@commandable/mcp-core 0.2.0

package/LICENSE

@@ -0,0 +1,10 @@
+GNU AFFERO GENERAL PUBLIC LICENSE
+Version 3, 19 November 2007
+
+This project is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0).
+
+You may obtain a copy of the license at:
+https://www.gnu.org/licenses/agpl-3.0.html
+
+SPDX-License-Identifier: AGPL-3.0-only
+

package/README.md

@@ -0,0 +1,8 @@
+# @commandable/mcp-core
+
+Shared runtime package for Commandable.
+
+It owns the reusable database, integration, auth, config, and MCP runtime logic used by:
+
+- `@commandable/mcp`
+- `@commandable/mcp-connect`

package/dist/config/configApply.d.ts

@@ -0,0 +1,16 @@
+import type { DbClient } from '../db/client.js';
+import type { SqlCredentialStore } from '../db/credentialStore.js';
+import type { CommandableConfig } from './configSchema.js';
+export type ApplyConfigResult = {
+    spaceId: string;
+    integrationsUpserted: number;
+    credentialsWritten: number;
+    credentialsUnchanged: number;
+};
+export declare function applyConfig(params: {
+    config: CommandableConfig;
+    db: DbClient;
+    credentialStore: SqlCredentialStore;
+    defaultSpaceId?: string;
+}): Promise<ApplyConfigResult>;
+//# sourceMappingURL=configApply.d.ts.map

package/dist/config/configApply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configApply.d.ts","sourceRoot":"","sources":["../../src/config/configApply.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAqB,MAAM,mBAAmB,CAAA;AAE7E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,oBAAoB,EAAE,MAAM,CAAA;IAC5B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,oBAAoB,EAAE,MAAM,CAAA;CAC7B,CAAA;AAiDD,wBAAsB,WAAW,CAAC,MAAM,EAAE;IACxC,MAAM,EAAE,iBAAiB,CAAA;IACzB,EAAE,EAAE,QAAQ,CAAA;IACZ,eAAe,EAAE,kBAAkB,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAuC7B"}

package/dist/config/configApply.js

@@ -0,0 +1,77 @@
+import { upsertIntegration } from '../db/integrationStore.js';
+function stableSort(value) {
+    if (Array.isArray(value))
+        return value.map(stableSort);
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const k of Object.keys(value).sort())
+            out[k] = stableSort(value[k]);
+        return out;
+    }
+    return value;
+}
+function stableJson(value) {
+    return JSON.stringify(stableSort(value));
+}
+function makeIntegrationId(it) {
+    if (it.id && it.id.trim().length)
+        return it.id.trim();
+    const ref = (it.referenceId && it.referenceId.trim().length) ? it.referenceId.trim() : it.type;
+    if (ref !== it.type)
+        return `${it.type}:${ref}`;
+    return it.type;
+}
+function toIntegrationData(spaceId, it) {
+    const referenceId = (it.referenceId && it.referenceId.trim().length) ? it.referenceId.trim() : it.type;
+    const label = (it.label && it.label.trim().length) ? it.label.trim() : referenceId;
+    const credentialId = (it.credentialId && it.credentialId.trim().length) ? it.credentialId.trim() : `${referenceId}-creds`;
+    return {
+        spaceId: (it.spaceId && it.spaceId.trim().length) ? it.spaceId.trim() : spaceId,
+        id: makeIntegrationId(it),
+        type: it.type,
+        referenceId,
+        label,
+        enabled: it.enabled ?? true,
+        enabledToolsets: it.toolsets ?? undefined,
+        maxScope: it.maxScope ?? undefined,
+        disabledTools: it.disabledTools?.length ? it.disabledTools : undefined,
+        connectionMethod: it.credentials ? 'credentials' : undefined,
+        connectionId: null,
+        credentialId: it.credentials ? credentialId : (it.credentialId ?? undefined),
+        credentialVariant: (it.credentialVariant && it.credentialVariant.trim().length) ? it.credentialVariant.trim() : undefined,
+    };
+}
+export async function applyConfig(params) {
+    const spaceId = params.config.spaceId || params.defaultSpaceId || process.env.COMMANDABLE_SPACE_ID || 'local';
+    let integrationsUpserted = 0;
+    let credentialsWritten = 0;
+    let credentialsUnchanged = 0;
+    for (const it of params.config.integrations || []) {
+        const integration = toIntegrationData(spaceId, it);
+        await upsertIntegration(params.db, integration);
+        integrationsUpserted++;
+        if (!it.credentials || !integration.credentialId)
+            continue;
+        const desired = it.credentials;
+        let existing = null;
+        try {
+            existing = await params.credentialStore.getCredentials(integration.spaceId || spaceId, integration.credentialId);
+        }
+        catch {
+            existing = null;
+        }
+        if (existing && stableJson(existing) === stableJson(desired)) {
+            credentialsUnchanged++;
+            continue;
+        }
+        await params.credentialStore.saveCredentials(integration.spaceId || spaceId, integration.credentialId, desired);
+        credentialsWritten++;
+    }
+    return {
+        spaceId,
+        integrationsUpserted,
+        credentialsWritten,
+        credentialsUnchanged,
+    };
+}
+//# sourceMappingURL=configApply.js.map

