@aigentyc/mcp 0.1.0

package/dist/tools/tools_crud.js

@@ -0,0 +1,207 @@
+import { z } from "zod";
+import { pid, projectIdArg } from "./helpers.js";
+import { defineTool } from "./types.js";
+const toolType = z.enum([
+    "rest_api",
+    "custom_execute",
+    "hybrid",
+    "data_store",
+    "web_search",
+]);
+// Server accepts the JSON fields opaquely; we mirror that here.
+const createToolSchema = z.object({
+    projectId: projectIdArg,
+    name: z.string().min(1).max(100),
+    displayName: z.string().min(1).max(255),
+    description: z.string().min(1),
+    toolType: toolType.default("rest_api"),
+    inputSchema: z.array(z.record(z.unknown())).default([]),
+    apiConfig: z.record(z.unknown()).optional().nullable(),
+    transformCode: z
+        .string()
+        .optional()
+        .describe("JavaScript code for toolType=custom_execute (runs as the whole tool body) or hybrid (runs on input.apiResult after the REST call). Sandboxed; no Node APIs. Rejected server-side if it contains `process.env`."),
+    dataStoreConfig: z.record(z.unknown()).optional().nullable(),
+    webSearchConfig: z.record(z.unknown()).optional().nullable(),
+    stopWhen: z.number().int().min(0).default(0),
+    searchKbAfter: z.boolean().default(false),
+    timeoutMs: z.number().int().min(100).max(60000).default(5000),
+    uiComponent: z.string().default("JsonDisplay"),
+    customHtml: z.string().optional(),
+    customCss: z.string().optional(),
+    audience: z.array(z.string()).optional(),
+    sampleInput: z.record(z.unknown()).optional(),
+    sampleOutput: z.record(z.unknown()).optional(),
+    category: z.string().default("general"),
+    tags: z.array(z.string()).optional(),
+    componentActions: z.array(z.record(z.unknown())).optional(),
+    jsonRenderSpec: z.record(z.unknown()).optional(),
+    uiRenderMode: z.enum(["legacy", "json"]).default("legacy"),
+    mobileGridCols: z.number().int().min(1).max(12).optional(),
+    desktopGridCols: z.number().int().min(1).max(12).optional(),
+    initialRenderLimit: z.number().int().min(0).max(200).optional(),
+});
+const updateToolSchema = z.object({
+    projectId: projectIdArg,
+    toolId: z.string().min(1),
+    patch: createToolSchema
+        .omit({ projectId: true })
+        .partial()
+        .describe("Any subset of tool fields to update. Sending executeCode or transformCode containing 'process.env' is rejected server-side."),
+});
+export function toolsCrudTools(client) {
+    return [
+        defineTool({
+            name: "tools_list",
+            title: "List custom tools",
+            description: "List every custom tool in the project (rest_api, custom_execute, hybrid, data_store, web_search).",
+            inputSchema: z.object({ projectId: projectIdArg }),
+            handler: async (args) => {
+                const projectId = pid(client, args.projectId);
+                return client.get(`/api/dashboard/${projectId}/tools`);
+            },
+        }),
+        defineTool({
+            name: "tools_get",
+            title: "Get a custom tool",
+            description: "Fetch one custom tool with its full config.",
+            inputSchema: z.object({
+                projectId: projectIdArg,
+                toolId: z.string().min(1),
+            }),
+            handler: async (args) => {
+                const projectId = pid(client, args.projectId);
+                return client.get(`/api/dashboard/${projectId}/tools/${encodeURIComponent(args.toolId)}`);
+            },
+        }),
+        defineTool({
+            name: "tools_create",
+            title: "Create a custom tool",
+            description: "Create a custom tool the chat agent can call. Tool code referencing `process.env` is rejected — put secrets in apiConfig.headers with template placeholders.",
+            inputSchema: createToolSchema,
+            handler: async (args) => {
+                const { projectId: rawPid, ...body } = args;
+                const projectId = pid(client, rawPid);
+                return client.post(`/api/dashboard/${projectId}/tools`, body);
+            },
+        }),
+        defineTool({
+            name: "tools_update",
+            title: "Update a custom tool",
+            description: "Patch selected fields of an existing custom tool.",
+            inputSchema: updateToolSchema,
+            handler: async (args) => {
+                const projectId = pid(client, args.projectId);
+                return client.patch(`/api/dashboard/${projectId}/tools/${encodeURIComponent(args.toolId)}`, args.patch);
+            },
+        }),
+        defineTool({
+            name: "tools_delete",
