@hailer/mcp 1.3.9 → 1.3.11

package/dist/mcp/publish-auth-injector.d.ts

@@ -5,18 +5,46 @@
  * Studio writes the session's user API key into the sandbox's `~/.env` so the
  * app publish script (`@hailer/app-sdk` publish.cjs) authenticates with no
  * flags. Locally there's no session key, but the CLI server already has the
- * project bot's credentials in CLIENT_CONFIGS — so on first boot we mint a
- * user API key on the bot's authenticated socket and write it to `~/.env`,
- * exactly where publish.cjs looks.
+ * project bot's credentials in CLIENT_CONFIGS — so on boot we mint a user API
+ * key on the bot's authenticated socket and write it to `~/.env`, exactly
+ * where publish.cjs looks.
  *
- * Idempotent (skips if a key is already present), best-effort (never blocks
- * or fails server startup), and CLI-gated (prod never imports this).
+ * The minted key is workspace-scoped, but `~/.env` is machine-global: whichever
+ * project booted first used to win it permanently, so every other project then
+ * published silently into the first project's workspace. To prevent that, the
+ * injector records the workspace in the `~/.env` marker and re-mints whenever
+ * the booting project's workspace differs — the last server to boot owns
+ * `~/.env`.
+ *
+ * Best-effort (never blocks or fails server startup) and CLI-gated (prod never
+ * imports this). A key the user set themselves — exported, or hand-added to
+ * `~/.env` without our marker — is always left untouched.
+ */
+interface ExistingKey {
+    /** True when this injector wrote the key (our marker comment is present). */
+    managed: boolean;
+    /** Workspace id recorded in the marker, or null for our pre-1.3.11 format. */
+    workspaceId: string | null;
+}
+/**
+ * Inspect `~/.env` for a publish key. Returns null when none is present, an
+ * unmanaged entry when the user added the key themselves (no marker), or a
+ * managed entry carrying the workspace the key was minted for.
+ */
+export declare function readExistingKey(envPath: string): ExistingKey | null;
+/**
+ * Rewrite `~/.env` with a freshly minted key, stripping any block we wrote
+ * before and preserving every other line. The file holds a live credential,
+ * so keep it owner-only (0600).
  */
+export declare function writeManagedKey(envPath: string, key: string, workspaceId: string): void;
 /**
- * Mint a publish user API key from the project bot's CLIENT_CONFIGS account
- * and append it to ~/.env. No-op when a key already exists or no account is
- * configured. Swallows every error — publishing convenience must never break
- * the server.
+ * Mint a publish user API key from the project bot's CLIENT_CONFIGS account and
+ * write it to `~/.env`, scoped to the project's workspace. No-op when the file
+ * already holds our key for this workspace, when the user owns the key, or when
+ * no account is configured. Swallows every error — publishing convenience must
+ * never break the server.
  */
 export declare function injectLocalPublishAuth(): Promise<void>;
+export {};
 //# sourceMappingURL=publish-auth-injector.d.ts.map

package/dist/mcp/publish-auth-injector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish-auth-injector.d.ts","sourceRoot":"","sources":["../../src/mcp/publish-auth-injector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA+BH;;;;;GAKG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CA2D5D"}
+{"version":3,"file":"publish-auth-injector.d.ts","sourceRoot":"","sources":["../../src/mcp/publish-auth-injector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAkBH,UAAU,WAAW;IACjB,6EAA6E;IAC7E,OAAO,EAAE,OAAO,CAAC;IACjB,8EAA8E;IAC9E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAmBnE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAkBvF;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAuE5D"}

