@botuyo/mcp 0.7.6 → 0.9.0

package/README.md

@@ -74,7 +74,7 @@ The server resolves your JWT from `BOTUYO_TOKEN`, falling back to `~/.botuyo/cre
 
 ## Available tools
 
-The server exposes **42 tools**. Read tools (`list_*`, `get_*`, `export_*`, `audit_*`) need `viewer+`; write/publish tools need `developer+` (see [Roles](#roles)).
+The server exposes **48 tools**. Read tools (`list_*`, `get_*`, `export_*`, `audit_*`) need `viewer+`; write/publish tools need `developer+`; channel & integration connect/configure need `admin+` (see [Roles](#roles)).
 
 > **For AI assistants / IDE agents:** every tool is self-describing — its `inputSchema` lists the exact arguments (with `required`) and its `description` states role requirements and side effects. Discover the live catalog with the MCP `tools/list` request; you never need to hardcode tool names. A typical build flow is `create_agent` → `update_agent` (identity/voice) → `upsert_stage` (conversation graph) → `update_enabled_tools` / `configure_agent_tool` (capabilities) → `publish_agent`. Use `example_agent` to see a fully documented reference config, and `audit_agent_family` to validate before publishing.
 
@@ -166,6 +166,35 @@ A **family** is one logical agent with a shared `base` config plus multiple `var
 | `list_agent_versions` | List an agent's saved version snapshots |
 | `restore_agent_version` | Roll back an agent to a previous version |
 
+### Channels
+
+Connect messaging channels to the tenant **with their secrets**. Secrets are **write-only** — the server stores them and never returns their values; `list_channels` reports only which credential keys are set. Connect/disconnect require role **owner or admin**.
+
+| Tool | Description |
+|---|---|
+| `list_channels` | List the tenant's channels + status. Never returns secret values — only `credentialsSet` (which keys are configured) |
+| `connect_channel` | Connect a channel (WhatsApp, Telegram, Discord, Web, …) with its credentials. Validated against the provider API and stored server-side |
+| `disconnect_channel` | Disconnect a channel by id (archives its open conversations) |
+
+**Passing secrets safely.** `connect_channel` accepts the secret two ways:
+
+- `credentials` — literal values, e.g. `{ "botToken": "123:ABC" }`. Simplest, but the secret passes through the conversation/LLM.
+- `credentialsFromEnv` (**recommended for real secrets**) — a map of credential key → environment variable name, e.g. `{ "botToken": "MY_TG_TOKEN" }`. The MCP server reads the value from its **own** environment (set it in your MCP client config), so the secret never appears in the chat.
+
+> Channels that require an interactive flow (WhatsApp/Instagram Embedded Signup QR/OAuth) still need [admin.botuyo.com](https://admin.botuyo.com). Channels that authenticate with a static token (Telegram, Discord, WhatsApp Cloud API with an existing token, Web) can be connected here.
+
+### Integrations
+
+Install and configure the tenant's external integrations (Shopify, PaseoLibre, Google Calendar, email SMTP, …) **with their secrets**, using the same write-only secret model as channels. Configure/remove require role **owner or admin**.
+
+| Tool | Description |
+|---|---|
+| `list_integrations` | List the integration catalog (available) + the tenant's installed integrations. Never returns secret values — only `configKeys` (which config keys are set) |
+| `configure_integration` | Install or update an integration with its config/secret (validated against the provider, stored server-side). Accepts literal `config` or `configFromEnv` (env-var reference) |
+| `remove_integration` | Uninstall an integration by id |
+
+Same two secret modes as `connect_channel`: literal `config`, or `configFromEnv` (map config key → env var name resolved from the MCP server environment, keeping the secret out of the chat).
+
 ### Account
 
 | Tool | Description |
@@ -181,11 +210,13 @@ A **family** is one logical agent with a shared `base` config plus multiple `var
 | `developer` | ✅ | ✅ | ✅ |
 | `viewer` | ✅ | ❌ | ❌ |
 
+> **Channels & integrations:** `connect_channel` / `disconnect_channel` / `configure_integration` / `remove_integration` additionally require **owner or admin** (a `developer` can build agents but not wire up channel/integration secrets).
+
 ## Channel Integrations
 
-Connecting channels (WhatsApp, Instagram, Telegram, Web) must be done from [admin.botuyo.com](https://admin.botuyo.com) — they require interactive flows (QR scans, OAuth, etc.).
+Channels that authenticate with a **static secret** — Telegram (bot token), Discord (bot token), WhatsApp Cloud API (existing access token), Web — can be connected directly via the `connect_channel` tool (see [Channels](#channels)). Channels that need an **interactive flow** (WhatsApp/Instagram Embedded Signup with QR scans or OAuth consent) must still be connected from [admin.botuyo.com](https://admin.botuyo.com).
 
-Use `get_agent_status` to check which channels are connected. It returns a direct link to the admin panel for any missing channel.
+Use `get_agent_status` to check which channels are connected (it links to the admin panel for any missing channel), or `list_channels` for the tenant-wide channel list and status.
 
