@hexabot-ai/types 3.0.2-alpha.0 → 3.0.2-alpha.10

package/README.md

@@ -11,7 +11,7 @@ Shared zod-first runtime contracts for Hexabot API entity outputs.
 - `cms`: `ContentType*`, `Content*`, `Menu*`
 - `i18n`: `Language*`, `Translation*`
 - `setting`: `Setting*`, `Metadata*`
-- `user`: `UserProfile*`, `Model*`, `Permission*`, `Role*`, `Credential*`, `User*`
+- `user`: `UserProfile*`, `Model*`, `Permission*`, `Role*`, `Credential*`, `McpToken*`, `User*`
 - `workflow`: `Workflow*`, `WorkflowVersion*`, `WorkflowRun*`, `MemoryDefinition*`, `MemoryRecord*`, `McpServer*`
 - `utils/test/dummy`: `Dummy*`
 - `attachment`: `Attachment*`
@@ -163,7 +163,7 @@ Unknown keys are stripped by default.
 - Legacy API enum/type paths can re-export from this package without value changes.
 - Schema parsing preserves nullable/optional normalization used by API entity outputs.
 - Mixed owner/triggeredBy contracts (`Subscriber | User`) are supported in workflow full contracts.
-- Sensitive output parity is preserved for credentials (`value` is not part of output contracts).
+- Sensitive output parity is preserved for credentials and MCP tokens (`value` and token hashes are not part of output contracts).
 
 ## Breaking-Change Notes
 

package/dist/cjs/chat/label.js

@@ -19,7 +19,6 @@ const labelAliasMap = {
 const labelStubObjectSchema = base_1.baseStubSchema.extend({
     title: zod_1.z.string(),
     name: zod_1.z.string(),
-    label_id: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).nullable().optional(),
     description: nullableOptionalStringSchema,
     builtin: zod_1.z.coerce.boolean(),
 });

package/dist/cjs/user/index.js

@@ -5,7 +5,7 @@
  * Full terms: see LICENSE.md.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.credentialStubSchema = exports.credentialSchema = exports.credentialFullSchema = exports.permissionStubSchema = exports.permissionSchema = exports.permissionFullSchema = exports.modelStubSchema = exports.modelSchema = exports.modelFullSchema = exports.roleStubSchema = exports.roleSchema = exports.roleFullSchema = exports.userStubSchema = exports.userSchema = exports.userFullSchema = exports.userProfileAssignedStubSchema = exports.userProfileAssignedSchema = exports.userProfileAssignedFullSchema = exports.userProfileStubSchema = exports.userProfileSchema = exports.userProfileFullSchema = exports.MethodToAction = exports.Action = void 0;
+exports.mcpTokenStubSchema = exports.mcpTokenSchema = exports.mcpTokenFullSchema = exports.credentialStubSchema = exports.credentialSchema = exports.credentialFullSchema = exports.permissionStubSchema = exports.permissionSchema = exports.permissionFullSchema = exports.modelStubSchema = exports.modelSchema = exports.modelFullSchema = exports.roleStubSchema = exports.roleSchema = exports.roleFullSchema = exports.userStubSchema = exports.userSchema = exports.userFullSchema = exports.userProfileAssignedStubSchema = exports.userProfileAssignedSchema = exports.userProfileAssignedFullSchema = exports.userProfileStubSchema = exports.userProfileSchema = exports.userProfileFullSchema = exports.MethodToAction = exports.Action = void 0;
 var domain_1 = require("./domain");
 Object.defineProperty(exports, "Action", { enumerable: true, get: function () { return domain_1.Action; } });
 Object.defineProperty(exports, "MethodToAction", { enumerable: true, get: function () { return domain_1.MethodToAction; } });
@@ -37,3 +37,7 @@ var credential_1 = require("./credential");
 Object.defineProperty(exports, "credentialFullSchema", { enumerable: true, get: function () { return credential_1.credentialFullSchema; } });
 Object.defineProperty(exports, "credentialSchema", { enumerable: true, get: function () { return credential_1.credentialSchema; } });
 Object.defineProperty(exports, "credentialStubSchema", { enumerable: true, get: function () { return credential_1.credentialStubSchema; } });
+var mcp_token_1 = require("./mcp-token");
+Object.defineProperty(exports, "mcpTokenFullSchema", { enumerable: true, get: function () { return mcp_token_1.mcpTokenFullSchema; } });
+Object.defineProperty(exports, "mcpTokenSchema", { enumerable: true, get: function () { return mcp_token_1.mcpTokenSchema; } });
+Object.defineProperty(exports, "mcpTokenStubSchema", { enumerable: true, get: function () { return mcp_token_1.mcpTokenStubSchema; } });

