@soulbatical/tetra-core 0.10.4 → 0.11.0

package/dist/shared/mcp/mcp-routes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-routes.js","sourceRoot":"","sources":["../../../src/shared/mcp/mcp-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAG5E,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAS1C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;AAElD,uCAAuC;AACvC,WAAW,CAAC,GAAG,EAAE;IACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QACxC,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;AACH,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AAE1B,SAAS,cAAc,CACrB,OAAe,EACf,GAAW,EACX,QAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC;QAC/C,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAElD,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,GAAG;QAC5B,SAAS;QACT,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,MAAuB;IAClE,MAAM,EACJ,KAAK,EACL,QAAQ,EACR,WAAW,EACX,YAAY,GAAG,GAAG,EAClB,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAClC,cAAc,GAAG,IAAI,EACrB,cAAc,GACf,GAAG,MAAM,CAAC;IAEX,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzD,kCAAkC;IAClC,SAAS,WAAW,CAAC,OAAe,EAAE,cAAsB,EAAE,QAAgB;QAC5E,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;aACnF,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,2FAA2F;IAC3F,KAAK,UAAU,mBAAmB,CAChC,GAAY,EACZ,GAAa;QAEb,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,MAAM,mBAAmB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YACjF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,MAAW,CAAC;IAChB,IAAI,6BAAkC,CAAC;IACvC,IAAI,qBAA0B,CAAC;IAC/B,IAAI,sBAA2B,CAAC;IAEhC,KAAK,UAAU,YAAY;QACzB,IAAI,YAAY;YAAE,OAAO;QACzB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;QACpE,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAC1B,6BAA6B,GAAG,YAAY,CAAC,6BAA6B,CAAC;QAC3E,qBAAqB,GAAG,QAAQ,CAAC,qBAAqB,CAAC;QACvD,sBAAsB,GAAG,QAAQ,CAAC,sBAAsB,CAAC;QACzD,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,6BAA6B;IAC7B,SAAS,eAAe,CAAC,MAAqB;QAC5C,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,EACvC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;QAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5D,KAAK;SACN,CAAC,CAAC,CAAC;QAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAY,EAAE,EAAE;YACrE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACzD,OAAO,OAAO,CAAC,IAA+B,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gBAAgB;IAChB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,aAAa;QACb,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;QACnF,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;QACjD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7D,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;QAEzE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,qBAAqB;gBAC5B,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;aACjE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC;YACH,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,6DAA6D,CAAC,CAAC;YACrF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,SAAS;SAC9B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,gBAAgB,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;gBACxC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,oBAAoB;oBAC3B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAClE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/shared/mcp/mcp-tokens-routes.d.ts

@@ -1,35 +0,0 @@
-/**
- * MCP Token Management Routes — Factory
- *
- * CRUD for API tokens. All endpoints require authenticated user (Supabase JWT).
- * Tokens are scoped to the user's active organization.
- *
- * Usage:
- * ```typescript
- * import { addMcpTokenRoutes } from '@soulbatical/tetra-core';
- *
- * const mcpTokensRouter = Router();
- * addMcpTokenRoutes(mcpTokensRouter, { tokenPrefix: 'vincifox_' });
- * app.use('/api/mcp-tokens', mcpTokensRouter);
- * ```
- */
-import type { Router } from 'express';
-export interface McpToolDoc {
-    /** Tool name as used in MCP calls */
-    name: string;
-    /** Human-readable description */
-    description?: string;
-    /** Category for grouping (e.g. "read", "write", "admin") */
-    category?: string;
-}
-export interface McpTokenRoutesConfig {
-    tokenPrefix: string;
-    /**
-     * Available MCP tools for the documentation endpoint.
-     * If provided, GET /tools returns this list so the frontend can display it.
-     * Can be a static array or an async function that resolves tool definitions.
-     */
-    tools?: McpToolDoc[] | (() => Promise<McpToolDoc[]> | McpToolDoc[]);
-}
-export declare function addMcpTokenRoutes(router: Router, config: McpTokenRoutesConfig): void;
-//# sourceMappingURL=mcp-tokens-routes.d.ts.map

