@minicor/mcp-server 3.3.4 → 3.4.0

package/dist/middleware-service-client.js

@@ -0,0 +1,264 @@
+/**
+ * HTTP client for the middleware-service management API (Jobs + Test Cases).
+ *
+ * AUTH / TRANSPORT
+ * ----------------
+ * The middleware-service management API authenticates a *user* Bearer token
+ * (validated via /auth/me) plus a workspace-access check — it does NOT accept
+ * the MCP's raw API key. The MCP, however, runs with a user bearer token
+ * (from ~/.laminar/tokens.json / LAMINAR_ACCESS_TOKEN, refreshed in index.ts).
+ *
+ * BASE-URL SELECTION (mirrors how the frontend's server/jobs.ts +
+ * lib/jobs/types.ts resolve the middleware-service host — region-aware):
+ *
+ *   1. PROXY mode — set `MIDDLEWARE_SERVICE_PROXY_BASE` (the deployed frontend
+ *      origin, e.g. https://app.laminar.run; region-aware via
+ *      `MIDDLEWARE_SERVICE_PROXY_BASE_US` / `_CA`). Requests go to
+ *      `${proxyBase}${proxyPrefix}/<path>` where `proxyPrefix` defaults to
+ *      `/api/middleware` (override with `MIDDLEWARE_SERVICE_PROXY_PREFIX`), and
+ *      the leading `/api/` is stripped from the management path (so
+ *      `/api/workspaces/...` becomes `/api/middleware/workspaces/...`). The
+ *      frontend validates the user bearer and forwards to the (IAM-private)
+ *      middleware-service. NOTE: the frontend currently reaches middleware-service
+ *      through Next.js *server actions* (server/jobs.ts), not an HTTP proxy
+ *      route — there is no `/api/middleware/[...path]` handler yet. Once one is
+ *      deployed, setting MIDDLEWARE_SERVICE_PROXY_BASE flips the MCP onto it with
+ *      no code change.
+ *
+ *   2. DIRECT override — set `MIDDLEWARE_SERVICE_URL` (all regions) or
+ *      `MIDDLEWARE_SERVICE_URL_US` / `_CA` (per region) to hit a specific
+ *      reachable instance (dev/local). Requests go to `${base}/api/workspaces/...`.
+ *
+ *   3. DEFAULT (deployed) — the public middleware-service Cloud Run URL for the
+ *      region (us / ca), hit directly at `${base}/api/workspaces/...`. These are
+ *      the same hosts the frontend's lib/jobs/types.ts targets.
+ *
+ * Precedence: PROXY (1) > DIRECT override (2) > DEFAULT Cloud Run (3).
+ *
+ * A "Job" is a middleware *route* whose behavior is a structured `definition`
+ * (step graph) rather than freeform `handlerCode` (see middlewares/JOBS-DESIGN.md).
+ */
+// ─── Client ───────────────────────────────────────────────────────────────
+/**
+ * Public middleware-service Cloud Run URLs (the deployed default), per region.
+ * These mirror the frontend's lib/jobs/types.ts `middlewareRuntimeHost` and the
+ * earlier MCP `SERVICE_BASE` map. Used when neither the proxy nor a direct
+ * override is configured.
+ */
+const DEFAULT_DIRECT_BASE = {
+    us: "https://middleware-service-489511347341.northamerica-northeast1.run.app",
+    ca: "https://middleware-service-ca-ernfuwetfa-nn.a.run.app",
+};
+/**
+ * The frontend origin that fronts a middleware proxy, if one is deployed.
+ * Region-aware to match the platform's split frontends (e.g. app.laminar.run vs
+ * ca.app.laminar.run): `MIDDLEWARE_SERVICE_PROXY_BASE` applies to all regions,
+ * `MIDDLEWARE_SERVICE_PROXY_BASE_US` / `_CA` override it per region.
+ */
+function proxyBaseOverride(isCa) {
+    const generic = process.env.MIDDLEWARE_SERVICE_PROXY_BASE;
+    const regional = isCa
+        ? process.env.MIDDLEWARE_SERVICE_PROXY_BASE_CA
+        : process.env.MIDDLEWARE_SERVICE_PROXY_BASE_US;
+    const base = regional ?? generic;
+    return base && base.trim() !== "" ? base : undefined;
+}
+/**
+ * DIRECT base override (dev/local, or a specific reachable instance).
+ * `MIDDLEWARE_SERVICE_URL` applies to all regions; `MIDDLEWARE_SERVICE_URL_US` /
+ * `_CA` override it per region.
+ */
+function directBaseOverride(isCa) {
+    const generic = process.env.MIDDLEWARE_SERVICE_URL;
+    return isCa
+        ? process.env.MIDDLEWARE_SERVICE_URL_CA ?? generic
+        : process.env.MIDDLEWARE_SERVICE_URL_US ?? generic;
+}
+export class MiddlewareServiceClient {
+    token;
+    base;
+    viaProxy;
+    /** Proxy path prefix (proxy mode only), e.g. `/api/middleware`. */
+    proxyPrefix;
+    constructor(apiBase, token) {
+        this.token = token;
+        const isCa = /\bca\./.test(apiBase);
+        const proxyBase = proxyBaseOverride(isCa);
+        const directOverride = directBaseOverride(isCa);
+        if (proxyBase) {
+            // (1) PROXY mode — route through the deployed frontend proxy.