 ## Build from source
 

package/dist/tools/__tests__/channels.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tools/__tests__/channels.spec.js

@@ -0,0 +1,93 @@
+import { describe, it, expect, afterEach } from 'vitest';
+import { listChannelsHandler, connectChannelHandler, disconnectChannelHandler } from '../channels.js';
+class MockClient {
+    gets = [];
+    posts = [];
+    deletes = [];
+    async get(path) {
+        this.gets.push(path);
+        return { success: true, data: { channels: [], total: 0 } };
+    }
+    async post(path, payload) {
+        this.posts.push({ path, payload });
+        return { success: true, data: { channelId: 'ch1', status: 'connected' } };
+    }
+    async delete(path) {
+        this.deletes.push(path);
+        return { success: true, data: { message: 'disconnected' } };
+    }
+}
+describe('listChannelsHandler', () => {
+    it('GETs the MCP channels namespace', async () => {
+        const client = new MockClient();
+        await listChannelsHandler(client);
+        expect(client.gets[0]).toBe('/api/v1/mcp/channels');
+    });
+});
+describe('connectChannelHandler', () => {
+    it('POSTs channelType + config + literal credentials', async () => {
+        const client = new MockClient();
+        await connectChannelHandler(client, {
+            channelType: 'telegram',
+            config: { botUsername: 'mybot' },
+            credentials: { botToken: 'T-123' }
+        });
+        expect(client.posts[0].path).toBe('/api/v1/mcp/channels/connect');
+        expect(client.posts[0].payload).toEqual({
+            channelType: 'telegram',
+            config: { botUsername: 'mybot' },
+            credentials: { botToken: 'T-123' }
+        });
+    });
+    it('throws when channelType is missing', async () => {
+        const client = new MockClient();
+        await expect(connectChannelHandler(client, {})).rejects.toThrow(/channelType/i);
+    });
+    describe('credentialsFromEnv (keeps secrets out of the chat)', () => {
+        afterEach(() => {
+            delete process.env.TEST_TG_TOKEN;
+        });
+        it('resolves the secret from the MCP server environment', async () => {
+            process.env.TEST_TG_TOKEN = 'secret-from-env';
+            const client = new MockClient();
+            await connectChannelHandler(client, {
+                channelType: 'telegram',
+                credentialsFromEnv: { botToken: 'TEST_TG_TOKEN' }
+            });
+            expect(client.posts[0].payload.credentials).toEqual({ botToken: 'secret-from-env' });
+        });
+        it('merges literal + env credentials', async () => {
+            process.env.TEST_TG_TOKEN = 'env-token';
+            const client = new MockClient();
+            await connectChannelHandler(client, {
+                channelType: 'whatsapp',
+                credentials: { appSecret: 'literal-secret' },
+                credentialsFromEnv: { accessToken: 'TEST_TG_TOKEN' }
+            });
+            expect(client.posts[0].payload.credentials).toEqual({
+                appSecret: 'literal-secret',
+                accessToken: 'env-token'
+            });
+        });
+        it('throws a helpful error when the env var is not set', async () => {
+            const client = new MockClient();
+            await expect(connectChannelHandler(client, {
+                channelType: 'telegram',
+                credentialsFromEnv: { botToken: 'DEFINITELY_UNSET_ENV_VAR_XYZ' }
+            })).rejects.toThrow(/DEFINITELY_UNSET_ENV_VAR_XYZ/);
+            expect(client.posts).toHaveLength(0);
+        });
+    });
+});
+describe('disconnectChannelHandler', () => {
+    it('DELETEs the channel by id', async () => {
+        const client = new MockClient();
+        await disconnectChannelHandler(client, { channelId: 'ch1' });
+        expect(client.deletes[0]).toBe('/api/v1/mcp/channels/ch1');
+    });
+    it('throws when channelId is missing', async () => {
+        const client = new MockClient();
+        await expect(disconnectChannelHandler(client, {})).rejects.toThrow(/channelId/i);
+    });
+});
+//# sourceMappingURL=channels.spec.js.map

package/dist/tools/__tests__/channels.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.spec.js","sourceRoot":"","sources":["../../../src/tools/__tests__/channels.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,gBAAgB,CAAA;AAEvB,MAAM,UAAU;IACP,IAAI,GAAa,EAAE,CAAA;IACnB,KAAK,GAA0C,EAAE,CAAA;IACjD,OAAO,GAAa,EAAE,CAAA;IAC7B,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAA;IAC5D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,OAAY;QACnC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAA;IAC3E,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAA;IAC7D,CAAC;CACF;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;QAC/B,MAAM,mBAAmB,CAAC,MAAa,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;QAC/B,MAAM,qBAAqB,CAAC,MAAa,EAAE;YACzC,WAAW,EAAE,UAAU;YACvB,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE;YAChC,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;SACnC,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;QACjE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YACtC,WAAW,EAAE,UAAU;YACvB,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE;YAChC,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;SACnC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;QAC/B,MAAM,MAAM,CAAC,qBAAqB,CAAC,MAAa,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IACxF,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAClE,SAAS,CAAC,GAAG,EAAE;YACb,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QAClC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,iBAAiB,CAAA;YAC7C,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;YAC/B,MAAM,qBAAqB,CAAC,MAAa,EAAE;gBACzC,WAAW,EAAE,UAAU;gBACvB,kBAAkB,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE;aAClD,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAA;QACtF,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,WAAW,CAAA;YACvC,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;YAC/B,MAAM,qBAAqB,CAAC,MAAa,EAAE;gBACzC,WAAW,EAAE,UAAU;gBACvB,WAAW,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE;gBAC5C,kBAAkB,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;aACrD,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;gBAClD,SAAS,EAAE,gBAAgB;gBAC3B,WAAW,EAAE,WAAW;aACzB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;YAC/B,MAAM,MAAM,CACV,qBAAqB,CAAC,MAAa,EAAE;gBACnC,WAAW,EAAE,UAAU;gBACvB,kBAAkB,EAAE,EAAE,QAAQ,EAAE,8BAA8B,EAAE;aACjE,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAA;YACjD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;QAC/B,MAAM,wBAAwB,CAAC,MAAa,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;QACnE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;QAC/B,MAAM,MAAM,CAAC,wBAAwB,CAAC,MAAa,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tools/__tests__/integrations.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tools/__tests__/integrations.spec.js

