@minicor/mcp-server 2.0.4 → 2.0.5

package/README.md

@@ -106,6 +106,28 @@ Use the `get_lds_setup_guide` tool for detailed step-by-step instructions.
 | `test_workflow_step`                                       | Run a single step in isolation                      |
 | `preview_flow_changes` / `compare_flow_versions`           | Diff code before deploying                          |
 
+### 2FA / OTP
+
+| Tool                  | What it does                                                         |
+| --------------------- | -------------------------------------------------------------------- |
+| `tfa_provision_phone` | Buy a Twilio phone number for the workspace (SMS webhook auto-configured) |
+| `tfa_provision_email` | Generate a Mailgun email address for OTP capture                     |
+| `tfa_list_channels`   | List all provisioned phone numbers and email addresses               |
+| `tfa_delete_channel`  | Remove a channel (releases Twilio number if phone)                   |
+| `tfa_register_secret` | Store a TOTP secret (base32 or otpauth:// URI), encrypted at rest    |
+| `tfa_list_secrets`    | List stored TOTP secrets for the workspace                           |
+| `tfa_delete_secret`   | Remove a stored TOTP secret                                         |
+| `tfa_generate_totp`   | Get the current 6-digit TOTP code + seconds until expiry             |
+| `tfa_verify_totp`     | Verify a TOTP code against a stored secret                           |
+| `tfa_parse_qr`        | Parse a QR code image to extract TOTP parameters                     |
+| `tfa_request_sms_otp` | Wait for an SMS OTP (blocks until SMS arrives or timeout)            |
+| `tfa_request_email_otp` | Wait for an email OTP (blocks until email arrives or timeout)      |
+| `tfa_get_challenge`   | Check the status of a pending challenge                              |
+| `tfa_resolve_challenge` | Manually resolve a challenge (for captchas or Slack-provided codes)|
+| `tfa_cancel_challenge`| Cancel a pending challenge                                           |
+
+Workflows that encounter 2FA prompts use these tools to auto-resolve OTP challenges. Provision channels once per workspace, store the IDs in config stores, and reference them with `{{config.sms_channel_id}}` or `{{config.totp_secret_id}}` at runtime.
+
 ### Config Stores
 
 | Tool                                                | What it does                                        |
@@ -132,6 +154,7 @@ Scripts reference credentials as `{{config.propertyKey}}` — resolved at runtim
 | `build-rpa-workflow`       | Guided automation building: strategy selection, iterative build loop, Minicor testing, deployment |
 | `debug-workflow-execution` | Analyze a failed execution with VM-aware debugging and replay                                     |
 | `minicor-workflow-guide`   | Full workflow specification: step types, data access, keywords, libraries                         |
+| `2fa-workflow-guide`       | Handling 2FA in workflows: provisioning channels, TOTP secrets, auto-resolving OTP codes          |
 
 ## Auth
 

package/dist/__tests__/tfa-client.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tfa-client.test.d.ts.map

package/dist/__tests__/tfa-client.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tfa-client.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/tfa-client.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/tfa-client.test.js

