@hotmeshio/long-tail 0.1.4 → 0.1.6

package/build/system/mcp-servers/admin/schemas.js

@@ -0,0 +1,177 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pruneSchema = exports.addEscalationChainSchema = exports.createRoleSchema = exports.listRolesSchema = exports.removeUserRoleSchema = exports.addUserRoleSchema = exports.createUserSchema = exports.listUsersSchema = exports.invokeYamlWorkflowSchema = exports.deployYamlWorkflowSchema = exports.createYamlWorkflowSchema = exports.getYamlWorkflowSchema = exports.listYamlWorkflowsSchema = exports.disconnectMcpServerSchema = exports.connectMcpServerSchema = exports.updateMcpServerSchema = exports.listMcpServersSchema = exports.getWorkflowStatusSchema = exports.invokeWorkflowSchema = exports.listDiscoveredWorkflowsSchema = exports.deleteWorkflowConfigSchema = exports.upsertWorkflowConfigSchema = exports.listWorkflowConfigsSchema = exports.bulkTriageSchema = exports.releaseExpiredClaimsSchema = exports.claimEscalationSchema = exports.getEscalationStatsSchema = exports.findEscalationsSchema = exports.getProcessDetailSchema = exports.findTasksSchema = void 0;
+/**
+ * Zod schemas for the admin MCP server tools.
+ *
+ * Each schema mirrors the exact parameter shape of the corresponding
+ * REST API route handler. When a route accepts `req.query.status`,
+ * the schema has `status: z.string().optional()`. When a route
+ * reads `req.body.roles`, the schema has `roles: z.array(...)`.
+ *
+ * Schemas are extracted here (rather than inline) to avoid TS2589
+ * deep-instantiation errors in the registerTool() generic.
+ */
+const zod_1 = require("zod");
+// ── tasks (routes/tasks.ts) ─────────────────────────────────────────────────
+exports.findTasksSchema = zod_1.z.object({
+    status: zod_1.z.string().optional().describe('Filter: pending, completed, etc.'),
+    workflow_type: zod_1.z.string().optional().describe('Filter by workflow type name'),
+    workflow_id: zod_1.z.string().optional().describe('Filter by workflow execution ID'),
+    origin_id: zod_1.z.string().optional().describe('Filter by origin/process ID'),
+    limit: zod_1.z.number().int().min(1).max(100).optional().default(25),
+    offset: zod_1.z.number().int().min(0).optional().default(0),
+});
+exports.getProcessDetailSchema = zod_1.z.object({
+    origin_id: zod_1.z.string().describe('The origin ID (process ID) to look up'),
+});
+// ── escalations (routes/escalations/) ───────────────────────────────────────
+exports.findEscalationsSchema = zod_1.z.object({
+    status: zod_1.z.enum(['pending', 'resolved']).optional().describe('Filter by status'),
+    role: zod_1.z.string().optional().describe('Filter by target role'),
+    type: zod_1.z.string().optional().describe('Filter by escalation type'),
+    priority: zod_1.z.number().int().min(1).max(4).optional().describe('Filter by priority (1=critical, 4=low)'),
+    limit: zod_1.z.number().int().min(1).max(100).optional().default(25),
+    offset: zod_1.z.number().int().min(0).optional().default(0),
+});
+exports.getEscalationStatsSchema = zod_1.z.object({
+    period: zod_1.z.string().optional().describe('Time period: 1h, 24h, 7d, 30d'),
+});
+exports.claimEscalationSchema = zod_1.z.object({
+    id: zod_1.z.string().describe('Escalation UUID'),
+    duration_minutes: zod_1.z.number().int().optional().default(30)
+        .describe('Lock duration in minutes'),
+});
+exports.releaseExpiredClaimsSchema = zod_1.z.object({});
+exports.bulkTriageSchema = zod_1.z.object({
+    ids: zod_1.z.array(zod_1.z.string()).min(1).describe('Escalation UUIDs to triage'),
+    hint: zod_1.z.string().optional().describe('Remediation hint for the triage agent'),
+});
+// ── workflow config (routes/workflows/config.ts) ────────────────────────────
