@hailer/mcp 1.2.1 → 2.0.0-beta.3

package/dist/services/agent-credential-store.js

@@ -1,212 +0,0 @@
-"use strict";
-/**
- * Agent Credential Store
- *
- * Encrypted JSON file storage for agent credentials.
- * Uses AES-256-GCM encryption for password storage.
- */
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentCredentialStore = void 0;
-const crypto_1 = __importDefault(require("crypto"));
-const promises_1 = __importDefault(require("fs/promises"));
-const path_1 = __importDefault(require("path"));
-const config_1 = require("../config");
-const logger_1 = require("../lib/logger");
-const logger = (0, logger_1.createLogger)({ component: 'agent-credential-store' });
-// ================================================================================
-// ENCRYPTION HELPERS
-// ================================================================================
-const ALGORITHM = 'aes-256-gcm';
-const IV_LENGTH = 12; // GCM standard
-const AUTH_TAG_LENGTH = 16;
-/**
- * Get encryption key from environment or generate dev fallback
- */
-function getEncryptionKey() {
-    if (config_1.environment.CREDENTIAL_ENCRYPTION_KEY) {
-        return Buffer.from(config_1.environment.CREDENTIAL_ENCRYPTION_KEY, 'hex');
-    }
-    // Development fallback - deterministic key from a fixed seed
-    // WARNING: This is NOT secure for production
-    if (config_1.environment.NODE_ENV === 'development' || config_1.environment.NODE_ENV === 'test') {
-        logger.warn('Using development fallback encryption key - NOT SECURE FOR PRODUCTION');
-        // Generate deterministic key from seed phrase
-        return crypto_1.default.createHash('sha256').update('hailer-mcp-dev-key-DO-NOT-USE-IN-PRODUCTION').digest();
-    }
-    throw new Error('CREDENTIAL_ENCRYPTION_KEY must be set in production');
-}
-// ================================================================================
-// AGENT CREDENTIAL STORE CLASS
-// ================================================================================
-class AgentCredentialStore {
-    dataDir;
-    filePath;
-    encryptionKey;
-    constructor(dataDir) {
-        // Default to 'data/' relative to project root
-        this.dataDir = dataDir || path_1.default.join(process.cwd(), 'data');
-        this.filePath = path_1.default.join(this.dataDir, 'agent-credentials.json');
-        this.encryptionKey = getEncryptionKey();
-    }
-    /**
-     * Generate storage key from workspaceId and agentType
-     */
-    getStorageKey(workspaceId, agentType) {
-        return `${workspaceId}:${agentType}`;
-    }
-    /**
-     * Ensure data directory exists
-     */
-    async ensureDataDir() {
-        try {
-            await promises_1.default.mkdir(this.dataDir, { recursive: true });
-        }
-        catch (error) {
-            // Directory might already exist
-            if (error.code !== 'EEXIST') {
-                throw error;
-            }
-        }
-    }
-    /**
-     * Read credentials file with graceful error handling
-     */
-    async readStorage() {
-        try {
-            const content = await promises_1.default.readFile(this.filePath, 'utf-8');
-            const storage = JSON.parse(content);
-            // Validate structure
-            if (typeof storage !== 'object' || !storage.credentials) {
-                throw new Error('Invalid storage format');
-            }
-            return storage;
-        }
-        catch (error) {
-            if (error.code === 'ENOENT') {
-                // File doesn't exist - return empty storage
-                return { version: 1, credentials: {} };
-            }
-            // JSON parsing error or other issue - log and return empty
-            logger.error('Failed to read credentials file, initializing empty storage', error);
-            return { version: 1, credentials: {} };
-        }
-    }
-    /**
-     * Write credentials file atomically
-     */
-    async writeStorage(storage) {
-        await this.ensureDataDir();
-        const content = JSON.stringify(storage, null, 2);
-        const tempPath = `${this.filePath}.tmp.${Date.now()}`;
-        try {
-            // Write to temp file first
