@rubytech/create-sitedesk-code 0.1.387 → 0.1.389

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.d.ts

@@ -1,31 +0,0 @@
-import type { JlStore, JlEnvironment } from "./secrets.js";
-/** Strip credential-shaped substrings and cap length before an upstream error
- *  body is put into a thrown message that may reach a tool response/transcript. */
-export declare function sanitizeErrorBody(text: string): string;
-export declare function identityBaseFor(env: JlEnvironment): string;
-export declare function apiBaseFor(env: JlEnvironment): string;
-export type FetchLike = (url: string, init: {
-    method: string;
-    headers: Record<string, string>;
-    body?: string;
-}) => Promise<{
-    ok: boolean;
-    status: number;
-    text: () => Promise<string>;
-}>;
-export interface Token {
-    accessToken: string;
-    expiresIn: number;
-}
-export declare function acquireToken(store: JlStore, opts?: {
-    fetchImpl?: FetchLike;
-}): Promise<Token>;
-/** Return a valid bearer, refreshing if cached is stale or force=true.
- *  reason drives the op=token-refresh line; first acquisition logs op=token-acquire only. */
-export declare function getBearer(store: JlStore, accountId: string, opts?: {
-    force?: boolean;
-    fetchImpl?: FetchLike;
-}): Promise<string>;
-/** Test seam: clear the per-process cache. */
-export declare function _resetTokenCache(): void;
-//# sourceMappingURL=auth.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAa3D;mFACmF;AACnF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMtD;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAE1D;AACD,wBAAgB,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAErD;AAED,MAAM,MAAM,SAAS,GAAG,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,KACrE,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,CAAC,CAAC;AAM3E,MAAM,WAAW,KAAK;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CA6BvG;AAQD;6FAC6F;AAC7F,wBAAsB,SAAS,CAC7B,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GACpD,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,8CAA8C;AAC9C,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.js

