@burdenoff/mcp-libs 2026.522.1 → 2026.525.1

package/dist/modules/security/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/modules/security/operations.ts","../../../src/modules/security/tools.ts","../../../src/modules/security/index.ts"],"names":["data"],"mappings":";;;;AAAO,IAAM,UAAA,GAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AASnB,IAAM,SAAA,GAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQlB,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQrB,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA,CAAA;AAMrB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA,CAAA;AAMtB,IAAM,WAAA,GAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AASpB,IAAM,UAAA,GAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQnB,IAAM,cAAA,GAAiB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQvB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQtB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQtB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA,CAAA;AAMtB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;;;AClE7B,IAAM,iBAAiB,CAAA,CAAE,IAAA,CAAK,CAAC,WAAA,EAAa,QAAA,EAAU,MAAM,CAAC,CAAA;AAC7D,IAAM,kBAAkB,CAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,QAAA,EAAU,UAAU,CAAC,CAAA;AAC/D,IAAM,cAAA,GAAiB,EAAE,IAAA,CAAK,CAAC,WAAW,UAAA,EAAY,aAAA,EAAe,OAAA,EAAS,OAAO,CAAC,CAAA;AACtF,IAAM,mBAAmB,CAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,SAAA,EAAW,SAAS,CAAC,CAAA;AA2BhE,SAAS,qBAAqB,GAAA,EAAiD;AAC7E,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,IAAA,CAAK,IAAA,EAAK;AAC3B,EAAA,IAAI,CAAC,IAAA,EAAM,WAAA,EAAa,OAAO,IAAA;AAC/B,EAAA,OAAO,EAAE,WAAA,EAAa,IAAA,CAAK,WAAA,EAAY;AACzC;AAEO,SAAS,qBAAA,CACd,MAAA,EACA,GAAA,EACA,KAAA,EACM;AAEN,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,sBAAsB,CAAC,CAAA;AAAA,IAC1D;AAAA,MACE,KAAA,EAAO,aAAA;AAAA,MACP,WAAA,EAAa,4EAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,KAAA,EAAO,cAAA,CAAe,QAAA,EAAS,CAAE,SAAS,uBAAuB,CAAA;AAAA,QACjE,MAAA,EAAQ,eAAA,CAAgB,QAAA,EAAS,CAAE,SAAS,kBAAkB,CAAA;AAAA,QAC9D,QAAQ,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,kBAAkB,CAAA;AAAA,QACzD,OAAO,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,wBAAwB,CAAA;AAAA,QAC9D,QAAQ,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,cAAc;AAAA;AACvD,KACF;AAAA,IACA,OAAO,EAAE,KAAA,EAAO,QAAQ,MAAA,EAAQ,KAAA,EAAO,QAAO,KAAM;AAClD,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,qBAAqB,GAAG,CAAA;AAC7C,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,MAAA,GAAkC,EAAE,OAAA,EAAS,YAAA,EAAa;AAChE,QAAA,IAAI,KAAA,KAAU,KAAA,CAAA,EAAW,MAAA,CAAO,KAAA,GAAQ,KAAA;AACxC,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,MAAA,CAAO,MAAA,GAAS,MAAA;AAC1C,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,MAAA,CAAO,MAAA,GAAS,MAAA;AAE1C,QAAA,MAAM,aAAsC,EAAC;AAC7C,QAAA,IAAI,KAAA,KAAU,KAAA,CAAA,EAAW,UAAA,CAAW,KAAA,GAAQ,KAAA;AAC5C,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,UAAA,CAAW,MAAA,GAAS,MAAA;AAE9C,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAElC,UAAA,EAAY;AAAA,UACb,MAAA;AAAA,UACA,YAAY,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA,GAAS,IAAI,UAAA,GAAa,KAAA;AAAA,SAC/D,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,SAAS,CAAA;AAAA,MAClC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,6BAAA,EAA+B,EAAE,OAAO,CAAA;AACzD,QAAA,OAAO,WAAA;AAAA,UACL,0BAA0B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAClF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,qBAAqB,CAAC,CAAA;AAAA,IACzD;AAAA,MACE,KAAA,EAAO,WAAA;AAAA,MACP,WAAA,EAAa,oBAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,UAAU;AAAA;AACpC,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAuC,SAAA,EAAW;AAAA,UACrF;AAAA,SACD,CAAA;AACD,QAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AAClB,UAAA,OAAO,WAAA,CAAY,CAAA,MAAA,EAAS,EAAE,CAAA,UAAA,CAAY,CAAA;AAAA,QAC5C;AACA,QAAA,OAAO,UAAA,CAAW,KAAK,QAAQ,CAAA;AAAA,MACjC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,4BAAA,EAA8B,EAAE,OAAO,CAAA;AACxD,QAAA,OAAO,WAAA;AAAA,UACL,wBAAwB,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAChF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,wBAAwB,CAAC,CAAA;AAAA,IAC5D;AAAA,MACE,KAAA,EAAO,cAAA;AAAA,MACP,WAAA,EAAa,qDAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,YAAY,CAAA;AAAA,QACtC,aAAa,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,mBAAmB,CAAA;AAAA,QAC/D,KAAA,EAAO,cAAA,CAAe,QAAA,EAAS,CAAE,SAAS,kCAAkC,CAAA;AAAA,QAC5E,SAAS,CAAA,CACN,MAAA,GACA,QAAA,EAAS,CACT,SAAS,qEAAqE,CAAA;AAAA,QACjF,kBAAkB,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,yCAAyC;AAAA;AAC5F,KACF;AAAA,IACA,OAAO,EAAE,IAAA,EAAM,aAAa,KAAA,EAAO,OAAA,EAAS,kBAAiB,KAAM;AACjE,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,qBAAqB,GAAG,CAAA;AAC7C,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,gBAAgB,KAAA,IAAS,WAAA;AAC/B,QAAA,MAAM,KAAA,GAAiC;AAAA,UACrC,OAAA,EAAS,YAAA;AAAA,UACT,IAAA;AAAA,UACA,KAAA,EAAO,aAAA;AAAA,UACP,OAAA,EAAS,WAAW,YAAA,CAAa;AAAA,SACnC;AACA,QAAA,IAAI,WAAA,KAAgB,KAAA,CAAA,EAAW,KAAA,CAAM,WAAA,GAAc,WAAA;AACnD,QAAA,IAAI,gBAAA,KAAqB,KAAA,CAAA,EAAW,KAAA,CAAM,gBAAA,GAAmB,gBAAA;AAE7D,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAmC,YAAA,EAAc;AAAA,UACpF;AAAA,SACD,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,WAAW,CAAA;AAAA,MACpC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,+BAAA,EAAiC,EAAE,OAAO,CAAA;AAC3D,QAAA,OAAO,WAAA;AAAA,UACL,2BAA2B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,wBAAwB,CAAC,CAAA;AAAA,IAC5D;AAAA,MACE,KAAA,EAAO,cAAA;AAAA,MACP,WAAA,EACE,mFAAA;AAAA,MACF,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,UAAU,CAAA;AAAA,QAClC,SAAS,CAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,gCAAgC;AAAA;AAC3E,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAI,OAAA,EAAQ,KAAM;AACzB,MAAA,IAAI;AACF,QAAA,IAAI,YAAY,IAAA,EAAM;AACpB,UAAA,MAAMA,KAAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,UAAU,OAAA,CAElC,aAAA,EAAe,EAAE,EAAA,EAAI,CAAA;AACxB,UAAA,OAAO,WAAW,EAAE,QAAA,EAAU,MAAM,KAAA,EAAOA,KAAAA,CAAK,cAAc,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAkC,YAAA,EAAc;AAAA,UACnF;AAAA,SACD,CAAA;AACD,QAAA,OAAO,WAAW,EAAE,OAAA,EAAS,KAAK,WAAA,EAAa,OAAA,EAAS,IAAI,CAAA;AAAA,MAC9D,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,+BAAA,EAAiC,EAAE,OAAO,CAAA;AAC3D,QAAA,OAAO,WAAA;AAAA,UACL,2BAA2B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,uBAAuB,CAAC,CAAA;AAAA,IAC3D;AAAA,MACE,KAAA,EAAO,cAAA;AAAA,MACP,WAAA,EAAa,+DAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,UAAU,CAAA;AAAA,QACvC,IAAA,EAAM,cAAA,CAAe,QAAA,EAAS,CAAE,SAAS,uBAAuB,CAAA;AAAA,QAChE,QAAQ,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,kBAAkB,CAAA;AAAA,QACzD,OAAO,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,yBAAyB,CAAA;AAAA,QAC/D,QAAQ,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,cAAc;AAAA;AACvD,KACF;AAAA,IACA,OAAO,EAAE,OAAA,EAAS,MAAM,MAAA,EAAQ,KAAA,EAAO,QAAO,KAAM;AAClD,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,qBAAqB,GAAG,CAAA;AAC7C,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,MAAA,GAAkC,EAAE,OAAA,EAAS,YAAA,EAAa;AAChE,QAAA,IAAI,IAAA,KAAS,KAAA,CAAA,EAAW,MAAA,CAAO,IAAA,GAAO,IAAA;AACtC,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,MAAA,CAAO,MAAA,GAAS,MAAA;AAE1C,QAAA,MAAM,aAAsC,EAAC;AAC7C,QAAA,IAAI,KAAA,KAAU,KAAA,CAAA,EAAW,UAAA,CAAW,KAAA,GAAQ,KAAA;AAC5C,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,UAAA,CAAW,MAAA,GAAS,MAAA;AAE9C,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAElC,WAAA,EAAa;AAAA,UACd,OAAA;AAAA,UACA,MAAA;AAAA,UACA,YAAY,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA,GAAS,IAAI,UAAA,GAAa,KAAA;AAAA,SAC/D,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,UAAU,CAAA;AAAA,MACnC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,8BAAA,EAAgC,EAAE,OAAO,CAAA;AAC1D,QAAA,OAAO,WAAA;AAAA,UACL,2BAA2B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,sBAAsB,CAAC,CAAA;AAAA,IAC1D;AAAA,MACE,KAAA,EAAO,qBAAA;AAAA,MACP,WAAA,EACE,kGAAA;AAAA,MACF,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,WAAW;AAAA;AACrC,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAyC,UAAA,EAAY;AAAA,UACxF;AAAA,SACD,CAAA;AACD,QAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,UAAA,OAAO,WAAA,CAAY,CAAA,OAAA,EAAU,EAAE,CAAA,UAAA,CAAY,CAAA;AAAA,QAC7C;AACA,QAAA,OAAO,UAAA,CAAW,KAAK,SAAS,CAAA;AAAA,MAClC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,6BAAA,EAA+B,EAAE,OAAO,CAAA;AACzD,QAAA,OAAO,WAAA;AAAA,UACL,yBAAyB,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACjF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,yBAAyB,CAAC,CAAA;AAAA,IAC7D;AAAA,MACE,KAAA,EAAO,qBAAA;AAAA,MACP,WAAA,EACE,iIAAA;AAAA,MACF,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,WAAW;AAAA;AACrC,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,UAAU,OAAA,CAElC,cAAA,EAAgB,EAAE,EAAA,EAAI,CAAA;AACzB,QAAA,OAAO,UAAA,CAAW,KAAK,aAAa,CAAA;AAAA,MACtC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,gCAAA,EAAkC,EAAE,OAAO,CAAA;AAC5D,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,sBAAsB,CAAC,CAAA;AAAA,IAC1D;AAAA,MACE,KAAA,EAAO,eAAA;AAAA,MACP,WAAA,EAAa,qEAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,UAAU,CAAA;AAAA,QACvC,GAAA,EAAK,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,sCAAsC,CAAA;AAAA,QAC/D,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,4BAA4B,CAAA;AAAA,QACtD,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,8CAA8C,CAAA;AAAA,QACzE,aAAa,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,oBAAoB,CAAA;AAAA,QAChE,IAAA,EAAM,cAAA,CAAe,QAAA,EAAS,CAAE,SAAS,8BAA8B,CAAA;AAAA,QACvE,aAAa,CAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,mBAAmB,CAAA;AAAA,QAChE,WAAW,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,8BAA8B;AAAA;AAC1E,KACF;AAAA,IACA,OAAO,EAAE,OAAA,EAAS,GAAA,EAAK,IAAA,EAAM,OAAO,WAAA,EAAa,IAAA,EAAM,WAAA,EAAa,SAAA,EAAU,KAAM;AAClF,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,qBAAqB,GAAG,CAAA;AAC7C,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,KAAA,GAAiC;AAAA,UACrC,OAAA,EAAS,YAAA;AAAA,UACT,OAAA;AAAA,UACA,GAAA;AAAA,UACA,IAAA;AAAA,UACA,KAAA;AAAA,UACA,MAAM,IAAA,IAAQ,OAAA;AAAA,UACd,aAAa,WAAA,KAAgB;AAAA,SAC/B;AACA,QAAA,IAAI,WAAA,KAAgB,KAAA,CAAA,EAAW,KAAA,CAAM,WAAA,GAAc,WAAA;AACnD,QAAA,IAAI,SAAA,KAAc,KAAA,CAAA,EAAW,KAAA,CAAM,SAAA,GAAY,SAAA;AAE/C,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAqC,aAAA,EAAe;AAAA,UACvF;AAAA,SACD,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,YAAY,CAAA;AAAA,MACrC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,6BAAA,EAA+B,EAAE,OAAO,CAAA;AACzD,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,yBAAyB,CAAC,CAAA;AAAA,IAC7D;AAAA,MACE,KAAA,EAAO,wBAAA;AAAA,MACP,WAAA,EACE,uGAAA;AAAA,MACF,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,WAAW,CAAA;AAAA,QACnC,MAAM,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,cAAc,CAAA;AAAA,QACnD,aAAa,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qBAAqB,CAAA;AAAA,QACjE,MAAA,EAAQ,gBAAA,CAAiB,QAAA,EAAS,CAAE,SAAS,gBAAgB;AAAA;AAC/D,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,WAAA,EAAa,QAAO,KAAM;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,qBAAqB,GAAG,CAAA;AAC7C,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,KAAA,GAAiC,EAAE,OAAA,EAAS,YAAA,EAAa;AAC/D,QAAA,IAAI,IAAA,KAAS,KAAA,CAAA,EAAW,KAAA,CAAM,IAAA,GAAO,IAAA;AACrC,QAAA,IAAI,WAAA,KAAgB,KAAA,CAAA,EAAW,KAAA,CAAM,WAAA,GAAc,WAAA;AACnD,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,KAAA,CAAM,MAAA,GAAS,MAAA;AACzC,QAAA,IAAI,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,WAAW,CAAA,EAAG;AACnC,UAAA,OAAO,YAAY,sBAAsB,CAAA;AAAA,QAC3C;AACA,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAqC,aAAA,EAAe;AAAA,UACvF,EAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,YAAY,CAAA;AAAA,MACrC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,gCAAA,EAAkC,EAAE,OAAO,CAAA;AAC5D,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,yBAAyB,CAAC,CAAA;AAAA,IAC7D;AAAA,MACE,KAAA,EAAO,qBAAA;AAAA,MACP,WAAA,EAAa,oDAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,WAAW,CAAA;AAAA,QACnC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,kBAAkB;AAAA;AAClD,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAI,QAAA,EAAS,KAAM;AAC1B,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAqC,aAAA,EAAe;AAAA,UACvF,EAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,YAAY,CAAA;AAAA,MACrC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,gCAAA,EAAkC,EAAE,OAAO,CAAA;AAC5D,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,yBAAyB,CAAC,CAAA;AAAA,IAC7D;AAAA,MACE,KAAA,EAAO,eAAA;AAAA,MACP,WAAA,EAAa,wBAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,WAAW;AAAA;AACrC,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAmC,aAAA,EAAe;AAAA,UACrF;AAAA,SACD,CAAA;AACD,QAAA,OAAO,WAAW,EAAE,OAAA,EAAS,KAAK,YAAA,EAAc,QAAA,EAAU,IAAI,CAAA;AAAA,MAChE,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,gCAAA,EAAkC,EAAE,OAAO,CAAA;AAC5D,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AACF;;;ACtbA,IAAM,cAAA,GAA4B;AAAA,EAChC,EAAA,EAAI,UAAA;AAAA,EACJ,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAa,UAAA;AAAA,EACb,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,EAClB,YAAA,EAAc,EAAE,KAAA,EAAO,EAAC,EAAE;AAAA,EAE1B,QAAA,CAAS,QAAmB,GAAA,EAAqC;AAC/D,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,MAAM,KAAA,GAAQ,CAAC,CAAA,KAAsB;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,CAAA;AACZ,MAAA,OAAO,CAAA;AAAA,IACT,CAAA;AAEA,IAAA,qBAAA,CAAsB,MAAA,EAAQ,KAAK,KAAK,CAAA;AAExC,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,EAAC,EAAG,OAAA,EAAS,EAAC,EAAE;AAAA,EAC7C;AACF,CAAA;AAEA,IAAO,gBAAA,GAAQ","file":"index.js","sourcesContent":["export const GET_VAULTS = `\n  query GetVaults($filter: VaultFilterInput, $pagination: SecurityPaginationInput) {\n    getVaults(filter: $filter, pagination: $pagination) {\n      items { id name description scope status createdAt }\n      total hasMore\n    }\n  }\n`;\n\nexport const GET_VAULT = `\n  query GetVault($id: ID!) {\n    getVault(id: $id) {\n      id name description scope scopeId status lockAfterMinutes createdAt updatedAt\n    }\n  }\n`;\n\nexport const CREATE_VAULT = `\n  mutation CreateVault($input: CreateVaultInput!) {\n    createVault(input: $input) {\n      id name scope scopeId status\n    }\n  }\n`;\n\nexport const DELETE_VAULT = `\n  mutation DeleteVault($id: ID!) {\n    deleteVault(id: $id)\n  }\n`;\n\nexport const ARCHIVE_VAULT = `\n  mutation ArchiveVault($id: ID!) {\n    archiveVault(id: $id) { id status }\n  }\n`;\n\nexport const GET_SECRETS = `\n  query GetSecrets($vaultId: ID!, $filter: SecretFilterInput, $pagination: SecurityPaginationInput) {\n    getSecrets(vaultId: $vaultId, filter: $filter, pagination: $pagination) {\n      items { id key name description type status isEphemeral createdAt }\n      total hasMore\n    }\n  }\n`;\n\nexport const GET_SECRET = `\n  query GetSecret($id: ID!) {\n    getSecret(id: $id) {\n      id key name description type status isEphemeral expiresAt createdAt updatedAt\n    }\n  }\n`;\n\nexport const DECRYPT_SECRET = `\n  query DecryptSecret($id: ID!) {\n    decryptSecret(id: $id) {\n      id key value\n    }\n  }\n`;\n\nexport const CREATE_SECRET = `\n  mutation CreateSecret($input: CreateSecretInput!) {\n    createSecret(input: $input) {\n      id key name type status\n    }\n  }\n`;\n\nexport const UPDATE_SECRET = `\n  mutation UpdateSecret($id: ID!, $input: UpdateSecretInput!) {\n    updateSecret(id: $id, input: $input) {\n      id key name status updatedAt\n    }\n  }\n`;\n\nexport const DELETE_SECRET = `\n  mutation DeleteSecret($id: ID!) {\n    deleteSecret(id: $id)\n  }\n`;\n\nexport const ROTATE_SECRET = `\n  mutation RotateSecret($id: ID!, $newValue: String!) {\n    rotateSecret(id: $id, newValue: $newValue) {\n      id key updatedAt\n    }\n  }\n`;\n","import { z } from 'zod';\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { jsonResult, errorResult, mcpToolName, type McpContext } from '../../core/index.js';\nimport {\n  GET_VAULTS,\n  GET_VAULT,\n  CREATE_VAULT,\n  DELETE_VAULT,\n  ARCHIVE_VAULT,\n  GET_SECRETS,\n  GET_SECRET,\n  DECRYPT_SECRET,\n  CREATE_SECRET,\n  UPDATE_SECRET,\n  DELETE_SECRET,\n  ROTATE_SECRET,\n} from './operations.js';\n\nconst VaultScopeEnum = z.enum(['WORKSPACE', 'GLOBAL', 'VIBE']);\nconst VaultStatusEnum = z.enum(['ACTIVE', 'LOCKED', 'ARCHIVED']);\nconst SecretTypeEnum = z.enum(['API_KEY', 'PASSWORD', 'CERTIFICATE', 'TOKEN', 'OTHER']);\nconst SecretStatusEnum = z.enum(['ACTIVE', 'EXPIRED', 'REVOKED']);\n\ninterface VaultRow {\n  id: string;\n  name: string;\n  description?: string | null;\n  scope?: string;\n  scopeId?: string;\n  status?: string;\n  createdAt?: string;\n  updatedAt?: string;\n  lockAfterMinutes?: number;\n}\n\ninterface SecretRow {\n  id: string;\n  key: string;\n  name: string;\n  description?: string | null;\n  type?: string;\n  status?: string;\n  isEphemeral?: boolean;\n  expiresAt?: string;\n  createdAt?: string;\n  updatedAt?: string;\n}\n\nfunction readWorkspaceContext(ctx: McpContext): { workspaceId: string } | null {\n  const auth = ctx.auth.read();\n  if (!auth?.workspaceId) return null;\n  return { workspaceId: auth.workspaceId };\n}\n\nexport function registerSecurityTools(\n  server: McpServer,\n  ctx: McpContext,\n  track: (n: string) => string,\n): void {\n  // ── Vaults ─────────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_vaults_list')),\n    {\n      title: 'List Vaults',\n      description: 'List vaults in the current workspace with optional filters and pagination.',\n      inputSchema: {\n        scope: VaultScopeEnum.optional().describe('Filter by vault scope'),\n        status: VaultStatusEnum.optional().describe('Filter by status'),\n        search: z.string().optional().describe('Free-text search'),\n        limit: z.number().optional().describe('Page size (default 50)'),\n        offset: z.number().optional().describe('Skip results'),\n      },\n    },\n    async ({ scope, status, search, limit, offset }) => {\n      try {\n        const workspaceCtx = readWorkspaceContext(ctx);\n        if (!workspaceCtx) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const filter: Record<string, unknown> = { context: workspaceCtx };\n        if (scope !== undefined) filter.scope = scope;\n        if (status !== undefined) filter.status = status;\n        if (search !== undefined) filter.search = search;\n\n        const pagination: Record<string, unknown> = {};\n        if (limit !== undefined) pagination.limit = limit;\n        if (offset !