@invect/mcp 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 @robase
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/backend/audit.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Audit logger for MCP tool invocations.
+ */
+import type { AuditEntry, McpPluginOptions } from '../shared/types';
+type Logger = {
+    debug(message: string, ...args: unknown[]): void;
+    info(message: string, ...args: unknown[]): void;
+    warn(message: string, ...args: unknown[]): void;
+};
+export declare class AuditLogger {
+    private readonly logger;
+    private enabled;
+    private logLevel;
+    constructor(logger: Logger, options?: McpPluginOptions['audit']);
+    log(entry: AuditEntry): void;
+    /** Create an audit entry helper that tracks timing */
+    startTimer(tool: string, options?: {
+        sessionId?: string;
+        userId?: string;
+        userRole?: string;
+    }): {
+        finish: (result: {
+            status: 'success' | 'error';
+            error?: string;
+        }) => void;
+    };
+}
+export {};
+//# sourceMappingURL=audit.d.ts.map

package/dist/backend/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/backend/audit.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEpE,KAAK,MAAM,GAAG;IACZ,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CACjD,CAAC;AAEF,qBAAa,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJzB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,QAAQ,CAA4B;gBAGzB,MAAM,EAAE,MAAM,EAC/B,OAAO,CAAC,EAAE,gBAAgB,CAAC,OAAO,CAAC;IAMrC,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IA4B5B,sDAAsD;IACtD,UAAU,CACR,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GACnE;QAAE,MAAM,EAAE,CAAC,MAAM,EAAE;YAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAA;KAAE;CAiBjF"}

package/dist/backend/auth.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Auth helpers for the MCP plugin.
+ *
+ * Handles identity extraction from MCP request context and RBAC enforcement.
+ */
+import type { InvectIdentity, InvectInstance } from '@invect/core';
+/**
+ * Maps the MCP SDK's `authInfo` (from `ctx.http.authInfo`) to an InvectIdentity.
+ * The authInfo is populated by the framework adapter's middleware which resolves
+ * the session/API key before routing to the MCP plugin endpoint.
+ */
+export declare function mapAuthInfoToIdentity(authInfo: unknown): InvectIdentity | null;
+/**
+ * Requires that the identity is present. Throws McpError if not.
+ */
+export declare function requireAuth(identity: InvectIdentity | null): InvectIdentity;
+/**
+ * Extracts identity if available, returns null otherwise.
+ * Used by tool handlers — the underlying client (HttpClient/DirectClient)
+ * handles auth at its own layer, so a null identity is acceptable for
+ * transports like stdio where auth is pre-established.
+ */
+export declare function resolveIdentity(authInfo: unknown): InvectIdentity | null;
+/**
+ * Authorize a specific action on a resource.
+ * Returns true if authorized, throws if denied.
+ */
+export declare function authorizeAction(invect: InvectInstance, identity: InvectIdentity, action: string, resource?: {
+    type: string;
+    id?: string;
+}): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/backend/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/backend/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnE;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAY9E;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,cAAc,CAK3E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAExE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC,OAAO,CAAC,IAAI,CAAC,CAcf"}

package/dist/backend/client/direct-client.d.ts

@@ -0,0 +1,223 @@
+/**
+ * DirectClient — wraps InvectInstance for plugin mode (zero HTTP overhead).