-            await promises_1.default.writeFile(tempPath, content, 'utf-8');
-            // Atomic rename
-            await promises_1.default.rename(tempPath, this.filePath);
-        }
-        catch (error) {
-            // Clean up temp file if it exists
-            try {
-                await promises_1.default.unlink(tempPath);
-            }
-            catch {
-                // Ignore cleanup errors
-            }
-            throw error;
-        }
-    }
-    /**
-     * Encrypt password using AES-256-GCM
-     * Format: iv:authTag:ciphertext (all hex-encoded)
-     */
-    encryptPassword(plaintext) {
-        const iv = crypto_1.default.randomBytes(IV_LENGTH);
-        const cipher = crypto_1.default.createCipheriv(ALGORITHM, this.encryptionKey, iv);
-        let encrypted = cipher.update(plaintext, 'utf8', 'hex');
-        encrypted += cipher.final('hex');
-        const authTag = cipher.getAuthTag();
-        // Format: iv:authTag:ciphertext
-        return `${iv.toString('hex')}:${authTag.toString('hex')}:${encrypted}`;
-    }
-    /**
-     * Decrypt password from AES-256-GCM format
-     * Expects format: iv:authTag:ciphertext (all hex-encoded)
-     */
-    decryptPassword(ciphertext) {
-        const parts = ciphertext.split(':');
-        if (parts.length !== 3) {
-            throw new Error('Invalid encrypted password format');
-        }
-        const [ivHex, authTagHex, encryptedHex] = parts;
-        const iv = Buffer.from(ivHex, 'hex');
-        const authTag = Buffer.from(authTagHex, 'hex');
-        const encrypted = Buffer.from(encryptedHex, 'hex');
-        if (iv.length !== IV_LENGTH) {
-            throw new Error(`Invalid IV length: expected ${IV_LENGTH}, got ${iv.length}`);
-        }
-        if (authTag.length !== AUTH_TAG_LENGTH) {
-            throw new Error(`Invalid auth tag length: expected ${AUTH_TAG_LENGTH}, got ${authTag.length}`);
-        }
-        const decipher = crypto_1.default.createDecipheriv(ALGORITHM, this.encryptionKey, iv);
-        decipher.setAuthTag(authTag);
-        let decrypted = decipher.update(encrypted);
-        decrypted = Buffer.concat([decrypted, decipher.final()]);
-        return decrypted.toString('utf8');
-    }
-    /**
-     * Save or update agent credentials
-     */
-    async save(credentials) {
-        const storage = await this.readStorage();
-        const key = this.getStorageKey(credentials.workspaceId, credentials.agentType);
-        storage.credentials[key] = credentials;
-        await this.writeStorage(storage);
-        logger.info('Saved agent credentials', {
-            workspaceId: credentials.workspaceId,
-            agentType: credentials.agentType,
-            status: credentials.status,
-        });
-    }
-    /**
-     * Get agent credentials by workspace and type
-     */
-    async get(workspaceId, agentType) {
-        const storage = await this.readStorage();
-        const key = this.getStorageKey(workspaceId, agentType);
-        return storage.credentials[key] || null;
-    }
-    /**
-     * Delete agent credentials
-     * Returns true if credentials were found and deleted
-     */
-    async delete(workspaceId, agentType) {
-        const storage = await this.readStorage();
-        const key = this.getStorageKey(workspaceId, agentType);
-        if (!(key in storage.credentials)) {
-            return false;
-        }
-        delete storage.credentials[key];
-        await this.writeStorage(storage);
-        logger.info('Deleted agent credentials', { workspaceId, agentType });
-        return true;
-    }
-    /**
-     * List all credentials for a workspace
-     */
-    async listByWorkspace(workspaceId) {
-        const storage = await this.readStorage();
-        return Object.values(storage.credentials).filter((cred) => cred.workspaceId === workspaceId);
-    }
-    /**
-     * List all stored credentials
-     */
-    async listAll() {
-        const storage = await this.readStorage();
-        return Object.values(storage.credentials);
-    }
-}
-exports.AgentCredentialStore = AgentCredentialStore;
-//# sourceMappingURL=agent-credential-store.js.map

