@besales/mcp 0.1.0 → 0.12.0

package/dist/auth/oauth-client.d.ts

@@ -1,32 +1,57 @@
-export declare const DEFAULT_API_BASE_URL = "https://app.besales.ai/api/v2";
+export declare const DEFAULT_API_BASE_URL = "https://core.besales.ai/api/v2";
+export declare const DEFAULT_OAUTH_AUTHORIZE_URL = "https://app.besales.ai/settings/mcp/consent";
 export declare const OAUTH_CALLBACK_HOST = "127.0.0.1";
 export declare const OAUTH_CALLBACK_PATH = "/oauth-callback";
 export declare const OAUTH_SCOPE = "mcp:* mcp:platform-setup";
 export declare const OAUTH_TIMEOUT_MS: number;
+export declare const TOKEN_EXCHANGE_TIMEOUT_MS: number;
 export interface OAuthConnectResult {
     readonly apiKey: string;
     readonly workspaceId: string;
 }
+export interface AuthorizationCodeExchange {
+    readonly code: string;
+    readonly codeVerifier: string;
+}
 export interface OauthClientOptions {
+    readonly oauthAuthorizeUrl?: string;
     readonly apiBaseUrl?: string;
     readonly openUrl?: (url: string) => Promise<unknown> | unknown;
+    readonly exchangeAuthorizationCode?: (input: AuthorizationCodeExchange) => Promise<OAuthConnectResult>;
     readonly timeoutMs?: number;
 }
 export declare function generateCodeVerifier(): string;
 export declare function createCodeChallenge(codeVerifier: string): string;
 export declare function generateState(): string;
 export declare function normalizeApiBaseUrl(apiBaseUrl?: string): string;
+export declare function normalizeOauthAuthorizeUrl(oauthAuthorizeUrl?: string): string;
 export declare function createAuthorizationUrl(input: {
-    readonly apiBaseUrl?: string;
+    readonly oauthAuthorizeUrl?: string;
     readonly state: string;
     readonly redirectUri: string;
     readonly codeChallenge: string;
 }): URL;
 export declare class OauthClient {
+    private readonly oauthAuthorizeUrl;
     private readonly apiBaseUrl;
     private readonly openUrl;
+    private readonly exchange;
     private readonly timeoutMs;
     constructor(options?: OauthClientOptions);
+    /**
+     * Connect flow (OAuth2 PKCE, RFC 7636).
+     *
+     * Открывает consent-страницу с `code_challenge`; после согласия backend
+     * редиректит на loopback callback с одноразовым `code` (а НЕ с api_key — секрет
+     * не попадает в URL/историю/логи). Затем клиент меняет `code` + `code_verifier`
+     * на api_key через POST `/auth/mcp-token`. Защита: loopback `127.0.0.1` +
+     * `state` (CSRF) + PKCE-проверка verifier на backend.
+     */
     connect(): Promise<OAuthConnectResult>;
     private startCallbackServer;
+    /**
+     * Меняет PKCE authorization code на api_key через backend `/auth/mcp-token`.
+     * Запрос неаутентифицирован: доказательство владения — `code` + `code_verifier`.
+     */
+    private defaultExchange;
 }