package/dist/mcp/publish-auth-injector.js

@@ -6,14 +6,24 @@
  * Studio writes the session's user API key into the sandbox's `~/.env` so the
  * app publish script (`@hailer/app-sdk` publish.cjs) authenticates with no
  * flags. Locally there's no session key, but the CLI server already has the
- * project bot's credentials in CLIENT_CONFIGS — so on first boot we mint a
- * user API key on the bot's authenticated socket and write it to `~/.env`,
- * exactly where publish.cjs looks.
+ * project bot's credentials in CLIENT_CONFIGS — so on boot we mint a user API
+ * key on the bot's authenticated socket and write it to `~/.env`, exactly
+ * where publish.cjs looks.
  *
- * Idempotent (skips if a key is already present), best-effort (never blocks
- * or fails server startup), and CLI-gated (prod never imports this).
+ * The minted key is workspace-scoped, but `~/.env` is machine-global: whichever
+ * project booted first used to win it permanently, so every other project then
+ * published silently into the first project's workspace. To prevent that, the
+ * injector records the workspace in the `~/.env` marker and re-mints whenever
+ * the booting project's workspace differs — the last server to boot owns
+ * `~/.env`.
+ *
+ * Best-effort (never blocks or fails server startup) and CLI-gated (prod never
+ * imports this). A key the user set themselves — exported, or hand-added to
+ * `~/.env` without our marker — is always left untouched.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.readExistingKey = readExistingKey;
+exports.writeManagedKey = writeManagedKey;
 exports.injectLocalPublishAuth = injectLocalPublishAuth;
 const cli_1 = require("@hailer/cli");
 const fs_1 = require("fs");
@@ -22,30 +32,71 @@ const path_1 = require("path");
 const config_1 = require("../config");
 const logger_1 = require("../lib/logger");
 const logger = (0, logger_1.createLogger)({ component: 'publish-auth' });
-/** Already have a publish key on this machine? (~/.env or the live env) */
-function publishKeyAlreadyPresent(envPath) {
-    if (process.env.HAILER_USER_API_KEY || process.env.USER_API_KEY) {
-        return true;
-    }
+const MANAGED_MARKER = '# Added by hailer-mcp for local app publishing';
+/**
+ * Inspect `~/.env` for a publish key. Returns null when none is present, an
+ * unmanaged entry when the user added the key themselves (no marker), or a
+ * managed entry carrying the workspace the key was minted for.
+ */
+function readExistingKey(envPath) {
     if (!(0, fs_1.existsSync)(envPath)) {
-        return false;
+        return null;
     }
+    let content = '';
     try {
-        return /^\s*(HAILER_USER_API_KEY|USER_API_KEY)\s*=/m.test((0, fs_1.readFileSync)(envPath, 'utf-8'));
+        content = (0, fs_1.readFileSync)(envPath, 'utf-8');
     }
     catch {
-        return false;
+        return null;
+    }
+    if (!/^\s*(HAILER_USER_API_KEY|USER_API_KEY)\s*=/m.test(content)) {
+        return null;
     }
+    const markerLine = content.match(/^# Added by hailer-mcp for local app publishing[^\n]*$/m);
+    if (!markerLine) {
+        return { managed: false, workspaceId: null };
+    }
+    const wsMatch = markerLine[0].match(/\(workspace ([a-f0-9]{24})\)/);
+    return { managed: true, workspaceId: wsMatch ? wsMatch[1] : null };
 }
 /**
- * Mint a publish user API key from the project bot's CLIENT_CONFIGS account
- * and append it to ~/.env. No-op when a key already exists or no account is
- * configured. Swallows every error — publishing convenience must never break
- * the server.
+ * Rewrite `~/.env` with a freshly minted key, stripping any block we wrote
+ * before and preserving every other line. The file holds a live credential,
+ * so keep it owner-only (0600).
+ */
+function writeManagedKey(envPath, key, workspaceId) {
+    let body = '';
+    if ((0, fs_1.existsSync)(envPath)) {
+        try {
+            body = (0, fs_1.readFileSync)(envPath, 'utf-8');
+        }
+        catch {
+            body = '';
+        }
+    }
+    const withoutOldBlock = body.replace(/\n?# Added by hailer-mcp for local app publishing[^\n]*\n(?:HAILER_USER_API_KEY|USER_API_KEY)=[^\n]*\n?/g, '\n');
+    const preserved = withoutOldBlock.replace(/\s*$/, '');
+    const block = `${MANAGED_MARKER} (workspace ${workspaceId})\nHAILER_USER_API_KEY="${key}"\n`;
+    const next = preserved.length > 0 ? `${preserved}\n\n${block}` : block;
+    (0, fs_1.writeFileSync)(envPath, next, { mode: 0o600 });
+    (0, fs_1.chmodSync)(envPath, 0o600);
+}
+/**
+ * Mint a publish user API key from the project bot's CLIENT_CONFIGS account and
+ * write it to `~/.env`, scoped to the project's workspace. No-op when the file
+ * already holds our key for this workspace, when the user owns the key, or when
+ * no account is configured. Swallows every error — publishing convenience must
+ * never break the server.
  */
 async function injectLocalPublishAuth() {
     const envPath = (0, path_1.join)((0, os_1.homedir)(), '.env');
-    if (publishKeyAlreadyPresent(envPath)) {
+    // An exported key is a deliberate override — never touch it.
+    if (process.env.HAILER_USER_API_KEY || process.env.USER_API_KEY) {
+        return;
+    }
+    // A key the user hand-added (no marker) is theirs to manage.
+    const existing = readExistingKey(envPath);
+    if (existing && !existing.managed) {
         return;
     }
     const accounts = Object.values(config_1.environment.CLIENT_CONFIGS);
@@ -68,20 +119,20 @@ async function injectLocalPublishAuth() {
             logger.debug('Skipping publish-auth injection — no workspace on bot account');
             return;
         }
+        // Our key is already scoped to this project's workspace — leave it.
+        if (existing?.managed && existing.workspaceId === workspaceId) {
+            return;
+        }
         const keyName = `hailer-mcp local (${(0, os_1.hostname)()})`;
         const created = await client.request('v3.user.apikey.create', [keyName, workspaceId, []]);
         if (!created?.key) {
             return;
         }
-        // ~/.env holds a live credential — keep it owner-only (0600). Create
-        // it with restrictive mode if absent, and tighten an existing file too.
-        if (!(0, fs_1.existsSync)(envPath)) {
-            (0, fs_1.writeFileSync)(envPath, '', { mode: 0o600 });
-        }
-        (0, fs_1.chmodSync)(envPath, 0o600);
-        (0, fs_1.appendFileSync)(envPath, `\n# Added by hailer-mcp for local app publishing\nHAILER_USER_API_KEY="${created.key}"\n`);
+        writeManagedKey(envPath, created.key, workspaceId);
         process.env.HAILER_USER_API_KEY = created.key;
-        logger.info('Minted local publish key → ~/.env', { keyName, workspaceId });
+        logger.info(existing?.managed
+            ? 'Re-minted local publish key for current workspace → ~/.env'
+            : 'Minted local publish key → ~/.env', { keyName, workspaceId });
     }
     catch (error) {
         logger.debug('Publish-auth injection skipped', {

