@bazaar.ai/mcp-human-agents 0.1.0

package/dist/mcp-server/src/http-wrapper.js

@@ -0,0 +1,85 @@
+"use strict";
+/**
+ * Quick HTTP wrapper around the MCP tools for testing.
+ * Exposes summon_human, dismiss_human, list_humans, message_human as REST endpoints.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = __importDefault(require("express"));
+const env_js_1 = require("./config/env.js");
+const gig_store_js_1 = require("./state/gig-store.js");
+const persistence_js_1 = require("./state/persistence.js");
+const mock_client_js_1 = require("./platform-client/mock-client.js");
+const client_js_1 = require("./platform-client/client.js");
+const index_js_1 = require("./tools/index.js");
+const env = (0, env_js_1.getEnv)();
+const gigStore = new gig_store_js_1.GigStore();
+const persistence = new persistence_js_1.StatePersistence(env.STATE_FILE_PATH);
+const platformClient = env.USE_MOCK_PLATFORM
+    ? new mock_client_js_1.MockPlatformClient()
+    : new client_js_1.HttpPlatformClient(env.PLATFORM_API_URL, env.PLATFORM_API_KEY);
+const deps = { platformClient, gigStore };
+const app = (0, express_1.default)();
+app.use(express_1.default.json());
+app.get("/health", (_req, res) => {
+    res.json({ status: "ok", service: "human-agents-http", gigs: gigStore.list().length });
+});
+app.post("/summon", async (req, res) => {
+    try {
+        const result = await (0, index_js_1.summonHuman)(req.body, deps);
+        await persistence.save(gigStore);
+        res.json(result);
+    }
+    catch (err) {
+        res.status(500).json({ error: err.message });
+    }
+});
+app.post("/dismiss", async (req, res) => {
+    try {
+        const result = await (0, index_js_1.dismissHuman)(req.body, deps);
+        await persistence.save(gigStore);
+        res.json(result);
+    }
+    catch (err) {
+        res.status(500).json({ error: err.message });
+    }
+});
+app.get("/list", async (_req, res) => {
+    try {
+        const result = await (0, index_js_1.listHumans)(gigStore);
+        res.json(result);
+    }
+    catch (err) {
+        res.status(500).json({ error: err.message });
+    }
+});
+app.post("/message", async (req, res) => {
+    try {
+        const result = await (0, index_js_1.messageHuman)(req.body, gigStore);
+        res.json(result);
+    }
+    catch (err) {
+        res.status(500).json({ error: err.message });
+    }
+});
+const PORT = parseInt(process.env.HTTP_PORT ?? "9999", 10);
+async function start() {
+    await persistence.load(gigStore);
+    app.listen(PORT, () => {
+        console.log(`Human-agents HTTP wrapper on port ${PORT}`);
+        console.log(`  Mock platform: ${env.USE_MOCK_PLATFORM}`);
+        console.log(`  VM IP: ${env.VM_EXTERNAL_IP}`);
+        console.log(`\nEndpoints:`);
+        console.log(`  POST /summon   — summon a contractor`);
+        console.log(`  POST /dismiss  — dismiss a contractor`);
+        console.log(`  GET  /list     — list active contractors`);
+        console.log(`  POST /message  — message a contractor`);
+    });
+}
+start().catch((err) => {
+    console.error("Failed to start:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=http-wrapper.js.map