package/dist/auth/oauth-client.js

@@ -1,12 +1,15 @@
 import { createHash, randomBytes } from 'node:crypto';
 import { createServer } from 'node:http';
+import axios from 'axios';
 import open from 'open';
 import { logger } from '../utils/logger.js';
-export const DEFAULT_API_BASE_URL = 'https://app.besales.ai/api/v2';
+export const DEFAULT_API_BASE_URL = 'https://core.besales.ai/api/v2';
+export const DEFAULT_OAUTH_AUTHORIZE_URL = 'https://app.besales.ai/settings/mcp/consent';
 export const OAUTH_CALLBACK_HOST = '127.0.0.1';
 export const OAUTH_CALLBACK_PATH = '/oauth-callback';
 export const OAUTH_SCOPE = 'mcp:* mcp:platform-setup';
 export const OAUTH_TIMEOUT_MS = 5 * 60 * 1000;
+export const TOKEN_EXCHANGE_TIMEOUT_MS = 30 * 1000;
 export function generateCodeVerifier() {
     return randomBytes(32).toString('base64url');
 }
@@ -19,8 +22,13 @@ export function generateState() {
 export function normalizeApiBaseUrl(apiBaseUrl) {
     return (apiBaseUrl ?? process.env.BESALES_API_BASE_URL ?? DEFAULT_API_BASE_URL).replace(/\/+$/, '');
 }
+export function normalizeOauthAuthorizeUrl(oauthAuthorizeUrl) {
+    return (oauthAuthorizeUrl ??
+        process.env.BESALES_OAUTH_AUTHORIZE_URL ??
+        DEFAULT_OAUTH_AUTHORIZE_URL).replace(/\/+$/, '');
+}
 export function createAuthorizationUrl(input) {
-    const url = new URL(`${normalizeApiBaseUrl(input.apiBaseUrl)}/auth/mcp-connect`);
+    const url = new URL(normalizeOauthAuthorizeUrl(input.oauthAuthorizeUrl));
     url.searchParams.set('state', input.state);
     url.searchParams.set('redirect_uri', input.redirectUri);
     url.searchParams.set('code_challenge', input.codeChallenge);
@@ -29,14 +37,28 @@ export function createAuthorizationUrl(input) {
     return url;
 }
 export class OauthClient {
+    oauthAuthorizeUrl;
     apiBaseUrl;
     openUrl;
+    exchange;
     timeoutMs;
     constructor(options = {}) {
+        this.oauthAuthorizeUrl = normalizeOauthAuthorizeUrl(options.oauthAuthorizeUrl);
         this.apiBaseUrl = normalizeApiBaseUrl(options.apiBaseUrl);
         this.openUrl = options.openUrl ?? ((url) => open(url));
+        this.exchange =
+            options.exchangeAuthorizationCode ?? ((input) => this.defaultExchange(input));
         this.timeoutMs = options.timeoutMs ?? OAUTH_TIMEOUT_MS;
     }
+    /**
+     * Connect flow (OAuth2 PKCE, RFC 7636).
+     *
+     * Открывает consent-страницу с `code_challenge`; после согласия backend
+     * редиректит на loopback callback с одноразовым `code` (а НЕ с api_key — секрет
+     * не попадает в URL/историю/логи). Затем клиент меняет `code` + `code_verifier`
+     * на api_key через POST `/auth/mcp-token`. Защита: loopback `127.0.0.1` +
+     * `state` (CSRF) + PKCE-проверка verifier на backend.
+     */
     async connect() {
         const codeVerifier = generateCodeVerifier();
         const codeChallenge = createCodeChallenge(codeVerifier);
@@ -44,7 +66,7 @@ export class OauthClient {
         const callbackServer = await this.startCallbackServer({ expectedState: state });
         const redirectUri = `http://${OAUTH_CALLBACK_HOST}:${callbackServer.port}${OAUTH_CALLBACK_PATH}`;
         const authorizationUrl = createAuthorizationUrl({
-            apiBaseUrl: this.apiBaseUrl,
+            oauthAuthorizeUrl: this.oauthAuthorizeUrl,
             state,
             redirectUri,
             codeChallenge,
@@ -53,18 +75,22 @@ export class OauthClient {
         callbackResult.catch(() => undefined);
         try {
             await this.openUrl(authorizationUrl.toString());
-            return await callbackResult;
         }
         catch (error) {
+            const cause = error instanceof Error ? error : new Error(String(error));
+            callbackServer.abort(cause);
             await callbackServer.close();
-            throw error;
+            throw cause;
         }
+        const { code } = await callbackResult;
+        return this.exchange({ code, codeVerifier });
     }
     async startCallbackServer(input) {
         const server = createServer();
         let settled = false;
         let timeout;
         let closePromise = null;
+        let settleRef = () => undefined;
         const close = async () => {
             if (closePromise) {
                 return closePromise;
@@ -97,6 +123,7 @@ export class OauthClient {
                 }
                 void close();
             };
+            settleRef = settle;
             const rejectCallback = (statusCode, responseMessage, errorMessage, response) => {
                 response.writeHead(statusCode, {
                     'Connection': 'close',
@@ -130,10 +157,9 @@ export class OauthClient {
                     rejectCallback(400, 'Invalid state parameter', 'OAuth state mismatch', response);
                     return;
                 }
-                const apiKey = requestUrl.searchParams.get('api_key');
-                const workspaceId = requestUrl.searchParams.get('workspace_id');
-                if (!apiKey || !workspaceId) {
-                    rejectCallback(400, 'Missing api_key/workspace_id', 'OAuth callback missing required params', response);
+                const code = requestUrl.searchParams.get('code');
+                if (!code) {
+                    rejectCallback(400, 'Missing authorization code', 'OAuth callback missing authorization code', response);
                     return;
                 }
                 response.writeHead(200, {
@@ -141,15 +167,16 @@ export class OauthClient {
                     'Content-Type': 'text/html; charset=utf-8',
                 });
                 response.end('<html><body><h1>Connected</h1><p>You can close this tab.</p></body></html>');
-                settle('resolve', { apiKey, workspaceId });
+                settle('resolve', { code });
             });
             server.on('error', (error) => {
                 logger.error({ err: error }, 'OAuth callback server error');
                 settle('reject', error);
             });
             timeout = setTimeout(() => {
+                const timeoutMinutes = Math.round(this.timeoutMs / 60_000);
                 logger.warn('OAuth flow timeout');
-                settle('reject', new Error('OAuth flow timeout (5min)'));
+                settle('reject', new Error(`OAuth flow timeout (${timeoutMinutes}min)`));
             }, this.timeoutMs);
         });
         await new Promise((resolve, reject) => {
@@ -174,7 +201,31 @@ export class OauthClient {
             port: address.port,
             result,
             close,
+            abort: (error) => settleRef('reject', error),
         };
     }
+    /**
+     * Меняет PKCE authorization code на api_key через backend `/auth/mcp-token`.
+     * Запрос неаутентифицирован: доказательство владения — `code` + `code_verifier`.
+     */
+    async defaultExchange(input) {
+        const url = `${this.apiBaseUrl}/auth/mcp-token`;
+        let data;
+        try {
+            const response = await axios.post(url, { code: input.code, code_verifier: input.codeVerifier }, { timeout: TOKEN_EXCHANGE_TIMEOUT_MS });
+            data = response.data;
+        }
+        catch (error) {
+            const detail = axios.isAxiosError(error)
+                ? String(error.response?.status ?? error.message)
+                : String(error);
+            throw new Error(`MCP token exchange failed (${detail})`);
+        }
+        const payload = data;
+        if (typeof payload?.api_key !== 'string' || typeof payload?.workspace_id !== 'string') {
+            throw new Error('MCP token exchange returned an invalid response');
+        }
+        return { apiKey: payload.api_key, workspaceId: payload.workspace_id };
+    }
 }
 //# sourceMappingURL=oauth-client.js.map