@@ -1,78 +0,0 @@
-const IDENTITY_BASE = {
-    uat: "https://uatidentityserver.joblogic.com",
-    production: "https://identityserver.joblogic.com",
-};
-const API_BASE = {
-    uat: "https://uatapi.joblogic.com",
-    production: "https://api.joblogic.com",
-};
-/** Refresh when the cached token is within this window of expiry. */
-const REFRESH_THRESHOLD_MS = 120_000;
-/** Strip credential-shaped substrings and cap length before an upstream error
- *  body is put into a thrown message that may reach a tool response/transcript. */
-export function sanitizeErrorBody(text) {
-    return text
-        .replace(/client_secret=[^&\s"]*/gi, "client_secret=***")
-        .replace(/client_id=[^&\s"]*/gi, "client_id=***")
-        .replace(/Bearer\s+[A-Za-z0-9._-]+/gi, "Bearer ***")
-        .slice(0, 300);
-}
-export function identityBaseFor(env) {
-    return IDENTITY_BASE[env];
-}
-export function apiBaseFor(env) {
-    return API_BASE[env];
-}
-export async function acquireToken(store, opts = {}) {
-    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
-    const url = `${identityBaseFor(store.environment)}/connect/token`;
-    const body = new URLSearchParams({
-        grant_type: "client_credentials",
-        client_id: store.clientId,
-        client_secret: store.clientSecret,
-    }).toString();
-    const started = Date.now();
-    const res = await fetchImpl(url, {
-        method: "POST",
-        headers: { "Content-Type": "application/x-www-form-urlencoded", Accept: "application/json" },
-        body,
-    });
-    const text = await res.text();
-    // The token request carried client_secret; some identity servers echo request
-    // params in a 4xx body. Strip secrets and cap length before the message can
-    // reach a tool response / transcript.
-    if (!res.ok)
-        throw new Error(`token endpoint ${res.status}: ${sanitizeErrorBody(text)}`);
-    let raw;
-    try {
-        raw = JSON.parse(text);
-    }
-    catch {
-        throw new Error(`token endpoint non-JSON: ${text}`);
-    }
-    if (!raw.access_token)
-        throw new Error(`token endpoint missing access_token: ${text}`);
-    const expiresIn = raw.expires_in ?? 3600;
-    process.stderr.write(`[joblogic] op=token-acquire ok=true expiresInS=${expiresIn} ms=${Date.now() - started}\n`);
-    return { accessToken: raw.access_token, expiresIn };
-}
-const tokenCache = new Map();
-/** Return a valid bearer, refreshing if cached is stale or force=true.
- *  reason drives the op=token-refresh line; first acquisition logs op=token-acquire only. */
-export async function getBearer(store, accountId, opts = {}) {
-    const cached = tokenCache.get(accountId);
-    const fresh = cached && cached.expiresAt - REFRESH_THRESHOLD_MS > Date.now();
-    if (fresh && !opts.force)
-        return cached.accessToken;
-    if (cached) {
-        process.stderr.write(`[joblogic] op=token-refresh reason=${opts.force ? "401" : "pre-expiry"} ok=true\n`);
-    }
-    const tok = await acquireToken(store, { fetchImpl: opts.fetchImpl });
-    tokenCache.set(accountId, { accessToken: tok.accessToken, expiresAt: Date.now() + tok.expiresIn * 1000 });
-    return tok.accessToken;
-}
-/** Test seam: clear the per-process cache. */
-export function _resetTokenCache() {
-    tokenCache.clear();
-}
-//# sourceMappingURL=auth.js.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAKA,MAAM,aAAa,GAAkC;IACnD,GAAG,EAAE,wCAAwC;IAC7C,UAAU,EAAE,qCAAqC;CAClD,CAAC;AACF,MAAM,QAAQ,GAAkC;IAC9C,GAAG,EAAE,6BAA6B;IAClC,UAAU,EAAE,0BAA0B;CACvC,CAAC;AACF,qEAAqE;AACrE,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAErC;mFACmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI;SACR,OAAO,CAAC,0BAA0B,EAAE,mBAAmB,CAAC;SACxD,OAAO,CAAC,sBAAsB,EAAE,eAAe,CAAC;SAChD,OAAO,CAAC,4BAA4B,EAAE,YAAY,CAAC;SACnD,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAkB;IAChD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,GAAkB;IAC3C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAc,EAAE,OAAkC,EAAE;IACrF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC/E,MAAM,GAAG,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,aAAa,EAAE,KAAK,CAAC,YAAY;KAClC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACd,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QAC/B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC5F,IAAI;KACL,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,8EAA8E;IAC9E,4EAA4E;IAC5E,sCAAsC;IACtC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,KAAK,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,SAAS,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;IACjH,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAMD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE7C;6FAC6F;AAC7F,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAc,EACd,SAAiB,EACjB,OAAmD,EAAE;IAErD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7E,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAO,CAAC,WAAW,CAAC;IACrD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,YAAY,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACrE,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC,CAAC;IAC1G,OAAO,GAAG,CAAC,WAAW,CAAC;AACzB,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,gBAAgB;IAC9B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.d.ts

@@ -1,35 +0,0 @@
-import type { JlStore } from "./secrets.js";
-import { type FetchLike } from "./auth.js";
-export type AccessFaultKind = "auth" | "whitelist" | "network";
-export declare function classifyAccessFault(status: number): AccessFaultKind;
-export interface BaseArgs {
-    store: JlStore;
-    accountId: string;
-    method: "GET" | "POST";
-    /** path under /api/v1/, e.g. "Customer/GetAll". */
-    path: string;
-    /** entity label for the observability line. */
-    entity: string;
-    /** tool name for the observability line. */
-    tool: string;
-    /** extra query params (merged with tenantId). */
-    query?: Record<string, string>;
-    /** request body for POST. tenantId is also injected into the body for writes. */
-    body?: Record<string, unknown>;
-}
-/** A read or generic call. Performs one silent re-acquire on a 401. */
-export declare function jlRequest(args: BaseArgs, opts?: {
-    fetchImpl?: FetchLike;
-}): Promise<unknown>;
-/** A create with idempotency. idemKey lookup short-circuits a duplicate send.
- *  platformRoot is threaded explicitly (the ledger lives under the account secrets dir). */
-export interface JlCreateArgs extends Omit<BaseArgs, "method"> {
-    platformRoot: string;
-    idemKey: string;
-    /** field on the response carrying the new record id (default "id"). */
-    idField?: string;
-}
-export declare function jlCreate(args: JlCreateArgs, opts?: {
-    fetchImpl?: FetchLike;
-}): Promise<unknown>;
-//# sourceMappingURL=client.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAA4C,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAGrF,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAE/D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAInE;AAMD,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AA2BD,uEAAuE;AACvE,wBAAsB,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAoCtG;AAED;4FAC4F;AAC5F,MAAM,WAAW,YAAa,SAAQ,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAoCzG"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.js