package/dist/mcp-server/src/http-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-wrapper.js","sourceRoot":"","sources":["../../../src/http-wrapper.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;AAEH,sDAA8B;AAC9B,4CAAyC;AACzC,uDAAgD;AAChD,2DAA0D;AAC1D,qEAAsE;AACtE,2DAAiE;AAEjE,+CAK0B;AAE1B,MAAM,GAAG,GAAG,IAAA,eAAM,GAAE,CAAC;AACrB,MAAM,QAAQ,GAAG,IAAI,uBAAQ,EAAE,CAAC;AAChC,MAAM,WAAW,GAAG,IAAI,iCAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AAE9D,MAAM,cAAc,GAAmB,GAAG,CAAC,iBAAiB;IAC1D,CAAC,CAAC,IAAI,mCAAkB,EAAE;IAC1B,CAAC,CAAC,IAAI,8BAAkB,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAEvE,MAAM,IAAI,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AAE1C,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;AACtB,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAExB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;AACzF,CAAC,CAAC,CAAC;AAEH,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAY,EAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAU,EAAC,QAAQ,CAAC,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAY,EAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;AAE3D,KAAK,UAAU,KAAK;IAClB,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACpB,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACpB,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/mcp-server/src/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp-server/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":""}

package/dist/mcp-server/src/index.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const server_js_1 = require("./server.js");
+const logger_js_1 = require("./utils/logger.js");
+async function main() {
+    logger_js_1.logger.info("Starting human-agents MCP server");
+    const server = await (0, server_js_1.createServer)();
+    const transport = new stdio_js_1.StdioServerTransport();
+    await server.connect(transport);
+    logger_js_1.logger.info("MCP server running on stdio transport");
+    // Handle graceful shutdown
+    process.on("SIGINT", async () => {
+        logger_js_1.logger.info("Received SIGINT, shutting down");
+        await server.close();
+        process.exit(0);
+    });
+    process.on("SIGTERM", async () => {
+        logger_js_1.logger.info("Received SIGTERM, shutting down");
+        await server.close();
+        process.exit(0);
+    });
+}
+main().catch((error) => {
+    logger_js_1.logger.error("Fatal error", { error: String(error) });
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/mcp-server/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":";;AAAA,wEAAiF;AACjF,2CAA2C;AAC3C,iDAA2C;AAE3C,KAAK,UAAU,IAAI;IACjB,kBAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAY,GAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAE7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,kBAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAErD,2BAA2B;IAC3B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC9B,kBAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC/B,kBAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,kBAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/mcp-server/src/platform-client/client.d.ts

@@ -0,0 +1,17 @@
+import type { CreateGigRequest, CreateGigResponse, GigStatusResponse, CompleteGigRequest, CompleteGigResponse } from "./types.js";
+export interface PlatformClient {
+    createGig(request: CreateGigRequest): Promise<CreateGigResponse>;
+    getGigStatus(gigId: string): Promise<GigStatusResponse>;
+    markReady(gigId: string, sshCommand: string): Promise<void>;
+    completeGig(request: CompleteGigRequest): Promise<CompleteGigResponse>;
+}
+export declare class HttpPlatformClient implements PlatformClient {
+    private http;
+    constructor(baseUrl: string, apiKey: string);
+    createGig(request: CreateGigRequest): Promise<CreateGigResponse>;
+    getGigStatus(gigId: string): Promise<GigStatusResponse>;
+    markReady(gigId: string, sshCommand: string): Promise<void>;
+    completeGig(request: CompleteGigRequest): Promise<CompleteGigResponse>;
+    private wrapError;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/mcp-server/src/platform-client/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/platform-client/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjE,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxD,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACxE;AAED,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,IAAI,CAAgB;gBAEhB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAWrC,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAahE,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAWvD,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS3D,WAAW,CACf,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,mBAAmB,CAAC;IAgB/B,OAAO,CAAC,SAAS;CASlB"}

