@rubytech/create-maxy-code 0.1.348 → 0.1.350

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.d.ts

@@ -0,0 +1,31 @@
+import type { JlStore, JlEnvironment } from "./secrets.js";
+/** Strip credential-shaped substrings and cap length before an upstream error
+ *  body is put into a thrown message that may reach a tool response/transcript. */
+export declare function sanitizeErrorBody(text: string): string;
+export declare function identityBaseFor(env: JlEnvironment): string;
+export declare function apiBaseFor(env: JlEnvironment): string;
+export type FetchLike = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body?: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    text: () => Promise<string>;
+}>;
+export interface Token {
+    accessToken: string;
+    expiresIn: number;
+}
+export declare function acquireToken(store: JlStore, opts?: {
+    fetchImpl?: FetchLike;
+}): Promise<Token>;
+/** Return a valid bearer, refreshing if cached is stale or force=true.
+ *  reason drives the op=token-refresh line; first acquisition logs op=token-acquire only. */
+export declare function getBearer(store: JlStore, accountId: string, opts?: {
+    force?: boolean;
+    fetchImpl?: FetchLike;
+}): Promise<string>;
+/** Test seam: clear the per-process cache. */
+export declare function _resetTokenCache(): void;
+//# sourceMappingURL=auth.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAa3D;mFACmF;AACnF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMtD;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAE1D;AACD,wBAAgB,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAErD;AAED,MAAM,MAAM,SAAS,GAAG,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,KACrE,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,CAAC,CAAC;AAM3E,MAAM,WAAW,KAAK;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CA6BvG;AAQD;6FAC6F;AAC7F,wBAAsB,SAAS,CAC7B,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GACpD,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,8CAA8C;AAC9C,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.js

@@ -0,0 +1,78 @@
+const IDENTITY_BASE = {
+    uat: "https://uatidentityserver.joblogic.com",
+    production: "https://identityserver.joblogic.com",
+};
+const API_BASE = {
+    uat: "https://uatapi.joblogic.com",
+    production: "https://api.joblogic.com",
+};
+/** Refresh when the cached token is within this window of expiry. */
+const REFRESH_THRESHOLD_MS = 120_000;
+/** Strip credential-shaped substrings and cap length before an upstream error
+ *  body is put into a thrown message that may reach a tool response/transcript. */
+export function sanitizeErrorBody(text) {
+    return text
+        .replace(/client_secret=[^&\s"]*/gi, "client_secret=***")
+        .replace(/client_id=[^&\s"]*/gi, "client_id=***")
+        .replace(/Bearer\s+[A-Za-z0-9._-]+/gi, "Bearer ***")
+        .slice(0, 300);
+}
+export function identityBaseFor(env) {
+    return IDENTITY_BASE[env];
+}
+export function apiBaseFor(env) {
+    return API_BASE[env];
+}
+export async function acquireToken(store, opts = {}) {
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    const url = `${identityBaseFor(store.environment)}/connect/token`;
+    const body = new URLSearchParams({
+        grant_type: "client_credentials",
+        client_id: store.clientId,
+        client_secret: store.clientSecret,
+    }).toString();
+    const started = Date.now();
+    const res = await fetchImpl(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded", Accept: "application/json" },
+        body,
+    });
+    const text = await res.text();
+    // The token request carried client_secret; some identity servers echo request
+    // params in a 4xx body. Strip secrets and cap length before the message can
+    // reach a tool response / transcript.
+    if (!res.ok)
+        throw new Error(`token endpoint ${res.status}: ${sanitizeErrorBody(text)}`);
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch {
+        throw new Error(`token endpoint non-JSON: ${text}`);
+    }
+    if (!raw.access_token)
+        throw new Error(`token endpoint missing access_token: ${text}`);
+    const expiresIn = raw.expires_in ?? 3600;
+    process.stderr.write(`[joblogic] op=token-acquire ok=true expiresInS=${expiresIn} ms=${Date.now() - started}\n`);
+    return { accessToken: raw.access_token, expiresIn };
+}
+const tokenCache = new Map();
+/** Return a valid bearer, refreshing if cached is stale or force=true.
+ *  reason drives the op=token-refresh line; first acquisition logs op=token-acquire only. */
+export async function getBearer(store, accountId, opts = {}) {
+    const cached = tokenCache.get(accountId);
+    const fresh = cached && cached.expiresAt - REFRESH_THRESHOLD_MS > Date.now();
+    if (fresh && !opts.force)
+        return cached.accessToken;
+    if (cached) {
+        process.stderr.write(`[joblogic] op=token-refresh reason=${opts.force ? "401" : "pre-expiry"} ok=true\n`);
+    }
+    const tok = await acquireToken(store, { fetchImpl: opts.fetchImpl });
+    tokenCache.set(accountId, { accessToken: tok.accessToken, expiresAt: Date.now() + tok.expiresIn * 1000 });
+    return tok.accessToken;
+}
+/** Test seam: clear the per-process cache. */
+export function _resetTokenCache() {
+    tokenCache.clear();
+}
+//# sourceMappingURL=auth.js.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAKA,MAAM,aAAa,GAAkC;IACnD,GAAG,EAAE,wCAAwC;IAC7C,UAAU,EAAE,qCAAqC;CAClD,CAAC;AACF,MAAM,QAAQ,GAAkC;IAC9C,GAAG,EAAE,6BAA6B;IAClC,UAAU,EAAE,0BAA0B;CACvC,CAAC;AACF,qEAAqE;AACrE,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAErC;mFACmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI;SACR,OAAO,CAAC,0BAA0B,EAAE,mBAAmB,CAAC;SACxD,OAAO,CAAC,sBAAsB,EAAE,eAAe,CAAC;SAChD,OAAO,CAAC,4BAA4B,EAAE,YAAY,CAAC;SACnD,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAkB;IAChD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,GAAkB;IAC3C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAc,EAAE,OAAkC,EAAE;IACrF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC/E,MAAM,GAAG,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,aAAa,EAAE,KAAK,CAAC,YAAY;KAClC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACd,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QAC/B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC5F,IAAI;KACL,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,8EAA8E;IAC9E,4EAA4E;IAC5E,sCAAsC;IACtC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,KAAK,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,SAAS,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;IACjH,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAMD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE7C;6FAC6F;AAC7F,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAc,EACd,SAAiB,EACjB,OAAmD,EAAE;IAErD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7E,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAO,CAAC,WAAW,CAAC;IACrD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,YAAY,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACrE,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC,CAAC;IAC1G,OAAO,GAAG,CAAC,WAAW,CAAC;AACzB,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,gBAAgB;IAC9B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.d.ts