+            this.base = proxyBase.replace(/\/+$/, "");
+            this.viaProxy = true;
+            this.proxyPrefix =
+                "/" +
+                    (process.env.MIDDLEWARE_SERVICE_PROXY_PREFIX ?? "/api/middleware")
+                        .replace(/^\/+/, "")
+                        .replace(/\/+$/, "");
+        }
+        else {
+            // (2) DIRECT override, else (3) the region's public Cloud Run default —
+            // both call `${base}/api/workspaces/...` directly with the user bearer.
+            this.base = (directOverride ?? (isCa ? DEFAULT_DIRECT_BASE.ca : DEFAULT_DIRECT_BASE.us)).replace(/\/+$/, "");
+            this.viaProxy = false;
+            this.proxyPrefix = "";
+        }
+    }
+    /**
+     * Proxy mode: `${proxyBase}${proxyPrefix}/<path>` with the leading `/api/`
+     * stripped (so `/api/workspaces/...` -> `/api/middleware/workspaces/...`),
+     * matching the agent/skills proxy convention.
+     * Direct mode: `${base}/api/workspaces/...`.
+     */
+    async request(method, apiPath, body) {
+        const path = apiPath.startsWith("/") ? apiPath : `/${apiPath}`;
+        const url = this.viaProxy
+            ? `${this.base}${this.proxyPrefix}/${path.replace(/^\/api\//, "").replace(/^\/+/, "")}`
+            : `${this.base}${path}`;
+        const res = await fetch(url, {
+            method,
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${this.token}`,
+            },
+            body: body !== undefined ? JSON.stringify(body) : undefined,
+        });
+        if (!res.ok) {
+            const errText = await res.text().catch(() => "");
+            throw new Error(`Middleware service ${method} ${apiPath} failed (${res.status}): ${errText}`);
+        }
+        if (res.status === 204)
+            return undefined;
+        const contentType = res.headers.get("content-type") ?? "";
+        if (contentType.includes("application/json"))
+            return res.json();
+        return res.text();
+    }
+    routesBase(workspaceId, middlewareId) {
+        return `/api/workspaces/${workspaceId}/middlewares/${middlewareId}/routes`;
+    }
+    middlewaresBase(workspaceId) {
+        return `/api/workspaces/${workspaceId}/middlewares`;
+    }
+    // ── Middlewares (routers) ──────────────────────────────────
+    /** List the routers (middlewares) in a workspace. */
+    async listMiddlewares(workspaceId) {
+        return this.request("GET", this.middlewaresBase(workspaceId));
+    }
+    /** Create a router (middleware) that jobs/routes attach to. */
+    async createMiddleware(workspaceId, body) {
+        return this.request("POST", this.middlewaresBase(workspaceId), body);
+    }
+    /** Auto-configure the router's workspace API key from the workspace's keys. */
+    async autoConfigureMiddleware(workspaceId, middlewareId) {
+        return this.request("POST", `${this.middlewaresBase(workspaceId)}/${middlewareId}/auto-configure`);
+    }
+    /** Fetch a single router (middleware) by id (list + filter; no single GET). */
+    async getMiddleware(workspaceId, middlewareId) {
+        const middlewares = await this.listMiddlewares(workspaceId);
+        return middlewares.find((m) => m.id === middlewareId);
+    }
+    /** Update a router (middleware) — e.g. to set its `workspaceApiKey`. */
+    async updateMiddleware(workspaceId, middlewareId, body) {
+        return this.request("PUT", `${this.middlewaresBase(workspaceId)}/${middlewareId}`, body);
+    }
+    /**
+     * Set the router's `workspaceApiKey`, then RE-READ the middleware and return
+     * it so callers can confirm the key actually stuck (non-null/non-empty).
+     */
+    async setWorkspaceApiKey(workspaceId, middlewareId, workspaceApiKey) {
+        await this.updateMiddleware(workspaceId, middlewareId, { workspaceApiKey });
+        return this.getMiddleware(workspaceId, middlewareId);
+    }
+    // ── Jobs (routes) ──────────────────────────────────────────
+    /**
+     * Create a job-backed route. The management API exposes route creation under
+     * the middleware; passing a `definition` makes the route job-backed.
+     */
+    async createJob(workspaceId, middlewareId, body) {
+        return this.request("POST", this.routesBase(workspaceId, middlewareId), 
+        // Spread first, then apply the default so `method` is `body.method ?? "POST"`
+        // even when the caller passes `method: undefined`.
+        { ...body, method: body.method ?? "POST" });