+exports.listWorkflowConfigsSchema = zod_1.z.object({});
+exports.upsertWorkflowConfigSchema = zod_1.z.object({
+    workflow_type: zod_1.z.string().describe('Workflow function name'),
+    invocable: zod_1.z.boolean().optional().default(false),
+    task_queue: zod_1.z.string().nullable().optional().default(null),
+    default_role: zod_1.z.string().optional().default('reviewer'),
+    description: zod_1.z.string().nullable().optional().default(null),
+    execute_as: zod_1.z.string().nullable().optional().default(null)
+        .describe('Bot external_id to run as'),
+    roles: zod_1.z.array(zod_1.z.string()).optional().default([]),
+    invocation_roles: zod_1.z.array(zod_1.z.string()).optional().default([]),
+    consumes: zod_1.z.array(zod_1.z.string()).optional().default([]),
+    tool_tags: zod_1.z.array(zod_1.z.string()).optional().default([]),
+    envelope_schema: zod_1.z.record(zod_1.z.any()).nullable().optional().default(null),
+    resolver_schema: zod_1.z.record(zod_1.z.any()).nullable().optional().default(null),
+    cron_schedule: zod_1.z.string().nullable().optional().default(null),
+});
+exports.deleteWorkflowConfigSchema = zod_1.z.object({
+    workflow_type: zod_1.z.string().describe('Workflow type to de-certify'),
+});
+// ── workflows (routes/workflows/invocation.ts + discovery.ts) ───────────────
+exports.listDiscoveredWorkflowsSchema = zod_1.z.object({
+    include_system: zod_1.z.boolean().optional().default(false),
+});
+exports.invokeWorkflowSchema = zod_1.z.object({
+    workflow_type: zod_1.z.string().describe('Registered workflow type name'),
+    data: zod_1.z.record(zod_1.z.any()).describe('Business data for envelope.data'),
+    metadata: zod_1.z.record(zod_1.z.any()).optional().describe('Control flow metadata'),
+    execute_as: zod_1.z.string().optional().describe('Bot external_id override (admin only)'),
+});
+exports.getWorkflowStatusSchema = zod_1.z.object({
+    workflow_id: zod_1.z.string().describe('HotMesh workflow ID'),
+});
+// ── mcp servers (routes/mcp.ts) ─────────────────────────────────────────────
+exports.listMcpServersSchema = zod_1.z.object({
+    status: zod_1.z.string().optional().describe('Filter: registered, connected, error, disconnected'),
+    tags: zod_1.z.string().optional().describe('Comma-separated tag filter'),
+    search: zod_1.z.string().optional().describe('Search name, description, or tool names'),
+    limit: zod_1.z.number().int().min(1).max(100).optional().default(50),
+    offset: zod_1.z.number().int().min(0).optional().default(0),
+});
+exports.updateMcpServerSchema = zod_1.z.object({
+    id: zod_1.z.string().describe('Server UUID'),
+    name: zod_1.z.string().optional(),
+    description: zod_1.z.string().optional(),
+    tags: zod_1.z.array(zod_1.z.string()).optional(),
+    auto_connect: zod_1.z.boolean().optional(),
+});
+exports.connectMcpServerSchema = zod_1.z.object({
+    id: zod_1.z.string().describe('Server UUID to connect'),
+});
+exports.disconnectMcpServerSchema = zod_1.z.object({
+    id: zod_1.z.string().describe('Server UUID to disconnect'),
+});
+// ── yaml workflows (routes/yaml-workflows/) ─────────────────────────────────
+exports.listYamlWorkflowsSchema = zod_1.z.object({
+    status: zod_1.z.string().optional().describe('Filter: draft, deployed, active, archived'),
+    app_id: zod_1.z.string().optional().describe('Filter by namespace'),
+    search: zod_1.z.string().optional().describe('Search name, topic, description'),
+    source_workflow_id: zod_1.z.string().optional(),
+    limit: zod_1.z.number().int().min(1).max(100).optional().default(50),
+    offset: zod_1.z.number().int().min(0).optional().default(0),
