).',
         inputSchema: {

package/dist/core/tools/inbox-confirm.js.map

@@ -1 +1 @@
-{"version":3,"file":"inbox-confirm.js","sourceRoot":"","sources":["../../../src/core/tools/inbox-confirm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAsB,MAAM,qBAAqB,CAAC;AAGvE,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAU,CAAC;AAEtE,oFAAoF;AACpF,SAAS,QAAQ,CAAC,GAAgC;IAChD,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC,aAAa,CAAC;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAc;IAC1C;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,iuBAAiuB;QACnuB,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;YACxE,MAAM,EAAE,CAAC;iBACN,IAAI,CAAC,eAAe,CAAC;iBACrB,QAAQ,CACP,yFAAyF,CAC1F;YACH,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,oEAAoE,CAAC;SAClF;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,UAAU,EAAE,kBAAkB;QAC9B,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAuB,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAgB,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,IAA2B,CAAC;YACjF,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,IAAI,CACtC,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EACzC,QAAQ,CAAC,GAAG,CAAC,CACd,CAAC;YACF,OAAO;gBACL,OAAO,EAAE;oBACP,MAAM;oBACN,MAAM;oBACN,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;oBACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;iBACtD;gBACD,YAAY;gBACZ,SAAS;gBACT,IAAI,EAAE,wUAAwU;aAC/U,CAAC;QACJ,CAAC;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,skBAAskB;QACxkB,WAAW,EAAE;YACX,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YACtF,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACpE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SACvF;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;QACD,UAAU,EAAE,kBAAkB;QAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAuB,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAgB,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,IAA2B,CAAC;YACjF,kFAAkF;YAClF,MAAM,OAAO,GAAG,MAAM,CACpB,IAAI,CAAC,YAAsB,EAC3B,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EACzC,QAAQ,CAAC,GAAG,CAAC,CACd,CAAC;YACF,IAAI,CAAC;gBACH,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;oBACvB,OAAO,MAAM,IAAI,CAAC,gBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAc,EAAE,EAAE,WAAW,CAAC,CAAC;gBACrF,CAAC;gBACD,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;oBAC/B,OAAO,MAAM,IAAI,CAAC,qBAAsB,CACtC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAc,EAAE,EAChC,WAAW,CACZ,CAAC;gBACJ,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,iBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,WAAW,CAAC,CAAC;YAClF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,CAAC;gBACV,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF;CACF,CAAC"}
+{"version":3,"file":"inbox-confirm.js","sourceRoot":"","sources":["../../../src/core/tools/inbox-confirm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAsB,MAAM,qBAAqB,CAAC;AAGvE,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAU,CAAC;AAEtE,4FAA4F;AAC5F,SAAS,QAAQ,CAAC,GAAgC;IAChD,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC,aAAa,CAAC;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAc;IAC1C;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,QAAQ;QACjB,kBAAkB,EAAE,IAAI;QACxB,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,iuBAAiuB;QACnuB,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;YACxE,MAAM,EAAE,CAAC;iBACN,IAAI,CAAC,eAAe,CAAC;iBACrB,QAAQ,CACP,yFAAyF,CAC1F;YACH,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,oEAAoE,CAAC;SAClF;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;QACjF,UAAU,EAAE,kBAAkB;QAC9B,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAuB,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAgB,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,IAA2B,CAAC;YACjF,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,IAAI,CACtC,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EACzC,QAAQ,CAAC,GAAG,CAAC,CACd,CAAC;YACF,OAAO;gBACL,OAAO,EAAE;oBACP,MAAM;oBACN,MAAM;oBACN,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;oBACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;iBACtD;gBACD,YAAY;gBACZ,SAAS;gBACT,IAAI,EAAE,wUAAwU;aAC/U,CAAC;QACJ,CAAC;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,QAAQ;QACjB,kBAAkB,EAAE,IAAI;QACxB,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,skBAAskB;QACxkB,WAAW,EAAE;YACX,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YACtF,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACpE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SACvF;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;QACD,UAAU,EAAE,kBAAkB;QAC9B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAuB,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAgB,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,IAA2B,CAAC;YACjF,kFAAkF;YAClF,MAAM,OAAO,GAAG,MAAM,CACpB,IAAI,CAAC,YAAsB,EAC3B,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EACzC,QAAQ,CAAC,GAAG,CAAC,CACd,CAAC;YACF,IAAI,CAAC;gBACH,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;oBACvB,OAAO,MAAM,IAAI,CAAC,gBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAc,EAAE,EAAE,WAAW,CAAC,CAAC;gBACrF,CAAC;gBACD,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;oBAC/B,OAAO,MAAM,IAAI,CAAC,qBAAsB,CACtC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAc,EAAE,EAChC,WAAW,CACZ,CAAC;gBACJ,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,iBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,WAAW,CAAC,CAAC;YAClF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,CAAC;gBACV,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF;CACF,CAAC"}