+    }
+    async updateJob(workspaceId, middlewareId, routeId, body) {
+        return this.request("PUT", `${this.routesBase(workspaceId, middlewareId)}/${routeId}`, body);
+    }
+    /**
+     * The contract notes there is currently NO `GET /routes/:routeId` (single).
+     * List all routes and filter client-side.
+     */
+    async listRoutes(workspaceId, middlewareId) {
+        const data = await this.request("GET", this.routesBase(workspaceId, middlewareId));
+        if (Array.isArray(data))
+            return data;
+        return data?.routes ?? [];
+    }
+    async getJob(workspaceId, middlewareId, routeId) {
+        const routes = await this.listRoutes(workspaceId, middlewareId);
+        return routes.find((r) => r.id === routeId);
+    }
+    async runJob(workspaceId, middlewareId, routeId, input, trigger = "mcp") {
+        return this.request("POST", `${this.routesBase(workspaceId, middlewareId)}/${routeId}/run`, { input, trigger });
+    }
+    async getExecution(workspaceId, middlewareId, routeId, executionId) {
+        return this.request("GET", `${this.routesBase(workspaceId, middlewareId)}/${routeId}/executions/${executionId}`);
+    }
+    async listExecutions(workspaceId, middlewareId, routeId, opts) {
+        const params = new URLSearchParams();
+        if (opts?.page != null)
+            params.set("page", String(opts.page));
+        if (opts?.size != null)
+            params.set("size", String(opts.size));
+        if (opts?.status)
+            params.set("status", opts.status);
+        if (opts?.search)
+            params.set("search", opts.search);
+        const qs = params.toString();
+        return this.request("GET", `${this.routesBase(workspaceId, middlewareId)}/${routeId}/executions${qs ? `?${qs}` : ""}`);
+    }
+    // ── Test cases ─────────────────────────────────────────────
+    async listTestCases(workspaceId, middlewareId, routeId) {
+        return this.request("GET", `${this.routesBase(workspaceId, middlewareId)}/${routeId}/test-cases`);
+    }
+    async addTestCase(workspaceId, middlewareId, routeId, body) {
+        return this.request("POST", `${this.routesBase(workspaceId, middlewareId)}/${routeId}/test-cases`, body);
+    }
+    async updateTestCase(workspaceId, middlewareId, routeId, testCaseId, body) {
+        return this.request("PUT", `${this.routesBase(workspaceId, middlewareId)}/${routeId}/test-cases/${testCaseId}`, body);
+    }
+    // ── Test runs ──────────────────────────────────────────────
+    async startTestRun(workspaceId, middlewareId, routeId, testCaseIds) {
+        return this.request("POST", `${this.routesBase(workspaceId, middlewareId)}/${routeId}/test-runs`, testCaseIds ? { testCaseIds } : {});
+    }
+    async getTestRun(workspaceId, middlewareId, routeId, testRunId) {
+        return this.request("GET", `${this.routesBase(workspaceId, middlewareId)}/${routeId}/test-runs/${testRunId}`);
+    }
+    // ── Polling helpers ────────────────────────────────────────
+    async pollExecution(workspaceId, middlewareId, routeId, executionId, opts) {
+        const interval = opts?.intervalMs ?? 3000;
+        const timeout = opts?.timeoutMs ?? 5 * 60 * 1000;
+        const deadline = Date.now() + timeout;
+        let last;
+        while (Date.now() < deadline) {
+            last = await this.getExecution(workspaceId, middlewareId, routeId, executionId);
+            if (last.status !== "running" && last.status !== "queued")
+                return last;
+            await new Promise((r) => setTimeout(r, interval));
+        }
+        throw new Error(`Timed out polling job execution ${executionId} after ${timeout}ms (last status: ${last?.status ?? "unknown"})`);
+    }
+    async pollTestRun(workspaceId, middlewareId, routeId, testRunId, opts) {
+        const interval = opts?.intervalMs ?? 3000;
+        const timeout = opts?.timeoutMs ?? 10 * 60 * 1000;
+        const deadline = Date.now() + timeout;
+        let last;
+        while (Date.now() < deadline) {
+            last = await this.getTestRun(workspaceId, middlewareId, routeId, testRunId);
+            if (last.testRun.status !== "running")
+                return last;
+            await new Promise((r) => setTimeout(r, interval));
+        }
+        throw new Error(`Timed out polling test run ${testRunId} after ${timeout}ms (last status: ${last?.testRun.status ?? "unknown"})`);
+    }
+}
+//# sourceMappingURL=middleware-service-client.js.map

