@skillsmith/mcp-server 0.4.11 → 0.4.12

package/dist/src/tools/team-workspace.js

@@ -13,6 +13,8 @@
 import { z } from 'zod';
 import { isSupabaseConfigured } from '../supabase-client.js';
 import { createStubService } from './team-workspace.stub.js';
+import { createLiveService } from './team-workspace.live.js';
+import { readLicenseKey } from './team-resolver.js';
 // Re-export stub factory for external consumers and tests
 export { createStubService } from './team-workspace.stub.js';
 // ============================================================================
@@ -124,8 +126,14 @@ export function checkSharingPolicy(skillId, policy) {
     }
     return null;
 }
-// Module-level singleton (swapped when Supabase RPCs are ready)
-let service = createStubService();
+/**
+ * Module-level singleton. Picks the live Supabase-backed service when
+ * SUPABASE_URL + SUPABASE_ANON_KEY are configured; otherwise falls back
+ * to the in-memory stub (useful for tests and unauthenticated env).
+ */
+let service = isSupabaseConfigured()
+    ? createLiveService()
+    : createStubService();
 /** Replace the workspace service implementation (for testing or Supabase swap) */
 export function setTeamWorkspaceService(svc) {
     service = svc;
@@ -145,50 +153,80 @@ export function getTeamWorkspaceService() {
  */
 export async function executeTeamWorkspace(input, _context) {
     const dataSource = isSupabaseConfigured() ? 'live' : 'stub';
-    // TODO: Extract license key from context/env and resolve team_id via Supabase
-    const licenseKey = process.env.SKILLSMITH_LICENSE_KEY ?? '';
-    const teamId = await service.resolveTeamId(licenseKey);
-    switch (input.action) {
-        case 'create': {
-            if (!input.name) {
-                return { success: false, dataSource, error: 'Name is required for workspace creation.' };
+    // SMI-4292: License key resolution order — explicit env, then anon fallback.
+    // In live mode, missing/invalid keys surface as typed errors (not stub data).
+    const licenseKey = readLicenseKey();
+    if (dataSource === 'live' && !licenseKey) {
+        return {
+            success: false,
+            dataSource,
+            error: 'SKILLSMITH_LICENSE_KEY is required for team workspace operations. ' +
+                'Set it in your MCP server config — shell exports do not reach MCP subprocesses.',
+        };
+    }
+    let teamId;
+    try {
+        teamId = await service.resolveTeamId(licenseKey ?? '');
+    }
+    catch (err) {
+        return {
+            success: false,
+            dataSource,
+            error: err instanceof Error ? err.message : 'Failed to resolve team from license key.',
+        };
+    }
+    // SMI-4312: Wrap service calls so missing service-role config or other
+    // live-mode errors surface as typed {success:false} results.