package/dist/mcp-server/src/platform-client/client.js

@@ -0,0 +1,68 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpPlatformClient = void 0;
+const axios_1 = __importDefault(require("axios"));
+const errors_js_1 = require("../utils/errors.js");
+const logger_js_1 = require("../utils/logger.js");
+class HttpPlatformClient {
+    http;
+    constructor(baseUrl, apiKey) {
+        this.http = axios_1.default.create({
+            baseURL: baseUrl,
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                "Content-Type": "application/json",
+            },
+            timeout: 10_000,
+        });
+    }
+    async createGig(request) {
+        try {
+            const { data } = await this.http.post("/gigs", request);
+            logger_js_1.logger.info("Gig created on platform", { gigId: data.gigId });
+            return data;
+        }
+        catch (error) {
+            throw this.wrapError("Failed to create gig", error);
+        }
+    }
+    async getGigStatus(gigId) {
+        try {
+            const { data } = await this.http.get(`/gigs/${gigId}/status`);
+            return data;
+        }
+        catch (error) {
+            throw this.wrapError(`Failed to get gig status: ${gigId}`, error);
+        }
+    }
+    async markReady(gigId, sshCommand) {
+        try {
+            await this.http.post(`/gigs/${gigId}/ready`, { sshCommand });
+            logger_js_1.logger.info("Gig marked as ready", { gigId });
+        }
+        catch (error) {
+            throw this.wrapError(`Failed to mark gig ready: ${gigId}`, error);
+        }
+    }
+    async completeGig(request) {
+        try {
+            const { data } = await this.http.post(`/gigs/${request.gigId}/complete`, request);
+            logger_js_1.logger.info("Gig completed on platform", { gigId: request.gigId });
+            return data;
+        }
+        catch (error) {
+            throw this.wrapError(`Failed to complete gig: ${request.gigId}`, error);
+        }
+    }
+    wrapError(message, error) {
+        if (axios_1.default.isAxiosError(error)) {
+            return new errors_js_1.PlatformApiError(`${message}: ${error.message}`, error.response?.status);
+        }
+        return new errors_js_1.PlatformApiError(message);
+    }
+}
+exports.HttpPlatformClient = HttpPlatformClient;
+//# sourceMappingURL=client.js.map

package/dist/mcp-server/src/platform-client/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../../src/platform-client/client.ts"],"names":[],"mappings":";;;;;;AAAA,kDAAkD;AAClD,kDAAsD;AACtD,kDAA4C;AAgB5C,MAAa,kBAAkB;IACrB,IAAI,CAAgB;IAE5B,YAAY,OAAe,EAAE,MAAc;QACzC,IAAI,CAAC,IAAI,GAAG,eAAK,CAAC,MAAM,CAAC;YACvB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;YACD,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAyB;QACvC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,OAAO,EACP,OAAO,CACR,CAAC;YACF,kBAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAClC,SAAS,KAAK,SAAS,CACxB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,6BAA6B,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,UAAkB;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7D,kBAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,6BAA6B,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CACf,OAA2B;QAE3B,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,SAAS,OAAO,CAAC,KAAK,WAAW,EACjC,OAAO,CACR,CAAC;YACF,kBAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAClB,2BAA2B,OAAO,CAAC,KAAK,EAAE,EAC1C,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,OAAe,EAAE,KAAc;QAC/C,IAAI,eAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,4BAAgB,CACzB,GAAG,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,EAC9B,KAAK,CAAC,QAAQ,EAAE,MAAM,CACvB,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,4BAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;CACF;AA1ED,gDA0EC"}

package/dist/mcp-server/src/platform-client/index.d.ts

@@ -0,0 +1,5 @@
+export { type PlatformClient, HttpPlatformClient } from "./client.js";
+export { MockPlatformClient } from "./mock-client.js";
+export { pollForAssignment } from "./polling.js";
+export type * from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp-server/src/platform-client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/platform-client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,mBAAmB,YAAY,CAAC"}

package/dist/mcp-server/src/platform-client/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pollForAssignment = exports.MockPlatformClient = exports.HttpPlatformClient = void 0;
+var client_js_1 = require("./client.js");
+Object.defineProperty(exports, "HttpPlatformClient", { enumerable: true, get: function () { return client_js_1.HttpPlatformClient; } });
+var mock_client_js_1 = require("./mock-client.js");
+Object.defineProperty(exports, "MockPlatformClient", { enumerable: true, get: function () { return mock_client_js_1.MockPlatformClient; } });
+var polling_js_1 = require("./polling.js");
+Object.defineProperty(exports, "pollForAssignment", { enumerable: true, get: function () { return polling_js_1.pollForAssignment; } });
+//# sourceMappingURL=index.js.map

