@hailer/mcp 1.1.14 → 1.1.16

package/dist/services/agent-credential-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-credential-store.d.ts","sourceRoot":"","sources":["../../src/services/agent-credential-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,CAAC;IACxD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAuCD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,aAAa,CAAS;gBAElB,OAAO,CAAC,EAAE,MAAM;IAO5B;;OAEG;IACH,OAAO,CAAC,aAAa;IAIrB;;OAEG;YACW,aAAa;IAW3B;;OAEG;YACW,WAAW;IAuBzB;;OAEG;YACW,YAAY;IAuB1B;;;OAGG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAa1C;;;OAGG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IA8B3C;;OAEG;IACG,IAAI,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAexD;;OAEG;IACG,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAOnF;;;OAGG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBtE;;OAEG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAQvE;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAI7C"}

package/dist/services/agent-credential-store.js

@@ -0,0 +1,212 @@
+"use strict";
+/**
+ * Agent Credential Store
+ *
+ * Encrypted JSON file storage for agent credentials.
+ * Uses AES-256-GCM encryption for password storage.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentCredentialStore = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const promises_1 = __importDefault(require("fs/promises"));
+const path_1 = __importDefault(require("path"));
+const config_1 = require("../config");
+const logger_1 = require("../lib/logger");
+const logger = (0, logger_1.createLogger)({ component: 'agent-credential-store' });
+// ================================================================================
+// ENCRYPTION HELPERS
+// ================================================================================
+const ALGORITHM = 'aes-256-gcm';
+const IV_LENGTH = 12; // GCM standard
+const AUTH_TAG_LENGTH = 16;
+/**
+ * Get encryption key from environment or generate dev fallback
+ */
+function getEncryptionKey() {
+    if (config_1.environment.CREDENTIAL_ENCRYPTION_KEY) {
+        return Buffer.from(config_1.environment.CREDENTIAL_ENCRYPTION_KEY, 'hex');
+    }
+    // Development fallback - deterministic key from a fixed seed
+    // WARNING: This is NOT secure for production
+    if (config_1.environment.NODE_ENV === 'development' || config_1.environment.NODE_ENV === 'test') {
+        logger.warn('Using development fallback encryption key - NOT SECURE FOR PRODUCTION');
+        // Generate deterministic key from seed phrase
+        return crypto_1.default.createHash('sha256').update('hailer-mcp-dev-key-DO-NOT-USE-IN-PRODUCTION').digest();
+    }
+    throw new Error('CREDENTIAL_ENCRYPTION_KEY must be set in production');
+}
+// ================================================================================
+// AGENT CREDENTIAL STORE CLASS
+// ================================================================================
+class AgentCredentialStore {
+    dataDir;
+    filePath;
+    encryptionKey;
+    constructor(dataDir) {
+        // Default to 'data/' relative to project root
+        this.dataDir = dataDir || path_1.default.join(process.cwd(), 'data');
+        this.filePath = path_1.default.join(this.dataDir, 'agent-credentials.json');
+        this.encryptionKey = getEncryptionKey();
+    }
+    /**
+     * Generate storage key from workspaceId and agentType
+     */
+    getStorageKey(workspaceId, agentType) {
+        return `${workspaceId}:${agentType}`;
+    }
+    /**
+     * Ensure data directory exists
+     */
+    async ensureDataDir() {
+        try {
+            await promises_1.default.mkdir(this.dataDir, { recursive: true });
+        }
+        catch (error) {
+            // Directory might already exist
+            if (error.code !== 'EEXIST') {
+                throw error;
+            }
+        }
+    }
+    /**
+     * Read credentials file with graceful error handling
+     */
+    async readStorage() {
+        try {
+            const content = await promises_1.default.readFile(this.filePath, 'utf-8');
+            const storage = JSON.parse(content);
+            // Validate structure
+            if (typeof storage !== 'object' || !storage.credentials) {
+                throw new Error('Invalid storage format');
+            }
+            return storage;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                // File doesn't exist - return empty storage
+                return { version: 1, credentials: {} };
+            }
+            // JSON parsing error or other issue - log and return empty