package/dist/cjs/user/mcp-token.js

@@ -0,0 +1,31 @@
+"use strict";
+/*
+ * Hexabot — Fair Core License (FCL-1.0-ALv2)
+ * Copyright (c) 2026 Hexastack.
+ * Full terms: see LICENSE.md.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mcpTokenFullSchema = exports.mcpTokenSchema = exports.mcpTokenStubSchema = void 0;
+const zod_1 = require("zod");
+const aliases_1 = require("../shared/aliases");
+const base_1 = require("../shared/base");
+const preprocess_1 = require("../shared/preprocess");
+const user_1 = require("./user");
+const nullableDateSchema = (0, preprocess_1.preprocess)((value) => (value == null ? null : value), zod_1.z.coerce.date().nullable());
+const mcpTokenAliasMap = {
+    ownerId: "owner",
+};
+const mcpTokenStubObjectSchema = base_1.baseStubSchema.extend({
+    name: zod_1.z.string(),
+    tokenPrefix: zod_1.z.string(),
+    expiresAt: nullableDateSchema,
+    lastUsedAt: nullableDateSchema,
+    revokedAt: nullableDateSchema,
+});
+exports.mcpTokenStubSchema = mcpTokenStubObjectSchema;
+exports.mcpTokenSchema = (0, preprocess_1.preprocess)((value) => (0, aliases_1.withAliases)(value, mcpTokenAliasMap), mcpTokenStubObjectSchema.extend({
+    owner: (0, preprocess_1.preprocess)((value) => (value == null ? null : (0, aliases_1.asId)(value)), zod_1.z.string()),
+}));
+exports.mcpTokenFullSchema = mcpTokenStubObjectSchema.extend({
+    owner: (0, preprocess_1.preprocess)((value) => (value == null ? null : value), zod_1.z.lazy(() => user_1.userSchema).nullable()),
+});

package/dist/esm/chat/label.js

@@ -16,7 +16,6 @@ const labelAliasMap = {
 const labelStubObjectSchema = baseStubSchema.extend({
     title: z.string(),
     name: z.string(),
-    label_id: z.record(z.string(), z.unknown()).nullable().optional(),
     description: nullableOptionalStringSchema,
     builtin: z.coerce.boolean(),
 });

package/dist/esm/user/index.js

@@ -11,3 +11,4 @@ export { roleFullSchema, roleSchema, roleStubSchema, } from "./role";
 export { modelFullSchema, modelSchema, modelStubSchema, } from "./model";
 export { permissionFullSchema, permissionSchema, permissionStubSchema, } from "./permission";
 export { credentialFullSchema, credentialSchema, credentialStubSchema, } from "./credential";
+export { mcpTokenFullSchema, mcpTokenSchema, mcpTokenStubSchema, } from "./mcp-token";

