@rubytech/create-realagent 1.0.406

package/payload/platform/plugins/workflows/mcp/dist/lib/llm-call.js

@@ -0,0 +1,281 @@
+/**
+ * OAuth-authenticated LLM calls for workflow steps.
+ *
+ * Reads Claude Code OAuth credentials from ~/.claude/.credentials.json,
+ * refreshes expired tokens, and makes one-shot Messages API calls using
+ * Bearer authentication. This is the admin-side model access path —
+ * the Anthropic API key is exclusively for the public agent.
+ *
+ *   READ CREDENTIALS (~/.claude/.credentials.json)
+ *     │
+ *     ├─ missing / corrupt → throw (no silent fallback)
+ *     │
+ *     ▼
+ *   CHECK EXPIRY
+ *     │
+ *     ├─ valid → proceed
+ *     ├─ expiring / expired → REFRESH TOKEN
+ *     │   ├─ success → proceed with new token
+ *     │   └─ failure → throw (no silent fallback)
+ *     │
+ *     ▼
+ *   FETCH api.anthropic.com/v1/messages
+ *     │
+ *     ├─ 200 → extract text content → return
+ *     ├─ 429 → throw (caller retries via onFailure policy)
+ *     ├─ 401 → throw auth error
+ *     ├─ 5xx → throw (caller retries via onFailure policy)
+ *     └─ timeout → throw (caller retries via onFailure policy)
+ */
+import { readFileSync, writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { homedir } from "node:os";
+// ─────────────────────────────────────────────────────────────
+// Constants
+// ─────────────────────────────────────────────────────────────
+const CREDENTIALS_FILE = resolve(homedir(), ".claude", ".credentials.json");
+const MESSAGES_API = "https://api.anthropic.com/v1/messages";
+const TOKEN_ENDPOINT = "https://platform.claude.com/v1/oauth/token";
+const CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+const API_VERSION = "2023-06-01";
+/** Trigger refresh when token expires within this window. */
+const EXPIRING_THRESHOLD_MS = 5 * 60 * 1000; // 5 minutes
+const DEFAULT_MAX_TOKENS = 4096;
+// ─────────────────────────────────────────────────────────────
+// Credential reading
+// ─────────────────────────────────────────────────────────────
+/**
+ * Read Claude Code OAuth credentials from ~/.claude/.credentials.json.
+ * Throws if the file is missing, corrupt, or lacks the required fields.
+ */
+function readCredentials() {
+    let raw;
+    try {
+        raw = readFileSync(CREDENTIALS_FILE, "utf-8");
+    }
+    catch {
+        throw new Error("Claude Code is not authenticated — no credentials file found. " +
+            "Sign in via the browser to authenticate.");
+    }
+    let data;
+    try {
+        data = JSON.parse(raw);
+    }
+    catch {
+        throw new Error("Claude Code credentials file is corrupt — cannot parse JSON.");
+    }
+    const claudeOauth = data.claudeAiOauth;
+    if (!claudeOauth || typeof claudeOauth !== "object") {
+        throw new Error("Claude Code credentials file is missing the claudeAiOauth section. " +
+            "Sign in via the browser to authenticate.");
+    }
+    const accessToken = claudeOauth.accessToken;
+    const refreshToken = claudeOauth.refreshToken;
+    const expiresAt = claudeOauth.expiresAt;
+    if (typeof accessToken !== "string" || !accessToken) {
+        throw new Error("Claude Code credentials are missing an access token.");
+    }
+    if (typeof expiresAt !== "number" || !Number.isFinite(expiresAt) || expiresAt <= 0) {
+        throw new Error("Claude Code credentials have an invalid expiry.");
+    }
+    return {
+        accessToken,
+        refreshToken: typeof refreshToken === "string" && refreshToken ? refreshToken : null,
+        expiresAt,
+    };
+}
+// ─────────────────────────────────────────────────────────────
+// Token refresh
+// ─────────────────────────────────────────────────────────────
+/**
+ * Refresh the OAuth access token. Writes the new credentials back to
+ * the credentials file so the Claude CLI stays in sync.
+ *
+ * Throws on all failure paths — no silent fallback.
+ */
+async function refreshAccessToken(creds) {
+    if (!creds.refreshToken) {
+        throw new Error("Claude Code access token has expired and no refresh token is available. " +
+            "Re-authenticate via the browser.");
+    }
+    let res;
+    try {
+        res = await fetch(TOKEN_ENDPOINT, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+                grant_type: "refresh_token",
+                refresh_token: creds.refreshToken,
+                client_id: CLIENT_ID,
+            }),
+        });
+    }
+    catch (err) {
+        throw new Error(`Failed to reach Claude token endpoint: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (res.status === 429) {
+        throw new Error("Claude token refresh rate-limited — retry later.");
+    }
+    if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        if (res.status >= 400 && res.status < 500) {
+            throw new Error("Claude Code refresh token is expired or revoked. " +
+                "Re-authenticate via the browser.");
+        }
+        throw new Error(`Claude token refresh failed: HTTP ${res.status} — ${body.slice(0, 200)}`);
+    }
+    let tokenData;
+    try {
+        tokenData = (await res.json());
+    }
+    catch {
+        throw new Error("Claude token refresh returned malformed JSON.");
+    }
+    const newAccessToken = tokenData.access_token;
+    const newRefreshToken = tokenData.refresh_token;
+    const expiresIn = tokenData.expires_in;
+    if (!newAccessToken || typeof newAccessToken !== "string") {
+        throw new Error("Claude token refresh response is missing access_token.");