+            logger.error('Failed to read credentials file, initializing empty storage', error);
+            return { version: 1, credentials: {} };
+        }
+    }
+    /**
+     * Write credentials file atomically
+     */
+    async writeStorage(storage) {
+        await this.ensureDataDir();
+        const content = JSON.stringify(storage, null, 2);
+        const tempPath = `${this.filePath}.tmp.${Date.now()}`;
+        try {
+            // Write to temp file first
+            await promises_1.default.writeFile(tempPath, content, 'utf-8');
+            // Atomic rename
+            await promises_1.default.rename(tempPath, this.filePath);
+        }
+        catch (error) {
+            // Clean up temp file if it exists
+            try {
+                await promises_1.default.unlink(tempPath);
+            }
+            catch {
+                // Ignore cleanup errors
+            }
+            throw error;
+        }
+    }
+    /**
+     * Encrypt password using AES-256-GCM
+     * Format: iv:authTag:ciphertext (all hex-encoded)
+     */
+    encryptPassword(plaintext) {
+        const iv = crypto_1.default.randomBytes(IV_LENGTH);
+        const cipher = crypto_1.default.createCipheriv(ALGORITHM, this.encryptionKey, iv);
+        let encrypted = cipher.update(plaintext, 'utf8', 'hex');
+        encrypted += cipher.final('hex');
+        const authTag = cipher.getAuthTag();
+        // Format: iv:authTag:ciphertext
+        return `${iv.toString('hex')}:${authTag.toString('hex')}:${encrypted}`;
+    }
+    /**
+     * Decrypt password from AES-256-GCM format
+     * Expects format: iv:authTag:ciphertext (all hex-encoded)
+     */
+    decryptPassword(ciphertext) {
+        const parts = ciphertext.split(':');
+        if (parts.length !== 3) {
+            throw new Error('Invalid encrypted password format');
+        }
+        const [ivHex, authTagHex, encryptedHex] = parts;
+        const iv = Buffer.from(ivHex, 'hex');
+        const authTag = Buffer.from(authTagHex, 'hex');
+        const encrypted = Buffer.from(encryptedHex, 'hex');
+        if (iv.length !== IV_LENGTH) {
+            throw new Error(`Invalid IV length: expected ${IV_LENGTH}, got ${iv.length}`);
+        }
+        if (authTag.length !== AUTH_TAG_LENGTH) {
+            throw new Error(`Invalid auth tag length: expected ${AUTH_TAG_LENGTH}, got ${authTag.length}`);
+        }
+        const decipher = crypto_1.default.createDecipheriv(ALGORITHM, this.encryptionKey, iv);
+        decipher.setAuthTag(authTag);
+        let decrypted = decipher.update(encrypted);
+        decrypted = Buffer.concat([decrypted, decipher.final()]);
+        return decrypted.toString('utf8');
+    }
+    /**
+     * Save or update agent credentials
+     */
+    async save(credentials) {
+        const storage = await this.readStorage();
+        const key = this.getStorageKey(credentials.workspaceId, credentials.agentType);
+        storage.credentials[key] = credentials;
+        await this.writeStorage(storage);
+        logger.info('Saved agent credentials', {
+            workspaceId: credentials.workspaceId,
+            agentType: credentials.agentType,
+            status: credentials.status,
+        });
+    }
+    /**
+     * Get agent credentials by workspace and type
+     */
+    async get(workspaceId, agentType) {
+        const storage = await this.readStorage();
+        const key = this.getStorageKey(workspaceId, agentType);
+        return storage.credentials[key] || null;
+    }
+    /**
+     * Delete agent credentials
+     * Returns true if credentials were found and deleted
+     */
+    async delete(workspaceId, agentType) {
+        const storage = await this.readStorage();
+        const key = this.getStorageKey(workspaceId, agentType);
+        if (!(key in storage.credentials)) {
+            return false;
+        }
+        delete storage.credentials[key];
+        await this.writeStorage(storage);
+        logger.info('Deleted agent credentials', { workspaceId, agentType });
+        return true;
+    }
+    /**
+     * List all credentials for a workspace
+     */
+    async listByWorkspace(workspaceId) {
+        const storage = await this.readStorage();
+        return Object.values(storage.credentials).filter((cred) => cred.workspaceId === workspaceId);
+    }
+    /**
+     * List all stored credentials
+     */
+    async listAll() {
+        const storage = await this.readStorage();
+        return Object.values(storage.credentials);
+    }
+}
+exports.AgentCredentialStore = AgentCredentialStore;
+//# sourceMappingURL=agent-credential-store.js.map