package/dist/esm/user/mcp-token.js

@@ -0,0 +1,28 @@
+/*
+ * Hexabot — Fair Core License (FCL-1.0-ALv2)
+ * Copyright (c) 2026 Hexastack.
+ * Full terms: see LICENSE.md.
+ */
+import { z } from "zod";
+import { asId, withAliases } from "../shared/aliases";
+import { baseStubSchema } from "../shared/base";
+import { preprocess } from "../shared/preprocess";
+import { userSchema } from "./user";
+const nullableDateSchema = preprocess((value) => (value == null ? null : value), z.coerce.date().nullable());
+const mcpTokenAliasMap = {
+    ownerId: "owner",
+};
+const mcpTokenStubObjectSchema = baseStubSchema.extend({
+    name: z.string(),
+    tokenPrefix: z.string(),
+    expiresAt: nullableDateSchema,
+    lastUsedAt: nullableDateSchema,
+    revokedAt: nullableDateSchema,
+});
+export const mcpTokenStubSchema = mcpTokenStubObjectSchema;
+export const mcpTokenSchema = preprocess((value) => withAliases(value, mcpTokenAliasMap), mcpTokenStubObjectSchema.extend({
+    owner: preprocess((value) => (value == null ? null : asId(value)), z.string()),
+}));
+export const mcpTokenFullSchema = mcpTokenStubObjectSchema.extend({
+    owner: preprocess((value) => (value == null ? null : value), z.lazy(() => userSchema).nullable()),
+});

package/dist/types/chat/label-group.d.ts

@@ -24,7 +24,6 @@ export declare const labelGroupFullSchema: z.ZodObject<{
         title: string;
         name: string;
         builtin: boolean;
-        label_id?: Record<string, unknown> | null | undefined;
         description?: string | null | undefined;
         group?: string | null | undefined;
         users?: undefined;
@@ -35,7 +34,6 @@ export declare const labelGroupFullSchema: z.ZodObject<{
         title: string;
         name: string;
         builtin: boolean;
-        label_id?: Record<string, unknown> | null | undefined;
         description?: string | null | undefined;
         group?: string | null | undefined;
         users?: undefined;

package/dist/types/chat/label-group.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"label-group.d.ts","sourceRoot":"","sources":["../../../src/chat/label-group.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,oBAAoB;;;;;iBAAyB,CAAC;AAE3D,eAAO,MAAM,gBAAgB;;;;;;iBAE3B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"label-group.d.ts","sourceRoot":"","sources":["../../../src/chat/label-group.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,oBAAoB;;;;;iBAAyB,CAAC;AAE3D,eAAO,MAAM,gBAAgB;;;;;;iBAE3B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/types/chat/label.d.ts

@@ -5,7 +5,6 @@ export declare const labelStubSchema: z.ZodObject<{
     updatedAt: z.ZodCoercedDate<unknown>;
     title: z.ZodString;
     name: z.ZodString;
-    label_id: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     builtin: z.ZodCoercedBoolean<unknown>;
 }, z.core.$strip>;
@@ -16,7 +15,6 @@ export declare const labelSchema: z.ZodType<{
     title: string;
     name: string;
     builtin: boolean;
-    label_id?: Record<string, unknown> | null | undefined;
     description?: string | null | undefined;
     group?: string | null | undefined;
     users?: undefined;
@@ -27,7 +25,6 @@ export declare const labelSchema: z.ZodType<{
     title: string;
     name: string;
     builtin: boolean;
-    label_id?: Record<string, unknown> | null | undefined;
     description?: string | null | undefined;
     group?: string | null | undefined;
     users?: undefined;
@@ -38,7 +35,6 @@ export declare const labelFullSchema: z.ZodObject<{
     updatedAt: z.ZodCoercedDate<unknown>;
     title: z.ZodString;
     name: z.ZodString;
-    label_id: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     builtin: z.ZodCoercedBoolean<unknown>;
     users: z.ZodOptional<z.ZodType<{

package/dist/types/chat/label.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"label.d.ts","sourceRoot":"","sources":["../../../src/chat/label.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAqBxB,eAAO,MAAM,eAAe;;;;;;;;;iBAAwB,CAAC;AAErD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;YASvB,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}
+{"version":3,"file":"label.d.ts","sourceRoot":"","sources":["../../../src/chat/label.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoBxB,eAAO,MAAM,eAAe;;;;;;;;iBAAwB,CAAC;AAErD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;YASvB,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/types/chat/subscriber.d.ts