package/dist/services/agent-credential-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-credential-store.js","sourceRoot":"","sources":["../../src/services/agent-credential-store.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;AAEH,oDAA4B;AAC5B,2DAA6B;AAC7B,gDAAwB;AACxB,sCAAwC;AACxC,0CAA6C;AAE7C,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,EAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC,CAAC;AA0BrE,mFAAmF;AACnF,qBAAqB;AACrB,mFAAmF;AAEnF,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAE,eAAe;AACtC,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;GAEG;AACH,SAAS,gBAAgB;IACvB,IAAI,oBAAW,CAAC,yBAAyB,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,oBAAW,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;IAED,6DAA6D;IAC7D,6CAA6C;IAC7C,IAAI,oBAAW,CAAC,QAAQ,KAAK,aAAa,IAAI,oBAAW,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QACrF,8CAA8C;QAC9C,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC,MAAM,EAAE,CAAC;IACpG,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;AACzE,CAAC;AAED,mFAAmF;AACnF,+BAA+B;AAC/B,mFAAmF;AAEnF,MAAa,oBAAoB;IACvB,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,aAAa,CAAS;IAE9B,YAAY,OAAgB;QAC1B,8CAA8C;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QAClE,IAAI,CAAC,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,WAAmB,EAAE,SAAiB;QAC1D,OAAO,GAAG,WAAW,IAAI,SAAS,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC;YACH,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gCAAgC;YAChC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB,CAAC;YAEzD,qBAAqB;YACrB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,4CAA4C;gBAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;YACzC,CAAC;YAED,2DAA2D;YAC3D,MAAM,CAAC,KAAK,CAAC,6DAA6D,EAAE,KAAK,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,OAA0B;QACnD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,QAAQ,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAEtD,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/C,gBAAgB;YAChB,MAAM,kBAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kCAAkC;YAClC,IAAI,CAAC;gBACH,MAAM,kBAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,SAAiB;QAC/B,MAAM,EAAE,GAAG,gBAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,gBAAM,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAExE,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACxD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEpC,gCAAgC;QAChC,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;IACzE,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,UAAkB;QAChC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;QAEhD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAEnD,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,SAAS,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,eAAe,SAAS,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,QAAQ,GAAG,gBAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC5E,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE7B,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAEzD,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,WAA6B;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;QAE/E,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;QAEvC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAEjC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACrC,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,MAAM,EAAE,WAAW,CAAC,MAAM;SAC3B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,SAAiB;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEvD,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,SAAiB;QACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAEjC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAEzC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAC9C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,CAC3C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;CACF;AA1MD,oDA0MC"}

package/dist/stdio-server.d.ts

@@ -1,14 +0,0 @@
-/**
- * Stdio MCP Server for Claude Desktop
- *
- * Uses @modelcontextprotocol/sdk with StdioServerTransport for
- * JSON-RPC communication via stdin/stdout.
- *
- * This is the entry point when running as Claude Desktop MCP connector.
- */
-import { ToolRegistry } from './mcp/tool-registry';
-/**
- * Start the stdio MCP server with all registered tools
- */
-export declare function startStdioServer(toolRegistry: ToolRegistry): Promise<void>;
-//# sourceMappingURL=stdio-server.d.ts.map

package/dist/stdio-server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"stdio-server.d.ts","sourceRoot":"","sources":["../src/stdio-server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,YAAY,EAAa,MAAM,qBAAqB,CAAC;AAM9D;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAkGhF"}