+ */
+import type { InvectInstance, InvectIdentity } from '@invect/core';
+import type { InvectClient, CredentialSummary } from './types';
+export declare class DirectClient implements InvectClient {
+    private readonly invect;
+    constructor(invect: InvectInstance);
+    listFlows(_identity: InvectIdentity | null): Promise<import("@invect/core").PaginatedResponse<import("@invect/core").Flow>>;
+    getFlow(_identity: InvectIdentity | null, flowId: string): Promise<import("@invect/core").Flow>;
+    getFlowDefinition(_identity: InvectIdentity | null, flowId: string): Promise<{
+        flowId: string;
+        version: number;
+        invectDefinition: {
+            nodes: {
+                id: string;
+                type: string;
+                params: Record<string, unknown>;
+                position?: {
+                    x: number;
+                    y: number;
+                } | undefined;
+                label?: string | undefined;
+                referenceId?: string | undefined;
+                _loop?: unknown;
+                mapper?: {
+                    enabled: boolean;
+                    expression: string;
+                    mode: "auto" | "iterate" | "reshape";
+                    outputMode: "object" | "array" | "concat" | "first" | "last";
+                    concurrency: number;
+                    onEmpty: "error" | "skip";
+                    keyField?: string | undefined;
+                } | undefined;
+            }[];
+            edges: {
+                id: string;
+                source: string;
+                target: string;
+                sourceHandle?: string | undefined;
+                targetHandle?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
+            }[];
+            metadata?: Record<string, unknown> | undefined;
+        };
+        createdAt: string;
+        createdBy: string | null;
+    } | null>;
+    createFlow(_identity: InvectIdentity | null, data: {
+        name: string;
+        description?: string;
+    }): Promise<import("@invect/core").Flow>;
+    updateFlow(_identity: InvectIdentity | null, flowId: string, data: {
+        name?: string;
+        description?: string;
+    }): Promise<import("@invect/core").Flow>;
+    deleteFlow(_identity: InvectIdentity | null, flowId: string): Promise<void>;
+    validateFlow(_identity: InvectIdentity | null, flowId: string, definition: unknown): Promise<{
+        valid: boolean;
+        errors: string[] | undefined;
+    }>;
+    listVersions(_identity: InvectIdentity | null, flowId: string): Promise<import("@invect/core").PaginatedResponse<{
+        flowId: string;
+        version: number;
+        invectDefinition: {
+            nodes: {
+                id: string;
+                type: string;
+                params: Record<string, unknown>;
+                position?: {
+                    x: number;
+                    y: number;
+                } | undefined;
+                label?: string | undefined;
+                referenceId?: string | undefined;
+                _loop?: unknown;
+                mapper?: {
+                    enabled: boolean;
+                    expression: string;
+                    mode: "auto" | "iterate" | "reshape";
+                    outputMode: "object" | "array" | "concat" | "first" | "last";
+                    concurrency: number;
+                    onEmpty: "error" | "skip";
+                    keyField?: string | undefined;
+                } | undefined;
+            }[];
+            edges: {
+                id: string;
+                source: string;
+                target: string;
+                sourceHandle?: string | undefined;
+                targetHandle?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
+            }[];
+            metadata?: Record<string, unknown> | undefined;
+        };
+        createdAt: string;
+        createdBy: string | null;
+    }>>;
+    getVersion(_identity: InvectIdentity | null, flowId: string, version: string | number | 'latest'): Promise<{
+        flowId: string;
+        version: number;
+        invectDefinition: {
+            nodes: {
+                id: string;
+                type: string;
+                params: Record<string, unknown>;
+                position?: {
+                    x: number;
+                    y: number;
+                } | undefined;
+                label?: string | undefined;
+                referenceId?: string | undefined;
+                _loop?: unknown;
+                mapper?: {
+                    enabled: boolean;
+                    expression: string;
+                    mode: "auto" | "iterate" | "reshape";
+                    outputMode: "object" | "array" | "concat" | "first" | "last";
+                    concurrency: number;
+                    onEmpty: "error" | "skip";
+                    keyField?: string | undefined;
+                } | undefined;