@@ -0,0 +1,191 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+import * as tfa from "../tfa-client.js";
+describe("getTfaBaseUrl", () => {
+    const original = process.env.TFA_OTP_URL;
+    afterEach(() => {
+        if (original !== undefined) {
+            process.env.TFA_OTP_URL = original;
+        }
+        else {
+            delete process.env.TFA_OTP_URL;
+        }
+    });
+    it("returns default when env var is unset", () => {
+        delete process.env.TFA_OTP_URL;
+        expect(tfa.getTfaBaseUrl()).toBe("https://tfa-otp.minicor.com");
+    });
+    it("returns env var when set", () => {
+        process.env.TFA_OTP_URL = "http://localhost:3847";
+        expect(tfa.getTfaBaseUrl()).toBe("http://localhost:3847");
+    });
+});
+describe("tfa-client HTTP calls", () => {
+    const BASE = "https://tfa-otp.minicor.com";
+    const API_KEY = "test-key-123";
+    beforeEach(() => {
+        vi.stubGlobal("fetch", vi.fn());
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    function mockFetch(status, body) {
+        fetch.mockResolvedValue({
+            ok: status >= 200 && status < 300,
+            status,
+            json: () => Promise.resolve(body),
+            text: () => Promise.resolve(JSON.stringify(body)),
+            headers: new Headers({ "content-type": "application/json" }),
+        });
+    }
+    function lastFetchCall() {
+        const calls = fetch.mock.calls;
+        return { url: calls[0][0], init: calls[0][1] };
+    }
+    // ── Channels ──
+    it("provisionPhone calls POST /channels/phone with API key header", async () => {
+        mockFetch(201, { id: "ch_123", address: "+15551234567" });
+        const result = await tfa.provisionPhone(BASE, API_KEY);
+        const { url, init } = lastFetchCall();
+        expect(url).toBe(`${BASE}/channels/phone`);
+        expect(init.method).toBe("POST");
+        expect(init.headers["X-API-Key"]).toBe(API_KEY);
+        expect(result).toEqual({ id: "ch_123", address: "+15551234567" });
+    });
+    it("provisionEmail calls POST /channels/email", async () => {
+        mockFetch(201, { id: "ch_456", address: "rpa-abc@otp.minicor.com" });
+        await tfa.provisionEmail(BASE, API_KEY);
+        const { url, init } = lastFetchCall();
+        expect(url).toBe(`${BASE}/channels/email`);
+        expect(init.method).toBe("POST");
+    });
+    it("listChannels calls GET /channels with optional type filter", async () => {
+        mockFetch(200, []);
+        await tfa.listChannels(BASE, API_KEY, { type: "phone" });
+        const { url } = lastFetchCall();
+        expect(url).toBe(`${BASE}/channels?type=phone`);
+    });
+    it("listChannels omits query string when no filter", async () => {
+        mockFetch(200, []);
+        await tfa.listChannels(BASE, API_KEY);
+        const { url } = lastFetchCall();
+        expect(url).toBe(`${BASE}/channels`);
+    });
+    it("deleteChannel calls DELETE /channels/:id", async () => {
+        fetch.mockResolvedValue({
+            ok: true,
+            status: 204,
+            json: () => Promise.resolve(undefined),
+            text: () => Promise.resolve(""),
+            headers: new Headers(),
+        });
+        await tfa.deleteChannel(BASE, API_KEY, "ch_123");
+        const { url, init } = lastFetchCall();
+        expect(url).toBe(`${BASE}/channels/ch_123`);
+        expect(init.method).toBe("DELETE");
+    });
+    // ── Secrets ──
+    it("createSecret sends TOTP secret data", async () => {
+        mockFetch(201, { id: "sec_123" });
+        await tfa.createSecret(BASE, API_KEY, {
+            type: "totp",
+            name: "Acme",
+            value: "JBSWY3DPEHPK3PXP",
+            site: "acme.com",
+        });
+        const { url, init } = lastFetchCall();
+        expect(url).toBe(`${BASE}/secrets`);
+        expect(init.method).toBe("POST");
+        const body = JSON.parse(init.body);
+        expect(body.type).toBe("totp");
+        expect(body.name).toBe("Acme");
+        expect(body.value).toBe("JBSWY3DPEHPK3PXP");
+    });
+    it("createSecret supports otpauth URI", async () => {
+        mockFetch(201, { id: "sec_456" });
+        await tfa.createSecret(BASE, API_KEY, {
+            type: "totp",
+            name: "Acme",
+            uri: "otpauth://totp/Acme:user@example.com?secret=JBSWY3DPEHPK3PXP",
+        });
+        const body = JSON.parse(lastFetchCall().init.body);
+        expect(body.uri).toContain("otpauth://");
+        expect(body.value).toBeUndefined();
+    });
+    it("listSecrets with site filter", async () => {
+        mockFetch(200, []);
+        await tfa.listSecrets(BASE, API_KEY, { site: "acme.com" });
+        expect(lastFetchCall().url).toBe(`${BASE}/secrets?site=acme.com`);
+    });
+    it("generateTotp calls POST /secrets/:id/generate", async () => {
+        mockFetch(200, { code: "482901", expiresIn: 14 });
+        const result = await tfa.generateTotp(BASE, API_KEY, "sec_123");
+        expect(lastFetchCall().url).toBe(`${BASE}/secrets/sec_123/generate`);
+        expect(result).toEqual({ code: "482901", expiresIn: 14 });
+    });
+    it("verifyTotp sends code in body", async () => {
+        mockFetch(200, { valid: true, delta: 0 });
+        await tfa.verifyTotp(BASE, API_KEY, "sec_123", "482901");
+        const { url, init } = lastFetchCall();
+        expect(url).toBe(`${BASE}/secrets/sec_123/verify`);
+        expect(JSON.parse(init.body)).toEqual({ code: "482901" });
+    });
+    it("parseQr sends imageUrl", async () => {
+        mockFetch(200, { uri: "otpauth://totp/...", secretPreview: "****PXP" });
+        await tfa.parseQr(BASE, API_KEY, { imageUrl: "https://example.com/qr.png" });
+        const body = JSON.parse(lastFetchCall().init.body);
+        expect(body.imageUrl).toBe("https://example.com/qr.png");
+    });
+    // ── Challenges ──
+    it("requestSmsOtp sends channelId and timeout", async () => {
+        mockFetch(200, { status: "resolved", resolution: { value: "123456" } });
+        await tfa.requestSmsOtp(BASE, API_KEY, {
+            channelId: "ch_phone1",
+            timeoutSeconds: 60,
+        });
+        const body = JSON.parse(lastFetchCall().init.body);
+        expect(body.channelId).toBe("ch_phone1");
+        expect(body.timeoutSeconds).toBe(60);
+    });
+    it("requestEmailOtp hits /challenges/email-otp", async () => {
+        mockFetch(200, { status: "resolved" });
+        await tfa.requestEmailOtp(BASE, API_KEY, { channelId: "ch_email1" });
+        expect(lastFetchCall().url).toBe(`${BASE}/challenges/email-otp`);
+    });
+    it("getChallenge hits GET /challenges/:id", async () => {
+        mockFetch(200, { id: "chal_1", status: "pending" });
+        await tfa.getChallenge(BASE, API_KEY, "chal_1");
+        expect(lastFetchCall().url).toBe(`${BASE}/challenges/chal_1`);
+    });
+    it("resolveChallenge sends value and resolvedBy", async () => {
+        mockFetch(200, { status: "resolved" });
+        await tfa.resolveChallenge(BASE, API_KEY, "chal_1", {
+            value: "xK9mP2",
+            resolvedBy: "manual",
+        });
+        const { url, init } = lastFetchCall();
+        expect(url).toBe(`${BASE}/challenges/chal_1/resolve`);
+        expect(JSON.parse(init.body)).toEqual({
+            value: "xK9mP2",
+            resolvedBy: "manual",
+        });
+    });
+    it("cancelChallenge calls DELETE /challenges/:id", async () => {
+        mockFetch(200, { status: "cancelled" });
+        await tfa.cancelChallenge(BASE, API_KEY, "chal_1");
+        const { url, init } = lastFetchCall();
+        expect(url).toBe(`${BASE}/challenges/chal_1`);
+        expect(init.method).toBe("DELETE");
+    });
+    // ── Error handling ──
+    it("throws on non-ok response with status and body", async () => {
+        mockFetch(404, { error: "Not found" });
+        await expect(tfa.getChallenge(BASE, API_KEY, "bad_id")).rejects.toThrow(/2FA API.*404/);
+    });
+    // ── URL normalization ──
+    it("strips trailing slashes from base URL", async () => {
+        mockFetch(200, []);
+        await tfa.listChannels("https://example.com///", API_KEY);
+        expect(lastFetchCall().url).toBe("https://example.com/channels");
+    });
+});
+//# sourceMappingURL=tfa-client.test.js.map