package/dist/auth/oauth-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-client.js","sourceRoot":"","sources":["../../src/auth/oauth-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAAuB,MAAM,WAAW,CAAC;AAG9D,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,+BAA+B,CAAC;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAC/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AACrD,MAAM,CAAC,MAAM,WAAW,GAAG,0BAA0B,CAAC;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAmB9C,MAAM,UAAU,oBAAoB;IAClC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAAmB;IACrD,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,oBAAoB,CAAC,CAAC,OAAO,CACrF,MAAM,EACN,EAAE,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAKtC;IACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAEjF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,WAAW;IACL,UAAU,CAAS;IACnB,OAAO,CAA8C;IACrD,SAAS,CAAS;IAEnC,YAAY,UAA8B,EAAE;QAC1C,IAAI,CAAC,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,UAAU,mBAAmB,IAAI,cAAc,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACjG,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;YAC9C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK;YACL,WAAW;YACX,aAAa;SACd,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC;QAC7C,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChD,OAAO,MAAM,cAAc,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,KAEjC;QACC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAkD,CAAC;QACvD,IAAI,YAAY,GAAyB,IAAI,CAAC;QAE9C,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;YACtC,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;YAED,YAAY,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBACrC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACtB,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YAEH,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjE,MAAM,MAAM,GAAG,CACb,OAA6B,EAC7B,KAAiC,EAC3B,EAAE;gBACR,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBAEf,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,OAAO,CAAC,KAA2B,CAAC,CAAC;gBACvC,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;gBAED,KAAK,KAAK,EAAE,CAAC;YACf,CAAC,CAAC;YAEF,MAAM,cAAc,GAAG,CACrB,UAAkB,EAClB,eAAuB,EACvB,YAAoB,EACpB,QAAwB,EAClB,EAAE;gBACR,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE;oBAC7B,YAAY,EAAE,OAAO;oBACrB,cAAc,EAAE,2BAA2B;iBAC5C,CAAC,CAAC;gBACH,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBACzD,MAAM,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YAC5C,CAAC,CAAC;YAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;gBACzC,IAAI,OAAO,EAAE,CAAC;oBACZ,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;wBACtB,YAAY,EAAE,OAAO;wBACrB,cAAc,EAAE,2BAA2B;qBAC5C,CAAC,CAAC;oBACH,QAAQ,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;oBAC7C,OAAO;gBACT,CAAC;gBAED,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;oBAC7B,cAAc,CAAC,GAAG,EAAE,oBAAoB,EAAE,mCAAmC,EAAE,QAAQ,CAAC,CAAC;oBACzF,OAAO;gBACT,CAAC;gBAED,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,EAAwB,CAAC;gBAC/D,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,OAAO,CAAC,GAAG,IAAI,GAAG,EAClB,UAAU,mBAAmB,IAAI,eAAe,EAAE,IAAI,IAAI,CAAC,EAAE,CAC9D,CAAC;gBAEF,IAAI,UAAU,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;oBAChD,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,8BAA8B,EAAE,QAAQ,CAAC,CAAC;oBAC3E,OAAO;gBACT,CAAC;gBAED,MAAM,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,aAAa,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;oBAC1C,cAAc,CACZ,GAAG,EACH,yBAAyB,EACzB,sBAAsB,EACtB,QAAQ,CACT,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACtD,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAEhE,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC5B,cAAc,CACZ,GAAG,EACH,8BAA8B,EAC9B,wCAAwC,EACxC,QAAQ,CACT,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;oBACtB,YAAY,EAAE,OAAO;oBACrB,cAAc,EAAE,0BAA0B;iBAC3C,CAAC,CAAC;gBACH,QAAQ,CAAC,GAAG,CACV,4EAA4E,CAC7E,CAAC;gBACF,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3B,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,6BAA6B,CAAC,CAAC;gBAC5D,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YAEH,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxB,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAClC,MAAM,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YAC3D,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,aAAa,GAAG,CAAC,KAAY,EAAQ,EAAE;gBAC3C,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC;YAEF,MAAM,WAAW,GAAG,GAAS,EAAE;gBAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBACnC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,KAAK,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM;YACN,KAAK;SACN,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"oauth-client.js","sourceRoot":"","sources":["../../src/auth/oauth-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAAuB,MAAM,WAAW,CAAC;AAG9D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AACrE,MAAM,CAAC,MAAM,2BAA2B,GAAG,6CAA6C,CAAC;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAC/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AACrD,MAAM,CAAC,MAAM,WAAW,GAAG,0BAA0B,CAAC;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,CAAC;AAiCnD,MAAM,UAAU,oBAAoB;IAClC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAAmB;IACrD,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,oBAAoB,CAAC,CAAC,OAAO,CACrF,MAAM,EACN,EAAE,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,iBAA0B;IACnE,OAAO,CACL,iBAAiB;QACjB,OAAO,CAAC,GAAG,CAAC,2BAA2B;QACvC,2BAA2B,CAC5B,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAKtC;IACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,0BAA0B,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAEzE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,WAAW;IACL,iBAAiB,CAAS;IAC1B,UAAU,CAAS;IACnB,OAAO,CAA8C;IACrD,QAAQ,CAAoE;IAC5E,SAAS,CAAS;IAEnC,YAAY,UAA8B,EAAE;QAC1C,IAAI,CAAC,iBAAiB,GAAG,0BAA0B,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC/E,IAAI,CAAC,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ;YACX,OAAO,CAAC,yBAAyB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACzD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,UAAU,mBAAmB,IAAI,cAAc,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACjG,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;YAC9C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,KAAK;YACL,WAAW;YACX,aAAa;SACd,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC;QAC7C,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC;QACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,KAEjC;QACC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAkD,CAAC;QACvD,IAAI,YAAY,GAAyB,IAAI,CAAC;QAC9C,IAAI,SAAS,GAA2E,GAAG,EAAE,CAAC,SAAS,CAAC;QAExG,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;YACtC,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;YAED,YAAY,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBACrC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACtB,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YAEH,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7D,MAAM,MAAM,GAAG,CACb,OAA6B,EAC7B,KAA6B,EACvB,EAAE;gBACR,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBAEf,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,OAAO,CAAC,KAAuB,CAAC,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;gBAED,KAAK,KAAK,EAAE,CAAC;YACf,CAAC,CAAC;YAEF,SAAS,GAAG,MAAM,CAAC;YAEnB,MAAM,cAAc,GAAG,CACrB,UAAkB,EAClB,eAAuB,EACvB,YAAoB,EACpB,QAAwB,EAClB,EAAE;gBACR,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE;oBAC7B,YAAY,EAAE,OAAO;oBACrB,cAAc,EAAE,2BAA2B;iBAC5C,CAAC,CAAC;gBACH,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBACzD,MAAM,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YAC5C,CAAC,CAAC;YAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;gBACzC,IAAI,OAAO,EAAE,CAAC;oBACZ,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;wBACtB,YAAY,EAAE,OAAO;wBACrB,cAAc,EAAE,2BAA2B;qBAC5C,CAAC,CAAC;oBACH,QAAQ,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;oBAC7C,OAAO;gBACT,CAAC;gBAED,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;oBAC7B,cAAc,CAAC,GAAG,EAAE,oBAAoB,EAAE,mCAAmC,EAAE,QAAQ,CAAC,CAAC;oBACzF,OAAO;gBACT,CAAC;gBAED,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,EAAwB,CAAC;gBAC/D,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,OAAO,CAAC,GAAG,IAAI,GAAG,EAClB,UAAU,mBAAmB,IAAI,eAAe,EAAE,IAAI,IAAI,CAAC,EAAE,CAC9D,CAAC;gBAEF,IAAI,UAAU,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;oBAChD,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,8BAA8B,EAAE,QAAQ,CAAC,CAAC;oBAC3E,OAAO;gBACT,CAAC;gBAED,MAAM,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,aAAa,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;oBAC1C,cAAc,CACZ,GAAG,EACH,yBAAyB,EACzB,sBAAsB,EACtB,QAAQ,CACT,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAEjD,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,cAAc,CACZ,GAAG,EACH,4BAA4B,EAC5B,2CAA2C,EAC3C,QAAQ,CACT,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;oBACtB,YAAY,EAAE,OAAO;oBACrB,cAAc,EAAE,0BAA0B;iBAC3C,CAAC,CAAC;gBACH,QAAQ,CAAC,GAAG,CACV,4EAA4E,CAC7E,CAAC;gBACF,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3B,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,6BAA6B,CAAC,CAAC;gBAC5D,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YAEH,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxB,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAClC,MAAM,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,uBAAuB,cAAc,MAAM,CAAC,CAAC,CAAC;YAC3E,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,aAAa,GAAG,CAAC,KAAY,EAAQ,EAAE;gBAC3C,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC;YAEF,MAAM,WAAW,GAAG,GAAS,EAAE;gBAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBACnC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,KAAK,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM;YACN,KAAK;YACL,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC;SAC7C,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe,CAC3B,KAAgC;QAEhC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,iBAAiB,CAAC;QAEhD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAC/B,GAAG,EACH,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,EACvD,EAAE,OAAO,EAAE,yBAAyB,EAAE,CACvC,CAAC;YACF,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC;gBACtC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC;gBACjD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,OAAO,GAAG,IAA4D,CAAC;QAC7E,IAAI,OAAO,OAAO,EAAE,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,EAAE,YAAY,KAAK,QAAQ,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IACxE,CAAC;CACF"}