package/dist/mcp/publish-auth-injector.js.map

@@ -1 +1 @@
-{"version":3,"file":"publish-auth-injector.js","sourceRoot":"","sources":["../../src/mcp/publish-auth-injector.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAqCH,wDA2DC;AA9FD,qCAAqC;AACrC,2BAAwF;AACxF,2BAAuC;AACvC,+BAA4B;AAC5B,sCAAwC;AACxC,0CAA6C;AAE7C,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;AAO3D,2EAA2E;AAC3E,SAAS,wBAAwB,CAAC,OAAe;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,CAAC;QACD,OAAO,6CAA6C,CAAC,IAAI,CAAC,IAAA,iBAAY,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,sBAAsB;IACxC,MAAM,OAAO,GAAG,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,oBAAW,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO;IACX,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvG,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACD,MAAM,GAAG,MAAM,YAAM,CAAC,MAAM,CAAC;YACzB,IAAI,EAAE,OAAO,CAAC,UAAU;YACxB,QAAQ,EAAE,OAAO,CAAC,KAAK;YACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,CAAC,UAAU,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;SACnD,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAmC,CAAC;QACnG,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;QACtC,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;YAC9E,OAAO;QACX,CAAC;QAED,MAAM,OAAO,GAAG,qBAAqB,IAAA,aAAQ,GAAE,GAAG,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAChC,uBAAuB,EACvB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC,CACP,CAAC;QAExB,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YAChB,OAAO;QACX,CAAC;QAED,qEAAqE;QACrE,wEAAwE;QACxE,IAAI,CAAC,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;YACvB,IAAA,kBAAa,EAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAA,cAAS,EAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,IAAA,mBAAc,EAAC,OAAO,EAAE,0EAA0E,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;QACpH,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;YAC3C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAChE,CAAC,CAAC;IACP,CAAC;YAAS,CAAC;QACP,IAAI,CAAC;YACD,MAAM,EAAE,UAAU,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACL,sBAAsB;QAC1B,CAAC;IACL,CAAC;AACL,CAAC"}
+{"version":3,"file":"publish-auth-injector.js","sourceRoot":"","sources":["../../src/mcp/publish-auth-injector.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;AA8BH,0CAmBC;AAOD,0CAkBC;AASD,wDAuEC;AAxJD,qCAAqC;AACrC,2BAAwE;AACxE,2BAAuC;AACvC,+BAA4B;AAC5B,sCAAwC;AACxC,0CAA6C;AAE7C,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;AAE3D,MAAM,cAAc,GAAG,gDAAgD,CAAC;AAcxE;;;;GAIG;AACH,SAAgB,eAAe,CAAC,OAAe;IAC3C,IAAI,CAAC,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC;QACD,OAAO,GAAG,IAAA,iBAAY,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,6CAA6C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC5F,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,OAAe,EAAE,GAAW,EAAE,WAAmB;IAC7E,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC;YACD,IAAI,GAAG,IAAA,iBAAY,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACL,IAAI,GAAG,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAChC,0GAA0G,EAC1G,IAAI,CACP,CAAC;IACF,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,GAAG,cAAc,eAAe,WAAW,2BAA2B,GAAG,KAAK,CAAC;IAC7F,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACvE,IAAA,kBAAa,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,IAAA,cAAS,EAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB;IACxC,MAAM,OAAO,GAAG,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,MAAM,CAAC,CAAC;IAExC,6DAA6D;IAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC9D,OAAO;IACX,CAAC;IAED,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,oBAAW,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO;IACX,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvG,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACD,MAAM,GAAG,MAAM,YAAM,CAAC,MAAM,CAAC;YACzB,IAAI,EAAE,OAAO,CAAC,UAAU;YACxB,QAAQ,EAAE,OAAO,CAAC,KAAK;YACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,CAAC,UAAU,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;SACnD,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAmC,CAAC;QACnG,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;QACtC,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;YAC9E,OAAO;QACX,CAAC;QAED,oEAAoE;QACpE,IAAI,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YAC5D,OAAO;QACX,CAAC;QAED,MAAM,OAAO,GAAG,qBAAqB,IAAA,aAAQ,GAAE,GAAG,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAChC,uBAAuB,EACvB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC,CACP,CAAC;QAExB,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YAChB,OAAO;QACX,CAAC;QAED,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC;QAC9C,MAAM,CAAC,IAAI,CACP,QAAQ,EAAE,OAAO;YACb,CAAC,CAAC,4DAA4D;YAC9D,CAAC,CAAC,mCAAmC,EACzC,EAAE,OAAO,EAAE,WAAW,EAAE,CAC3B,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;YAC3C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAChE,CAAC,CAAC;IACP,CAAC;YAAS,CAAC;QACP,IAAI,CAAC;YACD,MAAM,EAAE,UAAU,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACL,sBAAsB;QAC1B,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/mcp/tool-profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-profiles.d.ts","sourceRoot":"","sources":["../../src/mcp/tool-profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,UAAU,GAAG,KAAK,GAAG,OAAO,CAAC;AAE/D;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS,aAqEpB,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,aAsBpB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,aAGlC,CAAC;AAEH,kFAAkF;AAClF,eAAO,MAAM,eAAe,EAAE,SAAS,EAA4D,CAAC;AAEpG;;;;GAIG;AACH,wBAAgB,uBAAuB,CACnC,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GACzC,OAAO,CAWT;AAED,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,WAAW,GAAG;IACvD,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B,CAcA"}
+{"version":3,"file":"tool-profiles.d.ts","sourceRoot":"","sources":["../../src/mcp/tool-profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,UAAU,GAAG,KAAK,GAAG,OAAO,CAAC;AAE/D;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS,aAyEpB,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,aA2BpB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,aAGlC,CAAC;AAEH,kFAAkF;AAClF,eAAO,MAAM,eAAe,EAAE,SAAS,EAA4D,CAAC;AAEpG;;;;GAIG;AACH,wBAAgB,uBAAuB,CACnC,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GACzC,OAAO,CAWT;AAED,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,WAAW,GAAG;IACvD,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B,CAcA"}

