@hotmeshio/long-tail 0.4.17 → 0.4.19

package/build/start/config.js

@@ -100,4 +100,10 @@ async function applyServerAuthConfig(startConfig) {
             baseUrl: startConfig.auth.oauth.baseUrl,
         });
     }
+    // SSO — store config for requireAuth fallback and /api/auth/sso exchange
+    if (startConfig.auth?.sso) {
+        const { setSSOConfig } = await Promise.resolve().then(() => __importStar(require('../modules/sso')));
+        setSSOConfig(startConfig.auth.sso);
+        logger_1.loggerRegistry.info('[long-tail] SSO enabled — host auth will be trusted');
+    }
 }

package/build/start/server.js

@@ -10,6 +10,7 @@ const express_1 = __importDefault(require("express"));
 const config_1 = require("../modules/config");
 const logger_1 = require("../lib/logger");
 const routes_1 = __importDefault(require("../routes"));
+const mcp_endpoint_1 = __importDefault(require("../routes/mcp-endpoint"));
 /**
  * Create and start the embedded Express server with health check,
  * API routes, and optional dashboard static assets.
@@ -24,6 +25,7 @@ function startServer() {
         res.json({ status: 'ok', timestamp: new Date().toISOString() });
     });
     app.use('/api', routes_1.default);
+    app.use('/mcp', mcp_endpoint_1.default);
     // Serve dashboard static assets
     // Resolves correctly in both dev (ts-node from root) and prod (node build/)
     const devDist = path_1.default.join(__dirname, '..', 'dashboard', 'dist');

package/build/start/workers.js

@@ -111,6 +111,9 @@ async function startWorkers(startConfig, workers, builtinMcpServerFactories) {
             return undefined;
         });
     }
+    // Seed MCP service account (idempotent)
+    const { seedMcpServiceAccount } = await Promise.resolve().then(() => __importStar(require('../services/mcp/seed-service-account')));
+    await seedMcpServiceAccount();
     const connection = buildConnection();
     // Readonly mode: all user-provided workers are observers — skip crons, triggers, and agent seeding.
     // System workers (mcpQuery, etc.) are always added by collectWorkers, so check the original config.
@@ -217,6 +220,9 @@ async function startWorkers(startConfig, workers, builtinMcpServerFactories) {
             registerBuiltinServer(name, entry.factory);
         }
         logger_1.loggerRegistry.info(`[long-tail] ${Object.keys(allFactories).length} MCP server factories registered`);
+        // Set exposure config for the /mcp endpoint
+        const { setExposureConfig } = await Promise.resolve().then(() => __importStar(require('../services/mcp/exposure')));
+        setExposureConfig(startConfig.mcp?.exposure);
         // 2. Seed MCP server configs (insert-if-absent + drift log)
         for (const [name, entry] of Object.entries(allFactories)) {
             if (entry.config) {
@@ -240,6 +246,15 @@ async function startWorkers(startConfig, workers, builtinMcpServerFactories) {
     await seedSystemTopics();
     if (startConfig.topics?.length)
         await seedConfigTopics(startConfig.topics);
+    // Seed example topics when examples are enabled
+    if (startConfig.examples) {
+        try {
+            const { EXAMPLE_TOPICS } = await Promise.resolve().then(() => __importStar(require('../examples')));
+            if (EXAMPLE_TOPICS?.length)
+                await seedConfigTopics(EXAMPLE_TOPICS);
+        }
+        catch { /* examples not available */ }
+    }
     // Seed agents (from startConfig + example system agents when enabled)
     const systemAgents = startConfig.examples
         ? (await Promise.resolve().then(() => __importStar(require('../system')))).getSystemAgents()