package/dist/middleware-service-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware-service-client.js","sourceRoot":"","sources":["../src/middleware-service-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AA8GH,6EAA6E;AAE7E;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG;IAC1B,EAAE,EAAE,yEAAyE;IAC7E,EAAE,EAAE,uDAAuD;CACnD,CAAC;AAEX;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,IAAa;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI;QACnB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC;QAC9C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IACjD,MAAM,IAAI,GAAG,QAAQ,IAAI,OAAO,CAAC;IACjC,OAAO,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAAa;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACnD,OAAO,IAAI;QACT,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO;QAClD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,uBAAuB;IAQxB;IAPF,IAAI,CAAS;IACb,QAAQ,CAAU;IAC1B,mEAAmE;IAC3D,WAAW,CAAS;IAE5B,YACE,OAAe,EACP,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;QAErB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,SAAS,EAAE,CAAC;YACd,8DAA8D;YAC9D,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,WAAW;gBACd,GAAG;oBACH,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,iBAAiB,CAAC;yBAC/D,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;yBACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,CAAC,IAAI,GAAG,CACV,cAAc,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACtB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,OAAe,EACf,IAAc;QAEd,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ;YACvB,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE;YACvF,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;QAE1B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM;YACN,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;aACtC;YACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC5D,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,sBAAsB,MAAM,IAAI,OAAO,YAAY,GAAG,CAAC,MAAM,MAAM,OAAO,EAAE,CAC7E,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;QAC9E,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;IAClC,CAAC;IAEO,UAAU,CAAC,WAAmB,EAAE,YAAoB;QAC1D,OAAO,mBAAmB,WAAW,gBAAgB,YAAY,SAAS,CAAC;IAC7E,CAAC;IAEO,eAAe,CAAC,WAAmB;QACzC,OAAO,mBAAmB,WAAW,cAAc,CAAC;IACtD,CAAC;IAED,8DAA8D;IAE9D,qDAAqD;IACrD,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,OAAO,IAAI,CAAC,OAAO,CAAe,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,gBAAgB,CACpB,WAAmB,EACnB,IAAoF;QAEpF,OAAO,IAAI,CAAC,OAAO,CAAa,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,uBAAuB,CAC3B,WAAmB,EACnB,YAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,IAAI,YAAY,iBAAiB,CACtE,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,aAAa,CACjB,WAAmB,EACnB,YAAoB;QAEpB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC5D,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,gBAAgB,CACpB,WAAmB,EACnB,YAAoB,EACpB,IAAsF;QAEtF,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,IAAI,YAAY,EAAE,EACtD,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CACtB,WAAmB,EACnB,YAAoB,EACpB,eAAuB;QAEvB,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IAED,8DAA8D;IAE9D;;;OAGG;IACH,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,YAAoB,EACpB,IAKC;QAED,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC;QAC1C,8EAA8E;QAC9E,mDAAmD;QACnD,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAC3C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,IAKC;QAED,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,OAAO,EAAE,EAC1D,IAAI,CACL,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CACd,WAAmB,EACnB,YAAoB;QAEpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,KAAK,EACL,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,CAC3C,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CACV,WAAmB,EACnB,YAAoB,EACpB,OAAe;QAEf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,MAAM,CACV,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,KAA8B,EAC9B,UAAkC,KAAK;QAEvC,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,OAAO,MAAM,EAC9D,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,WAAmB;QAEnB,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,OAAO,eAAe,WAAW,EAAE,CACrF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,IAAyE;QAEzE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,IAAI,EAAE,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,IAAI,EAAE,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,OAAO,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3F,CAAC;IACJ,CAAC;IAED,8DAA8D;IAE9D,KAAK,CAAC,aAAa,CACjB,WAAmB,EACnB,YAAoB,EACpB,OAAe;QAEf,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,OAAO,aAAa,CACtE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,IAOC;QAED,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,OAAO,aAAa,EACrE,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,UAAkB,EAClB,IAOE;QAEF,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,OAAO,eAAe,UAAU,EAAE,EACnF,IAAI,CACL,CAAC;IACJ,CAAC;IAED,8DAA8D;IAE9D,KAAK,CAAC,YAAY,CAChB,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,WAAsB;QAEtB,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,OAAO,YAAY,EACpE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CACd,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,SAAiB;QAEjB,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,OAAO,cAAc,SAAS,EAAE,CAClF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAE9D,KAAK,CAAC,aAAa,CACjB,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,WAAmB,EACnB,IAAkD;QAElD,MAAM,QAAQ,GAAG,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACtC,IAAI,IAA8B,CAAC;QACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAChF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACvE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,UAAU,OAAO,oBAAoB,IAAI,EAAE,MAAM,IAAI,SAAS,GAAG,CAChH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,SAAiB,EACjB,IAAkD;QAElD,MAAM,QAAQ,GAAG,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,EAAE,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACtC,IAAI,IAA6D,CAAC;QAClE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YAC5E,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACnD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8BAA8B,SAAS,UAAU,OAAO,oBAAoB,IAAI,EAAE,OAAO,CAAC,MAAM,IAAI,SAAS,GAAG,CACjH,CAAC;IACJ,CAAC;CACF"}