+            }[];
+            edges: {
+                id: string;
+                source: string;
+                target: string;
+                sourceHandle?: string | undefined;
+                targetHandle?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
+            }[];
+            metadata?: Record<string, unknown> | undefined;
+        };
+        createdAt: string;
+        createdBy: string | null;
+    } | null>;
+    publishVersion(_identity: InvectIdentity | null, flowId: string, data: unknown): Promise<{
+        flowId: string;
+        version: number;
+        invectDefinition: {
+            nodes: {
+                id: string;
+                type: string;
+                params: Record<string, unknown>;
+                position?: {
+                    x: number;
+                    y: number;
+                } | undefined;
+                label?: string | undefined;
+                referenceId?: string | undefined;
+                _loop?: unknown;
+                mapper?: {
+                    enabled: boolean;
+                    expression: string;
+                    mode: "auto" | "iterate" | "reshape";
+                    outputMode: "object" | "array" | "concat" | "first" | "last";
+                    concurrency: number;
+                    onEmpty: "error" | "skip";
+                    keyField?: string | undefined;
+                } | undefined;
+            }[];
+            edges: {
+                id: string;
+                source: string;
+                target: string;
+                sourceHandle?: string | undefined;
+                targetHandle?: string | undefined;
+                metadata?: Record<string, unknown> | undefined;
+            }[];
+            metadata?: Record<string, unknown> | undefined;
+        };
+        createdAt: string;
+        createdBy: string | null;
+    }>;
+    startRun(_identity: InvectIdentity | null, flowId: string, inputs?: Record<string, unknown>): Promise<import("@invect/core").FlowRunResult>;
+    runToNode(_identity: InvectIdentity | null, flowId: string, nodeId: string, inputs?: Record<string, unknown>): Promise<import("@invect/core").FlowRunResult>;
+    listRuns(_identity: InvectIdentity | null, flowId: string): Promise<import("@invect/core").PaginatedResponse<import("@invect/core").FlowRun>>;
+    getRun(_identity: InvectIdentity | null, flowRunId: string): Promise<import("@invect/core").FlowRun>;
+    cancelRun(_identity: InvectIdentity | null, flowRunId: string): Promise<{
+        message: string;
+        timestamp: string;
+    }>;
+    pauseRun(_identity: InvectIdentity | null, flowRunId: string): Promise<{
+        message: string;
+        timestamp: string;
+    }>;
+    resumeRun(_identity: InvectIdentity | null, flowRunId: string): Promise<{
+        message: string;
+        timestamp: string;
+    }>;
+    getNodeExecutions(_identity: InvectIdentity | null, flowRunId: string): Promise<import("@invect/core").NodeExecution[]>;
+    testNode(_identity: InvectIdentity | null, nodeType: string, params: Record<string, unknown>, inputData?: Record<string, unknown>): Promise<{
+        success: boolean;
+        output?: Record<string, unknown>;
+        error?: string;
+    }>;
+    testJsExpression(_identity: InvectIdentity | null, expression: string, context: Record<string, unknown>): Promise<{
+        success: boolean;
+        result?: unknown;
+        error?: string;
+    }>;
+    testMapper(_identity: InvectIdentity | null, expression: string, incomingData: Record<string, unknown>): Promise<{
+        success: boolean;
+        result?: unknown;
+        resultType?: "array" | "object" | "primitive";
+        itemCount?: number;
+        error?: string;
+    }>;
+    listCredentials(_identity: InvectIdentity | null): Promise<CredentialSummary[]>;
+    testCredential(_identity: InvectIdentity | null, credentialId: string): Promise<{
+        success: boolean;
+        error?: string;
+    }>;
+    listTriggers(_identity: InvectIdentity | null, flowId: string): Promise<import("@invect/core").FlowTriggerRegistration[]>;
+    getTrigger(_identity: InvectIdentity | null, triggerId: string): Promise<import("@invect/core").FlowTriggerRegistration | null>;
+    createTrigger(_identity: InvectIdentity | null, input: unknown): Promise<import("@invect/core").FlowTriggerRegistration>;
+    updateTrigger(_identity: InvectIdentity | null, triggerId: string, input: unknown): Promise<import("@invect/core").FlowTriggerRegistration | null>;
+    deleteTrigger(_identity: InvectIdentity | null, triggerId: string): Promise<void>;
+    listProviders(_identity: InvectIdentity | null): Promise<import("@invect/core").ProviderDef[]>;
+    listAvailableNodes(_identity: InvectIdentity | null): Promise<import("@invect/core").NodeDefinition[]>;
+}
+//# sourceMappingURL=direct-client.d.ts.map