@@ -0,0 +1,35 @@
+import type { JlStore } from "./secrets.js";
+import { type FetchLike } from "./auth.js";
+export type AccessFaultKind = "auth" | "whitelist" | "network";
+export declare function classifyAccessFault(status: number): AccessFaultKind;
+export interface BaseArgs {
+    store: JlStore;
+    accountId: string;
+    method: "GET" | "POST";
+    /** path under /api/v1/, e.g. "Customer/GetAll". */
+    path: string;
+    /** entity label for the observability line. */
+    entity: string;
+    /** tool name for the observability line. */
+    tool: string;
+    /** extra query params (merged with tenantId). */
+    query?: Record<string, string>;
+    /** request body for POST. tenantId is also injected into the body for writes. */
+    body?: Record<string, unknown>;
+}
+/** A read or generic call. Performs one silent re-acquire on a 401. */
+export declare function jlRequest(args: BaseArgs, opts?: {
+    fetchImpl?: FetchLike;
+}): Promise<unknown>;
+/** A create with idempotency. idemKey lookup short-circuits a duplicate send.
+ *  platformRoot is threaded explicitly (the ledger lives under the account secrets dir). */
+export interface JlCreateArgs extends Omit<BaseArgs, "method"> {
+    platformRoot: string;
+    idemKey: string;
+    /** field on the response carrying the new record id (default "id"). */
+    idField?: string;
+}
+export declare function jlCreate(args: JlCreateArgs, opts?: {
+    fetchImpl?: FetchLike;
+}): Promise<unknown>;
+//# sourceMappingURL=client.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAA4C,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAGrF,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAE/D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAInE;AAMD,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AA2BD,uEAAuE;AACvE,wBAAsB,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAoCtG;AAED;4FAC4F;AAC5F,MAAM,WAAW,YAAa,SAAQ,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAoCzG"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.js

