@raytio/mcp-server 3.5.0 → 4.0.0

package/dist/tools/sec/sec-qr-pairing-cancel.js

@@ -0,0 +1,55 @@
+import { z } from 'zod';
+import { API_ERROR, errorResponse, successResponse } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
+import { confirmFlagSchema, idempotencyKeySchema, reasonSchema, writeHeadersWithIdempotency, } from '../_shared/side-effect.js';
+/**
+ * Cancel a QR pairing session by setting `session_status=CANCELLED`
+ * and stamping `completed_at`. Cancellation is a security state
+ * transition, so the tool requires `confirm: true` AND a `reason`
+ * for the audit trail.
+ *
+ * Retry-safe: repeat calls converge on the same cancelled state.
+ */
+export const secQrPairingCancelTool = {
+    name: 'sec_qr_pairing_cancel',
+    description: 'Cancel a QR pairing session (session_status=CANCELLED, completed_at stamped). ' +
+        'Requires confirm=true and a reason for the audit trail. Retry-safe.',
+    inputSchema: z.object({
+        id: z
+            .string()
+            .min(1)
+            .describe('UUID of the sec_qr_pairing_sessions row to cancel'),
+        completed_at: z
+            .string()
+            .datetime()
+            .optional()
+            .describe('Optional ISO-8601 cancellation timestamp; defaults to server clock'),
+        confirm: confirmFlagSchema,
+        reason: reasonSchema.describe('Human-readable justification recorded on the audit trail'),
+        idempotency_key: idempotencyKeySchema,
+    }),
+    capabilities: [cap('sec_qr_pairing_sessions', 'UPDATE')],
+    sideEffect: 'state_change',
+    confirmation: 'caller_confirms',
+    idempotency: 'natural_key',
+    handler: async (args, ctx) => {
+        const input = args;
+        const body = {
+            session_status: 'CANCELLED',
+            metadata: { cancel_reason: input.reason },
+        };
+        if (input.completed_at !== undefined)
+            body.completed_at = input.completed_at;
+        try {
+            const rows = await ctx.apiClient.patch(`${ctx.apiClient.dbBasePath}/sec_qr_pairing_sessions?id=eq.${input.id}&select=*`, body, { headers: writeHeadersWithIdempotency(input.idempotency_key) });
+            if (!rows || rows.length === 0) {
+                return errorResponse(API_ERROR, `SEC QR pairing session ${input.id} not found or not accessible`);
+            }
+            return successResponse(rows[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to cancel SEC QR pairing session: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=sec-qr-pairing-cancel.js.map

package/dist/tools/sec/sec-qr-pairing-cancel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sec-qr-pairing-cancel.js","sourceRoot":"","sources":["../../../src/tools/sec/sec-qr-pairing-cancel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,gFAAgF;QAChF,qEAAqE;IACvE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,mDAAmD,CAAC;QAChE,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,oEAAoE,CAAC;QACjF,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,YAAY,CAAC,QAAQ,CAC3B,0DAA0D,CAC3D;QACD,eAAe,EAAE,oBAAoB;KACtC,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACxD,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAKb,CAAC;QACF,MAAM,IAAI,GAA4B;YACpC,cAAc,EAAE,WAAW;YAC3B,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE;SAC1C,CAAC;QACF,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACpC,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,kCAAkC,KAAK,CAAC,EAAE,WAAW,EAChF,IAAI,EACJ,EAAE,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAChE,CAAC;YACF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAClB,SAAS,EACT,0BAA0B,KAAK,CAAC,EAAE,8BAA8B,CACjE,CAAC;YACJ,CAAC;YACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAClB,SAAS,EACT,4CAA4C,KAAK,CAAC,OAAO,EAAE,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/sec/sec-qr-pairing-complete.d.ts

@@ -0,0 +1,13 @@
+import { Tool } from '../registry.js';
+/**
+ * Mark a QR pairing session as completed
+ * (`sec_qr_pairing_sessions`). Records `session_status=PAIRED`,
+ * stamps `paired_at` and `completed_at`. Callers may override those
+ * timestamps for a deterministic close; the persist backend clock is
+ * used when omitted.
+ *
+ * Requires confirm=true — completion promotes the paired device to a
+ * trusted state within the tenant.
+ */
+export declare const secQrPairingCompleteTool: Tool;
+//# sourceMappingURL=sec-qr-pairing-complete.d.ts.map

package/dist/tools/sec/sec-qr-pairing-complete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sec-qr-pairing-complete.d.ts","sourceRoot":"","sources":["../../../src/tools/sec/sec-qr-pairing-complete.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAStC;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB,EAAE,IA2DtC,CAAC"}