package/dist/mcp/tool-profiles.js

@@ -76,6 +76,10 @@ exports.SDK_TOOLS = new Set([
     'browse_marketplace',
     'install_marketplace',
     'publish_marketplace',
+    'get_installed_version',
+    'set_marketplace_visibility',
+    'remove_marketplace_product',
+    'get_marketplace_pricing',
     // ──────────────────────────────────────────────────────────────
     // INTENTIONALLY EXCLUDED — SDK projects have the SDK locally:
     // ──────────────────────────────────────────────────────────────
@@ -111,6 +115,7 @@ exports.BOT_TOOLS = new Set([
     'search_workspace_users', 'get_workspace_balance',
     'create_activity', 'update_activity',
     'install_workflow', 'update_workflow_structure', 'test_function_field',
+    'set_workflow_cover_photo',
     // remove_workflow / remove_insight deliberately absent: NUCLEAR group is
     // filtered out of bot tool definitions anyway — listing them was dead weight
     'list_my_discussions', 'fetch_discussion_messages',
@@ -127,6 +132,10 @@ exports.BOT_TOOLS = new Set([
     'list_apps',
     'resolve_date',
     'manage_my_profile',
+    // Marketplace (no SDK equivalent — v2.network.product.* / v3.product.*)
+    'browse_marketplace', 'install_marketplace', 'publish_marketplace',
+    'get_installed_version', 'set_marketplace_visibility',
+    'remove_marketplace_product', 'get_marketplace_pricing',
 ]);
 /**
  * Tools excluded from the external surface (Claude.ai/Cowork and direct