package/dist/config/configApply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configApply.js","sourceRoot":"","sources":["../../src/config/configApply.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAY7D,SAAS,UAAU,CAAC,KAAU;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAQ,EAAE,CAAA;QACnB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;YACvC,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAE,KAAa,CAAC,CAAC,CAAC,CAAC,CAAA;QACxC,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAU;IAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,EAAqB;IAC9C,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM;QAC9B,OAAO,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAA;IACrB,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAA;IAC9F,IAAI,GAAG,KAAK,EAAE,CAAC,IAAI;QACjB,OAAO,GAAG,EAAE,CAAC,IAAI,IAAI,GAAG,EAAE,CAAA;IAC5B,OAAO,EAAE,CAAC,IAAI,CAAA;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,EAAqB;IAC/D,MAAM,WAAW,GAAG,CAAC,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAA;IACtG,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;IAClF,MAAM,YAAY,GAAG,CAAC,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW,QAAQ,CAAA;IAEzH,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO;QAC/E,EAAE,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACzB,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,WAAW;QACX,KAAK;QACL,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI;QAC3B,eAAe,EAAE,EAAE,CAAC,QAAQ,IAAI,SAAS;QACzC,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,SAAS;QAClC,aAAa,EAAE,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QACtE,gBAAgB,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QAC5D,YAAY,EAAE,IAAI;QAClB,YAAY,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,IAAI,SAAS,CAAC;QAC5E,iBAAiB,EAAE,CAAC,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;KAC1H,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAKjC;IACC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAA;IAE7G,IAAI,oBAAoB,GAAG,CAAC,CAAA;IAC5B,IAAI,kBAAkB,GAAG,CAAC,CAAA;IAC1B,IAAI,oBAAoB,GAAG,CAAC,CAAA;IAE5B,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAClD,MAAM,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;QAC/C,oBAAoB,EAAE,CAAA;QAEtB,IAAI,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,YAAY;YAC9C,SAAQ;QAEV,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAA;QAC9B,IAAI,QAAQ,GAAQ,IAAI,CAAA;QACxB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,WAAW,CAAC,OAAO,IAAI,OAAO,EAAE,WAAW,CAAC,YAAY,CAAC,CAAA;QAClH,CAAC;QACD,MAAM,CAAC;YACL,QAAQ,GAAG,IAAI,CAAA;QACjB,CAAC;QAED,IAAI,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,oBAAoB,EAAE,CAAA;YACtB,SAAQ;QACV,CAAC;QAED,MAAM,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,WAAW,CAAC,OAAO,IAAI,OAAO,EAAE,WAAW,CAAC,YAAY,EAAE,OAAc,CAAC,CAAA;QACtH,kBAAkB,EAAE,CAAA;IACtB,CAAC;IAED,OAAO;QACL,OAAO;QACP,oBAAoB;QACpB,kBAAkB;QAClB,oBAAoB;KACrB,CAAA;AACH,CAAC"}

package/dist/config/configLoader.d.ts

@@ -0,0 +1,9 @@
+import { type CommandableConfig } from './configSchema.js';
+export declare class ConfigError extends Error {
+    name: string;
+}
+export declare function loadConfig(configPath?: string): {
+    path: string;
+    config: CommandableConfig;
+};
+//# sourceMappingURL=configLoader.d.ts.map