package/dist/shared/mcp/mcp-tokens-routes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-tokens-routes.d.ts","sourceRoot":"","sources":["../../../src/shared/mcp/mcp-tokens-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAKzD,MAAM,WAAW,UAAU;IACzB,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,CAAC;CACrE;AAOD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAkFpF"}

package/dist/shared/mcp/mcp-tokens-routes.js

@@ -1,94 +0,0 @@
-/**
- * MCP Token Management Routes — Factory
- *
- * CRUD for API tokens. All endpoints require authenticated user (Supabase JWT).
- * Tokens are scoped to the user's active organization.
- *
- * Usage:
- * ```typescript
- * import { addMcpTokenRoutes } from '@soulbatical/tetra-core';
- *
- * const mcpTokensRouter = Router();
- * addMcpTokenRoutes(mcpTokensRouter, { tokenPrefix: 'vincifox_' });
- * app.use('/api/mcp-tokens', mcpTokensRouter);
- * ```
- */
-import { authenticateToken } from '../../middleware/authMiddleware.js';
-import { systemDB } from '../../core/systemDb.js';
-import { generateMcpApiToken } from './tenant-context.js';
-function getOrgId(req) {
-    const user = req.user;
-    return user?.activeOrganizationId || user?.active_organization_id || user?.organizationId || null;
-}
-export function addMcpTokenRoutes(router, config) {
-    const { tokenPrefix, tools: toolsConfig } = config;
-    // GET /tools — List available MCP tools (public, no auth needed)
-    router.get('/tools', async (_req, res) => {
-        if (!toolsConfig) {
-            res.json({ tools: [] });
-            return;
-        }
-        const tools = typeof toolsConfig === 'function' ? await toolsConfig() : toolsConfig;
-        res.json({ tools });
-    });
-    // Lazy DB: only create client when first request arrives (not at import/mount time)
-    let _db = null;
-    const db = () => { if (!_db)
-        _db = systemDB('mcp-tokens'); return _db; };
-    // GET / — List all tokens for the active organization
-    router.get('/', authenticateToken, async (req, res) => {
-        const orgId = getOrgId(req);
-        if (!orgId) {
-            res.status(400).json({ error: 'No active organization' });
-            return;
-        }
-        const { data, error } = await db()
-            .from('mcp_api_tokens')
-            .select('id, name, is_active, last_used_at, created_at, revoked_at, created_by')
-            .eq('organization_id', orgId)
-            .order('created_at', { ascending: false });
-        if (error) {
-            res.status(500).json({ error: 'Failed to list tokens' });
-            return;
-        }
-        res.json({ tokens: data || [] });
-    });
-    // POST / — Generate a new API token
-    router.post('/', authenticateToken, async (req, res) => {
-        const orgId = getOrgId(req);
-        const user = req.user;
-        if (!orgId) {
-            res.status(400).json({ error: 'No active organization' });
-            return;
-        }
-        const { name } = req.body || {};
-        const tokenName = name || `API Token (${new Date().toISOString().slice(0, 10)})`;
-        try {
-            const token = await generateMcpApiToken(orgId, tokenName, tokenPrefix, user.id);
-            res.json({ token, name: tokenName });
-        }
-        catch (err) {
-            res.status(500).json({ error: 'Failed to generate token' });
-        }
-    });
-    // DELETE /:tokenId — Revoke a token
-    router.delete('/:tokenId', authenticateToken, async (req, res) => {
-        const orgId = getOrgId(req);
-        if (!orgId) {
-            res.status(400).json({ error: 'No active organization' });
-            return;
-        }
-        const tokenId = Array.isArray(req.params.tokenId) ? req.params.tokenId[0] : req.params.tokenId;
-        const { error } = await db()
-            .from('mcp_api_tokens')
-            .update({ is_active: false, revoked_at: new Date().toISOString() })
-            .eq('id', tokenId)
-            .eq('organization_id', orgId);
-        if (error) {
-            res.status(500).json({ error: 'Failed to revoke token' });
-            return;
-        }
-        res.json({ success: true });
-    });
-}
-//# sourceMappingURL=mcp-tokens-routes.js.map

