@carrierllc/mcp 0.1.0 → 0.2.0

package/dist/manus-webhook.js

@@ -0,0 +1,361 @@
+/**
+ * Manus webhook receiver.
+ *
+ * Receives push notifications from Manus for UI-agent tasks dispatched by
+ * tools-ui-agent.ts. Eliminates the need for client-side polling.
+ *
+ * ROUTE
+ * -----
+ * POST /manus-webhook
+ *
+ * AUTHENTICATION
+ * --------------
+ * Header: X-Manus-Signature: <hex>
+ * Payload: HMAC-SHA256(key=MANUS_WEBHOOK_SECRET, message=raw_request_body)
+ * Format: raw hex string (no "sha256=" prefix — per Manus docs).
+ *
+ * IDEMPOTENCY
+ * -----------
+ * event_id stored in CARRIER_USERS KV under key `manus_event:{event_id}` with
+ * 7-day TTL. Replayed events return 200+deduplicated without re-processing.
+ *
+ * EVENT TYPES
+ * -----------
+ * task_created  — fires immediately after task.create; logged only.
+ * task_stopped  — fires on completion or ask; updates audit log + AE.
+ *   stop_reason:
+ *     "finish" — task completed; attachment URLs logged if present.
+ *                Clears any pending-ask KV entry for this task.
+ *     "ask"    — task paused, waiting for user input.
+ *                Writes manus_pending_ask:{task_id} to CARRIER_USERS KV (24h TTL).
+ *                Emits ui_agent_needs_input AE event with truncated question.
+ *
+ * PENDING-ASK KV SCHEMA
+ * ---------------------
+ * Key:   manus_pending_ask:{task_id}
+ * Value: JSON { task_id, question, task_url, asked_at }
+ * TTL:   24 hours (86400 seconds)
+ *
+ * AUDIT LOG SCHEMA (Analytics Engine blobs[]):
+ *   blobs[0] = "manus_webhook"
+ *   blobs[1] = event_type  ("task_created" | "task_stopped")
+ *   blobs[2] = stop_reason ("finish" | "ask" | "ui_agent_awaiting_input" | "")
+ *   blobs[3] = task_id
+ *   blobs[4] = attachment_count (stringified number) or truncated question for ask events
+ *   doubles[0] = latency_ms  (0 for task_created)
+ *   indexes[0] = task_id
+ */
+import { timingSafeEqual } from "./timing-safe-equal.js";
+// ---------------------------------------------------------------------------
+// R2 attachment persistence constants
+// ---------------------------------------------------------------------------
+/** Max bytes to fetch per attachment (25 MB). */
+const MAX_ATTACHMENT_BYTES = 25 * 1024 * 1024;
+/** R2 key prefix for Manus attachment files. */
+const R2_PREFIX = "manus-attachments";
+/**
+ * Patterns that identify Cloudflare-hosted URLs.
+ * Attachments already on CF infrastructure are skipped — no re-upload needed.