package/dist/__tests__/tfa-client.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tfa-client.test.js","sourceRoot":"","sources":["../../src/__tests__/tfa-client.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,GAAG,MAAM,kBAAkB,CAAC;AAExC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAEzC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,uBAAuB,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,IAAI,GAAG,6BAA6B,CAAC;IAC3C,MAAM,OAAO,GAAG,cAAc,CAAC;IAE/B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,SAAS,CAAC,MAAc,EAAE,IAAa;QAC7C,KAAkC,CAAC,iBAAiB,CAAC;YACpD,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;YACjC,MAAM;YACN,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,SAAS,aAAa;QACpB,MAAM,KAAK,GAAI,KAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7D,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAgB,EAAE,CAAC;IAC1E,CAAC;IAED,iBAAiB;IAEjB,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAE,IAAI,CAAC,OAAkC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnB,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnB,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACvD,KAAkC,CAAC,iBAAiB,CAAC;YACpD,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YACtC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,OAAO,EAAE;SACvB,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,gBAAgB;IAEhB,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAClC,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE;YACpC,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAClC,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE;YACpC,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,8DAA8D;SACpE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnB,MAAM,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAChE,MAAM,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,2BAA2B,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,mBAAmB;IAEnB,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE;YACrC,SAAS,EAAE,WAAW;YACtB,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;YAClD,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9C,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACxC,MAAM,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,uBAAuB;IAEvB,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACvC,MAAM,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACrE,cAAc,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAE1B,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnB,MAAM,GAAG,CAAC,YAAY,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;GAKG;AA0DH,wBAAgB,UAAU,IAAI,MAAM,CAKnC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;GAKG;AA4DH,wBAAgB,UAAU,IAAI,MAAM,CAKnC"}

package/dist/index.js

@@ -17,9 +17,11 @@ import { register as registerConfigStores } from "./tools/config-stores.js";
 import { register as registerSyncTools } from "./tools/sync-tools.js";
 import { register as registerVm } from "./tools/vm.js";
 import { register as registerVmRpa } from "./tools/vm-rpa.js";
+import { register as registerTfa } from "./tools/tfa.js";
 import { register as registerWorkflowGuide } from "./prompts/workflow-guide.js";
 import { register as registerDebugExecution } from "./prompts/debug-execution.js";
 import { register as registerBuildRpa } from "./prompts/build-rpa.js";
+import { register as registerTfaGuide } from "./prompts/tfa-guide.js";
 // ─── Token management ────────────────────────────────────────
 const REFRESH_BUFFER_MS = 5 * 60 * 1000;
 function readStoredTokens() {
@@ -152,9 +154,11 @@ function registerAll() {
     registerSyncTools(deps);
     registerVm(deps);
     registerVmRpa(deps);
+    registerTfa(deps);
     registerWorkflowGuide(deps);
     registerDebugExecution(deps);
     registerBuildRpa(deps);
+    registerTfaGuide(deps);
 }
 // ─── Main ────────────────────────────────────────────────────
 async function main() {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAoB,MAAM,qBAAqB,CAAC;AACtE,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,eAAe,GAEhB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,EAAE,QAAQ,IAAI,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAEtE,gEAAgE;AAEhE,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAUxC,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB;IAC7C,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAClE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,MAAM,EAAE,MAAM;QAAE,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,MAAM,EAAE,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAC7C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,YAAoB;IAEpB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,eAAe,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;QACF,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,YAAY;YACjD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;YAC/C,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC;SAC9B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAEjD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,iBAAiB,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,SAAS,EAAE,CAAC;YACd,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,OAAO,SAAS,CAAC,YAAY,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAK,CACX,wFAAwF,CACzF,CAAC;IACF,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC;AAED,gEAAgE;AAEhE,KAAK,UAAU,WAAW;IACxB,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gEAAgE;AAEhE,IAAI,MAAqB,CAAC;AAE1B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,SAAS,oBAAoB;IAC3B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,aAAa;QAAE,OAAO;IAEnC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAC7B,MAAM,CAAC,UAAU,GAAG,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,EAClD,MAAM,CACP,CAAC;IAEF,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;YACpC,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,oBAAoB,EAAE,CAAC;IACzB,CAAC,EAAE,cAAc,CAAC,CAAC;AACrB,CAAC;AAED,gEAAgE;AAEhE,SAAS,uBAAuB;IAC9B,MAAM,CAAC,IAAI,CACT,eAAe,EACf,2FAA2F,EAC3F,EAAE,EACF,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EACF,yDAAyD;oBACzD,sEAAsE;oBACtE,kFAAkF;oBAClF,iEAAiE;oBACjE,+EAA+E;aAClF;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,gEAAgE;AAEhE,SAAS,WAAW;IAClB,MAAM,IAAI,GAAa;QACrB,MAAM;QACN,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM;QACpB,UAAU;KACX,CAAC;IAEF,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxB,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,aAAa,CAAC,IAAI,CAAC,CAAC;IAEpB,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5B,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7B,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,gEAAgE;AAEhE,KAAK,UAAU,IAAI;IACjB,MAAM,UAAU,GAAG,MAAM,WAAW,EAAE,CAAC;IAEvC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjE,uBAAuB,EAAE,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAChE,oBAAoB,EAAE,CAAC;QACvB,WAAW,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CACX,UAAU;QACR,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC,mFAAmF,CACxF,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAoB,MAAM,qBAAqB,CAAC;AACtE,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,eAAe,GAEhB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,EAAE,QAAQ,IAAI,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAEtE,gEAAgE;AAEhE,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAUxC,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB;IAC7C,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAClE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,MAAM,EAAE,MAAM;QAAE,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,MAAM,EAAE,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAC7C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,YAAoB;IAEpB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,eAAe,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;QACF,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,YAAY;YACjD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;YAC/C,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC;SAC9B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAEjD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,iBAAiB,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,SAAS,EAAE,CAAC;YACd,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClC,OAAO,SAAS,CAAC,YAAY,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAK,CACX,wFAAwF,CACzF,CAAC;IACF,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC;AAED,gEAAgE;AAEhE,KAAK,UAAU,WAAW;IACxB,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gEAAgE;AAEhE,IAAI,MAAqB,CAAC;AAE1B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,SAAS,oBAAoB;IAC3B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,aAAa;QAAE,OAAO;IAEnC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAC7B,MAAM,CAAC,UAAU,GAAG,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,EAClD,MAAM,CACP,CAAC;IAEF,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;YACpC,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,oBAAoB,EAAE,CAAC;IACzB,CAAC,EAAE,cAAc,CAAC,CAAC;AACrB,CAAC;AAED,gEAAgE;AAEhE,SAAS,uBAAuB;IAC9B,MAAM,CAAC,IAAI,CACT,eAAe,EACf,2FAA2F,EAC3F,EAAE,EACF,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EACF,yDAAyD;oBACzD,sEAAsE;oBACtE,kFAAkF;oBAClF,iEAAiE;oBACjE,+EAA+E;aAClF;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,gEAAgE;AAEhE,SAAS,WAAW;IAClB,MAAM,IAAI,GAAa;QACrB,MAAM;QACN,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM;QACpB,UAAU;KACX,CAAC;IAEF,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxB,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,aAAa,CAAC,IAAI,CAAC,CAAC;IACpB,WAAW,CAAC,IAAI,CAAC,CAAC;IAElB,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5B,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7B,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvB,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,gEAAgE;AAEhE,KAAK,UAAU,IAAI;IACjB,MAAM,UAAU,GAAG,MAAM,WAAW,EAAE,CAAC;IAEvC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjE,uBAAuB,EAAE,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAChE,oBAAoB,EAAE,CAAC;QACvB,WAAW,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CACX,UAAU;QACR,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC,mFAAmF,CACxF,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/prompts/tfa-guide.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDeps } from "../types.js";
+export declare function register({ server }: ToolDeps): void;
+//# sourceMappingURL=tfa-guide.d.ts.map