@@ -0,0 +1,79 @@
+import { describe, it, expect, afterEach } from 'vitest';
+import { listIntegrationsHandler, configureIntegrationHandler, removeIntegrationHandler } from '../integrations.js';
+class MockClient {
+    gets = [];
+    posts = [];
+    deletes = [];
+    async get(path) {
+        this.gets.push(path);
+        return { success: true, data: { available: [], installed: [] } };
+    }
+    async post(path, payload) {
+        this.posts.push({ path, payload });
+        return { success: true, data: { integrationId: 'shopify', status: 'active' } };
+    }
+    async delete(path) {
+        this.deletes.push(path);
+        return { success: true };
+    }
+}
+describe('listIntegrationsHandler', () => {
+    it('GETs the MCP integrations namespace', async () => {
+        const client = new MockClient();
+        await listIntegrationsHandler(client);
+        expect(client.gets[0]).toBe('/api/v1/mcp/integrations');
+    });
+});
+describe('configureIntegrationHandler', () => {
+    it('POSTs integrationId + literal config', async () => {
+        const client = new MockClient();
+        await configureIntegrationHandler(client, {
+            integrationId: 'shopify',
+            config: { apiUrl: 'https://x', apiKey: 'sk-123' }
+        });
+        expect(client.posts[0].path).toBe('/api/v1/mcp/integrations/configure');
+        expect(client.posts[0].payload).toEqual({
+            integrationId: 'shopify',
+            config: { apiUrl: 'https://x', apiKey: 'sk-123' }
+        });
+    });
+    it('throws when integrationId is missing', async () => {
+        const client = new MockClient();
+        await expect(configureIntegrationHandler(client, {})).rejects.toThrow(/integrationId/i);
+    });
+    describe('configFromEnv (keeps secrets out of the chat)', () => {
+        afterEach(() => {
+            delete process.env.TEST_SHOPIFY_KEY;
+        });
+        it('resolves + merges the secret from the MCP server environment', async () => {
+            process.env.TEST_SHOPIFY_KEY = 'sk-from-env';
+            const client = new MockClient();
+            await configureIntegrationHandler(client, {
+                integrationId: 'shopify',
+                config: { apiUrl: 'https://x' },
+                configFromEnv: { apiKey: 'TEST_SHOPIFY_KEY' }
+            });
+            expect(client.posts[0].payload.config).toEqual({ apiUrl: 'https://x', apiKey: 'sk-from-env' });
+        });
+        it('throws a helpful error when the env var is not set', async () => {
+            const client = new MockClient();
+            await expect(configureIntegrationHandler(client, {
+                integrationId: 'shopify',
+                configFromEnv: { apiKey: 'DEFINITELY_UNSET_ENV_VAR_XYZ' }
+            })).rejects.toThrow(/DEFINITELY_UNSET_ENV_VAR_XYZ/);
+            expect(client.posts).toHaveLength(0);
+        });
+    });
+});
+describe('removeIntegrationHandler', () => {
+    it('DELETEs by integration id', async () => {
+        const client = new MockClient();
+        await removeIntegrationHandler(client, { integrationId: 'shopify' });
+        expect(client.deletes[0]).toBe('/api/v1/mcp/integrations/shopify');
+    });
+    it('throws when integrationId is missing', async () => {
+        const client = new MockClient();
+        await expect(removeIntegrationHandler(client, {})).rejects.toThrow(/integrationId/i);
+    });
+});
+//# sourceMappingURL=integrations.spec.js.map

package/dist/tools/__tests__/integrations.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.spec.js","sourceRoot":"","sources":["../../../src/tools/__tests__/integrations.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,wBAAwB,EACzB,MAAM,oBAAoB,CAAA;AAE3B,MAAM,UAAU;IACP,IAAI,GAAa,EAAE,CAAA;IACnB,KAAK,GAA0C,EAAE,CAAA;IACjD,OAAO,GAAa,EAAE,CAAA;IAC7B,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAA;IAClE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,OAAY;QACnC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAA;IAChF,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF;AAED,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;QAC/B,MAAM,uBAAuB,CAAC,MAAa,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;QAC/B,MAAM,2BAA2B,CAAC,MAAa,EAAE;YAC/C,aAAa,EAAE,SAAS;YACxB,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE;SAClD,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;QACvE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YACtC,aAAa,EAAE,SAAS;YACxB,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE;SAClD,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;QAC/B,MAAM,MAAM,CAAC,2BAA2B,CAAC,MAAa,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAChG,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;QAC7D,SAAS,CAAC,GAAG,EAAE;YACb,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;QACrC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,aAAa,CAAA;YAC5C,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;YAC/B,MAAM,2BAA2B,CAAC,MAAa,EAAE;gBAC/C,aAAa,EAAE,SAAS;gBACxB,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;gBAC/B,aAAa,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aAC9C,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAA;QAChG,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;YAC/B,MAAM,MAAM,CACV,2BAA2B,CAAC,MAAa,EAAE;gBACzC,aAAa,EAAE,SAAS;gBACxB,aAAa,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE;aAC1D,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAA;YACjD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;QAC/B,MAAM,wBAAwB,CAAC,MAAa,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAA;QAC3E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;QAC/B,MAAM,MAAM,CAAC,wBAAwB,CAAC,MAAa,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tools/channels.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Channel tools — connect/list/disconnect the tenant's messaging channels.
+ *
+ * SECURITY MODEL (read before editing):
+ *  - Channel secrets (bot tokens, access tokens, app secrets…) are WRITE-ONLY: the server
+ *    stores them and NEVER returns their values. `list_channels` only reports which credential
+ *    keys are set (`credentialsSet`), never the values.
+ *  - To keep secrets OUT of the AI assistant's context, `connect_channel` supports two modes:
+ *      1. `credentials` — literal values (simplest; the secret travels through the chat/LLM).
+ *      2. `credentialsFromEnv` — a map of `{ credentialKey: ENV_VAR_NAME }`; the MCP server reads
+ *         the value from its OWN environment (process.env) and the secret never appears in the
+ *         conversation. PREFER this for production secrets.
+ *  - Connecting/disconnecting requires role owner or admin (enforced server-side too).
+ *
+ * All calls go through the /api/v1/mcp/channels namespace (RULE 7).
+ */
+import type { Tool } from '@modelcontextprotocol/sdk/types.js';
+import type { BotuyoApiClient } from '../client.js';
+export declare const LIST_CHANNELS_TOOL: Tool;
+export declare const CONNECT_CHANNEL_TOOL: Tool;
+export declare const DISCONNECT_CHANNEL_TOOL: Tool;
+export declare function listChannelsHandler(client: BotuyoApiClient): Promise<unknown>;
+export declare function connectChannelHandler(client: BotuyoApiClient, args: Record<string, unknown>): Promise<unknown>;
+export declare function disconnectChannelHandler(client: BotuyoApiClient, args: Record<string, unknown>): Promise<unknown>;