package/dist/stdio-server.js

@@ -1,101 +0,0 @@
-"use strict";
-/**
- * Stdio MCP Server for Claude Desktop
- *
- * Uses @modelcontextprotocol/sdk with StdioServerTransport for
- * JSON-RPC communication via stdin/stdout.
- *
- * This is the entry point when running as Claude Desktop MCP connector.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.startStdioServer = startStdioServer;
-const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
-const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
-const logger_1 = require("./lib/logger");
-const tool_registry_1 = require("./mcp/tool-registry");
-const UserContextCache_1 = require("./mcp/UserContextCache");
-const config_1 = require("./config");
-const logger = (0, logger_1.createLogger)({ component: 'stdio-server' });
-/**
- * Start the stdio MCP server with all registered tools
- */
-async function startStdioServer(toolRegistry) {
-    logger.info('Starting stdio MCP server for Claude Desktop');
-    // Get API key from environment (set in Claude Desktop config)
-    const apiKey = process.env.MCP_CLIENT_API_KEY;
-    if (!apiKey) {
-        logger.error('MCP_CLIENT_API_KEY environment variable is required for stdio mode');
-        process.exit(1);
-    }
-    // Create MCP server
-    const server = new mcp_js_1.McpServer({
-        name: 'hailer-mcp-server',
-        version: '1.0.0',
-    });
-    // Get tool definitions (filtered by allowed groups, excluding NUCLEAR unless enabled)
-    const allowedGroups = config_1.environment.ENABLE_NUCLEAR_TOOLS
-        ? [tool_registry_1.ToolGroup.READ, tool_registry_1.ToolGroup.WRITE, tool_registry_1.ToolGroup.PLAYGROUND, tool_registry_1.ToolGroup.NUCLEAR]
-        : [tool_registry_1.ToolGroup.READ, tool_registry_1.ToolGroup.WRITE, tool_registry_1.ToolGroup.PLAYGROUND];
-    const toolDefinitions = toolRegistry.getToolDefinitions({ allowedGroups });
-    logger.info('Registering tools for stdio server', {
-        toolCount: toolDefinitions.length,
-        allowedGroups,
-    });
-    // Register each tool with the MCP server
-    for (const toolDef of toolDefinitions) {
-        server.tool(toolDef.name, toolDef.description, toolDef.inputSchema.properties ? toolDef.inputSchema : { type: 'object', properties: {} }, async (args) => {
-            const startTime = Date.now();
-            logger.debug('Tool call received', { toolName: toolDef.name, args });
-            try {
-                // Get user context (cached)
-                const userContext = await UserContextCache_1.UserContextCache.getContext(apiKey);
-                // Execute the tool
-                const result = await toolRegistry.executeTool(toolDef.name, args, userContext);
-                const duration = Date.now() - startTime;
-                logger.info('Tool call completed', { toolName: toolDef.name, duration });
-                // Handle different result formats
-                if (result && typeof result === 'object' && 'content' in result) {
-                    // Result is already in MCP format { content: [...] }
-                    return result;
-                }
-                // Wrap result in MCP format
-                return {
-                    content: [{
-                            type: 'text',
-                            text: typeof result === 'string' ? result : JSON.stringify(result, null, 2)
-                        }]
-                };
-            }
-            catch (error) {
-                const duration = Date.now() - startTime;
-                const errorMessage = error instanceof Error ? error.message : String(error);
-                logger.error('Tool call failed', error, { toolName: toolDef.name, duration });
-                return {
-                    content: [{
-                            type: 'text',
-                            text: `Error: ${errorMessage}`
-                        }],
-                    isError: true
-                };
-            }
-        });
-    }
-    // Create stdio transport
-    const transport = new stdio_js_1.StdioServerTransport();
-    // Handle graceful shutdown
-    process.on('SIGINT', async () => {
-        logger.info('Received SIGINT, shutting down stdio server');
-        await server.close();
-        process.exit(0);
-    });
-    process.on('SIGTERM', async () => {
-        logger.info('Received SIGTERM, shutting down stdio server');
-        await server.close();
-        process.exit(0);
-    });
-    // Connect and start serving
-    logger.info('Connecting stdio transport');
-    await server.connect(transport);
-    logger.info('Stdio MCP server is running');
-}
-//# sourceMappingURL=stdio-server.js.map