package/dist/prompts/tfa-guide.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tfa-guide.d.ts","sourceRoot":"","sources":["../../src/prompts/tfa-guide.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,wBAAgB,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,QAsL5C"}

package/dist/prompts/tfa-guide.js

@@ -0,0 +1,178 @@
+import { z } from "zod";
+export function register({ server }) {
+    server.prompt("2fa-workflow-guide", "Guide for handling 2FA/OTP challenges in RPA workflows — provisioning phone numbers and email addresses, registering TOTP secrets, and auto-resolving OTP codes during automation runs.", {
+        workspaceId: z.string().describe("Minicor workspace ID"),
+        scenario: z
+            .string()
+            .optional()
+            .describe("Specific 2FA scenario (e.g. 'site sends SMS OTP on login', 'TOTP authenticator app required', 'email verification code')"),
+    }, async ({ workspaceId, scenario }) => ({
+        messages: [
+            {
+                role: "user",
+                content: {
+                    type: "text",
+                    text: `You are setting up 2FA/OTP handling for an RPA workflow on the Minicor platform.
+
+## Workspace
+ID: ${workspaceId}${scenario ? `\n\n## Scenario\n${scenario}` : ""}
+
+## Overview
+
+The \`tfa_*\` tools let you provision phone numbers and email addresses, store TOTP secrets, and automatically resolve 2FA challenges during RPA workflow execution. All data is scoped to the workspace.
+
+## Available Tools
+
+### Channel Provisioning
+| Tool | Purpose |
+|------|---------|
+| \`tfa_provision_phone\` | Buy a Twilio phone number — SMS webhook is auto-configured |
+| \`tfa_provision_email\` | Generate a Mailgun email address for OTP capture |
+| \`tfa_list_channels\` | List all provisioned phone numbers and email addresses |
+| \`tfa_delete_channel\` | Remove a channel (releases Twilio number if phone) |
+
+### TOTP Secrets
+| Tool | Purpose |
+|------|---------|
+| \`tfa_register_secret\` | Store a TOTP secret (base32 or otpauth:// URI), encrypted at rest |
+| \`tfa_list_secrets\` | List stored secrets for the workspace |
+| \`tfa_delete_secret\` | Remove a stored secret |
+| \`tfa_generate_totp\` | Get the current 6-digit code + seconds until expiry |
+| \`tfa_verify_totp\` | Verify a code against a stored secret |
+| \`tfa_parse_qr\` | Decode a QR code image to extract TOTP params |
+
+### OTP Challenge Resolution
+| Tool | Purpose |
+|------|---------|
+| \`tfa_request_sms_otp\` | Wait for an SMS OTP (blocks until it arrives or times out) |
+| \`tfa_request_email_otp\` | Wait for an email OTP (blocks until it arrives or times out) |
+| \`tfa_get_challenge\` | Check the status of a pending challenge |
+| \`tfa_resolve_challenge\` | Manually resolve (for captchas or Slack-provided codes) |
+| \`tfa_cancel_challenge\` | Cancel a pending challenge |
+
+## Workflow Patterns
+
+### Pattern 1 — TOTP Authenticator App
+
+When a site requires a 6-digit authenticator code:
+
+1. **One-time setup:** Register the TOTP secret
+   - If you have the base32 secret: \`tfa_register_secret\` with \`value\`
+   - If you have a QR code: \`tfa_parse_qr\` → \`tfa_register_secret\` with extracted params
+   - If you have an otpauth:// URI: \`tfa_register_secret\` with \`uri\`
+
+2. **During workflow execution:** Generate the code on demand
+   - Call \`tfa_generate_totp\` with the \`secretId\`
+   - Returns \`{ code: "482901", expiresIn: 14 }\`
+   - If \`expiresIn\` is < 5 seconds, wait and call again for a fresh code
+   - Type the code into the 2FA input field
+
+**Example RPA flow integration:**
+\`\`\`
+Step 1: Navigate to login page, enter credentials, submit
+Step 2: Site shows "Enter authenticator code"
+  → Call tfa_generate_totp(secretId)
+  → Type the code into the input
+  → Submit
+Step 3: Continue with authenticated session
+\`\`\`
+
+### Pattern 2 — SMS OTP
+
+When a site sends a verification code via SMS:
+
+1. **One-time setup:** Provision a phone number
+   - \`tfa_provision_phone\` → returns \`{ id: "ch_xxx", address: "+1XXXXXXXXXX" }\`
+   - Register this phone number with the target site
+
+2. **During workflow execution:**
+   - Trigger the SMS send (click "Send code", etc.)
+   - Immediately call \`tfa_request_sms_otp\` with the \`channelId\`
+   - The call blocks until the SMS arrives (up to \`timeoutSeconds\`)
+   - Returns the parsed OTP code
+   - Type it into the verification field
+
+**Timing matters:** Call \`tfa_request_sms_otp\` AFTER triggering the SMS send but BEFORE the code expires. The tool creates a challenge and waits for the SMS webhook to resolve it.
+
+### Pattern 3 — Email OTP
+
+Same flow as SMS but with email:
+
+1. **One-time setup:** \`tfa_provision_email\` → \`rpa-xxxx@otp.minicor.com\`
+2. Register this email address with the target site
+3. **During execution:** Trigger email → \`tfa_request_email_otp\` → type code
+
+### Pattern 4 — QR Code Enrollment (Automated TOTP Setup)
+
+When setting up 2FA on a new account and the site shows a QR code:
+
+1. Take a screenshot of the QR code (\`vm_screenshot\` or \`vm_screenshot_region\`)
+2. Call \`tfa_parse_qr\` with the screenshot (base64 or URL)
+3. Call \`tfa_register_secret\` with the extracted \`uri\`
+4. Call \`tfa_generate_totp\` to get the first code
+5. Enter the code to verify and complete enrollment
+
+### Pattern 5 — Manual/Captcha Fallback
+
+For captchas or cases where auto-parsing fails:
+
+1. The 2FA service posts to Slack (if configured) with a screenshot
+2. A human replies in the Slack thread with the solution
+3. Or call \`tfa_resolve_challenge\` directly with the value
+
+## Integration with RPA Workflows
+
+### Storing the Secret/Channel ID in Config Stores
+
+After provisioning, store the IDs in a config store so workflows can reference them:
+
+\`\`\`
+1. tfa_provision_phone → get channelId "ch_abc123"
+2. update_config_property on the workflow's config store:
+   key: "sms_channel_id", value: "ch_abc123"
+3. In the workflow JS wrapper, reference {{config.sms_channel_id}}
+\`\`\`
+
+Similarly for TOTP secrets:
+\`\`\`
+1. tfa_register_secret → get secretId "sec_xyz789"
+2. update_config_property: key: "totp_secret_id", value: "sec_xyz789"
+3. Reference {{config.totp_secret_id}} in the workflow
+\`\`\`
+
+### 2FA Step in a Workflow
+
+A typical 2FA step is an HTTP_REQUEST flow that calls the 2FA service directly:
+
+\`\`\`javascript
+(data) => {
+  return {
+    "lam.httpRequest": {
+      "method": "POST",
+      "url": "https://tfa-otp.minicor.com/secrets/{{config.totp_secret_id}}/generate",
+      "headers": {
+        "X-API-Key": "{{config.workspace_api_key}}",
+        "Content-Type": "application/json"
+      }
+    }
+  };
+}
+\`\`\`
+
+The next step can then read the code from \`data.step_N.response.code\` and use it in the RPA script.
+
+## Best Practices
+
+- **Provision channels once, reuse forever.** Don't buy a new phone number for every workflow — use \`tfa_list_channels\` to find existing ones.
+- **Store IDs in config stores.** This keeps workflow definitions portable and avoids hardcoding.
+- **Check \`expiresIn\` for TOTP.** If less than 5 seconds remain, wait for the next code cycle.
+- **Set reasonable timeouts** for SMS/email OTP. Default is 120s. Increase for sites that are slow to send.
+- **Delete unused channels** to avoid recurring costs — \`tfa_delete_channel\` releases the Twilio number.
+- **One phone/email per site** unless the site requires unique numbers per account.
+- **Use \`tfa_verify_totp\`** during setup to confirm the secret was registered correctly before relying on it in production workflows.`,
+                },
+            },
+        ],
+    }));
+}
+//# sourceMappingURL=tfa-guide.js.map