package/dist/tools/channels.js

@@ -0,0 +1,105 @@
+/**
+ * Channel tools — connect/list/disconnect the tenant's messaging channels.
+ *
+ * SECURITY MODEL (read before editing):
+ *  - Channel secrets (bot tokens, access tokens, app secrets…) are WRITE-ONLY: the server
+ *    stores them and NEVER returns their values. `list_channels` only reports which credential
+ *    keys are set (`credentialsSet`), never the values.
+ *  - To keep secrets OUT of the AI assistant's context, `connect_channel` supports two modes:
+ *      1. `credentials` — literal values (simplest; the secret travels through the chat/LLM).
+ *      2. `credentialsFromEnv` — a map of `{ credentialKey: ENV_VAR_NAME }`; the MCP server reads
+ *         the value from its OWN environment (process.env) and the secret never appears in the
+ *         conversation. PREFER this for production secrets.
+ *  - Connecting/disconnecting requires role owner or admin (enforced server-side too).
+ *
+ * All calls go through the /api/v1/mcp/channels namespace (RULE 7).
+ */
+const BASE = '/api/v1/mcp/channels';
+export const LIST_CHANNELS_TOOL = {
+    name: 'list_channels',
+    description: 'List the tenant\'s messaging channels (WhatsApp, Telegram, Discord, Web, Instagram…) with their ' +
+        'connection status. SECRETS ARE NEVER RETURNED — each channel reports only `credentialsSet` (which ' +
+        'secret keys are configured), never their values. Available to any authenticated role.',
+    inputSchema: { type: 'object', properties: {} }
+};
+export const CONNECT_CHANNEL_TOOL = {
+    name: 'connect_channel',
+    description: 'Connect a messaging channel to the tenant with its secret credentials (bot token, access token, etc.). ' +
+        'Requires role owner or admin. The server validates the credential against the provider API and stores ' +
+        'it server-side; the secret is WRITE-ONLY and is never echoed back — DO NOT repeat the secret to the user. ' +
+        '\n\nTwo ways to pass the secret:\n' +
+        '• `credentials`: literal values, e.g. { "botToken": "123:ABC" }. Simplest, but the secret passes through ' +
+        'this conversation.\n' +
+        '• `credentialsFromEnv` (RECOMMENDED for real secrets): a map of credential key → environment variable ' +
+        'name, e.g. { "botToken": "MY_TG_TOKEN" }. The MCP server reads the value from its own environment so the ' +
+        'secret NEVER appears in the chat. Set that env var in your MCP client config.\n\n' +
+        'Typical per channel: telegram → credentials.botToken; whatsapp → credentials.accessToken + ' +
+        'config.phoneNumberId; discord → credentials.botToken; web → no secret. Fields from both sources are merged.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            channelType: {
+                type: 'string',
+                enum: ['whatsapp', 'telegram', 'discord', 'web', 'webchat', 'instagram', 'facebook'],
+                description: 'Channel to connect.'
+            },
+            config: {
+                type: 'object',
+                description: 'Non-secret settings (e.g. { "phoneNumberId": "..." } for WhatsApp).',
+                additionalProperties: true
+            },
+            credentials: {
+                type: 'object',
+                description: 'Secret values as literals (e.g. { "botToken": "..." }). Prefer credentialsFromEnv for real secrets.',
+                additionalProperties: true
+            },
+            credentialsFromEnv: {
+                type: 'object',
+                description: 'Map of credential key → env var name read from the MCP server environment (keeps the secret out of the chat). ' +
+                    'e.g. { "botToken": "MY_TG_TOKEN" }.',
+                additionalProperties: { type: 'string' }
+            }
+        },
+        required: ['channelType']
+    }
+};
+export const DISCONNECT_CHANNEL_TOOL = {
+    name: 'disconnect_channel',
+    description: 'Disconnect a channel by its id (archives its open conversations). Use list_channels first to get the id. ' +
+        'Requires role owner or admin.',
+    inputSchema: {
+        type: 'object',
+        properties: { channelId: { type: 'string', description: 'The channel id (from list_channels).' } },
+        required: ['channelId']
+    }
+};
+export async function listChannelsHandler(client) {
+    return client.get(BASE);
+}
+export async function connectChannelHandler(client, args) {
+    const channelType = args.channelType;
+    if (!channelType)
+        throw new Error('channelType is required');
+    const config = args.config || {};
+    const credentials = { ...(args.credentials || {}) };
+    // Resolve credentialsFromEnv against the MCP server's own environment so secrets stay out of the chat.
+    const fromEnv = args.credentialsFromEnv;
+    if (fromEnv) {
+        for (const [key, envName] of Object.entries(fromEnv)) {
+            const value = process.env[envName];
+            if (value === undefined || value === '') {
+                throw new Error(`Environment variable "${envName}" (for credential "${key}") is not set in the MCP server environment. ` +
+                    `Add it to your MCP client config or use the literal "credentials" field.`);
+            }
+            credentials[key] = value;
+        }
+    }
+    return client.post(`${BASE}/connect`, { channelType, config, credentials });
+}
+export async function disconnectChannelHandler(client, args) {
+    const channelId = args.channelId;
+    if (!channelId)
+        throw new Error('channelId is required');
+    return client.delete(`${BASE}/${channelId}`);
+}
+//# sourceMappingURL=channels.js.map