+ */
+const CF_ZONE_PATTERNS = [
+    /\.r2\.dev$/,
+    /\.carrier\.llc$/,
+    /\.cloudflare\.net$/,
+    /\.workers\.dev$/,
+];
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const SIGNATURE_HEADER = "x-manus-signature";
+/** 7-day TTL for idempotency keys. */
+const DEDUP_TTL_SECONDS = 7 * 24 * 3600;
+/** 24-hour TTL for pending-ask entries. */
+export const PENDING_ASK_TTL_SECONDS = 24 * 3600;
+/** KV key prefix for pending-ask entries. */
+export const PENDING_ASK_PREFIX = "manus_pending_ask:";
+/** Max chars of question to store in AE audit (credentials protection). */
+const QUESTION_TRUNCATE_CHARS = 200;
+// ---------------------------------------------------------------------------
+// Handler entry point
+// ---------------------------------------------------------------------------
+export async function handleManusWebhook(request, env) {
+    if (!env.MANUS_WEBHOOK_SECRET) {
+        console.error("[manus-webhook] MANUS_WEBHOOK_SECRET not configured");
+        return new Response("Webhook receiver not configured", { status: 503 });
+    }
+    // 1. Read raw body (must happen before any .json() / .text() calls)
+    const body = await request.text();
+    // 2. Verify HMAC-SHA256 signature
+    const sigHeader = request.headers.get(SIGNATURE_HEADER);
+    const verified = await verifyHmacSignature(body, sigHeader, env.MANUS_WEBHOOK_SECRET);
+    if (!verified) {
+        console.warn("[manus-webhook] rejected — invalid or missing signature");
+        return new Response("Unauthorized", { status: 401 });
+    }
+    // 3. Parse payload
+    let payload;
+    try {
+        payload = JSON.parse(body);
+    }
+    catch {
+        return new Response("Invalid JSON body", { status: 400 });
+    }
+    if (!payload.event_id || !payload.event_type || !payload.task_detail?.task_id) {
+        return new Response("Missing required fields: event_id, event_type, task_detail.task_id", { status: 400 });
+    }
+    const { event_id, event_type, task_detail, attachments, stop_reason, message } = payload;
+    const { task_id } = task_detail;
+    // 4. Idempotency — CARRIER_USERS KV, 7-day TTL
+    const dedupKey = `manus_event:${event_id}`;
+    const alreadyProcessed = await env.CARRIER_USERS.get(dedupKey);
+    if (alreadyProcessed !== null) {
+        console.log(`[manus-webhook] deduplicated event_id=${event_id}`);
+        return Response.json({ ok: true, deduplicated: true });
+    }
+    // 5. Mark as processed (write before handling so concurrent replays are safe)
+    await env.CARRIER_USERS.put(dedupKey, "1", {
+        expirationTtl: DEDUP_TTL_SECONDS,
+    });
+    try {
+        // 6. Handle event
+        if (event_type === "task_created") {
+            handleTaskCreated(env, task_id, event_id);
+            return Response.json({ ok: true });
+        }
+        if (event_type === "task_stopped") {
+            await handleTaskStopped(env, task_id, event_id, stop_reason, attachments, message, task_detail.task_url);
+            return Response.json({ ok: true });
+        }
+        // Unknown event type — log + ack
+        console.log(`[manus-webhook] unknown event_type=${event_type} task_id=${task_id}`);
+        return Response.json({ ok: true });
+    }
+    catch (err) {
+        try {
+            await env.CARRIER_USERS.delete(dedupKey);
+        }
+        catch (rollbackErr) {
+            console.error(`[manus-webhook] dedup rollback failed: ${rollbackErr.message}`);
+        }
+        throw err;
+    }
+}
+// ---------------------------------------------------------------------------
+// Event handlers
+// ---------------------------------------------------------------------------
+function handleTaskCreated(env, task_id, event_id) {
+    console.log(`[manus-webhook] task_created task_id=${task_id} event_id=${event_id}`);
+    writeManusAudit(env, {
+        event_type: "task_created",
+        task_id,
+        stop_reason: "",
+        attachment_count: 0,
+        latency_ms: 0,
+    });
+}
+async function handleTaskStopped(env, task_id, event_id, stop_reason, attachments, message, task_url) {
+    const reason = stop_reason ?? "unknown";
+    const attachmentCount = attachments?.length ?? 0;
+    if (reason === "finish") {
+        console.log(`[manus-webhook] task_stopped:finish task_id=${task_id} attachments=${attachmentCount}`);
+        if (attachmentCount > 0) {
+            const urls = (attachments ?? []).map((a) => `${a.name}: ${a.url}`).join(", ");
+            console.log(`[manus-webhook] attachments task_id=${task_id} urls=[${urls}]`);
+        }
+        // Persist attachments to R2 before clearing the pending-ask entry.
+        if (attachmentCount > 0) {
+            for (const attachment of attachments ?? []) {
+                await persistAttachmentToR2(env, task_id, attachment);
+            }
+        }
+        // Clear any pending-ask entry now that the task has finished.