+    }
+    const newExpiresAt = typeof expiresIn === "number" && expiresIn > 0
+        ? Date.now() + expiresIn * 1000
+        : Date.now() + 3600 * 1000; // fallback: 1 hour
+    const refreshed = {
+        accessToken: newAccessToken,
+        refreshToken: newRefreshToken ?? creds.refreshToken,
+        expiresAt: newExpiresAt,
+    };
+    // Write back to credentials file — best effort
+    try {
+        const rawFile = readFileSync(CREDENTIALS_FILE, "utf-8");
+        const fileData = JSON.parse(rawFile);
+        const existingOauth = fileData.claudeAiOauth;
+        fileData.claudeAiOauth = {
+            ...existingOauth,
+            accessToken: newAccessToken,
+            refreshToken: refreshed.refreshToken,
+            expiresAt: newExpiresAt,
+        };
+        writeFileSync(CREDENTIALS_FILE, JSON.stringify(fileData, null, 2), "utf-8");
+        console.error("[llm-call] token refreshed successfully");
+    }
+    catch (err) {
+        // Refresh succeeded but write-back failed. The in-memory token is valid
+        // for this invocation; the next invocation will attempt its own refresh.
+        console.error(`[llm-call] token refresh write-back failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    return refreshed;
+}
+/**
+ * Ensure we have a valid access token. Reads credentials, refreshes if
+ * expiring or expired. Returns the valid access token string.
+ */
+async function ensureAccessToken() {
+    let creds = readCredentials();
+    const remaining = creds.expiresAt - Date.now();
+    if (remaining > EXPIRING_THRESHOLD_MS) {
+        return creds.accessToken;
+    }
+    // Expiring or expired — refresh
+    console.error(`[llm-call] token ${remaining > 0 ? "expiring" : "expired"}, refreshing...`);
+    creds = await refreshAccessToken(creds);
+    return creds.accessToken;
+}
+// ─────────────────────────────────────────────────────────────
+// Account config reading
+// ─────────────────────────────────────────────────────────────
+/**
+ * Read the account's adminModel from account.json.
+ * Returns the model ID string, or null if the config can't be read.
+ */
+export function readAdminModel(platformRoot, accountId) {
+    // Validate accountId — block path traversal
+    if (accountId.includes("..") || accountId.includes("/") || accountId.includes("\\")) {
+        throw new Error(`Invalid accountId: "${accountId}" — path traversal blocked`);
+    }
+    const configPath = resolve(platformRoot, "config", "accounts", accountId, "account.json");
+    try {
+        const raw = readFileSync(configPath, "utf-8");
+        const config = JSON.parse(raw);
+        const adminModel = config.adminModel;
+        if (typeof adminModel === "string" && adminModel) {
+            return adminModel;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+// ─────────────────────────────────────────────────────────────
+// LLM call
+// ─────────────────────────────────────────────────────────────
+/**
+ * Execute a one-shot LLM call using Claude Code OAuth authentication.
+ *
+ * Returns the model's text response. The caller is responsible for
+ * parsing the response (JSON or raw text) via parseStepOutput().
+ */
+export async function executeLlmCall(params) {
+    const { prompt, model, maxTokens = DEFAULT_MAX_TOKENS, timeoutMs } = params;
+    if (!prompt.trim()) {
+        throw new Error("LLM step has an empty prompt — nothing to send to the model.");
+    }
+    // Ensure we have a valid OAuth token
+    const accessToken = await ensureAccessToken();
+    // Make the API call — never log the access token
+    console.error(`[llm-call] calling model=${model}, maxTokens=${maxTokens}`);
+    let res;
+    try {
+        res = await fetch(MESSAGES_API, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "Authorization": `Bearer ${accessToken}`,
+                "anthropic-version": API_VERSION,
+            },
+            body: JSON.stringify({
+                model,
+                max_tokens: maxTokens,
+                messages: [{ role: "user", content: prompt }],
+            }),
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (msg.includes("abort") || msg.includes("timeout") || msg.includes("TimeoutError")) {
+            throw new Error(`LLM call timed out after ${timeoutMs}ms`);
+        }
+        throw new Error(`LLM call failed: ${msg}`);
+    }
+    if (res.status === 429) {
+        const retryAfter = res.headers.get("retry-after");
+        throw new Error(`LLM rate limited (429)${retryAfter ? ` — retry after ${retryAfter}s` : ""}`);
+    }
+    if (res.status === 401) {
+        throw new Error("LLM call returned 401 — Claude Code authentication may have expired. " +
+            "Re-authenticate via the browser.");
+    }
+    if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        throw new Error(`LLM call failed: HTTP ${res.status} — ${body.slice(0, 300)}`);
+    }
+    let apiResponse;
+    try {
+        apiResponse = (await res.json());
+    }
+    catch {
+        throw new Error("LLM call returned malformed JSON response.");
+    }
+    const text = (apiResponse.content ?? [])
+        .filter((b) => b.type === "text")
+        .map((b) => b.text ?? "")
+        .join("\n");
+    if (!text.trim()) {
+        throw new Error("LLM returned an empty response — no text content.");
+    }
+    console.error(`[llm-call] response: ${text.length} chars`);
+    return text;
+}
+//# sourceMappingURL=llm-call.js.map