package/dist/config/configLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configLoader.d.ts","sourceRoot":"","sources":["../../src/config/configLoader.ts"],"names":[],"mappings":"AAIA,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAEnF,qBAAa,WAAY,SAAQ,KAAK;IAC3B,IAAI,SAAgB;CAC9B;AA2DD,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAkB3F"}

package/dist/config/configLoader.js

@@ -0,0 +1,75 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { cwd } from 'node:process';
+import YAML from 'js-yaml';
+import { CommandableConfigSchema } from './configSchema.js';
+export class ConfigError extends Error {
+    name = 'ConfigError';
+}
+function parseConfigFile(raw, filePath) {
+    if (filePath.endsWith('.json')) {
+        try {
+            return JSON.parse(raw);
+        }
+        catch (err) {
+            throw new ConfigError(`Invalid JSON in config file: ${filePath}${err?.message ? ` (${err.message})` : ''}`);
+        }
+    }
+    try {
+        return YAML.load(raw);
+    }
+    catch (err) {
+        throw new ConfigError(`Invalid YAML in config file: ${filePath}${err?.message ? ` (${err.message})` : ''}`);
+    }
+}
+function resolveEnvRefs(value, filePath) {
+    if (typeof value === 'string') {
+        return value.replace(/\$\{([A-Z0-9_]+)\}/g, (_m, name) => {
+            const v = process.env[name];
+            if (v == null || v === '')
+                throw new ConfigError(`Missing environment variable ${name} referenced in ${filePath}`);
+            return v;
+        });
+    }
+    if (Array.isArray(value))
+        return value.map(v => resolveEnvRefs(v, filePath));
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const [k, v] of Object.entries(value))
+            out[k] = resolveEnvRefs(v, filePath);
+        return out;
+    }
+    return value;
+}
+function findConfigPath() {
+    const explicit = process.env.COMMANDABLE_CONFIG_FILE;
+    if (explicit && explicit.trim().length)
+        return resolve(explicit.trim());
+    const base = resolve(cwd());
+    const candidates = [
+        'commandable.config.yaml',
+        'commandable.config.yml',
+        'commandable.config.json',
+    ].map(f => resolve(base, f));
+    for (const p of candidates) {
+        if (existsSync(p))
+            return p;
+    }
+    return null;
+}
+export function loadConfig(configPath) {
+    const path = configPath?.trim().length ? resolve(configPath) : findConfigPath();
+    if (!path)
+        throw new ConfigError('No config file found. Provide --config <path> or set COMMANDABLE_CONFIG_FILE.');
+    if (!existsSync(path))
+        throw new ConfigError(`Config file not found: ${path}`);
+    const raw = readFileSync(path, 'utf8');
+    const parsed = parseConfigFile(raw, path);
+    const resolved = resolveEnvRefs(parsed, path);
+    const result = CommandableConfigSchema.safeParse(resolved);
+    if (!result.success) {
+        throw new ConfigError(`Invalid config file: ${path}\n${result.error.toString()}`);
+    }
+    return { path, config: result.data };
+}
+//# sourceMappingURL=configLoader.js.map

package/dist/config/configLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configLoader.js","sourceRoot":"","sources":["../../src/config/configLoader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,IAAI,MAAM,SAAS,CAAA;AAC1B,OAAO,EAAE,uBAAuB,EAA0B,MAAM,mBAAmB,CAAA;AAEnF,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,GAAG,aAAa,CAAA;CAC9B;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,QAAgB;IACpD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACxB,CAAC;QACD,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,IAAI,WAAW,CAAC,gCAAgC,QAAQ,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC7G,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IACD,OAAO,GAAQ,EAAE,CAAC;QAChB,MAAM,IAAI,WAAW,CAAC,gCAAgC,QAAQ,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7G,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAU,EAAE,QAAgB;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE;YAC/D,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;gBACvB,MAAM,IAAI,WAAW,CAAC,gCAAgC,IAAI,kBAAkB,QAAQ,EAAE,CAAC,CAAA;YACzF,OAAO,CAAC,CAAA;QACV,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;IACpD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAQ,EAAE,CAAA;QACnB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YACxC,GAAG,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;QACtC,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;IACpD,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM;QACpC,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC3B,MAAM,UAAU,GAAG;QACjB,yBAAyB;QACzB,wBAAwB;QACxB,yBAAyB;KAC1B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAE5B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,CAAC,CAAC;YACf,OAAO,CAAC,CAAA;IACZ,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,MAAM,IAAI,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAA;IAC/E,IAAI,CAAC,IAAI;QACP,MAAM,IAAI,WAAW,CAAC,+EAA+E,CAAC,CAAA;IAExG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACnB,MAAM,IAAI,WAAW,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAA;IAEzD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACtC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAE7C,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,WAAW,CAAC,wBAAwB,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IACnF,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;AACtC,CAAC"}