+});
+exports.getYamlWorkflowSchema = zod_1.z.object({
+    id: zod_1.z.string().describe('YAML workflow UUID'),
+});
+exports.createYamlWorkflowSchema = zod_1.z.object({
+    workflow_id: zod_1.z.string().describe('Source execution workflow ID'),
+    task_queue: zod_1.z.string().describe('Task queue of the source execution'),
+    workflow_name: zod_1.z.string().describe('Source workflow type name'),
+    name: zod_1.z.string().describe('Name for the new compiled workflow'),
+    description: zod_1.z.string().optional(),
+    app_id: zod_1.z.string().optional().describe('Namespace (auto-generated if omitted)'),
+    tags: zod_1.z.array(zod_1.z.string()).optional().describe('Discovery tags'),
+    compilation_feedback: zod_1.z.string().optional().describe('Extra instructions for the compiler'),
+});
+exports.deployYamlWorkflowSchema = zod_1.z.object({
+    id: zod_1.z.string().describe('YAML workflow UUID to deploy'),
+});
+exports.invokeYamlWorkflowSchema = zod_1.z.object({
+    id: zod_1.z.string().describe('YAML workflow UUID'),
+    data: zod_1.z.record(zod_1.z.any()).optional().default({}).describe('Input matching the workflow input_schema'),
+    sync: zod_1.z.boolean().optional().default(false).describe('Wait for result'),
+    timeout: zod_1.z.number().int().optional().describe('Timeout in ms for sync mode'),
+});
+// ── users (routes/users.ts) ─────────────────────────────────────────────────
+exports.listUsersSchema = zod_1.z.object({
+    role: zod_1.z.string().optional().describe('Filter by role name'),
+    status: zod_1.z.string().optional().describe('Filter: active, inactive, suspended'),
+    limit: zod_1.z.number().int().min(1).max(100).optional().default(50),
+    offset: zod_1.z.number().int().min(0).optional().default(0),
+});
+exports.createUserSchema = zod_1.z.object({
+    external_id: zod_1.z.string().describe('Stable user identifier'),
+    display_name: zod_1.z.string().optional(),
+    email: zod_1.z.string().optional(),
+    roles: zod_1.z.array(zod_1.z.object({
+        role: zod_1.z.string(),
+        type: zod_1.z.enum(['superadmin', 'admin', 'member']),
+    })).optional().default([]).describe('Roles to assign on creation'),
+});
+exports.addUserRoleSchema = zod_1.z.object({
+    user_id: zod_1.z.string().describe('User UUID'),
+    role: zod_1.z.string().describe('Role name'),
+    type: zod_1.z.enum(['superadmin', 'admin', 'member']).describe('Permission level'),
+});
+exports.removeUserRoleSchema = zod_1.z.object({
+    user_id: zod_1.z.string().describe('User UUID'),
+    role: zod_1.z.string().describe('Role to remove'),
+});
+// ── roles (routes/roles.ts) ─────────────────────────────────────────────────
+exports.listRolesSchema = zod_1.z.object({});
+exports.createRoleSchema = zod_1.z.object({
+    role: zod_1.z.string().describe('Lowercase alphanumeric role name (a-z, 0-9, hyphens, underscores)'),
+});
+exports.addEscalationChainSchema = zod_1.z.object({
+    source_role: zod_1.z.string().describe('Originating role'),
+    target_role: zod_1.z.string().describe('Destination role for escalation'),
+});
+// ── maintenance (routes/dba.ts) ─────────────────────────────────────────────
+exports.pruneSchema = zod_1.z.object({
+    expire: zod_1.z.string().optional().default('7 days').describe('Retention period (PostgreSQL interval)'),
+    jobs: zod_1.z.boolean().optional().default(true).describe('Hard-delete expired jobs'),
+    streams: zod_1.z.boolean().optional().default(true).describe('Hard-delete expired streams'),
+    entities: zod_1.z.array(zod_1.z.string()).optional().describe('Entity allowlist'),
+    prune_transient: zod_1.z.boolean().optional().default(false).describe('Delete transient jobs'),
+});