package/dist/mcp-server/src/platform-client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/platform-client/index.ts"],"names":[],"mappings":";;;AAAA,yCAAsE;AAAxC,+GAAA,kBAAkB,OAAA;AAChD,mDAAsD;AAA7C,oHAAA,kBAAkB,OAAA;AAC3B,2CAAiD;AAAxC,+GAAA,iBAAiB,OAAA"}

package/dist/mcp-server/src/platform-client/mock-client.d.ts

@@ -0,0 +1,28 @@
+import type { PlatformClient } from "./client.js";
+import type { CreateGigRequest, CreateGigResponse, GigStatusResponse, CompleteGigRequest, CompleteGigResponse } from "./types.js";
+/**
+ * In-memory mock platform client for Phase 1 standalone testing.
+ * A "mock contractor" auto-accepts gigs after a configurable delay.
+ */
+export declare class MockPlatformClient implements PlatformClient {
+    /** Delay in ms before a mock contractor auto-accepts a gig. */
+    private readonly autoAcceptDelayMs;
+    /** Mock contractor info. */
+    private readonly mockContractor;
+    private gigs;
+    private nextId;
+    constructor(
+    /** Delay in ms before a mock contractor auto-accepts a gig. */
+    autoAcceptDelayMs?: number, 
+    /** Mock contractor info. */
+    mockContractor?: {
+        name: string;
+        pubkey: string;
+        rate: number;
+    });
+    createGig(request: CreateGigRequest): Promise<CreateGigResponse>;
+    getGigStatus(gigId: string): Promise<GigStatusResponse>;
+    markReady(gigId: string, sshCommand: string): Promise<void>;
+    completeGig(request: CompleteGigRequest): Promise<CompleteGigResponse>;
+}
+//# sourceMappingURL=mock-client.d.ts.map

package/dist/mcp-server/src/platform-client/mock-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-client.d.ts","sourceRoot":"","sources":["../../../../src/platform-client/mock-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAQpB;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IAKrD,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,4BAA4B;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAPjC,OAAO,CAAC,IAAI,CAA8B;IAC1C,OAAO,CAAC,MAAM,CAAK;;IAGjB,+DAA+D;IAC9C,iBAAiB,SAAQ;IAC1C,4BAA4B;IACX,cAAc;;;;KAK9B;IAGG,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAsBhE,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAevD,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3D,WAAW,CACf,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,mBAAmB,CAAC;CAQhC"}

package/dist/mcp-server/src/platform-client/mock-client.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MockPlatformClient = void 0;
+const logger_js_1 = require("../utils/logger.js");
+/**
+ * In-memory mock platform client for Phase 1 standalone testing.
+ * A "mock contractor" auto-accepts gigs after a configurable delay.
+ */
+class MockPlatformClient {
+    autoAcceptDelayMs;
+    mockContractor;
+    gigs = new Map();
+    nextId = 1;
+    constructor(
+    /** Delay in ms before a mock contractor auto-accepts a gig. */
+    autoAcceptDelayMs = 5_000, 
+    /** Mock contractor info. */
+    mockContractor = {
+        name: "mock-contractor",
+        pubkey: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIExampleMockKeyForTesting mock@test",
+        rate: 50,
+    }) {
+        this.autoAcceptDelayMs = autoAcceptDelayMs;
+        this.mockContractor = mockContractor;
+    }
+    async createGig(request) {
+        const id = `mock-gig-${this.nextId++}`;
+        const gig = { id, status: "OPEN" };
+        this.gigs.set(id, gig);
+        // Auto-accept after delay
+        setTimeout(() => {
+            const g = this.gigs.get(id);
+            if (g && g.status === "OPEN") {
+                g.status = "ASSIGNED";
+                g.assignedAt = Date.now();
+                logger_js_1.logger.info("[MOCK] Contractor auto-accepted gig", { gigId: id });
+            }
+        }, this.autoAcceptDelayMs);
+        logger_js_1.logger.info("[MOCK] Gig created", {
+            gigId: id,
+            reason: request.reason,
+        });
+        return { gigId: id, status: "OPEN" };
+    }
+    async getGigStatus(gigId) {
+        const gig = this.gigs.get(gigId);
+        if (!gig) {
+            return { gigId, status: "CANCELLED" };
+        }
+        return {
+            gigId,
+            status: gig.status,
+            contractor: gig.status === "ASSIGNED" || gig.status === "IN_PROGRESS"
+                ? this.mockContractor
+                : undefined,
+        };
+    }
+    async markReady(gigId, sshCommand) {
+        const gig = this.gigs.get(gigId);
+        if (gig) {
+            gig.status = "IN_PROGRESS";
+            logger_js_1.logger.info("[MOCK] Gig marked ready", { gigId, sshCommand });
+        }
+    }
+    async completeGig(request) {
+        const gig = this.gigs.get(request.gigId);
+        if (gig) {
+            gig.status = "COMPLETED";
+        }
+        logger_js_1.logger.info("[MOCK] Gig completed", { gigId: request.gigId });
+        return { gigId: request.gigId, status: "COMPLETED" };
+    }
+}
+exports.MockPlatformClient = MockPlatformClient;
+//# sourceMappingURL=mock-client.js.map