package/dist/mcp/tool-profiles.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-profiles.js","sourceRoot":"","sources":["../../src/mcp/tool-profiles.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AA2IH,0DAcC;AAGD,kDAkBC;AA5KD,mDAA4C;AAI5C;;;;;;;;GAQG;AACU,QAAA,SAAS,GAAG,IAAI,GAAG,CAAS;IACrC,0CAA0C;IAC1C,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB,EAAI,kDAAkD;IACvE,qBAAqB;IAErB,wBAAwB;IACxB,qBAAqB;IACrB,2BAA2B,EAAG,8DAA8D;IAC5F,wBAAwB;IACxB,iBAAiB;IACjB,kBAAkB;IAClB,2BAA2B;IAE3B,qBAAqB;IACrB,cAAc,EAAO,4BAA4B;IACjD,iBAAiB,EAAI,mEAAmE;IACxF,cAAc;IACd,cAAc,EAAO,+CAA+C;IACpE,cAAc;IACd,mBAAmB;IAEnB,+BAA+B;IAC/B,eAAe;IACf,aAAa,EAAQ,8CAA8C;IACnE,cAAc,EAAO,2BAA2B;IAEhD,kBAAkB;IAClB,cAAc;IACd,eAAe;IAEf,mCAAmC;IACnC,wBAAwB;IACxB,uBAAuB;IACvB,cAAc;IAEd,2CAA2C;IAC3C,2BAA2B;IAC3B,yBAAyB,EAAG,uBAAuB;IACnD,wBAAwB;IAExB,gDAAgD;IAChD,eAAe,EAAG,2CAA2C;IAC7D,WAAW,EAAO,+BAA+B;IAEjD,wEAAwE;IACxE,oBAAoB;IACpB,qBAAqB;IACrB,qBAAqB;IAErB,iEAAiE;IACjE,8DAA8D;IAC9D,iEAAiE;IACjE,wEAAwE;IACxE,6EAA6E;IAC7E,mFAAmF;IACnF,EAAE;IACF,sDAAsD;IACtD,8BAA8B;IAC9B,EAAE;IACF,oEAAoE;IACpE,uEAAuE;IACvE,EAAE;IACF,oEAAoE;IACpE,gEAAgE;IAChE,EAAE;IACF,gDAAgD;IAChD,oEAAoE;CACvE,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACU,QAAA,SAAS,GAAG,IAAI,GAAG,CAAS;IACrC,oBAAoB;IACpB,iBAAiB,EAAE,qBAAqB;IACxC,wBAAwB,EAAE,uBAAuB;IACjD,iBAAiB,EAAE,iBAAiB;IACpC,kBAAkB,EAAE,2BAA2B,EAAE,qBAAqB;IACtE,yEAAyE;IACzE,6EAA6E;IAC7E,qBAAqB,EAAE,2BAA2B;IAClD,wBAAwB,EAAE,iBAAiB,EAAE,kBAAkB;IAC/D,2BAA2B;IAC3B,cAAc,EAAE,iBAAiB,EAAE,cAAc;IACjD,cAAc,EAAE,cAAc,EAAE,mBAAmB;IACnD,cAAc,EAAE,eAAe;IAC/B,eAAe,EAAE,aAAa,EAAE,cAAc;IAC9C,2BAA2B,EAAE,wBAAwB;IACrD,yBAAyB;IACzB,uEAAuE;IACvE,wEAAwE;IACxE,WAAW;IACX,cAAc;IACd,mBAAmB;CACtB,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,uBAAuB,GAAG,IAAI,GAAG,CAAS;IACnD,eAAe;IACf,iBAAiB;CACpB,CAAC,CAAC;AAEH,kFAAkF;AACrE,QAAA,eAAe,GAAgB,CAAC,yBAAS,CAAC,IAAI,EAAE,yBAAS,CAAC,KAAK,EAAE,yBAAS,CAAC,UAAU,CAAC,CAAC;AAEpG;;;;GAIG;AACH,SAAgB,uBAAuB,CACnC,OAAoB,EACpB,IAAwC;IAExC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,iBAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,iBAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QACzB,OAAO,uBAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,+BAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,uFAAuF;AACvF,SAAgB,mBAAmB,CAAC,OAAoB;IAKpD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAS,CAAC,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAS,CAAC,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QACzB,OAAO;YACH,aAAa,EAAE,CAAC,GAAG,uBAAe,CAAC;YACnC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,+BAAuB,CAAC;SACrD,CAAC;IACN,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC"}