@@ -98,7 +98,6 @@ export declare const subscriberFullSchema: z.ZodObject<{
         title: string;
         name: string;
         builtin: boolean;
-        label_id?: Record<string, unknown> | null | undefined;
         description?: string | null | undefined;
         group?: string | null | undefined;
         users?: undefined;
@@ -109,7 +108,6 @@ export declare const subscriberFullSchema: z.ZodObject<{
         title: string;
         name: string;
         builtin: boolean;
-        label_id?: Record<string, unknown> | null | undefined;
         description?: string | null | undefined;
         group?: string | null | undefined;
         users?: undefined;

package/dist/types/chat/subscriber.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subscriber.d.ts","sourceRoot":"","sources":["../../../src/chat/subscriber.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoCxB,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;iBAAuB,CAAC;AAEzD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAG5B,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiB/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"subscriber.d.ts","sourceRoot":"","sources":["../../../src/chat/subscriber.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoCxB,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;iBAAuB,CAAC;AAEzD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAG5B,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiB/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/types/user/index.d.ts

@@ -6,4 +6,5 @@ export { roleFullSchema, roleSchema, roleStubSchema, type Role, type RoleFull, t
 export { modelFullSchema, modelSchema, modelStubSchema, type Model, type ModelFull, type ModelStub, } from "./model";
 export { permissionFullSchema, permissionSchema, permissionStubSchema, type Permission, type PermissionFull, type PermissionStub, } from "./permission";
 export { credentialFullSchema, credentialSchema, credentialStubSchema, type Credential, type CredentialFull, type CredentialStub, } from "./credential";
+export { mcpTokenFullSchema, mcpTokenSchema, mcpTokenStubSchema, type McpToken, type McpTokenFull, type McpTokenStub, } from "./mcp-token";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/user/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/user/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,MAAM,EACN,cAAc,EACd,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,MAAM,EACX,KAAK,SAAS,GACf,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,YAAY,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,KAAK,IAAI,EACT,KAAK,QAAQ,EACb,KAAK,QAAQ,GACd,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,KAAK,IAAI,EACT,KAAK,QAAQ,EACb,KAAK,QAAQ,GACd,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,eAAe,EACf,WAAW,EACX,eAAe,EACf,KAAK,KAAK,EACV,KAAK,SAAS,EACd,KAAK,SAAS,GACf,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/user/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,MAAM,EACN,cAAc,EACd,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,MAAM,EACX,KAAK,SAAS,GACf,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,YAAY,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,KAAK,IAAI,EACT,KAAK,QAAQ,EACb,KAAK,QAAQ,GACd,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,KAAK,IAAI,EACT,KAAK,QAAQ,EACb,KAAK,QAAQ,GACd,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,eAAe,EACf,WAAW,EACX,eAAe,EACf,KAAK,KAAK,EACV,KAAK,SAAS,EACd,KAAK,SAAS,GACf,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC"}