package/dist/mcp-server/src/platform-client/mock-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-client.js","sourceRoot":"","sources":["../../../../src/platform-client/mock-client.ts"],"names":[],"mappings":";;;AAAA,kDAA4C;AAgB5C;;;GAGG;AACH,MAAa,kBAAkB;IAMV;IAEA;IAPX,IAAI,GAAG,IAAI,GAAG,EAAmB,CAAC;IAClC,MAAM,GAAG,CAAC,CAAC;IAEnB;IACE,+DAA+D;IAC9C,oBAAoB,KAAK;IAC1C,4BAA4B;IACX,iBAAiB;QAChC,IAAI,EAAE,iBAAiB;QACvB,MAAM,EACJ,yEAAyE;QAC3E,IAAI,EAAE,EAAE;KACT;QAPgB,sBAAiB,GAAjB,iBAAiB,CAAQ;QAEzB,mBAAc,GAAd,cAAc,CAK9B;IACA,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,OAAyB;QACvC,MAAM,EAAE,GAAG,YAAY,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAY,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAEvB,0BAA0B;QAC1B,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7B,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;gBACtB,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC1B,kBAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAE3B,kBAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAChC,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACxC,CAAC;QACD,OAAO;YACL,KAAK;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EACR,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa;gBACvD,CAAC,CAAC,IAAI,CAAC,cAAc;gBACrB,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,UAAkB;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC;YAC3B,kBAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CACf,OAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;QAC3B,CAAC;QACD,kBAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACvD,CAAC;CACF;AAvED,gDAuEC"}

package/dist/mcp-server/src/platform-client/polling.d.ts

@@ -0,0 +1,9 @@
+import type { PlatformClient } from "./client.js";
+import type { GigStatusResponse } from "./types.js";
+/**
+ * Poll GET /gigs/{id}/status until a contractor is assigned.
+ * Returns the status response with contractor info.
+ * Throws PlatformApiError if polling times out.
+ */
+export declare function pollForAssignment(client: PlatformClient, gigId: string): Promise<GigStatusResponse>;
+//# sourceMappingURL=polling.d.ts.map

package/dist/mcp-server/src/platform-client/polling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"polling.d.ts","sourceRoot":"","sources":["../../../../src/platform-client/polling.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAKpD;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,CAAC,CAkC5B"}