package/dist/services/agent-credential-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-credential-store.js","sourceRoot":"","sources":["../../src/services/agent-credential-store.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;AAEH,oDAA4B;AAC5B,2DAA6B;AAC7B,gDAAwB;AACxB,sCAAwC;AACxC,0CAA6C;AAE7C,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,EAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC,CAAC;AA0BrE,mFAAmF;AACnF,qBAAqB;AACrB,mFAAmF;AAEnF,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAE,eAAe;AACtC,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;GAEG;AACH,SAAS,gBAAgB;IACvB,IAAI,oBAAW,CAAC,yBAAyB,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,oBAAW,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;IAED,6DAA6D;IAC7D,6CAA6C;IAC7C,IAAI,oBAAW,CAAC,QAAQ,KAAK,aAAa,IAAI,oBAAW,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QACrF,8CAA8C;QAC9C,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC,MAAM,EAAE,CAAC;IACpG,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;AACzE,CAAC;AAED,mFAAmF;AACnF,+BAA+B;AAC/B,mFAAmF;AAEnF,MAAa,oBAAoB;IACvB,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,aAAa,CAAS;IAE9B,YAAY,OAAgB;QAC1B,8CAA8C;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QAClE,IAAI,CAAC,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,WAAmB,EAAE,SAAiB;QAC1D,OAAO,GAAG,WAAW,IAAI,SAAS,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC;YACH,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gCAAgC;YAChC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB,CAAC;YAEzD,qBAAqB;YACrB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,4CAA4C;gBAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;YACzC,CAAC;YAED,2DAA2D;YAC3D,MAAM,CAAC,KAAK,CAAC,6DAA6D,EAAE,KAAK,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,OAA0B;QACnD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,QAAQ,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAEtD,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/C,gBAAgB;YAChB,MAAM,kBAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kCAAkC;YAClC,IAAI,CAAC;gBACH,MAAM,kBAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,SAAiB;QAC/B,MAAM,EAAE,GAAG,gBAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,gBAAM,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAExE,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACxD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEpC,gCAAgC;QAChC,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;IACzE,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,UAAkB;QAChC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;QAEhD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAEnD,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,SAAS,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,eAAe,SAAS,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,QAAQ,GAAG,gBAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC5E,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE7B,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAEzD,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,WAA6B;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;QAE/E,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;QAEvC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAEjC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACrC,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,MAAM,EAAE,WAAW,CAAC,MAAM;SAC3B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,SAAiB;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEvD,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,SAAiB;QACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAEjC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAEzC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAC9C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,CAC3C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;CACF;AA1MD,oDA0MC"}

package/dist/stdio-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio-server.d.ts","sourceRoot":"","sources":["../src/stdio-server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,YAAY,EAAa,MAAM,qBAAqB,CAAC;AAM9D;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAkGhF"}