package/dist/prompts/build-rpa.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-rpa.d.ts","sourceRoot":"","sources":["../../src/prompts/build-rpa.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,wBAAgB,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,QA8J5C"}
+{"version":3,"file":"build-rpa.d.ts","sourceRoot":"","sources":["../../src/prompts/build-rpa.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,wBAAgB,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,QA+K5C"}

package/dist/prompts/build-rpa.js

@@ -40,6 +40,20 @@ ${appName}
 ID: ${workspaceId}${workflowId ? `\nExisting workflow ID: ${workflowId} (add steps to this workflow)` : "\nCreate a new workflow for this automation."}
 ${modeSection}
 
+## WORK BACKWARDS — Define the Test Case FIRST
+
+Before building anything, write down what "done" means as a concrete, runnable test:
+
+1. **State the contract.** What input does this automation take, and what output proves it worked? Write the input JSON and the expected output shape.
+2. **Author the green-gate.** A workflow's behavior is locked in by a **Job** with **test cases**. As the very first build artifact:
+   - Register a thin Job for this automation: \`register_job\` with a \`definition\` whose single \`workflow\` step calls this workflow (use a placeholder \`workflowId\` you'll fill in, or the existing one). The job is the testable wrapper above the workflow.
+   - Add the test case NOW: \`add_test_case\` with the input from step 1 and assertions \`[{ name, expr }]\` describing the expected output (e.g. \`output.patientId != null\`, \`output.status === "ok"\`). \`expr\` is a TS boolean over \`{ input, output, ctx, steps }\`.
+3. **The test is RED.** It will fail until the workflow exists and is correct. That red test is your target.
+4. **Build the workflow** (the loop below) to turn the test GREEN.
+5. **Green-gate:** the build is NOT done until \`run_tests\` reports \`green: true\`. Re-run \`run_tests\` after every meaningful change.
+
+Use test patients only — never real patient data. Pick inputs/slots far in the future so tests don't collide with real schedules.
+
 ## MANDATORY FIRST STEP — Load Testing Skill
 
 Before doing ANYTHING else, run: \`get_skill("rpa-testing-workflow")\`
@@ -121,6 +135,9 @@ b. Poll \`get_execution_status\` every 5-10s, \`vm_screenshot\` at intervals to
 c. On failure → \`diagnose_execution\` + \`vm_screenshot\`, fix with \`update_flow\`, re-run FULL workflow
 d. Iterate until full workflow passes. **Do NOT declare done until it passes.**${isProduction ? "\ne. Run the workflow a SECOND time to verify idempotency." : ""}
 