@@ -1,106 +0,0 @@
-// JobLogic REST wrapper. Injects Bearer + tenantId on every call, emits the
-// observability lifeline, classifies any 401/403/network failure as an
-// access-fault, and performs exactly one silent token re-acquire on a 401.
-import { randomBytes } from "node:crypto";
-import { apiBaseFor, getBearer, sanitizeErrorBody } from "./auth.js";
-import { lookupIdem, recordIdem } from "./idempotency.js";
-export function classifyAccessFault(status) {
-    if (status === 401)
-        return "auth";
-    if (status === 403)
-        return "whitelist";
-    return "network"; // status 0 / connect failure
-}
-function reqId() {
-    return randomBytes(6).toString("hex");
-}
-async function doFetch(args, accessToken, fetchImpl) {
-    const params = new URLSearchParams({ tenantId: args.store.tenantId, ...(args.query ?? {}) });
-    const url = `${apiBaseFor(args.store.environment)}/api/v1/${args.path}?${params.toString()}`;
-    const headers = { Authorization: `Bearer ${accessToken}`, Accept: "application/json" };
-    let bodyStr;
-    if (args.body !== undefined) {
-        headers["Content-Type"] = "application/json";
-        bodyStr = JSON.stringify({ tenantId: args.store.tenantId, ...args.body });
-    }
-    try {
-        const res = await fetchImpl(url, { method: args.method, headers, body: bodyStr });
-        return { ok: res.ok, status: res.status, text: await res.text() };
-    }
-    catch (err) {
-        // connect-level failure → network access-fault
-        process.stderr.write(`[joblogic] op=access-fault kind=network tool=${args.tool} entity=${args.entity} detail=${err.message}\n`);
-        throw new Error(`access-fault kind=network: ${err.message}`);
-    }
-}
-/** A read or generic call. Performs one silent re-acquire on a 401. */
-export async function jlRequest(args, opts = {}) {
-    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
-    const id = reqId();
-    const isWrite = args.method === "POST";
-    process.stderr.write(isWrite
-        ? `[joblogic] op=mutation reqId=${id} tool=${args.tool} entity=${args.entity} verb=update\n`
-        : `[joblogic] op=request reqId=${id} tool=${args.tool} entity=${args.entity}\n`);
-    let bearer = await getBearer(args.store, args.accountId, { fetchImpl });
-    const started = Date.now();
-    let res = await doFetch(args, bearer, fetchImpl);
-    if (res.status === 401) {
-        bearer = await getBearer(args.store, args.accountId, { force: true, fetchImpl });
-        res = await doFetch(args, bearer, fetchImpl);
-    }
-    const ms = Date.now() - started;
-    if (!res.ok) {
-        if (res.status === 401 || res.status === 403) {
-            process.stderr.write(`[joblogic] op=access-fault kind=${classifyAccessFault(res.status)} tool=${args.tool} entity=${args.entity}\n`);
-        }
-        process.stderr.write(`[joblogic] op=response reqId=${id} status=${res.status} ms=${ms} rows=-\n`);
-        throw new Error(`JobLogic ${args.method} ${args.path} ${res.status}: ${sanitizeErrorBody(res.text)}`);
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(res.text);
-    }
-    catch {
-        throw new Error(`JobLogic ${args.path} non-JSON: ${res.text}`);
-    }
-    const data = parsed.data;
-    const rows = Array.isArray(data) ? data.length : "-";
-    process.stderr.write(`[joblogic] op=response reqId=${id} status=${res.status} ms=${ms} rows=${rows}\n`);
-    return parsed;
-}
-export async function jlCreate(args, opts = {}) {
-    const id = reqId();
-    const hit = lookupIdem(args.platformRoot, args.accountId, args.idemKey);
-    if (hit) {
-        process.stderr.write(`[joblogic] op=idem-hit reqId=${id} tool=${args.tool} existingId=${hit.recordId}\n`);
-        return { idempotent: true, id: hit.recordId, entity: hit.entity };
-    }
-    const result = await jlRequest({
-        store: args.store,
-        accountId: args.accountId,
-        method: "POST",