package/dist/stdio-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio-server.js","sourceRoot":"","sources":["../src/stdio-server.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAcH,4CAkGC;AA9GD,oEAAoE;AACpE,wEAAiF;AACjF,yCAA4C;AAC5C,uDAA8D;AAC9D,6DAA0D;AAC1D,qCAAuC;AAEvC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;AAE3D;;GAEG;AACI,KAAK,UAAU,gBAAgB,CAAC,YAA0B;IAC/D,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAE5D,8DAA8D;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,oBAAoB;IACpB,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC;QAC3B,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,sFAAsF;IACtF,MAAM,aAAa,GAAG,oBAAW,CAAC,oBAAoB;QACpD,CAAC,CAAC,CAAC,yBAAS,CAAC,IAAI,EAAE,yBAAS,CAAC,KAAK,EAAE,yBAAS,CAAC,UAAU,EAAE,yBAAS,CAAC,OAAO,CAAC;QAC5E,CAAC,CAAC,CAAC,yBAAS,CAAC,IAAI,EAAE,yBAAS,CAAC,KAAK,EAAE,yBAAS,CAAC,UAAU,CAAC,CAAC;IAE5D,MAAM,eAAe,GAAG,YAAY,CAAC,kBAAkB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IAE3E,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;QAChD,SAAS,EAAE,eAAe,CAAC,MAAM;QACjC,aAAa;KACd,CAAC,CAAC;IAEH,yCAAyC;IACzC,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CACT,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EACzF,KAAK,EAAE,IAA6B,EAAE,EAAE;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAErE,IAAI,CAAC;gBACH,4BAA4B;gBAC5B,MAAM,WAAW,GAAG,MAAM,mCAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAE9D,mBAAmB;gBACnB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;gBAE/E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAEzE,kCAAkC;gBAClC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;oBAChE,qDAAqD;oBACrD,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAED,4BAA4B;gBAC5B,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;yBAC5E,CAAC;iBACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAE9E,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,UAAU,YAAY,EAAE;yBAC/B,CAAC;oBACF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAE7C,2BAA2B;IAC3B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC3D,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC5D,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;AAC7C,CAAC"}

package/dist/workspace/context.d.ts

@@ -0,0 +1,148 @@
+/**
+ * Workspace Context
+ *
+ * Workspace-scoped singleton container for complete tenant isolation.
+ * Each workspace gets ONE instance of WorkspaceContext that holds:
+ * - Schema (workflow/field IDs)
+ * - Credentials (bot email/password)
+ * - Bot state (enabled/disabled)
+ *
+ * CRITICAL: Data must NEVER mix between workspaces.
+ */
+import { WorkspaceSchema } from './schema';
+import { BotCredentials } from './credentials';
+import { HailerApiClient } from '../mcp/utils';
+/**
+ * Bot state entry
+ */
+export interface BotStateEntry {
+    enabled: boolean;
+    userId: string;
+    botType: string | null;
+}
+/**
+ * Bot state map: userId -> state
+ */
+export type BotStateMap = Map<string, BotStateEntry>;
+/**
+ * Workspace-scoped singleton container
+ */
+export declare class WorkspaceContext {
+    readonly workspaceId: string;
+    readonly workspaceName: string;
+    private schema;
+    private credentials;
+    private botState;
+    private initialized;
+    private stateChangeCallbacks;
+    private credentialChangeCallbacks;
+    constructor(workspaceId: string, workspaceName?: string);
+    /**
+     * Initialize the workspace context by discovering schema and loading credentials
+     */
+    initialize(client: HailerApiClient): Promise<boolean>;
+    /**
+     * Check if workspace is initialized
+     */
+    isInitialized(): boolean;
+    /**
+     * Get the workspace schema (workflow/field IDs)
+     */
+    getSchema(): WorkspaceSchema | null;
+    /**
+     * Set the workspace schema (used during hot-reload)
+     */
+    setSchema(schema: WorkspaceSchema): void;
+    /**
+     * Get Agent Directory workflow ID
+     */
+    getAgentDirectoryWorkflowId(): string | null;
+    /**
+     * Get phase IDs
+     */
+    getPhaseIds(): {
+        deployed: string | null;
+        retired: string | null;
+    };
+    /**
+     * Get credentials for a specific bot
+     */
+    getCredentials(userId: string): BotCredentials | undefined;
+    /**
+     * Get all credentials
+     */
+    getAllCredentials(): BotCredentials[];
+    /**
+     * Update credentials for a bot
+     */
+    updateCredentials(userId: string, creds: Partial<BotCredentials>): void;
+    /**
+     * Get orchestrator credentials (first bot with orchestrator type)
+     */
+    getOrchestratorCredentials(): BotCredentials | undefined;
+    /**
+     * Get specialist credentials (non-orchestrator enabled bots)
+     */
+    getSpecialistCredentials(): BotCredentials[];
+    /**
+     * Get bot state for a specific user
+     */
+    getBotState(userId: string): BotStateEntry | undefined;
+    /**
+     * Get all bot states as a simple map (userId -> enabled)
+     */
+    getAllBotStates(): Record<string, boolean>;
+    /**
+     * Get enabled bots with their types
+     */
+    getEnabledBotsWithTypes(): Map<string, string | null>;
+    /**
+     * Set bot enabled state
+     */
+    setBotEnabled(userId: string, enabled: boolean): void;
+    /**
+     * Set bot type for a user
+     */
+    setBotType(userId: string, botType: string | null): void;
+    /**
+     * Register callback for bot state changes
+     */
+    onBotStateChange(callback: (userId: string, enabled: boolean) => void): void;
+    /**
+     * Register callback for credential changes
+     */
+    onCredentialChange(callback: (userId: string) => void): void;
+    /**
+     * Clear all callbacks (for cleanup)
+     */
+    clearCallbacks(): void;
+}
+/**
+ * Get or create WorkspaceContext for a workspace
+ */
+export declare function getWorkspace(workspaceId: string, workspaceName?: string): WorkspaceContext;
+/**
+ * Get existing WorkspaceContext (returns undefined if not created)
+ */
+export declare function getExistingWorkspace(workspaceId: string): WorkspaceContext | undefined;
+/**
+ * List all registered workspace IDs
+ */
+export declare function listWorkspaces(): string[];
+/**
+ * Check if a workspace context exists
+ */
+export declare function hasWorkspace(workspaceId: string): boolean;
+/**
+ * Remove a workspace context (for cleanup)
+ */
+export declare function removeWorkspace(workspaceId: string): boolean;
+/**
+ * Clear all workspace contexts (for testing/shutdown)
+ */
+export declare function clearAllWorkspaces(): void;
+/**
+ * Find workspace by Agent Directory workflow ID (reverse lookup)
+ */
+export declare function getWorkspaceByWorkflowId(workflowId: string): WorkspaceContext | undefined;
+//# sourceMappingURL=context.d.ts.map