package/dist/prompts/tfa-guide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tfa-guide.js","sourceRoot":"","sources":["../../src/prompts/tfa-guide.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,QAAQ,CAAC,EAAE,MAAM,EAAY;IAC3C,MAAM,CAAC,MAAM,CACX,oBAAoB,EACpB,yLAAyL,EACzL;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACxD,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,0HAA0H,CAC3H;KACJ,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;;;MAGZ,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wIA0JsE;iBAC7H;aACF;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/tfa-client.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Stateless HTTP client for the 2FA OTP service.
+ *
+ * Every method receives the base URL and workspace API key so the caller
+ * (tool handler) can resolve them from session/cache.
+ */
+export declare function getTfaBaseUrl(): string;
+export declare function provisionPhone(baseUrl: string, apiKey: string): Promise<unknown>;
+export declare function provisionEmail(baseUrl: string, apiKey: string): Promise<unknown>;
+export declare function listChannels(baseUrl: string, apiKey: string, opts?: {
+    type?: string;
+}): Promise<unknown>;
+export declare function deleteChannel(baseUrl: string, apiKey: string, channelId: string): Promise<void>;
+export declare function createSecret(baseUrl: string, apiKey: string, data: {
+    type: "totp";
+    name: string;
+    site?: string;
+    value?: string;
+    uri?: string;
+}): Promise<unknown>;
+export declare function listSecrets(baseUrl: string, apiKey: string, opts?: {
+    site?: string;
+}): Promise<unknown>;
+export declare function deleteSecret(baseUrl: string, apiKey: string, secretId: string): Promise<void>;
+export declare function generateTotp(baseUrl: string, apiKey: string, secretId: string): Promise<unknown>;
+export declare function verifyTotp(baseUrl: string, apiKey: string, secretId: string, code: string): Promise<unknown>;
+export declare function parseQr(baseUrl: string, apiKey: string, data: {
+    image?: string;
+    imageUrl?: string;
+}): Promise<unknown>;
+export declare function requestSmsOtp(baseUrl: string, apiKey: string, data: {
+    channelId: string;
+    timeoutSeconds?: number;
+}): Promise<unknown>;
+export declare function requestEmailOtp(baseUrl: string, apiKey: string, data: {
+    channelId: string;
+    timeoutSeconds?: number;
+}): Promise<unknown>;
+export declare function getChallenge(baseUrl: string, apiKey: string, challengeId: string): Promise<unknown>;
+export declare function resolveChallenge(baseUrl: string, apiKey: string, challengeId: string, data: {
+    value: string;
+    resolvedBy?: string;
+}): Promise<unknown>;
+export declare function cancelChallenge(baseUrl: string, apiKey: string, challengeId: string): Promise<unknown>;
+//# sourceMappingURL=tfa-client.d.ts.map

package/dist/tfa-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tfa-client.d.ts","sourceRoot":"","sources":["../src/tfa-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAiCD,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,oBAEnE;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,oBAEnE;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,oBAMzB;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,iBAIrF;AAID,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IACJ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,oBAMF;AAED,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,oBAMzB;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,iBAInF;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,oBAInF;AAED,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,oBAMb;AAED,wBAAsB,OAAO,CAC3B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,oBAM5C;AAID,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,oBAMrD;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,oBAMrD;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,oBAEtF;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,oBAM7C;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,oBAIzF"}