-        path: args.path,
-        entity: args.entity,
-        tool: args.tool,
-        query: args.query,
-        body: args.body,
-    }, opts);
-    const writtenId = extractId(result, args.idField);
-    if (!writtenId) {
-        // A 2xx with no extractable record id means the ledger cannot be written, so
-        // a retry of the same idemKey would duplicate. Fail loudly (the response
-        // shape / idField is provisional until UAT-confirmed) rather than silently
-        // leaving an idempotency hole.
-        process.stderr.write(`[joblogic] op=idem-record-fail reqId=${id} tool=${args.tool} entity=${args.entity} reason=id-unextractable\n`);
-        throw new Error(`${args.tool}: create returned success but no '${args.idField ?? "id"}' could be extracted from the response — a retry would NOT be idempotent. Confirm the response shape / idField against UAT.`);
-    }
-    recordIdem(args.platformRoot, args.accountId, args.idemKey, args.entity, writtenId);
-    process.stderr.write(`[joblogic] op=response reqId=${id} status=created id=${writtenId}\n`);
-    return result;
-}
-function extractId(result, idField = "id") {
-    const r = result;
-    const v = r?.[idField] ?? r?.data?.[idField];
-    return v == null ? null : String(v);
-}
-//# sourceMappingURL=client.js.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uEAAuE;AACvE,2EAA2E;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAkB,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI1D,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,OAAO,SAAS,CAAC,CAAC,6BAA6B;AACjD,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAkBD,KAAK,UAAU,OAAO,CACpB,IAAc,EACd,WAAmB,EACnB,SAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7F,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC/G,IAAI,OAA2B,CAAC;IAChC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+CAA+C;QAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gDAAgD,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,WAAY,GAAa,CAAC,OAAO,IAAI,CACrH,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,8BAA+B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc,EAAE,OAAkC,EAAE;IAClF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC/E,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,OAAO;QACL,CAAC,CAAC,gCAAgC,EAAE,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,gBAAgB;QAC5F,CAAC,CAAC,+BAA+B,EAAE,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,IAAI,CAClF,CAAC;IACF,IAAI,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjF,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,IAAI,CAC/G,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,WAAW,GAAG,CAAC,MAAM,OAAO,EAAE,WAAW,CAAC,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAI,MAA6B,CAAC,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,WAAW,GAAG,CAAC,MAAM,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;IACxG,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB,EAAE,OAAkC,EAAE;IACrF,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,SAAS,IAAI,CAAC,IAAI,eAAe,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC1G,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B;QACE,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,EACD,IAAI,CACL,CAAC;IACF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,6EAA6E;QAC7E,yEAAyE;QACzE,2EAA2E;QAC3E,+BAA+B;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wCAAwC,EAAE,SAAS,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,4BAA4B,CAC/G,CAAC;QACF,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,IAAI,qCAAqC,IAAI,CAAC,OAAO,IAAI,IAAI,6HAA6H,CACnM,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,sBAAsB,SAAS,IAAI,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,MAAe,EAAE,OAAO,GAAG,IAAI;IAChD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,IAAK,CAAC,EAAE,IAA4C,EAAE,CAAC,OAAO,CAAC,CAAC;IACtF,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.d.ts

