@skillsmith/mcp-server 0.4.7 → 0.4.9

package/dist/src/tools/integration-tools.service.js

@@ -0,0 +1,299 @@
+/**
+ * @fileoverview Real IntegrationService backed by Supabase
+ * @module @skillsmith/mcp-server/tools/integration-tools.service
+ * @see SMI-3915: Wave 1 — Webhooks + API Keys (Real Implementation)
+ *
+ * Uses HMAC-SHA256 for webhook signing. API keys are hashed with SHA-256
+ * before storage — raw key is returned once on creation and never persisted.
+ *
+ * SSRF protection via validateExternalUrl() on all outbound URLs.
+ */
+import { createHmac, randomBytes } from 'node:crypto';
+import { validateExternalUrl } from '../utils/url-validator.js';
+// ============================================================================
+// Constants
+// ============================================================================
+const KEY_HMAC_SECRET = 'skillsmith-api-key';
+const TEST_RATE_LIMIT_MS = 60_000;
+const TEST_DELIVERY_TIMEOUT_MS = 10_000;
+const API_KEY_PREFIX_LENGTH = 15; // "sk_int_" (7) + 8 chars
+// ============================================================================
+// Crypto helpers
+// ============================================================================
+function generateSigningSecret() {
+    return 'whsec_' + randomBytes(32).toString('hex');
+}
+function generateApiKey() {
+    return 'sk_int_' + randomBytes(32).toString('base64url');
+}
+/** Hash an API key for storage (one-way) */
+export function hashApiKey(key) {
+    return createHmac('sha256', KEY_HMAC_SECRET).update(key).digest('hex');
+}
+/** Compute HMAC-SHA256 signature for webhook delivery */
+export function computeHmacSignature(secret, payload) {
+    return createHmac('sha256', secret).update(payload).digest('hex');
+}
+// ============================================================================
+// Expiration helper
+// ============================================================================
+function computeExpiresAt(expiresIn) {
+    if (!expiresIn || expiresIn === 'never')
+        return null;
+    const days = parseInt(expiresIn, 10);
+    if (isNaN(days))
+        return null;
+    return new Date(Date.now() + days * 24 * 60 * 60 * 1000).toISOString();
+}
+// ============================================================================
+// Row mappers
+// ============================================================================
+function rowToWebhookMasked(row) {
+    const secret = String(row.signing_secret ?? '');
+    return {
+        id: String(row.id),
+        url: String(row.url),
+        events: row.events,
+        description: row.description ? String(row.description) : null,
+        signingSecretLast4: secret.slice(-4),
+        status: row.status,
+        createdAt: String(row.created_at),
+        lastDeliveryAt: row.last_delivery_at ? String(row.last_delivery_at) : null,
+    };
+}
+function rowToApiKeyMasked(row) {
+    const prefix = String(row.key_prefix ?? '');
+    return {
+        id: String(row.id),
+        name: String(row.name),
+        keyLast4: prefix.slice(-4),
+        keyPrefix: prefix,
+        permissions: row.permissions,
+        expiresAt: row.expires_at ? String(row.expires_at) : null,
+        createdAt: String(row.created_at),
+        status: row.revoked_at ? 'revoked' : 'active',
+    };
+}
+// ============================================================================
+// Factory
+// ============================================================================
+/**
+ * Create a real IntegrationService backed by Supabase.