== undefined) pagination.offset = offset;\n\n        const data = await ctx.gql.workspace.request<{\n          getVaults: { items: VaultRow[]; total: number; hasMore: boolean };\n        }>(GET_VAULTS, {\n          filter,\n          pagination: Object.keys(pagination).length > 0 ? pagination : undefined,\n        });\n        return jsonResult(data.getVaults);\n      } catch (error) {\n        ctx.logger.error('security_vaults_list failed', { error });\n        return errorResult(\n          `Failed to list vaults: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_vaults_get')),\n    {\n      title: 'Get Vault',\n      description: 'Get a vault by ID.',\n      inputSchema: {\n        id: z.string().describe('Vault ID'),\n      },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.workspace.request<{ getVault: VaultRow | null }>(GET_VAULT, {\n          id,\n        });\n        if (!data.getVault) {\n          return errorResult(`Vault ${id} not found`);\n        }\n        return jsonResult(data.getVault);\n      } catch (error) {\n        ctx.logger.error('security_vaults_get failed', { error });\n        return errorResult(\n          `Failed to get vault: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_vaults_create')),\n    {\n      title: 'Create Vault',\n      description: 'Create a new vault scoped to the current workspace.',\n      inputSchema: {\n        name: z.string().describe('Vault name'),\n        description: z.string().optional().describe('Vault description'),\n        scope: VaultScopeEnum.optional().describe('Vault scope (default: WORKSPACE)'),\n        scopeId: z\n          .string()\n          .optional()\n          .describe('Scope ID (defaults to current workspace ID when scope is WORKSPACE)'),\n        lockAfterMinutes: z.number().optional().describe('Auto-lock after N minutes of inactivity'),\n      },\n    },\n    async ({ name, description, scope, scopeId, lockAfterMinutes }) => {\n      try {\n        const workspaceCtx = readWorkspaceContext(ctx);\n        if (!workspaceCtx) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const resolvedScope = scope ?? 'WORKSPACE';\n        const input: Record<string, unknown> = {\n          context: workspaceCtx,\n          name,\n          scope: resolvedScope,\n          scopeId: scopeId ?? workspaceCtx.workspaceId,\n        };\n        if (description !== undefined) input.description = description;\n        if (lockAfterMinutes !== undefined) input.lockAfterMinutes = lockAfterMinutes;\n\n        const data = await ctx.gql.workspace.request<{ createVault: VaultRow }>(CREATE_VAULT, {\n          input,\n        });\n        return jsonResult(data.createVault);\n      } catch (error) {\n        ctx.logger.error('security_vaults_create failed', { error });\n        return errorResult(\n          `Failed to create vault: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_vaults_delete')),\n    {\n      title: 'Delete Vault',\n      description:\n        'Delete a vault. Set archive=true to soft-archive instead of permanently deleting.',\n      inputSchema: {\n        id: z.string().describe('Vault ID'),\n        archive: z.boolean().optional().describe('Archive instead of hard delete'),\n      },\n    },\n    async ({ id, archive }) => {\n      try {\n        if (archive === true) {\n          const data = await ctx.gql.workspace.request<{\n            archiveVault: { id: string; status: string };\n          }>(ARCHIVE_VAULT, { id });\n          return jsonResult({ archived: true, vault: data.archiveVault });\n        }\n        const data = await ctx.gql.workspace.request<{ deleteVault: boolean }>(DELETE_VAULT, {\n          id,\n        });\n        return jsonResult({ deleted: data.deleteVault, vaultId: id });\n      } catch (error) {\n        ctx.logger.error('security_vaults_delete failed', { error });\n        return errorResult(\n          `Failed to delete vault: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  // ── Secrets ────────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_list')),\n    {\n      title: 'List Secrets',\n      description: 'List secrets in a vault with optional filters and pagination.',\n      inputSchema: {\n        vaultId: z.string().describe('Vault ID'),\n        type: SecretTypeEnum.optional().describe('Filter by secret type'),\n        search: z.string().optional().describe('Free-text search'),\n        limit: z.number().optional().describe('Page size (default 100)'),\n        offset: z.number().optional().describe('Skip results'),\n      },\n    },\n    async ({ vaultId, type, search, limit, offset }) => {\n      try {\n        const workspaceCtx = readWorkspaceContext(ctx);\n        if (!workspaceCtx) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const filter: Record<string, unknown> = { context: workspaceCtx };\n        if (type !== undefined) filter.type = type;\n        if (search !== undefined) filter.search = search;\n\n        const pagination: Record<string, unknown> = {};\n        if (limit !== undefined) pagination.limit = limit;\n        if (offset !== undefined) pagination.offset = offset;\n\n        const data = await ctx.gql.workspace.request<{\n          getSecrets: { items: SecretRow[]; total: number; hasMore: boolean };\n        }>(GET_SECRETS, {\n          vaultId,\n          filter,\n          pagination: Object.keys(pagination).length > 0 ? pagination : undefined,\n        });\n        return jsonResult(data.getSecrets);\n      } catch (error) {\n        ctx.logger.error('security_secrets_list failed', { error });\n        return errorResult(\n          `Failed to list secrets: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_get')),\n    {\n      title: 'Get Secret Metadata',\n      description:\n        \"Get a secret's metadata. Does NOT decrypt the value — use security_secrets_reveal for that.\",\n      inputSchema: {\n        id: z.string().describe('Secret ID'),\n      },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.workspace.request<{ getSecret: SecretRow | null }>(GET_SECRET, {\n          id,\n        });\n        if (!data.getSecret) {\n          return errorResult(`Secret ${id} not found`);\n        }\n        return jsonResult(data.getSecret);\n      } catch (error) {\n        ctx.logger.error('security_secrets_get failed', { error });\n        return errorResult(\n          `Failed to get secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_reveal')),\n    {\n      title: 'Reveal Secret Value',\n      description:\n        'Decrypt and return the secret value. This action is audited server-side. Treat the result as sensitive and avoid persisting it.',\n      inputSchema: {\n        id: z.string().describe('Secret ID'),\n      },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.workspace.request<{\n          decryptSecret: { id: string; key: string; value: string };\n        }>(DECRYPT_SECRET, { id });\n        return jsonResult(data.decryptSecret);\n      } catch (error) {\n        ctx.logger.error('security_secrets_reveal failed', { error });\n        return errorResult(\n          `Failed to reveal secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_set')),\n    {\n      title: 'Create Secret',\n      description: 'Create a new secret in a vault. The value is encrypted server-side.',\n      inputSchema: {\n        vaultId: z.string().describe('Vault ID'),\n        key: z.string().describe('Secret key (unique within the vault)'),\n        name: z.string().describe('Human-readable secret name'),\n        value: z.string().describe('Secret value (will be encrypted server-side)'),\n        description: z.string().optional().describe('Secret description'),\n        type: SecretTypeEnum.optional().describe('Secret type (default: OTHER)'),\n        isEphemeral: z.boolean().optional().describe('Mark as ephemeral'),\n        expiresAt: z.string().optional().describe('Expiry timestamp in ISO 8601'),\n      },\n    },\n    async ({ vaultId, key, name, value, description, type, isEphemeral, expiresAt }) => {\n      try {\n        const workspaceCtx = readWorkspaceContext(ctx);\n        if (!workspaceCtx) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const input: Record<string, unknown> = {\n          context: workspaceCtx,\n          vaultId,\n          key,\n          name,\n          value,\n          type: type ?? 'OTHER',\n          isEphemeral: isEphemeral === true,\n        };\n        if (description !== undefined) input.description = description;\n        if (expiresAt !== undefined) input.expiresAt = expiresAt;\n\n        const data = await ctx.gql.workspace.request<{ createSecret: SecretRow }>(CREATE_SECRET, {\n          input,\n        });\n        return jsonResult(data.createSecret);\n      } catch (error) {\n        ctx.logger.error('security_secrets_set failed', { error });\n        return errorResult(\n          `Failed to create secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_update')),\n    {\n      title: 'Update Secret Metadata',\n      description:\n        'Update secret metadata (name, description, status). To rotate the value, use security_secrets_rotate.',\n      inputSchema: {\n        id: z.string().describe('Secret ID'),\n        name: z.string().optional().describe('Updated name'),\n        description: z.string().optional().describe('Updated description'),\n        status: SecretStatusEnum.optional().describe('Updated status'),\n      },\n    },\n    async ({ id, name, description, status }) => {\n      try {\n        const workspaceCtx = readWorkspaceContext(ctx);\n        if (!workspaceCtx) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const input: Record<string, unknown> = { context: workspaceCtx };\n        if (name !== undefined) input.name = name;\n        if (description !== undefined) input.description = description;\n        if (status !== undefined) input.status = status;\n        if (Object.keys(input).length === 1) {\n          return errorResult('No updates specified');\n        }\n        const data = await ctx.gql.workspace.request<{ updateSecret: SecretRow }>(UPDATE_SECRET, {\n          id,\n          input,\n        });\n        return jsonResult(data.updateSecret);\n      } catch (error) {\n        ctx.logger.error('security_secrets_update failed', { error });\n        return errorResult(\n          `Failed to update secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_rotate')),\n    {\n      title: 'Rotate Secret Value',\n      description: \"Replace a secret's encrypted value with a new one.\",\n      inputSchema: {\n        id: z.string().describe('Secret ID'),\n        newValue: z.string().describe('New secret value'),\n      },\n    },\n    async ({ id, newValue }) => {\n      try {\n        const data = await ctx.gql.workspace.request<{ rotateSecret: SecretRow }>(ROTATE_SECRET, {\n          id,\n          newValue,\n        });\n        return jsonResult(data.rotateSecret);\n      } catch (error) {\n        ctx.logger.error('security_secrets_rotate failed', { error });\n        return errorResult(\n          `Failed to rotate secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_delete')),\n    {\n      title: 'Delete Secret',\n      description: 'Delete a secret by ID.',\n      inputSchema: {\n        id: z.string().describe('Secret ID'),\n      },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.workspace.request<{ deleteSecret: boolean }>(DELETE_SECRET, {\n          id,\n        });\n        return jsonResult({ deleted: data.deleteSecret, secretId: id });\n      } catch (error) {\n        ctx.logger.error('security_secrets_delete failed', { error });\n        return errorResult(\n          `Failed to delete secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n}\n","/**\n * Security module — workspace vaults & secrets\n * (<product>_security_vaults_{list,get,create,delete},\n *  <product>_security_secrets_{list,get,reveal,set,update,rotate,delete}).\n *\n * Backend: ~/products/wspace/security/wspace-security-svc/.\n * Ported from cli-sdk/src/modules/security/. The CLI reads secret values from\n * stdin; in MCP they come in as the `value` / `newValue` tool arguments.\n */\n\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { McpContext, McpModule, ModuleRegistration } from '../../core/index.js';\nimport { registerSecurityTools } from './tools.js';\n\nconst securityModule: McpModule = {\n  id: 'security',\n  version: '0.0.1',\n  displayName: 'Security',\n  dependsOn: ['auth'],\n  capabilities: { tools: {} },\n\n  register(server: McpServer, ctx: McpContext): ModuleRegistration {\n    const tools: string[] = [];\n    const track = (n: string): string => {\n      tools.push(n);\n      return n;\n    };\n\n    registerSecurityTools(server, ctx, track);\n\n    return { tools, resources: [], prompts: [] };\n  },\n};\n\nexport default securityModule;\n"]}
+{"version":3,"sources":["../../../src/modules/security/operations.ts","../../../src/modules/security/tools.ts","../../../src/modules/security/index.ts"],"names":["data"],"mappings":";;;;AAAO,IAAM,UAAA,GAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AASnB,IAAM,SAAA,GAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQlB,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQrB,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQrB,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA,CAAA;AAMrB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA,CAAA;AAMtB,IAAM,WAAA,GAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AASpB,IAAM,UAAA,GAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQnB,IAAM,cAAA,GAAiB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQvB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQtB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQtB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA,CAAA;AAMtB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;;;ACzE7B,IAAM,iBAAiB,CAAA,CAAE,IAAA,CAAK,CAAC,WAAA,EAAa,QAAA,EAAU,MAAM,CAAC,CAAA;AAC7D,IAAM,kBAAkB,CAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,QAAA,EAAU,UAAU,CAAC,CAAA;AAC/D,IAAM,cAAA,GAAiB,EAAE,IAAA,CAAK,CAAC,WAAW,UAAA,EAAY,aAAA,EAAe,OAAA,EAAS,OAAO,CAAC,CAAA;AACtF,IAAM,mBAAmB,CAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,SAAA,EAAW,SAAS,CAAC,CAAA;AA2BhE,SAAS,qBAAqB,GAAA,EAAiD;AAC7E,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,IAAA,CAAK,IAAA,EAAK;AAC3B,EAAA,IAAI,CAAC,IAAA,EAAM,WAAA,EAAa,OAAO,IAAA;AAC/B,EAAA,OAAO,EAAE,WAAA,EAAa,IAAA,CAAK,WAAA,EAAY;AACzC;AAEO,SAAS,qBAAA,CACd,MAAA,EACA,GAAA,EACA,KAAA,EACM;AAEN,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,sBAAsB,CAAC,CAAA;AAAA,IAC1D;AAAA,MACE,KAAA,EAAO,aAAA;AAAA,MACP,WAAA,EAAa,4EAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,KAAA,EAAO,cAAA,CAAe,QAAA,EAAS,CAAE,SAAS,uBAAuB,CAAA;AAAA,QACjE,MAAA,EAAQ,eAAA,CAAgB,QAAA,EAAS,CAAE,SAAS,kBAAkB,CAAA;AAAA,QAC9D,QAAQ,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,kBAAkB,CAAA;AAAA,QACzD,OAAO,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,wBAAwB,CAAA;AAAA,QAC9D,QAAQ,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,cAAc;AAAA;AACvD,KACF;AAAA,IACA,OAAO,EAAE,KAAA,EAAO,QAAQ,MAAA,EAAQ,KAAA,EAAO,QAAO,KAAM;AAClD,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,qBAAqB,GAAG,CAAA;AAC7C,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,MAAA,GAAkC,EAAE,OAAA,EAAS,YAAA,EAAa;AAChE,QAAA,IAAI,KAAA,KAAU,KAAA,CAAA,EAAW,MAAA,CAAO,KAAA,GAAQ,KAAA;AACxC,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,MAAA,CAAO,MAAA,GAAS,MAAA;AAC1C,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,MAAA,CAAO,MAAA,GAAS,MAAA;AAE1C,QAAA,MAAM,aAAsC,EAAC;AAC7C,QAAA,IAAI,KAAA,KAAU,KAAA,CAAA,EAAW,UAAA,CAAW,KAAA,GAAQ,KAAA;AAC5C,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,UAAA,CAAW,MAAA,GAAS,MAAA;AAE9C,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAElC,UAAA,EAAY;AAAA,UACb,MAAA;AAAA,UACA,YAAY,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA,GAAS,IAAI,UAAA,GAAa,KAAA;AAAA,SAC/D,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,SAAS,CAAA;AAAA,MAClC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,6BAAA,EAA+B,EAAE,OAAO,CAAA;AACzD,QAAA,OAAO,WAAA;AAAA,UACL,0BAA0B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAClF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,qBAAqB,CAAC,CAAA;AAAA,IACzD;AAAA,MACE,KAAA,EAAO,WAAA;AAAA,MACP,WAAA,EAAa,oBAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,UAAU;AAAA;AACpC,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAuC,SAAA,EAAW;AAAA,UACrF;AAAA,SACD,CAAA;AACD,QAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AAClB,UAAA,OAAO,WAAA,CAAY,CAAA,MAAA,EAAS,EAAE,CAAA,UAAA,CAAY,CAAA;AAAA,QAC5C;AACA,QAAA,OAAO,UAAA,CAAW,KAAK,QAAQ,CAAA;AAAA,MACjC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,4BAAA,EAA8B,EAAE,OAAO,CAAA;AACxD,QAAA,OAAO,WAAA;AAAA,UACL,wBAAwB,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAChF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,wBAAwB,CAAC,CAAA;AAAA,IAC5D;AAAA,MACE,KAAA,EAAO,cAAA;AAAA,MACP,WAAA,EAAa,qDAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,YAAY,CAAA;AAAA,QACtC,aAAa,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,mBAAmB,CAAA;AAAA,QAC/D,KAAA,EAAO,cAAA,CAAe,QAAA,EAAS,CAAE,SAAS,kCAAkC,CAAA;AAAA,QAC5E,SAAS,CAAA,CACN,MAAA,GACA,QAAA,EAAS,CACT,SAAS,qEAAqE,CAAA;AAAA,QACjF,kBAAkB,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,yCAAyC;AAAA;AAC5F,KACF;AAAA,IACA,OAAO,EAAE,IAAA,EAAM,aAAa,KAAA,EAAO,OAAA,EAAS,kBAAiB,KAAM;AACjE,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,qBAAqB,GAAG,CAAA;AAC7C,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,gBAAgB,KAAA,IAAS,WAAA;AAC/B,QAAA,MAAM,KAAA,GAAiC;AAAA,UACrC,OAAA,EAAS,YAAA;AAAA,UACT,IAAA;AAAA,UACA,KAAA,EAAO,aAAA;AAAA,UACP,OAAA,EAAS,WAAW,YAAA,CAAa;AAAA,SACnC;AACA,QAAA,IAAI,WAAA,KAAgB,KAAA,CAAA,EAAW,KAAA,CAAM,WAAA,GAAc,WAAA;AACnD,QAAA,IAAI,gBAAA,KAAqB,KAAA,CAAA,EAAW,KAAA,CAAM,gBAAA,GAAmB,gBAAA;AAE7D,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAmC,YAAA,EAAc;AAAA,UACpF;AAAA,SACD,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,WAAW,CAAA;AAAA,MACpC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,+BAAA,EAAiC,EAAE,OAAO,CAAA;AAC3D,QAAA,OAAO,WAAA;AAAA,UACL,2BAA2B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,wBAAwB,CAAC,CAAA;AAAA,IAC5D;AAAA,MACE,KAAA,EAAO,cAAA;AAAA,MACP,WAAA,EACE,+JAAA;AAAA,MACF,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,UAAU,CAAA;AAAA,QAClC,MAAM,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,oBAAoB,CAAA;AAAA,QACzD,aAAa,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qBAAqB,CAAA;AAAA,QACjE,MAAA,EAAQ,eAAA,CAAgB,QAAA,EAAS,CAAE,SAAS,sBAAsB,CAAA;AAAA,QAClE,gBAAA,EAAkB,EACf,MAAA,EAAO,CACP,KAAI,CACJ,QAAA,EAAS,CACT,QAAA,CAAS,yCAAyC;AAAA;AACvD,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAI,MAAM,WAAA,EAAa,MAAA,EAAQ,kBAAiB,KAAM;AAC7D,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,qBAAqB,GAAG,CAAA;AAC7C,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,KAAA,GAAiC,EAAE,OAAA,EAAS,YAAA,EAAa;AAC/D,QAAA,IAAI,IAAA,KAAS,KAAA,CAAA,EAAW,KAAA,CAAM,IAAA,GAAO,IAAA;AACrC,QAAA,IAAI,WAAA,KAAgB,KAAA,CAAA,EAAW,KAAA,CAAM,WAAA,GAAc,WAAA;AACnD,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,KAAA,CAAM,MAAA,GAAS,MAAA;AACzC,QAAA,IAAI,gBAAA,KAAqB,KAAA,CAAA,EAAW,KAAA,CAAM,gBAAA,GAAmB,gBAAA;AAC7D,QAAA,IAAI,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,WAAW,CAAA,EAAG;AACnC,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAmC,YAAA,EAAc;AAAA,UACpF,EAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,WAAW,CAAA;AAAA,MACpC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,+BAAA,EAAiC,EAAE,OAAO,CAAA;AAC3D,QAAA,OAAO,WAAA;AAAA,UACL,2BAA2B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,wBAAwB,CAAC,CAAA;AAAA,IAC5D;AAAA,MACE,KAAA,EAAO,cAAA;AAAA,MACP,WAAA,EACE,mFAAA;AAAA,MACF,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,UAAU,CAAA;AAAA,QAClC,SAAS,CAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,gCAAgC;AAAA;AAC3E,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAI,OAAA,EAAQ,KAAM;AACzB,MAAA,IAAI;AACF,QAAA,IAAI,YAAY,IAAA,EAAM;AACpB,UAAA,MAAMA,KAAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