package/dist/auth/session-workspace.d.ts

@@ -0,0 +1,2 @@
+export declare function getSessionWorkspaceId(): string | undefined;
+export declare function setSessionWorkspaceId(workspaceId: string | undefined): void;

package/dist/auth/session-workspace.js

@@ -0,0 +1,20 @@
+/**
+ * In-memory, per-process workspace override для текущей MCP-сессии.
+ *
+ * Каждая сессия хоста (Claude Desktop / Claude Code / Codex) спавнит ОТДЕЛЬНЫЙ
+ * процесс besales-mcp, поэтому module-level state здесь = состояние ровно этой
+ * сессии. Тул `besales_workspace_use` пишет сюда; резолвер читает (precedence:
+ * ниже env-пина и явного workspace_id, выше глобального `active`).
+ *
+ * Значение НЕ персистится (живёт пока жив процесс сессии) и НЕ трогает keychain
+ * `active`, поэтому параллельные сессии друг друга не задевают — в этом весь смысл:
+ * одна Claude-сессия = один воркспейс, без env-переменных и без отдельных папок.
+ */
+let sessionWorkspaceId;
+export function getSessionWorkspaceId() {
+    return sessionWorkspaceId;
+}
+export function setSessionWorkspaceId(workspaceId) {
+    sessionWorkspaceId = workspaceId;
+}
+//# sourceMappingURL=session-workspace.js.map

package/dist/auth/session-workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-workspace.js","sourceRoot":"","sources":["../../src/auth/session-workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,IAAI,kBAAsC,CAAC;AAE3C,MAAM,UAAU,qBAAqB;IACnC,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,WAA+B;IACnE,kBAAkB,GAAG,WAAW,CAAC;AACnC,CAAC"}

package/dist/auth/token-storage.d.ts

@@ -1,7 +1,21 @@
 export declare const TOKEN_STORAGE_SERVICE = "@besales/mcp";
-export type TokenStorageAccount = 'api_key' | 'workspace_id';
-export declare class TokenStorage {
-    set(account: TokenStorageAccount, value: string): Promise<void>;
-    get(account: TokenStorageAccount): Promise<string | null>;
-    clear(): Promise<void>;
+export declare const LEGACY_API_KEY_ACCOUNT = "api_key";
+export declare const LEGACY_WORKSPACE_ID_ACCOUNT = "workspace_id";
+/**
+ * Низкоуровневый доступ к keychain по произвольному имени account'а.
+ * Доменную логику (index/active/per-workspace ключи, миграция) держит
+ * ConnectionStore поверх этого интерфейса.
+ */
+export interface CredentialStore {
+    set(account: string, value: string): Promise<void>;
+    get(account: string): Promise<string | null>;
+    delete(account: string): Promise<void>;
+    /** Имена всех account'ов сервиса (без паролей) — для подметания orphan-записей. */
+    accounts(): Promise<string[]>;
+}
+export declare class TokenStorage implements CredentialStore {
+    set(account: string, value: string): Promise<void>;
+    get(account: string): Promise<string | null>;
+    delete(account: string): Promise<void>;
+    accounts(): Promise<string[]>;
 }

package/dist/auth/token-storage.js

@@ -1,5 +1,9 @@
-import * as keytar from 'keytar';
+import keytar from 'keytar';
 export const TOKEN_STORAGE_SERVICE = '@besales/mcp';
+// Legacy single-workspace accounts (до мульти-воркспейс). Сохранены только для
+// одноразовой миграции в новую схему — см. ConnectionStore.migrateLegacy().
+export const LEGACY_API_KEY_ACCOUNT = 'api_key';
+export const LEGACY_WORKSPACE_ID_ACCOUNT = 'workspace_id';
 export class TokenStorage {
     async set(account, value) {
         await keytar.setPassword(TOKEN_STORAGE_SERVICE, account, value);
@@ -7,11 +11,12 @@ export class TokenStorage {
     async get(account) {
         return keytar.getPassword(TOKEN_STORAGE_SERVICE, account);
     }
-    async clear() {
-        await Promise.all([
-            keytar.deletePassword(TOKEN_STORAGE_SERVICE, 'api_key'),
-            keytar.deletePassword(TOKEN_STORAGE_SERVICE, 'workspace_id'),
-        ]);
+    async delete(account) {
+        await keytar.deletePassword(TOKEN_STORAGE_SERVICE, account);
+    }
+    async accounts() {
+        const credentials = await keytar.findCredentials(TOKEN_STORAGE_SERVICE);
+        return credentials.map(({ account }) => account);
     }
 }
 //# sourceMappingURL=token-storage.js.map