package/dist/tools/sec/sec-qr-pairing-complete.js

@@ -0,0 +1,62 @@
+import { z } from 'zod';
+import { API_ERROR, errorResponse, successResponse } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
+import { confirmFlagSchema, idempotencyKeySchema, writeHeadersWithIdempotency, } from '../_shared/side-effect.js';
+/**
+ * Mark a QR pairing session as completed
+ * (`sec_qr_pairing_sessions`). Records `session_status=PAIRED`,
+ * stamps `paired_at` and `completed_at`. Callers may override those
+ * timestamps for a deterministic close; the persist backend clock is
+ * used when omitted.
+ *
+ * Requires confirm=true — completion promotes the paired device to a
+ * trusted state within the tenant.
+ */
+export const secQrPairingCompleteTool = {
+    name: 'sec_qr_pairing_complete',
+    description: 'Complete a QR pairing session (session_status=PAIRED, paired_at/completed_at stamped). ' +
+        'Requires confirm=true. Retry-safe (converges on the same PAIRED state).',
+    inputSchema: z.object({
+        id: z
+            .string()
+            .min(1)
+            .describe('UUID of the sec_qr_pairing_sessions row to mark paired'),
+        paired_at: z
+            .string()
+            .datetime()
+            .optional()
+            .describe('Optional ISO-8601 timestamp for paired_at; defaults to server clock'),
+        completed_at: z
+            .string()
+            .datetime()
+            .optional()
+            .describe('Optional ISO-8601 timestamp for completed_at; defaults to server clock'),
+        confirm: confirmFlagSchema,
+        idempotency_key: idempotencyKeySchema,
+    }),
+    capabilities: [cap('sec_qr_pairing_sessions', 'UPDATE')],
+    sideEffect: 'state_change',
+    confirmation: 'caller_confirms',
+    idempotency: 'natural_key',
+    handler: async (args, ctx) => {
+        const input = args;
+        const body = {
+            session_status: 'PAIRED',
+        };
+        if (input.paired_at !== undefined)
+            body.paired_at = input.paired_at;
+        if (input.completed_at !== undefined)
+            body.completed_at = input.completed_at;
+        try {
+            const rows = await ctx.apiClient.patch(`${ctx.apiClient.dbBasePath}/sec_qr_pairing_sessions?id=eq.${input.id}&select=*`, body, { headers: writeHeadersWithIdempotency(input.idempotency_key) });
+            if (!rows || rows.length === 0) {
+                return errorResponse(API_ERROR, `SEC QR pairing session ${input.id} not found or not accessible`);
+            }
+            return successResponse(rows[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to complete SEC QR pairing session: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=sec-qr-pairing-complete.js.map

package/dist/tools/sec/sec-qr-pairing-complete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sec-qr-pairing-complete.js","sourceRoot":"","sources":["../../../src/tools/sec/sec-qr-pairing-complete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAS;IAC5C,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACT,yFAAyF;QACzF,yEAAyE;IAC3E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,wDAAwD,CAAC;QACrE,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,qEAAqE,CAAC;QAClF,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,wEAAwE,CAAC;QACrF,OAAO,EAAE,iBAAiB;QAC1B,eAAe,EAAE,oBAAoB;KACtC,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACxD,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAKb,CAAC;QACF,MAAM,IAAI,GAA4B;YACpC,cAAc,EAAE,QAAQ;SACzB,CAAC;QACF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACpE,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACpC,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,kCAAkC,KAAK,CAAC,EAAE,WAAW,EAChF,IAAI,EACJ,EAAE,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAChE,CAAC;YACF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAClB,SAAS,EACT,0BAA0B,KAAK,CAAC,EAAE,8BAA8B,CACjE,CAAC;YACJ,CAAC;YACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAClB,SAAS,EACT,8CAA8C,KAAK,CAAC,OAAO,EAAE,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/sec/sec-qr-pairing-join.d.ts

@@ -0,0 +1,13 @@
+import { Tool } from '../registry.js';
+/**
+ * Attach a joiner device to a QR pairing session
+ * (`sec_qr_pairing_sessions`). Only `joiner_device_id` and
+ * `metadata` are writable through this path — session_status and
+ * encrypted secret material are managed server-side by the pairing
+ * flow.
+ *
+ * Requires `confirm: true` because it authorises a second device to
+ * participate in the shared-secret exchange.
+ */
+export declare const secQrPairingJoinTool: Tool;
+//# sourceMappingURL=sec-qr-pairing-join.d.ts.map

package/dist/tools/sec/sec-qr-pairing-join.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sec-qr-pairing-join.d.ts","sourceRoot":"","sources":["../../../src/tools/sec/sec-qr-pairing-join.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAStC;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,EAAE,IAkDlC,CAAC"}

package/dist/tools/sec/sec-qr-pairing-join.js

@@ -0,0 +1,52 @@
+import { z } from 'zod';
+import { API_ERROR, errorResponse, successResponse } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
+import { confirmFlagSchema, idempotencyKeySchema, writeHeadersWithIdempotency, } from '../_shared/side-effect.js';
+/**
+ * Attach a joiner device to a QR pairing session
+ * (`sec_qr_pairing_sessions`). Only `joiner_device_id` and
+ * `metadata` are writable through this path — session_status and
+ * encrypted secret material are managed server-side by the pairing
+ * flow.
+ *
+ * Requires `confirm: true` because it authorises a second device to
+ * participate in the shared-secret exchange.
+ */
+export const secQrPairingJoinTool = {
+    name: 'sec_qr_pairing_join',
+    description: 'Attach a joiner device to an existing QR pairing session. Requires confirm=true, ' +
+        'the session id, and joiner_device_id. Retry-safe (converges on the same joined state).',
+    inputSchema: z.object({
+        id: z
+            .string()
+            .min(1)
+            .describe('UUID of the sec_qr_pairing_sessions row to join'),
+        joiner_device_id: z
+            .string()
+            .min(1)
+            .describe('UUID of the joining device'),
+        confirm: confirmFlagSchema,
+        idempotency_key: idempotencyKeySchema,
+    }),
+    capabilities: [cap('sec_qr_pairing_sessions', 'UPDATE')],
+    sideEffect: 'state_change',
+    confirmation: 'caller_confirms',
+    idempotency: 'natural_key',
+    handler: async (args, ctx) => {
+        const input = args;
+        const body = {
+            joiner_device_id: input.joiner_device_id,
+        };
+        try {
+            const rows = await ctx.apiClient.patch(`${ctx.apiClient.dbBasePath}/sec_qr_pairing_sessions?id=eq.${input.id}&select=*`, body, { headers: writeHeadersWithIdempotency(input.idempotency_key) });
+            if (!rows || rows.length === 0) {
+                return errorResponse(API_ERROR, `SEC QR pairing session ${input.id} not found, expired, or not accessible`);
+            }
+            return successResponse(rows[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to join SEC QR pairing session: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=sec-qr-pairing-join.js.map

package/dist/tools/sec/sec-qr-pairing-join.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sec-qr-pairing-join.js","sourceRoot":"","sources":["../../../src/tools/sec/sec-qr-pairing-join.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,mFAAmF;QACnF,wFAAwF;IAC1F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,iDAAiD,CAAC;QAC9D,gBAAgB,EAAE,CAAC;aAChB,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,4BAA4B,CAAC;QACzC,OAAO,EAAE,iBAAiB;QAC1B,eAAe,EAAE,oBAAoB;KACtC,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACxD,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAIb,CAAC;QACF,MAAM,IAAI,GAA4B;YACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CACpC,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,kCAAkC,KAAK,CAAC,EAAE,WAAW,EAChF,IAAI,EACJ,EAAE,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAChE,CAAC;YACF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAClB,SAAS,EACT,0BAA0B,KAAK,CAAC,EAAE,wCAAwC,CAC3E,CAAC;YACJ,CAAC;YACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAClB,SAAS,EACT,0CAA0C,KAAK,CAAC,OAAO,EAAE,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/sec/sec-qr-pairing-start.d.ts