package/payload/platform/plugins/workflows/mcp/dist/lib/llm-call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-call.js","sourceRoot":"","sources":["../../src/lib/llm-call.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,gEAAgE;AAChE,YAAY;AACZ,gEAAgE;AAEhE,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAC5E,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAC7D,MAAM,cAAc,GAAG,4CAA4C,CAAC;AACpE,MAAM,SAAS,GAAG,sCAAsC,CAAC;AACzD,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC,6DAA6D;AAC7D,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAEzD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAmBhC,gEAAgE;AAChE,qBAAqB;AACrB,gEAAgE;AAEhE;;;GAGG;AACH,SAAS,eAAe;IACtB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,gEAAgE;YAChE,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,aAAoD,CAAC;IAC9E,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,qEAAqE;YACrE,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;IAC5C,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;IAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;IAExC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,OAAO;QACL,WAAW;QACX,YAAY,EAAE,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;QACpF,SAAS;KACV,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,gBAAgB;AAChB,gEAAgE;AAEhE;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAAC,KAAuB;IACvD,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,0EAA0E;YAC1E,kCAAkC,CACnC,CAAC;IACJ,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,KAAK,CAAC,YAAY;gBACjC,SAAS,EAAE,SAAS;aACrB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,mDAAmD;gBACnD,kCAAkC,CACnC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qCAAqC,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,IAAI,SAAkC,CAAC;IACvC,IAAI,CAAC;QACH,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,CAAC,YAAkC,CAAC;IACpE,MAAM,eAAe,GAAG,SAAS,CAAC,aAAmC,CAAC;IACtE,MAAM,SAAS,GAAG,SAAS,CAAC,UAAgC,CAAC;IAE7D,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,CAAC;QACjE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI;QAC/B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,mBAAmB;IAEjD,MAAM,SAAS,GAAqB;QAClC,WAAW,EAAE,cAAc;QAC3B,YAAY,EAAE,eAAe,IAAI,KAAK,CAAC,YAAY;QACnD,SAAS,EAAE,YAAY;KACxB,CAAC;IAEF,+CAA+C;IAC/C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;QAChE,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAoD,CAAC;QAEpF,QAAQ,CAAC,aAAa,GAAG;YACvB,GAAG,aAAa;YAChB,WAAW,EAAE,cAAc;YAC3B,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,SAAS,EAAE,YAAY;SACxB,CAAC;QAEF,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5E,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,yEAAyE;QACzE,OAAO,CAAC,KAAK,CACX,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClG,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB;IAC9B,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;IAE9B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/C,IAAI,SAAS,GAAG,qBAAqB,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,WAAW,CAAC;IAC3B,CAAC;IAED,gCAAgC;IAChC,OAAO,CAAC,KAAK,CACX,oBAAoB,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,iBAAiB,CAC5E,CAAC;IACF,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,WAAW,CAAC;AAC3B,CAAC;AAED,gEAAgE;AAChE,yBAAyB;AACzB,gEAAgE;AAEhE;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,SAAiB;IACpE,4CAA4C;IAC5C,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,4BAA4B,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAE1F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,EAAE,CAAC;YACjD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,WAAW;AACX,gEAAgE;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAqB;IACxD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,kBAAkB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAE5E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,qCAAqC;IACrC,MAAM,WAAW,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAE9C,iDAAiD;IACjD,OAAO,CAAC,KAAK,CAAC,4BAA4B,KAAK,eAAe,SAAS,EAAE,CAAC,CAAC;IAE3E,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,WAAW,EAAE;gBACxC,mBAAmB,EAAE,WAAW;aACjC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;gBACL,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;aAC9C,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,4BAA4B,SAAS,IAAI,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,yBAAyB,UAAU,CAAC,CAAC,CAAC,kBAAkB,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7E,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,uEAAuE;YACvE,kCAAkC,CACnC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,yBAAyB,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,WAAiE,CAAC;IACtE,IAAI,CAAC;QACH,WAAW,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;SACxB,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,wBAAwB,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC"}