+            title: "Delete a custom tool",
+            description: "Delete a custom tool. Destructive.",
+            inputSchema: z.object({
+                projectId: projectIdArg,
+                toolId: z.string().min(1),
+                confirm: z.boolean().default(false),
+            }),
+            handler: async (args) => {
+                if (!args.confirm) {
+                    return {
+                        deleted: false,
+                        reason: "Destructive. Re-invoke with confirm=true.",
+                    };
+                }
+                const projectId = pid(client, args.projectId);
+                return client.delete(`/api/dashboard/${projectId}/tools/${encodeURIComponent(args.toolId)}`);
+            },
+        }),
+        defineTool({
+            name: "tools_execute_dry_run",
+            title: "Dry-run a custom tool",
+            description: "Invoke a custom tool in test mode with sample input. Safe for iteration; does not count against usage.",
+            inputSchema: z.object({
+                projectId: projectIdArg,
+                toolId: z.string().min(1),
+                input: z.record(z.unknown()).default({}),
+                dryRun: z.boolean().default(true),
+            }),
+            handler: async (args) => {
+                const projectId = pid(client, args.projectId);
+                return client.post(`/api/dashboard/${projectId}/tools/${encodeURIComponent(args.toolId)}/execute`, { input: args.input, dryRun: args.dryRun });
+            },
+        }),
+        defineTool({
+            name: "flows_list",
+            title: "List tool flows",
+            description: "List multi-step tool flows (orchestrations) in the project.",
+            inputSchema: z.object({ projectId: projectIdArg }),
+            handler: async (args) => {
+                const projectId = pid(client, args.projectId);
+                return client.get(`/api/dashboard/${projectId}/flows`);
+            },
+        }),
+        defineTool({
+            name: "flows_get",
+            title: "Get a flow",
+            description: "Fetch a single tool flow.",
+            inputSchema: z.object({
+                projectId: projectIdArg,
+                flowId: z.string().min(1),
+            }),
+            handler: async (args) => {
+                const projectId = pid(client, args.projectId);
+                return client.get(`/api/dashboard/${projectId}/flows/${encodeURIComponent(args.flowId)}`);
+            },
+        }),
+        defineTool({
+            name: "flows_create",
+            title: "Create a flow",
+            description: "Create a multi-step tool flow.",
+            inputSchema: z.object({
+                projectId: projectIdArg,
+                spec: z
+                    .record(z.unknown())
+                    .describe("Flow spec matching the server's CreateToolFlowInput. Passed through opaquely."),
+            }),
+            handler: async (args) => {
+                const projectId = pid(client, args.projectId);
+                return client.post(`/api/dashboard/${projectId}/flows`, args.spec);
+            },
+        }),
+        defineTool({
+            name: "flows_update",
+            title: "Update a flow",
+            description: "Patch a flow's fields.",
+            inputSchema: z.object({
+                projectId: projectIdArg,
+                flowId: z.string().min(1),
+                patch: z.record(z.unknown()),
+            }),
+            handler: async (args) => {
+                const projectId = pid(client, args.projectId);
+                return client.patch(`/api/dashboard/${projectId}/flows/${encodeURIComponent(args.flowId)}`, args.patch);
+            },
+        }),
+        defineTool({
+            name: "flows_delete",
+            title: "Delete a flow",
+            description: "Delete a flow. Destructive.",
+            inputSchema: z.object({
+                projectId: projectIdArg,
+                flowId: z.string().min(1),
+                confirm: z.boolean().default(false),
+            }),
+            handler: async (args) => {
+                if (!args.confirm) {
+                    return {
+                        deleted: false,
+                        reason: "Destructive. Re-invoke with confirm=true.",
+                    };
+                }
+                const projectId = pid(client, args.projectId);
+                return client.delete(`/api/dashboard/${projectId}/flows/${encodeURIComponent(args.flowId)}`);
+            },
+        }),
+    ];
+}
+//# sourceMappingURL=tools_crud.js.map