package/build/system/mcp-servers/admin/tasks.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Task query tools — mirrors routes/tasks.ts
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerTaskTools(server: McpServer): void;

package/build/system/mcp-servers/admin/tasks.js

@@ -0,0 +1,112 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerTaskTools = registerTaskTools;
+const taskService = __importStar(require("../../../services/task"));
+const escalationService = __importStar(require("../../../services/escalation"));
+const schemas_1 = require("./schemas");
+function registerTaskTools(server) {
+    server.registerTool('find_tasks', {
+        title: 'Find Tasks',
+        description: 'Search tasks with optional filters. Returns task records with ' +
+            'workflow_id, status, workflow_type, and timestamps.',
+        inputSchema: schemas_1.findTasksSchema,
+    }, async (args) => {
+        const { tasks, total } = await taskService.listTasks({
+            status: args.status,
+            workflow_type: args.workflow_type,
+            workflow_id: args.workflow_id,
+            origin_id: args.origin_id,
+            limit: args.limit,
+            offset: args.offset,
+        });
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        total,
+                        count: tasks.length,
+                        tasks: tasks.map((t) => ({
+                            id: t.id,
+                            workflow_id: t.workflow_id,
+                            workflow_type: t.workflow_type,
+                            status: t.status,
+                            priority: t.priority,
+                            origin_id: t.origin_id,
+                            created_at: t.created_at,
+                            completed_at: t.completed_at,
+                            error: t.error,
+                        })),
+                    }),
+                }],
+        };
+    });
+    server.registerTool('get_process_detail', {
+        title: 'Get Process Detail',
+        description: 'Get all tasks and escalations for a process (origin_id). ' +
+            'Returns the full history of a multi-step workflow execution.',
+        inputSchema: schemas_1.getProcessDetailSchema,
+    }, async (args) => {
+        const [tasks, escalations] = await Promise.all([
+            taskService.getProcessTasks(args.origin_id),
+            escalationService.getEscalationsByOriginId(args.origin_id),
+        ]);
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        origin_id: args.origin_id,
+                        task_count: tasks.length,
+                        escalation_count: escalations.length,
+                        tasks: tasks.map((t) => ({
+                            id: t.id,
+                            workflow_id: t.workflow_id,
+                            workflow_type: t.workflow_type,
+                            status: t.status,
+                            created_at: t.created_at,
+                            completed_at: t.completed_at,
+                        })),
+                        escalations: escalations.map((e) => ({
+                            id: e.id,
+                            type: e.type,
+                            role: e.role,
+                            status: e.status,
+                            created_at: e.created_at,
+                        })),
+                    }),
+                }],
+        };
+    });
+}

package/build/system/mcp-servers/admin/users.d.ts

@@ -0,0 +1,5 @@
+/**
+ * User and role management tools — mirrors routes/users.ts + routes/roles.ts
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerUserTools(server: McpServer): void;