+    try {
+        switch (input.action) {
+            case 'create': {
+                if (!input.name) {
+                    return { success: false, dataSource, error: 'Name is required for workspace creation.' };
+                }
+                const ws = await service.createWorkspace(teamId, input.name, input.description);
+                return {
+                    success: true,
+                    dataSource,
+                    workspace: ws,
+                    message: `Workspace "${ws.name}" created.`,
+                };
             }
-            const ws = await service.createWorkspace(teamId, input.name, input.description);
-            return {
-                success: true,
-                dataSource,
-                workspace: ws,
-                message: `Workspace "${ws.name}" created.`,
-            };
-        }
-        case 'list': {
-            const list = await service.listWorkspaces(teamId);
-            return {
-                success: true,
-                dataSource,
-                workspaces: list,
-                message: `Found ${list.length} workspace(s).`,
-            };
-        }
-        case 'get': {
-            if (!input.workspaceId) {
-                return { success: false, dataSource, error: 'workspaceId is required for get.' };
+            case 'list': {
+                const list = await service.listWorkspaces(teamId);
+                return {
+                    success: true,
+                    dataSource,
+                    workspaces: list,
+                    message: `Found ${list.length} workspace(s).`,
+                };
             }
-            const ws = await service.getWorkspace(teamId, input.workspaceId);
-            if (!ws)
-                return { success: false, dataSource, error: 'Workspace not found.' };
-            return { success: true, dataSource, workspace: ws };
-        }
-        case 'delete': {
-            if (!input.workspaceId) {
-                return { success: false, dataSource, error: 'workspaceId is required for delete.' };
+            case 'get': {
+                if (!input.workspaceId) {
+                    return { success: false, dataSource, error: 'workspaceId is required for get.' };
+                }
+                const ws = await service.getWorkspace(teamId, input.workspaceId);
+                if (!ws)
+                    return { success: false, dataSource, error: 'Workspace not found.' };
+                return { success: true, dataSource, workspace: ws };
+            }
+            case 'delete': {
+                if (!input.workspaceId) {
+                    return { success: false, dataSource, error: 'workspaceId is required for delete.' };
+                }
+                const deleted = await service.deleteWorkspace(teamId, input.workspaceId);
+                if (!deleted)
+                    return { success: false, dataSource, error: 'Workspace not found.' };
+                return { success: true, dataSource, message: 'Workspace deleted.' };
             }
-            const deleted = await service.deleteWorkspace(teamId, input.workspaceId);
-            if (!deleted)
-                return { success: false, dataSource, error: 'Workspace not found.' };
-            return { success: true, dataSource, message: 'Workspace deleted.' };
         }
     }
+    catch (err) {
+        return {
+            success: false,
+            dataSource,
+            error: err instanceof Error ? err.message : 'Workspace operation failed.',
+        };
+    }
 }
 /**
  * Execute a share_skill operation.
@@ -200,44 +238,80 @@ export async function executeTeamWorkspace(input, _context) {
  */
 export async function executeShareSkill(input, _context) {
     const dataSource = isSupabaseConfigured() ? 'live' : 'stub';
-    const licenseKey = process.env.SKILLSMITH_LICENSE_KEY ?? '';
-    const teamId = await service.resolveTeamId(licenseKey);
-    switch (input.action) {
-        case 'add': {
-            if (!input.skillId) {
-                return { success: false, dataSource, error: 'skillId is required for add.' };
+    const licenseKey = readLicenseKey();
+    if (dataSource === 'live' && !licenseKey) {
+        return {
+            success: false,
+            dataSource,
+            error: 'SKILLSMITH_LICENSE_KEY is required for skill-sharing operations. ' +
+                'Set it in your MCP server config — shell exports do not reach MCP subprocesses.',
+        };
+    }
+    let teamId;
+    try {
+        teamId = await service.resolveTeamId(licenseKey ?? '');
+    }
+    catch (err) {
+        return {
+            success: false,
+            dataSource,
+            error: err instanceof Error ? err.message : 'Failed to resolve team from license key.',
+        };
+    }
+    // SMI-4312: All service calls wrapped so thrown tenant-isolation errors
+    // (e.g. cross-team workspace access) surface as typed {success:false} results
+    // instead of propagating as unhandled exceptions.
