@rubytech/create-maxy-code 0.1.348 → 0.1.349

package/payload/platform/plugins/joblogic/mcp/dist/index.js

@@ -0,0 +1,229 @@
+import { initStderrTee } from "../../../../lib/mcp-stderr-tee/dist/index.js";
+initStderrTee("joblogic");
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { lifelineTool } from "../../../../lib/mcp-lifeline/dist/index.js";
+import { readStore, setCredentials, setEngineerMap, resolveEngineer } from "./lib/secrets.js";
+import { getBearer } from "./lib/auth.js";
+import { jlRequest, jlCreate } from "./lib/client.js";
+// Plugin-system boot tolerance: module init must never throw; tools/list is
+// enumerated with empty env, so account context is resolved per call. Tools are
+// always registered (registering zero with empty env would hide them from the
+// admin allowlist entirely); each handler refuses per-call when context or creds
+// are absent.
+const ACCOUNT_ID = process.env.ACCOUNT_ID ?? null;
+const PLATFORM_ROOT = process.env.PLATFORM_ROOT ?? null;
+function creds() {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return "absent";
+    return readStore(PLATFORM_ROOT, ACCOUNT_ID) ? "present" : "absent";
+}
+process.stderr.write(`[joblogic] op=init account=${ACCOUNT_ID ?? "null"} creds=${creds()}\n`);
+function refuseNoAccount(tool) {
+    process.stderr.write(`[joblogic] tool=${tool} refuse reason=no-account-context\n`);
+    return {
+        content: [
+            {
+                type: "text",
+                text: `${tool} cannot execute: launched without ACCOUNT_ID/PLATFORM_ROOT (metadata-only mode).`,
+            },
+        ],
+        isError: true,
+    };
+}
+function refuseNoCreds(tool) {
+    process.stderr.write(`[joblogic] tool=${tool} refuse reason=no-creds\n`);
+    return {
+        content: [
+            {
+                type: "text",
+                text: `${tool} cannot execute: no JobLogic credentials set for this account. Run joblogic-credentials-set.`,
+            },
+        ],
+        isError: true,
+    };
+}
+function ok(data) {
+    return {
+        content: [
+            { type: "text", text: typeof data === "string" ? data : JSON.stringify(data, null, 2) },
+        ],
+    };
+}
+function fail(msg) {
+    return { content: [{ type: "text", text: msg }], isError: true };
+}
+function withStore(tool) {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return { refusal: refuseNoAccount(tool) };
+    const store = readStore(PLATFORM_ROOT, ACCOUNT_ID);
+    if (!store)
+        return { refusal: refuseNoCreds(tool) };
+    return { store };
+}
+const server = new McpServer({ name: "joblogic", version: "0.1.0" });
+const body = z.record(z.unknown());
+// --- Management ----------------------------------------------------------
+lifelineTool(server, "joblogic-credentials-set", "Store this account's JobLogic integration credentials (OAuth client_credentials) and company tenant id. environment is 'uat' (test) or 'production'. Get client_id/secret from a JobLogic Support ticket; the source IP must be whitelisted by JobLogic.", {
+    clientId: z.string(),
+    clientSecret: z.string(),
+    tenantId: z.string().describe("Company tenant id, required on every call"),
+    environment: z.enum(["uat", "production"]),
+}, async ({ clientId, clientSecret, tenantId, environment }) => {
+    if (!ACCOUNT_ID || !PLATFORM_ROOT)
+        return refuseNoAccount("joblogic-credentials-set");
+    try {
+        setCredentials(PLATFORM_ROOT, ACCOUNT_ID, { clientId, clientSecret, tenantId, environment });
+        return ok(`Stored JobLogic ${environment} credentials for tenant ${tenantId}.`);
+    }
+    catch (e) {
+        return fail(`joblogic-credentials-set failed: ${e.message}`);
+    }
+});
+lifelineTool(server, "joblogic-connection-status", "Probe JobLogic auth: acquire a token and report environment + tenant. Use to confirm the credentials and source-IP whitelisting work before relying on the connector.", {}, async () => {
+    const r = withStore("joblogic-connection-status");
+    if ("refusal" in r)
+        return r.refusal;
+    try {
+        await getBearer(r.store, ACCOUNT_ID, { force: true });
+        return ok({ environment: r.store.environment, tenantId: r.store.tenantId, token: "acquired" });
+    }
+    catch (e) {
+        return fail(`joblogic-connection-status failed: ${e.message}`);
+    }
+});
+lifelineTool(server, "joblogic-engineer-map-set", "Map sender phone numbers (E.164) to JobLogic engineer ids, so a voice-noted write is attributed to the engineer who reported it. Merges with existing entries.", { entries: z.record(z.string()).describe('e.g. {"+447700900001":"eng-7"}') }, async ({ entries }) => {
+    const r = withStore("joblogic-engineer-map-set");
+    if ("refusal" in r)
+        return r.refusal;
+    try {
+        setEngineerMap(PLATFORM_ROOT, ACCOUNT_ID, entries);
+        return ok(`Stored ${Object.keys(entries).length} engineer mapping(s).`);
+    }
+    catch (e) {
+        return fail(`joblogic-engineer-map-set failed: ${e.message}`);
+    }
+});
+lifelineTool(server, "joblogic-engineer-map-list", "List the stored sender-phone → JobLogic engineer id mappings for this account.", {}, async () => {