package/dist/shared/mcp/mcp-tokens-routes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-tokens-routes.js","sourceRoot":"","sources":["../../../src/shared/mcp/mcp-tokens-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAqB1D,SAAS,QAAQ,CAAC,GAAY;IAC5B,MAAM,IAAI,GAAI,GAAW,CAAC,IAAI,CAAC;IAC/B,OAAO,IAAI,EAAE,oBAAoB,IAAI,IAAI,EAAE,sBAAsB,IAAI,IAAI,EAAE,cAAc,IAAI,IAAI,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,MAA4B;IAC5E,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAEnD,iEAAiE;IACjE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;QAC1D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;QACpF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,oFAAoF;IACpF,IAAI,GAAG,GAAuC,IAAI,CAAC;IACnD,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG;QAAE,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAEzE,sDAAsD;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,EAAE;aAC/B,IAAI,CAAC,gBAAgB,CAAC;aACtB,MAAM,CAAC,uEAAuE,CAAC;aAC/E,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC;aAC5B,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAE7C,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAI,GAAW,CAAC,IAAI,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;QAEjF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAChF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAE/F,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,EAAE;aACzB,IAAI,CAAC,gBAAgB,CAAC;aACtB,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aAClE,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;aACjB,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAEhC,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/shared/mcp/mcp-usage-routes.d.ts

@@ -1,17 +0,0 @@
-/**
- * MCP Usage Routes — Factory
- *
- * Returns audit log stats for the active organization.
- *
- * Usage:
- * ```typescript
- * import { addMcpUsageRoutes } from '@soulbatical/tetra-core';
- *
- * const mcpUsageRouter = Router();
- * addMcpUsageRoutes(mcpUsageRouter);
- * app.use('/api/mcp-usage', mcpUsageRouter);
- * ```
- */
-import type { Router } from 'express';
-export declare function addMcpUsageRoutes(router: Router): void;
-//# sourceMappingURL=mcp-usage-routes.d.ts.map

package/dist/shared/mcp/mcp-usage-routes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-usage-routes.d.ts","sourceRoot":"","sources":["../../../src/shared/mcp/mcp-usage-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AASzD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAgEtD"}

package/dist/shared/mcp/mcp-usage-routes.js

@@ -1,81 +0,0 @@
-/**
- * MCP Usage Routes — Factory
- *
- * Returns audit log stats for the active organization.
- *
- * Usage:
- * ```typescript
- * import { addMcpUsageRoutes } from '@soulbatical/tetra-core';
- *
- * const mcpUsageRouter = Router();
- * addMcpUsageRoutes(mcpUsageRouter);
- * app.use('/api/mcp-usage', mcpUsageRouter);
- * ```
- */
-import { authenticateToken } from '../../middleware/authMiddleware.js';
-import { systemDB } from '../../core/systemDb.js';
-function getOrgId(req) {
-    const user = req.user;
-    return user?.activeOrganizationId || user?.active_organization_id || user?.organizationId || null;
-}
-export function addMcpUsageRoutes(router) {
-    // Lazy DB: only create client when first request arrives (not at mount time)
-    let _db = null;
-    const db = () => { if (!_db)
-        _db = systemDB('mcp-usage'); return _db; };
-    // GET / — Usage stats (total calls, by tool, daily trend)
-    // Query: ?period=7d|30d|90d
-    router.get('/', authenticateToken, async (req, res) => {
-        const orgId = getOrgId(req);
-        if (!orgId) {
-            res.status(400).json({ error: 'No active organization' });
-            return;
-        }
-        const period = req.query.period || '30d';
-        const days = period === '7d' ? 7 : period === '90d' ? 90 : 30;
-        const since = new Date();
-        since.setDate(since.getDate() - days);
-        try {
-            const { count: totalCalls } = await db()
-                .from('mcp_audit_log')
-                .select('id', { count: 'exact', head: true })
-                .eq('organization_id', orgId)
-                .gte('created_at', since.toISOString());
-            const { data: logs } = await db()
-                .from('mcp_audit_log')
-                .select('tool_name, created_at')
-                .eq('organization_id', orgId)
-                .gte('created_at', since.toISOString())
-                .order('created_at', { ascending: true });
-            // Aggregate
-            const byTool = {};
-            const byDay = {};
-            for (const log of logs || []) {
-                byTool[log.tool_name] = (byTool[log.tool_name] || 0) + 1;
-                const day = log.created_at.slice(0, 10);
-                byDay[day] = (byDay[day] || 0) + 1;
-            }
-            // Fill day gaps
-            const trend = [];
-            const current = new Date(since);
-            const now = new Date();
-            while (current <= now) {
-                const day = current.toISOString().slice(0, 10);
-                trend.push({ date: day, count: byDay[day] || 0 });
-                current.setDate(current.getDate() + 1);
-            }
-            res.json({
-                period,
-                total_calls: totalCalls || 0,
-                by_tool: Object.entries(byTool)
-                    .map(([tool, count]) => ({ tool, count }))
-                    .sort((a, b) => b.count - a.count),
-                trend,
-            });
-        }
-        catch (err) {
-            res.status(500).json({ error: 'Failed to load usage stats' });
-        }
-    });
-}
-//# sourceMappingURL=mcp-usage-routes.js.map