,UAAU,OAAA,CAElC,aAAA,EAAe,EAAE,EAAA,EAAI,CAAA;AACxB,UAAA,OAAO,WAAW,EAAE,QAAA,EAAU,MAAM,KAAA,EAAOA,KAAAA,CAAK,cAAc,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAkC,YAAA,EAAc;AAAA,UACnF;AAAA,SACD,CAAA;AACD,QAAA,OAAO,WAAW,EAAE,OAAA,EAAS,KAAK,WAAA,EAAa,OAAA,EAAS,IAAI,CAAA;AAAA,MAC9D,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,+BAAA,EAAiC,EAAE,OAAO,CAAA;AAC3D,QAAA,OAAO,WAAA;AAAA,UACL,2BAA2B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,uBAAuB,CAAC,CAAA;AAAA,IAC3D;AAAA,MACE,KAAA,EAAO,cAAA;AAAA,MACP,WAAA,EAAa,+DAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,UAAU,CAAA;AAAA,QACvC,IAAA,EAAM,cAAA,CAAe,QAAA,EAAS,CAAE,SAAS,uBAAuB,CAAA;AAAA,QAChE,QAAQ,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,kBAAkB,CAAA;AAAA,QACzD,OAAO,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,yBAAyB,CAAA;AAAA,QAC/D,QAAQ,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,cAAc;AAAA;AACvD,KACF;AAAA,IACA,OAAO,EAAE,OAAA,EAAS,MAAM,MAAA,EAAQ,KAAA,EAAO,QAAO,KAAM;AAClD,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,qBAAqB,GAAG,CAAA;AAC7C,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,MAAA,GAAkC,EAAE,OAAA,EAAS,YAAA,EAAa;AAChE,QAAA,IAAI,IAAA,KAAS,KAAA,CAAA,EAAW,MAAA,CAAO,IAAA,GAAO,IAAA;AACtC,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,MAAA,CAAO,MAAA,GAAS,MAAA;AAE1C,QAAA,MAAM,aAAsC,EAAC;AAC7C,QAAA,IAAI,KAAA,KAAU,KAAA,CAAA,EAAW,UAAA,CAAW,KAAA,GAAQ,KAAA;AAC5C,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,UAAA,CAAW,MAAA,GAAS,MAAA;AAE9C,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAElC,WAAA,EAAa;AAAA,UACd,OAAA;AAAA,UACA,MAAA;AAAA,UACA,YAAY,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA,GAAS,IAAI,UAAA,GAAa,KAAA;AAAA,SAC/D,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,UAAU,CAAA;AAAA,MACnC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,8BAAA,EAAgC,EAAE,OAAO,CAAA;AAC1D,QAAA,OAAO,WAAA;AAAA,UACL,2BAA2B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,sBAAsB,CAAC,CAAA;AAAA,IAC1D;AAAA,MACE,KAAA,EAAO,qBAAA;AAAA,MACP,WAAA,EACE,kGAAA;AAAA,MACF,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,WAAW;AAAA;AACrC,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAyC,UAAA,EAAY;AAAA,UACxF;AAAA,SACD,CAAA;AACD,QAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,UAAA,OAAO,WAAA,CAAY,CAAA,OAAA,EAAU,EAAE,CAAA,UAAA,CAAY,CAAA;AAAA,QAC7C;AACA,QAAA,OAAO,UAAA,CAAW,KAAK,SAAS,CAAA;AAAA,MAClC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,6BAAA,EAA+B,EAAE,OAAO,CAAA;AACzD,QAAA,OAAO,WAAA;AAAA,UACL,yBAAyB,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACjF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,yBAAyB,CAAC,CAAA;AAAA,IAC7D;AAAA,MACE,KAAA,EAAO,qBAAA;AAAA,MACP,WAAA,EACE,iIAAA;AAAA,MACF,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,WAAW;AAAA;AACrC,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,UAAU,OAAA,CAElC,cAAA,EAAgB,EAAE,EAAA,EAAI,CAAA;AACzB,QAAA,OAAO,UAAA,CAAW,KAAK,aAAa,CAAA;AAAA,MACtC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,gCAAA,EAAkC,EAAE,OAAO,CAAA;AAC5D,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,sBAAsB,CAAC,CAAA;AAAA,IAC1D;AAAA,MACE,KAAA,EAAO,eAAA;AAAA,MACP,WAAA,EAAa,qEAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,UAAU,CAAA;AAAA,QACvC,GAAA,EAAK,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,sCAAsC,CAAA;AAAA,QAC/D,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,4BAA4B,CAAA;AAAA,QACtD,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,8CAA8C,CAAA;AAAA,QACzE,aAAa,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,oBAAoB,CAAA;AAAA,QAChE,IAAA,EAAM,cAAA,CAAe,QAAA,EAAS,CAAE,SAAS,8BAA8B,CAAA;AAAA,QACvE,aAAa,CAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,mBAAmB,CAAA;AAAA,QAChE,WAAW,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,8BAA8B;AAAA;AAC1E,KACF;AAAA,IACA,OAAO,EAAE,OAAA,EAAS,GAAA,EAAK,IAAA,EAAM,OAAO,WAAA,EAAa,IAAA,EAAM,WAAA,EAAa,SAAA,EAAU,KAAM;AAClF,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,qBAAqB,GAAG,CAAA;AAC7C,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,KAAA,GAAiC;AAAA,UACrC,OAAA,EAAS,YAAA;AAAA,UACT,OAAA;AAAA,UACA,GAAA;AAAA,UACA,IAAA;AAAA,UACA,KAAA;AAAA,UACA,MAAM,IAAA,IAAQ,OAAA;AAAA,UACd,aAAa,WAAA,KAAgB;AAAA,SAC/B;AACA,QAAA,IAAI,WAAA,KAAgB,KAAA,CAAA,EAAW,KAAA,CAAM,WAAA,GAAc,WAAA;AACnD,QAAA,IAAI,SAAA,KAAc,KAAA,CAAA,EAAW,KAAA,CAAM,SAAA,GAAY,SAAA;AAE/C,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAqC,aAAA,EAAe;AAAA,UACvF;AAAA,SACD,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,YAAY,CAAA;AAAA,MACrC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,6BAAA,EAA+B,EAAE,OAAO,CAAA;AACzD,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,yBAAyB,CAAC,CAAA;AAAA,IAC7D;AAAA,MACE,KAAA,EAAO,wBAAA;AAAA,MACP,WAAA,EACE,uGAAA;AAAA,MACF,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,WAAW,CAAA;AAAA,QACnC,MAAM,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,cAAc,CAAA;AAAA,QACnD,aAAa,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qBAAqB,CAAA;AAAA,QACjE,MAAA,EAAQ,gBAAA,CAAiB,QAAA,EAAS,CAAE,SAAS,gBAAgB;AAAA;AAC/D,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,WAAA,EAAa,QAAO,KAAM;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,qBAAqB,GAAG,CAAA;AAC7C,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,KAAA,GAAiC,EAAE,OAAA,EAAS,YAAA,EAAa;AAC/D,QAAA,IAAI,IAAA,KAAS,KAAA,CAAA,EAAW,KAAA,CAAM,IAAA,GAAO,IAAA;AACrC,QAAA,IAAI,WAAA,KAAgB,KAAA,CAAA,EAAW,KAAA,CAAM,WAAA,GAAc,WAAA;AACnD,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,KAAA,CAAM,MAAA,GAAS,MAAA;AACzC,QAAA,IAAI,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,WAAW,CAAA,EAAG;AACnC,UAAA,OAAO,YAAY,sBAAsB,CAAA;AAAA,QAC3C;AACA,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAqC,aAAA,EAAe;AAAA,UACvF,EAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,YAAY,CAAA;AAAA,MACrC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,gCAAA,EAAkC,EAAE,OAAO,CAAA;AAC5D,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,yBAAyB,CAAC,CAAA;AAAA,IAC7D;AAAA,MACE,KAAA,EAAO,qBAAA;AAAA,MACP,WAAA,EAAa,oDAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,WAAW,CAAA;AAAA,QACnC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,kBAAkB;AAAA;AAClD,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAI,QAAA,EAAS,KAAM;AAC1B,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAqC,aAAA,EAAe;AAAA,UACvF,EAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,YAAY,CAAA;AAAA,MACrC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,gCAAA,EAAkC,EAAE,OAAO,CAAA;AAC5D,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,yBAAyB,CAAC,CAAA;AAAA,IAC7D;AAAA,MACE,KAAA,EAAO,eAAA;AAAA,MACP,WAAA,EAAa,wBAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,WAAW;AAAA;AACrC,KACF;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,QAAmC,aAAA,EAAe;AAAA,UACrF;AAAA,SACD,CAAA;AACD,QAAA,OAAO,WAAW,EAAE,OAAA,EAAS,KAAK,YAAA,EAAc,QAAA,EAAU,IAAI,CAAA;AAAA,MAChE,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,gCAAA,EAAkC,EAAE,OAAO,CAAA;AAC5D,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AACF;;;ACzeA,IAAM,cAAA,GAA4B;AAAA,EAChC,EAAA,EAAI,UAAA;AAAA,EACJ,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAa,UAAA;AAAA,EACb,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,EAClB,YAAA,EAAc,EAAE,KAAA,EAAO,EAAC,EAAE;AAAA,EAE1B,QAAA,CAAS,QAAmB,GAAA,EAAqC;AAC/D,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,MAAM,KAAA,GAAQ,CAAC,CAAA,KAAsB;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,CAAA;AACZ,MAAA,OAAO,CAAA;AAAA,IACT,CAAA;AAEA,IAAA,qBAAA,CAAsB,MAAA,EAAQ,KAAK,KAAK,CAAA;AAExC,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,EAAC,EAAG,OAAA,EAAS,EAAC,EAAE;AAAA,EAC7C;AACF,CAAA;AAEA,IAAO,gBAAA,GAAQ","file":"index.js","sourcesContent":["export const GET_VAULTS = `\n  query GetVaults($filter: VaultFilterInput, $pagination: SecurityPaginationInput) {\n    getVaults(filter: $filter, pagination: $pagination) {\n      items { id name description scope status createdAt }\n      total hasMore\n    }\n  }\n`;\n\nexport const GET_VAULT = `\n  query GetVault($id: ID!) {\n    getVault(id: $id) {\n      id name description scope scopeId status lockAfterMinutes createdAt updatedAt\n    }\n  }\n`;\n\nexport const CREATE_VAULT = `\n  mutation CreateVault($input: CreateVaultInput!) {\n    createVault(input: $input) {\n      id name scope scopeId status\n    }\n  }\n`;\n\nexport const UPDATE_VAULT = `\n  mutation UpdateVault($id: ID!, $input: UpdateVaultInput!) {\n    updateVault(id: $id, input: $input) {\n      id name description scope status lockAfterMinutes updatedAt\n    }\n  }\n`;\n\nexport const DELETE_VAULT = `\n  mutation DeleteVault($id: ID!) {\n    deleteVault(id: $id)\n  }\n`;\n\nexport const ARCHIVE_VAULT = `\n  mutation ArchiveVault($id: ID!) {\n    archiveVault(id: $id) { id status }\n  }\n`;\n\nexport const GET_SECRETS = `\n  query GetSecrets($vaultId: ID!, $filter: SecretFilterInput, $pagination: SecurityPaginationInput) {\n    getSecrets(vaultId: $vaultId, filter: $filter, pagination: $pagination) {\n      items { id key name description type status isEphemeral createdAt }\n      total hasMore\n    }\n  }\n`;\n\nexport const GET_SECRET = `\n  query GetSecret($id: ID!) {\n    getSecret(id: $id) {\n      id key name description type status isEphemeral expiresAt createdAt updatedAt\n    }\n  }\n`;\n\nexport const DECRYPT_SECRET = `\n  query DecryptSecret($id: ID!) {\n    decryptSecret(id: $id) {\n      id key value\n    }\n  }\n`;\n\nexport const CREATE_SECRET = `\n  mutation CreateSecret($input: CreateSecretInput!) {\n    createSecret(input: $input) {\n      id key name type status\n    }\n  }\n`;\n\nexport const UPDATE_SECRET = `\n  mutation UpdateSecret($id: ID!, $input: UpdateSecretInput!) {\n    updateSecret(id: $id, input: $input) {\n      id key name status updatedAt\n    }\n  }\n`;\n\nexport const DELETE_SECRET = `\n  mutation DeleteSecret($id: ID!) {\n    deleteSecret(id: $id)\n  }\n`;\n\nexport const ROTATE_SECRET = `\n  mutation RotateSecret($id: ID!, $newValue: String!) {\n    rotateSecret(id: $id, newValue: $newValue) {\n      id key updatedAt\n    }\n  }\n`;\n","import { z } from 'zod';\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { jsonResult, errorResult, mcpToolName, type McpContext } from '../../core/index.js';\nimport {\n  GET_VAULTS,\n  GET_VAULT,\n  CREATE_VAULT,\n  UPDATE_VAULT,\n  DELETE_VAULT,\n  ARCHIVE_VAULT,\n  GET_SECRETS,\n  GET_SECRET,\n  DECRYPT_SECRET,\n  CREATE_SECRET,\n  UPDATE_SECRET,\n  DELETE_SECRET,\n  ROTATE_SECRET,\n} from './operations.js';\n\nconst VaultScopeEnum = z.enum(['WORKSPACE', 'GLOBAL', 'VIBE']);\nconst VaultStatusEnum = z.enum(['ACTIVE', 'LOCKED', 'ARCHIVED']);\nconst SecretTypeEnum = z.enum(['API_KEY', 'PASSWORD', 'CERTIFICATE', 'TOKEN', 'OTHER']);\nconst SecretStatusEnum = z.enum(['ACTIVE', 'EXPIRED', 'REVOKED']);\n\ninterface VaultRow {\n  id: string;\n  name: string;\n  description?: string | null;\n  scope?: string;\n  scopeId?: string;\n  status?: string;\n  createdAt?: string;\n  updatedAt?: string;\n  lockAfterMinutes?: number;\n}\n\ninterface SecretRow {\n  id: string;\n  key: string;\n  name: string;\n  description?: string | null;\n  type?: string;\n  status?: string;\n  isEphemeral?: boolean;\n  expiresAt?: string;\n  createdAt?: string;\n  updatedAt?: string;\n}\n\nfunction readWorkspaceContext(ctx: McpContext): { workspaceId: string } | null {\n  const auth = ctx.auth.read();\n  if (!auth?.workspaceId) return null;\n  return { workspaceId: auth.workspaceId };\n}\n\nexport function registerSecurityTools(\n  server: McpServer,\n  ctx: McpContext,\n  track: (n: string) => string,\n): void {\n  // ── Vaults ─────────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_vaults_list')),\n    {\n      title: 'List Vaults',\n      description: 'List vaults in the current workspace with optional filters and pagination.',\n      inputSchema: {\n        scope: VaultScopeEnum.optional().describe('Filter by vault scope'),\n        status: VaultStatusEnum.optional().describe('Filter by status'),\n        search: z.string().optional().describe('Free-text search'),\n        limit: z.number().optional().describe('Page size (default 50)'),\n        offset: z.number().optional().describe('Skip results'),\n      },\n    },\n    async ({ scope, status, search, limit, offset }) => {\n      try {\n        const workspaceCtx = readWorkspaceContext(ctx);\n        if (!workspaceCtx) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const filter: Record<string, unknown> = { context: workspaceCtx };\n        if (scope !== undefined) filter.scope = scope;\n        if (status !== undefined) filter.status = status;\n        if (search !== undefined) filter.search = search;\n\n        const pagination: Record<string, unknown> = {};\n        if (limit !== undefined) pagination.limit = limit;\n        if (offset !== undefined) pagination.offset = offset;\n\n        const data = await ctx.gql.workspace.request<{\n          getVaults: { items: VaultRow[]; total: number; hasMore: boolean };\n        }>(GET_VAULTS, {\n          filter,\n          pagination: Object.keys(pagination).length > 0 ? pagination : undefined,\n        });\n        return jsonResult(data.getVaults);\n      } catch (error) {\n        ctx.logger.error('security_vaults_list failed', { error });\n        return errorResult(\n          `Failed to list vaults: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_vaults_get')),\n    {\n      title: 'Get Vault',\n      description: 'Get a vault by ID.',\n      inputSchema: {\n        id: z.string().describe('Vault ID'),\n      },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.workspace.request<{ getVault: VaultRow | null }>(GET_VAULT, {\n          id,\n        });\n        if (!data.getVault) {\n          return errorResult(`Vault ${id} not found`);\n        }\n        return jsonResult(data.getVault);\n      } catch (error) {\n        ctx.logger.error('security_vaults_get failed', { error });\n        return errorResult(\n          `Failed to get vault: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_vaults_create')),\n    {\n      title: 'Create Vault',\n      description: 'Create a new vault scoped to the current workspace.',\n      inputSchema: {\n        name: z.string().describe('Vault name'),\n        description: z.string().optional().describe('Vault description'),\n        scope: VaultScopeEnum.optional().describe('Vault scope (default: WORKSPACE)'),\n        scopeId: z\n          .string()\n          .optional()\n          .describe('Scope ID (defaults to current workspace ID when scope is WORKSPACE)'),\n        lockAfterMinutes: z.number().optional().describe('Auto-lock after N minutes of inactivity'),\n      },\n    },\n    async ({ name, description, scope, scopeId, lockAfterMinutes }) => {\n      try {\n        const workspaceCtx = readWorkspaceContext(ctx);\n        if (!workspaceCtx) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const resolvedScope = scope ?? 'WORKSPACE';\n        const input: Record<string, unknown> = {\n          context: workspaceCtx,\n          name,\n          scope: resolvedScope,\n          scopeId: scopeId ?? workspaceCtx.workspaceId,\n        };\n        if (description !== undefined) input.description = description;\n        if (lockAfterMinutes !== undefined) input.lockAfterMinutes = lockAfterMinutes;\n\n        const data = await ctx.gql.workspace.request<{ createVault: VaultRow }>(CREATE_VAULT, {\n          input,\n        });\n        return jsonResult(data.createVault);\n      } catch (error) {\n        ctx.logger.error('security_vaults_create failed', { error });\n        return errorResult(\n          `Failed to create vault: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_vaults_update')),\n    {\n      title: 'Update Vault',\n      description:\n        'Update a vault (name/description/lockAfterMinutes/status). At least one field must be provided. The workspace context is implicit. Returns the updated Vault.',\n      inputSchema: {\n        id: z.string().describe('Vault ID'),\n        name: z.string().optional().describe('Updated vault name'),\n        description: z.string().optional().describe('Updated description'),\n        status: VaultStatusEnum.optional().describe('Updated vault status'),\n        lockAfterMinutes: z\n          .number()\n          .int()\n          .optional()\n          .describe('Auto-lock after N minutes of inactivity'),\n      },\n    },\n    async ({ id, name, description, status, lockAfterMinutes }) => {\n      try {\n        const workspaceCtx = readWorkspaceContext(ctx);\n        if (!workspaceCtx) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const input: Record<string, unknown> = { context: workspaceCtx };\n        if (name !== undefined) input.name = name;\n        if (description !== undefined) input.description = description;\n        if (status !== undefined) input.status = status;\n        if (lockAfterMinutes !== undefined) input.lockAfterMinutes = lockAfterMinutes;\n        if (Object.keys(input).length === 1) {\n          return errorResult(\n            'No updates specified — provide at least one of name/description/status/lockAfterMinutes',\n          );\n        }\n        const data = await ctx.gql.workspace.request<{ updateVault: VaultRow }>(UPDATE_VAULT, {\n          id,\n          input,\n        });\n        return jsonResult(data.updateVault);\n      } catch (error) {\n        ctx.logger.error('security_vaults_update failed', { error });\n        return errorResult(\n          `Failed to update vault: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_vaults_delete')),\n    {\n      title: 'Delete Vault',\n      description:\n        'Delete a vault. Set archive=true to soft-archive instead of permanently deleting.',\n      inputSchema: {\n        id: z.string().describe('Vault ID'),\n        archive: z.boolean().optional().describe('Archive instead of hard delete'),\n      },\n    },\n    async ({ id, archive }) => {\n      try {\n        if (archive === true) {\n          const data = await ctx.gql.workspace.request<{\n            archiveVault: { id: string; status: string };\n          }>(ARCHIVE_VAULT, { id });\n          return jsonResult({ archived: true, vault: data.archiveVault });\n        }\n        const data = await ctx.gql.workspace.request<{ deleteVault: boolean }>(DELETE_VAULT, {\n          id,\n        });\n        return jsonResult({ deleted: data.deleteVault, vaultId: id });\n      } catch (error) {\n        ctx.logger.error('security_vaults_delete failed', { error });\n        return errorResult(\n          `Failed to delete vault: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  // ── Secrets ────────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_list')),\n    {\n      title: 'List Secrets',\n      description: 'List secrets in a vault with optional filters and pagination.',\n      inputSchema: {\n        vaultId: z.string().describe('Vault ID'),\n        type: SecretTypeEnum.optional().describe('Filter by secret type'),\n        search: z.string().optional().describe('Free-text search'),\n        limit: z.number().optional().describe('Page size (default 100)'),\n        offset: z.number().optional().describe('Skip results'),\n      },\n    },\n    async ({ vaultId, type, search, limit, offset }) => {\n      try {\n        const workspaceCtx = readWorkspaceContext(ctx);\n        if (!workspaceCtx) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const filter: Record<string, unknown> = { context: workspaceCtx };\n        if (type !