package/dist/stdio-server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stdio-server.js","sourceRoot":"","sources":["../src/stdio-server.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAcH,4CAkGC;AA9GD,oEAAoE;AACpE,wEAAiF;AACjF,yCAA4C;AAC5C,uDAA8D;AAC9D,6DAA0D;AAC1D,qCAAuC;AAEvC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;AAE3D;;GAEG;AACI,KAAK,UAAU,gBAAgB,CAAC,YAA0B;IAC/D,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAE5D,8DAA8D;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,oBAAoB;IACpB,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC;QAC3B,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,sFAAsF;IACtF,MAAM,aAAa,GAAG,oBAAW,CAAC,oBAAoB;QACpD,CAAC,CAAC,CAAC,yBAAS,CAAC,IAAI,EAAE,yBAAS,CAAC,KAAK,EAAE,yBAAS,CAAC,UAAU,EAAE,yBAAS,CAAC,OAAO,CAAC;QAC5E,CAAC,CAAC,CAAC,yBAAS,CAAC,IAAI,EAAE,yBAAS,CAAC,KAAK,EAAE,yBAAS,CAAC,UAAU,CAAC,CAAC;IAE5D,MAAM,eAAe,GAAG,YAAY,CAAC,kBAAkB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IAE3E,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;QAChD,SAAS,EAAE,eAAe,CAAC,MAAM;QACjC,aAAa;KACd,CAAC,CAAC;IAEH,yCAAyC;IACzC,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CACT,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EACzF,KAAK,EAAE,IAA6B,EAAE,EAAE;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAErE,IAAI,CAAC;gBACH,4BAA4B;gBAC5B,MAAM,WAAW,GAAG,MAAM,mCAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAE9D,mBAAmB;gBACnB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;gBAE/E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAEzE,kCAAkC;gBAClC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;oBAChE,qDAAqD;oBACrD,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAED,4BAA4B;gBAC5B,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;yBAC5E,CAAC;iBACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAE9E,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,UAAU,YAAY,EAAE;yBAC/B,CAAC;oBACF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAE7C,2BAA2B;IAC3B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC3D,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC5D,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;AAC7C,CAAC"}

package/dist/workspace/context.d.ts

@@ -1,148 +0,0 @@
-/**
- * Workspace Context
- *
- * Workspace-scoped singleton container for complete tenant isolation.
- * Each workspace gets ONE instance of WorkspaceContext that holds:
- * - Schema (workflow/field IDs)
- * - Credentials (bot email/password)
- * - Bot state (enabled/disabled)
- *
- * CRITICAL: Data must NEVER mix between workspaces.
- */
-import { WorkspaceSchema } from './schema';
-import { BotCredentials } from './credentials';
-import { HailerApiClient } from '../mcp/utils';
-/**
- * Bot state entry
- */
-export interface BotStateEntry {
-    enabled: boolean;
-    userId: string;
-    botType: string | null;
-}
-/**
- * Bot state map: userId -> state
- */
-export type BotStateMap = Map<string, BotStateEntry>;
-/**
- * Workspace-scoped singleton container
- */
-export declare class WorkspaceContext {
-    readonly workspaceId: string;
-    readonly workspaceName: string;
-    private schema;
-    private credentials;
-    private botState;
-    private initialized;
-    private stateChangeCallbacks;
-    private credentialChangeCallbacks;
-    constructor(workspaceId: string, workspaceName?: string);
-    /**
-     * Initialize the workspace context by discovering schema and loading credentials
-     */
-    initialize(client: HailerApiClient): Promise<boolean>;
-    /**
-     * Check if workspace is initialized
-     */
-    isInitialized(): boolean;
-    /**
-     * Get the workspace schema (workflow/field IDs)
-     */
-    getSchema(): WorkspaceSchema | null;
-    /**
-     * Set the workspace schema (used during hot-reload)
-     */
-    setSchema(schema: WorkspaceSchema): void;
-    /**
-     * Get Agent Directory workflow ID
-     */
-    getAgentDirectoryWorkflowId(): string | null;
-    /**
-     * Get phase IDs
-     */
-    getPhaseIds(): {
-        deployed: string | null;
-        retired: string | null;
-    };
-    /**
-     * Get credentials for a specific bot
-     */
-    getCredentials(userId: string): BotCredentials | undefined;
-    /**
-     * Get all credentials
-     */
-    getAllCredentials(): BotCredentials[];
-    /**
-     * Update credentials for a bot
-     */
-    updateCredentials(userId: string, creds: Partial<BotCredentials>): void;
-    /**
-     * Get orchestrator credentials (first bot with orchestrator type)
-     */
-    getOrchestratorCredentials(): BotCredentials | undefined;
-    /**
-     * Get specialist credentials (non-orchestrator enabled bots)
-     */
-    getSpecialistCredentials(): BotCredentials[];
-    /**
-     * Get bot state for a specific user
-     */
-    getBotState(userId: string): BotStateEntry | undefined;
-    /**
-     * Get all bot states as a simple map (userId -> enabled)
-     */
-    getAllBotStates(): Record<string, boolean>;
-    /**
-     * Get enabled bots with their types
-     */
-    getEnabledBotsWithTypes(): Map<string, string | null>;
-    /**
-     * Set bot enabled state
-     */
-    setBotEnabled(userId: string, enabled: boolean): void;
-    /**
-     * Set bot type for a user
-     */
-    setBotType(userId: string, botType: string | null): void;
-    /**
-     * Register callback for bot state changes
-     */
-    onBotStateChange(callback: (userId: string, enabled: boolean) => void): void;
-    /**
-     * Register callback for credential changes
-     */
-    onCredentialChange(callback: (userId: string) => void): void;
-    /**
-     * Clear all callbacks (for cleanup)
-     */
-    clearCallbacks(): void;
-}
-/**
- * Get or create WorkspaceContext for a workspace
- */
-export declare function getWorkspace(workspaceId: string, workspaceName?: string): WorkspaceContext;
-/**
- * Get existing WorkspaceContext (returns undefined if not created)
- */
-export declare function getExistingWorkspace(workspaceId: string): WorkspaceContext | undefined;
-/**
- * List all registered workspace IDs
- */
-export declare function listWorkspaces(): string[];
-/**
- * Check if a workspace context exists
- */
-export declare function hasWorkspace(workspaceId: string): boolean;
-/**
- * Remove a workspace context (for cleanup)
- */
-export declare function removeWorkspace(workspaceId: string): boolean;
-/**
- * Clear all workspace contexts (for testing/shutdown)
- */
-export declare function clearAllWorkspaces(): void;
-/**
- * Find workspace by Agent Directory workflow ID (reverse lookup)
- */
-export declare function getWorkspaceByWorkflowId(workflowId: string): WorkspaceContext | undefined;
-//# sourceMappingURL=context.d.ts.map