package/dist/backend/client/direct-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-client.d.ts","sourceRoot":"","sources":["../../../src/backend/client/direct-client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE/D,qBAAa,YAAa,YAAW,YAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,cAAc;IAI7C,SAAS,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI;IAI1C,OAAO,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;IAIxD,iBAAiB,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;;;;;;;;wBA+K6sB,CAAC;;;;qBAA0F,CAAC;2BAA2C,CAAC;qBAAqC,CAAC;sBAA2B,CAAC;;;;;;;4BAA0R,CAAC;;;;;;;4BAA6K,CAAC;4BAA4C,CAAC;wBAAwC,CAAC;;;;;;;IA3Kx/C,UAAU,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAIzF,UAAU,CACd,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAKzC,UAAU,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;IAI3D,YAAY,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO;;;;IAUlF,YAAY,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;;;;;;;;wBAiJktB,CAAC;;;;qBAA0F,CAAC;2BAA2C,CAAC;qBAAqC,CAAC;sBAA2B,CAAC;;;;;;;4BAA0R,CAAC;;;;;;;4BAA6K,CAAC;4BAA4C,CAAC;wBAAwC,CAAC;;;;;;;IA7Ix/C,UAAU,CACd,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ;;;;;;;;wBA0IgvB,CAAC;;;;qBAA0F,CAAC;2BAA2C,CAAC;qBAAqC,CAAC;sBAA2B,CAAC;;;;;;;4BAA0R,CAAC;;;;;;;4BAA6K,CAAC;4BAA4C,CAAC;wBAAwC,CAAC;;;;;;;IArIx/C,cAAc,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;;;;;;;;wBAqIisB,CAAC;;;;qBAA0F,CAAC;2BAA2C,CAAC;qBAAqC,CAAC;sBAA2B,CAAC;;;;;;;4BAA0R,CAAC;;;;;;;4BAA6K,CAAC;4BAA4C,CAAC;wBAAwC,CAAC;;;;;;;IA5Hx/C,QAAQ,CACZ,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAK5B,SAAS,CACb,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAK5B,QAAQ,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;IAIzD,MAAM,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;IAI1D,SAAS,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;;;;IAI7D,QAAQ,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;;;;IAI5D,SAAS,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;;;;IAM7D,iBAAiB,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;IAKrE,QAAQ,CACZ,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;IAK/B,gBAAgB,CACpB,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;IAK5B,UAAU,CACd,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;IAOjC,eAAe,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAY/E,cAAc,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,YAAY,EAAE,MAAM;;;;IAMrE,YAAY,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;IAI7D,UAAU,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;IAI9D,aAAa,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO;IAM9D,aAAa,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;IAOjF,aAAa,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;IAMjE,aAAa,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI;IAI9C,kBAAkB,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI;CAG1D"}

package/dist/backend/client/http-client.d.ts

@@ -0,0 +1,74 @@
+/**
+ * HttpClient — wraps Invect HTTP API for CLI/stdio mode.
+ */
+import type { InvectIdentity } from '@invect/core';
+import type { InvectClient, CredentialSummary } from './types';
+export declare class HttpClient implements InvectClient {
+    private baseUrl;
+    private apiKey;
+    constructor(baseUrl: string, apiKey: string);
+    private request;
+    /** Health check — throws if API is unreachable */
+    healthCheck(): Promise<void>;
+    listFlows(_identity: InvectIdentity | null): Promise<unknown>;
+    getFlow(_identity: InvectIdentity | null, flowId: string): Promise<unknown>;
+    getFlowDefinition(_identity: InvectIdentity | null, flowId: string): Promise<unknown>;
+    createFlow(_identity: InvectIdentity | null, data: {
+        name: string;
+        description?: string;
+    }): Promise<unknown>;
+    updateFlow(_identity: InvectIdentity | null, flowId: string, data: {
+        name?: string;
+        description?: string;
+    }): Promise<unknown>;
+    deleteFlow(_identity: InvectIdentity | null, flowId: string): Promise<void>;
+    validateFlow(_identity: InvectIdentity | null, flowId: string, definition: unknown): Promise<{
+        valid: boolean;
+        errors?: string[];
+    }>;
+    listVersions(_identity: InvectIdentity | null, flowId: string): Promise<unknown>;
+    getVersion(_identity: InvectIdentity | null, flowId: string, version: string | number | 'latest'): Promise<unknown>;
+    publishVersion(_identity: InvectIdentity | null, flowId: string, data: unknown): Promise<unknown>;
+    startRun(_identity: InvectIdentity | null, flowId: string, inputs?: Record<string, unknown>): Promise<unknown>;
+    runToNode(_identity: InvectIdentity | null, flowId: string, nodeId: string, inputs?: Record<string, unknown>): Promise<unknown>;
+    listRuns(_identity: InvectIdentity | null, flowId: string): Promise<unknown>;
+    getRun(_identity: InvectIdentity | null, flowRunId: string): Promise<unknown>;
+    cancelRun(_identity: InvectIdentity | null, flowRunId: string): Promise<{
+        message: string;