package/dist/tools/tools_crud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools_crud.js","sourceRoot":"","sources":["../../src/tools/tools_crud.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,UAAU,EAAgB,MAAM,YAAY,CAAC;AAEtD,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC;IACtB,UAAU;IACV,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,YAAY;CACb,CAAC,CAAC;AAEH,gEAAgE;AAChE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,YAAY;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtD,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,gNAAgN,CACjN;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5D,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC1D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAChE,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,gBAAgB;SACpB,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SACzB,OAAO,EAAE;SACT,QAAQ,CACP,6HAA6H,CAC9H;CACJ,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,MAAuB;IACpD,OAAO;QACL,UAAU,CAAC;YACT,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EACT,mGAAmG;YACrG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;YAClD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,kBAAkB,SAAS,QAAQ,CAAC,CAAC;YACzD,CAAC;SACF,CAAC;QACF,UAAU,CAAC;YACT,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,6CAA6C;YAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;aAC1B,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,MAAM,CAAC,GAAG,CACf,kBAAkB,SAAS,UAAU,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACvE,CAAC;YACJ,CAAC;SACF,CAAC;QACF,UAAU,CAAC;YACT,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EACT,8JAA8J;YAChK,WAAW,EAAE,gBAAgB;YAC7B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;gBAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACtC,OAAO,MAAM,CAAC,IAAI,CAAC,kBAAkB,SAAS,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChE,CAAC;SACF,CAAC;QACF,UAAU,CAAC;YACT,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,mDAAmD;YAChE,WAAW,EAAE,gBAAgB;YAC7B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,MAAM,CAAC,KAAK,CACjB,kBAAkB,SAAS,UAAU,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EACtE,IAAI,CAAC,KAAK,CACX,CAAC;YACJ,CAAC;SACF,CAAC;QACF,UAAU,CAAC;YACT,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,oCAAoC;YACjD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;aACpC,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,2CAA2C;qBACpD,CAAC;gBACJ,CAAC;gBACD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,MAAM,CAAC,MAAM,CAClB,kBAAkB,SAAS,UAAU,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACvE,CAAC;YACJ,CAAC;SACF,CAAC;QACF,UAAU,CAAC;YACT,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EACT,wGAAwG;YAC1G,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,MAAM,CAAC,IAAI,CAChB,kBAAkB,SAAS,UAAU,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAC9E,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAC3C,CAAC;YACJ,CAAC;SACF,CAAC;QACF,UAAU,CAAC;YACT,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,6DAA6D;YAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;YAClD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,kBAAkB,SAAS,QAAQ,CAAC,CAAC;YACzD,CAAC;SACF,CAAC;QACF,UAAU,CAAC;YACT,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,YAAY;YACnB,WAAW,EAAE,2BAA2B;YACxC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;aAC1B,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,MAAM,CAAC,GAAG,CACf,kBAAkB,SAAS,UAAU,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACvE,CAAC;YACJ,CAAC;SACF,CAAC;QACF,UAAU,CAAC;YACT,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,gCAAgC;YAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpB,SAAS,EAAE,YAAY;gBACvB,IAAI,EAAE,CAAC;qBACJ,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;qBACnB,QAAQ,CACP,+EAA+E,CAChF;aACJ,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,kBAAkB,SAAS,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACrE,CAAC;SACF,CAAC;QACF,UAAU,CAAC;YACT,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,wBAAwB;YACrC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7B,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,MAAM,CAAC,KAAK,CACjB,kBAAkB,SAAS,UAAU,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EACtE,IAAI,CAAC,KAAK,CACX,CAAC;YACJ,CAAC;SACF,CAAC;QACF,UAAU,CAAC;YACT,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,6BAA6B;YAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;aACpC,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,2CAA2C;qBACpD,CAAC;gBACJ,CAAC;gBACD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,MAAM,CAAC,MAAM,CAClB,kBAAkB,SAAS,UAAU,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACvE,CAAC;YACJ,CAAC;SACF,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/tools/types.d.ts