package/dist/tfa-client.js

@@ -0,0 +1,116 @@
+/**
+ * Stateless HTTP client for the 2FA OTP service.
+ *
+ * Every method receives the base URL and workspace API key so the caller
+ * (tool handler) can resolve them from session/cache.
+ */
+const DEFAULT_BASE_URL = "https://tfa-otp.minicor.com";
+export function getTfaBaseUrl() {
+    return process.env.TFA_OTP_URL || DEFAULT_BASE_URL;
+}
+function normalizeUrl(base) {
+    return base.replace(/\/+$/, "");
+}
+async function request(url, apiKey, init) {
+    const res = await fetch(url, {
+        ...init,
+        headers: {
+            "Content-Type": "application/json",
+            "X-API-Key": apiKey,
+            ...init?.headers,
+        },
+    });
+    if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        throw new Error(`2FA API ${init?.method ?? "GET"} ${url} returned ${res.status}: ${body}`);
+    }
+    if (res.status === 204)
+        return undefined;
+    return res.json();
+}
+function url(base, path) {
+    return `${normalizeUrl(base)}${path}`;
+}
+// ── Channels ──────────────────────────────────────────────────
+export async function provisionPhone(baseUrl, apiKey) {
+    return request(url(baseUrl, "/channels/phone"), apiKey, { method: "POST" });
+}
+export async function provisionEmail(baseUrl, apiKey) {
+    return request(url(baseUrl, "/channels/email"), apiKey, { method: "POST" });
+}
+export async function listChannels(baseUrl, apiKey, opts) {
+    const params = new URLSearchParams();
+    if (opts?.type)
+        params.set("type", opts.type);
+    const qs = params.toString();
+    return request(url(baseUrl, `/channels${qs ? `?${qs}` : ""}`), apiKey);
+}
+export async function deleteChannel(baseUrl, apiKey, channelId) {
+    return request(url(baseUrl, `/channels/${channelId}`), apiKey, {
+        method: "DELETE",
+    });
+}
+// ── Secrets ───────────────────────────────────────────────────
+export async function createSecret(baseUrl, apiKey, data) {
+    return request(url(baseUrl, "/secrets"), apiKey, {
+        method: "POST",
+        body: JSON.stringify(data),
+    });
+}
+export async function listSecrets(baseUrl, apiKey, opts) {
+    const params = new URLSearchParams();
+    if (opts?.site)
+        params.set("site", opts.site);
+    const qs = params.toString();
+    return request(url(baseUrl, `/secrets${qs ? `?${qs}` : ""}`), apiKey);
+}
+export async function deleteSecret(baseUrl, apiKey, secretId) {
+    return request(url(baseUrl, `/secrets/${secretId}`), apiKey, {
+        method: "DELETE",
+    });
+}
+export async function generateTotp(baseUrl, apiKey, secretId) {
+    return request(url(baseUrl, `/secrets/${secretId}/generate`), apiKey, {
+        method: "POST",
+    });
+}
+export async function verifyTotp(baseUrl, apiKey, secretId, code) {
+    return request(url(baseUrl, `/secrets/${secretId}/verify`), apiKey, {
+        method: "POST",
+        body: JSON.stringify({ code }),
+    });
+}
+export async function parseQr(baseUrl, apiKey, data) {
+    return request(url(baseUrl, "/secrets/parse-qr"), apiKey, {
+        method: "POST",
+        body: JSON.stringify(data),
+    });
+}
+// ── Challenges ────────────────────────────────────────────────
+export async function requestSmsOtp(baseUrl, apiKey, data) {
+    return request(url(baseUrl, "/challenges/sms-otp"), apiKey, {
+        method: "POST",
+        body: JSON.stringify(data),
+    });
+}
+export async function requestEmailOtp(baseUrl, apiKey, data) {
+    return request(url(baseUrl, "/challenges/email-otp"), apiKey, {
+        method: "POST",
+        body: JSON.stringify(data),
+    });
+}
+export async function getChallenge(baseUrl, apiKey, challengeId) {
+    return request(url(baseUrl, `/challenges/${challengeId}`), apiKey);
+}
+export async function resolveChallenge(baseUrl, apiKey, challengeId, data) {
+    return request(url(baseUrl, `/challenges/${challengeId}/resolve`), apiKey, {
+        method: "POST",
+        body: JSON.stringify(data),
+    });
+}
+export async function cancelChallenge(baseUrl, apiKey, challengeId) {
+    return request(url(baseUrl, `/challenges/${challengeId}`), apiKey, {
+        method: "DELETE",
+    });
+}
+//# sourceMappingURL=tfa-client.js.map

package/dist/tfa-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tfa-client.js","sourceRoot":"","sources":["../src/tfa-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAEvD,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,gBAAgB,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,GAAW,EACX,MAAc,EACd,IAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,GAAG,IAAI;QACP,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,MAAM;YACnB,GAAI,IAAI,EAAE,OAAkC;SAC7C;KACF,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE,MAAM,IAAI,KAAK,IAAI,GAAG,aAAa,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAc,CAAC;IAC9C,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AAClC,CAAC;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY;IACrC,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,MAAc;IAClE,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,MAAc;IAClE,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,MAAc,EACd,IAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,IAAI,EAAE,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,MAAc,EAAE,SAAiB;IACpF,OAAO,OAAO,CAAO,GAAG,CAAC,OAAO,EAAE,aAAa,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE;QACnE,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,MAAc,EACd,IAMC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,MAAc,EACd,IAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,IAAI,EAAE,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,MAAc,EAAE,QAAgB;IAClF,OAAO,OAAO,CAAO,GAAG,CAAC,OAAO,EAAE,YAAY,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE;QACjE,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,MAAc,EAAE,QAAgB;IAClF,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,QAAQ,WAAW,CAAC,EAAE,MAAM,EAAE;QACpE,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAe,EACf,MAAc,EACd,QAAgB,EAChB,IAAY;IAEZ,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,QAAQ,SAAS,CAAC,EAAE,MAAM,EAAE;QAClE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,OAAe,EACf,MAAc,EACd,IAA2C;IAE3C,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,EAAE,MAAM,EAAE;QACxD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,MAAc,EACd,IAAoD;IAEpD,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAAE,MAAM,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,MAAc,EACd,IAAoD;IAEpD,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC,EAAE,MAAM,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,MAAc,EAAE,WAAmB;IACrF,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,MAAc,EACd,WAAmB,EACnB,IAA4C;IAE5C,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,WAAW,UAAU,CAAC,EAAE,MAAM,EAAE;QACzE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,MAAc,EAAE,WAAmB;IACxF,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE;QACjE,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/tfa.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDeps } from "../types.js";
+export declare function register(deps: ToolDeps): void;
+//# sourceMappingURL=tfa.d.ts.map