+        const pendingKey = `${PENDING_ASK_PREFIX}${task_id}`;
+        await env.CARRIER_USERS.delete(pendingKey);
+        console.log(`[manus-webhook] cleared pending-ask for task_id=${task_id}`);
+    }
+    else if (reason === "ask") {
+        const question = message ?? "";
+        const truncatedQuestion = question.slice(0, QUESTION_TRUNCATE_CHARS);
+        console.log(`[manus-webhook] task_stopped:needs_user_input task_id=${task_id} question_len=${question.length}`);
+        // Write pending-ask entry to KV with 24h TTL.
+        const pendingKey = `${PENDING_ASK_PREFIX}${task_id}`;
+        const pendingEntry = {
+            task_id,
+            question,
+            task_url: task_url ?? "",
+            asked_at: new Date().toISOString(),
+        };
+        await env.CARRIER_USERS.put(pendingKey, JSON.stringify(pendingEntry), {
+            expirationTtl: PENDING_ASK_TTL_SECONDS,
+        });
+        // Emit ask-specific AE event with truncated question (blobs[2]="ui_agent_awaiting_input").
+        // The generic writeManusAudit below also fires (blobs[2]="ask") for compatibility.
+        writeManusAuditAsk(env, {
+            task_id,
+            truncated_question: truncatedQuestion,
+            event_id,
+        });
+    }
+    else {
+        console.log(`[manus-webhook] task_stopped:${reason} task_id=${task_id} event_id=${event_id}`);
+    }
+    writeManusAudit(env, {
+        event_type: "task_stopped",
+        task_id,
+        stop_reason: reason,
+        attachment_count: attachmentCount,
+        latency_ms: 0, // no task_created timestamp available without a lookup; 0 is accurate per current design
+    });
+}
+// ---------------------------------------------------------------------------
+// R2 attachment persistence
+// ---------------------------------------------------------------------------
+/**
+ * Fetch an attachment from Manus and stream it to R2.
+ * Skips CF-hosted URLs (already on Cloudflare infrastructure).
+ * Enforces 25 MB cap via Content-Length header and buffer size check.
+ */
+async function persistAttachmentToR2(env, task_id, attachment) {
+    // Skip CF-hosted URLs — no re-upload needed
+    try {
+        const hostname = new URL(attachment.url).hostname;
+        if (CF_ZONE_PATTERNS.some((re) => re.test(hostname))) {
+            console.log(`[manus-webhook] skipping CF-hosted attachment url=${attachment.url}`);
+            return;
+        }
+    }
+    catch {
+        console.warn(`[manus-webhook] invalid attachment URL: ${attachment.url}`);
+        return;
+    }
+    let res;
+    try {
+        res = await fetch(attachment.url);
+    }
+    catch (err) {
+        console.error(`[manus-webhook] fetch attachment failed url=${attachment.url}: ${err.message}`);
+        return;
+    }
+    if (!res.ok) {
+        console.warn(`[manus-webhook] attachment fetch non-ok status=${res.status} url=${attachment.url}`);
+        return;
+    }
+    // Check Content-Length header before buffering
+    const contentLengthHeader = res.headers.get("content-length");
+    if (contentLengthHeader !== null) {
+        const declared = parseInt(contentLengthHeader, 10);
+        if (!isNaN(declared) && declared > MAX_ATTACHMENT_BYTES) {
+            console.warn(`[manus-webhook] attachment too large (content-length=${declared}) url=${attachment.url} — skipping`);
+            return;
+        }
+    }
+    let buffer;
+    try {
+        buffer = await res.arrayBuffer();
+    }
+    catch (err) {
+        console.error(`[manus-webhook] attachment buffer failed: ${err.message}`);
+        return;
+    }
+    if (buffer.byteLength > MAX_ATTACHMENT_BYTES) {
+        console.warn(`[manus-webhook] attachment too large (actual=${buffer.byteLength}) url=${attachment.url} — skipping`);
+        return;
+    }
+    const filename = sanitiseFilename(attachment.name);
+    const r2Key = `${R2_PREFIX}/${task_id}/${filename}`;
+    const contentType = res.headers.get("content-type") ?? "application/octet-stream";
+    try {
+        await env.DOWNLOADS.put(r2Key, buffer, {
+            httpMetadata: { contentType },
+        });
+        console.log(`[manus-webhook] stored attachment r2=${r2Key} size=${buffer.byteLength}`);
+    }
+    catch (err) {
+        console.error(`[manus-webhook] R2 put failed key=${r2Key}: ${err.message}`);
+    }
+}
+/**
+ * Sanitise an attachment filename for safe use as an R2 key component.