package/payload/platform/plugins/workflows/mcp/dist/lib/neo4j.d.ts

@@ -0,0 +1,5 @@
+import { Driver, Session } from "neo4j-driver";
+export declare function getDriver(): Driver;
+export declare function getSession(): Session;
+export declare function closeDriver(): Promise<void>;
+//# sourceMappingURL=neo4j.d.ts.map

package/payload/platform/plugins/workflows/mcp/dist/lib/neo4j.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"neo4j.d.ts","sourceRoot":"","sources":["../../src/lib/neo4j.ts"],"names":[],"mappings":"AAAA,OAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAuBtD,wBAAgB,SAAS,IAAI,MAAM,CAQlC;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAKjD"}

package/payload/platform/plugins/workflows/mcp/dist/lib/neo4j.js

@@ -0,0 +1,34 @@
+import neo4j from "neo4j-driver";
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+let driver = null;
+function readPassword() {
+    if (process.env.NEO4J_PASSWORD)
+        return process.env.NEO4J_PASSWORD;
+    const passwordFile = resolve(process.env.PLATFORM_ROOT ?? resolve(import.meta.dirname, "../../../.."), "config/.neo4j-password");
+    try {
+        return readFileSync(passwordFile, "utf-8").trim();
+    }
+    catch {
+        throw new Error(`Neo4j password not found. Expected at ${passwordFile} or in NEO4J_PASSWORD env var.`);
+    }
+}
+export function getDriver() {
+    if (!driver) {
+        const uri = process.env.NEO4J_URI ?? "bolt://localhost:7687";
+        const user = process.env.NEO4J_USER ?? "neo4j";
+        const password = readPassword();
+        driver = neo4j.driver(uri, neo4j.auth.basic(user, password));
+    }
+    return driver;
+}
+export function getSession() {
+    return getDriver().session();
+}
+export async function closeDriver() {
+    if (driver) {
+        await driver.close();
+        driver = null;
+    }
+}
+//# sourceMappingURL=neo4j.js.map