package/build/system/mcp-servers/admin/users.js

@@ -0,0 +1,167 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerUserTools = registerUserTools;
+const userService = __importStar(require("../../../services/user"));
+const roleService = __importStar(require("../../../services/role"));
+const schemas_1 = require("./schemas");
+function registerUserTools(server) {
+    // mirrors GET /api/users
+    server.registerTool('list_users', {
+        title: 'List Users',
+        description: 'List user accounts with optional role and status filters.',
+        inputSchema: schemas_1.listUsersSchema,
+    }, async (args) => {
+        const { users, total } = await userService.listUsers({
+            role: args.role,
+            status: args.status,
+            limit: args.limit,
+            offset: args.offset,
+        });
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        total,
+                        count: users.length,
+                        users: users.map((u) => ({
+                            id: u.id,
+                            external_id: u.external_id,
+                            display_name: u.display_name,
+                            account_type: u.account_type,
+                            status: u.status,
+                        })),
+                    }),
+                }],
+        };
+    });
+    // mirrors POST /api/users
+    server.registerTool('create_user', {
+        title: 'Create User',
+        description: 'Create a new user account with optional roles. The user can then ' +
+            'claim and resolve escalations for their assigned roles.',
+        inputSchema: schemas_1.createUserSchema,
+    }, async (args) => {
+        const user = await userService.createUser({
+            external_id: args.external_id,
+            display_name: args.display_name,
+            email: args.email,
+            roles: args.roles,
+        });
+        return {
+            content: [{ type: 'text', text: JSON.stringify(user) }],
+        };
+    });
+    // mirrors POST /api/users/:id/roles
+    server.registerTool('add_user_role', {
+        title: 'Add User Role',
+        description: 'Assign a role to a user. Role type: member, admin, or superadmin.',
+        inputSchema: schemas_1.addUserRoleSchema,
+    }, async (args) => {
+        const result = await userService.addUserRole(args.user_id, args.role, args.type);
+        return {
+            content: [{ type: 'text', text: JSON.stringify(result) }],
+        };
+    });
+    // mirrors DELETE /api/users/:id/roles/:role
+    server.registerTool('remove_user_role', {
+        title: 'Remove User Role',
+        description: 'Remove a role from a user.',
+        inputSchema: schemas_1.removeUserRoleSchema,
+    }, async (args) => {
+        const removed = await userService.removeUserRole(args.user_id, args.role);
+        if (!removed) {
+            return {
+                content: [{ type: 'text', text: JSON.stringify({ error: 'Role not found' }) }],
+                isError: true,
+            };
+        }
+        return {
+            content: [{ type: 'text', text: JSON.stringify({ removed: true }) }],
+        };
+    });
+    // mirrors GET /api/roles
+    server.registerTool('list_roles', {
+        title: 'List Roles',
+        description: 'List all distinct roles known to the system.',
+        inputSchema: schemas_1.listRolesSchema,
+    }, async (_args) => {
+        const roles = await roleService.listDistinctRoles();
+        return {
+            content: [{ type: 'text', text: JSON.stringify({ roles }) }],
+        };
+    });
+    // mirrors POST /api/roles
+    server.registerTool('create_role', {
+        title: 'Create Role',
+        description: 'Create a new role. Role names must be lowercase alphanumeric ' +
+            'with hyphens/underscores, starting with a letter.',
+        inputSchema: schemas_1.createRoleSchema,
+    }, async (args) => {
+        const trimmed = args.role.trim().toLowerCase();
+        if (!/^[a-z][a-z0-9_-]*$/.test(trimmed)) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ error: 'Role must start with a letter and contain only lowercase letters, numbers, hyphens, and underscores' }),
+                    }],
+                isError: true,
+            };
+        }
+        await roleService.createRole(trimmed);
+        return {
+            content: [{ type: 'text', text: JSON.stringify({ role: trimmed, created: true }) }],
+        };
+    });
+    // mirrors POST /api/roles/escalation-chains
+    server.registerTool('add_escalation_chain', {
+        title: 'Add Escalation Chain',
+        description: 'Define an escalation path from one role to another. Users with ' +
+            'the source role can escalate work to the target role.',
+        inputSchema: schemas_1.addEscalationChainSchema,
+    }, async (args) => {
+        await roleService.addEscalationChain(args.source_role, args.target_role);
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        created: true,
+                        source_role: args.source_role,
+                        target_role: args.target_role,
+                    }),
+                }],
+        };
+    });
+}