@@ -0,0 +1,106 @@
+// JobLogic REST wrapper. Injects Bearer + tenantId on every call, emits the
+// observability lifeline, classifies any 401/403/network failure as an
+// access-fault, and performs exactly one silent token re-acquire on a 401.
+import { randomBytes } from "node:crypto";
+import { apiBaseFor, getBearer, sanitizeErrorBody } from "./auth.js";
+import { lookupIdem, recordIdem } from "./idempotency.js";
+export function classifyAccessFault(status) {
+    if (status === 401)
+        return "auth";
+    if (status === 403)
+        return "whitelist";
+    return "network"; // status 0 / connect failure
+}
+function reqId() {
+    return randomBytes(6).toString("hex");
+}
+async function doFetch(args, accessToken, fetchImpl) {
+    const params = new URLSearchParams({ tenantId: args.store.tenantId, ...(args.query ?? {}) });
+    const url = `${apiBaseFor(args.store.environment)}/api/v1/${args.path}?${params.toString()}`;
+    const headers = { Authorization: `Bearer ${accessToken}`, Accept: "application/json" };
+    let bodyStr;
+    if (args.body !== undefined) {
+        headers["Content-Type"] = "application/json";
+        bodyStr = JSON.stringify({ tenantId: args.store.tenantId, ...args.body });
+    }
+    try {
+        const res = await fetchImpl(url, { method: args.method, headers, body: bodyStr });
+        return { ok: res.ok, status: res.status, text: await res.text() };
+    }
+    catch (err) {
+        // connect-level failure → network access-fault
+        process.stderr.write(`[joblogic] op=access-fault kind=network tool=${args.tool} entity=${args.entity} detail=${err.message}\n`);
+        throw new Error(`access-fault kind=network: ${err.message}`);
+    }
+}
+/** A read or generic call. Performs one silent re-acquire on a 401. */
+export async function jlRequest(args, opts = {}) {
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    const id = reqId();
+    const isWrite = args.method === "POST";
+    process.stderr.write(isWrite
+        ? `[joblogic] op=mutation reqId=${id} tool=${args.tool} entity=${args.entity} verb=update\n`
+        : `[joblogic] op=request reqId=${id} tool=${args.tool} entity=${args.entity}\n`);
+    let bearer = await getBearer(args.store, args.accountId, { fetchImpl });
+    const started = Date.now();
+    let res = await doFetch(args, bearer, fetchImpl);
+    if (res.status === 401) {
+        bearer = await getBearer(args.store, args.accountId, { force: true, fetchImpl });
+        res = await doFetch(args, bearer, fetchImpl);
+    }
+    const ms = Date.now() - started;
+    if (!res.ok) {
+        if (res.status === 401 || res.status === 403) {
+            process.stderr.write(`[joblogic] op=access-fault kind=${classifyAccessFault(res.status)} tool=${args.tool} entity=${args.entity}\n`);
+        }
+        process.stderr.write(`[joblogic] op=response reqId=${id} status=${res.status} ms=${ms} rows=-\n`);
+        throw new Error(`JobLogic ${args.method} ${args.path} ${res.status}: ${sanitizeErrorBody(res.text)}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(res.text);
+    }
+    catch {
+        throw new Error(`JobLogic ${args.path} non-JSON: ${res.text}`);
+    }
+    const data = parsed.data;
+    const rows = Array.isArray(data) ? data.length : "-";
+    process.stderr.write(`[joblogic] op=response reqId=${id} status=${res.status} ms=${ms} rows=${rows}\n`);
+    return parsed;
+}
+export async function jlCreate(args, opts = {}) {
+    const id = reqId();
+    const hit = lookupIdem(args.platformRoot, args.accountId, args.idemKey);
+    if (hit) {
+        process.stderr.write(`[joblogic] op=idem-hit reqId=${id} tool=${args.tool} existingId=${hit.recordId}\n`);
+        return { idempotent: true, id: hit.recordId, entity: hit.entity };
+    }
+    const result = await jlRequest({
+        store: args.store,
+        accountId: args.accountId,
+        method: "POST",
+        path: args.path,
+        entity: args.entity,
+        tool: args.tool,
+        query: args.query,
+        body: args.body,
+    }, opts);
+    const writtenId = extractId(result, args.idField);
+    if (!writtenId) {
+        // A 2xx with no extractable record id means the ledger cannot be written, so
+        // a retry of the same idemKey would duplicate. Fail loudly (the response
+        // shape / idField is provisional until UAT-confirmed) rather than silently
+        // leaving an idempotency hole.
+        process.stderr.write(`[joblogic] op=idem-record-fail reqId=${id} tool=${args.tool} entity=${args.entity} reason=id-unextractable\n`);
+        throw new Error(`${args.tool}: create returned success but no '${args.idField ?? "id"}' could be extracted from the response — a retry would NOT be idempotent. Confirm the response shape / idField against UAT.`);
+    }
+    recordIdem(args.platformRoot, args.accountId, args.idemKey, args.entity, writtenId);
+    process.stderr.write(`[joblogic] op=response reqId=${id} status=created id=${writtenId}\n`);
+    return result;
+}
+function extractId(result, idField = "id") {
+    const r = result;
+    const v = r?.[idField] ?? r?.data?.[idField];
+    return v == null ? null : String(v);
+}
+//# sourceMappingURL=client.js.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uEAAuE;AACvE,2EAA2E;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAkB,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI1D,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,OAAO,SAAS,CAAC,CAAC,6BAA6B;AACjD,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAkBD,KAAK,UAAU,OAAO,CACpB,IAAc,EACd,WAAmB,EACnB,SAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7F,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC/G,IAAI,OAA2B,CAAC;IAChC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+CAA+C;QAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gDAAgD,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,WAAY,GAAa,CAAC,OAAO,IAAI,CACrH,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,8BAA+B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc,EAAE,OAAkC,EAAE;IAClF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC/E,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,OAAO;QACL,CAAC,CAAC,gCAAgC,EAAE,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,gBAAgB;QAC5F,CAAC,CAAC,+BAA+B,EAAE,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,IAAI,CAClF,CAAC;IACF,IAAI,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjF,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,IAAI,CAC/G,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,WAAW,GAAG,CAAC,MAAM,OAAO,EAAE,WAAW,CAAC,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAI,MAA6B,CAAC,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,WAAW,GAAG,CAAC,MAAM,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;IACxG,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB,EAAE,OAAkC,EAAE;IACrF,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,SAAS,IAAI,CAAC,IAAI,eAAe,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC1G,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B;QACE,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,EACD,IAAI,CACL,CAAC;IACF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,6EAA6E;QAC7E,yEAAyE;QACzE,2EAA2E;QAC3E,+BAA+B;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wCAAwC,EAAE,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,4BAA4B,CAC/G,CAAC;QACF,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,IAAI,qCAAqC,IAAI,CAAC,OAAO,IAAI,IAAI,6HAA6H,CACnM,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,sBAAsB,SAAS,IAAI,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,MAAe,EAAE,OAAO,GAAG,IAAI;IAChD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,IAAK,CAAC,EAAE,IAA4C,EAAE,CAAC,OAAO,CAAC,CAAC;IACtF,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.d.ts