package/payload/platform/plugins/workflows/mcp/dist/lib/neo4j.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"neo4j.js","sourceRoot":"","sources":["../../src/lib/neo4j.ts"],"names":[],"mappings":"AAAA,OAAO,KAA0B,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC,SAAS,YAAY;IACnB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAElE,MAAM,YAAY,GAAG,OAAO,CAC1B,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EACxE,wBAAwB,CACzB,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,yCAAyC,YAAY,gCAAgC,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,uBAAuB,CAAC;QAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC;QAC/C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/payload/platform/plugins/workflows/mcp/dist/lib/step-resolver.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Step resolver — dependency ordering and template variable resolution.
+ *
+ * Pure functions: steps + context in → ordered execution plan out.
+ * No I/O, no side effects, no Neo4j.
+ *
+ *   STEPS (unordered)
+ *     │
+ *     ▼
+ *   resolveOrder()  ──→  Kahn's algorithm (topological sort)
+ *     │                    ├─ cycle detected → CyclicDependencyError
+ *     │                    └─ position tiebreak for independent steps
+ *     ▼
+ *   ORDERED STEPS
+ *     │
+ *     ▼
+ *   resolveTemplates()  ──→  {{key.path}} substitution
+ *     │                        ├─ JSON parse output, fallback to {_raw: text}
+ *     │                        └─ unresolved → UnresolvedTemplateError
+ *     ▼
+ *   RESOLVED PARAMS
+ */
+interface StepBase {
+    stepId: string;
+    dependsOn?: string[];
+    onFailure?: "abort" | "skip" | "retry";
+    retryLimit?: number;
+    outputKey?: string;
+    timeout?: number;
+    position: number;
+    label: string;
+}
+export interface ToolStepDefinition extends StepBase {
+    type: "tool";
+    plugin: string;
+    tool: string;
+    params?: Record<string, unknown>;
+}
+export interface LlmStepDefinition extends StepBase {
+    type: "llm";
+    prompt: string;
+    model?: string;
+    maxTokens?: number;
+}
+export type StepDefinition = ToolStepDefinition | LlmStepDefinition;
+/**
+ * Topological sort with position-based tiebreaking.
+ * Returns steps in execution order. Throws on cycles.
+ */
+export declare function resolveOrder(steps: StepDefinition[]): StepDefinition[];
+/**
+ * Parse a step's MCP tool response text into a structured output.
+ * If the text is valid JSON, return the parsed object.
+ * Otherwise, return { _raw: text }.
+ */
+export declare function parseStepOutput(text: string): Record<string, unknown>;
+/**
+ * Resolve all {{template.variables}} in a params object.
+ * Context is a map of outputKey → parsed step output.
+ *
+ * Throws UnresolvedTemplateError if any variable cannot be resolved.
+ */
+export declare function resolveTemplates(params: Record<string, unknown>, context: Record<string, Record<string, unknown>>): Record<string, unknown>;
+/**
+ * Resolve template variables in a single string value.
+ * Supports full replacement: "{{a.b}}" → value of a.b
+ * Supports interpolation: "Hello {{name}}" → "Hello John"
+ */
+export declare function resolveStringTemplate(template: string, context: Record<string, Record<string, unknown>>): unknown;
+export {};
+//# sourceMappingURL=step-resolver.d.ts.map

package/payload/platform/plugins/workflows/mcp/dist/lib/step-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"step-resolver.d.ts","sourceRoot":"","sources":["../../src/lib/step-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAMH,UAAU,QAAQ;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAmB,SAAQ,QAAQ;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,iBAAkB,SAAQ,QAAQ;IACjD,IAAI,EAAE,KAAK,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,kBAAkB,GAAG,iBAAiB,CAAC;AAMpE;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAwDtE;AAMD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmBrE;AAkBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC/C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBzB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC/C,OAAO,CA8BT"}