@@ -0,0 +1,19 @@
+import { Tool } from '../registry.js';
+/**
+ * Provisioning semantic tool: start a new QR pairing session
+ * (`sec_qr_pairing_sessions`). Creating a session opens a bounded
+ * window during which a second device may join and pair with the
+ * initiator, so this is a `provisioning` action that requires
+ * `confirm: true`.
+ *
+ * `encrypted_local_secret`, `encryption_nonce`, and `session_status`
+ * are DELIBERATELY not writable through this tool — the persist
+ * layer generates them server-side. `expires_at` is required so the
+ * caller commits to a bounded lifetime.
+ *
+ * Natural key: (tenant_id, user_id, initiator_device_id, expires_at)
+ * — reusing the same tuple with the same idempotency_key converges
+ * on the original session rather than opening a duplicate window.
+ */
+export declare const secQrPairingStartTool: Tool;
+//# sourceMappingURL=sec-qr-pairing-start.d.ts.map

package/dist/tools/sec/sec-qr-pairing-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sec-qr-pairing-start.d.ts","sourceRoot":"","sources":["../../../src/tools/sec/sec-qr-pairing-start.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAStC;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,qBAAqB,EAAE,IAsDnC,CAAC"}

package/dist/tools/sec/sec-qr-pairing-start.js

@@ -0,0 +1,68 @@
+import { z } from 'zod';
+import { API_ERROR, errorResponse, successResponse } from '../types.js';
+import { cap } from '../../capabilities/tool-capability.js';
+import { confirmFlagSchema, idempotencyKeySchema, writeHeadersWithIdempotency, } from '../_shared/side-effect.js';
+/**
+ * Provisioning semantic tool: start a new QR pairing session
+ * (`sec_qr_pairing_sessions`). Creating a session opens a bounded
+ * window during which a second device may join and pair with the
+ * initiator, so this is a `provisioning` action that requires
+ * `confirm: true`.
+ *
+ * `encrypted_local_secret`, `encryption_nonce`, and `session_status`
+ * are DELIBERATELY not writable through this tool — the persist
+ * layer generates them server-side. `expires_at` is required so the
+ * caller commits to a bounded lifetime.
+ *
+ * Natural key: (tenant_id, user_id, initiator_device_id, expires_at)
+ * — reusing the same tuple with the same idempotency_key converges
+ * on the original session rather than opening a duplicate window.
+ */
+export const secQrPairingStartTool = {
+    name: 'sec_qr_pairing_start',
+    description: 'Start a QR pairing session for the initiator device (sec_qr_pairing_sessions). ' +
+        'Requires confirm=true, user_id, and expires_at. Secrets and session_status are ' +
+        'assigned server-side and never written from MCP. Retry-safe.',
+    inputSchema: z.object({
+        user_id: z
+            .string()
+            .min(1)
+            .describe('UUID of the user owning this pairing session'),
+        initiator_device_id: z
+            .string()
+            .min(1)
+            .optional()
+            .describe('UUID of the initiator device (may be pending device registration)'),
+        expires_at: z
+            .string()
+            .datetime()
+            .describe('ISO-8601 timestamp after which the session is no longer usable. Required so ' +
+            'the caller commits to a bounded pairing window.'),
+        metadata: z.record(z.unknown()).optional(),
+        confirm: confirmFlagSchema,
+        idempotency_key: idempotencyKeySchema,
+    }),
+    capabilities: [cap('sec_qr_pairing_sessions', 'INSERT')],
+    sideEffect: 'provisioning',
+    confirmation: 'caller_confirms',
+    idempotency: 'natural_key',
+    handler: async (args, ctx) => {
+        const input = args;
+        const body = {
+            user_id: input.user_id,
+            expires_at: input.expires_at,
+        };
+        for (const field of ['initiator_device_id', 'metadata']) {
+            if (input[field] !== undefined)
+                body[field] = input[field];
+        }
+        try {
+            const rows = await ctx.apiClient.post(`${ctx.apiClient.dbBasePath}/sec_qr_pairing_sessions?select=*`, body, { headers: writeHeadersWithIdempotency(input.idempotency_key) });
+            return successResponse(rows[0]);
+        }
+        catch (error) {
+            return errorResponse(API_ERROR, `Failed to start SEC QR pairing session: ${error.message}`);
+        }
+    },
+};
+//# sourceMappingURL=sec-qr-pairing-start.js.map

package/dist/tools/sec/sec-qr-pairing-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sec-qr-pairing-start.js","sourceRoot":"","sources":["../../../src/tools/sec/sec-qr-pairing-start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EACT,iFAAiF;QACjF,iFAAiF;QACjF,8DAA8D;IAChE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,8CAA8C,CAAC;QAC3D,mBAAmB,EAAE,CAAC;aACnB,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,mEAAmE,CAAC;QAChF,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,8EAA8E;YAC5E,iDAAiD,CACpD;QACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC1C,OAAO,EAAE,iBAAiB;QAC1B,eAAe,EAAE,oBAAoB;KACtC,CAAC;IACF,YAAY,EAAE,CAAC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACxD,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAC1C,MAAM,IAAI,GAAwB;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,CAAC,qBAAqB,EAAE,UAAU,CAAC,EAAE,CAAC;YACxD,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CACnC,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,mCAAmC,EAC9D,IAAI,EACJ,EAAE,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAChE,CAAC;YACF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAClB,SAAS,EACT,2CAA2C,KAAK,CAAC,OAAO,EAAE,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-effective-mcp-servers.js