@@ -0,0 +1,8 @@
+export interface IdemRecord {
+    entity: string;
+    recordId: string;
+    ts: number;
+}
+export declare function lookupIdem(platformRoot: string, accountId: string, idemKey: string): IdemRecord | null;
+export declare function recordIdem(platformRoot: string, accountId: string, idemKey: string, entity: string, recordId: string): void;
+//# sourceMappingURL=idempotency.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../src/lib/idempotency.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;CACZ;AAUD,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAatG;AAED,wBAAgB,UAAU,CACxB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,IAAI,CAKN"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.js

@@ -0,0 +1,41 @@
+// Local idempotency ledger. JobLogic exposes no idempotency header, so a create
+// retry (tool retry, or a write whose response was lost to a timeout) would
+// duplicate. Each create computes/accepts an idemKey; the ledger maps it to the
+// record id JobLogic returned. A hit short-circuits the send entirely.
+import { mkdirSync, readFileSync, writeFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { accountSecretsDir } from "./secrets.js";
+/** idemKey filename safety — no path fragments. */
+const KEY_RE = /^[A-Za-z0-9_.:-]+$/;
+function ledgerDir(platformRoot, accountId) {
+    return join(accountSecretsDir(platformRoot, accountId), "joblogic-idem");
+}
+function ledgerPath(platformRoot, accountId, idemKey) {
+    if (!KEY_RE.test(idemKey))
+        throw new Error(`invalid idemKey: ${JSON.stringify(idemKey)}`);
+    return join(ledgerDir(platformRoot, accountId), `${idemKey}.json`);
+}
+export function lookupIdem(platformRoot, accountId, idemKey) {
+    let file;
+    try {
+        file = ledgerPath(platformRoot, accountId, idemKey);
+    }
+    catch {
+        return null;
+    }
+    if (!existsSync(file))
+        return null;
+    try {
+        return JSON.parse(readFileSync(file, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+export function recordIdem(platformRoot, accountId, idemKey, entity, recordId) {
+    const file = ledgerPath(platformRoot, accountId, idemKey);
+    mkdirSync(ledgerDir(platformRoot, accountId), { recursive: true });
+    const rec = { entity, recordId, ts: Date.now() };
+    writeFileSync(file, JSON.stringify(rec), { mode: 0o600 });
+}
+//# sourceMappingURL=idempotency.js.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../src/lib/idempotency.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,uEAAuE;AACvE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,mDAAmD;AACnD,MAAM,MAAM,GAAG,oBAAoB,CAAC;AAQpC,SAAS,SAAS,CAAC,YAAoB,EAAE,SAAiB;IACxD,OAAO,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC,CAAC;AAC3E,CAAC;AACD,SAAS,UAAU,CAAC,YAAoB,EAAE,SAAiB,EAAE,OAAe;IAC1E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,SAAiB,EAAE,OAAe;IACjF,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAe,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,YAAoB,EACpB,SAAiB,EACjB,OAAe,EACf,MAAc,EACd,QAAgB;IAEhB,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC7D,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/secrets.d.ts