package/dist/shared/mcp/mcp-usage-routes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-usage-routes.js","sourceRoot":"","sources":["../../../src/shared/mcp/mcp-usage-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,SAAS,QAAQ,CAAC,GAAY;IAC5B,MAAM,IAAI,GAAI,GAAW,CAAC,IAAI,CAAC;IAC/B,OAAO,IAAI,EAAE,oBAAoB,IAAI,IAAI,EAAE,sBAAsB,IAAI,IAAI,EAAE,cAAc,IAAI,IAAI,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,6EAA6E;IAC7E,IAAI,GAAG,GAAuC,IAAI,CAAC;IACnD,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG;QAAE,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAExE,0DAA0D;IAC1D,4BAA4B;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAI,GAAG,CAAC,KAAK,CAAC,MAAiB,IAAI,KAAK,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,EAAE;iBACrC,IAAI,CAAC,eAAe,CAAC;iBACrB,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;iBAC5C,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC;iBAC5B,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YAE1C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE;iBAC9B,IAAI,CAAC,eAAe,CAAC;iBACrB,MAAM,CAAC,uBAAuB,CAAC;iBAC/B,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC;iBAC5B,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;iBACtC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE5C,YAAY;YACZ,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACzD,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC;YAED,gBAAgB;YAChB,MAAM,KAAK,GAAsC,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,OAAO,OAAO,IAAI,GAAG,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACzC,CAAC;YAED,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM;gBACN,WAAW,EAAE,UAAU,IAAI,CAAC;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;qBAC5B,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;qBACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;gBACpC,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/shared/mcp/tenant-context.d.ts

@@ -1,59 +0,0 @@
-/**
- * MCP Tenant Context
- *
- * Provides:
- * - Token validation (Bearer token → organization_id)
- * - Request-scoped tenant context via AsyncLocalStorage
- * - Token generation for admin use
- *
- * Works with any project that has the mcp_api_tokens table.
- */
-import type { TenantContext } from './types.js';
-/**
- * Get the current tenant's organization_id.
- * Returns undefined when running in local stdio mode (no tenant context).
- */
-export declare function getMcpOrganizationId(): string | undefined;
-/**
- * Get the full tenant context (org + token).
- */
-export declare function getMcpTenantContext(): TenantContext | undefined;
-/**
- * Run a function within a tenant context.
- * The context is propagated through async calls via AsyncLocalStorage.
- */
-export declare function runWithMcpTenant<T>(ctx: TenantContext, fn: () => T): T;
-/**
- * Validate a Bearer token and return the tenant context.
- * Throws if token is invalid, revoked, or inactive.
- *
- * @param token - The raw API token (e.g. "vincifox_abc123...")
- * @param expectedPrefix - Expected token prefix (e.g. "vincifox_")
- */
-export declare function validateMcpApiToken(token: string, expectedPrefix: string): Promise<TenantContext>;
-/**
- * Options for generating an MCP API token.
- */
-export interface GenerateMcpApiTokenOptions {
-    organizationId: string;
-    name: string;
-    prefix: string;
-    createdBy?: string;
-    accessLevel?: string;
-    userId?: string;
-    permissions?: string[];
-    expiresAt?: string;
-    rateLimit?: number;
-    keyPrefix?: string;
-}
-/**
- * Generate a new API token for an organization.
- * Returns the plaintext token (only shown once — stored as SHA-256 hash).
- *
- * @param organizationIdOrOptions - The organization UUID (legacy) or full options object
- * @param name - Human-readable token name (legacy)
- * @param prefix - Token prefix (e.g. "vincifox_") (legacy)
- * @param createdBy - Optional user UUID who created the token (legacy)
- */
-export declare function generateMcpApiToken(organizationIdOrOptions: string | GenerateMcpApiTokenOptions, name?: string, prefix?: string, createdBy?: string): Promise<string>;
-//# sourceMappingURL=tenant-context.d.ts.map