+    const r = withStore("joblogic-engineer-map-list");
+    if ("refusal" in r)
+        return r.refusal;
+    return ok(r.store.engineerMap);
+});
+// --- Read factory --------------------------------------------------------
+function readTool(tool, entity, path, description) {
+    lifelineTool(server, tool, description, { query: z.record(z.string()).optional().describe("Optional JobLogic query params, e.g. { id: '123' } or filters") }, async ({ query }) => {
+        const r = withStore(tool);
+        if ("refusal" in r)
+            return r.refusal;
+        try {
+            return ok(await jlRequest({ store: r.store, accountId: ACCOUNT_ID, method: "GET", path, entity, tool, query }));
+        }
+        catch (e) {
+            return fail(`${tool} failed: ${e.message}`);
+        }
+    });
+}
+// --- Write (create, idempotent) factory ---------------------------------
+function createToolFactory(tool, entity, path, description, attributable) {
+    const schema = {
+        idemKey: z
+            .string()
+            .describe("Idempotency key — a retry with the same key returns the first record and sends nothing. Derive it deterministically from the write's natural key."),
+        body: body.describe(`${entity} body (fields per the JobLogic Postman reference; provisional until UAT-confirmed)`),
+    };
+    if (attributable) {
+        schema.senderPhone = z
+            .string()
+            .optional()
+            .describe("Sender phone (E.164); resolved to an engineer id via the engineer map and stamped on the write.");
+    }
+    lifelineTool(server, tool, description, schema, async (a) => {
+        const r = withStore(tool);
+        if ("refusal" in r)
+            return r.refusal;
+        let writeBody = a.body;
+        if (attributable && a.senderPhone) {
+            const eng = resolveEngineer(r.store, a.senderPhone);
+            // The map is the trusted attribution source: a resolved engineerId wins
+            // over any caller-supplied body.engineerId.
+            if (eng)
+                writeBody = { ...a.body, engineerId: eng };
+        }
+        try {
+            return ok(await jlCreate({
+                store: r.store,
+                accountId: ACCOUNT_ID,
+                platformRoot: PLATFORM_ROOT,
+                path,
+                entity,
+                tool,
+                idemKey: a.idemKey,
+                body: writeBody,
+            }));
+        }
+        catch (e) {
+            return fail(`${tool} failed: ${e.message}`);
+        }
+    });
+}
+// --- Update / transition (POST, non-idempotent — caller supplies the id) --
+function postTool(tool, entity, path, description) {
+    lifelineTool(server, tool, description, { body: body.describe(`${entity} body — MUST include the record id`) }, async ({ body: b }) => {
+        const r = withStore(tool);
+        if ("refusal" in r)
+            return r.refusal;
+        try {
+            return ok(await jlRequest({ store: r.store, accountId: ACCOUNT_ID, method: "POST", path, entity, tool, body: b }));
+        }
+        catch (e) {
+            return fail(`${tool} failed: ${e.message}`);
+        }
+    });
+}
+// --- Lifecycle registrations (paths provisional vs the Postman collection) -
+readTool("joblogic-customer-list", "Customer", "Customer/GetAll", "List JobLogic customers.");
+readTool("joblogic-customer-get", "Customer", "Customer/GetById", "Get one JobLogic customer by id (pass { id }).");
+createToolFactory("joblogic-customer-create", "Customer", "Customer/Create", "Create a JobLogic customer.", false);
+postTool("joblogic-customer-update", "Customer", "Customer/Update", "Update a JobLogic customer (body includes id).");
+readTool("joblogic-site-list", "Site", "Site/GetAll", "List JobLogic sites.");
+readTool("joblogic-site-get", "Site", "Site/GetById", "Get one JobLogic site by id.");
+createToolFactory("joblogic-site-create", "Site", "Site/Create", "Create a JobLogic site.", false);
+postTool("joblogic-site-update", "Site", "Site/Update", "Update a JobLogic site (body includes id).");
+readTool("joblogic-job-list", "Job", "Job/GetAll", "List JobLogic jobs.");
+readTool("joblogic-job-get", "Job", "Job/GetById", "Get one JobLogic job by id.");
+createToolFactory("joblogic-job-create", "Job", "Job/Create", "Create a JobLogic job.", false);
+postTool("joblogic-job-update", "Job", "Job/Update", "Update a JobLogic job (body includes id).");
+postTool("joblogic-job-set-status", "Job", "Job/SetStatus", "Set a job's status (body includes id + status).");
+postTool("joblogic-job-approve", "Job", "Job/Approve", "Approve a job (body includes id).");
+readTool("joblogic-engineer-list", "Engineer", "Engineer/GetAll", "List JobLogic engineers.");
+readTool("joblogic-engineer-get", "Engineer", "Engineer/GetById", "Get one JobLogic engineer by id.");
+readTool("joblogic-visit-search-planner", "Visit", "Visit/SearchPlanner", "Search the JobLogic visit planner (pass date/engineer filters in query).");
+readTool("joblogic-visit-get", "Visit", "Visit/GetById", "Get one JobLogic visit by id.");
+createToolFactory("joblogic-visit-create", "Visit", "Visit/Create", "Create a JobLogic visit.", true);