@@ -4,20 +4,20 @@ import { WRM_EFFECTIVE_MCP_SERVER_SELECT } from '../../wrm/projection.js';
 import { cap } from '../../capabilities/tool-capability.js';
 export const effectiveMcpServersTool = {
     name: 'wrm_effective_mcp_servers',
-    description: 'Return the resolved MCP server set for a worker, merging definition defaults with instance overrides. Includes source attribution.',
+    description: 'Return the resolved MCP server set for an assignment, merging definition defaults with assignment overrides. Includes source attribution.',
     inputSchema: z.object({
-        worker_id: z.string().describe('UUID of the worker'),
+        assignment_id: z.string().describe('UUID of the worker role assignment'),
         limit: z.number().optional().describe('Max results (default 50, max 200)'),
         offset: z.number().optional().describe('Offset for pagination'),
     }),
     capabilities: [
-        cap('wrm_effective_worker_mcp_servers', 'SELECT'),
+        cap('wrm_effective_assignment_mcp_servers', 'SELECT'),
     ],
     handler: async (args, ctx) => {
         const input = args;
         try {
             const parts = [];
-            parts.push(`worker_id=eq.${input.worker_id}`);
+            parts.push(`assignment_id=eq.${input.assignment_id}`);
             const limit = Math.min(input.limit ?? 50, 200);
             parts.push(`limit=${limit}`);
             if (input.offset) {
@@ -25,7 +25,7 @@ export const effectiveMcpServersTool = {
             }
             parts.push('order=mcp_server_id.asc');
             const query = parts.join('&');
-            const items = await ctx.apiClient.get(`/db/v1/wrm_effective_worker_mcp_servers?select=${WRM_EFFECTIVE_MCP_SERVER_SELECT}&${query}`, { headers: { Prefer: 'count=exact' } });
+            const items = await ctx.apiClient.get(`/db/v1/wrm_effective_assignment_mcp_servers?select=${WRM_EFFECTIVE_MCP_SERVER_SELECT}&${query}`, { headers: { Prefer: 'count=exact' } });
             const offset = input.offset ?? 0;
             return successResponse({
                 items,

package/dist/tools/wrm/wrm-effective-mcp-servers.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-effective-mcp-servers.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-effective-mcp-servers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,oIAAoI;IACtI,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KAChE,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,kCAAkC,EAAE,QAAQ,CAAC;KAClD;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAE9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YAE7B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAEtC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,kDAAkD,+BAA+B,IAAI,KAAK,EAAE,EAC5F,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CACvC,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAEjC,OAAO,eAAe,CAAC;gBACrB,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,yCAAyC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-effective-mcp-servers.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-effective-mcp-servers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,2IAA2I;IAC7I,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QACxE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KAChE,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,sCAAsC,EAAE,QAAQ,CAAC;KACtD;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;YAEtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YAE7B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAEtC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,sDAAsD,+BAA+B,IAAI,KAAK,EAAE,EAChG,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CACvC,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAEjC,OAAO,eAAe,CAAC;gBACrB,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,yCAAyC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-effective-mcp-tools.js

@@ -4,28 +4,28 @@ import { WRM_EFFECTIVE_MCP_TOOL_SELECT } from '../../wrm/projection.js';
 import { cap } from '../../capabilities/tool-capability.js';
 export const effectiveMcpToolsTool = {
     name: 'wrm_effective_mcp_tools',
-    description: 'Return the resolved per-server MCP tool allowlist for a worker, merging definition defaults with instance overrides. Servers with no tool restrictions do not appear (caller infers "all tools allowed"). Includes source attribution.',
+    description: 'Return the resolved MCP tool allowlist for an assignment, merging definition defaults with assignment overrides. Includes source attribution.',
     inputSchema: z.object({
-        worker_id: z.string().describe('UUID of the worker'),
+        assignment_id: z.string().describe('UUID of the worker role assignment'),
         limit: z.number().optional().describe('Max results (default 50, max 200)'),
         offset: z.number().optional().describe('Offset for pagination'),
     }),
     capabilities: [
-        cap('wrm_effective_worker_mcp_tools', 'SELECT'),
+        cap('wrm_effective_assignment_mcp_tools', 'SELECT'),
     ],
     handler: async (args, ctx) => {
         const input = args;
         try {
             const parts = [];
-            parts.push(`worker_id=eq.${input.worker_id}`);
+            parts.push(`assignment_id=eq.${input.assignment_id}`);
             const limit = Math.min(input.limit ?? 50, 200);
             parts.push(`limit=${limit}`);
             if (input.offset) {
                 parts.push(`offset=${input.offset}`);
             }
-            parts.push('order=mcp_server_id.asc,mcp_tool_id.asc');
+            parts.push('order=mcp_tool_id.asc');
             const query = parts.join('&');
-            const items = await ctx.apiClient.get(`/db/v1/wrm_effective_worker_mcp_tools?select=${WRM_EFFECTIVE_MCP_TOOL_SELECT}&${query}`, { headers: { Prefer: 'count=exact' } });
+            const items = await ctx.apiClient.get(`/db/v1/wrm_effective_assignment_mcp_tools?select=${WRM_EFFECTIVE_MCP_TOOL_SELECT}&${query}`, { headers: { Prefer: 'count=exact' } });
             const offset = input.offset ?? 0;
             return successResponse({
                 items,

package/dist/tools/wrm/wrm-effective-mcp-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-effective-mcp-tools.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-effective-mcp-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACT,wOAAwO;IAC1O,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KAChE,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,gCAAgC,EAAE,QAAQ,CAAC;KAChD;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAE9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YAE7B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YAEtD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,gDAAgD,6BAA6B,IAAI,KAAK,EAAE,EACxF,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CACvC,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAEjC,OAAO,eAAe,CAAC;gBACrB,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,uCAAuC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-effective-mcp-tools.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-effective-mcp-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACT,+IAA+I;IACjJ,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QACxE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KAChE,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,oCAAoC,EAAE,QAAQ,CAAC;KACpD;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;YAEtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YAE7B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAEpC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,oDAAoD,6BAA6B,IAAI,KAAK,EAAE,EAC5F,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CACvC,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAEjC,OAAO,eAAe,CAAC;gBACrB,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,uCAAuC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-effective-model-prefs.js