package/dist/tools/channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.js","sourceRoot":"","sources":["../../src/tools/channels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,MAAM,IAAI,GAAG,sBAAsB,CAAA;AAEnC,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,kGAAkG;QAClG,oGAAoG;QACpG,uFAAuF;IACzF,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;CAChD,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACT,yGAAyG;QACzG,wGAAwG;QACxG,4GAA4G;QAC5G,oCAAoC;QACpC,2GAA2G;QAC3G,sBAAsB;QACtB,wGAAwG;QACxG,2GAA2G;QAC3G,mFAAmF;QACnF,6FAA6F;QAC7F,6GAA6G;IAC/G,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC;gBACpF,WAAW,EAAE,qBAAqB;aACnC;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,qEAAqE;gBAClF,oBAAoB,EAAE,IAAI;aAC3B;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,qGAAqG;gBAClH,oBAAoB,EAAE,IAAI;aAC3B;YACD,kBAAkB,EAAE;gBAClB,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,gHAAgH;oBAChH,qCAAqC;gBACvC,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACzC;SACF;QACD,QAAQ,EAAE,CAAC,aAAa,CAAC;KAC1B;CACF,CAAA;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,2GAA2G;QAC3G,+BAA+B;IACjC,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE,EAAE;QAClG,QAAQ,EAAE,CAAC,WAAW,CAAC;KACxB;CACF,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAuB;IAC/D,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAuB,EACvB,IAA6B;IAE7B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAqB,CAAA;IAC9C,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAE5D,MAAM,MAAM,GAAI,IAAI,CAAC,MAAkC,IAAI,EAAE,CAAA;IAC7D,MAAM,WAAW,GAA4B,EAAE,GAAG,CAAE,IAAI,CAAC,WAAuC,IAAI,EAAE,CAAC,EAAE,CAAA;IAEzG,uGAAuG;IACvG,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAwD,CAAA;IAC7E,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAClC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,sBAAsB,GAAG,+CAA+C;oBACtG,0EAA0E,CAC7E,CAAA;YACH,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAuB,EACvB,IAA6B;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAmB,CAAA;IAC1C,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAA;AAC9C,CAAC"}