package/dist/workspace/context.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/workspace/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,eAAe,EAAkB,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAmB,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAI/C;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAErD;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,OAAO,CAAC,MAAM,CAAgC;IAC9C,OAAO,CAAC,WAAW,CAA0C;IAC7D,OAAO,CAAC,QAAQ,CAA0B;IAC1C,OAAO,CAAC,WAAW,CAAS;IAG5B,OAAO,CAAC,oBAAoB,CAAyD;IACrF,OAAO,CAAC,yBAAyB,CAAuC;gBAE5D,WAAW,EAAE,MAAM,EAAE,aAAa,GAAE,MAAW;IAU3D;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC;IAkD3D;;OAEG;IACH,aAAa,IAAI,OAAO;IAQxB;;OAEG;IACH,SAAS,IAAI,eAAe,GAAG,IAAI;IAInC;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IAKxC;;OAEG;IACH,2BAA2B,IAAI,MAAM,GAAG,IAAI;IAI5C;;OAEG;IACH,WAAW,IAAI;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;IAWlE;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI1D;;OAEG;IACH,iBAAiB,IAAI,cAAc,EAAE;IAIrC;;OAEG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI;IAiBvE;;OAEG;IACH,0BAA0B,IAAI,cAAc,GAAG,SAAS;IAKxD;;OAEG;IACH,wBAAwB,IAAI,cAAc,EAAE;IAS5C;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAItD;;OAEG;IACH,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAQ1C;;OAEG;IACH,uBAAuB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAUrD;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAoBrD;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAqBxD;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAI5E;;OAEG;IACH,kBAAkB,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAI5D;;OAEG;IACH,cAAc,IAAI,IAAI;CAIvB;AAYD;;GAEG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAQ1F;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAEtF;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAS5D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAMzC;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAOzF"}