@@ -1,8 +0,0 @@
-export interface IdemRecord {
-    entity: string;
-    recordId: string;
-    ts: number;
-}
-export declare function lookupIdem(platformRoot: string, accountId: string, idemKey: string): IdemRecord | null;
-export declare function recordIdem(platformRoot: string, accountId: string, idemKey: string, entity: string, recordId: string): void;
-//# sourceMappingURL=idempotency.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../src/lib/idempotency.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;CACZ;AAUD,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAatG;AAED,wBAAgB,UAAU,CACxB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,IAAI,CAKN"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.js

@@ -1,41 +0,0 @@
-// Local idempotency ledger. JobLogic exposes no idempotency header, so a create
-// retry (tool retry, or a write whose response was lost to a timeout) would
-// duplicate. Each create computes/accepts an idemKey; the ledger maps it to the
-// record id JobLogic returned. A hit short-circuits the send entirely.
-import { mkdirSync, readFileSync, writeFileSync, existsSync } from "node:fs";
-import { join } from "node:path";
-import { accountSecretsDir } from "./secrets.js";
-/** idemKey filename safety — no path fragments. */
-const KEY_RE = /^[A-Za-z0-9_.:-]+$/;
-function ledgerDir(platformRoot, accountId) {
-    return join(accountSecretsDir(platformRoot, accountId), "joblogic-idem");
-}
-function ledgerPath(platformRoot, accountId, idemKey) {
-    if (!KEY_RE.test(idemKey))
-        throw new Error(`invalid idemKey: ${JSON.stringify(idemKey)}`);
-    return join(ledgerDir(platformRoot, accountId), `${idemKey}.json`);
-}
-export function lookupIdem(platformRoot, accountId, idemKey) {
-    let file;
-    try {
-        file = ledgerPath(platformRoot, accountId, idemKey);
-    }
-    catch {
-        return null;
-    }
-    if (!existsSync(file))
-        return null;
-    try {
-        return JSON.parse(readFileSync(file, "utf-8"));
-    }
-    catch {
-        return null;
-    }
-}
-export function recordIdem(platformRoot, accountId, idemKey, entity, recordId) {
-    const file = ledgerPath(platformRoot, accountId, idemKey);
-    mkdirSync(ledgerDir(platformRoot, accountId), { recursive: true });
-    const rec = { entity, recordId, ts: Date.now() };
-    writeFileSync(file, JSON.stringify(rec), { mode: 0o600 });
-}
-//# sourceMappingURL=idempotency.js.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/idempotency.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../src/lib/idempotency.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,uEAAuE;AACvE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,mDAAmD;AACnD,MAAM,MAAM,GAAG,oBAAoB,CAAC;AAQpC,SAAS,SAAS,CAAC,YAAoB,EAAE,SAAiB;IACxD,OAAO,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC,CAAC;AAC3E,CAAC;AACD,SAAS,UAAU,CAAC,YAAoB,EAAE,SAAiB,EAAE,OAAe;IAC1E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,SAAiB,EAAE,OAAe;IACjF,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAe,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,YAAoB,EACpB,SAAiB,EACjB,OAAe,EACf,MAAc,EACd,QAAgB;IAEhB,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC7D,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/secrets.d.ts

@@ -1,21 +0,0 @@
-export type JlEnvironment = "uat" | "production";
-export interface JlStore {
-    clientId: string;
-    clientSecret: string;
-    /** Company tenant id — required on every JobLogic API call (tenant-scoped credential). */
-    tenantId: string;
-    environment: JlEnvironment;
-    /** Sender phone (E.164) → JobLogic engineer id, for write attribution. Config, not a secret. */
-    engineerMap: Record<string, string>;
-}
-export declare function accountSecretsDir(platformRoot: string, accountId: string): string;
-export declare function readStore(platformRoot: string, accountId: string): JlStore | null;
-export declare function setCredentials(platformRoot: string, accountId: string, creds: {
-    clientId: string;
-    clientSecret: string;
-    tenantId: string;
-    environment: JlEnvironment;
-}): void;
-export declare function setEngineerMap(platformRoot: string, accountId: string, entries: Record<string, string>): void;
-export declare function resolveEngineer(store: JlStore, senderPhone: string): string | null;
-//# sourceMappingURL=secrets.d.ts.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/secrets.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/lib/secrets.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,YAAY,CAAC;AAEjD,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,aAAa,CAAC;IAC3B,gGAAgG;IAChG,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAKD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjF;AAKD,wBAAgB,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAUjF;AAOD,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,aAAa,CAAA;CAAE,GAC9F,IAAI,CAGN;AAED,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,IAAI,CAIN;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAElF"}