+### 6b. GREEN-GATE — run_tests
+The workflow passing once is not enough. Point the Job's workflow step at the finished \`workflowId\` (\`update_job\` if needed), then run \`run_tests\` for the job. **The build is done ONLY when \`run_tests\` returns \`green: true\`** and every test case passes. On a red result, drill into the failing case's job execution → step → Minicor run, fix, and re-run \`run_tests\`. Add more \`add_test_case\` entries for edge cases (empty results, not-found, second-run idempotency) and keep them green.
+
 ### 7. Iterate with the User
 ${isProduction ? `
 ### 8. Production Hardening

package/dist/prompts/build-rpa.js.map

@@ -1 +1 @@
-{"version":3,"file":"build-rpa.js","sourceRoot":"","sources":["../../src/prompts/build-rpa.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,QAAQ,CAAC,EAAE,MAAM,EAAY;IAC3C,MAAM,CAAC,MAAM,CACX,oBAAoB,EACpB,wSAAwS,EACxS;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACxD,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,iHAAiH,CAClH;QACH,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,CACP,uFAAuF,CACxF;QACH,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,sEAAsE,CACvE;QACH,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;aAC3B,QAAQ,EAAE;aACV,QAAQ,CACP,4HAA4H,CAC7H;KACJ,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE;QACzD,MAAM,YAAY,GAAG,IAAI,KAAK,YAAY,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI;YACtB,CAAC,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,iFAAiF,EAAE;YAC9K,CAAC,CAAC,yIAAyI,CAAC;QAE9I,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE;;;EAGlB,IAAI;;;EAGJ,OAAO;;;MAGH,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,2BAA2B,UAAU,+BAA+B,CAAC,CAAC,CAAC,8CAA8C;EACpJ,WAAW;;;;;;;;;;;;;;;;;;;;;;;0EAuB6D,YAAY,CAAC,CAAC,CAAC,sGAAsG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oGAAoG;;;;;;;;;;;;;;;;;;;;;;;;;YAyBvS,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iFAiC8D,YAAY,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,EAAE;;;EAG/J,YAAY,CAAC,CAAC,CAAC;;;;;;CAMhB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;;;CAIhB;;;qFAGoF,YAAY,CAAC,CAAC,CAAC,8EAA8E,CAAC,CAAC,CAAC,EAAE;;sIAEjD;qBACzH;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"build-rpa.js","sourceRoot":"","sources":["../../src/prompts/build-rpa.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,QAAQ,CAAC,EAAE,MAAM,EAAY;IAC3C,MAAM,CAAC,MAAM,CACX,oBAAoB,EACpB,wSAAwS,EACxS;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACxD,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,iHAAiH,CAClH;QACH,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,CACP,uFAAuF,CACxF;QACH,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,sEAAsE,CACvE;QACH,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;aAC3B,QAAQ,EAAE;aACV,QAAQ,CACP,4HAA4H,CAC7H;KACJ,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE;QACzD,MAAM,YAAY,GAAG,IAAI,KAAK,YAAY,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI;YACtB,CAAC,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,iFAAiF,EAAE;YAC9K,CAAC,CAAC,yIAAyI,CAAC;QAE9I,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE;;;EAGlB,IAAI;;;EAGJ,OAAO;;;MAGH,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,2BAA2B,UAAU,+BAA+B,CAAC,CAAC,CAAC,8CAA8C;EACpJ,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0EAqC6D,YAAY,CAAC,CAAC,CAAC,sGAAsG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oGAAoG;;;;;;;;;;;;;;;;;;;;;;;;;YAyBvS,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iFAiC8D,YAAY,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,EAAE;;;;;;EAM/J,YAAY,CAAC,CAAC,CAAC;;;;;;CAMhB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;;;CAIhB;;;qFAGoF,YAAY,CAAC,CAAC,CAAC,8EAA8E,CAAC,CAAC,CAAC,EAAE;;sIAEjD;qBACzH;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/prompts/nestjs-to-job.d.ts

@@ -0,0 +1,11 @@
+import type { ToolDeps } from "../types.js";
+/**
+ * Prompt: turn an existing NestJS customer middleware into a Job.
+ *
+ * Given a Nest.js controller that orchestrates Laminar workflows (login →
+ * lookup → create, with header munging and error mapping), this prompt walks
+ * the agent through mapping that endpoint into a structured JobDefinition step
+ * graph and registering it with register_job.
+ */
+export declare function register({ server }: ToolDeps): void;
+//# sourceMappingURL=nestjs-to-job.d.ts.map

package/dist/prompts/nestjs-to-job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nestjs-to-job.d.ts","sourceRoot":"","sources":["../../src/prompts/nestjs-to-job.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,QAwG5C"}