+postTool("joblogic-visit-update", "Visit", "Visit/Update", "Update a JobLogic visit (body includes id).");
+postTool("joblogic-visit-deploy", "Visit", "Visit/Deploy", "Deploy a JobLogic visit to an engineer (body includes id).");
+postTool("joblogic-visit-cancel", "Visit", "Visit/Cancel", "Cancel a JobLogic visit (body includes id).");
+readTool("joblogic-quote-list", "Quote", "Quote/GetAll", "List JobLogic quotes.");
+readTool("joblogic-quote-get", "Quote", "Quote/GetById", "Get one JobLogic quote by id.");
+createToolFactory("joblogic-quote-create", "Quote", "Quote/Create", "Create a JobLogic quote.", false);
+postTool("joblogic-quote-approve", "Quote", "Quote/Approve", "Approve a JobLogic quote (body includes id).");
+readTool("joblogic-invoice-list", "Invoice", "Invoice/GetAll", "List JobLogic invoices.");
+readTool("joblogic-invoice-get", "Invoice", "Invoice/GetById", "Get one JobLogic invoice by id.");
+createToolFactory("joblogic-invoice-create", "Invoice", "Invoice/Create", "Create (raise) a JobLogic invoice.", false);
+createToolFactory("joblogic-invoice-payment-create", "InvoicePayment", "Invoice/Payment/Create", "Record a payment against a JobLogic invoice.", false);
+readTool("joblogic-asset-list", "Asset", "Asset/GetAll", "List JobLogic assets.");
+readTool("joblogic-asset-get", "Asset", "Asset/GetById", "Get one JobLogic asset by id.");
+createToolFactory("joblogic-asset-create", "Asset", "Asset/Create", "Create a JobLogic asset.", false);
+postTool("joblogic-asset-update", "Asset", "Asset/Update", "Update a JobLogic asset (body includes id).");
+readTool("joblogic-timesheet-list", "Timesheet", "Timesheet/GetAll", "List JobLogic timesheets.");
+createToolFactory("joblogic-timesheet-create", "Timesheet", "Timesheet/Create", "Create a JobLogic timesheet entry.", true);
+postTool("joblogic-timesheet-update", "Timesheet", "Timesheet/Update", "Update a JobLogic timesheet entry (body includes id).");
+createToolFactory("joblogic-jobcost-create", "JobCost", "JobCost/Create", "Create a JobLogic job-cost line. Set body.kind to Labour|Material|Travel|Mileage|Expense.", true);
+postTool("joblogic-jobcost-update", "JobCost", "JobCost/Update", "Update a JobLogic job-cost line (body includes id).");
+createToolFactory("joblogic-note-create", "Note", "Note/Create", "Create a note on a job/visit (e.g. a voice-note transcript).", true);
+readTool("joblogic-attachment-url-generate", "Attachment", "Attachment/GenerateUrl", "Generate an upload URL for an attachment (field photo etc.).");
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=index.js.map

package/payload/platform/plugins/joblogic/mcp/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,aAAa,CAAC,UAAU,CAAC,CAAC;AAE1B,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAgB,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEtD,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,cAAc;AACd,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;AAClD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC;AAExD,SAAS,KAAK;IACZ,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrE,CAAC;AACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,UAAU,IAAI,MAAM,UAAU,KAAK,EAAE,IAAI,CAAC,CAAC;AAE9F,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAI,qCAAqC,CAAC,CAAC;IACnF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,IAAI,kFAAkF;aAChG;SACF;QACD,OAAO,EAAE,IAAa;KACvB,CAAC;AACJ,CAAC;AACD,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAI,2BAA2B,CAAC,CAAC;IACzE,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,IAAI,8FAA8F;aAC5G;SACF;QACD,OAAO,EAAE,IAAa;KACvB,CAAC;AACJ,CAAC;AACD,SAAS,EAAE,CAAC,IAAa;IACvB,OAAO;QACL,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;SACjG;KACF,CAAC;AACJ,CAAC;AACD,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;AACrF,CAAC;AAID,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7E,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;IACpD,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AACrE,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAEnC,4EAA4E;AAC5E,YAAY,CACV,MAAM,EACN,0BAA0B,EAC1B,0PAA0P,EAC1P;IACE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC1E,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;CAC3C,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE;IAC1D,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,eAAe,CAAC,0BAA0B,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,cAAc,CAAC,aAAa,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7F,OAAO,EAAE,CAAC,mBAAmB,WAAW,2BAA2B,QAAQ,GAAG,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,oCAAqC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC,CACF,CAAC;AAEF,YAAY,CACV,MAAM,EACN,4BAA4B,EAC5B,uKAAuK,EACvK,EAAE,EACF,KAAK,IAAI,EAAE;IACT,MAAM,CAAC,GAAG,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAClD,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,UAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,sCAAuC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CACF,CAAC;AAEF,YAAY,CACV,MAAM,EACN,2BAA2B,EAC3B,gKAAgK,EAChK,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,EAC5E,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACpB,MAAM,CAAC,GAAG,