package/payload/platform/plugins/joblogic/mcp/dist/lib/secrets.js

@@ -1,47 +0,0 @@
-// JobLogic per-account secret store. Plain 0600 JSON in the brand-isolated,
-// delete-protected secrets/ dir (the quickbooks + cloudflare precedent). Never
-// thrown from on read — a missing/corrupt store yields null so module init and
-// tool enumeration survive a no-creds account.
-import { mkdirSync, readFileSync, writeFileSync, existsSync } from "node:fs";
-import { resolve, join } from "node:path";
-function accountsDir(platformRoot) {
-    return resolve(platformRoot, "..", "data/accounts");
-}
-export function accountSecretsDir(platformRoot, accountId) {
-    return join(accountsDir(platformRoot), accountId, "secrets");
-}
-function storePath(platformRoot, accountId) {
-    return join(accountSecretsDir(platformRoot, accountId), "joblogic.json");
-}
-export function readStore(platformRoot, accountId) {
-    const file = storePath(platformRoot, accountId);
-    if (!existsSync(file))
-        return null;
-    try {
-        const parsed = JSON.parse(readFileSync(file, "utf-8"));
-        if (!parsed.clientId || !parsed.clientSecret || !parsed.tenantId || !parsed.environment)
-            return null;
-        return { engineerMap: {}, ...parsed };
-    }
-    catch {
-        return null;
-    }
-}
-function writeStore(platformRoot, accountId, store) {
-    mkdirSync(accountSecretsDir(platformRoot, accountId), { recursive: true });
-    writeFileSync(storePath(platformRoot, accountId), JSON.stringify(store, null, 2), { mode: 0o600 });
-}
-export function setCredentials(platformRoot, accountId, creds) {
-    const prev = readStore(platformRoot, accountId);
-    writeStore(platformRoot, accountId, { ...creds, engineerMap: prev?.engineerMap ?? {} });
-}
-export function setEngineerMap(platformRoot, accountId, entries) {
-    const prev = readStore(platformRoot, accountId);
-    if (!prev)
-        throw new Error("cannot set engineer map before credentials are set");
-    writeStore(platformRoot, accountId, { ...prev, engineerMap: { ...prev.engineerMap, ...entries } });
-}
-export function resolveEngineer(store, senderPhone) {
-    return store.engineerMap[senderPhone] ?? null;
-}
-//# sourceMappingURL=secrets.js.map

package/payload/platform/plugins/joblogic/mcp/dist/lib/secrets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/lib/secrets.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,+CAA+C;AAC/C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAc1C,SAAS,WAAW,CAAC,YAAoB;IACvC,OAAO,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;AACtD,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,SAAiB;IACvE,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC/D,CAAC;AACD,SAAS,SAAS,CAAC,YAAoB,EAAE,SAAiB;IACxD,OAAO,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,YAAoB,EAAE,SAAiB;IAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAqB,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QACrG,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,MAAM,EAAa,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,YAAoB,EAAE,SAAiB,EAAE,KAAc;IACzE,SAAS,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,aAAa,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,YAAoB,EACpB,SAAiB,EACjB,KAA+F;IAE/F,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAChD,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,YAAoB,EACpB,SAAiB,EACjB,OAA+B;IAE/B,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACjF,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,WAAmB;IACjE,OAAO,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;AAChD,CAAC"}

package/payload/platform/plugins/joblogic/mcp/package.json

@@ -1,10 +0,0 @@
-{
-  "name": "@maxy/joblogic",
-  "version": "0.1.0",
-  "private": true,
-  "type": "module",
-  "main": "dist/index.js",
-  "scripts": { "build": "tsc", "start": "node dist/index.js" },
-  "dependencies": { "@modelcontextprotocol/sdk": "^1.12.1", "zod": "^3.24.0" },
-  "devDependencies": { "typescript": "^5.7.0", "@types/node": "^22.0.0" }
-}