package/dist/auth/token-storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-storage.js","sourceRoot":"","sources":["../../src/auth/token-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CAAC;AAGpD,MAAM,OAAO,YAAY;IACvB,KAAK,CAAC,GAAG,CAAC,OAA4B,EAAE,KAAa;QACnD,MAAM,MAAM,CAAC,WAAW,CAAC,qBAAqB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAA4B;QACpC,OAAO,MAAM,CAAC,WAAW,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,MAAM,CAAC,cAAc,CAAC,qBAAqB,EAAE,SAAS,CAAC;YACvD,MAAM,CAAC,cAAc,CAAC,qBAAqB,EAAE,cAAc,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"token-storage.js","sourceRoot":"","sources":["../../src/auth/token-storage.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CAAC;AAEpD,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAChD,MAAM,CAAC,MAAM,2BAA2B,GAAG,cAAc,CAAC;AAe1D,MAAM,OAAO,YAAY;IACvB,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,KAAa;QACtC,MAAM,MAAM,CAAC,WAAW,CAAC,qBAAqB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe;QACvB,OAAO,MAAM,CAAC,WAAW,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,MAAM,MAAM,CAAC,cAAc,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC;QACxE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/cli.d.ts

@@ -1,5 +1,5 @@
+import { ConnectionStore } from './auth/connection-store.js';
 import { type OAuthConnectResult } from './auth/oauth-client.js';
-import { type TokenStorageAccount } from './auth/token-storage.js';
 import { startMcpServer } from './server.js';
 export interface CliIo {
     readonly log: (message: string) => void;
@@ -8,14 +8,9 @@ export interface CliIo {
 export interface OAuthConnector {
     connect(): Promise<OAuthConnectResult>;
 }
-export interface CredentialStorage {
-    set(account: TokenStorageAccount, value: string): Promise<void>;
-    get(account: TokenStorageAccount): Promise<string | null>;
-    clear(): Promise<void>;
-}
 export interface CliDeps {
     readonly oauthClient?: OAuthConnector;
-    readonly tokenStorage?: CredentialStorage;
+    readonly store?: ConnectionStore;
     readonly startMcpServer?: typeof startMcpServer;
 }
 export declare function getHelpText(version?: string): string;

package/dist/cli.js

@@ -1,5 +1,5 @@
+import { ConnectionStore } from './auth/connection-store.js';
 import { OauthClient } from './auth/oauth-client.js';
-import { TokenStorage } from './auth/token-storage.js';
 import { readPackageVersion } from './package-metadata.js';
 import { startMcpServer } from './server.js';
 import { maskApiKey } from './utils/mask.js';
@@ -7,21 +7,30 @@ const defaultIo = {
     log: (message) => console.log(message),
     error: (message) => console.error(message),
 };
+const STORAGE_COMMANDS = new Set(['connect', 'connections', 'use', 'disconnect', 'status']);
 export function getHelpText(version = readPackageVersion()) {
     return `besales-mcp ${version}
 