package/dist/prompts/nestjs-to-job.js

@@ -0,0 +1,110 @@
+import { z } from "zod";
+/**
+ * Prompt: turn an existing NestJS customer middleware into a Job.
+ *
+ * Given a Nest.js controller that orchestrates Laminar workflows (login →
+ * lookup → create, with header munging and error mapping), this prompt walks
+ * the agent through mapping that endpoint into a structured JobDefinition step
+ * graph and registering it with register_job.
+ */
+export function register({ server }) {
+    server.prompt("nestjs-middleware-to-job", "Convert an existing NestJS customer middleware endpoint (a controller method that orchestrates Minicor workflows) into a Job — a structured JobDefinition step graph (workflow steps + code blocks + when/forEach) registered via register_job, with test cases as the green-gate.", {
+        controllerPath: z
+            .string()
+            .describe("Path to the NestJS controller file (e.g. src/controllers/ams.controller.ts)"),
+        endpoint: z
+            .string()
+            .optional()
+            .describe("Which controller method/route to convert (e.g. POST /ams/account-lookup). Omit to convert all."),
+        workspaceId: z.string().describe("Minicor workspace ID"),
+        middlewareId: z
+            .string()
+            .optional()
+            .describe("Existing router (middleware) ID to attach the job route to. Omit to create one with create_router first."),
+    }, async ({ controllerPath, endpoint, workspaceId, middlewareId }) => {
+        return {
+            messages: [
+                {
+                    role: "user",
+                    content: {
+                        type: "text",
+                        text: `You are converting a NestJS customer middleware endpoint into a **Job**.
+
+## What you're converting
+- Controller: \`${controllerPath}\`
+- Endpoint: ${endpoint ?? "ALL methods in the controller"}
+- Workspace: ${workspaceId}
+- Router (middleware): ${middlewareId ?? "none yet — create one with create_router first, then use its id"}
+
+## Mental model (read this first)
+- **A Job ≡ a middleware route** whose behavior is a structured \`definition\` (a step graph) instead of freeform handler code.
+- A Job sits **above** workflows. A job step either **calls an entire Minicor workflow** (\`kind: "workflow"\`, by \`workflowId\`) or **runs a code block** (\`kind: "code"\`, a \`(ctx) => ...\` string). The job never touches a workflow's internal steps — a workflow is an opaque callable with an input and an output.
+- Keep job graphs small: typically \`login → lookup/create → shape output\`.
+
+## How a NestJS controller maps to a JobDefinition
+A typical controller method does: validate the body (DTO) → run a login workflow → run the target workflow → munge the result (headers, status) → return / throw. Map each piece:
+
+| NestJS | JobDefinition |
+| --- | --- |
+| \`@Body() dto\` + DTO class | \`inputSchema\` (JSON Schema) |
+| return type / DTO | \`outputSchema\` (JSON Schema) |
+| \`await laminar.executeWorkflow({ workflowId: LOGIN, data:{} })\` | a \`kind:"workflow"\` step with \`cache\` (login gate) |
+| \`await laminar.executeWorkflow({ workflowId: TARGET, data })\` | a \`kind:"workflow"\` step; \`input\` is \`{{ctx.input.*}}\` templating or a CodeBlock |
+| header munging (e.g. \`x-recording-url\` → \`web_agent_video_url\`) | a \`kind:"code"\` step, or the \`output\` CodeBlock |
+| \`if (cond) ...\` branching | step \`when\` (skip) / \`onError\` / \`{ goto }\` |
+| looping over a collection | step \`forEach\` |
+| \`throw new HttpException(...)\` mapping | engine sets failed on \`onError:"abort"\`; \`output\` block decides \`partial\`/\`review\` |
+| serialize per desktop (login lands before run) | \`resource.lockKey\` |
+
+## Worked example — FurtherAI AMS360 \`runWithLogin\` → Job
+A controller that does "ensure AMS360 login, then run the target workflow, then merge the recording URL header" becomes:
+
+\`\`\`json
+{
+  "region": "us",
+  "resource": { "lockKey": "ams360-desktop" },
+  "inputSchema": { "type": "object", "properties": { "insured_name": { "type": "string" } }, "required": ["insured_name"] },
+  "outputSchema": { "type": "object" },
+  "steps": [
+    {
+      "id": "login", "name": "AMS360 Login", "kind": "workflow",
+      "workflowId": 0,
+      "input": {},
+      "cache": { "key": "ams360-login", "ttlMs": 1800000 },
+      "onError": "abort"
+    },
+    {
+      "id": "lookup", "name": "Account Lookup", "kind": "workflow",
+      "workflowId": 2078,
+      "saveAs": "lookup",
+      "input": { "task_type": "ams_account_lookup", "insured_name": "{{ctx.input.insured_name}}" },
+      "onError": "abort"
+    }
+  ],
+  "output": "(ctx) => { const r = ctx.lookup?.data ?? ctx.lookup; const rec = ctx.lookup?.headers?.['x-recording-url']; return rec ? { ...r, web_agent_video_url: String(rec) } : r; }"
+}
+\`\`\`
+(Replace the placeholder \`workflowId: 0\` login id and \`2078\` with the real ids from \`WORKFLOW_IDS\` / \`list_workflows\`. Map every constant in the controller's config to a real workflow id.)
+
+## Procedure
+1. **Read the controller** at \`${controllerPath}\` and its DTOs/constants. List each endpoint, the workflow ids it calls, the call order, and the result-shaping logic.
+2. **Resolve workflow ids** with \`list_workflows(workspaceId: ${workspaceId})\` — match the controller's \`WORKFLOW_IDS\`/constants to live ids.
+3. **Author inputSchema/outputSchema** from the DTOs.
+4. **Build the step graph** per the mapping table. Login/smart-launch → a \`cache\`d workflow step. Each downstream workflow → a workflow step with templated \`input\`. Header/result munging → the \`output\` CodeBlock (or a \`code\` step).
+5. **Define the green-gate FIRST**: \`add_test_case\` with a representative input (use test data only) and assertions over the expected output (e.g. \`output.web_agent_video_url != null\`, \`output.account != null\`).
+6. **Register** with \`register_job(workspaceId, middlewareId, path, definition)\`. Use ${middlewareId ? `middlewareId ${middlewareId}` : "the middlewareId of the router you created"}.
+7. **Run it**: \`run_job\` with the test input; inspect the returned JobExecution (per-step \`workflowExecutionId\`/\`region\` deep-link to the real Minicor runs).
+8. **Green-gate**: \`run_tests\` until \`green: true\`. Drill into any failing case → its job execution → step → Minicor run; fix \`update_job\` and re-run.
+
+## Rules
+- One job per controller endpoint. Keep the graph shallow.
+- Never hardcode credentials — keep secrets in the workflow's config store (\`resource.configStoreId\` / step \`configStoreId\`).
+- Preserve the controller's ordering guarantees with \`resource.lockKey\` (serialize per desktop) so login always lands before the work.
+- Test data only — never real patient/customer data.`,
+                    },
+                },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=nestjs-to-job.js.map