+    try {
+        switch (input.action) {
+            case 'add': {
+                if (!input.skillId) {
+                    return { success: false, dataSource, error: 'skillId is required for add.' };
+                }
+                // SMI-3898: Check sharing policy before adding
+                const settings = await service.getWorkspaceSettings(teamId, input.workspaceId);
+                const policyError = checkSharingPolicy(input.skillId, settings.sharing);
+                if (policyError) {
+                    return { success: false, dataSource, error: policyError };
+                }
+                const skill = await service.addSkill(teamId, input.workspaceId, input.skillId);
+                return {
+                    success: true,
+                    dataSource,
+                    skills: [skill],
+                    message: `Skill "${input.skillId}" shared to workspace.`,
+                };
             }
-            // SMI-3898: Check sharing policy before adding
-            const settings = await service.getWorkspaceSettings(teamId, input.workspaceId);
-            const policyError = checkSharingPolicy(input.skillId, settings.sharing);
-            if (policyError) {
-                return { success: false, dataSource, error: policyError };
+            case 'remove': {
+                if (!input.skillId) {
+                    return { success: false, dataSource, error: 'skillId is required for remove.' };
+                }
+                const removed = await service.removeSkill(teamId, input.workspaceId, input.skillId);
+                if (!removed) {
+                    return { success: false, dataSource, error: 'Skill not found in workspace.' };
+                }
+                return {
+                    success: true,
+                    dataSource,
+                    message: `Skill "${input.skillId}" removed from workspace.`,
+                };
             }
-            const skill = await service.addSkill(teamId, input.workspaceId, input.skillId);
-            return {
-                success: true,
-                dataSource,
-                skills: [skill],
-                message: `Skill "${input.skillId}" shared to workspace.`,
-            };
-        }
-        case 'remove': {
-            if (!input.skillId) {
-                return { success: false, dataSource, error: 'skillId is required for remove.' };
+            case 'list': {
+                const list = await service.listSkills(teamId, input.workspaceId);
+                return {
+                    success: true,
+                    dataSource,
+                    skills: list,
+                    message: `${list.length} shared skill(s).`,
+                };
             }
-            const removed = await service.removeSkill(teamId, input.workspaceId, input.skillId);
-            if (!removed)
-                return { success: false, dataSource, error: 'Skill not found in workspace.' };
-            return {
-                success: true,
-                dataSource,
-                message: `Skill "${input.skillId}" removed from workspace.`,
-            };
-        }
-        case 'list': {
-            const list = await service.listSkills(teamId, input.workspaceId);
-            return { success: true, dataSource, skills: list, message: `${list.length} shared skill(s).` };
         }
     }
+    catch (err) {
+        return {
+            success: false,
+            dataSource,
+            error: err instanceof Error ? err.message : 'Share skill operation failed.',
+        };
+    }
 }
 //# sourceMappingURL=team-workspace.js.map

package/dist/src/tools/team-workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"team-workspace.js","sourceRoot":"","sources":["../../../src/tools/team-workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,0DAA0D;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,KAAK,CAAC,gBAAgB,EAAE,4BAA4B,CAAC;SACrD,QAAQ,EAAE;CACd,CAAC,CAAA;AAuDF,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,iFAAiF;IAC9F,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC;gBACzC,WAAW,EAAE,gCAAgC;aAC9C;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,sCAAsC;aACpD;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,6CAA6C;aAC3D;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,wCAAwC;aACtD;SACF;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;CACF,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,8EAA8E;IAC3F,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;gBAC/B,WAAW,EAAE,8BAA8B;aAC5C;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,kCAAkC;aAChD;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,0DAA0D;aACxE;SACF;QACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;KACpC;CACF,CAAA;AAkBD,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,OAAe;IAC7D,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACnD,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvD,IAAI,CAAC,aAAa,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IAChD,MAAM,WAAW,GAAG,aAAa,KAAK,GAAG,IAAI,aAAa,KAAK,WAAW,CAAA;IAC1E,MAAM,SAAS,GAAG,WAAW,KAAK,GAAG,IAAI,WAAW,KAAK,SAAS,CAAA;IAClE,OAAO,WAAW,IAAI,SAAS,CAAA;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,MAAiC;IAEjC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAExB,6BAA6B;IAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QAClF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,UAAU,OAAO,0CAA0C,CAAA;QACpE,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QACpF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,UAAU,OAAO,uCAAuC,CAAA;QACjE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,gEAAgE;AAChE,IAAI,OAAO,GAAyB,iBAAiB,EAAE,CAAA;AAEvD,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,GAAyB;IAC/D,OAAO,GAAG,GAAG,CAAA;AACf,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,uBAAuB;IACrC,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAyB,EACzB,QAAqB;IAErB,MAAM,UAAU,GAAoB,oBAAoB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IAC5E,8EAA8E;IAC9E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAA;IAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAEtD,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAA;YAC1F,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YAC/E,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,cAAc,EAAE,CAAC,IAAI,YAAY;aAC3C,CAAA;QACH,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;YACjD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,SAAS,IAAI,CAAC,MAAM,gBAAgB;aAC9C,CAAA;QACH,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAA;YAClF,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YAChE,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;YAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;QACrD,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAA;YACrF,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YACxE,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;YAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAA;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAsB,EACtB,QAAqB;IAErB,MAAM,UAAU,GAAoB,oBAAoB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAA;IAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAEtD,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAA;YAC9E,CAAC;YAED,+CAA+C;YAC/C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YAC9E,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;YACvE,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;YAC3D,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YAC9E,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,MAAM,EAAE,CAAC,KAAK,CAAC;gBACf,OAAO,EAAE,UAAU,KAAK,CAAC,OAAO,wBAAwB;aACzD,CAAA;QACH,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAA;YACjF,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YACnF,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAA;YAC3F,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,OAAO,EAAE,UAAU,KAAK,CAAC,OAAO,2BAA2B;aAC5D,CAAA;QACH,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,mBAAmB,EAAE,CAAA;QAChG,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"team-workspace.js","sourceRoot":"","sources":["../../../src/tools/team-workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAEnD,0DAA0D;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,KAAK,CAAC,gBAAgB,EAAE,4BAA4B,CAAC;SACrD,QAAQ,EAAE;CACd,CAAC,CAAA;AAuDF,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,iFAAiF;IAC9F,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC;gBACzC,WAAW,EAAE,gCAAgC;aAC9C;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,sCAAsC;aACpD;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,6CAA6C;aAC3D;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,wCAAwC;aACtD;SACF;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;CACF,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,8EAA8E;IAC3F,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;gBAC/B,WAAW,EAAE,8BAA8B;aAC5C;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,kCAAkC;aAChD;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,0DAA0D;aACxE;SACF;QACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;KACpC;CACF,CAAA;AAgCD,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,OAAe;IAC7D,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACnD,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvD,IAAI,CAAC,aAAa,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IAChD,MAAM,WAAW,GAAG,aAAa,KAAK,GAAG,IAAI,aAAa,KAAK,WAAW,CAAA;IAC1E,MAAM,SAAS,GAAG,WAAW,KAAK,GAAG,IAAI,WAAW,KAAK,SAAS,CAAA;IAClE,OAAO,WAAW,IAAI,SAAS,CAAA;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,MAAiC;IAEjC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAExB,6BAA6B;IAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QAClF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,UAAU,OAAO,0CAA0C,CAAA;QACpE,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QACpF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,UAAU,OAAO,uCAAuC,CAAA;QACjE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,IAAI,OAAO,GAAyB,oBAAoB,EAAE;IACxD,CAAC,CAAC,iBAAiB,EAAE;IACrB,CAAC,CAAC,iBAAiB,EAAE,CAAA;AAEvB,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,GAAyB;IAC/D,OAAO,GAAG,GAAG,CAAA;AACf,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,uBAAuB;IACrC,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAyB,EACzB,