 Usage:
-  besales-mcp              Start MCP server
-  besales-mcp connect      Connect Animaly workspace
-  besales-mcp status       Show connection status
-  besales-mcp disconnect   Clear stored credentials
-  besales-mcp --help       Show help
-  besales-mcp --version    Show version`;
+  besales-mcp                       Start MCP server
+  besales-mcp connect               Connect (or refresh) an Animaly workspace
+  besales-mcp connections           List connected workspaces
+  besales-mcp use <workspaceId>     Set the active (default) workspace
+  besales-mcp status                Show the active workspace
+  besales-mcp disconnect            Disconnect the active workspace
+  besales-mcp disconnect <id>       Disconnect one workspace
+  besales-mcp disconnect --all      Disconnect every workspace
+  besales-mcp --help                Show help
+  besales-mcp --version             Show version
+
+Connect each workspace once — switching afterwards needs no browser. Pin a
+session to a workspace with the BESALES_WORKSPACE_ID env var in your MCP host
+config; it overrides the global active workspace set by \`use\`.`;
 }
 export async function runCli(argv = process.argv.slice(2), io = defaultIo, deps = {}) {
     const command = argv[0];
     const oauthClient = deps.oauthClient ?? new OauthClient();
-    const tokenStorage = deps.tokenStorage ?? new TokenStorage();
+    const store = deps.store ?? new ConnectionStore();
     const runMcpServer = deps.startMcpServer ?? startMcpServer;
     if (command === '--help' || command === '-h') {
         io.log(getHelpText());
@@ -31,40 +40,109 @@ export async function runCli(argv = process.argv.slice(2), io = defaultIo, deps
         io.log(readPackageVersion());
         return 0;
     }
-    if (command === 'connect') {
-        const { apiKey, workspaceId } = await oauthClient.connect();
-        try {
-            await tokenStorage.set('workspace_id', workspaceId);
-            await tokenStorage.set('api_key', apiKey);
-        }
-        catch (error) {
-            await tokenStorage.clear();
-            throw error;
+    if (command && STORAGE_COMMANDS.has(command)) {
+        // Миграция legacy-пары ДО любой записи в index — иначе connect для второго
+        // воркспейса перезатёр бы ещё не мигрированный первый.
+        await store.migrateLegacy();
+        switch (command) {
+            case 'connect':
+                return connectCommand(io, oauthClient, store);
+            case 'connections':
+                return connectionsCommand(io, store);
+            case 'use':
+                return useCommand(argv[1], io, store);
+            case 'disconnect':
+                return disconnectCommand(argv[1], io, store);
+            case 'status':
+                return statusCommand(io, store);
         }
-        io.log(`Connected to workspace ${workspaceId} (key: ${maskApiKey(apiKey)})`);
+    }
+    if (command) {
+        io.error(`Unknown command: ${command}`);
+        io.log(getHelpText());
+        return 1;
+    }
+    await runMcpServer({ stdio: true });
+    return 0;
+}
+async function connectCommand(io, oauthClient, store) {
+    const { apiKey, workspaceId } = await oauthClient.connect();
+    await store.addOrReplace(workspaceId, apiKey);
+    const active = await store.getActive();
+    io.log(`Connected to workspace ${workspaceId} (key: ${maskApiKey(apiKey)}).`);
+    io.log(`Active workspace: ${active ?? workspaceId}.`);
+    io.log('Tip: set BESALES_WORKSPACE_ID in your MCP host config to pin this session to a workspace.');
+    return 0;
+}
+async function connectionsCommand(io, store) {
+    const connections = await store.list();
+    if (connections.length === 0) {
+        io.log('No connected workspaces. Run `besales-mcp connect`.');
         return 0;
     }
-    if (command === 'status') {
-        const apiKey = await tokenStorage.get('api_key');
-        const workspaceId = await tokenStorage.get('workspace_id');
-        if (!apiKey) {
-            io.log('Not connected');
-            return 0;
+    const active = await store.getActive();
+    for (const connection of connections) {
+        const marker = connection.workspaceId === active ? '*' : ' ';
+        io.log(`${marker} ${connection.workspaceId} (key: ${connection.keyPrefix})`);
+    }
+    return 0;
+}
+async function useCommand(workspaceId, io, store) {
+    if (!workspaceId) {
+        io.error('Usage: besales-mcp use <workspaceId>');
+        return 1;
+    }
+    try {
+        await store.setActive(workspaceId);
+    }
+    catch (error) {
+        io.error(error instanceof Error ? error.message : String(error));
+        const connections = await store.list();
+        if (connections.length > 0) {
+            io.log('Connected workspaces:');
+            for (const connection of connections) {
+                io.log(`  ${connection.workspaceId}`);
+            }
         }
-        io.log(`Connected to workspace ${workspaceId ?? 'unknown'} (key: ${maskApiKey(apiKey)})`);
-        return 0;
+        return 1;
     }
-    if (command === 'disconnect') {
-        await tokenStorage.clear();
-        io.log('Disconnected');
+    io.log(`Active workspace: ${workspaceId}.`);
+    return 0;
+}
+async function disconnectCommand(arg, io, store) {
+    if (arg === '--all') {
+        await store.clear();
+        io.log('Disconnected all workspaces.');
         return 0;
     }
-    if (command) {
-        io.error(`Unknown command: ${command}`);
-        io.log(getHelpText());
+    const target = arg ?? (await store.getActive());
+    if (!target) {
+        io.error('No active workspace. Specify `besales-mcp disconnect <workspaceId>` or `besales-mcp disconnect --all`.');
         return 1;
     }
-    await runMcpServer({ stdio: true });
+    const connections = await store.list();
+    if (!connections.some((connection) => connection.workspaceId === target)) {
+        io.log(`Workspace ${target} is not connected.`);
+        return 0;
+    }
+    await store.remove(target);