package/payload/platform/plugins/workflows/mcp/dist/lib/step-resolver.js

@@ -0,0 +1,183 @@
+/**
+ * Step resolver — dependency ordering and template variable resolution.
+ *
+ * Pure functions: steps + context in → ordered execution plan out.
+ * No I/O, no side effects, no Neo4j.
+ *
+ *   STEPS (unordered)
+ *     │
+ *     ▼
+ *   resolveOrder()  ──→  Kahn's algorithm (topological sort)
+ *     │                    ├─ cycle detected → CyclicDependencyError
+ *     │                    └─ position tiebreak for independent steps
+ *     ▼
+ *   ORDERED STEPS
+ *     │
+ *     ▼
+ *   resolveTemplates()  ──→  {{key.path}} substitution
+ *     │                        ├─ JSON parse output, fallback to {_raw: text}
+ *     │                        └─ unresolved → UnresolvedTemplateError
+ *     ▼
+ *   RESOLVED PARAMS
+ */
+// ─────────────────────────────────────────────────────────────
+// Dependency resolution — Kahn's algorithm
+// ─────────────────────────────────────────────────────────────
+/**
+ * Topological sort with position-based tiebreaking.
+ * Returns steps in execution order. Throws on cycles.
+ */
+export function resolveOrder(steps) {
+    const byId = new Map();
+    const inDegree = new Map();
+    const dependents = new Map();
+    for (const step of steps) {
+        byId.set(step.stepId, step);
+        inDegree.set(step.stepId, 0);
+        dependents.set(step.stepId, []);
+    }
+    for (const step of steps) {
+        if (!step.dependsOn)
+            continue;
+        for (const depId of step.dependsOn) {
+            if (!byId.has(depId)) {
+                throw new Error(`Step "${step.label}" (${step.stepId}) depends on unknown step "${depId}"`);
+            }
+            inDegree.set(step.stepId, (inDegree.get(step.stepId) ?? 0) + 1);
+            dependents.get(depId).push(step.stepId);
+        }
+    }
+    // Seed queue with steps that have no dependencies, sorted by position
+    const queue = steps
+        .filter((s) => (inDegree.get(s.stepId) ?? 0) === 0)
+        .sort((a, b) => a.position - b.position);
+    const ordered = [];
+    while (queue.length > 0) {
+        const current = queue.shift();
+        ordered.push(current);
+        for (const depId of dependents.get(current.stepId) ?? []) {
+            const newDegree = (inDegree.get(depId) ?? 1) - 1;
+            inDegree.set(depId, newDegree);
+            if (newDegree === 0) {
+                queue.push(byId.get(depId));
+                // Re-sort by position for deterministic ordering among freed steps
+                queue.sort((a, b) => a.position - b.position);
+            }
+        }
+    }
+    if (ordered.length !== steps.length) {
+        const stuck = steps
+            .filter((s) => !ordered.includes(s))
+            .map((s) => `"${s.label}" (${s.stepId})`);
+        throw new Error(`Cycle detected in step dependencies — stuck steps: ${stuck.join(", ")}`);
+    }
+    return ordered;
+}
+// ─────────────────────────────────────────────────────────────
+// Template resolution
+// ─────────────────────────────────────────────────────────────
+/**
+ * Parse a step's MCP tool response text into a structured output.
+ * If the text is valid JSON, return the parsed object.
+ * Otherwise, return { _raw: text }.
+ */
+export function parseStepOutput(text) {
+    // Strip markdown code fences — LLMs frequently wrap JSON in ```json blocks
+    // despite instructions not to. Try the cleaned version first, fall back to raw.
+    const cleaned = text
+        .replace(/^```json?\s*/i, "")
+        .replace(/\s*```\s*$/i, "")
+        .trim();
+    const toParse = cleaned || text;
+    try {
+        const parsed = JSON.parse(toParse);
+        if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
+            return parsed;
+        }
+        return { _raw: text };
+    }
+    catch {
+        return { _raw: text };
+    }
+}
+/**
+ * Resolve dot-notation path into a nested object.
+ * "a.b.c" on { a: { b: { c: 42 } } } → 42
+ * Returns undefined if any segment is missing.
+ */
+function resolvePath(obj, path) {
+    let current = obj;
+    for (const segment of path.split(".")) {
+        if (current === null || current === undefined || typeof current !== "object") {
+            return undefined;
+        }
+        current = current[segment];
+    }
+    return current;
+}
+/**
+ * Resolve all {{template.variables}} in a params object.
+ * Context is a map of outputKey → parsed step output.
+ *
+ * Throws UnresolvedTemplateError if any variable cannot be resolved.
+ */
+export function resolveTemplates(params, context) {
+    const resolved = {};
+    for (const [key, value] of Object.entries(params)) {
+        if (typeof value === "string") {
+            resolved[key] = resolveStringTemplate(value, context);
+        }
+        else if (typeof value === "object" && value !== null && !Array.isArray(value)) {
+            resolved[key] = resolveTemplates(value, context);
+        }
+        else {
+            resolved[key] = value;
+        }
+    }
+    return resolved;
+}
+/**
+ * Resolve template variables in a single string value.
+ * Supports full replacement: "{{a.b}}" → value of a.b
+ * Supports interpolation: "Hello {{name}}" → "Hello John"
+ */
+export function resolveStringTemplate(template, context) {
+    const TEMPLATE_RE = /\{\{([^}]+)\}\}/g;
+    const matches = [...template.matchAll(TEMPLATE_RE)];
+    if (matches.length === 0)
+        return template;
+    // If the entire string is a single template variable, return the raw value
+    // (preserving type — number, boolean, object, etc.)
+    if (matches.length === 1 && matches[0][0] === template) {
+        const path = matches[0][1].trim();
+        const value = resolveContextPath(path, context);
+        if (value === undefined) {
+            throw new Error(`Unresolved template variable '{{${path}}}' — not found in context or prior step outputs`);
+        }
+        return value;
+    }
+    // Multiple variables or mixed text+variable — string interpolation
+    return template.replace(TEMPLATE_RE, (_match, rawPath) => {
+        const path = rawPath.trim();
+        const value = resolveContextPath(path, context);
+        if (value === undefined) {
+            throw new Error(`Unresolved template variable '{{${path}}}' — not found in context or prior step outputs`);
+        }
+        return typeof value === "object" ? JSON.stringify(value) : String(value);
+    });
+}
+/**
+ * Resolve a dotted path against the context.
+ * First segment is the outputKey, remaining segments traverse the output object.
+ * e.g. "newContact.contactId" → context["newContact"]["contactId"]
+ */
+function resolveContextPath(path, context) {
+    const [rootKey, ...rest] = path.split(".");
+    const root = context[rootKey];
+    if (root === undefined)
+        return undefined;
+    if (rest.length === 0)
+        return root;
+    return resolvePath(root, rest.join("."));
+}
+//# sourceMappingURL=step-resolver.js.map