package/dist/types/user/mcp-token.d.ts

@@ -0,0 +1,113 @@
+import { z } from "zod";
+export declare const mcpTokenStubSchema: z.ZodObject<{
+    id: z.ZodString;
+    createdAt: z.ZodCoercedDate<unknown>;
+    updatedAt: z.ZodCoercedDate<unknown>;
+    name: z.ZodString;
+    tokenPrefix: z.ZodString;
+    expiresAt: z.ZodType<Date | null, unknown, z.core.$ZodTypeInternals<Date | null, unknown>>;
+    lastUsedAt: z.ZodType<Date | null, unknown, z.core.$ZodTypeInternals<Date | null, unknown>>;
+    revokedAt: z.ZodType<Date | null, unknown, z.core.$ZodTypeInternals<Date | null, unknown>>;
+}, z.core.$strip>;
+export declare const mcpTokenSchema: z.ZodType<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    name: string;
+    tokenPrefix: string;
+    expiresAt: Date | null;
+    lastUsedAt: Date | null;
+    revokedAt: Date | null;
+    owner: string;
+}, unknown, z.core.$ZodTypeInternals<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    name: string;
+    tokenPrefix: string;
+    expiresAt: Date | null;
+    lastUsedAt: Date | null;
+    revokedAt: Date | null;
+    owner: string;
+}, unknown>>;
+export declare const mcpTokenFullSchema: z.ZodObject<{
+    id: z.ZodString;
+    createdAt: z.ZodCoercedDate<unknown>;
+    updatedAt: z.ZodCoercedDate<unknown>;
+    name: z.ZodString;
+    tokenPrefix: z.ZodString;
+    expiresAt: z.ZodType<Date | null, unknown, z.core.$ZodTypeInternals<Date | null, unknown>>;
+    lastUsedAt: z.ZodType<Date | null, unknown, z.core.$ZodTypeInternals<Date | null, unknown>>;
+    revokedAt: z.ZodType<Date | null, unknown, z.core.$ZodTypeInternals<Date | null, unknown>>;
+    owner: z.ZodType<{
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        firstName: string;
+        lastName: string;
+        language: string | null;
+        timezone: number;
+        locale: string | null;
+        gender: string | null;
+        country: string | null;
+        foreignId: string | null;
+        assignedAt: Date | null;
+        lastvisit: Date | null;
+        retainedFrom: Date | null;
+        channel: {
+            name: string | null;
+            data?: Record<string, any> | null | undefined;
+        };
+        username: string;
+        email: string;
+        sendEmail: boolean;
+        state: boolean;
+        resetCount: number;
+        resetToken: string | null;
+        labels: string[];
+        assignedTo: string | null;
+        roles: string[];
+        avatar: string | null;
+        provider?: {
+            strategy: "local";
+            sub?: string | undefined;
+        } | undefined;
+    } | null, unknown, z.core.$ZodTypeInternals<{
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        firstName: string;
+        lastName: string;
+        language: string | null;
+        timezone: number;
+        locale: string | null;
+        gender: string | null;
+        country: string | null;
+        foreignId: string | null;
+        assignedAt: Date | null;
+        lastvisit: Date | null;
+        retainedFrom: Date | null;
+        channel: {
+            name: string | null;
+            data?: Record<string, any> | null | undefined;
+        };
+        username: string;
+        email: string;
+        sendEmail: boolean;
+        state: boolean;
+        resetCount: number;
+        resetToken: string | null;
+        labels: string[];
+        assignedTo: string | null;
+        roles: string[];
+        avatar: string | null;
+        provider?: {
+            strategy: "local";
+            sub?: string | undefined;
+        } | undefined;
+    } | null, unknown>>;
+}, z.core.$strip>;
+export type McpTokenStub = z.infer<typeof mcpTokenStubSchema>;
+export type McpToken = z.infer<typeof mcpTokenSchema>;
+export type McpTokenFull = z.infer<typeof mcpTokenFullSchema>;
+//# sourceMappingURL=mcp-token.d.ts.map

package/dist/types/user/mcp-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-token.d.ts","sourceRoot":"","sources":["../../../src/user/mcp-token.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAuBxB,eAAO,MAAM,kBAAkB;;;;;;;;;iBAA2B,CAAC;AAE3D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;YAQ1B,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/types/user/user.d.ts

@@ -138,7 +138,6 @@ export declare const userFullSchema: z.ZodObject<{
         title: string;
         name: string;
         builtin: boolean;
-        label_id?: Record<string, unknown> | null | undefined;
         description?: string | null | undefined;
         group?: string | null | undefined;
         users?: undefined;
@@ -149,7 +148,6 @@ export declare const userFullSchema: z.ZodObject<{
         title: string;
         name: string;
         builtin: boolean;
-        label_id?: Record<string, unknown> | null | undefined;
         description?: string | null | undefined;
         group?: string | null | undefined;
         users?: undefined;

package/dist/types/user/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/user/user.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiCxB,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAuB,CAAC;AAEnD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAoBtB,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBzB,CAAC;AAEH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAE9C,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/user/user.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiCxB,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAuB,CAAC;AAEnD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAoBtB,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBzB,CAAC;AAEH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAE9C,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hexabot-ai/types",
-  "version": "3.0.2-alpha.0",
+  "version": "3.0.2-alpha.10",
   "description": "Shared zod schemas and inferred entity types for Hexabot.",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",