QAAqB;IAErB,MAAM,UAAU,GAAoB,oBAAoB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,UAAU,GAAG,cAAc,EAAE,CAAA;IACnC,IAAI,UAAU,KAAK,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU;YACV,KAAK,EACH,oEAAoE;gBACpE,iFAAiF;SACpF,CAAA;IACH,CAAC;IACD,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU;YACV,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0CAA0C;SACvF,CAAA;IACH,CAAC;IAED,uEAAuE;IACvE,6DAA6D;IAC7D,IAAI,CAAC;QACH,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;oBAChB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAA;gBAC1F,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;gBAC/E,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,UAAU;oBACV,SAAS,EAAE,EAAE;oBACb,OAAO,EAAE,cAAc,EAAE,CAAC,IAAI,YAAY;iBAC3C,CAAA;YACH,CAAC;YAED,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;gBACjD,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,UAAU;oBACV,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,SAAS,IAAI,CAAC,MAAM,gBAAgB;iBAC9C,CAAA;YACH,CAAC;YAED,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;oBACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAA;gBAClF,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;gBAChE,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;gBAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;YACrD,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;oBACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAA;gBACrF,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;gBACxE,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;gBAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAA;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU;YACV,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B;SAC1E,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAsB,EACtB,QAAqB;IAErB,MAAM,UAAU,GAAoB,oBAAoB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IAC5E,MAAM,UAAU,GAAG,cAAc,EAAE,CAAA;IACnC,IAAI,UAAU,KAAK,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU;YACV,KAAK,EACH,mEAAmE;gBACnE,iFAAiF;SACpF,CAAA;IACH,CAAC;IACD,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU;YACV,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0CAA0C;SACvF,CAAA;IACH,CAAC;IAED,wEAAwE;IACxE,8EAA8E;IAC9E,kDAAkD;IAClD,IAAI,CAAC;QACH,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAA;gBAC9E,CAAC;gBAED,+CAA+C;gBAC/C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;gBAC9E,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACvE,IAAI,WAAW,EAAE,CAAC;oBAChB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;gBAC3D,CAAC;gBAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;gBAC9E,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,UAAU;oBACV,MAAM,EAAE,CAAC,KAAK,CAAC;oBACf,OAAO,EAAE,UAAU,KAAK,CAAC,OAAO,wBAAwB;iBACzD,CAAA;YACH,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAA;gBACjF,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;gBACnF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAA;gBAC/E,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,UAAU;oBACV,OAAO,EAAE,UAAU,KAAK,CAAC,OAAO,2BAA2B;iBAC5D,CAAA;YACH,CAAC;YAED,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;gBAChE,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,UAAU;oBACV,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,mBAAmB;iBAC3C,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU;YACV,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B;SAC5E,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/src/tools/team-workspace.live.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @fileoverview Live Supabase-backed TeamWorkspaceService
+ * @module @skillsmith/mcp-server/tools/team-workspace.live
+ * @see SMI-4292: Wave 5A — drops stub fallback when Supabase is configured.
+ * @see SMI-4312: Use service-role client for CRUD post license-key resolution.
+ *
+ * Uses the Supabase service-role client for all CRUD against
+ * `team_workspaces` and `workspace_skills`. Rationale: migration 071 RLS
+ * gates tenant access on `authenticated` role + `auth.uid()`, which the
+ * MCP subprocess does not carry (no user JWT, no browser cookie). The
+ * anon client can't satisfy those policies; service-role bypasses them.
+ * Tenant isolation is enforced in-query via explicit `team_id` filters on
+ * every request, plus a team-scoped workspace-existence check before any
+ * `workspace_skills` operation. See ADR-116.
+ *
+ * License-key → team_id resolution still uses the anon client + RPC
+ * (`resolve_team_from_license` is SECURITY DEFINER — see team-resolver.ts).
+ *
+ * All rows are returned in camelCase (Workspace shape); Supabase snake_case
+ * columns are mapped at the boundary so handlers stay schema-agnostic.
+ */
+import type { TeamWorkspaceService } from './team-workspace.js';
+/**
+ * Create a live Supabase-backed TeamWorkspaceService.
+ * Call signals and teamId arguments from the handler are honoured; the
+ * service does NOT re-resolve team_id internally.
+ *
+ * Every DB call explicitly filters by `team_id = <resolved>` (for
+ * `team_workspaces`) or asserts workspace membership (for
+ * `workspace_skills`). Service-role bypasses RLS — tenant isolation
+ * lives here, not in the database.