+    }>;
+    pauseRun(_identity: InvectIdentity | null, flowRunId: string): Promise<{
+        message: string;
+    }>;
+    resumeRun(_identity: InvectIdentity | null, flowRunId: string): Promise<{
+        message: string;
+    }>;
+    getNodeExecutions(_identity: InvectIdentity | null, flowRunId: string): Promise<unknown[]>;
+    testNode(_identity: InvectIdentity | null, nodeType: string, params: Record<string, unknown>, inputData?: Record<string, unknown>): Promise<{
+        success: boolean;
+        output?: unknown;
+        error?: string;
+    }>;
+    testJsExpression(_identity: InvectIdentity | null, expression: string, context: Record<string, unknown>): Promise<{
+        success: boolean;
+        result?: unknown;
+        error?: string;
+    }>;
+    testMapper(_identity: InvectIdentity | null, expression: string, incomingData: Record<string, unknown>): Promise<{
+        success: boolean;
+        result?: unknown;
+        error?: string;
+    }>;
+    listCredentials(_identity: InvectIdentity | null): Promise<CredentialSummary[]>;
+    testCredential(_identity: InvectIdentity | null, credentialId: string): Promise<{
+        success: boolean;
+        error?: string;
+    }>;
+    listTriggers(_identity: InvectIdentity | null, flowId: string): Promise<unknown[]>;
+    getTrigger(_identity: InvectIdentity | null, triggerId: string): Promise<unknown>;
+    createTrigger(_identity: InvectIdentity | null, input: unknown): Promise<unknown>;
+    updateTrigger(_identity: InvectIdentity | null, triggerId: string, input: unknown): Promise<unknown>;
+    deleteTrigger(_identity: InvectIdentity | null, triggerId: string): Promise<void>;
+    listProviders(_identity: InvectIdentity | null): Promise<Record<string, unknown>[]>;
+    listAvailableNodes(_identity: InvectIdentity | null): Promise<unknown[]>;
+}
+//# sourceMappingURL=http-client.d.ts.map

package/dist/backend/client/http-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../../../src/backend/client/http-client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE/D,qBAAa,UAAW,YAAW,YAAY;IAC7C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;gBAEX,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;YAM7B,OAAO;IAyBrB,kDAAkD;IAC5C,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAM5B,SAAS,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI;IAI1C,OAAO,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;IAIxD,iBAAiB,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;IAIlE,UAAU,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAIzF,UAAU,CACd,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAKzC,UAAU,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;IAI3D,YAAY,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO;eACnD,OAAO;iBAAW,MAAM,EAAE;;IAQzD,YAAY,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;IAI7D,UAAU,CACd,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ;IAQ/B,cAAc,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;IAM9E,QAAQ,CACZ,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAS5B,SAAS,CACb,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAS5B,QAAQ,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;IAIzD,MAAM,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;IAI1D,SAAS,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;iBAC5B,MAAM;;IAMvC,QAAQ,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;iBAC3B,MAAM;;IAMvC,SAAS,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;iBAC5B,MAAM;;IAQvC,iBAAiB,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;IAQrE,QAAQ,CACZ,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;iBAEE,OAAO;iBAAW,OAAO;gBAAU,MAAM;;IAO1E,gBAAgB,CACpB,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;iBAEK,OAAO;iBAAW,OAAO;gBAAU,MAAM;;IAO1E,UAAU,CACd,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;iBAEA,OAAO;iBAAW,OAAO;gBAAU,MAAM;;IAS1E,eAAe,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAa/E,cAAc,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,YAAY,EAAE,MAAM;iBACpC,OAAO;gBAAU,MAAM;;IAQxD,YAAY,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM;IAI7D,UAAU,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;IAI9D,aAAa,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO;IAM9D,aAAa,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;IAIjF,aAAa,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM;IAMjE,aAAa,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI;IAc9C,kBAAkB,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI;CAG1D"}

package/dist/backend/client/types.d.ts

@@ -0,0 +1,83 @@
+/**
+ * InvectClient — abstraction over Invect API access.
+ *
+ * Both DirectClient (plugin mode) and HttpClient (CLI mode) implement this
+ * interface so tool handlers remain transport-agnostic.
+ *
+ * Return types are intentionally `unknown` for most operations since the
+ * MCP layer JSON-stringifies everything. This avoids mapping internal
+ * types to a duplicated schema.