+    io.log(`Disconnected workspace ${target}.`);
+    return 0;
+}
+async function statusCommand(io, store) {
+    const connections = await store.list();
+    if (connections.length === 0) {
+        io.log('Not connected');
+        return 0;
+    }
+    const active = await store.getActive();
+    const activeConnection = connections.find((connection) => connection.workspaceId === active);
+    if (activeConnection) {
+        io.log(`Active workspace: ${activeConnection.workspaceId} (key: ${activeConnection.keyPrefix}). ${connections.length} connected.`);
+    }
+    else {
+        io.log(`No active workspace selected. ${connections.length} connected — run \`besales-mcp use <workspaceId>\`.`);
+    }
     return 0;
 }
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA2B,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAA4B,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAuB7C,MAAM,SAAS,GAAU;IACvB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACtC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;CAC3C,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,OAAO,GAAG,kBAAkB,EAAE;IACxD,OAAO,eAAe,OAAO;;;;;;;;wCAQS,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAC/C,KAAY,SAAS,EACrB,OAAgB,EAAE;IAElB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,WAAW,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,YAAY,EAAE,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC;IAE3D,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7C,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACtB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAChD,EAAE,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;QAE5D,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YACpD,MAAM,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,KAAK,CAAC;QACd,CAAC;QAED,EAAE,CAAC,GAAG,CAAC,0BAA0B,WAAW,UAAU,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAE3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACxB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,EAAE,CAAC,GAAG,CAAC,0BAA0B,WAAW,IAAI,SAAS,UAAU,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1F,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAC3B,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,EAAE,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QACxC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACtB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAA2B,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAiB7C,MAAM,SAAS,GAAU;IACvB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACtC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;CAC3C,CAAC;AAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE5F,MAAM,UAAU,WAAW,CAAC,OAAO,GAAG,kBAAkB,EAAE;IACxD,OAAO,eAAe,OAAO;;;;;;;;;;;;;;;;iEAgBkC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAC/C,KAAY,SAAS,EACrB,OAAgB,EAAE;IAElB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,WAAW,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,eAAe,EAAE,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC;IAE3D,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7C,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACtB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAChD,EAAE,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,2EAA2E;QAC3E,uDAAuD;QACvD,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;QAE5B,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,SAAS;gBACZ,OAAO,cAAc,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAChD,KAAK,aAAa;gBAChB,OAAO,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACvC,KAAK,KAAK;gBACR,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YACxC,KAAK,YAAY;gBACf,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YAC/C,KAAK,QAAQ;gBACX,OAAO,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,EAAE,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QACxC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACtB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,EAAS,EACT,WAA2B,EAC3B,KAAsB;IAEtB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;IAC5D,MAAM,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAE9C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;IACvC,EAAE,CAAC,GAAG,CAAC,0BAA0B,WAAW,UAAU,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9E,EAAE,CAAC,GAAG,CAAC,qBAAqB,MAAM,IAAI,WAAW,GAAG,CAAC,CAAC;IACtD,EAAE,CAAC,GAAG,CACJ,2FAA2F,CAC5F,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,EAAS,EAAE,KAAsB;IACjE,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;IACvC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7D,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,UAAU,CAAC,WAAW,UAAU,UAAU,CAAC,SAAS,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,WAA+B,EAC/B,EAAS,EACT,KAAsB;IAEtB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,EAAE,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAChC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,EAAE,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,EAAE,CAAC,GAAG,CAAC,qBAAqB,WAAW,GAAG,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAuB,EACvB,EAAS,EACT,KAAsB;IAEtB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,EAAE,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QACvC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,EAAE,CAAC,KAAK,CACN,wGAAwG,CACzG,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,KAAK,MAAM,CAAC,EAAE,CAAC;QACzE,EAAE,CAAC,GAAG,CAAC,aAAa,MAAM,oBAAoB,CAAC,CAAC;QAChD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,EAAE,CAAC,GAAG,CAAC,0BAA0B,MAAM,GAAG,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,EAAS,EAAE,KAAsB;IAC5D,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACxB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;IACvC,MAAM,gBAAgB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC;IAE7F,IAAI,gBAAgB,EAAE,CAAC;QACrB,EAAE,CAAC,GAAG,CACJ,qBAAqB,gBAAgB,CAAC,WAAW,UAAU,gBAAgB,CAAC,SAAS,MAAM,WAAW,CAAC,MAAM,aAAa,CAC3H,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CACJ,iCAAiC,WAAW,CAAC,MAAM,qDAAqD,CACzG,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/http/api-client.d.ts