@@ -0,0 +1,21 @@
+export type JlEnvironment = "uat" | "production";
+export interface JlStore {
+    clientId: string;
+    clientSecret: string;
+    /** Company tenant id — required on every JobLogic API call (tenant-scoped credential). */
+    tenantId: string;
+    environment: JlEnvironment;
+    /** Sender phone (E.164) → JobLogic engineer id, for write attribution. Config, not a secret. */
+    engineerMap: Record<string, string>;
+}
+export declare function accountSecretsDir(platformRoot: string, accountId: string): string;
+export declare function readStore(platformRoot: string, accountId: string): JlStore | null;
+export declare function setCredentials(platformRoot: string, accountId: string, creds: {
+    clientId: string;
+    clientSecret: string;
+    tenantId: string;
+    environment: JlEnvironment;
+}): void;
+export declare function setEngineerMap(platformRoot: string, accountId: string, entries: Record<string, string>): void;
+export declare function resolveEngineer(store: JlStore, senderPhone: string): string | null;
+//# sourceMappingURL=secrets.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/lib/secrets.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,YAAY,CAAC;AAEjD,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,aAAa,CAAC;IAC3B,gGAAgG;IAChG,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAKD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjF;AAKD,wBAAgB,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAUjF;AAOD,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,aAAa,CAAA;CAAE,GAC9F,IAAI,CAGN;AAED,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,IAAI,CAIN;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAElF"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/secrets.js

@@ -0,0 +1,47 @@
+// JobLogic per-account secret store. Plain 0600 JSON in the brand-isolated,
+// delete-protected secrets/ dir (the quickbooks + cloudflare precedent). Never
+// thrown from on read — a missing/corrupt store yields null so module init and
+// tool enumeration survive a no-creds account.
+import { mkdirSync, readFileSync, writeFileSync, existsSync } from "node:fs";
+import { resolve, join } from "node:path";
+function accountsDir(platformRoot) {
+    return resolve(platformRoot, "..", "data/accounts");
+}
+export function accountSecretsDir(platformRoot, accountId) {
+    return join(accountsDir(platformRoot), accountId, "secrets");
+}
+function storePath(platformRoot, accountId) {
+    return join(accountSecretsDir(platformRoot, accountId), "joblogic.json");
+}
+export function readStore(platformRoot, accountId) {
+    const file = storePath(platformRoot, accountId);
+    if (!existsSync(file))
+        return null;
+    try {
+        const parsed = JSON.parse(readFileSync(file, "utf-8"));
+        if (!parsed.clientId || !parsed.clientSecret || !parsed.tenantId || !parsed.environment)
+            return null;
+        return { engineerMap: {}, ...parsed };
+    }
+    catch {
+        return null;
+    }
+}
+function writeStore(platformRoot, accountId, store) {
+    mkdirSync(accountSecretsDir(platformRoot, accountId), { recursive: true });
+    writeFileSync(storePath(platformRoot, accountId), JSON.stringify(store, null, 2), { mode: 0o600 });
+}
+export function setCredentials(platformRoot, accountId, creds) {
+    const prev = readStore(platformRoot, accountId);
+    writeStore(platformRoot, accountId, { ...creds, engineerMap: prev?.engineerMap ?? {} });
+}
+export function setEngineerMap(platformRoot, accountId, entries) {
+    const prev = readStore(platformRoot, accountId);
+    if (!prev)
+        throw new Error("cannot set engineer map before credentials are set");
+    writeStore(platformRoot, accountId, { ...prev, engineerMap: { ...prev.engineerMap, ...entries } });
+}
+export function resolveEngineer(store, senderPhone) {
+    return store.engineerMap[senderPhone] ?? null;
+}
+//# sourceMappingURL=secrets.js.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/lib/secrets.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,+CAA+C;AAC/C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAc1C,SAAS,WAAW,CAAC,YAAoB;IACvC,OAAO,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;AACtD,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,SAAiB;IACvE,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC/D,CAAC;AACD,SAAS,SAAS,CAAC,YAAoB,EAAE,SAAiB;IACxD,OAAO,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,YAAoB,EAAE,SAAiB;IAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAqB,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QACrG,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,MAAM,EAAa,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,YAAoB,EAAE,SAAiB,EAAE,KAAc;IACzE,SAAS,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,aAAa,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,YAAoB,EACpB,SAAiB,EACjB,KAA+F;IAE/F,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAChD,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,YAAoB,EACpB,SAAiB,EACjB,OAA+B;IAE/B,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACjF,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,WAAmB;IACjE,OAAO,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;AAChD,CAAC"}