== undefined) filter.type = type;\n        if (search !== undefined) filter.search = search;\n\n        const pagination: Record<string, unknown> = {};\n        if (limit !== undefined) pagination.limit = limit;\n        if (offset !== undefined) pagination.offset = offset;\n\n        const data = await ctx.gql.workspace.request<{\n          getSecrets: { items: SecretRow[]; total: number; hasMore: boolean };\n        }>(GET_SECRETS, {\n          vaultId,\n          filter,\n          pagination: Object.keys(pagination).length > 0 ? pagination : undefined,\n        });\n        return jsonResult(data.getSecrets);\n      } catch (error) {\n        ctx.logger.error('security_secrets_list failed', { error });\n        return errorResult(\n          `Failed to list secrets: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_get')),\n    {\n      title: 'Get Secret Metadata',\n      description:\n        \"Get a secret's metadata. Does NOT decrypt the value — use security_secrets_reveal for that.\",\n      inputSchema: {\n        id: z.string().describe('Secret ID'),\n      },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.workspace.request<{ getSecret: SecretRow | null }>(GET_SECRET, {\n          id,\n        });\n        if (!data.getSecret) {\n          return errorResult(`Secret ${id} not found`);\n        }\n        return jsonResult(data.getSecret);\n      } catch (error) {\n        ctx.logger.error('security_secrets_get failed', { error });\n        return errorResult(\n          `Failed to get secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_reveal')),\n    {\n      title: 'Reveal Secret Value',\n      description:\n        'Decrypt and return the secret value. This action is audited server-side. Treat the result as sensitive and avoid persisting it.',\n      inputSchema: {\n        id: z.string().describe('Secret ID'),\n      },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.workspace.request<{\n          decryptSecret: { id: string; key: string; value: string };\n        }>(DECRYPT_SECRET, { id });\n        return jsonResult(data.decryptSecret);\n      } catch (error) {\n        ctx.logger.error('security_secrets_reveal failed', { error });\n        return errorResult(\n          `Failed to reveal secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_set')),\n    {\n      title: 'Create Secret',\n      description: 'Create a new secret in a vault. The value is encrypted server-side.',\n      inputSchema: {\n        vaultId: z.string().describe('Vault ID'),\n        key: z.string().describe('Secret key (unique within the vault)'),\n        name: z.string().describe('Human-readable secret name'),\n        value: z.string().describe('Secret value (will be encrypted server-side)'),\n        description: z.string().optional().describe('Secret description'),\n        type: SecretTypeEnum.optional().describe('Secret type (default: OTHER)'),\n        isEphemeral: z.boolean().optional().describe('Mark as ephemeral'),\n        expiresAt: z.string().optional().describe('Expiry timestamp in ISO 8601'),\n      },\n    },\n    async ({ vaultId, key, name, value, description, type, isEphemeral, expiresAt }) => {\n      try {\n        const workspaceCtx = readWorkspaceContext(ctx);\n        if (!workspaceCtx) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const input: Record<string, unknown> = {\n          context: workspaceCtx,\n          vaultId,\n          key,\n          name,\n          value,\n          type: type ?? 'OTHER',\n          isEphemeral: isEphemeral === true,\n        };\n        if (description !== undefined) input.description = description;\n        if (expiresAt !== undefined) input.expiresAt = expiresAt;\n\n        const data = await ctx.gql.workspace.request<{ createSecret: SecretRow }>(CREATE_SECRET, {\n          input,\n        });\n        return jsonResult(data.createSecret);\n      } catch (error) {\n        ctx.logger.error('security_secrets_set failed', { error });\n        return errorResult(\n          `Failed to create secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_update')),\n    {\n      title: 'Update Secret Metadata',\n      description:\n        'Update secret metadata (name, description, status). To rotate the value, use security_secrets_rotate.',\n      inputSchema: {\n        id: z.string().describe('Secret ID'),\n        name: z.string().optional().describe('Updated name'),\n        description: z.string().optional().describe('Updated description'),\n        status: SecretStatusEnum.optional().describe('Updated status'),\n      },\n    },\n    async ({ id, name, description, status }) => {\n      try {\n        const workspaceCtx = readWorkspaceContext(ctx);\n        if (!workspaceCtx) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const input: Record<string, unknown> = { context: workspaceCtx };\n        if (name !== undefined) input.name = name;\n        if (description !== undefined) input.description = description;\n        if (status !== undefined) input.status = status;\n        if (Object.keys(input).length === 1) {\n          return errorResult('No updates specified');\n        }\n        const data = await ctx.gql.workspace.request<{ updateSecret: SecretRow }>(UPDATE_SECRET, {\n          id,\n          input,\n        });\n        return jsonResult(data.updateSecret);\n      } catch (error) {\n        ctx.logger.error('security_secrets_update failed', { error });\n        return errorResult(\n          `Failed to update secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_rotate')),\n    {\n      title: 'Rotate Secret Value',\n      description: \"Replace a secret's encrypted value with a new one.\",\n      inputSchema: {\n        id: z.string().describe('Secret ID'),\n        newValue: z.string().describe('New secret value'),\n      },\n    },\n    async ({ id, newValue }) => {\n      try {\n        const data = await ctx.gql.workspace.request<{ rotateSecret: SecretRow }>(ROTATE_SECRET, {\n          id,\n          newValue,\n        });\n        return jsonResult(data.rotateSecret);\n      } catch (error) {\n        ctx.logger.error('security_secrets_rotate failed', { error });\n        return errorResult(\n          `Failed to rotate secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'security_secrets_delete')),\n    {\n      title: 'Delete Secret',\n      description: 'Delete a secret by ID.',\n      inputSchema: {\n        id: z.string().describe('Secret ID'),\n      },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.workspace.request<{ deleteSecret: boolean }>(DELETE_SECRET, {\n          id,\n        });\n        return jsonResult({ deleted: data.deleteSecret, secretId: id });\n      } catch (error) {\n        ctx.logger.error('security_secrets_delete failed', { error });\n        return errorResult(\n          `Failed to delete secret: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n}\n","/**\n * Security module — workspace vaults & secrets\n * (<product>_security_vaults_{list,get,create,delete},\n *  <product>_security_secrets_{list,get,reveal,set,update,rotate,delete}).\n *\n * Backend: ~/products/wspace/security/wspace-security-svc/.\n * Ported from cli-sdk/src/modules/security/. The CLI reads secret values from\n * stdin; in MCP they come in as the `value` / `newValue` tool arguments.\n */\n\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { McpContext, McpModule, ModuleRegistration } from '../../core/index.js';\nimport { registerSecurityTools } from './tools.js';\n\nconst securityModule: McpModule = {\n  id: 'security',\n  version: '0.0.1',\n  displayName: 'Security',\n  dependsOn: ['auth'],\n  capabilities: { tools: {} },\n\n  register(server: McpServer, ctx: McpContext): ModuleRegistration {\n    const tools: string[] = [];\n    const track = (n: string): string => {\n      tools.push(n);\n      return n;\n    };\n\n    registerSecurityTools(server, ctx, track);\n\n    return { tools, resources: [], prompts: [] };\n  },\n};\n\nexport default securityModule;\n"]}

package/dist/modules/store/index.cjs

@@ -138,6 +138,38 @@ var GET_LICENSES = `
     }
   }
 `;
+var CLEAR_CART = `
+  mutation ClearCart {
+    clearCart {
+      cart {
+        id currency subtotal total itemCount isEmpty
+        items { id productId quantity }
+      }
+      errors { code field message }
+    }
+  }
+`;
+var GET_MY_PUBLISHER = `
+  query MyPublisher {
+    myPublisher {
+      id name legalName email contactEmail websiteUrl
+      bio logoUrl isVerified verificationStatus
+      productCount totalSales totalEarnings tier
+      createdAt updatedAt
+    }
+  }
+`;
+var GET_MY_PUBLISHER_PRODUCTS = `
+  query MyPublisherProducts {
+    myPublisher {
+      id productCount
+      products {
+        id name slug description price currency type status downloads
+        publisher { id name isVerified }
+      }
+    }
+  }
+`;
 
 // src/modules/store/tools.ts
 function resolveWorkspaceId(ctx, override) {
@@ -314,6 +346,30 @@ function registerStoreTools(server, ctx, track) {
       }
     }
   );
+  server.registerTool(
+    track(mcpToolName(ctx.productName, "store_cart_clear")),
+    {
+      title: "Clear Cart",
+      description: "Remove every item from the current user's active cart. Returns the resulting empty cart payload.",
+      inputSchema: {}
+    },
+    async () => {
+      try {
+        const data = await ctx.gql.global.request(CLEAR_CART);
+        const payload = data.clearCart;
+        if (payload?.errors && payload.errors.length > 0) {
+          const first = payload.errors[0];
+          return errorResult(`Failed to clear cart: ${first.code} ${first.message}`);
+        }
+        return jsonResult(payload?.cart ?? null);
+      } catch (error) {
+        ctx.logger.error("store_cart_clear failed", { error: String(error) });
+        return errorResult(
+          `Failed to clear cart: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+    }
+  );
   server.registerTool(
     track(mcpToolName(ctx.productName, "store_orders_list")),
     {
@@ -424,6 +480,52 @@ function registerStoreTools(server, ctx, track) {
       }
     }
   );
+  server.registerTool(
+    track(mcpToolName(ctx.productName, "store_publisher_get")),
+    {
+      title: "Get Publisher",
+      description: "Fetch the current user's publisher profile (verification status, tier, totals). Returns null if no publisher profile exists yet.",
+      inputSchema: {}
+    },
+    async () => {
+      try {
+        const data = await ctx.gql.global.request(
+          GET_MY_PUBLISHER
+        );
+        return jsonResult(data.myPublisher);
+      } catch (error) {
+        ctx.logger.error("store_publisher_get failed", { error: String(error) });
+        return errorResult(
+          `Failed to get publisher: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+    }
+  );
+  server.registerTool(
+    track(mcpToolName(ctx.productName, "store_publisher_products")),
+    {
+      title: "List Publisher Products",
+      description: "List products published by the current user's publisher profile. Returns { publisherId, productCount, products } or null if no profile exists.",
+      inputSchema: {}
+    },
+    async () => {
+      try {
+        const data = await ctx.gql.global.request(GET_MY_PUBLISHER_PRODUCTS);
+        const p = data.myPublisher;
+        if (!p) return jsonResult(null);
+        return jsonResult({
+          publisherId: p.id,
+          productCount: p.productCount,
+          products: p.products
+        });
+      } catch (error) {
+        ctx.logger.error("store_publisher_products failed", { error: String(error) });
+        return errorResult(
+          `Failed to list publisher products: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+    }
+  );
 }
 
 // src/modules/store/index.ts

package/dist/modules/store/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/core/errors.ts","../../../src/core/result.ts","../../../src/core/tool-name.ts","../../../src/modules/store/operations.ts","../../../src/modules/store/tools.ts","../../../src/modules/store/index.ts"],"names":["z"],"mappings":";;;;;;;;;;;AA8BO,IAAM,gBAAA,GAAN,cAA+B,KAAA,CAAM;AAAA,EACjB,KAAA;AAAA,EAEzB,WAAA,CAAY,SAAiB,KAAA,EAAiB;AAC5C,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAA;AACZ,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AACF,CAAA;;;ACCO,SAAS,UAAA,CAAW,MAAe,UAAA,EAAkD;AAC1F,EAAA,MAAM,MAAA,GAAqB;AAAA,IACzB,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAA,EAAG;AAAA,GACjE;AAIA,EAAA,OAAO,MAAA;AACT;AAaO,SAAS,WAAA,CAAY,SAAiB,IAAA,EAA2B;AACtE,EAAA,MAAM,IAAA,GAAO,IAAA,GAAO,CAAA,EAAG,OAAO;;AAAA,MAAA,EAAa,IAAI,CAAA,CAAA,GAAK,OAAA;AACpD,EAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,CAAA,EAAG,OAAA,EAAS,IAAA,EAAK;AAC5D;;;ACnDA,IAAM,oBAAA,GAAuB,EAAA;AAE7B,SAAS,cAAA,CAAe,MAAc,IAAA,EAA8C;AAClF,EAAA,IAAuB,IAAA,CAAK,MAAA,GAAS,oBAAA,EAAsB;AACzD,IAAA,MAAM,IAAI,gBAAA;AAAA,MACR,CAAA,WAAA,EAAc,IAAI,CAAA,UAAA,EAAa,oBAAoB,CAAA,8CAAA;AAAA,KACrD;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,WAAA,CAAY,gBAAwB,KAAA,EAAyB;AAC3E,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,iBAAiB,sCAAsC,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,IAAA,GAAO,CAAC,WAAA,EAAa,GAAG,KAAK,EAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAC7D,EAAA,OAAO,cAAA,CAAe,IAAY,CAAA;AACpC;;;ACjCO,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAUrB,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQrB,IAAM,iBAAA,GAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAS1B,IAAM,OAAA,GAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAShB,IAAM,WAAA,GAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQpB,IAAM,gBAAA,GAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQzB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQtB,IAAM,UAAA,GAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQnB,IAAM,SAAA,GAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AASlB,IAAM,sBAAA,GAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQ/B,IAAM,iBAAA,GAAoB;AAAA;AAAA;AAAA;AAAA,CAAA;AAM1B,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;;;ACpC5B,SAAS,kBAAA,CAAmB,KAAiB,QAAA,EAA6C;AACxF,EAAA,IAAI,QAAA,KAAa,MAAA,IAAa,QAAA,KAAa,EAAA,EAAI,OAAO,QAAA;AACtD,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,IAAA,CAAK,IAAA,EAAK;AAC3B,EAAA,IAAI,CAAC,IAAA,EAAM,WAAA,EAAa,OAAO,IAAA;AAC/B,EAAA,OAAO,IAAA,CAAK,WAAA;AACd;AAEO,SAAS,kBAAA,CACd,MAAA,EACA,GAAA,EACA,KAAA,EACM;AAEN,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,cAAc,CAAC,CAAA;AAAA,IAClD;AAAA,MACE,KAAA,EAAO,cAAA;AAAA,MACP,WAAA,EAAa,oEAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,KAAA,EAAOA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,cAAc,CAAA;AAAA,QACzC,MAAMA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qBAAqB,CAAA;AAAA,QAC1D,UAAUA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,iBAAiB;AAAA;AAC5D,KACF;AAAA,IACA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,UAAS,KAAM;AACnC,MAAA,IAAI;AACF,QAAA,MAAM,UAAmC,EAAC;AAC1C,QAAA,IAAI,IAAA,KAAS,KAAA,CAAA,EAAW,OAAA,CAAQ,WAAA,GAAc,KAAK,WAAA,EAAY;AAC/D,QAAA,IAAI,QAAA,KAAa,KAAA,CAAA,EAAW,OAAA,CAAQ,QAAA,GAAW,QAAA;AAC/C,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAAyC,YAAA,EAAc;AAAA,UACvF,KAAA;AAAA,UACA,SAAS,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,SAAS,OAAA,GAAU,KAAA;AAAA,SAClD,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,WAAW,CAAA;AAAA,MACpC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,qBAAA,EAAuB,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAChE,QAAA,OAAO,WAAA;AAAA,UACL,2BAA2B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,cAAc,CAAC,CAAA;AAAA,IAClD;AAAA,MACE,KAAA,EAAO,cAAA;AAAA,MACP,WAAA,EAAa,4EAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,UAAUA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,iBAAiB,CAAA;AAAA,QAC1D,MAAMA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qBAAqB,CAAA;AAAA,QAC1D,OAAOA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,WAAW,CAAA;AAAA,QACjD,QAAQA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,cAAc;AAAA;AACvD,KACF;AAAA,IACA,OAAO,EAAE,QAAA,EAAU,IAAA,EAAM,KAAA,EAAO,QAAO,KAAM;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,QAAiC,EAAC;AACxC,QAAA,IAAI,QAAA,KAAa,KAAA,CAAA,EAAW,KAAA,CAAM,QAAA,GAAW,QAAA;AAC7C,QAAA,IAAI,IAAA,KAAS,KAAA,CAAA,EAAW,KAAA,CAAM,WAAA,GAAc,KAAK,WAAA,EAAY;AAC7D,QAAA,IAAI,KAAA,KAAU,KAAA,CAAA,EAAW,KAAA,CAAM,KAAA,GAAQ,KAAA;AACvC,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,KAAA,CAAM,MAAA,GAAS,MAAA;AACzC,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,OAAO,OAAA,CAO/B,YAAA,EAAc,EAAE,KAAA,EAAO,CAAA;AAC1B,QAAA,OAAO,UAAA,CAAW,KAAK,WAAW,CAAA;AAAA,MACpC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,qBAAA,EAAuB,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAChE,QAAA,OAAO,WAAA;AAAA,UACL,2BAA2B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,mBAAmB,CAAC,CAAA;AAAA,IACvD;AAAA,MACE,KAAA,EAAO,mBAAA;AAAA,MACP,WAAA,EAAa,kCAAA;AAAA,MACb,WAAA,EAAa,EAAE,EAAA,EAAIA,KAAA,CAAE,QAAO,CAAE,QAAA,CAAS,YAAY,CAAA;AAAE,KACvD;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,OAAA;AAAA,UAChC,iBAAA;AAAA,UACA,EAAE,EAAA;AAAG,SACP;AACA,QAAA,IAAI,CAAC,IAAA,CAAK,UAAA,SAAmB,WAAA,CAAY,CAAA,QAAA,EAAW,EAAE,CAAA,UAAA,CAAY,CAAA;AAClE,QAAA,OAAO,UAAA,CAAW,KAAK,UAAU,CAAA;AAAA,MACnC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,0BAAA,EAA4B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACrE,QAAA,OAAO,WAAA;AAAA,UACL,0BAA0B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAClF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,iBAAiB,CAAC,CAAA;AAAA,IACrD;AAAA,MACE,KAAA,EAAO,WAAA;AAAA,MACP,WAAA,EAAa,+BAAA;AAAA,MACb,aAAa;AAAC,KAChB;AAAA,IACA,YAAY;AACV,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAA6B,OAAO,CAAA;AACtE,QAAA,OAAO,UAAA,CAAW,KAAK,MAAM,CAAA;AAAA,MAC/B,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,wBAAA,EAA0B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACnE,QAAA,OAAO,WAAA;AAAA,UACL,yBAAyB,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACjF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,gBAAgB,CAAC,CAAA;AAAA,IACpD;AAAA,MACE,KAAA,EAAO,aAAA;AAAA,MACP,WAAA,EAAa,mDAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,OAAA,EAASA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,YAAY,CAAA;AAAA,QACzC,UAAUA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,sBAAsB,CAAA;AAAA,QAC/D,SAASA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,YAAY;AAAA;AACtD,KACF;AAAA,IACA,OAAO,EAAE,OAAA,EAAS,QAAA,EAAU,SAAQ,KAAM;AACxC,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAiC,EAAE,SAAA,EAAW,OAAA,EAAQ;AAC5D,QAAA,IAAI,QAAA,KAAa,KAAA,CAAA,EAAW,KAAA,CAAM,QAAA,GAAW,QAAA;AAC7C,QAAA,IAAI,OAAA,KAAY,KAAA,CAAA,EAAW,KAAA,CAAM,SAAA,GAAY,OAAA;AAC7C,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,OAAO,OAAA,CAAgC,WAAA,EAAa,EAAE,KAAA,EAAO,CAAA;AACxF,QAAA,OAAO,UAAA,CAAW,KAAK,SAAS,CAAA;AAAA,MAClC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