package/dist/core/tools/inbox.js

@@ -63,8 +63,8 @@ export const inboxTools = [
         name: 'list_inbox_items',
         binding: 'both',
         title: 'List Inbox Items',
-        description: (_binding, gated) => 'List the items of one inbox conversation — the comments and the replies sent to them — oldest first by default (order=DESC for newest first). Items carry direction (INBOUND | OUTBOUND), state (VISIBLE | HIDDEN | DELETED), author info, and on Instagram comments canPrivateReply (eligibility for ' +
-            (gated ? 'a PRIVATE_REPLY through prepare_inbox_action' : 'send_inbox_private_reply') +
+        description: (binding) => 'List the items of one inbox conversation — the comments and the replies sent to them — oldest first by default (order=DESC for newest first). Items carry direction (INBOUND | OUTBOUND), state (VISIBLE | HIDDEN | DELETED), author info, and on Instagram comments canPrivateReply (eligibility for ' +
+            (binding === 'remote' ? 'a PRIVATE_REPLY through prepare_inbox_action' : 'send_inbox_private_reply') +
             '). Replies sent from PostFast appear exactly once — no duplicates when the platform reports them back.',
         inputSchema: {
             conversationId: z
@@ -93,7 +93,8 @@ export const inboxTools = [
     },
     {
         name: 'reply_to_inbox_item',
-        binding: 'both',
+        // stdio only: the remote binding replies through prepare/confirm_inbox_action.
+        binding: 'stdio',
         title: 'Reply to Inbox Comment',
         description: "Reply publicly UNDER a specific comment — pass the comment item's id (from list_inbox_items), not the conversation id. BEFORE replying, check the conversation's canReply and maxReplyLength and stay within them; the caps are per platform (TikTok 1,200, Instagram 2,200, Facebook 8,000, Threads 500 characters) but the server-computed fields are authoritative — never assume. Failures return inbox.* codes (e.g. replyTooLong, replyNotSupported, rateLimited).",
         inputSchema: {
@@ -103,13 +104,13 @@ export const inboxTools = [
         // destructive: publishes a public comment; Threads exposes no delete verb, so a
         // reply there cannot be removed through our API.
         annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
-        hiddenWhenGated: true,
         portMethod: 'replyToInboxItem',
         run: (port, args, workspaceId) => port.replyToInboxItem(args, workspaceId),
     },
     {
         name: 'send_inbox_private_reply',
-        binding: 'both',
+        // stdio only: the remote binding replies through prepare/confirm_inbox_action.
+        binding: 'stdio',
         title: 'Send Instagram Private Reply',
         description: "Instagram only: send ONE private reply to a comment — it arrives as a direct message to the commenter and may land in their Message Requests folder. Allowed once per comment, within 7 days of the comment, up to 1,000 bytes (emoji and non-Latin text count multi-byte — roughly 1,000 characters, less with emoji). Check the item's canPrivateReply first (from list_inbox_items). A second attempt on the same comment fails with inbox.privateReplyAlreadySent; other failures include privateReplyWindowExpired and privateReplyNotSupported.",
         inputSchema: {
@@ -121,7 +122,6 @@ export const inboxTools = [
         // destructive: sends a real direct message with no unsend path, and the
         // once-per-comment guard means the attempt cannot be repeated.
         annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
-        hiddenWhenGated: true,
         portMethod: 'sendInboxPrivateReply',
         run: (port, args, workspaceId) => port.sendInboxPrivateReply(args, workspaceId),
     },
@@ -129,21 +129,21 @@ export const inboxTools = [
         name: 'set_inbox_item_state',
         binding: 'both',
         title: 'Moderate Inbox Comment',
-        description: (_binding, gated) => gated
-            ? 'Hide a comment from the public on the platform (HIDE) or restore it (UNHIDE). Works on TikTok, Instagram, Facebook and Threads and can be reversed. To delete a comment permanently, use prepare_inbox_action with action DELETE. State changes made on the platform itself sync back to the inbox automatically.'
+        description: (binding) => binding === 'remote'
+            ? 'Hide a comment from the public on the platform (HIDE) or restore it (UNHIDE). Works on TikTok, Instagram, Facebook and Threads and can be reversed. To delete a comment permanently, use prepare_inbox_action with action DELETE. State changes made on the platform itself sync back to the inbox automatically. Hide or unhide a comment only when the user asks.'
             : 'Moderate a comment on the platform: HIDE hides it from the public, UNHIDE restores it, DELETE removes the comment on the platform — cannot be undone. HIDE/UNHIDE work on TikTok, Instagram, Facebook, and Threads; DELETE is not supported on Threads (inbox.deleteNotSupported). State changes made on the platform itself sync back to the inbox automatically.',
-        inputSchema: (_binding, gated) => ({
+        inputSchema: (binding) => ({
             itemId: z.uuid().describe('The comment item id (from list_inbox_items)'),
-            action: gated
+            action: binding === 'remote'
                 ? z.enum(['HIDE', 'UNHIDE']).describe('HIDE or UNHIDE')
                 : z
                     .enum(INBOX_ITEM_STATE_ACTIONS)
                     .describe('HIDE, UNHIDE, or DELETE (DELETE is irreversible)'),
         }),
         annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
-        // Gated, DELETE moves to prepare/confirm_inbox_action, leaving only
+        // Remote, DELETE moves to prepare/confirm_inbox_action, leaving only
         // reversible HIDE/UNHIDE here.
-        gatedAnnotations: {
+        remoteAnnotations: {
             readOnlyHint: false,
             destructiveHint: false,
             idempotentHint: true,