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACjD,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACrC,IAAI,CAAC;QACH,cAAc,CAAC,aAAc,EAAE,UAAW,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO,EAAE,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,uBAAuB,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,qCAAsC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC,CACF,CAAC;AAEF,YAAY,CACV,MAAM,EACN,4BAA4B,EAC5B,gFAAgF,EAChF,EAAE,EACF,KAAK,IAAI,EAAE;IACT,MAAM,CAAC,GAAG,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAClD,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AACjC,CAAC,CACF,CAAC;AAEF,4EAA4E;AAC5E,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc,EAAE,IAAY,EAAE,WAAmB;IAC/E,YAAY,CACV,MAAM,EACN,IAAI,EACJ,WAAW,EACX,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC,EAAE,EACpH,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClB,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,MAAM,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,UAAW,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACnH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,GAAG,IAAI,YAAa,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,iBAAiB,CAAC,IAAY,EAAE,MAAc,EAAE,IAAY,EAAE,WAAmB,EAAE,YAAqB;IAC/G,MAAM,MAAM,GAAiC;QAC3C,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,CACP,mJAAmJ,CACpJ;QACH,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,oFAAoF,CAAC;KACnH,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,WAAW,GAAG,CAAC;aACnB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,iGAAiG,CAAC,CAAC;IACjH,CAAC;IACD,YAAY,CACV,MAAM,EACN,IAAI,EACJ,WAAW,EACX,MAAM,EACN,KAAK,EAAE,CAA2E,EAAE,EAAE;QACpF,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QACrC,IAAI,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC;QACvB,IAAI,YAAY,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;YACpD,wEAAwE;YACxE,4CAA4C;YAC5C,IAAI,GAAG;gBAAE,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,CAAC;YACH,OAAO,EAAE,CACP,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,SAAS,EAAE,UAAW;gBACtB,YAAY,EAAE,aAAc;gBAC5B,IAAI;gBACJ,MAAM;gBACN,IAAI;gBACJ,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,IAAI,EAAE,SAAS;aAChB,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,GAAG,IAAI,YAAa,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc,EAAE,IAAY,EAAE,WAAmB;IAC/E,YAAY,CACV,MAAM,EACN,IAAI,EACJ,WAAW,EACX,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,oCAAoC,CAAC,EAAE,EACtE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAqC,EAAE,EAAE;QACvD,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,MAAM,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,UAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACtH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,GAAG,IAAI,YAAa,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,QAAQ,CAAC,wBAAwB,EAAE,UAAU,EAAE,iBAAiB,EAAE,0BAA0B,CAAC,CAAC;AAC9F,QAAQ,CAAC,uBAAuB,EAAE,UAAU,EAAE,kBAAkB,EAAE,gDAAgD,CAAC,CAAC;AACpH,iBAAiB,CAAC,0BAA0B,EAAE,UAAU,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,KAAK,CAAC,CAAC;AACnH,QAAQ,CAAC,0BAA0B,EAAE,UAAU,EAAE,iBAAiB,EAAE,gDAAgD,CAAC,CAAC;AAEtH,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;AAC9E,QAAQ,CAAC,mBAAmB,EAAE,MAAM,EAAE,cAAc,EAAE,8BAA8B,CAAC,CAAC;AACtF,iBAAiB,CAAC,sBAAsB,EAAE,MAAM,EAAE,aAAa,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAC;AACnG,QAAQ,CAAC,sBAAsB,EAAE,MAAM,EAAE,aAAa,EAAE,4CAA4C,CAAC,CAAC;AAEtG,QAAQ,CAAC,mBAAmB,EAAE,KAAK,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAC;AAC1E,QAAQ,CAAC,kBAAkB,EAAE,KAAK,EAAE,aAAa,EAAE,6BAA6B,CAAC,CAAC;AAClF,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC;AAC/F,QAAQ,CAAC,qBAAqB,EAAE,KAAK,EAAE,YAAY,EAAE,2CAA2C,CAAC,CAAC;AAClG,QAAQ,CAAC,yBAAyB,EAAE,KAAK,EAAE,eAAe,EAAE,iDAAiD,CAAC,CAAC;AAC/G,QAAQ,CAAC,sBAAsB,EAAE,KAAK,EAAE,aAAa,EAAE,mCAAmC,CAAC,CAAC;AAE5F,QAAQ,CAAC,wBAAwB,EAAE,UAAU,EAAE,iBAAiB,EAAE,0BAA0B,CAAC,CAAC;AAC9F,QAAQ,CAAC,uBAAuB,EAAE,UAAU,EAAE,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;AAEtG,QAAQ,CAAC,+BAA+B,EAAE,OAAO,EAAE,qBAAqB,EAAE,0EAA0E,CAAC,CAAC;AACtJ,QAAQ,CAAC,oBAAoB,EAAE,OAAO,EAAE,eAAe,EAAE,+BAA+B,CAAC,CAAC;AAC1F,iBAAiB,CAAC,uBAAuB,EAAE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAC;AACtG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,EAAE,cAAc,EAAE,6CAA6C,CAAC,CAAC;AAC1G,QAAQ,CAAC,uBAAuB,EAAE,OAAO,EAAE,cAAc,EAAE,4DAA4D,CAAC,CAAC;AACzH,QAAQ,CAAC,uBAAuB,EAAE,OAAO,EAAE,cAAc,EAAE,6CAA6C,CAAC,CAAC;AAE1G,QAAQ,CAAC,qBAAqB,EAAE,OAAO,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAC;AAClF,QAAQ,CAAC,oBAAoB,EAAE,OAAO,EAAE,eAAe,EAAE,+BAA+B,CAAC,CAAC;AAC1F,iBAAiB,CAAC,uBAAuB,EAAE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAAC;AACvG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,eAAe,EAAE,8CAA8C,CAAC,CAAC;AAE7G,QAAQ,CAAC,uBAAuB,EAAE,SAAS,EAAE,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;AAC1F,QAAQ,CAAC,sBAAsB,EAAE,SAAS,EAAE,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;AAClG,iBAAiB,CAAC,yBAAyB,EAAE,SAAS,EAAE,gBAAgB,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAC;AACvH,iBAAiB,CAAC,iCAAiC,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,8CAA8C,EAAE,KAAK,CAAC,CAAC;AAExJ,QAAQ,CAAC,qBAAqB,EAAE,OAAO,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAC;AAClF,QAAQ,CAAC,oBAAoB,EAAE,OAAO,EAAE,eAAe,EAAE,+BAA+B,CAAC,CAAC;AAC1F,iBAAiB,CAAC,uBAAuB,EAAE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAAC;AACvG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,EAAE,cAAc,EAAE,6CAA6C,CAAC,CAAC;AAE1G,QAAQ,CAAC,yBAAyB,EAAE,WAAW,EAAE,kBAAkB,EAAE,2BAA2B,CAAC,CAAC;AAClG,iBAAiB,CAAC,2BAA2B,EAAE,WAAW,EAAE,kBAAkB,EAAE,oCAAoC,EAAE,IAAI,CAAC,CAAC;AAC5H,QAAQ,CAAC,2BAA2B,EAAE,WAAW,EAAE,kBAAkB,EAAE,uDAAuD,CAAC,CAAC;AAEhI,iBAAiB,CAAC,yBAAyB,EAAE,SAAS,EAAE,gBAAgB,EAAE,2FAA2F,EAAE,IAAI,CAAC,CAAC;AAC7K,QAAQ,CAAC,yBAAyB,EAAE,SAAS,EAAE,gBAAgB,EAAE,qDAAqD,CAAC,CAAC;AAExH,iBAAiB,CAAC,sBAAsB,EAAE,MAAM,EAAE,aAAa,EAAE,8DAA8D,EAAE,IAAI,CAAC,CAAC;AACvI,QAAQ,CAAC,kCAAkC,EAAE,YAAY,EAAE,wBAAwB,EAAE,8DAA8D,CAAC,CAAC;AAErJ,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.d.ts

@@ -0,0 +1,31 @@
+import type { JlStore, JlEnvironment } from "./secrets.js";
+/** Strip credential-shaped substrings and cap length before an upstream error
+ *  body is put into a thrown message that may reach a tool response/transcript. */
+export declare function sanitizeErrorBody(text: string): string;
+export declare function identityBaseFor(env: JlEnvironment): string;
+export declare function apiBaseFor(env: JlEnvironment): string;
+export type FetchLike = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body?: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    text: () => Promise<string>;
+}>;
+export interface Token {
+    accessToken: string;
+    expiresIn: number;
+}
+export declare function acquireToken(store: JlStore, opts?: {
+    fetchImpl?: FetchLike;
+}): Promise<Token>;
+/** Return a valid bearer, refreshing if cached is stale or force=true.
+ *  reason drives the op=token-refresh line; first acquisition logs op=token-acquire only. */
+export declare function getBearer(store: JlStore, accountId: string, opts?: {
+    force?: boolean;
+    fetchImpl?: FetchLike;
+}): Promise<string>;
+/** Test seam: clear the per-process cache. */
+export declare function _resetTokenCache(): void;
+//# sourceMappingURL=auth.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAa3D;mFACmF;AACnF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMtD;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAE1D;AACD,wBAAgB,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAErD;AAED,MAAM,MAAM,SAAS,GAAG,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,KACrE,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,CAAC,CAAC;AAM3E,MAAM,WAAW,KAAK;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CA6BvG;AAQD;6FAC6F;AAC7F,wBAAsB,SAAS,CAC7B,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GACpD,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,8CAA8C;AAC9C,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.js

@@ -0,0 +1,78 @@
+const IDENTITY_BASE = {
+    uat: "https://uatidentityserver.joblogic.com",
+    production: "https://identityserver.joblogic.com",
+};
+const API_BASE = {
+    uat: "https://uatapi.joblogic.com",
+    production: "https://api.joblogic.com",
+};
+/** Refresh when the cached token is within this window of expiry. */
+const REFRESH_THRESHOLD_MS = 120_000;
+/** Strip credential-shaped substrings and cap length before an upstream error
+ *  body is put into a thrown message that may reach a tool response/transcript. */
+export function sanitizeErrorBody(text) {
+    return text
+        .replace(/client_secret=[^&\s"]*/gi, "client_secret=***")
+        .replace(/client_id=[^&\s"]*/gi, "client_id=***")
+        .replace(/Bearer\s+[A-Za-z0-9._-]+/gi, "Bearer ***")
+        .slice(0, 300);
+}
+export function identityBaseFor(env) {
+    return IDENTITY_BASE[env];
+}
+export function apiBaseFor(env) {
+    return API_BASE[env];
+}
+export async function acquireToken(store, opts = {}) {
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    const url = `${identityBaseFor(store.environment)}/connect/token`;
+    const body = new URLSearchParams({
+        grant_type: "client_credentials",
+        client_id: store.clientId,
+        client_secret: store.clientSecret,
+    }).toString();
+    const started = Date.now();
+    const res = await fetchImpl(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded", Accept: "application/json" },
+        body,
+    });
+    const text = await res.text();
+    // The token request carried client_secret; some identity servers echo request
+    // params in a 4xx body. Strip secrets and cap length before the message can
+    // reach a tool response / transcript.
+    if (!res.ok)
+        throw new Error(`token endpoint ${res.status}: ${sanitizeErrorBody(text)}`);
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch {
+        throw new Error(`token endpoint non-JSON: ${text}`);
+    }
+    if (!raw.access_token)
+        throw new Error(`token endpoint missing access_token: ${text}`);
+    const expiresIn = raw.expires_in ?? 3600;
+    process.stderr.write(`[joblogic] op=token-acquire ok=true expiresInS=${expiresIn} ms=${Date.now() - started}\n`);
+    return { accessToken: raw.access_token, expiresIn };
+}
+const tokenCache = new Map();
+/** Return a valid bearer, refreshing if cached is stale or force=true.