package/payload/platform/plugins/joblogic/mcp/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@maxy/joblogic",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": { "build": "tsc", "start": "node dist/index.js" },
+  "dependencies": { "@modelcontextprotocol/sdk": "^1.12.1", "zod": "^3.24.0" },
+  "devDependencies": { "typescript": "^5.7.0", "@types/node": "^22.0.0" }
+}

package/payload/platform/plugins/joblogic/skills/joblogic/SKILL.md

@@ -0,0 +1,32 @@
+---
+name: joblogic
+description: Connect JobLogic and drive the field-service job lifecycle. Use when the operator wants to link JobLogic, read customers/sites/jobs/visits/quotes/invoices/assets/timesheets, or make writes (create a visit, log job costs, set a job status, raise an invoice) from instructions sent by field staff. Covers the one-time JobLogic Support onboarding and source-IP whitelisting, then the agent-driven read/write surface.
+---
+
+# JobLogic connector
+
+JobLogic is the operator's field-service system of record. This connector is bespoke to one account: it does nothing on any other install. The agent reads and writes across the job lifecycle under one company credential. Field staff never call JobLogic themselves; they send a voice note or message to this install, the agent interprets it, and this install makes the write. So only this install's outbound IP ever touches JobLogic.
+
+Success is: the credentials are stored, `joblogic-connection-status` acquires a token, and a read such as `joblogic-customer-list` returns the company's data from UAT.
+
+## What the operator does once (relay this; the agent cannot do it)
+
+The agent cannot raise a support ticket or whitelist an IP. The operator does this once with JobLogic.
+
+- **Raise a JobLogic Support ticket** for API access. Ask for a UAT (test) account first, then production. JobLogic Support issues a `client_id` and `client_secret` (OAuth client_credentials) and tells the operator the company `tenantId`.
+- **Whitelist the install's outbound source IP.** JobLogic filters API calls by the public IP they originate from. The install's inbound tunnel does not fix the outbound IP, and a laptop's public IP is usually dynamic. The operator resolves one of: run the install from one location with a stable ISP IP and register that IP; route the connector's outbound through a fixed-egress proxy with a static IP and register that; or confirm with JobLogic that production drops the per-IP filter. Until one holds, calls fail and the logs show `op=access-fault kind=whitelist`.
+
+## What the agent does after that
+
+- **Store the credentials.** Run `joblogic-credentials-set` with the `client_id`, `client_secret`, `tenantId`, and `environment` (`uat` first). They are written only to this account's secrets file, never echoed.
+- **Confirm it works.** Run `joblogic-connection-status`. It acquires a token and reports the environment and tenant. If it fails, the logs distinguish an auth problem from a whitelist problem from a network blip.
+- **Set up attribution.** The company credential is not per-user, so JobLogic will not auto-attribute a write to the engineer who reported it. Run `joblogic-engineer-map-set` to map each field staffer's phone number to their JobLogic engineer id. When a write comes from a message, pass the sender's phone so the connector stamps the right engineer on it.
+- **Read and write.** Reads cover customers, sites, jobs, engineers, visits, quotes, invoices, assets, and timesheets. Writes cover creating and updating those records and the lifecycle transitions: deploy a visit, log job costs, set a job status, approve a quote, raise an invoice, add a note or attachment.
+
+## Authorization and safety
+
+A write is authorized by the person who messaged the install asking for it. That instruction is the authorization; the agent does not interpose a second confirmation step. The one write safety that always applies is idempotency: every create takes an idempotency key, so a retry or a write whose response was lost does not create a duplicate record. Derive the key deterministically from the write's natural details so the same instruction maps to the same key.
+
+## Use UAT for all testing
+
+Every read and write test runs against the UAT environment, never production. Switch `environment` to `production` only once the operator confirms UAT behaves correctly and production credentials and IP whitelisting are in place.

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/relationship-patterns.test.js

@@ -11,11 +11,11 @@ Some table here.
 