+ * - Strips path separators
+ * - Collapses whitespace to underscores
+ * - Replaces unsafe characters
+ * - Truncates to 200 chars
+ */
+function sanitiseFilename(name) {
+    return name
+        .replace(/[/\\]/g, "_")
+        .replace(/\s+/g, "_")
+        .replace(/[^a-zA-Z0-9._\-]/g, "_")
+        .slice(0, 200);
+}
+function writeManusAudit(env, entry) {
+    // Fire-and-forget — AE writes are best-effort
+    try {
+        env.AUDIT_LOG.writeDataPoint({
+            blobs: [
+                "manus_webhook",
+                entry.event_type,
+                entry.stop_reason,
+                entry.task_id,
+                String(entry.attachment_count),
+            ],
+            doubles: [entry.latency_ms],
+            indexes: [entry.task_id],
+        });
+    }
+    catch (err) {
+        console.error(`[manus-webhook] audit write failed: ${err.message}`);
+    }
+}
+function writeManusAuditAsk(env, entry) {
+    // Separate AE event for ask-path — status distinguishes from finish.
+    // blobs[2] = "ui_agent_awaiting_input" distinguishes from "finish" status.
+    try {
+        env.AUDIT_LOG.writeDataPoint({
+            blobs: [
+                "manus_webhook",
+                "task_stopped",
+                "ui_agent_awaiting_input",
+                entry.task_id,
+                entry.truncated_question,
+                entry.event_id,
+            ],
+            doubles: [0],
+            indexes: [entry.task_id],
+        });
+    }
+    catch (err) {
+        console.error(`[manus-webhook] ask audit write failed: ${err.message}`);
+    }
+}
+// ---------------------------------------------------------------------------
+// HMAC-SHA256 signature verification
+// ---------------------------------------------------------------------------
+/**
+ * Verify HMAC-SHA256 signature from Manus.
+ * Header value is a raw hex string (64 chars, no "sha256=" prefix).
+ * Falls back to also accepting "sha256=<hex>" for forward-compat.