@@ -4,20 +4,20 @@ import { WRM_EFFECTIVE_MODEL_PREF_SELECT } from '../../wrm/projection.js';
 import { cap } from '../../capabilities/tool-capability.js';
 export const effectiveModelPrefsTool = {
     name: 'wrm_effective_model_prefs',
-    description: 'Return the resolved model preference stack for a worker, merging definition defaults with instance overrides. Includes source attribution.',
+    description: 'Return the resolved model preference stack for an assignment, merging definition defaults with assignment overrides. Includes source attribution.',
     inputSchema: z.object({
-        worker_id: z.string().describe('UUID of the worker'),
+        assignment_id: z.string().describe('UUID of the worker role assignment'),
         limit: z.number().optional().describe('Max results (default 50, max 200)'),
         offset: z.number().optional().describe('Offset for pagination'),
     }),
     capabilities: [
-        cap('wrm_effective_worker_model_prefs', 'SELECT'),
+        cap('wrm_effective_assignment_model_prefs', 'SELECT'),
     ],
     handler: async (args, ctx) => {
         const input = args;
         try {
             const parts = [];
-            parts.push(`worker_id=eq.${input.worker_id}`);
+            parts.push(`assignment_id=eq.${input.assignment_id}`);
             const limit = Math.min(input.limit ?? 50, 200);
             parts.push(`limit=${limit}`);
             if (input.offset) {
@@ -25,7 +25,7 @@ export const effectiveModelPrefsTool = {
             }
             parts.push('order=priority.asc');
             const query = parts.join('&');
-            const items = await ctx.apiClient.get(`/db/v1/wrm_effective_worker_model_prefs?select=${WRM_EFFECTIVE_MODEL_PREF_SELECT}&${query}`, { headers: { Prefer: 'count=exact' } });
+            const items = await ctx.apiClient.get(`/db/v1/wrm_effective_assignment_model_prefs?select=${WRM_EFFECTIVE_MODEL_PREF_SELECT}&${query}`, { headers: { Prefer: 'count=exact' } });
             const offset = input.offset ?? 0;
             return successResponse({
                 items,

package/dist/tools/wrm/wrm-effective-model-prefs.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-effective-model-prefs.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-effective-model-prefs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,4IAA4I;IAC9I,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KAChE,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,kCAAkC,EAAE,QAAQ,CAAC;KAClD;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAE9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YAE7B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAEjC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,kDAAkD,+BAA+B,IAAI,KAAK,EAAE,EAC5F,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CACvC,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAEjC,OAAO,eAAe,CAAC;gBACrB,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,yCAAyC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-effective-model-prefs.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-effective-model-prefs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,OAAO,EAAE,GAAG,EAAE,MAAM,uCAAuC,CAAC;AAE5D,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,mJAAmJ;IACrJ,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QACxE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KAChE,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,sCAAsC,EAAE,QAAQ,CAAC;KACtD;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAA2B,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;YAEtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YAE7B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAEjC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACnC,sDAAsD,+BAA+B,IAAI,KAAK,EAAE,EAChG,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CACvC,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAEjC,OAAO,eAAe,CAAC;gBACrB,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,SAAS,EAAE,yCAAyC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/wrm/wrm-worker-resolve-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-worker-resolve-config.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-worker-resolve-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AA0BtC,eAAO,MAAM,uBAAuB,EAAE,IA8JrC,CAAC"}
+{"version":3,"file":"wrm-worker-resolve-config.d.ts","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-worker-resolve-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AA4BtC,eAAO,MAAM,uBAAuB,EAAE,IAgLrC,CAAC"}