+ */
+export declare function createLiveService(): TeamWorkspaceService;
+//# sourceMappingURL=team-workspace.live.d.ts.map

package/dist/src/tools/team-workspace.live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-workspace.live.d.ts","sourceRoot":"","sources":["../../../src/tools/team-workspace.live.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EACV,oBAAoB,EAIrB,MAAM,qBAAqB,CAAA;AA8G5B;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,oBAAoB,CAgGxD"}

package/dist/src/tools/team-workspace.live.js

@@ -0,0 +1,182 @@
+/**
+ * @fileoverview Live Supabase-backed TeamWorkspaceService
+ * @module @skillsmith/mcp-server/tools/team-workspace.live
+ * @see SMI-4292: Wave 5A — drops stub fallback when Supabase is configured.
+ * @see SMI-4312: Use service-role client for CRUD post license-key resolution.
+ *
+ * Uses the Supabase service-role client for all CRUD against
+ * `team_workspaces` and `workspace_skills`. Rationale: migration 071 RLS
+ * gates tenant access on `authenticated` role + `auth.uid()`, which the
+ * MCP subprocess does not carry (no user JWT, no browser cookie). The
+ * anon client can't satisfy those policies; service-role bypasses them.
+ * Tenant isolation is enforced in-query via explicit `team_id` filters on
+ * every request, plus a team-scoped workspace-existence check before any
+ * `workspace_skills` operation. See ADR-116.
+ *
+ * License-key → team_id resolution still uses the anon client + RPC
+ * (`resolve_team_from_license` is SECURITY DEFINER — see team-resolver.ts).
+ *
+ * All rows are returned in camelCase (Workspace shape); Supabase snake_case
+ * columns are mapped at the boundary so handlers stay schema-agnostic.
+ */
+import { getSupabaseAdminClient } from '../supabase-client.js';
+import { resolveLicenseTeamId } from './team-resolver.js';
+function mapWorkspace(row) {
+    return {
+        id: row.id,
+        name: row.name,
+        description: row.description,
+        teamId: row.team_id,
+        settings: row.settings ?? {},
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+function mapSharedSkill(row) {
+    return {
+        skillId: row.skill_id,
+        addedBy: row.added_by ?? 'unknown',
+        addedAt: row.added_at,
+    };
+}
+/**
+ * Get the Supabase service-role client. Throws a typed error if
+ * `SUPABASE_SERVICE_ROLE_KEY` is not configured on the MCP host —
+ * handlers surface this to the caller instead of leaking a 42501.
+ */
+async function getClient() {
+    try {
+        return (await getSupabaseAdminClient());
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : 'unknown error';
+        throw new Error(`Team workspace operations require SUPABASE_SERVICE_ROLE_KEY on the MCP host: ${message}`);
+    }
+}
+/**
+ * Fetch a workspace by (teamId, workspaceId) and verify tenant scope.
+ * Returns null on miss or if the workspace belongs to a different team.
+ * Shared helper so sibling methods don't depend on a correctly-bound `this`.
+ */
+async function fetchTeamScopedWorkspace(client, teamId, workspaceId) {
+    const resp = await client
+        .from('team_workspaces')
+        .select()
+        .eq('id', workspaceId)
+        .eq('team_id', teamId)
+        .single();
+    if (resp.error || !resp.data)
+        return null;
+    return mapWorkspace(resp.data);
+}
+/**
+ * Assert the workspace exists AND belongs to the resolved `teamId`.
+ * Required before every `workspace_skills` CRUD because service-role
+ * bypasses RLS — the DB no longer cross-checks membership for us.
+ */
+async function assertWorkspaceInTeam(client, teamId, workspaceId) {
+    const workspace = await fetchTeamScopedWorkspace(client, teamId, workspaceId);
+    if (!workspace) {
+        throw new Error(`Workspace ${workspaceId} not found in team ${teamId}.`);
+    }
+}
+/**
+ * Create a live Supabase-backed TeamWorkspaceService.
+ * Call signals and teamId arguments from the handler are honoured; the
+ * service does NOT re-resolve team_id internally.