+ *  reason drives the op=token-refresh line; first acquisition logs op=token-acquire only. */
+export async function getBearer(store, accountId, opts = {}) {
+    const cached = tokenCache.get(accountId);
+    const fresh = cached && cached.expiresAt - REFRESH_THRESHOLD_MS > Date.now();
+    if (fresh && !opts.force)
+        return cached.accessToken;
+    if (cached) {
+        process.stderr.write(`[joblogic] op=token-refresh reason=${opts.force ? "401" : "pre-expiry"} ok=true\n`);
+    }
+    const tok = await acquireToken(store, { fetchImpl: opts.fetchImpl });
+    tokenCache.set(accountId, { accessToken: tok.accessToken, expiresAt: Date.now() + tok.expiresIn * 1000 });
+    return tok.accessToken;
+}
+/** Test seam: clear the per-process cache. */
+export function _resetTokenCache() {
+    tokenCache.clear();
+}
+//# sourceMappingURL=auth.js.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAKA,MAAM,aAAa,GAAkC;IACnD,GAAG,EAAE,wCAAwC;IAC7C,UAAU,EAAE,qCAAqC;CAClD,CAAC;AACF,MAAM,QAAQ,GAAkC;IAC9C,GAAG,EAAE,6BAA6B;IAClC,UAAU,EAAE,0BAA0B;CACvC,CAAC;AACF,qEAAqE;AACrE,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAErC;mFACmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI;SACR,OAAO,CAAC,0BAA0B,EAAE,mBAAmB,CAAC;SACxD,OAAO,CAAC,sBAAsB,EAAE,eAAe,CAAC;SAChD,OAAO,CAAC,4BAA4B,EAAE,YAAY,CAAC;SACnD,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAkB;IAChD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,GAAkB;IAC3C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAc,EAAE,OAAkC,EAAE;IACrF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC/E,MAAM,GAAG,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,aAAa,EAAE,KAAK,CAAC,YAAY;KAClC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACd,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QAC/B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC5F,IAAI;KACL,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,8EAA8E;IAC9E,4EAA4E;IAC5E,sCAAsC;IACtC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,KAAK,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,SAAS,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;IACjH,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAMD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE7C;6FAC6F;AAC7F,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAc,EACd,SAAiB,EACjB,OAAmD,EAAE;IAErD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7E,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAO,CAAC,WAAW,CAAC;IACrD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,YAAY,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACrE,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC,CAAC;IAC1G,OAAO,GAAG,CAAC,WAAW,CAAC;AACzB,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,gBAAgB;IAC9B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.d.ts

@@ -0,0 +1,35 @@
+import type { JlStore } from "./secrets.js";
+import { type FetchLike } from "./auth.js";
+export type AccessFaultKind = "auth" | "whitelist" | "network";
+export declare function classifyAccessFault(status: number): AccessFaultKind;
+export interface BaseArgs {
+    store: JlStore;
+    accountId: string;
+    method: "GET" | "POST";
+    /** path under /api/v1/, e.g. "Customer/GetAll". */
+    path: string;
+    /** entity label for the observability line. */
+    entity: string;
+    /** tool name for the observability line. */
+    tool: string;
+    /** extra query params (merged with tenantId). */
+    query?: Record<string, string>;
+    /** request body for POST. tenantId is also injected into the body for writes. */
+    body?: Record<string, unknown>;
+}
+/** A read or generic call. Performs one silent re-acquire on a 401. */
+export declare function jlRequest(args: BaseArgs, opts?: {
+    fetchImpl?: FetchLike;
+}): Promise<unknown>;
+/** A create with idempotency. idemKey lookup short-circuits a duplicate send.
+ *  platformRoot is threaded explicitly (the ledger lives under the account secrets dir). */
+export interface JlCreateArgs extends Omit<BaseArgs, "method"> {
+    platformRoot: string;
+    idemKey: string;
+    /** field on the response carrying the new record id (default "id"). */
+    idField?: string;
+}
+export declare function jlCreate(args: JlCreateArgs, opts?: {
+    fetchImpl?: FetchLike;
+}): Promise<unknown>;
+//# sourceMappingURL=client.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAA4C,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAGrF,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAE/D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAInE;AAMD,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AA2BD,uEAAuE;AACvE,wBAAsB,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAoCtG;AAED;4FAC4F;AAC5F,MAAM,WAAW,YAAa,SAAQ,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAoCzG"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.js

@@ -0,0 +1,106 @@
+// JobLogic REST wrapper. Injects Bearer + tenantId on every call, emits the
+// observability lifeline, classifies any 401/403/network failure as an
+// access-fault, and performs exactly one silent token re-acquire on a 401.