package/dist/mcp-server/src/platform-client/polling.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pollForAssignment = pollForAssignment;
+const errors_js_1 = require("../utils/errors.js");
+const logger_js_1 = require("../utils/logger.js");
+const env_js_1 = require("../config/env.js");
+/**
+ * Poll GET /gigs/{id}/status until a contractor is assigned.
+ * Returns the status response with contractor info.
+ * Throws PlatformApiError if polling times out.
+ */
+async function pollForAssignment(client, gigId) {
+    const env = (0, env_js_1.getEnv)();
+    const intervalMs = env.POLL_INTERVAL_MS;
+    const timeoutMs = env.POLL_TIMEOUT_MS;
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        const status = await client.getGigStatus(gigId);
+        // Both the real API (Prisma enums) and the mock client return
+        // uppercase values per `human-layer/shared/src/gig.types.ts`.
+        if ((status.status === "ASSIGNED" || status.status === "IN_PROGRESS") &&
+            status.contractor) {
+            logger_js_1.logger.info("Contractor assigned", {
+                gigId,
+                contractorName: status.contractor.name,
+            });
+            return status;
+        }
+        if (status.status === "CANCELLED") {
+            throw new errors_js_1.PlatformApiError(`Gig was cancelled: ${gigId}`);
+        }
+        logger_js_1.logger.debug("Polling for contractor assignment...", { gigId });
+        await sleep(intervalMs);
+    }
+    throw new errors_js_1.PlatformApiError(`Timed out waiting for contractor assignment after ${timeoutMs}ms`);
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=polling.js.map

package/dist/mcp-server/src/platform-client/polling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"polling.js","sourceRoot":"","sources":["../../../../src/platform-client/polling.ts"],"names":[],"mappings":";;AAWA,8CAqCC;AA9CD,kDAAsD;AACtD,kDAA4C;AAC5C,6CAA0C;AAE1C;;;;GAIG;AACI,KAAK,UAAU,iBAAiB,CACrC,MAAsB,EACtB,KAAa;IAEb,MAAM,GAAG,GAAG,IAAA,eAAM,GAAE,CAAC;IACrB,MAAM,UAAU,GAAG,GAAG,CAAC,gBAAgB,CAAC;IACxC,MAAM,SAAS,GAAG,GAAG,CAAC,eAAe,CAAC;IAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAEhD,8DAA8D;QAC9D,8DAA8D;QAC9D,IACE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,CAAC;YACjE,MAAM,CAAC,UAAU,EACjB,CAAC;YACD,kBAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE;gBACjC,KAAK;gBACL,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;aACvC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,4BAAgB,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,kBAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,IAAI,4BAAgB,CACxB,qDAAqD,SAAS,IAAI,CACnE,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/mcp-server/src/platform-client/types.d.ts

@@ -0,0 +1,2 @@
+export type { CreateGigRequest, CreateGigResponse, GigStatusResponse, MarkReadyRequest, CompleteGigRequest, CompleteGigResponse, } from "../../../shared/src/platform-api.types.js";
+//# sourceMappingURL=types.d.ts.map

package/dist/mcp-server/src/platform-client/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/platform-client/types.ts"],"names":[],"mappings":"AACA,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,2CAA2C,CAAC"}

package/dist/mcp-server/src/platform-client/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/mcp-server/src/platform-client/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/platform-client/types.ts"],"names":[],"mappings":""}

package/dist/mcp-server/src/provisioning/authorized-keys.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Write a public key to a user's authorized_keys file.
+ *
+ * Goes through the privileged helpers because the per-contractor home
+ * directory is owned by root immediately after `useradd`. After
+ * writing the file (as root) we chown it to the contractor so sshd
+ * accepts it.
+ */
+export declare function writeAuthorizedKey(username: string, pubkey: string): Promise<void>;
+/**
+ * Remove the authorized_keys file for a user.
+ */
+export declare function removeAuthorizedKey(username: string): Promise<void>;
+//# sourceMappingURL=authorized-keys.d.ts.map

package/dist/mcp-server/src/provisioning/authorized-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-keys.d.ts","sourceRoot":"","sources":["../../../../src/provisioning/authorized-keys.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAazE"}