@@ -0,0 +1,25 @@
+import type { z } from "zod";
+export interface ToolDef {
+    name: string;
+    title: string;
+    description: string;
+    /**
+     * ZodObject whose `.shape` is passed to `server.registerTool`. The SDK then
+     * wraps the shape + validates incoming args, so `handler` can trust them.
+     */
+    inputSchema: z.ZodObject<z.ZodRawShape>;
+    handler: (args: Record<string, unknown>) => Promise<unknown>;
+}
+/**
+ * Helper to define a tool with proper inference on the handler's `args`
+ * parameter while erasing the input type at the ToolDef boundary. The SDK
+ * validates inputs before calling us, so the cast is safe at runtime.
+ */
+export declare function defineTool<S extends z.ZodObject<z.ZodRawShape>>(def: {
+    name: string;
+    title: string;
+    description: string;
+    inputSchema: S;
+    handler: (args: z.infer<S>) => Promise<unknown>;
+}): ToolDef;
+//# sourceMappingURL=types.d.ts.map

package/dist/tools/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,CAAC,CAAC;IACf,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACjD,GAAG,OAAO,CAQV"}

package/dist/tools/types.js

@@ -0,0 +1,15 @@
+/**
+ * Helper to define a tool with proper inference on the handler's `args`
+ * parameter while erasing the input type at the ToolDef boundary. The SDK
+ * validates inputs before calling us, so the cast is safe at runtime.
+ */
+export function defineTool(def) {
+    return {
+        name: def.name,
+        title: def.title,
+        description: def.description,
+        inputSchema: def.inputSchema,
+        handler: (args) => def.handler(args),
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/tools/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAcA;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAuC,GAMhE;IACC,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAkB,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/llms.txt

@@ -0,0 +1,150 @@
+# @aigentyc/mcp
+
+> Model Context Protocol server for the Aigentyc platform. Lets Claude Code, Cursor, Windsurf, Claude Desktop, and any MCP-compatible agent drive the **content & authoring** side of an Aigentyc project — documents, files, crawling, custom tools, data stores, config, backups, analytics — without clicking through the dashboard. Chat/widget embedding is handled by a separate package, `@aigentyc/chat-sdk`.
+
+## Install
+
+```bash
+npx @aigentyc/mcp login \
+  --api-key tyco_pk_XXXX \
+  --project-id proj_XXXX
+```
+
+`login` verifies the key against `/api/auth/api-keys/verify` and writes `~/.aigentyc/config.json` with `0600` perms. The server refuses to start if perms are wider.
+
+**Dev-only flag**: pass `--allow-insecure` to permit plaintext HTTP against non-loopback hosts. Never use this against production.
+
+## Wire into your agent
+
+### Claude Desktop / Claude Code
+
+`~/Library/Application Support/Claude/claude_desktop_config.json` (macOS):
+
+```json
+{
+  "mcpServers": {
+    "aigentyc": {
+      "command": "npx",
+      "args": ["-y", "@aigentyc/mcp"]
+    }
+  }
+}
+```
+
+### Cursor
+
+Settings → MCP → add server:
+
+```json
+{
+  "aigentyc": {
+    "command": "npx",
+    "args": ["-y", "@aigentyc/mcp"]
+  }
+}
+```
+
+Restart the client. The new tools appear under the `aigentyc` namespace.
+
+## Commands
+
+```
+aigentyc-mcp serve      Start the stdio MCP server (default)
+aigentyc-mcp login      Save + verify an API key profile
+aigentyc-mcp logout     Remove a profile
+aigentyc-mcp doctor     Verify config + transport + clock skew + reachability
+```
+
+## Tools (82 total, 19 domains)
+
+- **documents** — list, get, delete, create_from_text, merge, versions
+- **files** — list, get, upload (path-based), delete, reprocess, versions, bulk_audience
+- **extract** — from_urls (jobified for api-key)
+- **link_sources** — list, get, create, update, delete, list_items, update_item, delete_item
+- **page_questions** — list, set_manual, auto_generate (jobified), delete_page
+- **data_stores** — full CRUD + bulk_upsert + import + export + scan_website (jobified)
+- **tools** (custom-tool CRUD) — list, get, create, update, delete, execute_dry_run
+- **flows** — list, get, create, update, delete
+- **golden_answers** — list, create, update, delete + ai_improve + ai_generate_variations
+- **corrections** — list, create, update_status
+- **personas** — list, upsert, delete
+- **config** — get (secrets redacted for api-key), update (secret writes rejected)
+- **backups** — list, create (jobified), restore (jobified), download, import, delete
+- **analytics** — overview, sessions, session_timeline, comments
+- **branches** — list
+- **search** — kb_search (read-only authoring aid)
+- **jobs** — status, list, wait
+
+## Async job pattern
+