+ *
+ * @param supabase - Supabase client (anon or service-role)
+ * @param teamId - Team ID for row-level scoping
+ */
+export function createRealIntegrationService(supabase, teamId) {
+    // Rate limiting for test delivery (per webhook, in-memory)
+    const testDeliveryTimestamps = new Map();
+    return {
+        // ========================================================================
+        // Webhooks
+        // ========================================================================
+        async createWebhook(url, events, description) {
+            const urlCheck = validateExternalUrl(url);
+            if (!urlCheck.valid) {
+                throw new Error(`Invalid webhook URL: ${urlCheck.error}`);
+            }
+            const signingSecret = generateSigningSecret();
+            const { data, error } = await supabase
+                .from('webhook_endpoints')
+                .insert({
+                team_id: teamId,
+                url,
+                events,
+                description: description ?? null,
+                signing_secret: signingSecret,
+                status: 'active',
+            })
+                .select()
+                .single();
+            if (error || !data) {
+                throw new Error(`Failed to create webhook: ${error?.message ?? 'no data returned'}`);
+            }
+            return {
+                id: String(data.id),
+                url: String(data.url),
+                events: data.events,
+                description: data.description ? String(data.description) : null,
+                signingSecret,
+                status: data.status,
+                createdAt: String(data.created_at),
+                lastDeliveryAt: data.last_delivery_at ? String(data.last_delivery_at) : null,
+            };
+        },
+        async listWebhooks() {
+            const result = (await supabase
+                .from('webhook_endpoints')
+                .select('*')
+                .eq('team_id', teamId)
+                .order('created_at', { ascending: false }));
+            if (result.error) {
+                throw new Error(`Failed to list webhooks: ${result.error.message}`);
+            }
+            const rows = result.data ?? [];
+            return rows.map(rowToWebhookMasked);
+        },
+        async getWebhook(webhookId) {
+            const { data, error } = await supabase
+                .from('webhook_endpoints')
+                .select('*')
+                .eq('id', webhookId)
+                .eq('team_id', teamId)
+                .single();
+            if (error || !data)
+                return null;
+            return rowToWebhookMasked(data);
+        },
+        async deleteWebhook(webhookId) {
+            const result = (await supabase
+                .from('webhook_endpoints')
+                .delete()
+                .eq('id', webhookId)
+                .eq('team_id', teamId));
+            return !result.error;
+        },
+        async testWebhook(webhookId) {
+            // Rate limit: max 1 test delivery per webhook per minute
+            const lastTest = testDeliveryTimestamps.get(webhookId);
+            if (lastTest && Date.now() - lastTest < TEST_RATE_LIMIT_MS) {
+                return {
+                    success: false,
+                    statusCode: 0,
+                    message: 'Rate limited: max 1 test delivery per webhook per minute.',
+                };
+            }
+            const { data: wh, error } = await supabase
+                .from('webhook_endpoints')
+                .select('*')
+                .eq('id', webhookId)
+                .eq('team_id', teamId)
+                .single();
+            if (error || !wh) {
+                return { success: false, statusCode: 0, message: 'Webhook not found.' };
+            }
+            const whData = wh;
+            // SSRF validation on stored URL (may have been updated externally)
+            const urlCheck = validateExternalUrl(String(whData.url));
+            if (!urlCheck.valid) {
+                return {
+                    success: false,
+                    statusCode: 0,
+                    message: `Webhook URL blocked: ${urlCheck.error}`,
+                };
+            }
+            const timestamp = new Date().toISOString();
+            const payload = JSON.stringify({ event: 'test', timestamp, webhookId });
+            const signature = computeHmacSignature(String(whData.signing_secret), payload);
+            try {
+                const response = await fetch(String(whData.url), {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        'X-Skillsmith-Signature': `sha256=${signature}`,
+                        'X-Skillsmith-Timestamp': timestamp,
+                    },
+                    body: payload,
+                    signal: AbortSignal.timeout(TEST_DELIVERY_TIMEOUT_MS),
+                });
+                testDeliveryTimestamps.set(webhookId, Date.now());
+                // Update last_delivery_at (fire-and-forget)
+                void supabase
+                    .from('webhook_endpoints')
+                    .update({ last_delivery_at: new Date().toISOString() })
+                    .eq('id', webhookId);
+                return {
+                    success: response.ok,
+                    statusCode: response.status,
+                    message: `Test delivery to ${whData.url}: HTTP ${response.status}`,
+                };
+            }
+            catch (err) {
+                return {
+                    success: false,
+                    statusCode: 0,
+                    message: `Test delivery failed: ${err instanceof Error ? err.message : 'unknown error'}`,
+                };
+            }
+        },
+        async rotateSecret(webhookId) {
+            const newSecret = generateSigningSecret();
+            const result = (await supabase
+                .from('webhook_endpoints')
+                .update({ signing_secret: newSecret })
+                .eq('id', webhookId)
+                .eq('team_id', teamId));
+            if (result.error) {