,uBAAA,EAAyB,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAClE,QAAA,OAAO,WAAA;AAAA,UACL,0BAA0B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAClF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,mBAAmB,CAAC,CAAA;AAAA,IACvD;AAAA,MACE,KAAA,EAAO,kBAAA;AAAA,MACP,WAAA,EAAa,+BAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,IAAA,EAAMA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,SAAS,CAAA;AAAA,QACnC,IAAA,EAAMA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,cAAc;AAAA;AAC1C,KACF;AAAA,IACA,OAAO,EAAE,IAAA,EAAM,IAAA,EAAK,KAAM;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,OAAA,CAAQ,gBAAA,EAAkB,EAAE,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,CAAA;AAC7E,QAAA,OAAO,UAAA,CAAW,EAAE,MAAA,EAAQ,SAAA,EAAW,SAAS,wBAAA,EAA0B,IAAA,EAAM,MAAM,CAAA;AAAA,MACxF,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,0BAAA,EAA4B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACrE,QAAA,OAAO,WAAA;AAAA,UACL,+BAA+B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACvF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,qBAAqB,CAAC,CAAA;AAAA,IACzD;AAAA,MACE,KAAA,EAAO,eAAA;AAAA,MACP,WAAA,EACE,sFAAA;AAAA,MACF,WAAA,EAAa,EAAE,MAAA,EAAQA,KAAA,CAAE,QAAO,CAAE,QAAA,CAAS,SAAS,CAAA;AAAE,KACxD;AAAA,IACA,OAAO,EAAE,MAAA,EAAO,KAAM;AACpB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,OAAO,OAAA,CAE/B,aAAA,EAAe,EAAE,MAAA,EAAQ,CAAA;AAC5B,QAAA,OAAO,UAAA,CAAW,KAAK,YAAY,CAAA;AAAA,MACrC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,4BAAA,EAA8B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACvE,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,mBAAmB,CAAC,CAAA;AAAA,IACvD;AAAA,MACE,KAAA,EAAO,aAAA;AAAA,MACP,WAAA,EAAa,mCAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,OAAOA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,wBAAwB,CAAA;AAAA,QAC9D,QAAQA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,0BAA0B;AAAA;AACnE,KACF;AAAA,IACA,OAAO,EAAE,KAAA,EAAO,MAAA,EAAO,KAAM;AAC3B,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAAmC,UAAA,EAAY;AAAA,UAC/E,KAAA;AAAA,UACA,QAAQ,MAAA,IAAU;AAAA,SACnB,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,SAAS,CAAA;AAAA,MAClC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,0BAAA,EAA4B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACrE,QAAA,OAAO,WAAA;AAAA,UACL,0BAA0B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAClF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,kBAAkB,CAAC,CAAA;AAAA,IACtD;AAAA,MACE,KAAA,EAAO,WAAA;AAAA,MACP,WAAA,EAAa,qBAAA;AAAA,MACb,WAAA,EAAa,EAAE,EAAA,EAAIA,KAAA,CAAE,QAAO,CAAE,QAAA,CAAS,UAAU,CAAA;AAAE,KACrD;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,OAAO,OAAA,CAAuC,SAAA,EAAW,EAAE,EAAA,EAAI,CAAA;AAC1F,QAAA,IAAI,CAAC,IAAA,CAAK,QAAA,SAAiB,WAAA,CAAY,CAAA,MAAA,EAAS,EAAE,CAAA,UAAA,CAAY,CAAA;AAC9D,QAAA,OAAO,UAAA,CAAW,KAAK,QAAQ,CAAA;AAAA,MACjC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,yBAAA,EAA2B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACpE,QAAA,OAAO,WAAA;AAAA,UACL,wBAAwB,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAChF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,sBAAsB,CAAC,CAAA;AAAA,IAC1D;AAAA,MACE,KAAA,EAAO,yBAAA;AAAA,MACP,WAAA,EAAa,kEAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,oCAAoC;AAAA;AAChF,KACF;AAAA,IACA,OAAO,EAAE,SAAA,EAAU,KAAM;AACvB,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,GAAA,EAAK,SAAS,CAAA;AAC7C,QAAA,IAAI,CAAC,GAAA,EAAK;AACR,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAO/B,sBAAA,EAAwB,EAAE,WAAA,EAAa,GAAA,EAAK,CAAA;AAC/C,QAAA,OAAO,UAAA,CAAW,KAAK,oBAAoB,CAAA;AAAA,MAC7C,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,6BAAA,EAA+B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACxE,QAAA,OAAO,WAAA;AAAA,UACL,sCAAsC,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAC9F;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,2BAA2B,CAAC,CAAA;AAAA,IAC/D;AAAA,MACE,KAAA,EAAO,mBAAA;AAAA,MACP,WAAA,EAAa,yCAAA;AAAA,MACb,WAAA,EAAa,EAAE,cAAA,EAAgBA,KAAA,CAAE,QAAO,CAAE,QAAA,CAAS,iBAAiB,CAAA;AAAE,KACxE;AAAA,IACA,OAAO,EAAE,cAAA,EAAe,KAAM;AAC5B,MAAA,IAAI;AACF,QAAA,MAAM,IAAI,GAAA,CAAI,MAAA,CAAO,QAAQ,iBAAA,EAAmB,EAAE,gBAAgB,CAAA;AAClE,QAAA,OAAO,WAAW,EAAE,MAAA,EAAQ,WAAW,OAAA,EAAS,qBAAA,EAAuB,gBAAgB,CAAA;AAAA,MACzF,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,kCAAA,EAAoC,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAC7E,QAAA,OAAO,WAAA;AAAA,UACL,gCAAgC,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACxF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,qBAAqB,CAAC,CAAA;AAAA,IACzD;AAAA,MACE,KAAA,EAAO,eAAA;AAAA,MACP,WAAA,EAAa,mCAAA;AAAA,MACb,WAAA,EAAa,EAAE,WAAA,EAAaA,KAAA,CAAE,QAAO,CAAE,QAAA,CAAS,gBAAgB,CAAA;AAAE,KACpE;AAAA,IACA,OAAO,EAAE,WAAA,EAAY,KAAM;AACzB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAE/B,YAAA,EAAc,EAAE,aAAA,EAAe,WAAA,EAAa,CAAA;AAC/C,QAAA,OAAO,UAAA,CAAW,KAAK,WAAW,CAAA;AAAA,MACpC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,4BAAA,EAA8B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACvE,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AACF;;;ACjXA,IAAM,WAAA,GAAyB;AAAA,EAC7B,EAAA,EAAI,OAAA;AAAA,EACJ,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAa,OAAA;AAAA,EACb,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,EAClB,YAAA,EAAc,EAAE,KAAA,EAAO,EAAC,EAAE;AAAA,EAE1B,QAAA,CAAS,QAAmB,GAAA,EAAqC;AAC/D,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,MAAM,KAAA,GAAQ,CAAC,CAAA,KAAsB;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,CAAA;AACZ,MAAA,OAAO,CAAA;AAAA,IACT,CAAA;AAEA,IAAA,kBAAA,CAAmB,MAAA,EAAQ,KAAK,KAAK,CAAA;AAErC,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,EAAC,EAAG,OAAA,EAAS,EAAC,EAAE;AAAA,EAC7C;AACF,CAAA;AAEA,IAAO,aAAA,GAAQ","file":"index.cjs","sourcesContent":["/**\n * Error classes for MCP SDK.\n *\n * Modules MUST throw these instead of throwing raw Errors. The registerTool\n * wrapper in result.ts catches and maps them to MCP-protocol-compliant\n * `{ isError: true, content: [...] }` responses.\n *\n * Throwing past the wrapper to the protocol surfaces as JSON-RPC -32603 to\n * the client and is a protocol bug.\n */\n\nexport class McpUserError extends Error {\n  public readonly hint: string | undefined;\n\n  constructor(message: string, opts?: { hint?: string }) {\n    super(message);\n    this.name = 'McpUserError';\n    this.hint = opts?.hint;\n  }\n}\n\nexport class McpAuthError extends McpUserError {\n  constructor(message: string, opts?: { hint?: string }) {\n    super(message, {\n      hint: opts?.hint ?? 'Run the auth_login tool to authenticate.',\n    });\n    this.name = 'McpAuthError';\n  }\n}\n\nexport class McpInternalError extends Error {\n  public override readonly cause: unknown;\n\n  constructor(message: string, cause?: unknown) {\n    super(message);\n    this.name = 'McpInternalError';\n    this.cause = cause;\n  }\n}\n","/**\n * MCP tool result helpers + central handler.\n *\n * Modules NEVER call server.registerTool directly — they use registerTool()\n * from this module so the central try/catch wraps the handler and:\n *   - maps thrown McpUserError / McpAuthError / McpInternalError to\n *     MCP-protocol-compliant `{ isError: true, content: [...] }` shapes\n *   - threads `_meta.progressToken` into ctx.progress for long ops\n *   - emits a structured log line on every error\n *   - never leaks `cause` from McpInternalError to the client\n *\n * This is the analog of cli-sdk's createProgram() central error handler.\n */\n\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { ZodRawShape } from 'zod';\nimport type { McpContext } from './context.js';\nimport { McpAuthError, McpInternalError, McpUserError } from './errors.js';\n\nexport interface ToolTextContent {\n  type: 'text';\n  text: string;\n  [k: string]: unknown;\n}\n\nexport interface ToolResult {\n  content: ToolTextContent[];\n  isError?: boolean;\n  structuredContent?: Record<string, unknown>;\n  [k: string]: unknown;\n}\n\nexport interface ToolMeta {\n  progressToken?: string | number;\n}\n\n/**\n * Build a successful tool result with JSON content (pretty-printed).\n */\nexport function jsonResult(data: unknown, structured?: Record<string, unknown>): ToolResult {\n  const result: ToolResult = {\n    content: [{ type: 'text', text: JSON.stringify(data, null, 2) }],\n  };\n  if (structured !== undefined) {\n    result.structuredContent = structured;\n  }\n  return result;\n}\n\n/**\n * Build a successful tool result with plain text content.\n */\nexport function textResult(text: string): ToolResult {\n  return { content: [{ type: 'text', text }] };\n}\n\n/**\n * Build an error tool result. Honors MCP's `{ isError: true, content }` shape.\n * Optional hint is appended on a new line so the LLM can react.\n */\nexport function errorResult(message: string, hint?: string): ToolResult {\n  const text = hint ? `${message}\\n\\nHint: ${hint}` : message;\n  return { content: [{ type: 'text', text }], isError: true };\n}\n\nexport interface ToolMetadata {\n  title: string;\n  description: string;\n  inputSchema?: ZodRawShape;\n}\n\nexport type ToolHandler<TArgs = Record<string, unknown>> = (\n  args: TArgs,\n  ctx: McpContext,\n  meta: ToolMeta,\n) => Promise<unknown>;\n\n/**\n * Register a tool with the central error wrapper.\n *\n * The handler returns a plain value or void. The wrapper:\n *   - wraps non-undefined returns in jsonResult()\n *   - if the value already looks like a ToolResult (has `content`), passes through\n *   - catches McpAuthError / McpUserError / McpInternalError / generic Error\n *   - logs every error via ctx.logger.error\n */\nexport function registerTool<TArgs extends Record<string, unknown>>(\n  server: McpServer,\n  ctx: McpContext,\n  name: string,\n  metadata: ToolMetadata,\n  handler: ToolHandler<TArgs>,\n): void {\n  const sdkConfig = {\n    title: metadata.title,\n    description: metadata.description,\n    ...(metadata.inputSchema ? { inputSchema: metadata.inputSchema } : {}),\n  };\n\n  // The MCP SDK's registerTool signature is `(name, config, handler)`. The\n  // handler arity depends on whether inputSchema is present (1-arg without,\n  // 2-arg with). We accept a unified handler shape and dispatch at runtime.\n  // The SDK's typing is strict and conditional on the inputSchema generic;\n  // bypass with a cast since runtime acceptance is unconditional.\n  const wrapped = async (...callbackArgs: unknown[]): Promise<ToolResult> => {\n    const hasArgs = callbackArgs.length === 2;\n    const args = (hasArgs ? callbackArgs[0] : {}) as TArgs;\n    const extra = (hasArgs ? callbackArgs[1] : callbackArgs[0]) as\n      | { _meta?: { progressToken?: string | number } }\n      | undefined;\n\n    const progressToken = extra?._meta?.progressToken;\n    const meta: ToolMeta = progressToken !== undefined ? { progressToken } : {};\n\n    try {\n      const result = await handler(args, ctx, meta);\n      if (isToolResult(result)) return result;\n      if (result === undefined) return textResult('OK');\n      return jsonResult(result);\n    } catch (error) {\n      return mapErrorToResult(error, ctx, name);\n    }\n  };\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  (server as any).registerTool(name, sdkConfig, wrapped);\n}\n\nfunction isToolResult(value: unknown): value is ToolResult {\n  return (\n    !!value &&\n    typeof value === 'object' &&\n    'content' in value &&\n    Array.isArray((value as ToolResult).content)\n  );\n}\n\nfunction mapErrorToResult(error: unknown, ctx: McpContext, toolName: string): ToolResult {\n  if (error instanceof McpAuthError) {\n    ctx.logger.warn(`${toolName}: auth required`, { message: error.message });\n    return errorResult(error.message, error.hint);\n  }\n  if (error instanceof McpUserError) {\n    ctx.logger.info(`${toolName}: user error`, { message: error.message });\n    return errorResult(error.message, error.hint);\n  }\n  if (error instanceof McpInternalError) {\n    ctx.logger.error(`${toolName}: internal error`, {\n      message: error.message,\n      cause: stringifyCause(error.cause),\n    });\n    return errorResult(`Internal error in ${toolName}.`);\n  }\n  const message = error instanceof Error ? error.message : String(error);\n  ctx.logger.error(`${toolName}: unhandled error`, { message });\n  return errorResult(`${toolName}: ${message}`);\n}\n\nfunction stringifyCause(cause: unknown): string | undefined {\n  if (cause === undefined || cause === null) return undefined;\n  if (cause instanceof Error) return cause.message;\n  try {\n    return JSON.stringify(cause);\n  } catch {\n    return String(cause);\n  }\n}\n","/**\n * Tool / resource / prompt naming helpers.\n *\n * Mandatory product prefix avoids collisions when Claude Desktop runs\n * multiple MCP servers concurrently (typical setup is ~6).\n *\n * Tool names are capped at 63 characters — Claude Desktop pre-1.x\n * truncated at 64 in some versions.\n */\n\nimport { McpInternalError } from './errors.js';\n\nconst MAX_TOOL_NAME_LENGTH = 63;\n\nfunction assertSafeName(name: string, kind: 'tool' | 'resource' | 'prompt'): string {\n  if (kind === 'tool' && name.length > MAX_TOOL_NAME_LENGTH) {\n    throw new McpInternalError(\n      `Tool name '${name}' exceeds ${MAX_TOOL_NAME_LENGTH} characters (some MCP clients truncate at 64).`,\n    );\n  }\n  return name;\n}\n\n/**\n * Build a tool name. Format: `<productName>_<...parts>` (snake_case).\n * Example: mcpToolName('vibecontrols', 'vibes', 'list') -> 'vibecontrols_vibes_list'\n */\nexport function mcpToolName(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpToolName: productName is required');\n  }\n  const name = [productName, ...parts].filter(Boolean).join('_');\n  return assertSafeName(name, 'tool');\n}\n\n/**\n * Build a resource URI. Format: `<productName>://<...parts>`.\n * Example: mcpResourceUri('vibecontrols', 'schema') -> 'vibecontrols://schema'\n */\nexport function mcpResourceUri(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpResourceUri: productName is required');\n  }\n  return `${productName}://${parts.filter(Boolean).join('/')}`;\n}\n\n/**\n * Build a prompt name. Format: `<productName>-<...parts>` (kebab-case).\n * Example: mcpPromptName('vibecontrols', 'setup') -> 'vibecontrols-setup'\n */\nexport function mcpPromptName(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpPromptName: productName is required');\n  }\n  return [productName, ...parts].filter(Boolean).join('-');\n}\n\nexport const TOOL_NAME_LIMIT = MAX_TOOL_NAME_LENGTH;\n","export const BROWSE_STORE = `\n  query BrowseStore($input: BrowseStoreInput!) {\n    browseStore(input: $input) {\n      products { id name description price currency type status }\n      facets { categories types }\n      totalCount hasMore\n    }\n  }\n`;\n\nexport const SEARCH_STORE = `\n  query SearchStore($query: String!, $filters: StoreFiltersInput) {\n    searchStore(query: $query, filters: $filters) {\n      id name price currency type activeInstallCount\n    }\n  }\n`;\n\nexport const GET_STORE_PRODUCT = `\n  query GetStoreProduct($id: ID!) {\n    getProduct(id: $id) {\n      id name description price currency type status\n      publisher { name }\n    }\n  }\n`;\n\nexport const MY_CART = `\n  query MyCart {\n    myCart {\n      id currency subtotal total itemCount isEmpty\n      items { id productId quantity }\n    }\n  }\n`;\n\nexport const ADD_TO_CART = `\n  mutation AddToCart($input: AddToCartInput!) {\n    addToCart(input: $input) {\n      id itemCount subtotal items { productId quantity }\n    }\n  }\n`;\n\nexport const REMOVE_FROM_CART = `\n  mutation RemoveFromCart($cartId: ID!, $itemId: ID!) {\n    removeFromCart(cartId: $cartId, itemId: $itemId) {\n      id itemCount subtotal\n    }\n  }\n`;\n\nexport const CHECKOUT_CART = `\n  mutation CheckoutCart($cartId: ID!) {\n    checkoutCart(cartId: $cartId) {\n      success order { id total status }\n    }\n  }\n`;\n\nexport const GET_ORDERS = `\n  query GetOrders($limit: Int, $offset: Int) {\n    getOrders(limit: $limit, offset: $offset) {\n      id status total currency createdAt\n    }\n  }\n`;\n\nexport const GET_ORDER = `\n  query GetOrder($id: ID!) {\n    getOrder(id: $id) {\n      id status total currency paidAt billingAccountId\n      lineItems { productId quantity unitPrice }\n    }\n  }\n`;\n\nexport const GET_INSTALLED_PRODUCTS = `\n  query GetInstalledProducts($workspaceId: ID!) {\n    getInstalledProducts(workspaceId: $workspaceId) {\n      id application { id name } status installedAt lastUsedAt\n    }\n  }\n`;\n\nexport const UNINSTALL_PRODUCT = `\n  mutation UninstallProduct($installationId: ID!) {\n    uninstallProduct(installationId: $installationId) { success }\n  }\n`;\n\nexport const GET_LICENSES = `\n  query GetLicenses($entitlementId: ID!) {\n    getLicenses(entitlementId: $entitlementId) {\n      id status validFrom expiresAt\n    }\n  }\n`;\n","/**\n * Store module tools — marketplace search, cart, orders, installed apps,\n * licenses. Backend: ~/products/global/store/global-store-svc/.\n * Ported from cli-sdk/src/modules/store/.\n *\n * Note: store_cart_checkout completes the cart server-side (no browser\n * redirect). Provider-bound payment capture (Stripe checkout pages) is not\n * exposed in cli-sdk and is omitted here.\n */\n\nimport { z } from 'zod';\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { jsonResult, errorResult, mcpToolName, type McpContext } from '../../core/index.js';\nimport {\n  BROWSE_STORE,\n  SEARCH_STORE,\n  GET_STORE_PRODUCT,\n  MY_CART,\n  ADD_TO_CART,\n  REMOVE_FROM_CART,\n  CHECKOUT_CART,\n  GET_ORDERS,\n  GET_ORDER,\n  GET_INSTALLED_PRODUCTS,\n  UNINSTALL_PRODUCT,\n  GET_LICENSES,\n} from './operations.js';\n\ninterface StoreProduct {\n  id: string;\n  name: string;\n  price?: number;\n  currency?: string;\n  type?: string;\n  status?: string;\n}\n\ninterface CartRow {\n  id: string;\n  itemCount?: number;\n  subtotal?: number;\n  total?: number;\n  currency?: string;\n  isEmpty?: boolean;\n  items?: Array<{ id: string; productId: string; quantity: number }>;\n}\n\ninterface OrderRow {\n  id: string;\n  status?: string;\n  total?: number;\n  currency?: string;\n  createdAt?: string;\n}\n\nfunction resolveWorkspaceId(ctx: McpContext, override: string | undefined): string | null {\n  if (override !== undefined && override !== '') return override;\n  const auth = ctx.auth.read();\n  if (!auth?.workspaceId) return null;\n  return auth.workspaceId;\n}\n\nexport function registerStoreTools(\n  server: McpServer,\n  ctx: McpContext,\n  track: (n: string) => string,\n): void {\n  // ── Search / browse / get ──────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_search')),\n    {\n      title: 'Search Store',\n      description: 'Search the marketplace for products by query and optional filters.',\n      inputSchema: {\n        query: z.string().describe('Search query'),\n        type: z.string().optional().describe('Product type filter'),\n        category: z.string().optional().describe('Category filter'),\n      },\n    },\n    async ({ query, type, category }) => {\n      try {\n        const filters: Record<string, unknown> = {};\n        if (type !== undefined) filters.productType = type.toUpperCase();\n        if (category !