+ */
+async function verifyHmacSignature(body, header, secret) {
+    if (!header)
+        return false;
+    // Accept raw hex or "sha256=<hex>"
+    const hex = header.startsWith("sha256=") ? header.slice(7) : header;
+    if (!/^[0-9a-f]{64}$/i.test(hex))
+        return false;
+    const enc = new TextEncoder();
+    let keyMaterial;
+    try {
+        keyMaterial = await crypto.subtle.importKey("raw", enc.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    }
+    catch {
+        return false;
+    }
+    const sig = await crypto.subtle.sign("HMAC", keyMaterial, enc.encode(body));
+    const computed = Array.from(new Uint8Array(sig))
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+    const normalizedHex = hex.toLowerCase();
+    return timingSafeEqual(computed, normalizedHex);
+}
+//# sourceMappingURL=manus-webhook.js.map

package/dist/manus-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manus-webhook.js","sourceRoot":"","sources":["../src/manus-webhook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA0BzD,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,iDAAiD;AACjD,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9C,gDAAgD;AAChD,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC;;;GAGG;AACH,MAAM,gBAAgB,GAAa;IACjC,YAAY;IACZ,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;CAClB,CAAC;AAaF,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C,sCAAsC;AACtC,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,6CAA6C;AAC7C,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,2EAA2E;AAC3E,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgB,EAChB,GAAQ;IAER,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACrE,OAAO,IAAI,QAAQ,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,oEAAoE;IACpE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAElC,kCAAkC;IAClC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACtF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACxE,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,mBAAmB;IACnB,IAAI,OAA4B,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;QAC9E,OAAO,IAAI,QAAQ,CACjB,oEAAoE,EACpE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACzF,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;IAEhC,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,eAAe,QAAQ,EAAE,CAAC;IAC3C,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,yCAAyC,QAAQ,EAAE,CAAC,CAAC;QACjE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,8EAA8E;IAC9E,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE;QACzC,aAAa,EAAE,iBAAiB;KACjC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,kBAAkB;QAClB,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;YAClC,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;YAClC,MAAM,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;YACzG,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAED,iCAAiC;QACjC,OAAO,CAAC,GAAG,CAAC,sCAAsC,UAAU,YAAY,OAAO,EAAE,CAAC,CAAC;QACnF,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CACX,0CAA2C,WAAqB,CAAC,OAAO,EAAE,CAC3E,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,iBAAiB,CAAC,GAAQ,EAAE,OAAe,EAAE,QAAgB;IACpE,OAAO,CAAC,GAAG,CAAC,wCAAwC,OAAO,aAAa,QAAQ,EAAE,CAAC,CAAC;IAEpF,eAAe,CAAC,GAAG,EAAE;QACnB,UAAU,EAAE,cAAc;QAC1B,OAAO;QACP,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,CAAC;QACnB,UAAU,EAAE,CAAC;KACd,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAQ,EACR,OAAe,EACf,QAAgB,EAChB,WAA+B,EAC/B,WAA0C,EAC1C,OAA2B,EAC3B,QAA4B;IAE5B,MAAM,MAAM,GAAG,WAAW,IAAI,SAAS,CAAC;IACxC,MAAM,eAAe,GAAG,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC;IAEjD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,+CAA+C,OAAO,gBAAgB,eAAe,EAAE,CACxF,CAAC;QACF,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,uCAAuC,OAAO,UAAU,IAAI,GAAG,CAAC,CAAC;QAC/E,CAAC;QAED,mEAAmE;QACnE,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,MAAM,UAAU,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;gBAC3C,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,MAAM,UAAU,GAAG,GAAG,kBAAkB,GAAG,OAAO,EAAE,CAAC;QACrD,MAAM,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,mDAAmD,OAAO,EAAE,CAAC,CAAC;IAE5E,CAAC;SAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,OAAO,IAAI,EAAE,CAAC;QAC/B,MAAM,iBAAiB,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAErE,OAAO,CAAC,GAAG,CACT,yDAAyD,OAAO,iBAAiB,QAAQ,CAAC,MAAM,EAAE,CACnG,CAAC;QAEF,8CAA8C;QAC9C,MAAM,UAAU,GAAG,GAAG,kBAAkB,GAAG,OAAO,EAAE,CAAC;QACrD,MAAM,YAAY,GAAoB;YACpC,OAAO;YACP,QAAQ;YACR,QAAQ,EAAE,QAAQ,IAAI,EAAE;YACxB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACnC,CAAC;QACF,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE;YACpE,aAAa,EAAE,uBAAuB;SACvC,CAAC,CAAC;QAEH,2FAA2F;QAC3F,mFAAmF;QACnF,kBAAkB,CAAC,GAAG,EAAE;YACtB,OAAO;YACP,kBAAkB,EAAE,iBAAiB;YACrC,QAAQ;SACT,CAAC,CAAC;IAEL,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,gCAAgC,MAAM,YAAY,OAAO,aAAa,QAAQ,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,GAAG,EAAE;QACnB,UAAU,EAAE,cAAc;QAC1B,OAAO;QACP,WAAW,EAAE,MAAM;QACnB,gBAAgB,EAAE,eAAe;QACjC,UAAU,EAAE,CAAC,EAAE,yFAAyF;KACzG,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAClC,GAAQ,EACR,OAAe,EACf,UAA2B;IAE3B,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAClD,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,qDAAqD,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,2CAA2C,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,+CAA+C,UAAU,CAAC,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1G,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,kDAAkD,GAAG,CAAC,MAAM,QAAQ,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QACnG,OAAO;IACT,CAAC;IAED,+CAA+C;IAC/C,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9D,IAAI,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,oBAAoB,EAAE,CAAC;YACxD,OAAO,CAAC,IAAI,CACV,wDAAwD,QAAQ,SAAS,UAAU,CAAC,GAAG,aAAa,CACrG,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,MAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,6CAA8C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CACV,gDAAgD,MAAM,CAAC,UAAU,SAAS,UAAU,CAAC,GAAG,aAAa,CACtG,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,GAAG,SAAS,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;IACpD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,0BAA0B,CAAC;IAElF,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE;YACrC,YAAY,EAAE,EAAE,WAAW,EAAE;SAC9B,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,wCAAwC,KAAK,SAAS,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,KAAK,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI;SACR,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAcD,SAAS,eAAe,CAAC,GAAQ,EAAE,KAAsB;IACvD,8CAA8C;IAC9C,IAAI,CAAC;QACH,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;YAC3B,KAAK,EAAE;gBACL,eAAe;gBACf,KAAK,CAAC,UAAU;gBAChB,KAAK,CAAC,WAAW;gBACjB,KAAK,CAAC,OAAO;gBACb,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;aAC/B;YACD,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;YAC3B,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uCAAwC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAQ,EACR,KAAwE;IAExE,qEAAqE;IACrE,2EAA2E;IAC3E,IAAI,CAAC;QACH,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;YAC3B,KAAK,EAAE;gBACL,eAAe;gBACf,cAAc;gBACd,yBAAyB;gBACzB,KAAK,CAAC,OAAO;gBACb,KAAK,CAAC,kBAAkB;gBACxB,KAAK,CAAC,QAAQ;aACf;YACD,OAAO,EAAE,CAAC,CAAC,CAAC;YACZ,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2CAA4C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAY,EACZ,MAAqB,EACrB,MAAc;IAEd,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,mCAAmC;IACnC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACpE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/C,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAC9B,IAAI,WAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACzC,KAAK,EACL,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAClB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACxC,OAAO,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAClD,CAAC"}

package/dist/pricing-tools.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Carrier MCP — Pricing & Credits MCP Tools
+ *
+ * Exposes credit management, billing configuration, and usage analytics
+ * as MCP tools. These tools allow AI agents and users to:
+ *   - Check credit balance and usage
+ *   - Configure billing thresholds
+ *   - View volume discount status
+ *   - Manage overage settings
+ *   - View billing history and projections
+ *
+ * Inspired by Stripe Projects CLI patterns:
+ *   - `stripe projects billing show` → credit_balance
+ *   - `stripe projects upgrade` → upgrade_plan
+ *   - `stripe projects billing add` → configure_billing
+ */
+import type { Env, CarrierProps, ToolScope } from "./types.js";
+export interface PricingToolDef {
+    name: string;
+    description: string;
+    scope: ToolScope;
+    inputSchema: Record<string, unknown>;
+    handler: (env: Env, props: CarrierProps, args: Record<string, unknown>) => Promise<unknown>;
+}
+export declare const PRICING_TOOLS: PricingToolDef[];
+//# sourceMappingURL=pricing-tools.d.ts.map

package/dist/pricing-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing-tools.d.ts","sourceRoot":"","sources":["../src/pricing-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAsB/D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,SAAS,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,EAAE,CACP,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAED,eAAO,MAAM,aAAa,EAAE,cAAc,EAmXzC,CAAC"}