+ *
+ * Every DB call explicitly filters by `team_id = <resolved>` (for
+ * `team_workspaces`) or asserts workspace membership (for
+ * `workspace_skills`). Service-role bypasses RLS — tenant isolation
+ * lives here, not in the database.
+ */
+export function createLiveService() {
+    return {
+        async resolveTeamId(licenseKey) {
+            const teamId = await resolveLicenseTeamId(licenseKey);
+            if (!teamId) {
+                throw new Error('Unable to resolve team from license key. Ensure SKILLSMITH_LICENSE_KEY is set and corresponds to an active Team-tier subscription.');
+            }
+            return teamId;
+        },
+        async createWorkspace(teamId, name, description) {
+            const client = await getClient();
+            const resp = await client
+                .from('team_workspaces')
+                .insert({ team_id: teamId, name, description: description ?? null })
+                .select()
+                .single();
+            if (resp.error || !resp.data) {
+                throw new Error(`Failed to create workspace: ${resp.error?.message ?? 'unknown error'}`);
+            }
+            return mapWorkspace(resp.data);
+        },
+        async listWorkspaces(teamId) {
+            const client = await getClient();
+            const resp = await client.from('team_workspaces').select().eq('team_id', teamId);
+            if (resp.error) {
+                throw new Error(`Failed to list workspaces: ${resp.error.message ?? 'unknown error'}`);
+            }
+            return (resp.data ?? []).map(mapWorkspace);
+        },
+        async getWorkspace(teamId, workspaceId) {
+            const client = await getClient();
+            return fetchTeamScopedWorkspace(client, teamId, workspaceId);
+        },
+        async deleteWorkspace(teamId, workspaceId) {
+            const client = await getClient();
+            const resp = await client
+                .from('team_workspaces')
+                .delete()
+                .eq('id', workspaceId)
+                .eq('team_id', teamId);
+            if (resp.error)
+                return false;
+            // PostgREST returns affected rows in `data` when `returning=representation` (default)
+            return Array.isArray(resp.data) ? resp.data.length > 0 : true;
+        },
+        async addSkill(teamId, workspaceId, skillId) {
+            const client = await getClient();
+            await assertWorkspaceInTeam(client, teamId, workspaceId);
+            const resp = await client
+                .from('workspace_skills')
+                .insert({ workspace_id: workspaceId, skill_id: skillId })
+                .select()
+                .single();
+            if (resp.error || !resp.data) {
+                throw new Error(`Failed to add skill: ${resp.error?.message ?? 'unknown error'}`);
+            }
+            return mapSharedSkill(resp.data);
+        },
+        async removeSkill(teamId, workspaceId, skillId) {
+            const client = await getClient();
+            await assertWorkspaceInTeam(client, teamId, workspaceId);
+            const resp = await client
+                .from('workspace_skills')
+                .delete()
+                .eq('workspace_id', workspaceId)
+                .eq('skill_id', skillId);
+            if (resp.error)
+                return false;
+            return Array.isArray(resp.data) ? resp.data.length > 0 : true;
+        },
+        async listSkills(teamId, workspaceId) {
+            const client = await getClient();
+            await assertWorkspaceInTeam(client, teamId, workspaceId);
+            const resp = await client
+                .from('workspace_skills')
+                .select()
+                .eq('workspace_id', workspaceId);
+            if (resp.error) {
+                throw new Error(`Failed to list skills: ${resp.error.message ?? 'unknown error'}`);
+            }
+            return (resp.data ?? []).map(mapSharedSkill);
+        },
+        async getWorkspaceSettings(teamId, workspaceId) {
+            const client = await getClient();
+            const ws = await fetchTeamScopedWorkspace(client, teamId, workspaceId);
+            return ws?.settings ?? {};
+        },
+    };
+}
+//# sourceMappingURL=team-workspace.live.js.map