package/payload/platform/plugins/joblogic/skills/joblogic/SKILL.md

@@ -1,32 +0,0 @@
----
-name: joblogic
-description: Connect JobLogic and drive the field-service job lifecycle. Use when the operator wants to link JobLogic, read customers/sites/jobs/visits/quotes/invoices/assets/timesheets, or make writes (create a visit, log job costs, set a job status, raise an invoice) from instructions sent by field staff. Covers the one-time JobLogic Support onboarding and source-IP whitelisting, then the agent-driven read/write surface.
----
-
-# JobLogic connector
-
-JobLogic is the operator's field-service system of record. This connector is bespoke to one account: it does nothing on any other install. The agent reads and writes across the job lifecycle under one company credential. Field staff never call JobLogic themselves; they send a voice note or message to this install, the agent interprets it, and this install makes the write. So only this install's outbound IP ever touches JobLogic.
-
-Success is: the credentials are stored, `joblogic-connection-status` acquires a token, and a read such as `joblogic-customer-list` returns the company's data from UAT.
-
-## What the operator does once (relay this; the agent cannot do it)
-
-The agent cannot raise a support ticket or whitelist an IP. The operator does this once with JobLogic.
-
-- **Raise a JobLogic Support ticket** for API access. Ask for a UAT (test) account first, then production. JobLogic Support issues a `client_id` and `client_secret` (OAuth client_credentials) and tells the operator the company `tenantId`.
-- **Whitelist the install's outbound source IP.** JobLogic filters API calls by the public IP they originate from. The install's inbound tunnel does not fix the outbound IP, and a laptop's public IP is usually dynamic. The operator resolves one of: run the install from one location with a stable ISP IP and register that IP; route the connector's outbound through a fixed-egress proxy with a static IP and register that; or confirm with JobLogic that production drops the per-IP filter. Until one holds, calls fail and the logs show `op=access-fault kind=whitelist`.
-
-## What the agent does after that
-
-- **Store the credentials.** Run `joblogic-credentials-set` with the `client_id`, `client_secret`, `tenantId`, and `environment` (`uat` first). They are written only to this account's secrets file, never echoed.
-- **Confirm it works.** Run `joblogic-connection-status`. It acquires a token and reports the environment and tenant. If it fails, the logs distinguish an auth problem from a whitelist problem from a network blip.
-- **Set up attribution.** The company credential is not per-user, so JobLogic will not auto-attribute a write to the engineer who reported it. Run `joblogic-engineer-map-set` to map each field staffer's phone number to their JobLogic engineer id. When a write comes from a message, pass the sender's phone so the connector stamps the right engineer on it.
-- **Read and write.** Reads cover customers, sites, jobs, engineers, visits, quotes, invoices, assets, and timesheets. Writes cover creating and updating those records and the lifecycle transitions: deploy a visit, log job costs, set a job status, approve a quote, raise an invoice, add a note or attachment.
-
-## Authorization and safety
-
-A write is authorized by the person who messaged the install asking for it. That instruction is the authorization; the agent does not interpose a second confirmation step. The one write safety that always applies is idempotency: every create takes an idempotency key, so a retry or a write whose response was lost does not create a duplicate record. Derive the key deterministically from the write's natural details so the same instruction maps to the same key.
-
-## Use UAT for all testing
-
-Every read and write test runs against the UAT environment, never production. Switch `environment` to `production` only once the operator confirms UAT behaves correctly and production credentials and IP whitelisting are in place.

package/payload/platform/plugins/sales/.claude-plugin/plugin.json

@@ -1,8 +0,0 @@
-{
-  "name": "sales",
-  "description": "Unified sales plugin for SiteDesk Phase 0. Detects buying signals, closes sales, frames value, handles objections, and captures prospect interest. Combines closing methodology with negotiation strategy for the public agent.",
-  "version": "0.1.0",
-  "author": {
-    "name": "Rubytech LLC"
-  }
-}