 \`\`\`
 (:Job)-[:HAS_VALUATION]->(:Valuation)
-(:Job)-[:HAS_QUOTE]->(:QuoteDocument)
-(:QuoteDocument)-[:HAS_LINE_ITEM]->(:LineItem)
-(:Valuation)-[:VALUES]->(:LineItem)
-(:Job)-[:FOR_CLIENT]->(:Person)
-(:InboundInvoice)-[:ASSIGNED_TO]->(:Job)
+(:Job)-[:HAS_QUOTE]->(:Quote)
+(:Quote)-[:HAS_LINE]->(:QuoteLine)
+(:Valuation)-[:VALUES]->(:QuoteLine)
+(:Job)-[:FOR_CUSTOMER]->(:Customer)
+(:Invoice)-[:ON_PURCHASE_ORDER]->(:PurchaseOrder)
 \`\`\`
 
 Some trailing prose with an arrow (:Job)-[:NOT_A_PATTERN]->(:Thing) outside the block.
@@ -37,15 +37,15 @@ describe("parseRelationshipPatterns", () => {
             sourceFile: "schema-construction.md",
         });
         expect(out).toContainEqual({
-            source: "QuoteDocument",
-            edgeType: "HAS_LINE_ITEM",
-            target: "LineItem",
+            source: "Quote",
+            edgeType: "HAS_LINE",
+            target: "QuoteLine",
             sourceFile: "schema-construction.md",
         });
         expect(out).toContainEqual({
             source: "Valuation",
             edgeType: "VALUES",
-            target: "LineItem",
+            target: "QuoteLine",
             sourceFile: "schema-construction.md",
         });
         // The arrow outside the fenced block must NOT be parsed.
@@ -88,7 +88,7 @@ describe("checkEdgeAgainstPatterns (warn-only semantics)", () => {
             governed: true,
             allowed: true,
         });
-        expect(checkEdgeAgainstPatterns(["QuoteDocument"], "HAS_LINE_ITEM", patterns)).toEqual({
+        expect(checkEdgeAgainstPatterns(["Quote"], "HAS_LINE", patterns)).toEqual({
             governed: true,
             allowed: true,
         });
@@ -110,20 +110,20 @@ describe("checkEdgeAgainstPatterns (warn-only semantics)", () => {
 describe("real schema-construction.md (Phase 1 + Phase 2 integration)", () => {
     const md = readFileSync(resolve(import.meta.dirname, "../../../../references/schema-construction.md"), "utf-8");
     const patterns = parseRelationshipPatterns(md, "schema-construction.md");
-    it("owns line items on the QuoteDocument + adds VALUES, never (:Job)-[:HAS_LINE_ITEM]", () => {
+    it("owns lines on the Quote + adds VALUES, never (:Job)-[:HAS_LINE]", () => {
         expect(patterns).toContainEqual({
-            source: "QuoteDocument",
-            edgeType: "HAS_LINE_ITEM",
-            target: "LineItem",
+            source: "Quote",
+            edgeType: "HAS_LINE",
+            target: "QuoteLine",
             sourceFile: "schema-construction.md",
         });
         expect(patterns).toContainEqual({
             source: "Valuation",
             edgeType: "VALUES",
-            target: "LineItem",
+            target: "QuoteLine",
             sourceFile: "schema-construction.md",
         });
-        expect(patterns.find((p) => p.source === "Job" && p.edgeType === "HAS_LINE_ITEM")).toBeUndefined();
+        expect(patterns.find((p) => p.source === "Job" && p.edgeType === "HAS_LINE")).toBeUndefined();
     });
     it("the observed drift edges are off-allowlist, the canonical ones pass", () => {
         expect(checkEdgeAgainstPatterns(["Job"], "JOB_FOR", patterns).allowed).toBe(false);
@@ -131,15 +131,21 @@ describe("real schema-construction.md (Phase 1 + Phase 2 integration)", () => {
         expect(checkEdgeAgainstPatterns(["Job"], "HAS_VALUATION", patterns).allowed).toBe(true);
         expect(checkEdgeAgainstPatterns(["Job"], "HAS_QUOTE", patterns).allowed).toBe(true);
     });
-    it("adopts the timesheet field-worker ontology: (:Worker)-[:LOGGED]->(:CheckIn)", () => {
+    it("adopts the JobLogic cost ontology: (:Job)-[:HAS_COST]->(:JobCost)-[:INCURRED_BY]->(:Engineer)", () => {
         expect(patterns).toContainEqual({
-            source: "Worker",
-            edgeType: "LOGGED",
-            target: "CheckIn",
+            source: "Job",
+            edgeType: "HAS_COST",
+            target: "JobCost",
+            sourceFile: "schema-construction.md",
+        });
+        expect(patterns).toContainEqual({
+            source: "JobCost",
+            edgeType: "INCURRED_BY",
+            target: "Engineer",
             sourceFile: "schema-construction.md",
         });
-        // The edge is anchored on the construction-only Worker label, so a base
-        // :Person write is never newly governed by it.
+        // :Engineer is an additional label on :Person; the construction edges are
+        // anchored on :Engineer, so a base :Person write is never newly governed.
         expect(patterns.find((p) => p.source === "Person")).toBeUndefined();
     });
 });