package/dist/mcp-server/src/provisioning/authorized-keys.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeAuthorizedKey = writeAuthorizedKey;
+exports.removeAuthorizedKey = removeAuthorizedKey;
+const privileged_js_1 = require("./privileged.js");
+const errors_js_1 = require("../utils/errors.js");
+const logger_js_1 = require("../utils/logger.js");
+/**
+ * Write a public key to a user's authorized_keys file.
+ *
+ * Goes through the privileged helpers because the per-contractor home
+ * directory is owned by root immediately after `useradd`. After
+ * writing the file (as root) we chown it to the contractor so sshd
+ * accepts it.
+ */
+async function writeAuthorizedKey(username, pubkey) {
+    const keyPath = `/home/${username}/.ssh/authorized_keys`;
+    try {
+        // Validate pubkey format (basic check)
+        if (!pubkey.startsWith("ssh-") && !pubkey.startsWith("ecdsa-")) {
+            throw new Error(`Invalid public key format: ${pubkey.slice(0, 20)}...`);
+        }
+        await (0, privileged_js_1.writePrivilegedFile)(keyPath, pubkey.trim() + "\n", 0o600);
+        await (0, privileged_js_1.chownPrivileged)(`${username}:${username}`, keyPath);
+        logger_js_1.logger.info("Authorized key written", { user: username });
+    }
+    catch (error) {
+        throw new errors_js_1.ProvisioningError(`Failed to write authorized key for ${username}: ${error}`);
+    }
+}
+/**
+ * Remove the authorized_keys file for a user.
+ */
+async function removeAuthorizedKey(username) {
+    const keyPath = `/home/${username}/.ssh/authorized_keys`;
+    try {
+        await (0, privileged_js_1.writePrivilegedFile)(keyPath, "", 0o600);
+        logger_js_1.logger.info("Authorized key removed", { user: username });
+    }
+    catch (error) {
+        // File might not exist if provisioning was partial
+        logger_js_1.logger.warn("Failed to remove authorized key (may not exist)", {
+            user: username,
+            error: String(error),
+        });
+    }
+}
+//# sourceMappingURL=authorized-keys.js.map

package/dist/mcp-server/src/provisioning/authorized-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-keys.js","sourceRoot":"","sources":["../../../../src/provisioning/authorized-keys.ts"],"names":[],"mappings":";;AAYA,gDAqBC;AAKD,kDAaC;AAnDD,mDAAuE;AACvE,kDAAuD;AACvD,kDAA4C;AAE5C;;;;;;;GAOG;AACI,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,SAAS,QAAQ,uBAAuB,CAAC;IAEzD,IAAI,CAAC;QACH,uCAAuC;QACvC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,IAAA,mCAAmB,EAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC;QAChE,MAAM,IAAA,+BAAe,EAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QAE1D,kBAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,6BAAiB,CACzB,sCAAsC,QAAQ,KAAK,KAAK,EAAE,CAC3D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,MAAM,OAAO,GAAG,SAAS,QAAQ,uBAAuB,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,IAAA,mCAAmB,EAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9C,kBAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,mDAAmD;QACnD,kBAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;YAC7D,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/mcp-server/src/provisioning/cleanup.d.ts

@@ -0,0 +1,19 @@
+export interface CleanupTarget {
+    username: string;
+    tmuxSession: string;
+}
+/**
+ * Aggressive cleanup sequence for dismissing a contractor.
+ * Each step is independent and wrapped in try/catch — partial failures
+ * don't prevent the remaining steps from executing.
+ *
+ * Order matters:
+ * 1. Kill tmux session (with warning if connected)
+ * 2. Kill all user processes
+ * 3. Remove SSH pubkey
+ * 4. Remove ForceCommand from sshd_config
+ * 5. Reload sshd (happens inside removeForceCommand)
+ * 6. Lock the account
+ */
+export declare function cleanupContractor(target: CleanupTarget): Promise<void>;
+//# sourceMappingURL=cleanup.d.ts.map

package/dist/mcp-server/src/provisioning/cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../../../src/provisioning/cleanup.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CA6Ef"}