package/build/system/index.js

@@ -45,7 +45,17 @@ exports.getSystemAgents = getSystemAgents;
 // ── Tool manifests (static JSON schema data) ────────────────────────────────
 const tool_manifests_escalation_1 = require("./seed/tool-manifests-escalation");
 const tool_manifests_data_1 = require("./seed/tool-manifests-data");
-const tool_manifests_browser_1 = require("./seed/tool-manifests-browser");
+// Playwright is an example connector — loaded conditionally (not in npm package)
+let PLAYWRIGHT_TOOLS = [];
+try {
+    PLAYWRIGHT_TOOLS = require('../examples/seed/tool-manifests-browser').PLAYWRIGHT_TOOLS;
+}
+catch { /* not available */ }
+let PLAYWRIGHT_CLI_TOOLS = [];
+try {
+    PLAYWRIGHT_CLI_TOOLS = require('../examples/seed/tool-manifests-browser').PLAYWRIGHT_CLI_TOOLS;
+}
+catch { /* not available */ }
 const tool_manifests_workflows_1 = require("./seed/tool-manifests-workflows");
 const tool_manifests_admin_1 = require("./seed/tool-manifests-admin");
 const tool_manifests_knowledge_1 = require("./seed/tool-manifests-knowledge");
@@ -173,6 +183,7 @@ exports.builtinMcpServerFactories = {
             description: 'Text translation using LLM. Translates content between languages with automatic source language detection.',
             tags: ['translation', 'language', 'text-processing'],
             category: 'Analysis',
+            aiRequired: true,
             credentialProviders: ['anthropic'],
             toolManifest: tool_manifests_data_1.TRANSLATION_TOOLS,
         },
@@ -183,6 +194,7 @@ exports.builtinMcpServerFactories = {
             description: 'Image analysis and description using LLM vision. Analyzes images to extract structured data, text content, and descriptions.',
             tags: ['vision', 'image-analysis', 'multimodal'],
             category: 'Analysis',
+            aiRequired: true,
             compileHints: [
                 'Vision tools process one image at a time.',
                 'The argument name is `image` (NOT `image_path`). It accepts a storage path, data URI, or https:// URL.',
@@ -193,34 +205,6 @@ exports.builtinMcpServerFactories = {
             toolManifest: tool_manifests_data_1.VISION_ANALYSIS_TOOLS,
         },
     },
-    'long-tail-playwright': {
-        factory: () => Promise.resolve().then(() => __importStar(require('./mcp-servers/playwright'))).then((m) => m.createPlaywrightServer()),
-        config: {
-            description: 'Low-level browser automation via Playwright. Fine-grained control: navigate, click, fill, wait_for, evaluate, run_script.',
-            tags: ['browser-automation', 'testing', 'screenshots'],
-            category: 'Automation',
-            compileHints: [
-                'Session fields (_handle, page_id) MUST be threaded from the step that created them to EVERY subsequent browser step.',
-                'run_script accepts a `steps` array — fixed implementation detail, never a dynamic input.',
-                'run_script exposes `screenshots` (array) and `last_screenshot_path` (string) as output fields.',
-            ].join(' '),
-            toolManifest: tool_manifests_browser_1.PLAYWRIGHT_TOOLS,
-        },
-    },
-    'long-tail-playwright-cli': {
-        factory: () => Promise.resolve().then(() => __importStar(require('./mcp-servers/playwright-cli'))).then((m) => m.createPlaywrightCliServer()),
-        config: {
-            description: 'High-level browser automation. Intent-based tools that handle session management, timing, and error recovery internally.',
-            tags: ['browser-automation', 'screenshots', 'scraping', 'forms'],
-            category: 'Automation',
-            compileHints: [
-                'Session fields (_handle, page_id) MUST be threaded from producing step to ALL subsequent browser steps.',
-                'extract_content returns `links` (structured array) and `script_result` (raw). Use `links` as the source field.',
-                'capture_page screenshot_path MUST include a file extension (.png).',
-            ].join(' '),
-            toolManifest: tool_manifests_browser_1.PLAYWRIGHT_CLI_TOOLS,
-        },
-    },
     'long-tail-docs': {
         factory: () => Promise.resolve().then(() => __importStar(require('./mcp-servers/docs'))).then((m) => m.createDocsServer()),
         config: {
@@ -265,6 +249,7 @@ exports.builtinMcpServerFactories = {
             description: 'Agentic coding assistant via Claude Code CLI. Execute development tasks: code generation, refactoring, file analysis, and multi-step workflows.',
             tags: ['development', 'coding', 'ai-agent', 'terminal', 'code-generation'],
             category: 'Development',
+            aiRequired: true,
             compileHints: 'execute_task runs Claude Code as a subprocess. The `prompt` parameter is ALWAYS a dynamic trigger input. ' +
                 'Keep prompts self-contained. For read-only analysis, restrict with allowed_tools: ["Read", "Grep", "Glob"].',
             credentialProviders: ['anthropic'],
@@ -274,8 +259,8 @@ exports.builtinMcpServerFactories = {
     'long-tail-admin': {
         factory: () => Promise.resolve().then(() => __importStar(require('./mcp-servers/admin'))).then((m) => m.createAdminServer()),
         config: {
-            description: 'System administration tools for reflexive self-management. Certify workflows, update server tags, manage roles.',
-            tags: ['admin', 'system', 'configuration'],