package/dist/workspace/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/workspace/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,eAAe,EAAkB,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAmB,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAI/C;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAErD;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,OAAO,CAAC,MAAM,CAAgC;IAC9C,OAAO,CAAC,WAAW,CAA0C;IAC7D,OAAO,CAAC,QAAQ,CAA0B;IAC1C,OAAO,CAAC,WAAW,CAAS;IAG5B,OAAO,CAAC,oBAAoB,CAAyD;IACrF,OAAO,CAAC,yBAAyB,CAAuC;gBAE5D,WAAW,EAAE,MAAM,EAAE,aAAa,GAAE,MAAW;IAU3D;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC;IAkD3D;;OAEG;IACH,aAAa,IAAI,OAAO;IAQxB;;OAEG;IACH,SAAS,IAAI,eAAe,GAAG,IAAI;IAInC;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IAKxC;;OAEG;IACH,2BAA2B,IAAI,MAAM,GAAG,IAAI;IAI5C;;OAEG;IACH,WAAW,IAAI;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;IAWlE;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI1D;;OAEG;IACH,iBAAiB,IAAI,cAAc,EAAE;IAIrC;;OAEG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI;IAiBvE;;OAEG;IACH,0BAA0B,IAAI,cAAc,GAAG,SAAS;IAKxD;;OAEG;IACH,wBAAwB,IAAI,cAAc,EAAE;IAS5C;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAItD;;OAEG;IACH,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAQ1C;;OAEG;IACH,uBAAuB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAUrD;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAoBrD;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAqBxD;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAI5E;;OAEG;IACH,kBAAkB,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAI5D;;OAEG;IACH,cAAc,IAAI,IAAI;CAIvB;AAYD;;GAEG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAQ1F;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAEtF;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAS5D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAMzC;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAOzF"}