+                throw new Error(`Webhook "${webhookId}" not found.`);
+            }
+            return { webhookId, newSigningSecret: newSecret };
+        },
+        // ========================================================================
+        // API Keys
+        // ========================================================================
+        async createApiKey(name, permissions, expiresIn) {
+            const keyValue = generateApiKey();
+            const keyPrefix = keyValue.slice(0, API_KEY_PREFIX_LENGTH);
+            const keyHash = hashApiKey(keyValue);
+            const expiresAt = computeExpiresAt(expiresIn);
+            const { data, error } = await supabase
+                .from('api_keys')
+                .insert({
+                team_id: teamId,
+                name,
+                key_hash: keyHash,
+                key_prefix: keyPrefix,
+                permissions: permissions ?? ['read'],
+                expires_at: expiresAt,
+            })
+                .select()
+                .single();
+            if (error || !data) {
+                throw new Error(`Failed to create API key: ${error?.message ?? 'no data returned'}`);
+            }
+            return {
+                id: String(data.id),
+                name: String(data.name),
+                keyValue,
+                keyPrefix,
+                permissions: data.permissions,
+                expiresAt: data.expires_at ? String(data.expires_at) : null,
+                createdAt: String(data.created_at),
+            };
+        },
+        async listApiKeys() {
+            const result = (await supabase
+                .from('api_keys')
+                .select('*')
+                .eq('team_id', teamId)
+                .is('revoked_at', null)
+                .order('created_at', { ascending: false }));
+            if (result.error) {
+                throw new Error(`Failed to list API keys: ${result.error.message}`);
+            }
+            const rows = result.data ?? [];
+            return rows.map(rowToApiKeyMasked);
+        },
+        async getApiKey(keyId) {
+            const { data, error } = await supabase
+                .from('api_keys')
+                .select('*')
+                .eq('id', keyId)
+                .eq('team_id', teamId)
+                .single();
+            if (error || !data)
+                return null;
+            return rowToApiKeyMasked(data);
+        },
+        async revokeApiKey(keyId) {
+            const result = (await supabase
+                .from('api_keys')
+                .update({ revoked_at: new Date().toISOString() })
+                .eq('id', keyId)
+                .eq('team_id', teamId)
+                .is('revoked_at', null));
+            return !result.error;
+        },
+    };
+}
+//# sourceMappingURL=integration-tools.service.js.map

package/dist/src/tools/integration-tools.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-tools.service.js","sourceRoot":"","sources":["../../../src/tools/integration-tools.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAmC/D,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,eAAe,GAAG,oBAAoB,CAAA;AAC5C,MAAM,kBAAkB,GAAG,MAAM,CAAA;AACjC,MAAM,wBAAwB,GAAG,MAAM,CAAA;AACvC,MAAM,qBAAqB,GAAG,EAAE,CAAA,CAAC,0BAA0B;AAE3D,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,SAAS,qBAAqB;IAC5B,OAAO,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACnD,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC1D,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,UAAU,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxE,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,OAAe;IAClE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,SAAS,gBAAgB,CAAC,SAAkB;IAC1C,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACpC,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5B,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;AACxE,CAAC;AAED,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,SAAS,kBAAkB,CAAC,GAA4B;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAA;IAC/C,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QACpB,MAAM,EAAE,GAAG,CAAC,MAAkB;QAC9B,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QAC7D,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,CAAC,MAA+B;QAC3C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,cAAc,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;KAC3E,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAA4B;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;IAC3C,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,GAAG,CAAC,WAAuB;QACxC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;QACzD,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;KAC9C,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAwB,EACxB,MAAc;IAEd,2DAA2D;IAC3D,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAkB,CAAA;IAExD,OAAO;QACL,2EAA2E;QAC3E,WAAW;QACX,2EAA2E;QAE3E,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW;YAC1C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;YACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;YAC3D,CAAC;YAED,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAA;YAE7C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;iBACnC,IAAI,CAAC,mBAAmB,CAAC;iBACzB,MAAM,CAAC;gBACN,OAAO,EAAE,MAAM;gBACf,GAAG;gBACH,MAAM;gBACN,WAAW,EAAE,WAAW,IAAI,IAAI;gBAChC,cAAc,EAAE,aAAa;gBAC7B,MAAM,EAAE,QAAQ;aACjB,CAAC;iBACD,MAAM,EAAE;iBACR,MAAM,EAAE,CAAA;YAEX,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,EAAE,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAA;YACtF,CAAC;YAED,OAAO;gBACL,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAkB;gBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC/D,aAAa;gBACb,MAAM,EAAE,IAAI,CAAC,MAA+B;gBAC5C,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBAClC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;aAC7E,CAAA;QACH,CAAC;QAED,KAAK,CAAC,YAAY;YAChB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ;iBAC3B,IAAI,CAAC,mBAAmB,CAAC;iBACzB,MAAM,CAAC,GAAG,CAAC;iBACX,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;iBACrB,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAkC,CAAA;YAE9E,