+{"version":3,"file":"tool-profiles.js","sourceRoot":"","sources":["../../src/mcp/tool-profiles.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AAoJH,0DAcC;AAGD,kDAkBC;AArLD,mDAA4C;AAI5C;;;;;;;;GAQG;AACU,QAAA,SAAS,GAAG,IAAI,GAAG,CAAS;IACrC,0CAA0C;IAC1C,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB,EAAI,kDAAkD;IACvE,qBAAqB;IAErB,wBAAwB;IACxB,qBAAqB;IACrB,2BAA2B,EAAG,8DAA8D;IAC5F,wBAAwB;IACxB,iBAAiB;IACjB,kBAAkB;IAClB,2BAA2B;IAE3B,qBAAqB;IACrB,cAAc,EAAO,4BAA4B;IACjD,iBAAiB,EAAI,mEAAmE;IACxF,cAAc;IACd,cAAc,EAAO,+CAA+C;IACpE,cAAc;IACd,mBAAmB;IAEnB,+BAA+B;IAC/B,eAAe;IACf,aAAa,EAAQ,8CAA8C;IACnE,cAAc,EAAO,2BAA2B;IAEhD,kBAAkB;IAClB,cAAc;IACd,eAAe;IAEf,mCAAmC;IACnC,wBAAwB;IACxB,uBAAuB;IACvB,cAAc;IAEd,2CAA2C;IAC3C,2BAA2B;IAC3B,yBAAyB,EAAG,uBAAuB;IACnD,wBAAwB;IAExB,gDAAgD;IAChD,eAAe,EAAG,2CAA2C;IAC7D,WAAW,EAAO,+BAA+B;IAEjD,wEAAwE;IACxE,oBAAoB;IACpB,qBAAqB;IACrB,qBAAqB;IACrB,uBAAuB;IACvB,4BAA4B;IAC5B,4BAA4B;IAC5B,yBAAyB;IAEzB,iEAAiE;IACjE,8DAA8D;IAC9D,iEAAiE;IACjE,wEAAwE;IACxE,6EAA6E;IAC7E,mFAAmF;IACnF,EAAE;IACF,sDAAsD;IACtD,8BAA8B;IAC9B,EAAE;IACF,oEAAoE;IACpE,uEAAuE;IACvE,EAAE;IACF,oEAAoE;IACpE,gEAAgE;IAChE,EAAE;IACF,gDAAgD;IAChD,oEAAoE;CACvE,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACU,QAAA,SAAS,GAAG,IAAI,GAAG,CAAS;IACrC,oBAAoB;IACpB,iBAAiB,EAAE,qBAAqB;IACxC,wBAAwB,EAAE,uBAAuB;IACjD,iBAAiB,EAAE,iBAAiB;IACpC,kBAAkB,EAAE,2BAA2B,EAAE,qBAAqB;IACtE,0BAA0B;IAC1B,yEAAyE;IACzE,6EAA6E;IAC7E,qBAAqB,EAAE,2BAA2B;IAClD,wBAAwB,EAAE,iBAAiB,EAAE,kBAAkB;IAC/D,2BAA2B;IAC3B,cAAc,EAAE,iBAAiB,EAAE,cAAc;IACjD,cAAc,EAAE,cAAc,EAAE,mBAAmB;IACnD,cAAc,EAAE,eAAe;IAC/B,eAAe,EAAE,aAAa,EAAE,cAAc;IAC9C,2BAA2B,EAAE,wBAAwB;IACrD,yBAAyB;IACzB,uEAAuE;IACvE,wEAAwE;IACxE,WAAW;IACX,cAAc;IACd,mBAAmB;IACnB,wEAAwE;IACxE,oBAAoB,EAAE,qBAAqB,EAAE,qBAAqB;IAClE,uBAAuB,EAAE,4BAA4B;IACrD,4BAA4B,EAAE,yBAAyB;CAC1D,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,uBAAuB,GAAG,IAAI,GAAG,CAAS;IACnD,eAAe;IACf,iBAAiB;CACpB,CAAC,CAAC;AAEH,kFAAkF;AACrE,QAAA,eAAe,GAAgB,CAAC,yBAAS,CAAC,IAAI,EAAE,yBAAS,CAAC,KAAK,EAAE,yBAAS,CAAC,UAAU,CAAC,CAAC;AAEpG;;;;GAIG;AACH,SAAgB,uBAAuB,CACnC,OAAoB,EACpB,IAAwC;IAExC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,iBAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,iBAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QACzB,OAAO,uBAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,+BAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,uFAAuF;AACvF,SAAgB,mBAAmB,CAAC,OAAoB;IAKpD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAS,CAAC,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAS,CAAC,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QACzB,OAAO;YACH,aAAa,EAAE,CAAC,GAAG,uBAAe,CAAC;YACnC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,+BAAuB,CAAC;SACrD,CAAC;IACN,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC"}