+            description: 'Unified system management — tasks, escalations, workflows, agents, bot accounts, control plane, pipelines, topics, users, roles, and settings.',
+            tags: ['admin', 'system', 'configuration', 'agents', 'bot-accounts', 'controlplane', 'pipelines', 'topics'],
             category: 'System',
             compileHints: 'Admin tools modify system configuration. certify_workflow and decertify_workflow change interceptor behavior.',
             toolManifest: tool_manifests_admin_1.ADMIN_TOOLS,
@@ -318,6 +303,39 @@ exports.builtinMcpServerFactories = {
         },
     },
 };
+// Playwright is an example connector — only register when available (not in npm package)
+if (PLAYWRIGHT_TOOLS.length > 0) {
+    exports.builtinMcpServerFactories['long-tail-playwright'] = {
+        factory: () => Promise.resolve().then(() => __importStar(require('../examples/mcp-servers/playwright'))).then((m) => m.createPlaywrightServer()),
+        config: {
+            description: 'Low-level browser automation via Playwright. Fine-grained control: navigate, click, fill, wait_for, evaluate, run_script.',
+            tags: ['browser-automation', 'testing', 'screenshots'],
+            category: 'Automation',
+            compileHints: [
+                'Session fields (_handle, page_id) MUST be threaded from the step that created them to EVERY subsequent browser step.',
+                'run_script accepts a `steps` array — fixed implementation detail, never a dynamic input.',
+                'run_script exposes `screenshots` (array) and `last_screenshot_path` (string) as output fields.',
+            ].join(' '),
+            toolManifest: PLAYWRIGHT_TOOLS,
+        },
+    };
+}
+if (PLAYWRIGHT_CLI_TOOLS.length > 0) {
+    exports.builtinMcpServerFactories['long-tail-playwright-cli'] = {
+        factory: () => Promise.resolve().then(() => __importStar(require('../examples/mcp-servers/playwright-cli'))).then((m) => m.createPlaywrightCliServer()),
+        config: {
+            description: 'High-level browser automation. Intent-based tools that handle session management, timing, and error recovery internally.',
+            tags: ['browser-automation', 'screenshots', 'scraping', 'forms'],
+            category: 'Automation',
+            compileHints: [
+                'Session fields (_handle, page_id) MUST be threaded from producing step to ALL subsequent browser steps.',
+                'extract_content returns `links` (structured array) and `script_result` (raw). Use `links` as the source field.',
+                'capture_page screenshot_path MUST include a file extension (.png).',
+            ].join(' '),
+            toolManifest: PLAYWRIGHT_CLI_TOOLS,
+        },
+    };
+}
 // Gmail is an example connector — only register when available (not in npm package)
 if (GMAIL_TOOLS.length > 0) {
     exports.builtinMcpServerFactories['long-tail-gmail'] = {
@@ -360,8 +378,8 @@ function getSystemAgents() {
                 { cron: '0 * * * *', workflow_type: 'basicEcho' },
             ],
             subscriptions: [
-                { topic: 'workflow.failed', reaction_type: 'durable', workflow_type: 'basicEcho', input_mapping: { data: { error: '{event.status}', workflowId: '{event.workflowId}' } } },
-                { topic: 'activity.failed', reaction_type: 'durable', workflow_type: 'basicEcho', input_mapping: { data: { activity: '{event.activityName}', workflowId: '{event.workflowId}' } } },
+                { topic: 'system.workflow.*.failed', reaction_type: 'durable', workflow_type: 'basicEcho', input_mapping: { data: { error: '{event.status}', workflowId: '{event.workflowId}' } } },
+                { topic: 'system.activity.*.*.failed', reaction_type: 'durable', workflow_type: 'basicEcho', input_mapping: { data: { activity: '{event.activityName}', workflowId: '{event.workflowId}' } } },
                 { topic: 'app.*.*.error', reaction_type: 'durable', workflow_type: 'basicEcho', input_mapping: { data: { error: '{event.data}', source: '{event.source}' } } },
             ],
         },
@@ -374,7 +392,7 @@ function getSystemAgents() {
             knowledge_domain: 'event-routing',
             subscriptions: [
                 { topic: 'app.>', reaction_type: 'durable', workflow_type: 'basicEcho', input_mapping: { data: { topic: '{event.type}', source: '{event.source}', payload: '{event.data}' } } },
-                { topic: 'knowledge.stored', reaction_type: 'durable', workflow_type: 'basicEcho', input_mapping: { data: { domain: '{event.data.domain}', key: '{event.data.key}' } } },
+                { topic: 'system.knowledge.*.stored', reaction_type: 'durable', workflow_type: 'basicEcho', input_mapping: { data: { domain: '{event.data.domain}', key: '{event.data.key}' } } },
             ],
         },
         {
@@ -388,7 +406,7 @@ function getSystemAgents() {
                 { cron: '*/15 * * * *', workflow_type: 'reviewContent' },
             ],
             subscriptions: [
-                { topic: 'escalation.created', reaction_type: 'durable', workflow_type: 'reviewContent', filter: { workflowName: 'reviewContent' }, input_mapping: { data: { escalationId: '{event.escalationId}', workflowId: '{event.workflowId}' } } },
+                { topic: 'system.escalation.*.created', reaction_type: 'durable', workflow_type: 'reviewContent', filter: { workflowName: 'reviewContent' }, input_mapping: { data: { escalationId: '{event.escalationId}', workflowId: '{event.workflowId}' } } },
             ],
         },
     ];