package/payload/platform/plugins/workflows/mcp/dist/lib/step-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"step-resolver.js","sourceRoot":"","sources":["../../src/lib/step-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAiCH,gEAAgE;AAChE,2CAA2C;AAC3C,gEAAgE;AAEhE;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAuB;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,SAAS;QAC9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,MAAM,8BAA8B,KAAK,GAAG,CAC3E,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,MAAM,KAAK,GAAqB,KAAK;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;SAClD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEtB,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACzD,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACjD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC/B,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,CAAC;gBAC7B,mEAAmE;gBACnE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,sDAAsD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzE,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gEAAgE;AAChE,sBAAsB;AACtB,gEAAgE;AAEhE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,2EAA2E;IAC3E,gFAAgF;IAChF,MAAM,OAAO,GAAG,IAAI;SACjB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,IAAI,EAAE,CAAC;IAEV,MAAM,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,OAAO,MAAiC,CAAC;QAC3C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,GAAY,EAAE,IAAY;IAC7C,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7E,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA+B,EAC/B,OAAgD;IAEhD,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,QAAQ,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,QAAQ,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAC9B,KAAgC,EAChC,OAAO,CACR,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,OAAgD;IAEhD,MAAM,WAAW,GAAG,kBAAkB,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAEpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE1C,2EAA2E;IAC3E,oDAAoD;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,mCAAmC,IAAI,kDAAkD,CAC1F,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mEAAmE;IACnE,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,OAAe,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,mCAAmC,IAAI,kDAAkD,CAC1F,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,IAAY,EACZ,OAAgD;IAEhD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/payload/platform/plugins/workflows/mcp/dist/lib/validate-capabilities.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Capability validation — checks that referenced plugins and MCP servers exist.
+ *
+ * Validates at workflow creation/update time. If a step references a plugin
+ * that doesn't exist or whose MCP server isn't built, the workflow is invalid.
+ */
+import type { StepDefinition } from "./step-resolver.js";
+export interface ValidationResult {
+    valid: boolean;
+    errors: StepValidationError[];
+}
+export interface StepValidationError {
+    stepId: string;
+    label: string;
+    plugin: string;
+    tool: string;
+    reason: string;
+}
+/**
+ * Validate that every step's referenced plugin directory and MCP server exist.
+ * Returns per-step validation results.
+ */
+export declare function validateCapabilities(steps: StepDefinition[], platformRoot: string): ValidationResult;
+//# sourceMappingURL=validate-capabilities.d.ts.map

package/payload/platform/plugins/workflows/mcp/dist/lib/validate-capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-capabilities.d.ts","sourceRoot":"","sources":["../../src/lib/validate-capabilities.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,mBAAmB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,cAAc,EAAE,EACvB,YAAY,EAAE,MAAM,GACnB,gBAAgB,CAmDlB"}