== undefined) filters.category = category;\n        const data = await ctx.gql.global.request<{ searchStore: StoreProduct[] }>(SEARCH_STORE, {\n          query,\n          filters: Object.keys(filters).length ? filters : undefined,\n        });\n        return jsonResult(data.searchStore);\n      } catch (error) {\n        ctx.logger.error('store_search failed', { error: String(error) });\n        return errorResult(\n          `Failed to search store: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_browse')),\n    {\n      title: 'Browse Store',\n      description: 'Browse the marketplace with structured input (categories, facets, paging).',\n      inputSchema: {\n        category: z.string().optional().describe('Category filter'),\n        type: z.string().optional().describe('Product type filter'),\n        limit: z.number().optional().describe('Page size'),\n        offset: z.number().optional().describe('Skip results'),\n      },\n    },\n    async ({ category, type, limit, offset }) => {\n      try {\n        const input: Record<string, unknown> = {};\n        if (category !== undefined) input.category = category;\n        if (type !== undefined) input.productType = type.toUpperCase();\n        if (limit !== undefined) input.limit = limit;\n        if (offset !== undefined) input.offset = offset;\n        const data = await ctx.gql.global.request<{\n          browseStore: {\n            products: StoreProduct[];\n            facets: { categories: string[]; types: string[] };\n            totalCount: number;\n            hasMore: boolean;\n          };\n        }>(BROWSE_STORE, { input });\n        return jsonResult(data.browseStore);\n      } catch (error) {\n        ctx.logger.error('store_browse failed', { error: String(error) });\n        return errorResult(\n          `Failed to browse store: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_get_product')),\n    {\n      title: 'Get Store Product',\n      description: 'Get a marketplace product by ID.',\n      inputSchema: { id: z.string().describe('Product ID') },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.global.request<{ getProduct: StoreProduct | null }>(\n          GET_STORE_PRODUCT,\n          { id },\n        );\n        if (!data.getProduct) return errorResult(`Product ${id} not found`);\n        return jsonResult(data.getProduct);\n      } catch (error) {\n        ctx.logger.error('store_get_product failed', { error: String(error) });\n        return errorResult(\n          `Failed to get product: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  // ── Cart ───────────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_cart_list')),\n    {\n      title: 'Show Cart',\n      description: \"Show the current user's cart.\",\n      inputSchema: {},\n    },\n    async () => {\n      try {\n        const data = await ctx.gql.global.request<{ myCart: CartRow }>(MY_CART);\n        return jsonResult(data.myCart);\n      } catch (error) {\n        ctx.logger.error('store_cart_list failed', { error: String(error) });\n        return errorResult(\n          `Failed to fetch cart: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_cart_add')),\n    {\n      title: 'Add to Cart',\n      description: 'Add a product (and optional variant) to the cart.',\n      inputSchema: {\n        product: z.string().describe('Product ID'),\n        quantity: z.number().optional().describe('Quantity (default 1)'),\n        variant: z.string().optional().describe('Variant ID'),\n      },\n    },\n    async ({ product, quantity, variant }) => {\n      try {\n        const input: Record<string, unknown> = { productId: product };\n        if (quantity !== undefined) input.quantity = quantity;\n        if (variant !== undefined) input.variantId = variant;\n        const data = await ctx.gql.global.request<{ addToCart: CartRow }>(ADD_TO_CART, { input });\n        return jsonResult(data.addToCart);\n      } catch (error) {\n        ctx.logger.error('store_cart_add failed', { error: String(error) });\n        return errorResult(\n          `Failed to add to cart: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_cart_remove')),\n    {\n      title: 'Remove from Cart',\n      description: 'Remove an item from the cart.',\n      inputSchema: {\n        cart: z.string().describe('Cart ID'),\n        item: z.string().describe('Cart item ID'),\n      },\n    },\n    async ({ cart, item }) => {\n      try {\n        await ctx.gql.global.request(REMOVE_FROM_CART, { cartId: cart, itemId: item });\n        return jsonResult({ status: 'success', message: 'Item removed from cart', cart, item });\n      } catch (error) {\n        ctx.logger.error('store_cart_remove failed', { error: String(error) });\n        return errorResult(\n          `Failed to remove cart item: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_cart_checkout')),\n    {\n      title: 'Checkout Cart',\n      description:\n        'Check out the cart server-side (uses default payment method on the billing account).',\n      inputSchema: { cartId: z.string().describe('Cart ID') },\n    },\n    async ({ cartId }) => {\n      try {\n        const data = await ctx.gql.global.request<{\n          checkoutCart: { success: boolean; order?: OrderRow };\n        }>(CHECKOUT_CART, { cartId });\n        return jsonResult(data.checkoutCart);\n      } catch (error) {\n        ctx.logger.error('store_cart_checkout failed', { error: String(error) });\n        return errorResult(\n          `Failed to checkout cart: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  // ── Orders ─────────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_orders_list')),\n    {\n      title: 'List Orders',\n      description: 'List orders for the current user.',\n      inputSchema: {\n        limit: z.number().optional().describe('Page size (default 50)'),\n        offset: z.number().optional().describe('Skip results (default 0)'),\n      },\n    },\n    async ({ limit, offset }) => {\n      try {\n        const data = await ctx.gql.global.request<{ getOrders: OrderRow[] }>(GET_ORDERS, {\n          limit,\n          offset: offset ?? 0,\n        });\n        return jsonResult(data.getOrders);\n      } catch (error) {\n        ctx.logger.error('store_orders_list failed', { error: String(error) });\n        return errorResult(\n          `Failed to list orders: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_orders_get')),\n    {\n      title: 'Get Order',\n      description: 'Get an order by ID.',\n      inputSchema: { id: z.string().describe('Order ID') },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.global.request<{ getOrder: OrderRow | null }>(GET_ORDER, { id });\n        if (!data.getOrder) return errorResult(`Order ${id} not found`);\n        return jsonResult(data.getOrder);\n      } catch (error) {\n        ctx.logger.error('store_orders_get failed', { error: String(error) });\n        return errorResult(\n          `Failed to get order: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  // ── Installed ──────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_installed_list')),\n    {\n      title: 'List Installed Products',\n      description: 'List installed products in the current (or specified) workspace.',\n      inputSchema: {\n        workspace: z.string().optional().describe('Workspace ID (defaults to current)'),\n      },\n    },\n    async ({ workspace }) => {\n      try {\n        const wid = resolveWorkspaceId(ctx, workspace);\n        if (!wid) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const data = await ctx.gql.global.request<{\n          getInstalledProducts: Array<{\n            id: string;\n            application: { id: string; name: string };\n            status: string;\n            installedAt: string;\n          }>;\n        }>(GET_INSTALLED_PRODUCTS, { workspaceId: wid });\n        return jsonResult(data.getInstalledProducts);\n      } catch (error) {\n        ctx.logger.error('store_installed_list failed', { error: String(error) });\n        return errorResult(\n          `Failed to list installed products: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_installed_uninstall')),\n    {\n      title: 'Uninstall Product',\n      description: 'Uninstall a product by installation ID.',\n      inputSchema: { installationId: z.string().describe('Installation ID') },\n    },\n    async ({ installationId }) => {\n      try {\n        await ctx.gql.global.request(UNINSTALL_PRODUCT, { installationId });\n        return jsonResult({ status: 'success', message: 'Product uninstalled', installationId });\n      } catch (error) {\n        ctx.logger.error('store_installed_uninstall failed', { error: String(error) });\n        return errorResult(\n          `Failed to uninstall product: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  // ── Licenses ───────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_licenses_list')),\n    {\n      title: 'List Licenses',\n      description: 'List licenses for an entitlement.',\n      inputSchema: { entitlement: z.string().describe('Entitlement ID') },\n    },\n    async ({ entitlement }) => {\n      try {\n        const data = await ctx.gql.global.request<{\n          getLicenses: Array<{ id: string; status: string; validFrom: string; expiresAt: string }>;\n        }>(GET_LICENSES, { entitlementId: entitlement });\n        return jsonResult(data.getLicenses);\n      } catch (error) {\n        ctx.logger.error('store_licenses_list failed', { error: String(error) });\n        return errorResult(\n          `Failed to list licenses: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n}\n","/**\n * Store module — marketplace search/browse, cart, orders, installed apps,\n * licenses. Backend: ~/products/global/store/global-store-svc/.\n * Ported from cli-sdk/src/modules/store/.\n */\n\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { McpContext, McpModule, ModuleRegistration } from '../../core/index.js';\nimport { registerStoreTools } from './tools.js';\n\nconst storeModule: McpModule = {\n  id: 'store',\n  version: '0.0.1',\n  displayName: 'Store',\n  dependsOn: ['auth'],\n  capabilities: { tools: {} },\n\n  register(server: McpServer, ctx: McpContext): ModuleRegistration {\n    const tools: string[] = [];\n    const track = (n: string): string => {\n      tools.push(n);\n      return n;\n    };\n\n    registerStoreTools(server, ctx, track);\n\n    return { tools, resources: [], prompts: [] };\n  },\n};\n\nexport default storeModule;\n"]}
+{"version":3,"sources":["../../../src/core/errors.ts","../../../src/core/result.ts","../../../src/core/tool-name.ts","../../../src/modules/store/operations.ts","../../../src/modules/store/tools.ts","../../../src/modules/store/index.ts"],"names":["z"],"mappings":";;;;;;;;;;;AA8BO,IAAM,gBAAA,GAAN,cAA+B,KAAA,CAAM;AAAA,EACjB,KAAA;AAAA,EAEzB,WAAA,CAAY,SAAiB,KAAA,EAAiB;AAC5C,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAA;AACZ,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AACF,CAAA;;;ACCO,SAAS,UAAA,CAAW,MAAe,UAAA,EAAkD;AAC1F,EAAA,MAAM,MAAA,GAAqB;AAAA,IACzB,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAA,EAAG;AAAA,GACjE;AAIA,EAAA,OAAO,MAAA;AACT;AAaO,SAAS,WAAA,CAAY,SAAiB,IAAA,EAA2B;AACtE,EAAA,MAAM,IAAA,GAAO,IAAA,GAAO,CAAA,EAAG,OAAO;;AAAA,MAAA,EAAa,IAAI,CAAA,CAAA,GAAK,OAAA;AACpD,EAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,CAAA,EAAG,OAAA,EAAS,IAAA,EAAK;AAC5D;;;ACnDA,IAAM,oBAAA,GAAuB,EAAA;AAE7B,SAAS,cAAA,CAAe,MAAc,IAAA,EAA8C;AAClF,EAAA,IAAuB,IAAA,CAAK,MAAA,GAAS,oBAAA,EAAsB;AACzD,IAAA,MAAM,IAAI,gBAAA;AAAA,MACR,CAAA,WAAA,EAAc,IAAI,CAAA,UAAA,EAAa,oBAAoB,CAAA,8CAAA;AAAA,KACrD;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,WAAA,CAAY,gBAAwB,KAAA,EAAyB;AAC3E,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,iBAAiB,sCAAsC,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,IAAA,GAAO,CAAC,WAAA,EAAa,GAAG,KAAK,EAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAC7D,EAAA,OAAO,cAAA,CAAe,IAAY,CAAA;AACpC;;;ACjCO,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAUrB,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQrB,IAAM,iBAAA,GAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAS1B,IAAM,OAAA,GAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAShB,IAAM,WAAA,GAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQpB,IAAM,gBAAA,GAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQzB,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQtB,IAAM,UAAA,GAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQnB,IAAM,SAAA,GAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AASlB,IAAM,sBAAA,GAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQ/B,IAAM,iBAAA,GAAoB;AAAA;AAAA;AAAA;AAAA,CAAA;AAM1B,IAAM,YAAA,GAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQrB,IAAM,UAAA,GAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAYnB,IAAM,gBAAA,GAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAWzB,IAAM,yBAAA,GAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;;;AChEzC,SAAS,kBAAA,CAAmB,KAAiB,QAAA,EAA6C;AACxF,EAAA,IAAI,QAAA,KAAa,MAAA,IAAa,QAAA,KAAa,EAAA,EAAI,OAAO,QAAA;AACtD,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,IAAA,CAAK,IAAA,EAAK;AAC3B,EAAA,IAAI,CAAC,IAAA,EAAM,WAAA,EAAa,OAAO,IAAA;AAC/B,EAAA,OAAO,IAAA,CAAK,WAAA;AACd;AAEO,SAAS,kBAAA,CACd,MAAA,EACA,GAAA,EACA,KAAA,EACM;AAEN,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,cAAc,CAAC,CAAA;AAAA,IAClD;AAAA,MACE,KAAA,EAAO,cAAA;AAAA,MACP,WAAA,EAAa,oEAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,KAAA,EAAOA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,cAAc,CAAA;AAAA,QACzC,MAAMA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qBAAqB,CAAA;AAAA,QAC1D,UAAUA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,iBAAiB;AAAA;AAC5D,KACF;AAAA,IACA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,UAAS,KAAM;AACnC,MAAA,IAAI;AACF,QAAA,MAAM,UAAmC,EAAC;AAC1C,QAAA,IAAI,IAAA,KAAS,KAAA,CAAA,EAAW,OAAA,CAAQ,WAAA,GAAc,KAAK,WAAA,EAAY;AAC/D,QAAA,IAAI,QAAA,KAAa,KAAA,CAAA,EAAW,OAAA,CAAQ,QAAA,GAAW,QAAA;AAC/C,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAAyC,YAAA,EAAc;AAAA,UACvF,KAAA;AAAA,UACA,SAAS,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,SAAS,OAAA,GAAU,KAAA;AAAA,SAClD,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,WAAW,CAAA;AAAA,MACpC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,qBAAA,EAAuB,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAChE,QAAA,OAAO,WAAA;AAAA,UACL,2BAA2B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,cAAc,CAAC,CAAA;AAAA,IAClD;AAAA,MACE,KAAA,EAAO,cAAA;AAAA,MACP,WAAA,EAAa,4EAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,UAAUA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,iBAAiB,CAAA;AAAA,QAC1D,MAAMA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qBAAqB,CAAA;AAAA,QAC1D,OAAOA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,WAAW,CAAA;AAAA,QACjD,QAAQA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,cAAc;AAAA;AACvD,KACF;AAAA,IACA,OAAO,EAAE,QAAA,EAAU,IAAA,EAAM,KAAA,EAAO,QAAO,KAAM;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,QAAiC,EAAC;AACxC,QAAA,IAAI,QAAA,KAAa,KAAA,CAAA,EAAW,KAAA,CAAM,QAAA,GAAW,QAAA;AAC7C,QAAA,IAAI,IAAA,KAAS,KAAA,CAAA,EAAW,KAAA,CAAM,WAAA,GAAc,KAAK,WAAA,EAAY;AAC7D,QAAA,IAAI,KAAA,KAAU,KAAA,CAAA,EAAW,KAAA,CAAM,KAAA,GAAQ,KAAA;AACvC,QAAA,IAAI,MAAA,KAAW,KAAA,CAAA,EAAW,KAAA,CAAM,MAAA,GAAS,MAAA;AACzC,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,OAAO,OAAA,CAO/B,YAAA,EAAc,EAAE,KAAA,EAAO,CAAA;AAC1B,QAAA,OAAO,UAAA,CAAW,KAAK,WAAW,CAAA;AAAA,MACpC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,qBAAA,EAAuB,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAChE,QAAA,OAAO,WAAA;AAAA,UACL,2BAA2B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,mBAAmB,CAAC,CAAA;AAAA,IACvD;AAAA,MACE,KAAA,EAAO,mBAAA;AAAA,MACP,WAAA,EAAa,kCAAA;AAAA,MACb,WAAA,EAAa,EAAE,EAAA,EAAIA,KAAA,CAAE,QAAO,CAAE,QAAA,CAAS,YAAY,CAAA;AAAE,KACvD;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,OAAA;AAAA,UAChC,iBAAA;AAAA,UACA,EAAE,EAAA;AAAG,SACP;AACA,QAAA,IAAI,CAAC,IAAA,CAAK,UAAA,SAAmB,WAAA,CAAY,CAAA,QAAA,EAAW,EAAE,CAAA,UAAA,CAAY,CAAA;AAClE,QAAA,OAAO,UAAA,CAAW,KAAK,UAAU,CAAA;AAAA,MACnC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,0BAAA,EAA4B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACrE,QAAA,OAAO,WAAA;AAAA,UACL,0BAA0B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAClF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,iBAAiB,CAAC,CAAA;AAAA,IACrD;AAAA,MACE,KAAA,EAAO,WAAA;AAAA,MACP,WAAA,EAAa,+BAAA;AAAA,MACb,aAAa;AAAC,KAChB;AAAA,IACA,YAAY;AACV,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAA6B,OAAO,CAAA;AACtE,QAAA,OAAO,UAAA,CAAW,KAAK,MAAM,CAAA;AAAA,MAC/B,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,wBAAA,EAA0B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACnE,QAAA,OAAO,WAAA;AAAA,UACL,yBAAyB,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACjF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,gBAAgB,CAAC,CAAA;AAAA,IACpD;AAAA,MACE,KAAA,EAAO,aAAA;AAAA,MACP,WAAA,EAAa,mDAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,OAAA,EAASA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,YAAY,CAAA;AAAA,QACzC,UAAUA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,sBAAsB,CAAA;AAAA,QAC/D,SAASA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,YAAY;AAAA;AACtD,KACF;AAAA,IACA,OAAO,EAAE,OAAA,EAAS,QAAA,EAAU,SAAQ,KAAM;AACxC,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAiC,EAAE,SAAA,EAAW,OAAA,EAAQ;AAC5D,QAAA,IAAI,QAAA,KAAa,KAAA,CAAA,EAAW,KAAA,CAAM,QAAA,GAAW,QAAA;AAC7C,QAAA,IAAI,OAAA,KAAY,KAAA,CAAA,EAAW,KAAA,CAAM,SAAA,GAAY,OAAA;AAC7C,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,OAAO,OAAA,CAAgC,WAAA,EAAa,EAAE,KAAA,EAAO,CAAA;AACxF,QAAA,OAAO,UAAA,CAAW,KAAK,SAAS,CAAA;AAAA,MAClC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,uBAAA,EAAyB,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAClE,QAAA,OAAO,WAAA;AAAA,UACL,0BAA0B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAClF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,mBAAmB,CAAC,CAAA;AAAA,IACvD;AAAA,MACE,KAAA,EAAO,kBAAA;AAAA,MACP,WAAA,EAAa,+BAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,IAAA,EAAMA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,SAAS,CAAA;AAAA,QACnC,IAAA,EAAMA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,cAAc;AAAA;AAC1C,KACF;AAAA,IACA,OAAO,EAAE,IAAA,EAAM,IAAA,EAAK,KAAM;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,OAAA,CAAQ,gBAAA,EAAkB,EAAE,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,CAAA;AAC7E,QAAA,OAAO,UAAA,CAAW,EAAE,MAAA,EAAQ,SAAA,EAAW,SAAS,wBAAA,EAA0B,IAAA,EAAM,MAAM,CAAA;AAAA,MACxF,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,0BAAA,EAA4B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACrE,QAAA,OAAO,WAAA;AAAA,UACL,+BAA+B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACvF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,qBAAqB,CAAC,CAAA;AAAA,IACzD;AAAA,MACE,KAAA,EAAO,eAAA;AAAA,MACP,WAAA,EACE,sFAAA;AAAA,MACF,WAAA,EAAa,EAAE,MAAA,EAAQA,KAAA,CAAE,QAAO,CAAE,QAAA,CAAS,SAAS,CAAA;AAAE,KACxD;AAAA,IACA,OAAO,EAAE,MAAA,EAAO,KAAM;AACpB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,OAAO,OAAA,CAE/B,aAAA,EAAe,EAAE,MAAA,EAAQ,CAAA;AAC5B,QAAA,OAAO,UAAA,CAAW,KAAK,YAAY,CAAA;AAAA,MACrC