+
+ {loadingStatus ? (
+ SkyFi Account Connection
+
+
+ ) : skyfiConnected ? (
+
+
+ ) : (
+
+
+
+
+
+ SkyFi Account Linked
+ {skyfiBudget ? ( +
+ {skyfiBudget}
+
+ ) : (
+ Successfully authenticated and ready to query satellite imagery.
+ )} +
+
+ )}
+ + Connect your SkyFi account to search existing satellite imagery, task new captures, and manage Areas of Interest (AOIs) directly from your chats. +
+ +
+ {!pending && data ? (
+ <>
+
+ {`SkyFi MCP: ${queryType}`}
+
+
+
+
+ ) : (
+
+
+ )}
+
+ )
+}
diff --git a/components/tool-badge.tsx b/components/tool-badge.tsx
index f2a22c10..eb39af41 100644
--- a/components/tool-badge.tsx
+++ b/components/tool-badge.tsx
@@ -1,5 +1,5 @@
import React from 'react'
-import { Search } from 'lucide-react'
+import { Search, Orbit } from 'lucide-react'
import { Badge } from './ui/badge'
type ToolBadgeProps = {
@@ -14,7 +14,8 @@ export const ToolBadge: React.FC
+
+
-
)
}
+
+// Inline helper for classnames
+function cn(...classes: string[]) {
+ return classes.filter(Boolean).join(' ')
+}
From 65afa91c1afad9138f3163fb4644410583286c82 Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
<161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Fri, 24 Jul 2026 04:02:21 +0000
Subject: [PATCH 03/11] feat: Implement secure SkyFi OAuth 2.1 connection and
satellite imagery tools with token rotation and confirmation gates
Co-authored-by: ngoiyaeric <115367894+ngoiyaeric@users.noreply.github.com>
---
lib/agents/tools/skyfi.tsx | 39 ++++++++++++++++++----------
lib/schema/skyfi.tsx | 4 +++
lib/skyfi/provider.ts | 52 +++++++++++++++++++++++++++++++++-----
3 files changed, 75 insertions(+), 20 deletions(-)
diff --git a/lib/agents/tools/skyfi.tsx b/lib/agents/tools/skyfi.tsx
index 840b807f..d7ca2961 100644
--- a/lib/agents/tools/skyfi.tsx
+++ b/lib/agents/tools/skyfi.tsx
@@ -24,13 +24,6 @@ function geoJsonToWkt(geometry: any): string | null {
const coords = geometry.coordinates[0];
const ringStr = coords.map((c: any) => `${c[0]} ${c[1]}`).join(', ');
return `POLYGON((${ringStr}))`;
- } else if (geometry.type === 'LineString') {
- const coords = geometry.coordinates;
- const lineStr = coords.map((c: any) => `${c[0]} ${c[1]}`).join(', ');
- return `LINESTRING(${lineStr})`;
- } else if (geometry.type === 'Point') {
- const coords = geometry.coordinates;
- return `POINT(${coords[0]} ${coords[1]})`;
}
return null;
}
@@ -178,14 +171,23 @@ export const skyfiTool = ({
const latestPolygon = drawnFeatures.find(f => f.type === 'Polygon');
if (latestPolygon) {
resolvedAoiWkt = geoJsonToWkt(latestPolygon.geometry) || undefined;
- } else {
- resolvedAoiWkt = geoJsonToWkt(drawnFeatures[0].geometry) || undefined;
}
+
+ if (!resolvedAoiWkt && (queryType === 'search' || queryType === 'validate_order' || queryType === 'place_order') && !location) {
+ const invalidAoiMessage = "Your drawn area is not a valid closed Polygon. SkyFi requires a closed Polygon to define your Area of Interest. Please use the map drawing tools to draw a closed Polygon.";
+ uiFeedbackStream.update(invalidAoiMessage);
+ uiFeedbackStream.done();
+ uiStream.update(
+
+ {resultText}
+
@@ -52,3 +63,8 @@ export function SkyfiSection({ result }: SkyfiSectionProps) {
+
+ {`SkyFi MCP Error`}
+
+
+
+
+ )
+ }
+
return (
+ {(error as any).message || String(error)}
+
+
{!pending && data ? (
@@ -63,8 +80,3 @@ export function SkyfiSection({ result }: SkyfiSectionProps) {
)
}
-
-// Inline helper for classnames
-function cn(...classes: string[]) {
- return classes.filter(Boolean).join(' ')
-}
diff --git a/drizzle/migrations/0009_add_skyfi_oauth_tokens.sql b/drizzle/migrations/0009_add_skyfi_oauth_tokens.sql
index faf355a4..c3d70384 100644
--- a/drizzle/migrations/0009_add_skyfi_oauth_tokens.sql
+++ b/drizzle/migrations/0009_add_skyfi_oauth_tokens.sql
@@ -8,6 +8,8 @@ CREATE TABLE IF NOT EXISTS "skyfi_oauth_tokens" (
"client_secret" text,
"code_verifier" text,
"state" text,
+ "registration_client_uri" text,
+ "registration_access_token" text,
"created_at" timestamp with time zone DEFAULT now() NOT NULL,
"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
CONSTRAINT "skyfi_oauth_tokens_user_id_unique" UNIQUE("user_id")
diff --git a/lib/actions/skyfi.ts b/lib/actions/skyfi.ts
index a5c4a4d3..2cdf5595 100644
--- a/lib/actions/skyfi.ts
+++ b/lib/actions/skyfi.ts
@@ -8,21 +8,14 @@ import { getCurrentUserIdOnServer } from '@/lib/auth/get-current-user';
import { SkyfiOAuthProvider } from '@/lib/skyfi/provider';
import crypto from 'crypto';
-function generateCodeVerifier(): string {
- return crypto.randomBytes(32).toString('base64url');
-}
-
-function generateCodeChallenge(verifier: string): string {
- return crypto.createHash('sha256').update(verifier).digest('base64url');
-}
-
-function getRedirectUri(): string {
+export async function getRedirectUri(): Promise
-
- )
- })()
- ) : (
-
- {discordAccount.imageUrl ? (
- 
- ) : (
- D
- )}
-
-
-
-
- Connected as {discordAccount.username || 'Discord User'}
-ID: {discordAccount.providerUserId}
-
-
- )}
- - You haven't connected your Discord account yet. Link it now to connect your SaaS profile. -
- -
+
+ )
+ })()
+ ) : (
+
+ {discordAccount.imageUrl ? (
+
+ ) : (
+ D
+ )}
+
+
+
+
+ Connected as {discordAccount.username || 'Discord User'}
+ID: {discordAccount.providerUserId}
+
+
+ )}
+ + You haven't connected your Discord account yet. Link it now to connect your SaaS profile. +
+ +