package/dist/config/configSchema.d.ts

@@ -0,0 +1,45 @@
+import { z } from 'zod';
+export declare const IntegrationConfigSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    type: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+    referenceId: z.ZodOptional<z.ZodString>;
+    spaceId: z.ZodOptional<z.ZodString>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    credentialId: z.ZodOptional<z.ZodString>;
+    credentialVariant: z.ZodOptional<z.ZodString>;
+    toolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    maxScope: z.ZodOptional<z.ZodEnum<{
+        read: "read";
+        write: "write";
+    }>>;
+    disabledTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>;
+export declare const CommandableConfigSchema: z.ZodObject<{
+    spaceId: z.ZodOptional<z.ZodString>;
+    mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        static: "static";
+        create: "create";
+    }>>>;
+    integrations: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        type: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        referenceId: z.ZodOptional<z.ZodString>;
+        spaceId: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        credentialId: z.ZodOptional<z.ZodString>;
+        credentialVariant: z.ZodOptional<z.ZodString>;
+        toolsets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        maxScope: z.ZodOptional<z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>>;
+        disabledTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type CommandableConfig = z.infer<typeof CommandableConfigSchema>;
+export type IntegrationConfig = z.infer<typeof IntegrationConfigSchema>;
+//# sourceMappingURL=configSchema.d.ts.map

package/dist/config/configSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configSchema.d.ts","sourceRoot":"","sources":["../../src/config/configSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;iBAelC,CAAA;AAEF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;iBAIlC,CAAA;AAEF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AACvE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA"}

package/dist/config/configSchema.js

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+export const IntegrationConfigSchema = z.object({
+    id: z.string().min(1).optional(),
+    type: z.string().min(1),
+    label: z.string().min(1).optional(),
+    referenceId: z.string().min(1).optional(),
+    spaceId: z.string().min(1).optional(),
+    enabled: z.boolean().optional(),
+    credentialId: z.string().min(1).optional(),
+    credentialVariant: z.string().min(1).optional(),
+    toolsets: z.array(z.string()).optional(),
+    /** Cap the maximum scope tier. 'read' means only read tools; 'write' means read+write. */
+    maxScope: z.enum(['read', 'write']).optional(),
+    /** Individual tool names to block regardless of toolset or scope. */
+    disabledTools: z.array(z.string()).optional(),
+    credentials: z.record(z.string(), z.string()).optional(),
+});
+export const CommandableConfigSchema = z.object({
+    spaceId: z.string().min(1).optional(),
+    mode: z.enum(['static', 'create']).optional().default('static'),
+    integrations: z.array(IntegrationConfigSchema).default([]),
+});
+//# sourceMappingURL=configSchema.js.map

package/dist/config/configSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configSchema.js","sourceRoot":"","sources":["../../src/config/configSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,0FAA0F;IAC1F,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,qEAAqE;IACrE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC3D,CAAC,CAAA"}

package/dist/crypto/encryption.d.ts

@@ -0,0 +1,3 @@
+export declare function encrypt(text: string, secret: string): string;
+export declare function decrypt(encryptedText: string, secret: string): string;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/crypto/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../src/crypto/encryption.ts"],"names":[],"mappings":"AAQA,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAQ5D;AAED,wBAAgB,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAcrE"}