+ */
+import type { InvectIdentity } from '@invect/core';
+/** Sanitized credential (no secrets) */
+export interface CredentialSummary {
+    id: string;
+    name: string;
+    type: string;
+    provider?: string;
+    lastUsedAt?: string;
+    createdAt?: string;
+}
+export interface InvectClient {
+    listFlows(identity: InvectIdentity | null): Promise<unknown>;
+    getFlow(identity: InvectIdentity | null, flowId: string): Promise<unknown>;
+    getFlowDefinition(identity: InvectIdentity | null, flowId: string): Promise<unknown>;
+    createFlow(identity: InvectIdentity | null, data: {
+        name: string;
+        description?: string;
+    }): Promise<unknown>;
+    updateFlow(identity: InvectIdentity | null, flowId: string, data: {
+        name?: string;
+        description?: string;
+    }): Promise<unknown>;
+    deleteFlow(identity: InvectIdentity | null, flowId: string): Promise<void>;
+    validateFlow(identity: InvectIdentity | null, flowId: string, definition: unknown): Promise<{
+        valid: boolean;
+        errors?: string[];
+    }>;
+    listVersions(identity: InvectIdentity | null, flowId: string): Promise<unknown>;
+    getVersion(identity: InvectIdentity | null, flowId: string, version: string | number | 'latest'): Promise<unknown>;
+    publishVersion(identity: InvectIdentity | null, flowId: string, data: unknown): Promise<unknown>;
+    startRun(identity: InvectIdentity | null, flowId: string, inputs?: Record<string, unknown>): Promise<unknown>;
+    runToNode(identity: InvectIdentity | null, flowId: string, nodeId: string, inputs?: Record<string, unknown>): Promise<unknown>;
+    listRuns(identity: InvectIdentity | null, flowId: string): Promise<unknown>;
+    getRun(identity: InvectIdentity | null, flowRunId: string): Promise<unknown>;
+    cancelRun(identity: InvectIdentity | null, flowRunId: string): Promise<{
+        message: string;
+    }>;
+    pauseRun(identity: InvectIdentity | null, flowRunId: string): Promise<{
+        message: string;
+    }>;
+    resumeRun(identity: InvectIdentity | null, flowRunId: string): Promise<{
+        message: string;
+    }>;
+    getNodeExecutions(identity: InvectIdentity | null, flowRunId: string): Promise<unknown[]>;
+    testNode(identity: InvectIdentity | null, nodeType: string, params: Record<string, unknown>, inputData?: Record<string, unknown>): Promise<{
+        success: boolean;
+        output?: unknown;
+        error?: string;
+    }>;
+    testJsExpression(identity: InvectIdentity | null, expression: string, context: Record<string, unknown>): Promise<{
+        success: boolean;
+        result?: unknown;
+        error?: string;
+    }>;
+    testMapper(identity: InvectIdentity | null, expression: string, incomingData: Record<string, unknown>): Promise<{
+        success: boolean;
+        result?: unknown;
+        error?: string;
+    }>;
+    listCredentials(identity: InvectIdentity | null): Promise<CredentialSummary[]>;
+    testCredential(identity: InvectIdentity | null, credentialId: string): Promise<{
+        success: boolean;
+        error?: string;
+    }>;
+    listTriggers(identity: InvectIdentity | null, flowId: string): Promise<unknown[]>;
+    getTrigger(identity: InvectIdentity | null, triggerId: string): Promise<unknown>;
+    createTrigger(identity: InvectIdentity | null, input: unknown): Promise<unknown>;
+    updateTrigger(identity: InvectIdentity | null, triggerId: string, input: unknown): Promise<unknown>;
+    deleteTrigger(identity: InvectIdentity | null, triggerId: string): Promise<void>;
+    listProviders(identity: InvectIdentity | null): Promise<unknown[]>;
+    listAvailableNodes(identity: InvectIdentity | null): Promise<unknown[]>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/backend/client/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/backend/client/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,wCAAwC;AACxC,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAE3B,SAAS,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,iBAAiB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,UAAU,CACR,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,UAAU,CACR,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5C,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,UAAU,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,YAAY,CACV,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,OAAO,GAClB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAGlD,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF,UAAU,CACR,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAClC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,cAAc,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAGjG,QAAQ,CACN,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,SAAS,CACP,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,MAAM,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7E,SAAS,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5F,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F,SAAS,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAG5F,iBAAiB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1F,QAAQ,CACN,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,gBAAgB,CACd,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,UAAU,CACR,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAGnE,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC/E,cAAc,CACZ,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAGjD,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,UAAU,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjF,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjF,aAAa,CACX,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGjF,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,kBAAkB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;CACzE"}