@@ -1,9 +1,5 @@
-import { type TokenStorageAccount } from '../auth/token-storage.js';
 export declare const API_REQUEST_TIMEOUT_MS = 60000;
 export type ApiMethod = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
-export interface CredentialReader {
-    get(account: TokenStorageAccount): Promise<string | null>;
-}
 export interface ApiTransportRequest {
     readonly method: ApiMethod;
     readonly url: string;
@@ -20,14 +16,12 @@ export interface ApiTransport {
 }
 export interface ApiClientOptions {
     readonly apiBaseUrl?: string;
-    readonly tokenStorage?: CredentialReader;
     readonly transport?: ApiTransport;
     readonly timeoutMs?: number;
 }
 export interface ToolApiClient {
-    post<T>(path: string, body?: unknown): Promise<T>;
-    request<T>(method: ApiMethod, path: string, body?: unknown): Promise<T>;
-    getStoredWorkspaceId(): Promise<string | null>;
+    post<T>(path: string, apiKey: string, body?: unknown): Promise<T>;
+    request<T>(method: ApiMethod, path: string, apiKey: string, body?: unknown): Promise<T>;
 }
 export declare class ApiClientError extends Error {
     readonly status?: number | undefined;
@@ -39,13 +33,10 @@ export declare class ApiClientNetworkError extends Error {
 }
 export declare class ApiClient implements ToolApiClient {
     private readonly apiBaseUrl;
-    private readonly tokenStorage;
     private readonly transport;
     private readonly timeoutMs;
     constructor(options?: ApiClientOptions);
-    post<T>(path: string, body?: unknown): Promise<T>;
-    patch<T>(path: string, body?: unknown): Promise<T>;
-    getStoredWorkspaceId(): Promise<string | null>;
-    request<T>(method: ApiMethod, path: string, body?: unknown): Promise<T>;
+    post<T>(path: string, apiKey: string, body?: unknown): Promise<T>;
+    request<T>(method: ApiMethod, path: string, apiKey: string, body?: unknown): Promise<T>;
 }
 export declare function buildApiUrl(apiBaseUrl: string, path: string): string;