package/build/system/mcp-servers/admin/agent-subscriptions.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Agent subscription tools — mirrors routes/agents.ts subscription routes
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerAgentSubscriptionTools(server: McpServer): void;

package/build/system/mcp-servers/admin/agent-subscriptions.js

@@ -0,0 +1,78 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAgentSubscriptionTools = registerAgentSubscriptionTools;
+const api = __importStar(require("../../../api/agent-subscriptions"));
+const schemas_1 = require("./schemas");
+function registerAgentSubscriptionTools(server) {
+    // mirrors GET /api/agents/:agentId/subscriptions
+    server.registerTool('list_agent_subscriptions', {
+        title: 'List Agent Subscriptions',
+        description: 'List all event subscriptions for an agent automation.',
+        inputSchema: schemas_1.listAgentSubscriptionsSchema,
+    }, async (args) => {
+        const result = await api.listSubscriptions({ agentId: args.agent_id });
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors POST /api/agents/:agentId/subscriptions
+    server.registerTool('create_agent_subscription', {
+        title: 'Create Agent Subscription',
+        description: 'Create an event subscription for an agent. When events match the ' +
+            'topic pattern, the configured reaction is triggered.',
+        inputSchema: schemas_1.createAgentSubscriptionSchema,
+    }, async (args) => {
+        const { agent_id, ...body } = args;
+        const result = await api.createSubscription({ agentId: agent_id, ...body });
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors DELETE /api/agents/:agentId/subscriptions/:subId
+    server.registerTool('delete_agent_subscription', {
+        title: 'Delete Agent Subscription',
+        description: 'Delete an event subscription by ID.',
+        inputSchema: schemas_1.deleteAgentSubscriptionSchema,
+    }, async (args) => {
+        const result = await api.deleteSubscription({ id: args.id });
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+}

package/build/system/mcp-servers/admin/agents.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Agent automation tools — mirrors routes/agents.ts
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerAgentTools(server: McpServer): void;