+Long-running ops (backup create/restore, extract, data-store scan, page-questions auto-generate) return `{ jobId, status: "queued" }`. Poll with `jobs_wait`:
+
+```
+extract_from_urls({ urls: [...] })
+  → { jobId: "abc-123", status: "queued" }
+jobs_wait({ jobId: "abc-123" })
+  → blocks until terminal; returns { status: "completed", result: {...} }
+```
+
+Concurrency cap: 3 active jobs per project.
+
+## Security
+
+- **Project-scoped keys**: a key for project A cannot read/write project B (403).
+- **Per-key rate limits**: 300 reads/min, 60 writes/min. 429 with `Retry-After` over the limit.
+- **Secrets**: `config.get` redacts `openaiApiKey` + `customHttpHeaders` to `***` for api-key callers. `config.update` rejects writes to those fields with 403. Backup downloads (single + ZIP) deep-redact secrets.
+- **Custom tool code**: `tools.create` rejects `transformCode` / `executeCode` containing `process.env`. Use `apiConfig.headers` with template placeholders for secrets.
+- **Destructive ops** (`*.delete`, `backups.restore`): require `confirm: true`.
+- **Path uploads**: `files.upload` refuses paths outside `$CWD` / `$HOME`, refuses non-regular files, caps 50MB/file, 500MB/batch.
+- **URL inputs**: `extract.from_urls` + `link_sources.create` reject RFC1918 / loopback / cloud-metadata hosts.
+- **Audit log**: every api-key request is logged server-side (`api_key_audit_log` table) with `keyId`, `projectId`, `route`, `method`, `status`, `latencyMs`, `requestId`. Reads sampled at 10%; writes 100%.
+
+## Recipes
+
+### Add a markdown KB from local files
+
+```
+files_upload({ paths: ["docs/intro.md", "docs/api.md"], indexAsDocuments: true })
+```
+
+The MCP reads each file (text formats only — `.md`, `.txt`, `.json`, `.csv`, `.html`, …), uploads metadata to `uploaded_files`, then chunks + embeds + indexes via `documents/create`.
+
+### Crawl a website + dedupe before adding more docs
+
+```
+1. link_sources_create({ sourceUrl: "https://example.com", sourceType: "website" })
+2. jobs_wait({ jobId: ... }) — wait for crawl to finish
+3. search_kb_search({ query: "billing FAQ" })  // confirm it indexed
+```
+
+### Build a custom tool end-to-end
+
+```
+1. tools_create({
+     name: "submitForm",
+     toolType: "rest_api",
+     apiConfig: { method: "POST", url: "...", body: "name={{name}}" },
+     inputSchema: [{ name: "name", type: "string", required: true }],
+   })
+2. tools_execute_dry_run({ toolId, input: { name: "Test" } })
+   // verify output before exposing to chat
+```
+
+### Update system prompt
+
+```
+config_update({ patch: { systemPrompt: "You are the support agent for ACME..." } })
+```
+
+(Cannot update `openaiApiKey` over api-key — use the dashboard for secrets.)
+
+## Troubleshooting
+
+- **404 on login** — auth-service may be on a different origin in dev. `login` falls back to dashboard ping. Use `--base-url http://localhost:3000` for local Docker.
+- **Tool calls hang** — confirm `aigentyc-mcp doctor` passes. Most failures are wrong base-url, expired key, or clock skew (>60s breaks auth).
+- **Tool created but UI doesn't show it** — fully restart Claude Desktop / Cursor. Server-side caches invalidate on every write; client-side router caches don't.
+- **Empty fields on tool call** — required string fields with `min(1)` get rejected by Zod, prompting the LLM to gather real values from the user. If a tool fires with empty inputs, the field wasn't marked required at creation.
+
+## Versioning
+
+Server (`@aigentyc/mcp` on npm) and platform (`app.aigentyc.com`) version independently. The platform maintains backward compatibility with older MCP releases — endpoints aren't broken without deprecation.

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@aigentyc/mcp",
+  "version": "0.1.0",
+  "description": "Model Context Protocol server for aiGentyc — content & authoring tools for LLM agents",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "aigentyc-mcp": "./dist/cli.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "aigentyc",
+    "rag",
+    "llm",
+    "ai-tools",
+    "claude",
+    "cursor"
+  ],
+  "files": [
+    "dist",
+    "README.md",
+    "AGENTS.md",
+    "llms.txt",
+    "context7.json",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc && node scripts/build-llms-full.mjs",
+    "build:llms-full": "node scripts/build-llms-full.mjs",
+    "dev": "tsx src/cli.ts",
+    "start": "node dist/cli.js",
+    "typecheck": "tsc --noEmit",
+    "smoke": "node scripts/smoke.mjs",
+    "release": "node scripts/release.mjs",
+    "release:dry": "node scripts/release.mjs --dry",
+    "prepublishOnly": "npm run build && npm run smoke"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "tsx": "^4.20.6",
+    "typescript": "^5.9.3"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}