package/dist/tools/wrm/wrm-worker-resolve-config.js

@@ -1,37 +1,45 @@
 import { z } from 'zod';
 import { successResponse, errorResponse, WRM_NOT_FOUND, API_ERROR } from '../types.js';
-import { WRM_WORKER_SELECT, WRM_WORKER_DEFINITION_SELECT, WRM_ROLE_SELECT, WRM_EFFECTIVE_MODEL_PREF_SELECT, WRM_EFFECTIVE_MCP_SERVER_SELECT, WRM_EFFECTIVE_MCP_TOOL_SELECT, WRM_ROLE_MEMORY_SELECT, WRM_SANDBOX_PROVIDER_SELECT, } from '../../wrm/projection.js';
+import { WRM_WORKER_SELECT, WRM_WORKER_DEFINITION_SELECT, WRM_WORKER_ROLE_ASSIGNMENT_SELECT, WRM_ROLE_SELECT, WRM_EFFECTIVE_MODEL_PREF_SELECT, WRM_EFFECTIVE_MCP_SERVER_SELECT, WRM_EFFECTIVE_MCP_TOOL_SELECT, WRM_ROLE_MEMORY_SELECT, WRM_SANDBOX_PROVIDER_SELECT, } from '../../wrm/projection.js';
 import { generateEmbedding, toPgvectorLiteral, resolveEmbeddingConfig } from '../../wrm/embedding.js';
 import { cap, rpcCap } from '../../capabilities/tool-capability.js';
 export const workerResolveConfigTool = {
     name: 'wrm_worker_resolve_config',
-    description: 'Return a worker\'s full resolved configuration in a single call — ' +
-        'worker instance, definition, role, effective model stack, MCP servers, ' +
+    description: 'Return a worker\'s full resolved configuration for a specific assignment in a single call — ' +
+        'assignment, worker instance, definition, role, effective model stack, MCP servers, ' +
         'MCP tools, role memories (including semantically-relevant ones when ' +
         'work_item_description is provided), and resolved sandbox provider. ' +
         'Replaces the 8+ CRUD call sequence.',
     inputSchema: z.object({
-        worker_id: z.string().describe('UUID of the worker instance'),
+        assignment_id: z.string().describe('UUID of the worker role assignment'),
         work_item_description: z.string().optional().describe('Optional work item description for semantic memory matching. ' +
             'When provided, generates an embedding and retrieves semantically-relevant ' +
             'memories in addition to role-matched ones.'),
     }),
     capabilities: [
-        cap('wrm_effective_worker_mcp_servers', 'SELECT'),
-        cap('wrm_effective_worker_mcp_tools', 'SELECT'),
-        cap('wrm_effective_worker_model_prefs', 'SELECT'),
+        cap('wrm_effective_assignment_mcp_servers', 'SELECT'),
+        cap('wrm_effective_assignment_mcp_tools', 'SELECT'),
+        cap('wrm_effective_assignment_model_prefs', 'SELECT'),
         cap('wrm_role_memories', 'SELECT'),
         cap('wrm_roles', 'SELECT'),
         cap('wrm_sandbox_providers', 'SELECT'),
         cap('wrm_worker_definitions', 'SELECT'),
+        cap('wrm_worker_role_assignments', 'SELECT'),
         cap('wrm_workers', 'SELECT'),
         ...rpcCap('wrm_semantic_memory_search'),
         ...rpcCap('wrm_update_memory_access'),
     ],
     handler: async (args, ctx) => {
-        const { worker_id, work_item_description } = args;
+        const { assignment_id, work_item_description } = args;
         try {
-            // Phase 1: fetch worker (must succeed before we can look up definition/role)
+            // Phase 1: fetch assignment (must succeed before we can look up worker/definition/role)
+            const assignments = await ctx.apiClient.get(`/db/v1/wrm_worker_role_assignments?id=eq.${assignment_id}&select=${WRM_WORKER_ROLE_ASSIGNMENT_SELECT}`);
+            if (!assignments.length) {
+                return errorResponse(WRM_NOT_FOUND, `Assignment ${assignment_id} not found`);
+            }
+            const assignment = assignments[0];
+            const worker_id = assignment.worker_id;
+            // Phase 2: fetch worker (need worker_id from assignment)
             const workers = await ctx.apiClient.get(`/db/v1/wrm_workers?id=eq.${worker_id}&select=${WRM_WORKER_SELECT}`);
             if (!workers.length) {
                 return errorResponse(WRM_NOT_FOUND, `Worker ${worker_id} not found`);
@@ -40,25 +48,28 @@ export const workerResolveConfigTool = {
             if (worker.status !== 'ACTIVE') {
                 return errorResponse(WRM_NOT_FOUND, `Worker ${worker_id} is not active (status: ${worker.status})`);
             }
-            // Phase 2: fetch definition (need worker_definition_id from phase 1)
-            const definitions = await ctx.apiClient.get(`/db/v1/wrm_worker_definitions?id=eq.${worker.worker_definition_id}&select=${WRM_WORKER_DEFINITION_SELECT}`);
+            // Phase 3: fetch definition (worker_definition_id lives on the assignment)
+            if (!assignment.worker_definition_id) {
+                return errorResponse(WRM_NOT_FOUND, `Assignment ${assignment_id} has no worker definition`);
+            }
+            const definitions = await ctx.apiClient.get(`/db/v1/wrm_worker_definitions?id=eq.${assignment.worker_definition_id}&select=${WRM_WORKER_DEFINITION_SELECT}`);
             if (!definitions.length) {
-                return errorResponse(WRM_NOT_FOUND, `Worker definition ${worker.worker_definition_id} not found`);
+                return errorResponse(WRM_NOT_FOUND, `Worker definition ${assignment.worker_definition_id} not found`);
             }
             const definition = definitions[0];
             // Resolve sandbox provider code from definition metadata
             const sandboxProviderCode = typeof definition.metadata?.sandbox_provider === 'string'
                 ? definition.metadata.sandbox_provider
                 : 'LOCAL';
-            // Phase 3: fetch role + all effective views + role memories in parallel
+            // Phase 4: fetch role + all effective views + role memories in parallel
             const roleId = definition.role_id;
             const [roleResult, modelStack, mcpServers, mcpTools, roleMemories, sandboxProviderResult] = await Promise.all([
                 roleId
                     ? ctx.apiClient.get(`/db/v1/wrm_roles?id=eq.${roleId}&select=${WRM_ROLE_SELECT}`)
                     : Promise.resolve([]),
-                ctx.apiClient.get(`/db/v1/wrm_effective_worker_model_prefs?worker_id=eq.${worker_id}&select=${WRM_EFFECTIVE_MODEL_PREF_SELECT}&order=priority.asc&limit=200`),
-                ctx.apiClient.get(`/db/v1/wrm_effective_worker_mcp_servers?worker_id=eq.${worker_id}&select=${WRM_EFFECTIVE_MCP_SERVER_SELECT}&order=mcp_server_id.asc&limit=200`),
-                ctx.apiClient.get(`/db/v1/wrm_effective_worker_mcp_tools?worker_id=eq.${worker_id}&select=${WRM_EFFECTIVE_MCP_TOOL_SELECT}&order=mcp_server_id.asc,mcp_tool_id.asc&limit=200`),
+                ctx.apiClient.get(`/db/v1/wrm_effective_assignment_model_prefs?assignment_id=eq.${assignment_id}&select=${WRM_EFFECTIVE_MODEL_PREF_SELECT}&order=priority.asc&limit=200`),
+                ctx.apiClient.get(`/db/v1/wrm_effective_assignment_mcp_servers?assignment_id=eq.${assignment_id}&select=${WRM_EFFECTIVE_MCP_SERVER_SELECT}&order=mcp_server_id.asc&limit=200`),
+                ctx.apiClient.get(`/db/v1/wrm_effective_assignment_mcp_tools?assignment_id=eq.${assignment_id}&select=${WRM_EFFECTIVE_MCP_TOOL_SELECT}&order=mcp_tool_id.asc&limit=200`),
                 roleId
                     ? ctx.apiClient.get(`/db/v1/wrm_role_memories?role_id=eq.${roleId}&active=eq.true&select=${WRM_ROLE_MEMORY_SELECT}&order=title.asc&limit=200`)
                     : Promise.resolve([]),
@@ -68,7 +79,7 @@ export const workerResolveConfigTool = {
             ]);
             const role = roleResult.length ? roleResult[0] : null;
             const sandboxProvider = sandboxProviderResult.length ? sandboxProviderResult[0] : null;
-            // Phase 4: semantic memory matching (when work_item_description is provided)
+            // Phase 5: semantic memory matching (when work_item_description is provided)
             let mergedMemories = roleMemories;
             if (work_item_description && roleId) {
                 const embeddingConfig = ctx.config.embedding ?? resolveEmbeddingConfig();
@@ -101,6 +112,7 @@ export const workerResolveConfigTool = {
                 }
             }
             return successResponse({
+                assignment,
                 worker,
                 definition,
                 role,