package/dist/prompts/nestjs-to-job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nestjs-to-job.js","sourceRoot":"","sources":["../../src/prompts/nestjs-to-job.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAE,MAAM,EAAY;IAC3C,MAAM,CAAC,MAAM,CACX,0BAA0B,EAC1B,oRAAoR,EACpR;QACE,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,QAAQ,CAAC,6EAA6E,CAAC;QAC1F,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,gGAAgG,CAAC;QAC7G,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACxD,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,0GAA0G,CAAC;KACxH,EACD,KAAK,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,EAAE;QAChE,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE;;;kBAGF,cAAc;cAClB,QAAQ,IAAI,+BAA+B;eAC1C,WAAW;yBACD,YAAY,IAAI,iEAAiE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAqDxE,cAAc;iEACiB,WAAW;;;;0FAIc,YAAY,CAAC,CAAC,CAAC,gBAAgB,YAAY,EAAE,CAAC,CAAC,CAAC,4CAA4C;;;;;;;;qDAQjI;qBACxC;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/jobs.d.ts

@@ -0,0 +1,21 @@
+/**
+ * MCP tools for Jobs + Test Cases.
+ *
+ * A Job is a middleware route whose behavior is a structured `definition`
+ * (step graph) instead of freeform handler code. Jobs sit *above* workflows: a
+ * job step calls an entire Minicor workflow (by workflowId) or runs a code
+ * block. Test cases attach to a job (route): a named input + code-block
+ * assertions `[{ name, expr }]` evaluated against the execution.
+ *
+ * See middlewares/JOBS-DESIGN.md for the full model + API contract (v1).
+ *
+ * Auth/transport is handled by MiddlewareServiceClient, which by default calls
+ * the region's public middleware-service Cloud Run directly with the MCP's user
+ * bearer token. Set MIDDLEWARE_SERVICE_PROXY_BASE to route through a deployed
+ * frontend proxy instead, or MIDDLEWARE_SERVICE_URL[_US|_CA] to hit a specific
+ * reachable instance (dev/local). See middleware-service-client.ts for the full
+ * precedence.
+ */
+import type { ToolDeps } from "../types.js";
+export declare function register(deps: ToolDeps): void;
+//# sourceMappingURL=jobs.d.ts.map

package/dist/tools/jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../../src/tools/jobs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAmG5C,wBAAgB,QAAQ,CAAC,IAAI,EAAE,QAAQ,QAsdtC"}