package/dist/shared/mcp/tenant-context.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tenant-context.d.ts","sourceRoot":"","sources":["../../../src/shared/mcp/tenant-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAMhD;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAEzD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,GAAG,SAAS,CAE/D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAEtE;AA4BD;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,aAAa,CAAC,CA4CxB;AAID;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,uBAAuB,EAAE,MAAM,GAAG,0BAA0B,EAC5D,IAAI,CAAC,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CA8BjB"}

package/dist/shared/mcp/tenant-context.js

@@ -1,136 +0,0 @@
-/**
- * MCP Tenant Context
- *
- * Provides:
- * - Token validation (Bearer token → organization_id)
- * - Request-scoped tenant context via AsyncLocalStorage
- * - Token generation for admin use
- *
- * Works with any project that has the mcp_api_tokens table.
- */
-import { createHash, randomBytes } from 'node:crypto';
-import { AsyncLocalStorage } from 'node:async_hooks';
-import { createClient } from '@supabase/supabase-js';
-// ── AsyncLocalStorage for request-scoped context ──
-const tenantStorage = new AsyncLocalStorage();
-/**
- * Get the current tenant's organization_id.
- * Returns undefined when running in local stdio mode (no tenant context).
- */
-export function getMcpOrganizationId() {
-    return tenantStorage.getStore()?.organizationId;
-}
-/**
- * Get the full tenant context (org + token).
- */
-export function getMcpTenantContext() {
-    return tenantStorage.getStore();
-}
-/**
- * Run a function within a tenant context.
- * The context is propagated through async calls via AsyncLocalStorage.
- */
-export function runWithMcpTenant(ctx, fn) {
-    return tenantStorage.run(ctx, fn);
-}
-// ── DB client ──
-let db = null;
-function getDb() {
-    if (!db) {
-        const url = process.env.SUPABASE_URL;
-        const key = process.env.SUPABASE_SERVICE_ROLE_KEY;
-        if (!url || !key) {
-            throw new Error('SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY required for MCP tenant auth');
-        }
-        db = createClient(url, key, {
-            auth: { autoRefreshToken: false, persistSession: false },
-        });
-    }
-    return db;
-}
-// ── Token hashing ──
-function hashToken(token) {
-    return createHash('sha256').update(token).digest('hex');
-}
-// ── Token validation ──
-/**
- * Validate a Bearer token and return the tenant context.
- * Throws if token is invalid, revoked, or inactive.
- *
- * @param token - The raw API token (e.g. "vincifox_abc123...")
- * @param expectedPrefix - Expected token prefix (e.g. "vincifox_")
- */
-export async function validateMcpApiToken(token, expectedPrefix) {
-    if (!token.startsWith(expectedPrefix)) {
-        throw new Error('Invalid token format');
-    }
-    const hash = hashToken(token);
-    const supabase = getDb();
-    const { data, error } = await supabase
-        .from('mcp_api_tokens')
-        .select('id, organization_id, is_active, revoked_at, access_level, user_id, permissions, expires_at, rate_limit')
-        .eq('token_hash', hash)
-        .single();
-    if (error || !data) {
-        throw new Error('Invalid API token');
-    }
-    if (!data.is_active || data.revoked_at) {
-        throw new Error('Token has been revoked');
-    }
-    // Check expiration
-    if (data.expires_at && new Date(data.expires_at) < new Date()) {
-        throw new Error('Token has expired');
-    }
-    // Update last_used_at (fire and forget)
-    supabase
-        .from('mcp_api_tokens')
-        .update({ last_used_at: new Date().toISOString() })
-        .eq('id', data.id)
-        .then(() => { });
-    const accessLevel = data.access_level || 'admin';
-    return {
-        organizationId: data.organization_id,
-        tokenId: data.id,
-        accessLevel,
-        isSuperAdmin: accessLevel === 'superadmin',
-        userId: data.user_id || null,
-        permissions: Array.isArray(data.permissions) ? data.permissions : [],
-    };
-}
-/**
- * Generate a new API token for an organization.
- * Returns the plaintext token (only shown once — stored as SHA-256 hash).
- *
- * @param organizationIdOrOptions - The organization UUID (legacy) or full options object
- * @param name - Human-readable token name (legacy)
- * @param prefix - Token prefix (e.g. "vincifox_") (legacy)
- * @param createdBy - Optional user UUID who created the token (legacy)
- */
-export async function generateMcpApiToken(organizationIdOrOptions, name, prefix, createdBy) {
-    // Support both legacy positional args and new options object
-    const opts = typeof organizationIdOrOptions === 'string'
-        ? { organizationId: organizationIdOrOptions, name: name, prefix: prefix, createdBy }
-        : organizationIdOrOptions;
-    const hex = randomBytes(32).toString('hex');
-    const token = `${opts.prefix}${hex}`;
-    const hash = hashToken(token);
-    const tokenKeyPrefix = opts.keyPrefix || token.substring(0, 12);
-    const supabase = getDb();
-    const { error } = await supabase.from('mcp_api_tokens').insert({
-        organization_id: opts.organizationId,
-        token_hash: hash,
-        name: opts.name,
-        created_by: opts.createdBy || null,
-        access_level: opts.accessLevel || 'admin',
-        user_id: opts.userId || null,
-        permissions: opts.permissions || [],
-        expires_at: opts.expiresAt || null,
-        rate_limit: opts.rateLimit || 60,
-        key_prefix: tokenKeyPrefix,
-    });
-    if (error) {
-        throw new Error(`Failed to create token: ${error.message}`);
-    }
-    return token;
-}
-//# sourceMappingURL=tenant-context.js.map