package/dist/tools/wrm/wrm-worker-resolve-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrm-worker-resolve-config.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-worker-resolve-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,eAAe,EACf,+BAA+B,EAC/B,+BAA+B,EAC/B,6BAA6B,EAC7B,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAYjC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACtG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAEpE,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,oEAAoE;QACpE,yEAAyE;QACzE,sEAAsE;QACtE,qEAAqE;QACrE,qCAAqC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAC7D,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACnD,+DAA+D;YAC/D,4EAA4E;YAC5E,4CAA4C,CAC7C;KACF,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,kCAAkC,EAAE,QAAQ,CAAC;QACjD,GAAG,CAAC,gCAAgC,EAAE,QAAQ,CAAC;QAC/C,GAAG,CAAC,kCAAkC,EAAE,QAAQ,CAAC;QACjD,GAAG,CAAC,mBAAmB,EAAE,QAAQ,CAAC;QAClC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC;QAC1B,GAAG,CAAC,uBAAuB,EAAE,QAAQ,CAAC;QACtC,GAAG,CAAC,wBAAwB,EAAE,QAAQ,CAAC;QACvC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC;QAC5B,GAAG,MAAM,CAAC,4BAA4B,CAAC;QACvC,GAAG,MAAM,CAAC,0BAA0B,CAAC;KACtC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,SAAS,EAAE,qBAAqB,EAAE,GAAG,IAG5C,CAAC;QAEF,IAAI,CAAC;YACH,6EAA6E;YAC7E,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACrC,4BAA4B,SAAS,WAAW,iBAAiB,EAAE,CACpE,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO,aAAa,CAAC,aAAa,EAAE,UAAU,SAAS,YAAY,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAE1B,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAClB,aAAa,EACb,UAAU,SAAS,2BAA2B,MAAM,CAAC,MAAM,GAAG,CAC/D,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACzC,uCAAuC,MAAM,CAAC,oBAAoB,WAAW,4BAA4B,EAAE,CAC5G,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACxB,OAAO,aAAa,CAClB,aAAa,EACb,qBAAqB,MAAM,CAAC,oBAAoB,YAAY,CAC7D,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAElC,yDAAyD;YACzD,MAAM,mBAAmB,GACvB,OAAO,UAAU,CAAC,QAAQ,EAAE,gBAAgB,KAAK,QAAQ;gBACvD,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB;gBACtC,CAAC,CAAC,OAAO,CAAC;YAEd,wEAAwE;YACxE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC;YAElC,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,qBAAqB,CAAC,GACvF,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,MAAM;oBACJ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,0BAA0B,MAAM,WAAW,eAAe,EAAE,CAC7D;oBACH,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,wDAAwD,SAAS,WAAW,+BAA+B,+BAA+B,CAC3I;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,wDAAwD,SAAS,WAAW,+BAA+B,oCAAoC,CAChJ;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,sDAAsD,SAAS,WAAW,6BAA6B,oDAAoD,CAC5J;gBACD,MAAM;oBACJ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,uCAAuC,MAAM,0BAA0B,sBAAsB,4BAA4B,CAC1H;oBACH,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,mBAAmB,KAAK,OAAO;oBAC7B,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,iDAAiD,mBAAmB,0BAA0B,2BAA2B,EAAE,CAC5H,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAA0B,CAAC;oBAC3C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAA0B,CAAC;aAChD,CAAC,CAAC;YAEL,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACtD,MAAM,eAAe,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAEvF,6EAA6E;YAC7E,IAAI,cAAc,GAAoB,YAAY,CAAC;YACnD,IAAI,qBAAqB,IAAI,MAAM,EAAE,CAAC;gBACpC,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,sBAAsB,EAAE,CAAC;gBACzE,IAAI,eAAe,EAAE,CAAC;oBACpB,IAAI,CAAC;wBACH,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC;wBAClF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;wBAE9C,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAC9C,uCAAuC,EACvC,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAC5D,CAAC;wBAEF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC/B,8BAA8B;4BAC9B,IAAI,CAAC;gCACH,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,qCAAqC,EAAE;oCAC9D,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iCAC7C,CAAC,CAAC;4BACL,CAAC;4BAAC,MAAM,CAAC;gCACP,iCAAiC;4BACnC,CAAC;4BAED,kEAAkE;4BAClE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;4BAC3D,MAAM,mBAAmB,GAAoB,eAAe;iCACzD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iCACrC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;4BACjD,cAAc,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,mBAAmB,CAAC,CAAC;wBAC7D,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,wEAAwE;oBAC1E,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,eAAe,CAAC;gBACrB,MAAM;gBACN,UAAU;gBACV,IAAI;gBACJ,WAAW,EAAE,UAAU;gBACvB,WAAW,EAAE,UAAU;gBACvB,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,cAAc;gBAC7B,qBAAqB,EAAE,mBAAmB;gBAC1C,gBAAgB,EAAE,eAAe;aAClC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAClB,SAAS,EACT,oCAAoC,KAAK,CAAC,OAAO,EAAE,CACpD,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}