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,4BAAA,EAA8B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACvE,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,kBAAkB,CAAC,CAAA;AAAA,IACtD;AAAA,MACE,KAAA,EAAO,YAAA;AAAA,MACP,WAAA,EACE,kGAAA;AAAA,MACF,aAAa;AAAC,KAChB;AAAA,IACA,YAAY;AACV,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAK/B,UAAU,CAAA;AACb,QAAA,MAAM,UAAU,IAAA,CAAK,SAAA;AACrB,QAAA,IAAI,OAAA,EAAS,MAAA,IAAU,OAAA,CAAQ,MAAA,CAAO,SAAS,CAAA,EAAG;AAChD,UAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA;AAC9B,UAAA,OAAO,YAAY,CAAA,sBAAA,EAAyB,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,QAC3E;AACA,QAAA,OAAO,UAAA,CAAW,OAAA,EAAS,IAAA,IAAQ,IAAI,CAAA;AAAA,MACzC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,yBAAA,EAA2B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACpE,QAAA,OAAO,WAAA;AAAA,UACL,yBAAyB,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACjF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,mBAAmB,CAAC,CAAA;AAAA,IACvD;AAAA,MACE,KAAA,EAAO,aAAA;AAAA,MACP,WAAA,EAAa,mCAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,OAAOA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,wBAAwB,CAAA;AAAA,QAC9D,QAAQA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,0BAA0B;AAAA;AACnE,KACF;AAAA,IACA,OAAO,EAAE,KAAA,EAAO,MAAA,EAAO,KAAM;AAC3B,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAAmC,UAAA,EAAY;AAAA,UAC/E,KAAA;AAAA,UACA,QAAQ,MAAA,IAAU;AAAA,SACnB,CAAA;AACD,QAAA,OAAO,UAAA,CAAW,KAAK,SAAS,CAAA;AAAA,MAClC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,0BAAA,EAA4B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACrE,QAAA,OAAO,WAAA;AAAA,UACL,0BAA0B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAClF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,kBAAkB,CAAC,CAAA;AAAA,IACtD;AAAA,MACE,KAAA,EAAO,WAAA;AAAA,MACP,WAAA,EAAa,qBAAA;AAAA,MACb,WAAA,EAAa,EAAE,EAAA,EAAIA,KAAA,CAAE,QAAO,CAAE,QAAA,CAAS,UAAU,CAAA;AAAE,KACrD;AAAA,IACA,OAAO,EAAE,EAAA,EAAG,KAAM;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,OAAO,OAAA,CAAuC,SAAA,EAAW,EAAE,EAAA,EAAI,CAAA;AAC1F,QAAA,IAAI,CAAC,IAAA,CAAK,QAAA,SAAiB,WAAA,CAAY,CAAA,MAAA,EAAS,EAAE,CAAA,UAAA,CAAY,CAAA;AAC9D,QAAA,OAAO,UAAA,CAAW,KAAK,QAAQ,CAAA;AAAA,MACjC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,yBAAA,EAA2B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACpE,QAAA,OAAO,WAAA;AAAA,UACL,wBAAwB,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAChF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,sBAAsB,CAAC,CAAA;AAAA,IAC1D;AAAA,MACE,KAAA,EAAO,yBAAA;AAAA,MACP,WAAA,EAAa,kEAAA;AAAA,MACb,WAAA,EAAa;AAAA,QACX,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,oCAAoC;AAAA;AAChF,KACF;AAAA,IACA,OAAO,EAAE,SAAA,EAAU,KAAM;AACvB,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,GAAA,EAAK,SAAS,CAAA;AAC7C,QAAA,IAAI,CAAC,GAAA,EAAK;AACR,UAAA,OAAO,WAAA;AAAA,YACL;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAO/B,sBAAA,EAAwB,EAAE,WAAA,EAAa,GAAA,EAAK,CAAA;AAC/C,QAAA,OAAO,UAAA,CAAW,KAAK,oBAAoB,CAAA;AAAA,MAC7C,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,6BAAA,EAA+B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACxE,QAAA,OAAO,WAAA;AAAA,UACL,sCAAsC,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAC9F;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,2BAA2B,CAAC,CAAA;AAAA,IAC/D;AAAA,MACE,KAAA,EAAO,mBAAA;AAAA,MACP,WAAA,EAAa,yCAAA;AAAA,MACb,WAAA,EAAa,EAAE,cAAA,EAAgBA,KAAA,CAAE,QAAO,CAAE,QAAA,CAAS,iBAAiB,CAAA;AAAE,KACxE;AAAA,IACA,OAAO,EAAE,cAAA,EAAe,KAAM;AAC5B,MAAA,IAAI;AACF,QAAA,MAAM,IAAI,GAAA,CAAI,MAAA,CAAO,QAAQ,iBAAA,EAAmB,EAAE,gBAAgB,CAAA;AAClE,QAAA,OAAO,WAAW,EAAE,MAAA,EAAQ,WAAW,OAAA,EAAS,qBAAA,EAAuB,gBAAgB,CAAA;AAAA,MACzF,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,kCAAA,EAAoC,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAC7E,QAAA,OAAO,WAAA;AAAA,UACL,gCAAgC,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACxF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,qBAAqB,CAAC,CAAA;AAAA,IACzD;AAAA,MACE,KAAA,EAAO,eAAA;AAAA,MACP,WAAA,EAAa,mCAAA;AAAA,MACb,WAAA,EAAa,EAAE,WAAA,EAAaA,KAAA,CAAE,QAAO,CAAE,QAAA,CAAS,gBAAgB,CAAA;AAAE,KACpE;AAAA,IACA,OAAO,EAAE,WAAA,EAAY,KAAM;AACzB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAE/B,YAAA,EAAc,EAAE,aAAA,EAAe,WAAA,EAAa,CAAA;AAC/C,QAAA,OAAO,UAAA,CAAW,KAAK,WAAW,CAAA;AAAA,MACpC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,4BAAA,EAA8B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACvE,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAMA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,qBAAqB,CAAC,CAAA;AAAA,IACzD;AAAA,MACE,KAAA,EAAO,eAAA;AAAA,MACP,WAAA,EACE,kIAAA;AAAA,MACF,aAAa;AAAC,KAChB;AAAA,IACA,YAAY;AACV,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,OAAA;AAAA,UAChC;AAAA,SACF;AACA,QAAA,OAAO,UAAA,CAAW,KAAK,WAAW,CAAA;AAAA,MACpC,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,4BAAA,EAA8B,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AACvE,QAAA,OAAO,WAAA;AAAA,UACL,4BAA4B,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACpF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AAEA,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,0BAA0B,CAAC,CAAA;AAAA,IAC9D;AAAA,MACE,KAAA,EAAO,yBAAA;AAAA,MACP,WAAA,EACE,gJAAA;AAAA,MACF,aAAa;AAAC,KAChB;AAAA,IACA,YAAY;AACV,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,GAAA,CAAI,MAAA,CAAO,QAE/B,yBAAyB,CAAA;AAC5B,QAAA,MAAM,IAAI,IAAA,CAAK,WAAA;AACf,QAAA,IAAI,CAAC,CAAA,EAAG,OAAO,UAAA,CAAW,IAAI,CAAA;AAC9B,QAAA,OAAO,UAAA,CAAW;AAAA,UAChB,aAAa,CAAA,CAAE,EAAA;AAAA,UACf,cAAc,CAAA,CAAE,YAAA;AAAA,UAChB,UAAU,CAAA,CAAE;AAAA,SACb,CAAA;AAAA,MACH,SAAS,KAAA,EAAO;AACd,QAAA,GAAA,CAAI,MAAA,CAAO,MAAM,iCAAA,EAAmC,EAAE,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAC5E,QAAA,OAAO,WAAA;AAAA,UACL,sCAAsC,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SAC9F;AAAA,MACF;AAAA,IACF;AAAA,GACF;AACF;;;AC3cA,IAAM,WAAA,GAAyB;AAAA,EAC7B,EAAA,EAAI,OAAA;AAAA,EACJ,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAa,OAAA;AAAA,EACb,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,EAClB,YAAA,EAAc,EAAE,KAAA,EAAO,EAAC,EAAE;AAAA,EAE1B,QAAA,CAAS,QAAmB,GAAA,EAAqC;AAC/D,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,MAAM,KAAA,GAAQ,CAAC,CAAA,KAAsB;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,CAAA;AACZ,MAAA,OAAO,CAAA;AAAA,IACT,CAAA;AAEA,IAAA,kBAAA,CAAmB,MAAA,EAAQ,KAAK,KAAK,CAAA;AAErC,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,EAAC,EAAG,OAAA,EAAS,EAAC,EAAE;AAAA,EAC7C;AACF,CAAA;AAEA,IAAO,aAAA,GAAQ","file":"index.cjs","sourcesContent":["/**\n * Error classes for MCP SDK.\n *\n * Modules MUST throw these instead of throwing raw Errors. The registerTool\n * wrapper in result.ts catches and maps them to MCP-protocol-compliant\n * `{ isError: true, content: [...] }` responses.\n *\n * Throwing past the wrapper to the protocol surfaces as JSON-RPC -32603 to\n * the client and is a protocol bug.\n */\n\nexport class McpUserError extends Error {\n  public readonly hint: string | undefined;\n\n  constructor(message: string, opts?: { hint?: string }) {\n    super(message);\n    this.name = 'McpUserError';\n    this.hint = opts?.hint;\n  }\n}\n\nexport class McpAuthError extends McpUserError {\n  constructor(message: string, opts?: { hint?: string }) {\n    super(message, {\n      hint: opts?.hint ?? 'Run the auth_login tool to authenticate.',\n    });\n    this.name = 'McpAuthError';\n  }\n}\n\nexport class McpInternalError extends Error {\n  public override readonly cause: unknown;\n\n  constructor(message: string, cause?: unknown) {\n    super(message);\n    this.name = 'McpInternalError';\n    this.cause = cause;\n  }\n}\n","/**\n * MCP tool result helpers + central handler.\n *\n * Modules NEVER call server.registerTool directly — they use registerTool()\n * from this module so the central try/catch wraps the handler and:\n *   - maps thrown McpUserError / McpAuthError / McpInternalError to\n *     MCP-protocol-compliant `{ isError: true, content: [...] }` shapes\n *   - threads `_meta.progressToken` into ctx.progress for long ops\n *   - emits a structured log line on every error\n *   - never leaks `cause` from McpInternalError to the client\n *\n * This is the analog of cli-sdk's createProgram() central error handler.\n */\n\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { ZodRawShape } from 'zod';\nimport type { McpContext } from './context.js';\nimport { McpAuthError, McpInternalError, McpUserError } from './errors.js';\n\nexport interface ToolTextContent {\n  type: 'text';\n  text: string;\n  [k: string]: unknown;\n}\n\nexport interface ToolResult {\n  content: ToolTextContent[];\n  isError?: boolean;\n  structuredContent?: Record<string, unknown>;\n  [k: string]: unknown;\n}\n\nexport interface ToolMeta {\n  progressToken?: string | number;\n}\n\n/**\n * Build a successful tool result with JSON content (pretty-printed).\n */\nexport function jsonResult(data: unknown, structured?: Record<string, unknown>): ToolResult {\n  const result: ToolResult = {\n    content: [{ type: 'text', text: JSON.stringify(data, null, 2) }],\n  };\n  if (structured !== undefined) {\n    result.structuredContent = structured;\n  }\n  return result;\n}\n\n/**\n * Build a successful tool result with plain text content.\n */\nexport function textResult(text: string): ToolResult {\n  return { content: [{ type: 'text', text }] };\n}\n\n/**\n * Build an error tool result. Honors MCP's `{ isError: true, content }` shape.\n * Optional hint is appended on a new line so the LLM can react.\n */\nexport function errorResult(message: string, hint?: string): ToolResult {\n  const text = hint ? `${message}\\n\\nHint: ${hint}` : message;\n  return { content: [{ type: 'text', text }], isError: true };\n}\n\nexport interface ToolMetadata {\n  title: string;\n  description: string;\n  inputSchema?: ZodRawShape;\n}\n\nexport type ToolHandler<TArgs = Record<string, unknown>> = (\n  args: TArgs,\n  ctx: McpContext,\n  meta: ToolMeta,\n) => Promise<unknown>;\n\n/**\n * Register a tool with the central error wrapper.\n *\n * The handler returns a plain value or void. The wrapper:\n *   - wraps non-undefined returns in jsonResult()\n *   - if the value already looks like a ToolResult (has `content`), passes through\n *   - catches McpAuthError / McpUserError / McpInternalError / generic Error\n *   - logs every error via ctx.logger.error\n */\nexport function registerTool<TArgs extends Record<string, unknown>>(\n  server: McpServer,\n  ctx: McpContext,\n  name: string,\n  metadata: ToolMetadata,\n  handler: ToolHandler<TArgs>,\n): void {\n  const sdkConfig = {\n    title: metadata.title,\n    description: metadata.description,\n    ...(metadata.inputSchema ? { inputSchema: metadata.inputSchema } : {}),\n  };\n\n  // The MCP SDK's registerTool signature is `(name, config, handler)`. The\n  // handler arity depends on whether inputSchema is present (1-arg without,\n  // 2-arg with). We accept a unified handler shape and dispatch at runtime.\n  // The SDK's typing is strict and conditional on the inputSchema generic;\n  // bypass with a cast since runtime acceptance is unconditional.\n  const wrapped = async (...callbackArgs: unknown[]): Promise<ToolResult> => {\n    const hasArgs = callbackArgs.length === 2;\n    const args = (hasArgs ? callbackArgs[0] : {}) as TArgs;\n    const extra = (hasArgs ? callbackArgs[1] : callbackArgs[0]) as\n      | { _meta?: { progressToken?: string | number } }\n      | undefined;\n\n    const progressToken = extra?._meta?.progressToken;\n    const meta: ToolMeta = progressToken !== undefined ? { progressToken } : {};\n\n    try {\n      const result = await handler(args, ctx, meta);\n      if (isToolResult(result)) return result;\n      if (result === undefined) return textResult('OK');\n      return jsonResult(result);\n    } catch (error) {\n      return mapErrorToResult(error, ctx, name);\n    }\n  };\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  (server as any).registerTool(name, sdkConfig, wrapped);\n}\n\nfunction isToolResult(value: unknown): value is ToolResult {\n  return (\n    !!value &&\n    typeof value === 'object' &&\n    'content' in value &&\n    Array.isArray((value as ToolResult).content)\n  );\n}\n\nfunction mapErrorToResult(error: unknown, ctx: McpContext, toolName: string): ToolResult {\n  if (error instanceof McpAuthError) {\n    ctx.logger.warn(`${toolName}: auth required`, { message: error.message });\n    return errorResult(error.message, error.hint);\n  }\n  if (error instanceof McpUserError) {\n    ctx.logger.info(`${toolName}: user error`, { message: error.message });\n    return errorResult(error.message, error.hint);\n  }\n  if (error instanceof McpInternalError) {\n    ctx.logger.error(`${toolName}: internal error`, {\n      message: error.message,\n      cause: stringifyCause(error.cause),\n    });\n    return errorResult(`Internal error in ${toolName}.`);\n  }\n  const message = error instanceof Error ? error.message : String(error);\n  ctx.logger.error(`${toolName}: unhandled error`, { message });\n  return errorResult(`${toolName}: ${message}`);\n}\n\nfunction stringifyCause(cause: unknown): string | undefined {\n  if (cause === undefined || cause === null) return undefined;\n  if (cause instanceof Error) return cause.message;\n  try {\n    return JSON.stringify(cause);\n  } catch {\n    return String(cause);\n  }\n}\n","/**\n * Tool / resource / prompt naming helpers.\n *\n * Mandatory product prefix avoids collisions when Claude Desktop runs\n * multiple MCP servers concurrently (typical setup is ~6).\n *\n * Tool names are capped at 63 characters — Claude Desktop pre-1.x\n * truncated at 64 in some versions.\n */\n\nimport { McpInternalError } from './errors.js';\n\nconst MAX_TOOL_NAME_LENGTH = 63;\n\nfunction assertSafeName(name: string, kind: 'tool' | 'resource' | 'prompt'): string {\n  if (kind === 'tool' && name.length > MAX_TOOL_NAME_LENGTH) {\n    throw new McpInternalError(\n      `Tool name '${name}' exceeds ${MAX_TOOL_NAME_LENGTH} characters (some MCP clients truncate at 64).`,\n    );\n  }\n  return name;\n}\n\n/**\n * Build a tool name. Format: `<productName>_<...parts>` (snake_case).\n * Example: mcpToolName('vibecontrols', 'vibes', 'list') -> 'vibecontrols_vibes_list'\n */\nexport function mcpToolName(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpToolName: productName is required');\n  }\n  const name = [productName, ...parts].filter(Boolean).join('_');\n  return assertSafeName(name, 'tool');\n}\n\n/**\n * Build a resource URI. Format: `<productName>://<...parts>`.\n * Example: mcpResourceUri('vibecontrols', 'schema') -> 'vibecontrols://schema'\n */\nexport function mcpResourceUri(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpResourceUri: productName is required');\n  }\n  return `${productName}://${parts.filter(Boolean).join('/')}`;\n}\n\n/**\n * Build a prompt name. Format: `<productName>-<...parts>` (kebab-case).\n * Example: mcpPromptName('vibecontrols', 'setup') -> 'vibecontrols-setup'\n */\nexport function mcpPromptName(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpPromptName: productName is required');\n  }\n  return [productName, ...parts].filter(Boolean).join('-');\n}\n\nexport const TOOL_NAME_LIMIT = MAX_TOOL_NAME_LENGTH;\n","export const BROWSE_STORE = `\n  query BrowseStore($input: BrowseStoreInput!) {\n    browseStore(input: $input) {\n      products { id name description price currency type status }\n      facets { categories types }\n      totalCount hasMore\n    }\n  }\n`;\n\nexport const SEARCH_STORE = `\n  query SearchStore($query: String!, $filters: StoreFiltersInput) {\n    searchStore(query: $query, filters: $filters) {\n      id name price currency type activeInstallCount\n    }\n  }\n`;\n\nexport const GET_STORE_PRODUCT = `\n  query GetStoreProduct($id: ID!) {\n    getProduct(id: $id) {\n      id name description price currency type status\n      publisher { name }\n    }\n  }\n`;\n\nexport const MY_CART = `\n  query MyCart {\n    myCart {\n      id currency subtotal total itemCount isEmpty\n      items { id productId quantity }\n    }\n  }\n`;\n\nexport const ADD_TO_CART = `\n  mutation AddToCart($input: AddToCartInput!) {\n    addToCart(input: $input) {\n      id itemCount subtotal items { productId quantity }\n    }\n  }\n`;\n\nexport const REMOVE_FROM_CART = `\n  mutation RemoveFromCart($cartId: ID!, $itemId: ID!) {\n    removeFromCart(cartId: $cartId, itemId: $itemId) {\n      id itemCount subtotal\n    }\n  }\n`;\n\nexport const CHECKOUT_CART = `\n  mutation CheckoutCart($cartId: ID!) {\n    checkoutCart(cartId: $cartId) {\n      success order { id total status }\n    }\n  }\n`;\n\nexport const GET_ORDERS = `\n  query GetOrders($limit: Int, $offset: Int) {\n    getOrders(limit: $limit, offset: $offset) {\n      id status total currency createdAt\n    }\n  }\n`;\n\nexport const GET_ORDER = `\n  query GetOrder($id: ID!) {\n    getOrder(id: $id) {\n      id status total currency paidAt billingAccountId\n      lineItems { productId quantity unitPrice }\n    }\n  }\n`;\n\nexport const GET_INSTALLED_PRODUCTS = `\n  query GetInstalledProducts($workspaceId: ID!) {\n    getInstalledProducts(workspaceId: $workspaceId) {\n      id application { id name } status installedAt lastUsedAt\n    }\n  }\n`;\n\nexport const UNINSTALL_PRODUCT = `\n  mutation UninstallProduct($installationId: ID!) {\n    uninstallProduct(installationId: $installationId) { success }\n  }\n`;\n\nexport const GET_LICENSES = `\n  query GetLicenses($entitlementId: ID!) {\n    getLicenses(entitlementId: $entitlementId) {\n      id status validFrom expiresAt\n    }\n  }\n`;\n\nexport const CLEAR_CART = `\n  mutation ClearCart {\n    clearCart {\n      cart {\n        id currency subtotal total itemCount isEmpty\n        items { id productId quantity }\n      }\n      errors { code field message }\n    }\n  }\n`;\n\nexport const GET_MY_PUBLISHER = `\n  query MyPublisher {\n    myPublisher {\n      id name legalName email contactEmail websiteUrl\n      bio logoUrl isVerified verificationStatus\n      productCount totalSales totalEarnings tier\n      createdAt updatedAt\n    }\n  }\n`;\n\nexport const GET_MY_PUBLISHER_PRODUCTS = `\n  query MyPublisherProducts {\n    myPublisher {\n      id productCount\n      products {\n        id name slug description price currency type status downloads\n        publisher { id name isVerified }\n      }\n    }\n  }\n`;\n","/**\n * Store module tools — marketplace search, cart, orders, installed apps,\n * licenses. Backend: ~/products/global/store/global-store-svc/.\n * Ported from cli-sdk/src/modules/store/.\n *\n * Note: store_cart_checkout completes the cart server-side (no browser\n * redirect). Provider-bound payment capture (Stripe checkout pages) is not\n * exposed in cli-sdk and is omitted here.