package/dist/crypto/encryption.js

@@ -0,0 +1,29 @@
+import crypto from 'node:crypto';
+const algorithm = 'aes-256-cbc';
+function getKey(secret) {
+    return crypto.createHash('sha256').update(secret).digest();
+}
+export function encrypt(text, secret) {
+    const key = getKey(secret);
+    const iv = crypto.randomBytes(16);
+    const cipher = crypto.createCipheriv(algorithm, key, iv);
+    let encrypted = cipher.update(text, 'utf8', 'hex');
+    encrypted += cipher.final('hex');
+    return `${iv.toString('hex')}:${encrypted}`;
+}
+export function decrypt(encryptedText, secret) {
+    const key = getKey(secret);
+    const parts = encryptedText.split(':');
+    if (parts.length !== 2)
+        throw new Error('Invalid encrypted text format');
+    const ivHex = parts[0];
+    const encrypted = parts[1];
+    if (!ivHex || !encrypted)
+        throw new Error('Invalid encrypted text format');
+    const iv = Buffer.from(ivHex, 'hex');
+    const decipher = crypto.createDecipheriv(algorithm, key, iv);
+    let decrypted = decipher.update(encrypted, 'hex', 'utf8');
+    decrypted += decipher.final('utf8');
+    return decrypted;
+}
+//# sourceMappingURL=encryption.js.map

package/dist/crypto/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../src/crypto/encryption.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAEhC,MAAM,SAAS,GAAG,aAAa,CAAA;AAE/B,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAA;AAC5D,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,MAAc;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAExD,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IAClD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAChC,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAA;AAC7C,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,aAAqB,EAAE,MAAc;IAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACtB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS;QACtB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAC5D,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IACzD,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/db/client.d.ts

@@ -0,0 +1,24 @@
+import Database from 'better-sqlite3';
+import { drizzle as drizzleSqlite } from 'drizzle-orm/better-sqlite3';
+import { drizzle as drizzlePg } from 'drizzle-orm/node-postgres';
+import { Pool } from 'pg';
+export type DbDialect = 'sqlite' | 'postgres';
+export type AnyDrizzle = ReturnType<typeof drizzleSqlite> | ReturnType<typeof drizzlePg>;
+export type DbClient = {
+    dialect: 'sqlite';
+    db: ReturnType<typeof drizzleSqlite>;
+    raw: InstanceType<typeof Database>;
+    close: () => void;
+} | {
+    dialect: 'postgres';
+    db: ReturnType<typeof drizzlePg>;
+    raw: Pool;
+    close: () => Promise<void>;
+};
+export interface CreateDbOptions {
+    sqlitePath?: string;
+    databaseUrl?: string;
+}
+export declare function createDbFromEnv(): DbClient;
+export declare function createDb(opts?: CreateDbOptions): DbClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/db/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/db/client.ts"],"names":[],"mappings":"AAGA,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAA;AAEzB,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;AAE7C,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,CAAA;AAExF,MAAM,MAAM,QAAQ,GAChB;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;IAAC,GAAG,EAAE,YAAY,CAAC,OAAO,QAAQ,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,IAAI,CAAA;CAAE,GAClH;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;IAAC,GAAG,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAA;AAEpG,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,wBAAgB,eAAe,IAAI,QAAQ,CAS1C;AAED,wBAAgB,QAAQ,CAAC,IAAI,GAAE,eAAoB,GAAG,QAAQ,CAkC7D"}