+{"version":3,"file":"wrm-worker-resolve-config.js","sourceRoot":"","sources":["../../../src/tools/wrm/wrm-worker-resolve-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,iCAAiC,EACjC,eAAe,EACf,+BAA+B,EAC/B,+BAA+B,EAC/B,6BAA6B,EAC7B,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAajC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACtG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAEpE,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,8FAA8F;QAC9F,qFAAqF;QACrF,sEAAsE;QACtE,qEAAqE;QACrE,qCAAqC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QACxE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACnD,+DAA+D;YAC/D,4EAA4E;YAC5E,4CAA4C,CAC7C;KACF,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,sCAAsC,EAAE,QAAQ,CAAC;QACrD,GAAG,CAAC,oCAAoC,EAAE,QAAQ,CAAC;QACnD,GAAG,CAAC,sCAAsC,EAAE,QAAQ,CAAC;QACrD,GAAG,CAAC,mBAAmB,EAAE,QAAQ,CAAC;QAClC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC;QAC1B,GAAG,CAAC,uBAAuB,EAAE,QAAQ,CAAC;QACtC,GAAG,CAAC,wBAAwB,EAAE,QAAQ,CAAC;QACvC,GAAG,CAAC,6BAA6B,EAAE,QAAQ,CAAC;QAC5C,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC;QAC5B,GAAG,MAAM,CAAC,4BAA4B,CAAC;QACvC,GAAG,MAAM,CAAC,0BAA0B,CAAC;KACtC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,aAAa,EAAE,qBAAqB,EAAE,GAAG,IAGhD,CAAC;QAEF,IAAI,CAAC;YACH,wFAAwF;YACxF,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACzC,4CAA4C,aAAa,WAAW,iCAAiC,EAAE,CACxG,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACxB,OAAO,aAAa,CAAC,aAAa,EAAE,cAAc,aAAa,YAAY,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;YAEvC,yDAAyD;YACzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACrC,4BAA4B,SAAS,WAAW,iBAAiB,EAAE,CACpE,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO,aAAa,CAAC,aAAa,EAAE,UAAU,SAAS,YAAY,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAE1B,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,aAAa,CAClB,aAAa,EACb,UAAU,SAAS,2BAA2B,MAAM,CAAC,MAAM,GAAG,CAC/D,CAAC;YACJ,CAAC;YAED,2EAA2E;YAC3E,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC;gBACrC,OAAO,aAAa,CAClB,aAAa,EACb,cAAc,aAAa,2BAA2B,CACvD,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CACzC,uCAAuC,UAAU,CAAC,oBAAoB,WAAW,4BAA4B,EAAE,CAChH,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACxB,OAAO,aAAa,CAClB,aAAa,EACb,qBAAqB,UAAU,CAAC,oBAAoB,YAAY,CACjE,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAElC,yDAAyD;YACzD,MAAM,mBAAmB,GACvB,OAAO,UAAU,CAAC,QAAQ,EAAE,gBAAgB,KAAK,QAAQ;gBACvD,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB;gBACtC,CAAC,CAAC,OAAO,CAAC;YAEd,wEAAwE;YACxE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC;YAElC,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,qBAAqB,CAAC,GACvF,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,MAAM;oBACJ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,0BAA0B,MAAM,WAAW,eAAe,EAAE,CAC7D;oBACH,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,gEAAgE,aAAa,WAAW,+BAA+B,+BAA+B,CACvJ;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,gEAAgE,aAAa,WAAW,+BAA+B,oCAAoC,CAC5J;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,8DAA8D,aAAa,WAAW,6BAA6B,kCAAkC,CACtJ;gBACD,MAAM;oBACJ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,uCAAuC,MAAM,0BAA0B,sBAAsB,4BAA4B,CAC1H;oBACH,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,mBAAmB,KAAK,OAAO;oBAC7B,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CACf,iDAAiD,mBAAmB,0BAA0B,2BAA2B,EAAE,CAC5H,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAA0B,CAAC;oBAC3C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAA0B,CAAC;aAChD,CAAC,CAAC;YAEL,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACtD,MAAM,eAAe,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAEvF,6EAA6E;YAC7E,IAAI,cAAc,GAAoB,YAAY,CAAC;YACnD,IAAI,qBAAqB,IAAI,MAAM,EAAE,CAAC;gBACpC,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,sBAAsB,EAAE,CAAC;gBACzE,IAAI,eAAe,EAAE,CAAC;oBACpB,IAAI,CAAC;wBACH,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC;wBAClF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;wBAE9C,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAC9C,uCAAuC,EACvC,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAC5D,CAAC;wBAEF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC/B,8BAA8B;4BAC9B,IAAI,CAAC;gCACH,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,qCAAqC,EAAE;oCAC9D,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iCAC7C,CAAC,CAAC;4BACL,CAAC;4BAAC,MAAM,CAAC;gCACP,iCAAiC;4BACnC,CAAC;4BAED,kEAAkE;4BAClE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;4BAC3D,MAAM,mBAAmB,GAAoB,eAAe;iCACzD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iCACrC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;4BACjD,cAAc,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,mBAAmB,CAAC,CAAC;wBAC7D,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,wEAAwE;oBAC1E,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,eAAe,CAAC;gBACrB,UAAU;gBACV,MAAM;gBACN,UAAU;gBACV,IAAI;gBACJ,WAAW,EAAE,UAAU;gBACvB,WAAW,EAAE,UAAU;gBACvB,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,cAAc;gBAC7B,qBAAqB,EAAE,mBAAmB;gBAC1C,gBAAgB,EAAE,eAAe;aAClC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,aAAa,CAClB,SAAS,EACT,oCAAoC,KAAK,CAAC,OAAO,EAAE,CACpD,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}