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/relationship-patterns.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"relationship-patterns.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/relationship-patterns.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AAErC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;CAiBpB,CAAC;AAEF,MAAM,IAAI,GAAG;;;;;;CAMZ,CAAC;AAEF,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,GAAG,GAAG,yBAAyB,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;QAC9E,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;YACzB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;YACzB,MAAM,EAAE,eAAe;YACvB,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;YACzB,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,yDAAyD;QACzD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,yBAAyB,CAAC,gCAAgC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,MAAM,GAAG,GAAG;QACV,GAAG,yBAAyB,CAAC,IAAI,EAAE,gBAAgB,CAAC;QACpD,GAAG,yBAAyB,CAAC,YAAY,EAAE,wBAAwB,CAAC;KACrE,CAAC;IACF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,GAAG,GAAG,yBAAyB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,GAAG,GAAG,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,MAAM,QAAQ,GAAG,yBAAyB,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;IAEnF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACrE,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,CAAC,wBAAwB,CAAC,CAAC,eAAe,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACrF,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,CAAC,wBAAwB,CAAC,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7E,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,kEAAkE;QAClE,MAAM,CAAC,wBAAwB,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAChF,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC3E,MAAM,EAAE,GAAG,YAAY,CACrB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,+CAA+C,CAAC,EAC7E,OAAO,CACR,CAAC;IACF,MAAM,QAAQ,GAAG,yBAAyB,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAEzE,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC;YAC9B,MAAM,EAAE,eAAe;YACvB,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC;YAC9B,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,MAAM,CACJ,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAC3E,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnF,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC;YAC9B,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"relationship-patterns.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/relationship-patterns.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AAErC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;CAiBpB,CAAC;AAEF,MAAM,IAAI,GAAG;;;;;;CAMZ,CAAC;AAEF,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,GAAG,GAAG,yBAAyB,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;QAC9E,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;YACzB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;YACzB,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;YACzB,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,yDAAyD;QACzD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,yBAAyB,CAAC,gCAAgC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,MAAM,GAAG,GAAG;QACV,GAAG,yBAAyB,CAAC,IAAI,EAAE,gBAAgB,CAAC;QACpD,GAAG,yBAAyB,CAAC,YAAY,EAAE,wBAAwB,CAAC;KACrE,CAAC;IACF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,GAAG,GAAG,yBAAyB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,GAAG,GAAG,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,MAAM,QAAQ,GAAG,yBAAyB,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;IAEnF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACrE,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACxE,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,CAAC,wBAAwB,CAAC,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7E,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,kEAAkE;QAClE,MAAM,CAAC,wBAAwB,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAChF,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC3E,MAAM,EAAE,GAAG,YAAY,CACrB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,+CAA+C,CAAC,EAC7E,OAAO,CACR,CAAC;IACF,MAAM,QAAQ,GAAG,yBAAyB,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAEzE,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC;YAC9B,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC;YAC9B,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,MAAM,CACJ,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CACtE,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnF,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC;YAC9B,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC;YAC9B,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/schema-cypher-drift.test.js

@@ -23,10 +23,14 @@ const PROSE_ONLY_LABELS = new Set([
     // schema-estate-agent.md treats Applicant as an additional label on a
     // base :Person node; there is no standalone :Applicant.
     "Applicant",
-    // schema-construction.md treats Worker as an additional config label on a
-    // base :Person node (the timesheet field-worker model); there is no
-    // standalone :Worker, so it carries no constraint/index of its own.
-    "Worker",
+    // schema-construction.md treats Engineer as an additional label on a base
+    // :Person node (the field-engineer / CIS worker-pay model); there is no
+    // standalone :Engineer, so it carries no constraint/index of its own.
+    "Engineer",
+    // schema-construction.md treats Supplier as an additional label on a base
+    // :Organization node (the supplier-invoice model); there is no standalone
+    // :Supplier, so it carries no constraint/index of its own.
+    "Supplier",
     // Email is retired: Task 321 folded threads onto :KnowledgeDocument
     // {source:'email'}, Task 426 then moved them onto :ConversationArchive
     // {source:'email'}. The :Email label never reaches the graph; it is