package/src/chat/label.ts

@@ -20,7 +20,6 @@ const labelAliasMap = {
 const labelStubObjectSchema = baseStubSchema.extend({
   title: z.string(),
   name: z.string(),
-  label_id: z.record(z.string(), z.unknown()).nullable().optional(),
   description: nullableOptionalStringSchema,
   builtin: z.coerce.boolean(),
 });

package/src/index.test.ts

@@ -31,6 +31,7 @@ import {
   IncomingMessageType,
   labelFullSchema,
   labelSchema,
+  mcpTokenSchema,
   mcpServerFullSchema,
   mcpServerSchema,
   memoryRecordFullSchema,
@@ -682,6 +683,25 @@ describe("@hexabot-ai/types schemas", () => {
     expect("value" in credential).toBe(false);
   });
 
+  it("keeps MCP token outputs free of token hashes", () => {
+    const token = mcpTokenSchema.parse({
+      id: "mt_1",
+      createdAt: now,
+      updatedAt: now,
+      name: "Codex",
+      tokenPrefix: "hbt_mcp_abcd",
+      tokenHash: "secret-hash",
+      ownerId: "u_1",
+      expiresAt: null,
+      lastUsedAt: null,
+      revokedAt: null,
+    });
+
+    expect(token.name).toBe("Codex");
+    expect(token.owner).toBe("u_1");
+    expect("tokenHash" in token).toBe(false);
+  });
+
   it("computes workflow derived fields via parser bridge", () => {
     const parser = jest.fn((yml: string) => ({
       defs: {},

package/src/user/index.ts

@@ -76,3 +76,12 @@ export {
   type CredentialFull,
   type CredentialStub,
 } from "./credential";
+
+export {
+  mcpTokenFullSchema,
+  mcpTokenSchema,
+  mcpTokenStubSchema,
+  type McpToken,
+  type McpTokenFull,
+  type McpTokenStub,
+} from "./mcp-token";

package/src/user/mcp-token.ts

@@ -0,0 +1,53 @@
+/*
+ * Hexabot — Fair Core License (FCL-1.0-ALv2)
+ * Copyright (c) 2026 Hexastack.
+ * Full terms: see LICENSE.md.
+ */
+
+import { z } from "zod";
+
+import { asId, withAliases } from "../shared/aliases";
+import { baseStubSchema } from "../shared/base";
+import { preprocess } from "../shared/preprocess";
+
+import { userSchema } from "./user";
+
+const nullableDateSchema = preprocess(
+  (value) => (value == null ? null : value),
+  z.coerce.date().nullable(),
+);
+const mcpTokenAliasMap = {
+  ownerId: "owner",
+} as const;
+const mcpTokenStubObjectSchema = baseStubSchema.extend({
+  name: z.string(),
+  tokenPrefix: z.string(),
+  expiresAt: nullableDateSchema,
+  lastUsedAt: nullableDateSchema,
+  revokedAt: nullableDateSchema,
+});
+
+export const mcpTokenStubSchema = mcpTokenStubObjectSchema;
+
+export const mcpTokenSchema = preprocess(
+  (value) => withAliases(value, mcpTokenAliasMap),
+  mcpTokenStubObjectSchema.extend({
+    owner: preprocess(
+      (value) => (value == null ? null : asId(value)),
+      z.string(),
+    ),
+  }),
+);
+
+export const mcpTokenFullSchema = mcpTokenStubObjectSchema.extend({
+  owner: preprocess(
+    (value) => (value == null ? null : value),
+    z.lazy(() => userSchema).nullable(),
+  ),
+});
+
+export type McpTokenStub = z.infer<typeof mcpTokenStubSchema>;
+
+export type McpToken = z.infer<typeof mcpTokenSchema>;
+
+export type McpTokenFull = z.infer<typeof mcpTokenFullSchema>;