package/dist/shared/mcp/tenant-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tenant-context.js","sourceRoot":"","sources":["../../../src/shared/mcp/tenant-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAuB,MAAM,uBAAuB,CAAC;AAG1E,qDAAqD;AAErD,MAAM,aAAa,GAAG,IAAI,iBAAiB,EAAiB,CAAC;AAE7D;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,aAAa,CAAC,QAAQ,EAAE,EAAE,cAAc,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,aAAa,CAAC,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAI,GAAkB,EAAE,EAAW;IACjE,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,kBAAkB;AAElB,IAAI,EAAE,GAA0B,IAAI,CAAC;AAErC,SAAS,KAAK;IACZ,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAClD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;YAC1B,IAAI,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,sBAAsB;AAEtB,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,yBAAyB;AAEzB;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,cAAsB;IAEtB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC;IAEzB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;SACnC,IAAI,CAAC,gBAAgB,CAAC;SACtB,MAAM,CAAC,wGAAwG,CAAC;SAChH,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC;SACtB,MAAM,EAAE,CAAC;IAEZ,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,mBAAmB;IACnB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,wCAAwC;IACxC,QAAQ;SACL,IAAI,CAAC,gBAAgB,CAAC;SACtB,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;SAClD,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;SACjB,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAElB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC;IAEjD,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,eAAe;QACpC,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,WAAW;QACX,YAAY,EAAE,WAAW,KAAK,YAAY;QAC1C,MAAM,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;QAC5B,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;KACrE,CAAC;AACJ,CAAC;AAoBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,uBAA4D,EAC5D,IAAa,EACb,MAAe,EACf,SAAkB;IAElB,6DAA6D;IAC7D,MAAM,IAAI,GAA+B,OAAO,uBAAuB,KAAK,QAAQ;QAClF,CAAC,CAAC,EAAE,cAAc,EAAE,uBAAuB,EAAE,IAAI,EAAE,IAAK,EAAE,MAAM,EAAE,MAAO,EAAE,SAAS,EAAE;QACtF,CAAC,CAAC,uBAAuB,CAAC;IAE5B,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhE,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC;IACzB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC;QAC7D,eAAe,EAAE,IAAI,CAAC,cAAc;QACpC,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QAClC,YAAY,EAAE,IAAI,CAAC,WAAW,IAAI,OAAO;QACzC,OAAO,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;QAC5B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;QACnC,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QAClC,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;QAChC,UAAU,EAAE,cAAc;KAC3B,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/shared/mcp/types.d.ts