package/dist/tools/tfa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tfa.d.ts","sourceRoot":"","sources":["../../src/tools/tfa.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AA4C5C,wBAAgB,QAAQ,CAAC,IAAI,EAAE,QAAQ,QAqPtC"}

package/dist/tools/tfa.js

@@ -0,0 +1,146 @@
+import { z } from "zod";
+import { ok, text } from "../helpers.js";
+import * as tfa from "../tfa-client.js";
+// Workspace API key cache: workspaceId → apiKey
+const apiKeyCache = new Map();
+async function resolveApiKey(deps, workspaceId) {
+    const cached = apiKeyCache.get(workspaceId);
+    if (cached)
+        return cached;
+    const keys = await deps.client().listApiKeys(workspaceId);
+    const arr = Array.isArray(keys) ? keys : keys?.data ?? [];
+    const active = arr.find((k) => k.status !== "revoked") ?? arr[0];
+    if (!active?.key) {
+        throw new Error(`No API key found for workspace ${workspaceId}. Create one in the Minicor dashboard first.`);
+    }
+    apiKeyCache.set(workspaceId, active.key);
+    return active.key;
+}
+async function tfaSafe(deps, workspaceId, fn) {
+    try {
+        const apiKey = await resolveApiKey(deps, workspaceId);
+        const baseUrl = tfa.getTfaBaseUrl();
+        const result = await fn(baseUrl, apiKey);
+        if (result === undefined)
+            return text("Done.");
+        return ok(result);
+    }
+    catch (e) {
+        // Clear cache on auth errors so next call re-resolves
+        if (e.message?.includes("401") || e.message?.includes("403")) {
+            apiKeyCache.delete(workspaceId);
+        }
+        return text(`Error: ${e.message}`);
+    }
+}
+export function register(deps) {
+    const { server } = deps;
+    // ── Channels ──────────────────────────────────────────────
+    server.tool("tfa_provision_phone", "Purchase a new Twilio phone number for this workspace. SMS webhook is auto-configured. Use tfa_list_channels to see it afterward.", {
+        workspaceId: z.number().describe("Workspace ID"),
+    }, async ({ workspaceId }) => tfaSafe(deps, workspaceId, (base, key) => tfa.provisionPhone(base, key)));
+    server.tool("tfa_provision_email", "Generate a unique Mailgun email address for this workspace. Emails sent to this address are captured automatically for OTP extraction.", {
+        workspaceId: z.number().describe("Workspace ID"),
+    }, async ({ workspaceId }) => tfaSafe(deps, workspaceId, (base, key) => tfa.provisionEmail(base, key)));
+    server.tool("tfa_list_channels", "List all phone numbers and email addresses registered for this workspace", {
+        workspaceId: z.number().describe("Workspace ID"),
+        type: z
+            .enum(["phone", "email"])
+            .optional()
+            .describe("Filter by channel type"),
+    }, async ({ workspaceId, type }) => tfaSafe(deps, workspaceId, (base, key) => tfa.listChannels(base, key, { type })));
+    server.tool("tfa_delete_channel", "Remove a phone or email channel. If it's a Twilio phone number, the number is released.", {
+        workspaceId: z.number().describe("Workspace ID"),
+        channelId: z.string().describe("Channel ID (e.g. ch_abc123)"),
+    }, async ({ workspaceId, channelId }) => tfaSafe(deps, workspaceId, (base, key) => tfa.deleteChannel(base, key, channelId)));
+    // ── Secrets ───────────────────────────────────────────────
+    server.tool("tfa_register_secret", "Store a TOTP authenticator secret for this workspace. Accepts either a raw base32 secret or an otpauth:// URI. The secret is encrypted at rest.", {
+        workspaceId: z.number().describe("Workspace ID"),
+        name: z.string().describe("Label for this secret (e.g. site name)"),
+        value: z.string().optional().describe("Raw base32 TOTP secret"),
+        uri: z
+            .string()
+            .optional()
+            .describe("otpauth:// URI (alternative to value)"),
+        site: z.string().optional().describe("Site this secret is for"),
+    }, async ({ workspaceId, name, value, uri, site }) => {
+        if (!value && !uri) {
+            return text("Error: Either 'value' (base32) or 'uri' (otpauth://) is required.");
+        }
+        return tfaSafe(deps, workspaceId, (base, key) => tfa.createSecret(base, key, { type: "totp", name, value, uri, site }));
+    });
+    server.tool("tfa_list_secrets", "List all stored TOTP secrets for this workspace", {
+        workspaceId: z.number().describe("Workspace ID"),
+        site: z.string().optional().describe("Filter by site"),
+    }, async ({ workspaceId, site }) => tfaSafe(deps, workspaceId, (base, key) => tfa.listSecrets(base, key, { site })));
+    server.tool("tfa_delete_secret", "Remove a stored TOTP secret", {
+        workspaceId: z.number().describe("Workspace ID"),
+        secretId: z.string().describe("Secret ID (e.g. sec_abc123)"),
+    }, async ({ workspaceId, secretId }) => tfaSafe(deps, workspaceId, (base, key) => tfa.deleteSecret(base, key, secretId)));
+    server.tool("tfa_generate_totp", "Generate the current 6-digit TOTP code for a stored secret. Returns the code and seconds until it expires.", {
+        workspaceId: z.number().describe("Workspace ID"),
+        secretId: z.string().describe("Secret ID (e.g. sec_abc123)"),
+    }, async ({ workspaceId, secretId }) => tfaSafe(deps, workspaceId, (base, key) => tfa.generateTotp(base, key, secretId)));
+    server.tool("tfa_verify_totp", "Verify a TOTP code against a stored secret. Returns whether the code is valid and the time delta.", {
+        workspaceId: z.number().describe("Workspace ID"),
+        secretId: z.string().describe("Secret ID (e.g. sec_abc123)"),
+        code: z.string().describe("6-digit TOTP code to verify"),
+    }, async ({ workspaceId, secretId, code }) => tfaSafe(deps, workspaceId, (base, key) => tfa.verifyTotp(base, key, secretId, code)));
+    server.tool("tfa_parse_qr", "Parse a QR code image (base64 or URL) to extract TOTP parameters like secret, issuer, algorithm. Useful for automated 2FA enrollment.", {
+        workspaceId: z.number().describe("Workspace ID"),
+        image: z
+            .string()
+            .optional()
+            .describe("Base64-encoded QR code image"),
+        imageUrl: z
+            .string()
+            .optional()
+            .describe("URL of the QR code image"),
+    }, async ({ workspaceId, image, imageUrl }) => {
+        if (!image && !imageUrl) {
+            return text("Error: Either 'image' (base64) or 'imageUrl' is required.");
+        }
+        return tfaSafe(deps, workspaceId, (base, key) => tfa.parseQr(base, key, { image, imageUrl }));
+    });
+    // ── Challenges ────────────────────────────────────────────
+    server.tool("tfa_request_sms_otp", "Wait for an SMS OTP code. Creates a challenge and blocks until the SMS arrives via Twilio or the timeout expires. Returns the OTP code.", {
+        workspaceId: z.number().describe("Workspace ID"),
+        channelId: z
+            .string()
+            .describe("Phone channel ID. Use tfa_list_channels to find it."),
+        timeoutSeconds: z
+            .number()
+            .optional()
+            .default(120)
+            .describe("Max seconds to wait (default 120)"),
+    }, async ({ workspaceId, channelId, timeoutSeconds }) => tfaSafe(deps, workspaceId, (base, key) => tfa.requestSmsOtp(base, key, { channelId, timeoutSeconds })));
+    server.tool("tfa_request_email_otp", "Wait for an email OTP code. Creates a challenge and blocks until the email arrives via Mailgun or the timeout expires. Returns the OTP code.", {
+        workspaceId: z.number().describe("Workspace ID"),
+        channelId: z
+            .string()
+            .describe("Email channel ID. Use tfa_list_channels to find it."),
+        timeoutSeconds: z
+            .number()
+            .optional()
+            .default(120)
+            .describe("Max seconds to wait (default 120)"),
+    }, async ({ workspaceId, channelId, timeoutSeconds }) => tfaSafe(deps, workspaceId, (base, key) => tfa.requestEmailOtp(base, key, { channelId, timeoutSeconds })));
+    server.tool("tfa_get_challenge", "Check the status of a pending 2FA challenge", {
+        workspaceId: z.number().describe("Workspace ID"),
+        challengeId: z.string().describe("Challenge ID"),
+    }, async ({ workspaceId, challengeId }) => tfaSafe(deps, workspaceId, (base, key) => tfa.getChallenge(base, key, challengeId)));
+    server.tool("tfa_resolve_challenge", "Manually resolve a 2FA challenge with a value. Use this for captcha solutions or when auto-parsing failed and a human provided the code via Slack.", {
+        workspaceId: z.number().describe("Workspace ID"),
+        challengeId: z.string().describe("Challenge ID"),
+        value: z.string().describe("The OTP code or captcha solution"),
+        resolvedBy: z
+            .string()
+            .optional()
+            .describe("Who resolved it (default: 'manual')"),
+    }, async ({ workspaceId, challengeId, value, resolvedBy }) => tfaSafe(deps, workspaceId, (base, key) => tfa.resolveChallenge(base, key, challengeId, { value, resolvedBy })));
+    server.tool("tfa_cancel_challenge", "Cancel a pending 2FA challenge", {
+        workspaceId: z.number().describe("Workspace ID"),
+        challengeId: z.string().describe("Challenge ID"),
+    }, async ({ workspaceId, challengeId }) => tfaSafe(deps, workspaceId, (base, key) => tfa.cancelChallenge(base, key, challengeId)));
+}
+//# sourceMappingURL=tfa.js.map