package/build/system/mcp-servers/admin/workflow-config.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Workflow configuration tools — mirrors routes/workflows/config.ts
+ *
+ * Certifying a workflow creates an lt_config_workflows entry, which
+ * activates the interceptor for task tracking, escalation chains,
+ * and the never-fail guarantee. De-certifying removes it.
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerWorkflowConfigTools(server: McpServer): void;

package/build/system/mcp-servers/admin/workflow-config.js

@@ -0,0 +1,118 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWorkflowConfigTools = registerWorkflowConfigTools;
+const configService = __importStar(require("../../../services/config"));
+const ltconfig_1 = require("../../../modules/ltconfig");
+const cron_1 = require("../../../services/cron");
+const schemas_1 = require("./schemas");
+function registerWorkflowConfigTools(server) {
+    // mirrors GET /api/workflows/config
+    server.registerTool('list_workflow_configs', {
+        title: 'List Workflow Configs',
+        description: 'List all certified workflow configurations. Shows workflow type, ' +
+            'task queue, roles, invocable flag, and description.',
+        inputSchema: schemas_1.listWorkflowConfigsSchema,
+    }, async (_args) => {
+        const configs = await configService.listWorkflowConfigs();
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        count: configs.length,
+                        workflows: configs.map((c) => ({
+                            workflow_type: c.workflow_type,
+                            invocable: c.invocable,
+                            task_queue: c.task_queue,
+                            default_role: c.default_role,
+                            description: c.description,
+                            roles: c.roles,
+                        })),
+                    }),
+                }],
+        };
+    });
+    // mirrors PUT /api/workflows/:type/config
+    server.registerTool('upsert_workflow_config', {
+        title: 'Upsert Workflow Config',
+        description: 'Create or replace a workflow configuration (certify). Activates the ' +
+            'interceptor for task tracking, escalation chains, and invocation controls. ' +
+            'Invalidates the config cache and restarts cron if schedule changes.',
+        inputSchema: schemas_1.upsertWorkflowConfigSchema,
+    }, async (args) => {
+        const config = await configService.upsertWorkflowConfig({
+            workflow_type: args.workflow_type,
+            invocable: args.invocable,
+            task_queue: args.task_queue,
+            default_role: args.default_role,
+            description: args.description,
+            execute_as: args.execute_as,
+            roles: args.roles,
+            invocation_roles: args.invocation_roles,
+            consumes: args.consumes,
+            tool_tags: args.tool_tags,
+            envelope_schema: args.envelope_schema,
+            resolver_schema: args.resolver_schema,
+            cron_schedule: args.cron_schedule,
+        });
+        ltconfig_1.ltConfig.invalidate();
+        await cron_1.cronRegistry.restartCron(config);
+        return {
+            content: [{ type: 'text', text: JSON.stringify(config) }],
+        };
+    });
+    // mirrors DELETE /api/workflows/:type/config
+    server.registerTool('delete_workflow_config', {
+        title: 'Delete Workflow Config',
+        description: 'De-certify a workflow by removing its lt_config_workflows entry. ' +
+            'The workflow remains durable but loses interceptor wrapping.',
+        inputSchema: schemas_1.deleteWorkflowConfigSchema,
+    }, async (args) => {
+        const deleted = await configService.deleteWorkflowConfig(args.workflow_type);
+        if (!deleted) {
+            return {
+                content: [{ type: 'text', text: JSON.stringify({ error: 'Workflow config not found' }) }],
+                isError: true,
+            };
+        }
+        ltconfig_1.ltConfig.invalidate();
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({ deleted: true, workflow_type: args.workflow_type }),
+                }],
+        };
+    });
+}

package/build/system/mcp-servers/admin/workflows.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Workflow discovery and invocation tools — mirrors routes/workflows/discovery.ts
+ * and routes/workflows/invocation.ts
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerWorkflowTools(server: McpServer): void;