package/build/system/mcp-servers/admin/agents.js

@@ -0,0 +1,103 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAgentTools = registerAgentTools;
+const api = __importStar(require("../../../api/agents"));
+const schemas_1 = require("./schemas");
+function registerAgentTools(server) {
+    // mirrors GET /api/agents
+    server.registerTool('list_agents', {
+        title: 'List Agents',
+        description: 'List agent automations with optional status and knowledge domain filters. ' +
+            'Returns agents with subscription counts and topic lists.',
+        inputSchema: schemas_1.listAgentsSchema,
+    }, async (args) => {
+        const result = await api.listAgents(args);
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors GET /api/agents/:id
+    server.registerTool('get_agent', {
+        title: 'Get Agent',
+        description: 'Get a single agent automation by ID, including aggregated stats ' +
+            '(knowledge entry count, escalation count).',
+        inputSchema: schemas_1.getAgentSchema,
+    }, async (args) => {
+        const result = await api.getAgent(args);
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors POST /api/agents
+    server.registerTool('create_agent', {
+        title: 'Create Agent',
+        description: 'Create a new agent automation with identity, goals, rules, ' +
+            'optional schedules, and event subscriptions.',
+        inputSchema: schemas_1.createAgentSchema,
+    }, async (args) => {
+        const result = await api.createAgent(args);
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors PUT /api/agents/:id
+    server.registerTool('update_agent', {
+        title: 'Update Agent',
+        description: 'Update an existing agent automation.',
+        inputSchema: schemas_1.updateAgentSchema,
+    }, async (args) => {
+        const result = await api.updateAgent(args);
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors DELETE /api/agents/:id
+    server.registerTool('delete_agent', {
+        title: 'Delete Agent',
+        description: 'Delete an agent automation and all its subscriptions.',
+        inputSchema: schemas_1.deleteAgentSchema,
+    }, async (args) => {
+        const result = await api.deleteAgent(args);
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+}

package/build/system/mcp-servers/admin/bot-accounts.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Bot account tools — mirrors routes/bot-accounts.ts
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerBotAccountTools(server: McpServer): void;

package/build/system/mcp-servers/admin/bot-accounts.js

@@ -0,0 +1,126 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerBotAccountTools = registerBotAccountTools;
+const api = __importStar(require("../../../api/bot-accounts"));
+const schemas_1 = require("./schemas");
+function registerBotAccountTools(server) {
+    // mirrors GET /api/bot-accounts
+    server.registerTool('list_bot_accounts', {
+        title: 'List Bot Accounts',
+        description: 'List all bot (service) accounts with pagination.',
+        inputSchema: schemas_1.listBotsSchema,
+    }, async (args) => {
+        const result = await api.listBots(args);
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors GET /api/bot-accounts/:id
+    server.registerTool('get_bot_account', {
+        title: 'Get Bot Account',
+        description: 'Get a single bot account by ID.',
+        inputSchema: schemas_1.getBotSchema,
+    }, async (args) => {
+        const result = await api.getBot(args);
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors POST /api/bot-accounts
+    server.registerTool('create_bot_account', {
+        title: 'Create Bot Account',
+        description: 'Create a new bot (service) account with optional roles. ' +
+            'Bot accounts can run workflows and hold API keys.',
+        inputSchema: schemas_1.createBotSchema,
+    }, async (args) => {
+        const result = await api.createBot(args);
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors PUT /api/bot-accounts/:id
+    server.registerTool('update_bot_account', {
+        title: 'Update Bot Account',
+        description: 'Update a bot account (display name, description, status).',
+        inputSchema: schemas_1.updateBotSchema,
+    }, async (args) => {
+        const result = await api.updateBot(args);
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors DELETE /api/bot-accounts/:id
+    server.registerTool('delete_bot_account', {
+        title: 'Delete Bot Account',
+        description: 'Delete a bot account and all its API keys.',
+        inputSchema: schemas_1.deleteBotSchema,
+    }, async (args) => {
+        const result = await api.deleteBot(args);
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors POST /api/bot-accounts/:id/api-keys
+    server.registerTool('create_bot_api_key', {
+        title: 'Create Bot API Key',
+        description: 'Generate a new API key for a bot account. Returns the raw key ' +
+            'ONCE — it cannot be retrieved again.',
+        inputSchema: schemas_1.createBotApiKeySchema,
+    }, async (args) => {
+        const result = await api.createBotKey(args);
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+    // mirrors DELETE /api/bot-accounts/:id/api-keys/:keyId
+    server.registerTool('revoke_bot_api_key', {
+        title: 'Revoke Bot API Key',
+        description: 'Revoke (delete) an API key for a bot account.',
+        inputSchema: schemas_1.revokeBotKeySchema,
+    }, async (args) => {
+        const result = await api.revokeBotKey({ keyId: args.key_id });
+        if (result.error) {
+            return { content: [{ type: 'text', text: JSON.stringify({ error: result.error }) }], isError: true };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result.data) }] };
+    });
+}

package/build/system/mcp-servers/admin/controlplane.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Control plane tools — mirrors routes/controlplane.ts
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerControlPlaneTools(server: McpServer): void;