package/dist/tools/tfa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tfa.js","sourceRoot":"","sources":["../../src/tools/tfa.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAQ,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,GAAG,MAAM,kBAAkB,CAAC;AAGxC,gDAAgD;AAChD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE9C,KAAK,UAAU,aAAa,CAC1B,IAAc,EACd,WAAmB;IAEnB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAY,EAAE,IAAI,IAAI,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,kCAAkC,WAAW,8CAA8C,CAC5F,CAAC;IACJ,CAAC;IACD,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,GAAG,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,IAAc,EACd,WAAmB,EACnB,EAAmD;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,sDAAsD;QACtD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAc;IACrC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,6DAA6D;IAE7D,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,mIAAmI,EACnI;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;KACjD,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CACxB,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAC9B,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,wIAAwI,EACxI;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;KACjD,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CACxB,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAC9B,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,0EAA0E,EAC1E;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;aACxB,QAAQ,EAAE;aACV,QAAQ,CAAC,wBAAwB,CAAC;KACtC,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,CAC9B,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CACtC,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,yFAAyF,EACzF;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;KAC9D,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE,CACnC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,CACxC,CACJ,CAAC;IAEF,6DAA6D;IAE7D,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,iJAAiJ,EACjJ;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QACnE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC/D,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,uCAAuC,CAAC;QACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;KAChE,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;QAChD,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mEAAmE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAC9C,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CACtE,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,iDAAiD,EACjD;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KACvD,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,CAC9B,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CACrC,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,6BAA6B,EAC7B;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;KAC7D,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,CAClC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CACtC,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,4GAA4G,EAC5G;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;KAC7D,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,CAClC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CACtC,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,mGAAmG,EACnG;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;KACzD,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CACxC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC1C,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,uIAAuI,EACvI;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,8BAA8B,CAAC;QAC3C,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,0BAA0B,CAAC;KACxC,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QACzC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAC9C,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAC5C,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,6DAA6D;IAE7D,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,yIAAyI,EACzI;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,CAAC,qDAAqD,CAAC;QAClE,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,OAAO,CAAC,GAAG,CAAC;aACZ,QAAQ,CAAC,mCAAmC,CAAC;KACjD,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,CACnD,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAC5D,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,8IAA8I,EAC9I;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,CAAC,qDAAqD,CAAC;QAClE,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,OAAO,CAAC,GAAG,CAAC;aACZ,QAAQ,CAAC,mCAAmC,CAAC;KACjD,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,CACnD,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAC9D,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,6CAA6C,EAC7C;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;KACjD,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CACrC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CACzC,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,oJAAoJ,EACpJ;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QAC9D,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,qCAAqC,CAAC;KACnD,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CACxD,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CACpE,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,gCAAgC,EAChC;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;KACjD,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CACrC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAC5C,CACJ,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minicor/mcp-server",
-  "version": "2.0.4",
+  "version": "2.0.5",
   "description": "Desktop and browser RPA automation, workflow management, and AI-powered debugging for the Minicor platform. Formerly Laminar.",
   "type": "module",
   "main": "dist/index.js",