\n */\n\nimport { z } from 'zod';\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { jsonResult, errorResult, mcpToolName, type McpContext } from '../../core/index.js';\nimport {\n  BROWSE_STORE,\n  SEARCH_STORE,\n  GET_STORE_PRODUCT,\n  MY_CART,\n  ADD_TO_CART,\n  REMOVE_FROM_CART,\n  CHECKOUT_CART,\n  CLEAR_CART,\n  GET_ORDERS,\n  GET_ORDER,\n  GET_INSTALLED_PRODUCTS,\n  UNINSTALL_PRODUCT,\n  GET_LICENSES,\n  GET_MY_PUBLISHER,\n  GET_MY_PUBLISHER_PRODUCTS,\n} from './operations.js';\n\ninterface StoreProduct {\n  id: string;\n  name: string;\n  price?: number;\n  currency?: string;\n  type?: string;\n  status?: string;\n}\n\ninterface CartRow {\n  id: string;\n  itemCount?: number;\n  subtotal?: number;\n  total?: number;\n  currency?: string;\n  isEmpty?: boolean;\n  items?: Array<{ id: string; productId: string; quantity: number }>;\n}\n\ninterface OrderRow {\n  id: string;\n  status?: string;\n  total?: number;\n  currency?: string;\n  createdAt?: string;\n}\n\nfunction resolveWorkspaceId(ctx: McpContext, override: string | undefined): string | null {\n  if (override !== undefined && override !== '') return override;\n  const auth = ctx.auth.read();\n  if (!auth?.workspaceId) return null;\n  return auth.workspaceId;\n}\n\nexport function registerStoreTools(\n  server: McpServer,\n  ctx: McpContext,\n  track: (n: string) => string,\n): void {\n  // ── Search / browse / get ──────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_search')),\n    {\n      title: 'Search Store',\n      description: 'Search the marketplace for products by query and optional filters.',\n      inputSchema: {\n        query: z.string().describe('Search query'),\n        type: z.string().optional().describe('Product type filter'),\n        category: z.string().optional().describe('Category filter'),\n      },\n    },\n    async ({ query, type, category }) => {\n      try {\n        const filters: Record<string, unknown> = {};\n        if (type !== undefined) filters.productType = type.toUpperCase();\n        if (category !== undefined) filters.category = category;\n        const data = await ctx.gql.global.request<{ searchStore: StoreProduct[] }>(SEARCH_STORE, {\n          query,\n          filters: Object.keys(filters).length ? filters : undefined,\n        });\n        return jsonResult(data.searchStore);\n      } catch (error) {\n        ctx.logger.error('store_search failed', { error: String(error) });\n        return errorResult(\n          `Failed to search store: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_browse')),\n    {\n      title: 'Browse Store',\n      description: 'Browse the marketplace with structured input (categories, facets, paging).',\n      inputSchema: {\n        category: z.string().optional().describe('Category filter'),\n        type: z.string().optional().describe('Product type filter'),\n        limit: z.number().optional().describe('Page size'),\n        offset: z.number().optional().describe('Skip results'),\n      },\n    },\n    async ({ category, type, limit, offset }) => {\n      try {\n        const input: Record<string, unknown> = {};\n        if (category !== undefined) input.category = category;\n        if (type !== undefined) input.productType = type.toUpperCase();\n        if (limit !== undefined) input.limit = limit;\n        if (offset !== undefined) input.offset = offset;\n        const data = await ctx.gql.global.request<{\n          browseStore: {\n            products: StoreProduct[];\n            facets: { categories: string[]; types: string[] };\n            totalCount: number;\n            hasMore: boolean;\n          };\n        }>(BROWSE_STORE, { input });\n        return jsonResult(data.browseStore);\n      } catch (error) {\n        ctx.logger.error('store_browse failed', { error: String(error) });\n        return errorResult(\n          `Failed to browse store: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_get_product')),\n    {\n      title: 'Get Store Product',\n      description: 'Get a marketplace product by ID.',\n      inputSchema: { id: z.string().describe('Product ID') },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.global.request<{ getProduct: StoreProduct | null }>(\n          GET_STORE_PRODUCT,\n          { id },\n        );\n        if (!data.getProduct) return errorResult(`Product ${id} not found`);\n        return jsonResult(data.getProduct);\n      } catch (error) {\n        ctx.logger.error('store_get_product failed', { error: String(error) });\n        return errorResult(\n          `Failed to get product: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  // ── Cart ───────────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_cart_list')),\n    {\n      title: 'Show Cart',\n      description: \"Show the current user's cart.\",\n      inputSchema: {},\n    },\n    async () => {\n      try {\n        const data = await ctx.gql.global.request<{ myCart: CartRow }>(MY_CART);\n        return jsonResult(data.myCart);\n      } catch (error) {\n        ctx.logger.error('store_cart_list failed', { error: String(error) });\n        return errorResult(\n          `Failed to fetch cart: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_cart_add')),\n    {\n      title: 'Add to Cart',\n      description: 'Add a product (and optional variant) to the cart.',\n      inputSchema: {\n        product: z.string().describe('Product ID'),\n        quantity: z.number().optional().describe('Quantity (default 1)'),\n        variant: z.string().optional().describe('Variant ID'),\n      },\n    },\n    async ({ product, quantity, variant }) => {\n      try {\n        const input: Record<string, unknown> = { productId: product };\n        if (quantity !== undefined) input.quantity = quantity;\n        if (variant !== undefined) input.variantId = variant;\n        const data = await ctx.gql.global.request<{ addToCart: CartRow }>(ADD_TO_CART, { input });\n        return jsonResult(data.addToCart);\n      } catch (error) {\n        ctx.logger.error('store_cart_add failed', { error: String(error) });\n        return errorResult(\n          `Failed to add to cart: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_cart_remove')),\n    {\n      title: 'Remove from Cart',\n      description: 'Remove an item from the cart.',\n      inputSchema: {\n        cart: z.string().describe('Cart ID'),\n        item: z.string().describe('Cart item ID'),\n      },\n    },\n    async ({ cart, item }) => {\n      try {\n        await ctx.gql.global.request(REMOVE_FROM_CART, { cartId: cart, itemId: item });\n        return jsonResult({ status: 'success', message: 'Item removed from cart', cart, item });\n      } catch (error) {\n        ctx.logger.error('store_cart_remove failed', { error: String(error) });\n        return errorResult(\n          `Failed to remove cart item: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_cart_checkout')),\n    {\n      title: 'Checkout Cart',\n      description:\n        'Check out the cart server-side (uses default payment method on the billing account).',\n      inputSchema: { cartId: z.string().describe('Cart ID') },\n    },\n    async ({ cartId }) => {\n      try {\n        const data = await ctx.gql.global.request<{\n          checkoutCart: { success: boolean; order?: OrderRow };\n        }>(CHECKOUT_CART, { cartId });\n        return jsonResult(data.checkoutCart);\n      } catch (error) {\n        ctx.logger.error('store_cart_checkout failed', { error: String(error) });\n        return errorResult(\n          `Failed to checkout cart: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_cart_clear')),\n    {\n      title: 'Clear Cart',\n      description:\n        \"Remove every item from the current user's active cart. Returns the resulting empty cart payload.\",\n      inputSchema: {},\n    },\n    async () => {\n      try {\n        const data = await ctx.gql.global.request<{\n          clearCart: {\n            cart: CartRow | null;\n            errors: Array<{ code: string; field?: string; message: string }> | null;\n          };\n        }>(CLEAR_CART);\n        const payload = data.clearCart;\n        if (payload?.errors && payload.errors.length > 0) {\n          const first = payload.errors[0];\n          return errorResult(`Failed to clear cart: ${first.code} ${first.message}`);\n        }\n        return jsonResult(payload?.cart ?? null);\n      } catch (error) {\n        ctx.logger.error('store_cart_clear failed', { error: String(error) });\n        return errorResult(\n          `Failed to clear cart: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  // ── Orders ─────────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_orders_list')),\n    {\n      title: 'List Orders',\n      description: 'List orders for the current user.',\n      inputSchema: {\n        limit: z.number().optional().describe('Page size (default 50)'),\n        offset: z.number().optional().describe('Skip results (default 0)'),\n      },\n    },\n    async ({ limit, offset }) => {\n      try {\n        const data = await ctx.gql.global.request<{ getOrders: OrderRow[] }>(GET_ORDERS, {\n          limit,\n          offset: offset ?? 0,\n        });\n        return jsonResult(data.getOrders);\n      } catch (error) {\n        ctx.logger.error('store_orders_list failed', { error: String(error) });\n        return errorResult(\n          `Failed to list orders: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_orders_get')),\n    {\n      title: 'Get Order',\n      description: 'Get an order by ID.',\n      inputSchema: { id: z.string().describe('Order ID') },\n    },\n    async ({ id }) => {\n      try {\n        const data = await ctx.gql.global.request<{ getOrder: OrderRow | null }>(GET_ORDER, { id });\n        if (!data.getOrder) return errorResult(`Order ${id} not found`);\n        return jsonResult(data.getOrder);\n      } catch (error) {\n        ctx.logger.error('store_orders_get failed', { error: String(error) });\n        return errorResult(\n          `Failed to get order: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  // ── Installed ──────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_installed_list')),\n    {\n      title: 'List Installed Products',\n      description: 'List installed products in the current (or specified) workspace.',\n      inputSchema: {\n        workspace: z.string().optional().describe('Workspace ID (defaults to current)'),\n      },\n    },\n    async ({ workspace }) => {\n      try {\n        const wid = resolveWorkspaceId(ctx, workspace);\n        if (!wid) {\n          return errorResult(\n            'No active workspace. Bind a workspace via the auth login flow first.',\n          );\n        }\n        const data = await ctx.gql.global.request<{\n          getInstalledProducts: Array<{\n            id: string;\n            application: { id: string; name: string };\n            status: string;\n            installedAt: string;\n          }>;\n        }>(GET_INSTALLED_PRODUCTS, { workspaceId: wid });\n        return jsonResult(data.getInstalledProducts);\n      } catch (error) {\n        ctx.logger.error('store_installed_list failed', { error: String(error) });\n        return errorResult(\n          `Failed to list installed products: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_installed_uninstall')),\n    {\n      title: 'Uninstall Product',\n      description: 'Uninstall a product by installation ID.',\n      inputSchema: { installationId: z.string().describe('Installation ID') },\n    },\n    async ({ installationId }) => {\n      try {\n        await ctx.gql.global.request(UNINSTALL_PRODUCT, { installationId });\n        return jsonResult({ status: 'success', message: 'Product uninstalled', installationId });\n      } catch (error) {\n        ctx.logger.error('store_installed_uninstall failed', { error: String(error) });\n        return errorResult(\n          `Failed to uninstall product: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  // ── Licenses ───────────────────────────────────────────────────────────\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_licenses_list')),\n    {\n      title: 'List Licenses',\n      description: 'List licenses for an entitlement.',\n      inputSchema: { entitlement: z.string().describe('Entitlement ID') },\n    },\n    async ({ entitlement }) => {\n      try {\n        const data = await ctx.gql.global.request<{\n          getLicenses: Array<{ id: string; status: string; validFrom: string; expiresAt: string }>;\n        }>(GET_LICENSES, { entitlementId: entitlement });\n        return jsonResult(data.getLicenses);\n      } catch (error) {\n        ctx.logger.error('store_licenses_list failed', { error: String(error) });\n        return errorResult(\n          `Failed to list licenses: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  // ── Publisher ──────────────────────────────────────────────────────────\n  // Schema reality: global-store-svc only exposes `myPublisher` (the current\n  // user's own publisher profile). There is no public `getPublisher(id)` —\n  // these tools target the bound user.\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_publisher_get')),\n    {\n      title: 'Get Publisher',\n      description:\n        \"Fetch the current user's publisher profile (verification status, tier, totals). Returns null if no publisher profile exists yet.\",\n      inputSchema: {},\n    },\n    async () => {\n      try {\n        const data = await ctx.gql.global.request<{ myPublisher: unknown | null }>(\n          GET_MY_PUBLISHER,\n        );\n        return jsonResult(data.myPublisher);\n      } catch (error) {\n        ctx.logger.error('store_publisher_get failed', { error: String(error) });\n        return errorResult(\n          `Failed to get publisher: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n\n  server.registerTool(\n    track(mcpToolName(ctx.productName, 'store_publisher_products')),\n    {\n      title: 'List Publisher Products',\n      description:\n        \"List products published by the current user's publisher profile. Returns { publisherId, productCount, products } or null if no profile exists.\",\n      inputSchema: {},\n    },\n    async () => {\n      try {\n        const data = await ctx.gql.global.request<{\n          myPublisher: { id: string; productCount: number; products: StoreProduct[] } | null;\n        }>(GET_MY_PUBLISHER_PRODUCTS);\n        const p = data.myPublisher;\n        if (!p) return jsonResult(null);\n        return jsonResult({\n          publisherId: p.id,\n          productCount: p.productCount,\n          products: p.products,\n        });\n      } catch (error) {\n        ctx.logger.error('store_publisher_products failed', { error: String(error) });\n        return errorResult(\n          `Failed to list publisher products: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    },\n  );\n}\n","/**\n * Store module — marketplace search/browse, cart, orders, installed apps,\n * licenses. Backend: ~/products/global/store/global-store-svc/.\n * Ported from cli-sdk/src/modules/store/.\n */\n\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { McpContext, McpModule, ModuleRegistration } from '../../core/index.js';\nimport { registerStoreTools } from './tools.js';\n\nconst storeModule: McpModule = {\n  id: 'store',\n  version: '0.0.1',\n  displayName: 'Store',\n  dependsOn: ['auth'],\n  capabilities: { tools: {} },\n\n  register(server: McpServer, ctx: McpContext): ModuleRegistration {\n    const tools: string[] = [];\n    const track = (n: string): string => {\n      tools.push(n);\n      return n;\n    };\n\n    registerStoreTools(server, ctx, track);\n\n    return { tools, resources: [], prompts: [] };\n  },\n};\n\nexport default storeModule;\n"]}

package/dist/modules/store/index.js

@@ -89,6 +89,38 @@ var GET_LICENSES = `
     }
   }
 `;
+var CLEAR_CART = `
+  mutation ClearCart {
+    clearCart {
+      cart {
+        id currency subtotal total itemCount isEmpty
+        items { id productId quantity }
+      }
+      errors { code field message }
+    }
+  }
+`;
+var GET_MY_PUBLISHER = `
+  query MyPublisher {
+    myPublisher {
+      id name legalName email contactEmail websiteUrl
+      bio logoUrl isVerified verificationStatus
+      productCount totalSales totalEarnings tier
+      createdAt updatedAt
+    }
+  }
+`;
+var GET_MY_PUBLISHER_PRODUCTS = `
+  query MyPublisherProducts {
+    myPublisher {
+      id productCount
+      products {
+        id name slug description price currency type status downloads
+        publisher { id name isVerified }
+      }
+    }
+  }
+`;
 
 // src/modules/store/tools.ts
 function resolveWorkspaceId(ctx, override) {
@@ -265,6 +297,30 @@ function registerStoreTools(server, ctx, track) {
       }
     }
   );
+  server.registerTool(
+    track(mcpToolName(ctx.productName, "store_cart_clear")),
+    {
+      title: "Clear Cart",
+      description: "Remove every item from the current user's active cart. Returns the resulting empty cart payload.",
+      inputSchema: {}
+    },
+    async () => {
+      try {
+        const data = await ctx.gql.global.request(CLEAR_CART);
+        const payload = data.clearCart;
+        if (payload?.errors && payload.errors.length > 0) {
+          const first = payload.errors[0];
+          return errorResult(`Failed to clear cart: ${first.code} ${first.message}`);
+        }
+        return jsonResult(payload?.cart ?? null);
+      } catch (error) {
+        ctx.logger.error("store_cart_clear failed", { error: String(error) });
+        return errorResult(
+          `Failed to clear cart: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+    }
+  );
   server.registerTool(
     track(mcpToolName(ctx.productName, "store_orders_list")),
     {
@@ -375,6 +431,52 @@ function registerStoreTools(server, ctx, track) {
       }
     }
   );
+  server.registerTool(
+    track(mcpToolName(ctx.productName, "store_publisher_get")),
+    {
+      title: "Get Publisher",
+      description: "Fetch the current user's publisher profile (verification status, tier, totals). Returns null if no publisher profile exists yet.",
+      inputSchema: {}
+    },
+    async () => {
+      try {
+        const data = await ctx.gql.global.request(
+          GET_MY_PUBLISHER
+        );
+        return jsonResult(data.myPublisher);
+      } catch (error) {
+        ctx.logger.error("store_publisher_get failed", { error: String(error) });
+        return errorResult(
+          `Failed to get publisher: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+    }
+  );
+  server.registerTool(
+    track(mcpToolName(ctx.productName, "store_publisher_products")),
+    {
+      title: "List Publisher Products",
+      description: "List products published by the current user's publisher profile. Returns { publisherId, productCount, products } or null if no profile exists.",
+      inputSchema: {}
+    },
+    async () => {
+      try {
+        const data = await ctx.gql.global.request(GET_MY_PUBLISHER_PRODUCTS);
+        const p = data.myPublisher;
+        if (!p) return jsonResult(null);
+        return jsonResult({
+          publisherId: p.id,
+          productCount: p.productCount,
+          products: p.products
+        });
+      } catch (error) {
+        ctx.logger.error("store_publisher_products failed", { error: String(error) });
+        return errorResult(
+          `Failed to list publisher products: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+    }
+  );
 }
 
 // src/modules/store/index.ts