+import { randomBytes } from "node:crypto";
+import { apiBaseFor, getBearer, sanitizeErrorBody } from "./auth.js";
+import { lookupIdem, recordIdem } from "./idempotency.js";
+export function classifyAccessFault(status) {
+    if (status === 401)
+        return "auth";
+    if (status === 403)
+        return "whitelist";
+    return "network"; // status 0 / connect failure
+}
+function reqId() {
+    return randomBytes(6).toString("hex");
+}
+async function doFetch(args, accessToken, fetchImpl) {
+    const params = new URLSearchParams({ tenantId: args.store.tenantId, ...(args.query ?? {}) });
+    const url = `${apiBaseFor(args.store.environment)}/api/v1/${args.path}?${params.toString()}`;
+    const headers = { Authorization: `Bearer ${accessToken}`, Accept: "application/json" };
+    let bodyStr;
+    if (args.body !== undefined) {
+        headers["Content-Type"] = "application/json";
+        bodyStr = JSON.stringify({ tenantId: args.store.tenantId, ...args.body });
+    }
+    try {
+        const res = await fetchImpl(url, { method: args.method, headers, body: bodyStr });
+        return { ok: res.ok, status: res.status, text: await res.text() };
+    }
+    catch (err) {
+        // connect-level failure → network access-fault
+        process.stderr.write(`[joblogic] op=access-fault kind=network tool=${args.tool} entity=${args.entity} detail=${err.message}\n`);
+        throw new Error(`access-fault kind=network: ${err.message}`);
+    }
+}
+/** A read or generic call. Performs one silent re-acquire on a 401. */
+export async function jlRequest(args, opts = {}) {
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    const id = reqId();
+    const isWrite = args.method === "POST";
+    process.stderr.write(isWrite
+        ? `[joblogic] op=mutation reqId=${id} tool=${args.tool} entity=${args.entity} verb=update\n`
+        : `[joblogic] op=request reqId=${id} tool=${args.tool} entity=${args.entity}\n`);
+    let bearer = await getBearer(args.store, args.accountId, { fetchImpl });
+    const started = Date.now();
+    let res = await doFetch(args, bearer, fetchImpl);
+    if (res.status === 401) {
+        bearer = await getBearer(args.store, args.accountId, { force: true, fetchImpl });
+        res = await doFetch(args, bearer, fetchImpl);
+    }
+    const ms = Date.now() - started;
+    if (!res.ok) {
+        if (res.status === 401 || res.status === 403) {
+            process.stderr.write(`[joblogic] op=access-fault kind=${classifyAccessFault(res.status)} tool=${args.tool} entity=${args.entity}\n`);
+        }
+        process.stderr.write(`[joblogic] op=response reqId=${id} status=${res.status} ms=${ms} rows=-\n`);
+        throw new Error(`JobLogic ${args.method} ${args.path} ${res.status}: ${sanitizeErrorBody(res.text)}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(res.text);
+    }
+    catch {
+        throw new Error(`JobLogic ${args.path} non-JSON: ${res.text}`);
+    }
+    const data = parsed.data;
+    const rows = Array.isArray(data) ? data.length : "-";
+    process.stderr.write(`[joblogic] op=response reqId=${id} status=${res.status} ms=${ms} rows=${rows}\n`);
+    return parsed;
+}
+export async function jlCreate(args, opts = {}) {
+    const id = reqId();
+    const hit = lookupIdem(args.platformRoot, args.accountId, args.idemKey);
+    if (hit) {
+        process.stderr.write(`[joblogic] op=idem-hit reqId=${id} tool=${args.tool} existingId=${hit.recordId}\n`);
+        return { idempotent: true, id: hit.recordId, entity: hit.entity };
+    }
+    const result = await jlRequest({
+        store: args.store,
+        accountId: args.accountId,
+        method: "POST",
+        path: args.path,
+        entity: args.entity,
+        tool: args.tool,
+        query: args.query,
+        body: args.body,
+    }, opts);
+    const writtenId = extractId(result, args.idField);
+    if (!writtenId) {
+        // A 2xx with no extractable record id means the ledger cannot be written, so
+        // a retry of the same idemKey would duplicate. Fail loudly (the response
+        // shape / idField is provisional until UAT-confirmed) rather than silently
+        // leaving an idempotency hole.
+        process.stderr.write(`[joblogic] op=idem-record-fail reqId=${id} tool=${args.tool} entity=${args.entity} reason=id-unextractable\n`);
+        throw new Error(`${args.tool}: create returned success but no '${args.idField ?? "id"}' could be extracted from the response — a retry would NOT be idempotent. Confirm the response shape / idField against UAT.`);
+    }
+    recordIdem(args.platformRoot, args.accountId, args.idemKey, args.entity, writtenId);
+    process.stderr.write(`[joblogic] op=response reqId=${id} status=created id=${writtenId}\n`);
+    return result;
+}
+function extractId(result, idField = "id") {
+    const r = result;
+    const v = r?.[idField] ?? r?.data?.[idField];
+    return v == null ? null : String(v);
+}
+//# sourceMappingURL=client.js.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uEAAuE;AACvE,2EAA2E;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAkB,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI1D,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,OAAO,SAAS,CAAC,CAAC,6BAA6B;AACjD,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAkBD,KAAK,UAAU,OAAO,CACpB,IAAc,EACd,WAAmB,EACnB,SAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7F,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC/G,IAAI,OAA2B,CAAC;IAChC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+CAA+C;QAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gDAAgD,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,WAAY,GAAa,CAAC,OAAO,IAAI,CACrH,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,8BAA+B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc,EAAE,OAAkC,EAAE;IAClF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC/E,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,OAAO;QACL,CAAC,CAAC,gCAAgC,EAAE,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,gBAAgB;QAC5F,CAAC,CAAC,+BAA+B,EAAE,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,IAAI,CAClF,CAAC;IACF,IAAI,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjF,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,IAAI,CAC/G,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,WAAW,GAAG,CAAC,MAAM,OAAO,EAAE,WAAW,CAAC,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAI,MAA6B,CAAC,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,WAAW,GAAG,CAAC,MAAM,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;IACxG,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB,EAAE,OAAkC,EAAE;IACrF,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,SAAS,IAAI,CAAC,IAAI,eAAe,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC1G,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B;QACE,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,EACD,IAAI,CACL,CAAC;IACF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,6EAA6E;QAC7E,yEAAyE;QACzE,2EAA2E;QAC3E,+BAA+B;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wCAAwC,EAAE,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,4BAA4B,CAC/G,CAAC;QACF,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,IAAI,qCAAqC,IAAI,CAAC,OAAO,IAAI,IAAI,6HAA6H,CACnM,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,sBAAsB,SAAS,IAAI,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,MAAe,EAAE,OAAO,GAAG,IAAI;IAChD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,IAAK,CAAC,EAAE,IAA4C,EAAE,CAAC,OAAO,CAAC,CAAC;IACtF,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.d.ts

@@ -0,0 +1,8 @@
+export interface IdemRecord {
+    entity: string;
+    recordId: string;
+    ts: number;
+}
+export declare function lookupIdem(platformRoot: string, accountId: string, idemKey: string): IdemRecord | null;
+export declare function recordIdem(platformRoot: string, accountId: string, idemKey: string, entity: string, recordId: string): void;
+//# sourceMappingURL=idempotency.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../src/lib/idempotency.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;CACZ;AAUD,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAatG;AAED,wBAAgB,UAAU,CACxB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,IAAI,CAKN"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.js

@@ -0,0 +1,41 @@
+// Local idempotency ledger. JobLogic exposes no idempotency header, so a create
+// retry (tool retry, or a write whose response was lost to a timeout) would
+// duplicate. Each create computes/accepts an idemKey; the ledger maps it to the
+// record id JobLogic returned. A hit short-circuits the send entirely.
+import { mkdirSync, readFileSync, writeFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { accountSecretsDir } from "./secrets.js";
+/** idemKey filename safety — no path fragments. */
+const KEY_RE = /^[A-Za-z0-9_.:-]+$/;
+function ledgerDir(platformRoot, accountId) {
+    return join(accountSecretsDir(platformRoot, accountId), "joblogic-idem");
+}
+function ledgerPath(platformRoot, accountId, idemKey) {
+    if (!KEY_RE.test(idemKey))
+        throw new Error(`invalid idemKey: ${JSON.stringify(idemKey)}`);
+    return join(ledgerDir(platformRoot, accountId), `${idemKey}.json`);
+}
+export function lookupIdem(platformRoot, accountId, idemKey) {
+    let file;
+    try {
+        file = ledgerPath(platformRoot, accountId, idemKey);
+    }
+    catch {
+        return null;
+    }
+    if (!existsSync(file))
+        return null;
+    try {
+        return JSON.parse(readFileSync(file, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+export function recordIdem(platformRoot, accountId, idemKey, entity, recordId) {
+    const file = ledgerPath(platformRoot, accountId, idemKey);
+    mkdirSync(ledgerDir(platformRoot, accountId), { recursive: true });
+    const rec = { entity, recordId, ts: Date.now() };
+    writeFileSync(file, JSON.stringify(rec), { mode: 0o600 });
+}
+//# sourceMappingURL=idempotency.js.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../src/lib/idempotency.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,uEAAuE;AACvE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,mDAAmD;AACnD,MAAM,MAAM,GAAG,oBAAoB,CAAC;AAQpC,SAAS,SAAS,CAAC,YAAoB,EAAE,SAAiB;IACxD,OAAO,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC,CAAC;AAC3E,CAAC;AACD,SAAS,UAAU,CAAC,YAAoB,EAAE,SAAiB,EAAE,OAAe;IAC1E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,SAAiB,EAAE,OAAe;IACjF,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAe,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,YAAoB,EACpB,SAAiB,EACjB,OAAe,EACf,MAAc,EACd,QAAgB;IAEhB,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC7D,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/secrets.d.ts

@@ -0,0 +1,21 @@
+export type JlEnvironment = "uat" | "production";
+export interface JlStore {
+    clientId: string;
+    clientSecret: string;
+    /** Company tenant id — required on every JobLogic API call (tenant-scoped credential). */
+    tenantId: string;
+    environment: JlEnvironment;
+    /** Sender phone (E.164) → JobLogic engineer id, for write attribution. Config, not a secret. */
+    engineerMap: Record<string, string>;
+}
+export declare function accountSecretsDir(platformRoot: string, accountId: string): string;
+export declare function readStore(platformRoot: string, accountId: string): JlStore | null;
+export declare function setCredentials(platformRoot: string, accountId: string, creds: {
+    clientId: string;
+    clientSecret: string;
+    tenantId: string;
+    environment: JlEnvironment;
+}): void;
+export declare function setEngineerMap(platformRoot: string, accountId: string, entries: Record<string, string>): void;
+export declare function resolveEngineer(store: JlStore, senderPhone: string): string | null;
+//# sourceMappingURL=secrets.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/lib/secrets.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,YAAY,CAAC;AAEjD,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,aAAa,CAAC;IAC3B,gGAAgG;IAChG,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAKD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjF;AAKD,wBAAgB,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAUjF;AAOD,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,aAAa,CAAA;CAAE,GAC9F,IAAI,CAGN;AAED,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,IAAI,CAIN;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAElF"}