package/payload/platform/plugins/sales/PLUGIN.md

@@ -1,106 +0,0 @@
----
-name: sales
-description: "Unified sales plugin for SiteDesk Phase 0. Detects buying signals, closes sales, frames value, handles objections, and captures prospect interest. Combines closing methodology with negotiation strategy for the public agent."
-metadata: {"platform":{"always":true,"embed":["public"],"pluginKey":"sales","optional":true}}
----
-
-# Sales
-
-You are SiteDesk's sales agent. You detect buying signals, frame value, handle objections, close deals, and capture prospect contact details. You operate on every public agent conversation.
-
-## The Golden Rule
-
-**Close before answering the next question.**
-
-When a prospect asks a question during a close attempt, the instinct is to answer fully — then append a close as an afterthought. The close gets buried and ignored.
-
-The correct sequence: briefly acknowledge the question (1-2 sentences max), then immediately re-anchor to the commitment ask. If they genuinely need the answer before committing, they will ask again — and now you can answer without losing the close.
-
-## Five Rules
-
-1. **Detect buying signals — then close.** When a prospect expresses interest in signing up, getting started, or shows any buying signal below — stop informing and start closing. Do not qualify further. Do not ask discovery questions. Capture their details.
-
-2. **Never lead with price.** Establish value first. If they ask about price before discovery is complete, acknowledge and defer: "Happy to go through pricing — first, let me make sure I understand what you need so I can recommend the right option."
-
-3. **Acknowledge-then-anchor.** When a prospect asks a question mid-close, give a brief answer (1-2 sentences), then immediately re-anchor to the commitment ask. Brief answer then re-anchor. Not full answer then trailing close.
-
-4. **Frame cost as investment.** Every price has a return. Make that return visible. Don't defend the price — demonstrate the outcome.
-
-5. **Never concede without gaining.** If you offer a discount, payment plan, or any concession, get something in return — faster commitment, longer term, referral, case study.
-
-## Buying Signals
-
-A buying signal means the prospect is leaning in. Not every signal means "close now" — but every signal means "pay attention."
-
-**Verbal:**
-- Enthusiasm: "love it", "sounds great", "exactly what I need"
-- Future-tense commitment: "when we set this up", "I'd want to", "once I'm onboarded"
-- Asking about pricing, packages, timelines, or next steps
-- Asking about integration with existing tools — they are mentally placing the product in their workflow
-- Sharing detailed information unprompted — investing in the relationship
-- Asking operational questions: "who would I contact for support?", "how does billing work?"
-- **Direct interest: "how do I sign up", "I want this", "when can I start"** — this is the strongest signal. Skip all discovery and capture immediately.
-
-**Behavioural:**
-- Returning after a gap — they have been thinking about it; they have already decided. Do not re-sell. Confirm and close.
-- Responding quickly
-- Introducing the product to others
-
-## Closing Techniques
-
-Principles, not scripts. Adapt to the conversation's tone.
-
-- **Direct Close** — Ask for commitment directly. Use when signals are strong: "Shall I get you set up?" / "Ready to go ahead?"
-- **Choice Close** — Present two options, both of which are a "yes": "Would you prefer Solo or Family?"
-- **Summary Close** — Recap their needs and what SiteDesk solves, then close. Use after long conversations with lots of detail shared.
-- **Next-Step Close** — Propose a concrete small step: "The next step is getting your details on file — takes 30 seconds. Shall we do that now?"
-- **Return Close** — When a prospect returns after a gap, they are ready. Confirm, don't re-sell: "Great to hear from you! Sounds like you're ready — shall we get you signed up?"
-
-## When to Close vs When to Wait
-
-**Close when:** buying signals are present, or the prospect returns after a gap.
-
-**Wait when:** the prospect has genuine unresolved concerns (not pivots — actual objections), or you genuinely do not yet understand what they need.
-
-**Escalate when:** the close has been attempted 3 times without success, the prospect wants custom terms, or the prospect wants to speak to a human.
-
-## What Sales Is Not
-
-Never pressure, manipulate, or create false urgency. Never repeat the same close more than twice consecutively. Never close over genuine unresolved concerns — address them first. Never commit to pricing or terms that have not been authorised. Never disparage competitors. Never apologise for pricing.
-
-## Interest Capture
-
-When a prospect shows direct interest ("sign up", "get started") or after 3+ substantive exchanges — capture immediately. Do not continue qualifying.
-
-1. Ask for their name and email
-2. Confirm: "Got it — we'll be in touch shortly."
-
-Tone: warm, not pushy. Frame it as keeping them informed, not as a commitment. One ask per session maximum. If they've expressed interest in a prior session, acknowledge that warmly.
-
-You do not write any data. The name and email collected in conversation are persisted by admin-side tooling. If they decline, respect it and continue. Do not re-ask in the same session.
-
-## SiteDesk Product Knowledge
-
-SiteDesk is a personal and business AI assistant that runs on a device in your home or office. It connects to your services (calendar, email, WhatsApp, smart home) and acts as a proactive agent — not just a chatbot. It remembers context across conversations and takes action on your behalf.
-
-Key differentiators:
-- **Runs locally** — your data stays on your premises, not in someone else's cloud
-- **Proactive** — SiteDesk reaches out to you, not just responds when asked
-- **Multi-channel** — works across WhatsApp, voice, web, and smart home
-- **Plugin-based** — modular capabilities you can add based on what you need
-- **Family-aware** — one system that knows and supports the whole household
-
-For pricing details, load `references/pricing.md`.
-For FAQ answers, load `references/faq.md`.
-For competitor comparisons, load `references/comparisons.md`.
-
-## References
-
-Load the relevant reference when the situation requires it:
-
-- **Objections & pivots** → `references/objection-handling.md` — Feel/Felt/Found, price objections, concession strategy
-- **Competitive positioning** → `references/competitive-positioning.md` — differentiation without comparison, cheapest-vs-best principle
-- **Tracking & follow-up** → `references/close-tracking.md` — persisting close attempts to memory, follow-up scheduling, escalation after stalled closes
-- **Pricing** → `references/pricing.md` — SiteDesk plans, hardware, plugin packs, add-ons
-- **FAQ** → `references/faq.md` — common questions about SiteDesk, how it works, privacy, setup, capabilities
-- **Comparisons** → `references/comparisons.md` — competitor comparison tables for positioning conversations