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YACrE,CAAC;YAED,MAAM,IAAI,GAAI,MAAM,CAAC,IAAkC,IAAI,EAAE,CAAA;YAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,SAAS;YACxB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;iBACnC,IAAI,CAAC,mBAAmB,CAAC;iBACzB,MAAM,CAAC,GAAG,CAAC;iBACX,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;iBACnB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;iBACrB,MAAM,EAAE,CAAA;YAEX,IAAI,KAAK,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAA;YAC/B,OAAO,kBAAkB,CAAC,IAA+B,CAAC,CAAA;QAC5D,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,SAAS;YAC3B,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ;iBAC3B,IAAI,CAAC,mBAAmB,CAAC;iBACzB,MAAM,EAAE;iBACR,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;iBACnB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAkC,CAAA;YAE1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAA;QACtB,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,SAAS;YACzB,yDAAyD;YACzD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACtD,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,kBAAkB,EAAE,CAAC;gBAC3D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE,2DAA2D;iBACrE,CAAA;YACH,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;iBACvC,IAAI,CAAC,mBAAmB,CAAC;iBACzB,MAAM,CAAC,GAAG,CAAC;iBACX,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;iBACnB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;iBACrB,MAAM,EAAE,CAAA;YAEX,IAAI,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAA;YACzE,CAAC;YAED,MAAM,MAAM,GAAG,EAA6B,CAAA;YAE5C,mEAAmE;YACnE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;YACxD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE,wBAAwB,QAAQ,CAAC,KAAK,EAAE;iBAClD,CAAA;YACH,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;YACvE,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAA;YAE9E,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;oBAC/C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,wBAAwB,EAAE,UAAU,SAAS,EAAE;wBAC/C,wBAAwB,EAAE,SAAS;qBACpC;oBACD,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC;iBACtD,CAAC,CAAA;gBAEF,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;gBAEjD,4CAA4C;gBAC5C,KAAM,QAAQ;qBACX,IAAI,CAAC,mBAAmB,CAAC;qBACzB,MAAM,CAAC,EAAE,gBAAgB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;qBACtD,EAAE,CAAC,IAAI,EAAE,SAAS,CAA4C,CAAA;gBAEjE,OAAO;oBACL,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,UAAU,EAAE,QAAQ,CAAC,MAAM;oBAC3B,OAAO,EAAE,oBAAoB,MAAM,CAAC,GAAG,UAAU,QAAQ,CAAC,MAAM,EAAE;iBACnE,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;iBACzF,CAAA;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,SAAS;YAC1B,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAA;YAEzC,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ;iBAC3B,IAAI,CAAC,mBAAmB,CAAC;iBACzB,MAAM,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;iBACrC,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;iBACnB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAkC,CAAA;YAE1D,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,YAAY,SAAS,cAAc,CAAC,CAAA;YACtD,CAAC;YAED,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAA;QACnD,CAAC;QAED,2EAA2E;QAC3E,WAAW;QACX,2EAA2E;QAE3E,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS;YAC7C,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAA;YACjC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAA;YAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;YACpC,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;YAE7C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;iBACnC,IAAI,CAAC,UAAU,CAAC;iBAChB,MAAM,CAAC;gBACN,OAAO,EAAE,MAAM;gBACf,IAAI;gBACJ,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,WAAW,IAAI,CAAC,MAAM,CAAC;gBACpC,UAAU,EAAE,SAAS;aACtB,CAAC;iBACD,MAAM,EAAE;iBACR,MAAM,EAAE,CAAA;YAEX,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,EAAE,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAA;YACtF,CAAC;YAED,OAAO;gBACL,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,QAAQ;gBACR,SAAS;gBACT,WAAW,EAAE,IAAI,CAAC,WAAuB;gBACzC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC3D,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;aACnC,CAAA;QACH,CAAC;QAED,KAAK,CAAC,WAAW;YACf,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ;iBAC3B,IAAI,CAAC,UAAU,CAAC;iBAChB,MAAM,CAAC,GAAG,CAAC;iBACX,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;iBACrB,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC;iBACtB,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAkC,CAAA;YAE9E,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YACrE,CAAC;YAED,MAAM,IAAI,GAAI,MAAM,CAAC,IAAkC,IAAI,EAAE,CAAA;YAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAK;YACnB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;iBACnC,IAAI,CAAC,UAAU,CAAC;iBAChB,MAAM,CAAC,GAAG,CAAC;iBACX,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;iBACf,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;iBACrB,MAAM,EAAE,CAAA;YAEX,IAAI,KAAK,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAA;YAC/B,OAAO,iBAAiB,CAAC,IAA+B,CAAC,CAAA;QAC3D,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,KAAK;YACtB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ;iBAC3B,IAAI,CAAC,UAAU,CAAC;iBAChB,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;iBAChD,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;iBACf,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;iBACrB,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,CAAkC,CAAA;YAE3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAA;QACtB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/tools/integration-tools.service.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @fileoverview Tests for real IntegrationService (Supabase-backed)
+ * @see SMI-3915: Wave 1 — Webhooks + API Keys (Real Implementation)
+ *
+ * All tests mock the Supabase client — no real database needed.
+ */
+export {};
+//# sourceMappingURL=integration-tools.service.test.d.ts.map

package/dist/src/tools/integration-tools.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-tools.service.test.d.ts","sourceRoot":"","sources":["../../../src/tools/integration-tools.service.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}