package/dist/src/tools/team-workspace.live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-workspace.live.js","sourceRoot":"","sources":["../../../src/tools/team-workspace.live.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AA4CzD,SAAS,YAAY,CAAC,GAAiB;IACrC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;QAC5B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAsB;IAC5C,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;QAClC,OAAO,EAAE,GAAG,CAAC,QAAQ;KACtB,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,sBAAsB,EAAE,CAA0B,CAAA;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAA;QACpE,MAAM,IAAI,KAAK,CACb,gFAAgF,OAAO,EAAE,CAC1F,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,wBAAwB,CACrC,MAA6B,EAC7B,MAAc,EACd,WAAmB;IAEnB,MAAM,IAAI,GAAG,MAAM,MAAM;SACtB,IAAI,CAAe,iBAAiB,CAAC;SACrC,MAAM,EAAE;SACR,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;SACrB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;SACrB,MAAM,EAAE,CAAA;IACX,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACzC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAClC,MAA6B,EAC7B,MAAc,EACd,WAAmB;IAEnB,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;IAC7E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,aAAa,WAAW,sBAAsB,MAAM,GAAG,CAAC,CAAA;IAC1E,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,UAAkB;YACpC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAA;YACrD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,oIAAoI,CACrI,CAAA;YACH,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW;YAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;YAChC,MAAM,IAAI,GAAG,MAAM,MAAM;iBACtB,IAAI,CAAe,iBAAiB,CAAC;iBACrC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,IAAI,IAAI,EAAE,CAAC;iBACnE,MAAM,EAAE;iBACR,MAAM,EAAE,CAAA;YACX,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAA;YAC1F,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChC,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAM;YACzB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;YAChC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAe,iBAAiB,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YAC9F,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,CAAA;YACxF,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAC5C,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW;YACpC,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;YAChC,OAAO,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;QAC9D,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW;YACvC,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;YAChC,MAAM,IAAI,GAAG,MAAM,MAAM;iBACtB,IAAI,CAAe,iBAAiB,CAAC;iBACrC,MAAM,EAAE;iBACR,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;iBACrB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YACxB,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAA;YAC5B,sFAAsF;YACtF,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/D,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO;YACzC,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;YAChC,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;YACxD,MAAM,IAAI,GAAG,MAAM,MAAM;iBACtB,IAAI,CAAoB,kBAAkB,CAAC;iBAC3C,MAAM,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;iBACxD,MAAM,EAAE;iBACR,MAAM,EAAE,CAAA;YACX,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAA;YACnF,CAAC;YACD,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClC,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO;YAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;YAChC,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;YACxD,MAAM,IAAI,GAAG,MAAM,MAAM;iBACtB,IAAI,CAAoB,kBAAkB,CAAC;iBAC3C,MAAM,EAAE;iBACR,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;iBAC/B,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;YAC1B,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAA;YAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/D,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW;YAClC,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;YAChC,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;YACxD,MAAM,IAAI,GAAG,MAAM,MAAM;iBACtB,IAAI,CAAoB,kBAAkB,CAAC;iBAC3C,MAAM,EAAE;iBACR,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;YAClC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,CAAA;YACpF,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QAC9C,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,MAAM,EAAE,WAAW;YAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;YAChC,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;YACtE,OAAO,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAA;QAC3B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/tools/team-workspace.live.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @fileoverview Live-mode tests for team_workspace + share_skill MCP tools
+ * @see SMI-4312: service-role client post-resolution + cross-team hardening
+ *
+ * Kept in a sidecar so team-workspace.test.ts stays under the 500-line CI limit.
+ * Exercises the live Supabase-backed service by mocking `getSupabaseAdminClient`
+ * with a recording fake client.
+ */
+export {};
+//# sourceMappingURL=team-workspace.live.test.d.ts.map

package/dist/src/tools/team-workspace.live.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-workspace.live.test.d.ts","sourceRoot":"","sources":["../../../src/tools/team-workspace.live.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}