package/dist/tools/index.js

@@ -44,6 +44,8 @@ import { LIST_AGENT_VERSIONS_TOOL, listAgentVersionsHandler } from './list_agent
 import { RESTORE_AGENT_VERSION_TOOL, restoreAgentVersionHandler } from './restore_agent_version.js';
 import { LIST_AGENT_FAMILIES_TOOL, listAgentFamiliesHandler, GET_AGENT_FAMILY_TOOL, getAgentFamilyHandler, CREATE_AGENT_FAMILY_TOOL, createAgentFamilyHandler, UPDATE_FAMILY_BASE_TOOL, updateFamilyBaseHandler, ADD_FAMILY_VARIANT_TOOL, addFamilyVariantHandler, UPDATE_FAMILY_VARIANT_TOOL, updateFamilyVariantHandler, REMOVE_FAMILY_VARIANT_TOOL, removeFamilyVariantHandler, PUBLISH_AGENT_FAMILY_TOOL, publishAgentFamilyHandler, DELETE_AGENT_FAMILY_TOOL, deleteAgentFamilyHandler, EXPORT_AGENT_FAMILY_TOOL, exportAgentFamilyHandler, IMPORT_AGENT_FAMILY_TOOL, importAgentFamilyHandler } from './agent_families.js';
 import { AUDIT_AGENT_FAMILY_TOOL, auditAgentFamilyHandler } from './audit_agent_family.js';
+import { LIST_CHANNELS_TOOL, listChannelsHandler, CONNECT_CHANNEL_TOOL, connectChannelHandler, DISCONNECT_CHANNEL_TOOL, disconnectChannelHandler } from './channels.js';
+import { LIST_INTEGRATIONS_TOOL, listIntegrationsHandler, CONFIGURE_INTEGRATION_TOOL, configureIntegrationHandler, REMOVE_INTEGRATION_TOOL, removeIntegrationHandler } from './integrations.js';
 export const ALL_TOOLS = [
     LIST_AGENTS_TOOL,
     GET_AGENT_TOOL,
@@ -87,6 +89,12 @@ export const ALL_TOOLS = [
     EXPORT_AGENT_FAMILY_TOOL,
     IMPORT_AGENT_FAMILY_TOOL,
     AUDIT_AGENT_FAMILY_TOOL,
+    LIST_CHANNELS_TOOL,
+    CONNECT_CHANNEL_TOOL,
+    DISCONNECT_CHANNEL_TOOL,
+    LIST_INTEGRATIONS_TOOL,
+    CONFIGURE_INTEGRATION_TOOL,
+    REMOVE_INTEGRATION_TOOL,
 ];
 export const TOOL_HANDLERS = {
     list_agents: listAgentsHandler,
@@ -131,5 +139,11 @@ export const TOOL_HANDLERS = {
     export_agent_family: exportAgentFamilyHandler,
     import_agent_family: importAgentFamilyHandler,
     audit_agent_family: auditAgentFamilyHandler,
+    list_channels: (client) => listChannelsHandler(client),
+    connect_channel: connectChannelHandler,
+    disconnect_channel: disconnectChannelHandler,
+    list_integrations: (client) => listIntegrationsHandler(client),
+    configure_integration: configureIntegrationHandler,
+    remove_integration: removeIntegrationHandler,
 };
 //# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,8BAA8B;AAC9B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AACpF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAC7E,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAChG,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AACvF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AACvF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/E,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAChG,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzE,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AAC7F,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAChG,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAA;AAC9F,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAEhG,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAC3F,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AACvF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAC1F,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AACjF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AACrF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AACtH,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAC1F,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AAC7F,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AACnG,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAC1F,MAAM,CAAC,MAAM,SAAS,GAAW;IAC/B,gBAAgB;IAChB,cAAc;IACd,qBAAqB;IACrB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,yBAAyB;IACzB,kBAAkB;IAClB,kBAAkB;IAClB,sBAAsB;IACtB,sBAAsB;IACtB,mBAAmB;IACnB,yBAAyB;IACzB,kBAAkB;IAClB,iBAAiB;IACjB,wBAAwB;IACxB,yBAAyB;IACzB,wBAAwB;IACxB,yBAAyB;IACzB,oBAAoB;IACpB,sBAAsB;IACtB,uBAAuB;IACvB,oBAAoB;IACpB,sBAAsB;IACtB,iBAAiB;IACjB,kBAAkB;IAClB,uBAAuB;IACvB,wBAAwB;IACxB,0BAA0B;IAC1B,wBAAwB;IACxB,qBAAqB;IACrB,wBAAwB;IACxB,uBAAuB;IACvB,uBAAuB;IACvB,0BAA0B;IAC1B,0BAA0B;IAC1B,yBAAyB;IACzB,wBAAwB;IACxB,wBAAwB;IACxB,wBAAwB;IACxB,uBAAuB;CACxB,CAAA;AAID,MAAM,CAAC,MAAM,aAAa,GAAgC;IACxD,WAAW,EAAE,iBAAiB;IAC9B,SAAS,EAAE,eAAe;IAC1B,gBAAgB,EAAE,qBAAqB;IACvC,YAAY,EAAE,kBAAkB;IAChC,YAAY,EAAE,kBAAkB;IAChC,YAAY,EAAE,kBAAkB;IAChC,oBAAoB,EAAE,gBAAgB;IACtC,oBAAoB,EAAE,yBAAyB;IAC/C,aAAa,EAAE,mBAAmB;IAClC,aAAa,EAAE,mBAAmB;IAClC,iBAAiB,EAAE,sBAAsB;IACzC,iBAAiB,EAAE,sBAAsB;IACzC,cAAc,EAAE,oBAAoB;IACpC,oBAAoB,EAAE,yBAAyB;IAC/C,aAAa,EAAE,mBAAkC;IACjD,YAAY,EAAE,kBAAkB;IAChC,wBAAwB,EAAE,wBAAwB;IAClD,yBAAyB,EAAE,yBAAyB;IACpD,4BAA4B,EAAE,yBAAyB;IACvD,oBAAoB,EAAE,yBAAyB;IAC/C,oBAAoB,EAAE,yBAAyB;IAC/C,iBAAiB,EAAE,sBAAsB;IACzC,kBAAkB,EAAE,uBAAuB;IAC3C,eAAe,EAAE,oBAAoB;IACrC,iBAAiB,EAAE,sBAAsB;IACzC,YAAY,EAAE,kBAAkB;IAChC,aAAa,EAAE,mBAAmB;IAClC,kBAAkB,EAAE,uBAAuB;IAC3C,mBAAmB,EAAE,wBAAwB;IAC7C,qBAAqB,EAAE,0BAA0B;IACjD,mBAAmB,EAAE,wBAAwB;IAC7C,gBAAgB,EAAE,qBAAqB;IACvC,mBAAmB,EAAE,wBAAwB;IAC7C,kBAAkB,EAAE,uBAAuB;IAC3C,kBAAkB,EAAE,uBAAuB;IAC3C,qBAAqB,EAAE,0BAA0B;IACjD,qBAAqB,EAAE,0BAA0B;IACjD,oBAAoB,EAAE,yBAAyB;IAC/C,mBAAmB,EAAE,wBAAwB;IAC7C,mBAAmB,EAAE,wBAAwB;IAC7C,mBAAmB,EAAE,wBAAwB;IAC7C,kBAAkB,EAAE,uBAAuB;CAC5C,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,8BAA8B;AAC9B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AACpF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAC7E,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAChG,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AACvF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AACvF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/E,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAChG,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzE,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AAC7F,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAChG,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAA;AAC9F,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAEhG,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAC3F,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AACvF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAC1F,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AACjF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AACrF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AACtH,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAC1F,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AAC7F,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AACnG,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAC1F,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,mBAAmB,CAAA;AAC1B,MAAM,CAAC,MAAM,SAAS,GAAW;IAC/B,gBAAgB;IAChB,cAAc;IACd,qBAAqB;IACrB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,yBAAyB;IACzB,kBAAkB;IAClB,kBAAkB;IAClB,sBAAsB;IACtB,sBAAsB;IACtB,mBAAmB;IACnB,yBAAyB;IACzB,kBAAkB;IAClB,iBAAiB;IACjB,wBAAwB;IACxB,yBAAyB;IACzB,wBAAwB;IACxB,yBAAyB;IACzB,oBAAoB;IACpB,sBAAsB;IACtB,uBAAuB;IACvB,oBAAoB;IACpB,sBAAsB;IACtB,iBAAiB;IACjB,kBAAkB;IAClB,uBAAuB;IACvB,wBAAwB;IACxB,0BAA0B;IAC1B,wBAAwB;IACxB,qBAAqB;IACrB,wBAAwB;IACxB,uBAAuB;IACvB,uBAAuB;IACvB,0BAA0B;IAC1B,0BAA0B;IAC1B,yBAAyB;IACzB,wBAAwB;IACxB,wBAAwB;IACxB,wBAAwB;IACxB,uBAAuB;IACvB,kBAAkB;IAClB,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,0BAA0B;IAC1B,uBAAuB;CACxB,CAAA;AAID,MAAM,CAAC,MAAM,aAAa,GAAgC;IACxD,WAAW,EAAE,iBAAiB;IAC9B,SAAS,EAAE,eAAe;IAC1B,gBAAgB,EAAE,qBAAqB;IACvC,YAAY,EAAE,kBAAkB;IAChC,YAAY,EAAE,kBAAkB;IAChC,YAAY,EAAE,kBAAkB;IAChC,oBAAoB,EAAE,gBAAgB;IACtC,oBAAoB,EAAE,yBAAyB;IAC/C,aAAa,EAAE,mBAAmB;IAClC,aAAa,EAAE,mBAAmB;IAClC,iBAAiB,EAAE,sBAAsB;IACzC,iBAAiB,EAAE,sBAAsB;IACzC,cAAc,EAAE,oBAAoB;IACpC,oBAAoB,EAAE,yBAAyB;IAC/C,aAAa,EAAE,mBAAkC;IACjD,YAAY,EAAE,kBAAkB;IAChC,wBAAwB,EAAE,wBAAwB;IAClD,yBAAyB,EAAE,yBAAyB;IACpD,4BAA4B,EAAE,yBAAyB;IACvD,oBAAoB,EAAE,yBAAyB;IAC/C,oBAAoB,EAAE,yBAAyB;IAC/C,iBAAiB,EAAE,sBAAsB;IACzC,kBAAkB,EAAE,uBAAuB;IAC3C,eAAe,EAAE,oBAAoB;IACrC,iBAAiB,EAAE,sBAAsB;IACzC,YAAY,EAAE,kBAAkB;IAChC,aAAa,EAAE,mBAAmB;IAClC,kBAAkB,EAAE,uBAAuB;IAC3C,mBAAmB,EAAE,wBAAwB;IAC7C,qBAAqB,EAAE,0BAA0B;IACjD,mBAAmB,EAAE,wBAAwB;IAC7C,gBAAgB,EAAE,qBAAqB;IACvC,mBAAmB,EAAE,wBAAwB;IAC7C,kBAAkB,EAAE,uBAAuB;IAC3C,kBAAkB,EAAE,uBAAuB;IAC3C,qBAAqB,EAAE,0BAA0B;IACjD,qBAAqB,EAAE,0BAA0B;IACjD,oBAAoB,EAAE,yBAAyB;IAC/C,mBAAmB,EAAE,wBAAwB;IAC7C,mBAAmB,EAAE,wBAAwB;IAC7C,mBAAmB,EAAE,wBAAwB;IAC7C,kBAAkB,EAAE,uBAAuB;IAC3C,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;IACtD,eAAe,EAAE,qBAAqB;IACtC,kBAAkB,EAAE,wBAAwB;IAC5C,iBAAiB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC;IAC9D,qBAAqB,EAAE,2BAA2B;IAClD,kBAAkB,EAAE,wBAAwB;CAC7C,CAAA"}