@@ -1,74 +0,0 @@
-/**
- * MCP Online Module — Types
- *
- * Shared types for MCP StreamableHTTP endpoints.
- */
-export interface McpToolDefinition {
-    name: string;
-    description?: string;
-    inputSchema: {
-        type: 'object';
-        properties?: Record<string, unknown>;
-        required?: string[];
-        [key: string]: unknown;
-    };
-    [key: string]: unknown;
-}
-export interface McpToolResult {
-    content: Array<{
-        type: 'text';
-        text: string;
-    }>;
-    isError?: boolean;
-    [key: string]: unknown;
-}
-export type McpToolHandler = (args: Record<string, unknown>) => Promise<McpToolResult>;
-export interface TenantContext {
-    organizationId: string;
-    tokenId: string;
-    accessLevel?: string;
-    isSuperAdmin?: boolean;
-    userId?: string | null;
-    permissions?: string[];
-}
-export interface McpRoutesConfig {
-    /** Tool definitions to expose via the MCP endpoint */
-    tools: McpToolDefinition[];
-    /** Map of tool name → handler function */
-    handlers: Record<string, McpToolHandler>;
-    /** Token prefix for validation, e.g. "vincifox_" or "snelstart_" */
-    tokenPrefix: string;
-    /** Rate limit: max requests per window (default: 100) */
-    rateLimitMax?: number;
-    /** Rate limit: window in ms (default: 15 minutes) */
-    rateLimitWindowMs?: number;
-    /** Enable audit logging to mcp_audit_log table (default: true) */
-    enableAuditLog?: boolean;
-    /**
-     * Custom authentication handler. If provided, replaces the default
-     * mcp_api_tokens table lookup. Must return a TenantContext or throw.
-     *
-     * Use this when your project has its own API key system (e.g. AgentRook's
-     * access-level-based keys, or SnelStart's credential-loading tokens).
-     *
-     * The raw Bearer token string is passed in (without "Bearer " prefix).
-     */
-    onAuthenticate?: (token: string) => Promise<TenantContext>;
-}
-export interface McpAuthRoutesConfig {
-    /** Token prefix for generated tokens, e.g. "vincifox_" */
-    tokenPrefix: string;
-    /** Frontend URL for login redirect (falls back to FRONTEND_URL env or localhost:3000) */
-    frontendUrl?: string;
-    /** Path on the frontend where the approval page lives (default: "/app/settings/api-tokens") */
-    frontendApprovalPath?: string;
-    /** Default device name when not provided (default: "Claude Code") */
-    defaultDeviceName?: string;
-    /** Request expiry in seconds (default: 300 = 5 minutes) */
-    expirySeconds?: number;
-}
-export interface McpTokenRoutesConfig {
-}
-export interface McpUsageRoutesConfig {
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/shared/mcp/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/shared/mcp/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAIvF,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAID,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+FAA+F;IAC/F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;CAEpC;AAED,MAAM,WAAW,oBAAoB;CAEpC"}

package/dist/shared/mcp/types.js

@@ -1,7 +0,0 @@
-/**
- * MCP Online Module — Types
- *
- * Shared types for MCP StreamableHTTP endpoints.
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/shared/mcp/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/shared/mcp/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}