package/dist/db/client.js

@@ -0,0 +1,50 @@
+import { dirname, resolve } from 'node:path';
+import { mkdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import Database from 'better-sqlite3';
+import { drizzle as drizzleSqlite } from 'drizzle-orm/better-sqlite3';
+import { drizzle as drizzlePg } from 'drizzle-orm/node-postgres';
+import { Pool } from 'pg';
+export function createDbFromEnv() {
+    const dataDir = process.env.COMMANDABLE_DATA_DIR;
+    const sqliteFromDataDir = dataDir && dataDir.trim().length
+        ? resolve(dataDir, 'credentials.sqlite')
+        : undefined;
+    return createDb({
+        databaseUrl: process.env.DATABASE_URL,
+        sqlitePath: process.env.COMMANDABLE_MCP_SQLITE_PATH || sqliteFromDataDir,
+    });
+}
+export function createDb(opts = {}) {
+    const databaseUrl = opts.databaseUrl || process.env.DATABASE_URL;
+    if (databaseUrl) {
+        const pool = new Pool({ connectionString: databaseUrl });
+        const db = drizzlePg(pool);
+        return {
+            dialect: 'postgres',
+            db,
+            raw: pool,
+            close: async () => {
+                await pool.end();
+            },
+        };
+    }
+    const sqlitePath = opts.sqlitePath
+        ? resolve(opts.sqlitePath)
+        : resolve(homedir(), '.commandable', 'credentials.sqlite');
+    // Ensure parent directory exists so SQLite can create the file.
+    // (better-sqlite3 does not create directories automatically)
+    try {
+        mkdirSync(dirname(sqlitePath), { recursive: true, mode: 0o700 });
+    }
+    catch { }
+    const sqlite = new Database(sqlitePath);
+    const db = drizzleSqlite(sqlite);
+    return {
+        dialect: 'sqlite',
+        db,
+        raw: sqlite,
+        close: () => sqlite.close(),
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/db/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/db/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAA;AAezB,MAAM,UAAU,eAAe;IAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAA;IAChD,MAAM,iBAAiB,GAAG,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM;QACxD,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,CAAC;QACxC,CAAC,CAAC,SAAS,CAAA;IACb,OAAO,QAAQ,CAAC;QACd,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QACrC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,iBAAiB;KACzE,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAwB,EAAE;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IAChE,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CAAA;QACxD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC1B,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,EAAE;YACF,GAAG,EAAE,IAAI;YACT,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,IAAI,CAAC,GAAG,EAAE,CAAA;YAClB,CAAC;SACF,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU;QAChC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;QAC1B,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,oBAAoB,CAAC,CAAA;IAE5D,gEAAgE;IAChE,6DAA6D;IAC7D,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,CAAC,CAAA,CAAC;IAER,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAA;IACvC,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAChC,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,EAAE;QACF,GAAG,EAAE,MAAM;QACX,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;KAC5B,CAAA;AACH,CAAC"}

package/dist/db/credentialStore.d.ts

@@ -0,0 +1,15 @@
+import type { CredentialStore } from '../integrations/proxy.js';
+import type { DbClient } from './client.js';
+export declare class SqlCredentialStore implements CredentialStore {
+    private readonly client;
+    private readonly encryptionSecret;
+    constructor(client: DbClient, encryptionSecret: string);
+    hasCredentials(spaceId: string, credentialId: string): Promise<boolean>;
+    saveCredentials(spaceId: string, credentialId: string, credentials: Record<string, string>): Promise<void>;
+    getCredentials(spaceId: string, credentialId: string): Promise<Record<string, string> | null>;
+    deleteCredentials(spaceId: string, credentialId: string): Promise<void>;
+    private _table;
+    private _db;
+    private _getRow;
+}
+//# sourceMappingURL=credentialStore.d.ts.map

package/dist/db/credentialStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialStore.d.ts","sourceRoot":"","sources":["../../src/db/credentialStore.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAG3C,qBAAa,kBAAmB,YAAW,eAAe;IAEtD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;gBADhB,MAAM,EAAE,QAAQ,EAChB,gBAAgB,EAAE,MAAM;IAGrC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvE,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAc1G,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAS7F,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7E,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,GAAG;YAIG,OAAO;CAStB"}

package/dist/db/credentialStore.js

@@ -0,0 +1,56 @@
+import { and, eq } from 'drizzle-orm';
+import { decrypt, encrypt } from '../crypto/encryption.js';
+import { pgCredentials, sqliteCredentials } from './schema.js';
+export class SqlCredentialStore {
+    client;
+    encryptionSecret;
+    constructor(client, encryptionSecret) {
+        this.client = client;
+        this.encryptionSecret = encryptionSecret;
+    }
+    async hasCredentials(spaceId, credentialId) {
+        return !!(await this._getRow(spaceId, credentialId));
+    }
+    async saveCredentials(spaceId, credentialId, credentials) {
+        const ciphertext = encrypt(JSON.stringify(credentials ?? {}), this.encryptionSecret);
+        const now = new Date();
+        const table = this._table();
+        await this._db()
+            .insert(table)
+            .values({ spaceId, id: credentialId, ciphertext, createdAt: now, updatedAt: now })
+            .onConflictDoUpdate({
+            target: [table.spaceId, table.id],
+            set: { ciphertext, updatedAt: now },
+        });
+    }
+    async getCredentials(spaceId, credentialId) {
+        const row = await this._getRow(spaceId, credentialId);
+        if (!row?.ciphertext)
+            return null;
+        const plaintext = decrypt(row.ciphertext, this.encryptionSecret);
+        const parsed = JSON.parse(plaintext);
+        return (parsed && typeof parsed === 'object') ? parsed : null;
+    }
+    async deleteCredentials(spaceId, credentialId) {
+        const table = this._table();
+        await this._db()
+            .delete(table)
+            .where(and(eq(table.spaceId, spaceId), eq(table.id, credentialId)));
+    }
+    _table() {
+        return this.client.dialect === 'sqlite' ? sqliteCredentials : pgCredentials;
+    }
+    _db() {
+        return this.client.db;
+    }
+    async _getRow(spaceId, credentialId) {
+        const table = this._table();
+        const rows = await this._db()
+            .select()
+            .from(table)
+            .where(and(eq(table.spaceId, spaceId), eq(table.id, credentialId)))
+            .limit(1);
+        return rows[0] ?? null;
+    }
+}
+//# sourceMappingURL=credentialStore.js.map