package/dist/mcp/tools/app-marketplace.d.ts

@@ -11,6 +11,10 @@ import { Tool } from '../tool-registry';
 export declare const browseMarketplaceTool: Tool;
 export declare const installMarketplaceTool: Tool;
 export declare const publishMarketplaceTool: Tool;
+export declare const getInstalledVersionTool: Tool;
+export declare const setMarketplaceVisibilityTool: Tool;
+export declare const removeMarketplaceProductTool: Tool;
+export declare const getMarketplacePricingTool: Tool;
 /** All app marketplace tools */
 export declare const appMarketplaceTools: Tool<z.ZodType<any, z.ZodTypeDef, any>>[];
 //# sourceMappingURL=app-marketplace.d.ts.map

package/dist/mcp/tools/app-marketplace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-marketplace.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/app-marketplace.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAa,MAAM,kBAAkB,CAAC;AA+TnD,eAAO,MAAM,qBAAqB,EAAE,IAanC,CAAC;AAiFF,eAAO,MAAM,sBAAsB,EAAE,IA4GpC,CAAC;AAsKF,eAAO,MAAM,sBAAsB,EAAE,IA0KpC,CAAC;AAEF,gCAAgC;AAChC,eAAO,MAAM,mBAAmB,2CAI/B,CAAC"}
+{"version":3,"file":"app-marketplace.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/app-marketplace.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAa,MAAM,kBAAkB,CAAC;AAuUnD,eAAO,MAAM,qBAAqB,EAAE,IAanC,CAAC;AAqFF,eAAO,MAAM,sBAAsB,EAAE,IA8IpC,CAAC;AAsKF,eAAO,MAAM,sBAAsB,EAAE,IA0KpC,CAAC;AAYF,eAAO,MAAM,uBAAuB,EAAE,IA+DrC,CAAC;AAWF,eAAO,MAAM,4BAA4B,EAAE,IAuD1C,CAAC;AAWF,eAAO,MAAM,4BAA4B,EAAE,IAqD1C,CAAC;AAiCF,eAAO,MAAM,yBAAyB,EAAE,IA+DvC,CAAC;AAEF,gCAAgC;AAChC,eAAO,MAAM,mBAAmB,2CAQ/B,CAAC"}