package/dist/tools/integrations.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Integration tools — install/list/remove the tenant's external integrations (Shopify, PaseoLibre,
+ * Google Calendar, email SMTP, etc.) with their secret config.
+ *
+ * SECURITY MODEL (same as channels):
+ *  - Secret config values are WRITE-ONLY: the server validates + stores them and NEVER returns
+ *    them. `list_integrations` reports only `configKeys` (which keys are set), never values.
+ *  - `configure_integration` accepts the secret two ways:
+ *      1. `config` — literal values (simplest; the secret travels through the chat/LLM).
+ *      2. `configFromEnv` — a map of `{ configKey: ENV_VAR_NAME }`; the MCP server reads the value
+ *         from its OWN environment so the secret never appears in the conversation. PREFER this.
+ *  - Configure/remove require role owner or admin.
+ *
+ * All calls go through the /api/v1/mcp/integrations namespace (RULE 7).
+ *
+ * NOTE (RULE 0): these are agent/tenant integrations. Recruiting-owned config (e.g. recruiting
+ * email senders) is NOT managed here — that belongs to the Recruiting copiloto.
+ */
+import type { Tool } from '@modelcontextprotocol/sdk/types.js';
+import type { BotuyoApiClient } from '../client.js';
+export declare const LIST_INTEGRATIONS_TOOL: Tool;
+export declare const CONFIGURE_INTEGRATION_TOOL: Tool;
+export declare const REMOVE_INTEGRATION_TOOL: Tool;
+export declare function listIntegrationsHandler(client: BotuyoApiClient): Promise<unknown>;
+export declare function configureIntegrationHandler(client: BotuyoApiClient, args: Record<string, unknown>): Promise<unknown>;
+export declare function removeIntegrationHandler(client: BotuyoApiClient, args: Record<string, unknown>): Promise<unknown>;