package/dist/db/credentialStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialStore.js","sourceRoot":"","sources":["../../src/db/credentialStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AAG1D,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAE9D,MAAM,OAAO,kBAAkB;IAEV;IACA;IAFnB,YACmB,MAAgB,EAChB,gBAAwB;QADxB,WAAM,GAAN,MAAM,CAAU;QAChB,qBAAgB,GAAhB,gBAAgB,CAAQ;IACxC,CAAC;IAEJ,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,YAAoB;QACxD,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,YAAoB,EAAE,WAAmC;QAC9F,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;QACpF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QAE3B,MAAM,IAAI,CAAC,GAAG,EAAE;aACb,MAAM,CAAC,KAAK,CAAC;aACb,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;aACjF,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YACjC,GAAG,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE;SACpC,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,YAAoB;QACxD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QACrD,IAAI,CAAC,GAAG,EAAE,UAAU;YAClB,OAAO,IAAI,CAAA;QACb,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACpC,OAAO,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,YAAoB;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QAC3B,MAAM,IAAI,CAAC,GAAG,EAAE;aACb,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;IACvE,CAAC;IAEO,MAAM;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAA;IAC7E,CAAC;IAEO,GAAG;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;IACvB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,YAAoB;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QAC3B,MAAM,IAAI,GAAU,MAAM,IAAI,CAAC,GAAG,EAAE;aACjC,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;aAClE,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;IACxB,CAAC;CACF"}

package/dist/db/integrationStore.d.ts

@@ -0,0 +1,14 @@
+import type { IntegrationData } from '../types.js';
+import type { DbClient } from './client.js';
+export declare function listIntegrations(client: DbClient, spaceId?: string): Promise<IntegrationData[]>;
+export declare function getIntegrationById(client: DbClient, id: string): Promise<IntegrationData | null>;
+export declare function upsertIntegration(client: DbClient, integration: IntegrationData): Promise<void>;
+export declare function deleteIntegrationById(client: DbClient, id: string): Promise<number>;
+/** Update only credential linkage fields — does not clobber toolsets/permissions. */
+export declare function updateIntegrationCredentials(client: DbClient, integrationId: string, fields: {
+    connectionMethod: 'credentials' | null;
+    credentialId: string | null;
+    credentialVariant: string | null;
+}): Promise<void>;
+export declare function updateIntegrationHealth(client: DbClient, integrationId: string, healthStatus: 'disconnected' | 'connected' | 'invalid_credentials', checkedAt?: Date): Promise<void>;
+//# sourceMappingURL=integrationStore.d.ts.map

package/dist/db/integrationStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrationStore.d.ts","sourceRoot":"","sources":["../../src/db/integrationStore.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AA6C3C,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAQrG;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,QAAQ,EAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAQjC;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAwCrG;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMzF;AAED,qFAAqF;AACrF,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,QAAQ,EAChB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE;IACN,gBAAgB,EAAE,aAAa,GAAG,IAAI,CAAA;IACtC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC,GACA,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,QAAQ,EAChB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,cAAc,GAAG,WAAW,GAAG,qBAAqB,EAClE,SAAS,CAAC,EAAE,IAAI,GACf,OAAO,CAAC,IAAI,CAAC,CAMf"}