package/dist/tools/integrations.js

@@ -0,0 +1,91 @@
+/**
+ * Integration tools — install/list/remove the tenant's external integrations (Shopify, PaseoLibre,
+ * Google Calendar, email SMTP, etc.) with their secret config.
+ *
+ * SECURITY MODEL (same as channels):
+ *  - Secret config values are WRITE-ONLY: the server validates + stores them and NEVER returns
+ *    them. `list_integrations` reports only `configKeys` (which keys are set), never values.
+ *  - `configure_integration` accepts the secret two ways:
+ *      1. `config` — literal values (simplest; the secret travels through the chat/LLM).
+ *      2. `configFromEnv` — a map of `{ configKey: ENV_VAR_NAME }`; the MCP server reads the value
+ *         from its OWN environment so the secret never appears in the conversation. PREFER this.
+ *  - Configure/remove require role owner or admin.
+ *
+ * All calls go through the /api/v1/mcp/integrations namespace (RULE 7).
+ *
+ * NOTE (RULE 0): these are agent/tenant integrations. Recruiting-owned config (e.g. recruiting
+ * email senders) is NOT managed here — that belongs to the Recruiting copiloto.
+ */
+const BASE = '/api/v1/mcp/integrations';
+export const LIST_INTEGRATIONS_TOOL = {
+    name: 'list_integrations',
+    description: 'List the integration catalog (available) and the tenant\'s installed integrations with their ' +
+        'status. SECRETS ARE NEVER RETURNED — each installed integration reports only `configKeys` ' +
+        '(which config keys are set), never their values. Available to any authenticated role.',
+    inputSchema: { type: 'object', properties: {} }
+};
+export const CONFIGURE_INTEGRATION_TOOL = {
+    name: 'configure_integration',
+    description: 'Install or update a tenant integration with its config/secret (API key, tokens, SMTP creds, etc.). ' +
+        'Requires role owner or admin. The server validates the credentials against the provider and stores ' +
+        'them; secrets are WRITE-ONLY and never echoed back — DO NOT repeat them to the user. ' +
+        '\n\nTwo ways to pass secret values:\n' +
+        '• `config`: literal values, e.g. { "apiKey": "sk-..." }. Simplest, but the secret passes through this chat.\n' +
+        '• `configFromEnv` (RECOMMENDED for real secrets): a map of config key → environment variable name, ' +
+        'e.g. { "apiKey": "MY_SHOPIFY_KEY" }. The MCP server reads the value from its own environment so the ' +
+        'secret NEVER appears in the chat. Both sources are merged. Use `list_integrations` to see available ids.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            integrationId: { type: 'string', description: 'Integration id from the catalog (e.g. "shopify", "email-smtp").' },
+            config: {
+                type: 'object',
+                description: 'Config/secret values as literals (e.g. { "apiUrl": "...", "apiKey": "..." }).',
+                additionalProperties: true
+            },
+            configFromEnv: {
+                type: 'object',
+                description: 'Map of config key → env var name read from the MCP server environment (keeps the secret out of the chat).',
+                additionalProperties: { type: 'string' }
+            }
+        },
+        required: ['integrationId']
+    }
+};
+export const REMOVE_INTEGRATION_TOOL = {
+    name: 'remove_integration',
+    description: 'Uninstall a tenant integration by its id (from list_integrations). Requires role owner or admin.',
+    inputSchema: {
+        type: 'object',
+        properties: { integrationId: { type: 'string', description: 'The integration id to remove.' } },
+        required: ['integrationId']
+    }
+};
+export async function listIntegrationsHandler(client) {
+    return client.get(BASE);
+}
+export async function configureIntegrationHandler(client, args) {
+    const integrationId = args.integrationId;
+    if (!integrationId)
+        throw new Error('integrationId is required');
+    const config = { ...(args.config || {}) };
+    const fromEnv = args.configFromEnv;
+    if (fromEnv) {
+        for (const [key, envName] of Object.entries(fromEnv)) {
+            const value = process.env[envName];
+            if (value === undefined || value === '') {
+                throw new Error(`Environment variable "${envName}" (for config "${key}") is not set in the MCP server environment. ` +
+                    `Add it to your MCP client config or use the literal "config" field.`);
+            }
+            config[key] = value;
+        }
+    }
+    return client.post(`${BASE}/configure`, { integrationId, config });
+}
+export async function removeIntegrationHandler(client, args) {
+    const integrationId = args.integrationId;
+    if (!integrationId)
+        throw new Error('integrationId is required');
+    return client.delete(`${BASE}/${integrationId}`);
+}
+//# sourceMappingURL=integrations.js.map

package/dist/tools/integrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.js","sourceRoot":"","sources":["../../src/tools/integrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,MAAM,IAAI,GAAG,0BAA0B,CAAA;AAEvC,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,+FAA+F;QAC/F,4FAA4F;QAC5F,uFAAuF;IACzF,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;CAChD,CAAA;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAS;IAC9C,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,qGAAqG;QACrG,qGAAqG;QACrG,uFAAuF;QACvF,uCAAuC;QACvC,+GAA+G;QAC/G,qGAAqG;QACrG,sGAAsG;QACtG,0GAA0G;IAC5G,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iEAAiE,EAAE;YACjH,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+EAA+E;gBAC5F,oBAAoB,EAAE,IAAI;aAC3B;YACD,aAAa,EAAE;gBACb,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,2GAA2G;gBAC7G,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACzC;SACF;QACD,QAAQ,EAAE,CAAC,eAAe,CAAC;KAC5B;CACF,CAAA;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,kGAAkG;IACpG,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE,EAAE;QAC/F,QAAQ,EAAE,CAAC,eAAe,CAAC;KAC5B;CACF,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAuB;IACnE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAuB,EACvB,IAA6B;IAE7B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAuB,CAAA;IAClD,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAEhE,MAAM,MAAM,GAA4B,EAAE,GAAG,CAAE,IAAI,CAAC,MAAkC,IAAI,EAAE,CAAC,EAAE,CAAA;IAE/F,MAAM,OAAO,GAAG,IAAI,CAAC,aAAmD,CAAA;IACxE,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAClC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,kBAAkB,GAAG,+CAA+C;oBAClG,qEAAqE,CACxE,CAAA;YACH,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACrB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,YAAY,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAuB,EACvB,IAA6B;IAE7B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAuB,CAAA;IAClD,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAChE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,aAAa,EAAE,CAAC,CAAA;AAClD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botuyo/mcp",
-  "version": "0.7.6",
+  "version": "0.9.0",
   "description": "BotUyo MCP Server — create and manage AI agents via Model Context Protocol",
   "keywords": [
     "mcp",