@superblocksteam/mcp-server 2.0.0-SNAPSHOT.06fa243c132fe1fb

package/dist/tools/list-knowledge.js

@@ -0,0 +1,56 @@
+import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
+import { createSdk } from "../sdk/create-sdk.js";
+import { listKnowledgeInputSchema, resolveBaseUrlTarget, } from "../target/resolve-base-url-target.js";
+import * as schemas from "./schemas.js";
+import { parseToolInput } from "./validation.js";
+export const listKnowledge = {
+    name: "list_knowledge",
+    title: "List Knowledge",
+    description: "List knowledge entries (facts) for the current organization. Knowledge entries are persistent notes and instructions that Clark uses when building apps. Supports filtering by scope, access type, enabled status, and text search.",
+    inputSchema: schemas.listKnowledgeToolInputSchema,
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+    audience: "customer",
+    async handler(args) {
+        const input = parseToolInput(listKnowledgeInputSchema, args);
+        const target = resolveBaseUrlTarget(input);
+        const auth = await resolveAuthForOrigin(target.baseUrl);
+        const sdk = createSdk(auth.token, target.baseUrl);
+        const factsQuery = {
+            entityScope: input.entity_scope,
+            entityId: input.entity_id,
+            accessType: input.access_type,
+            isEnabled: input.is_enabled,
+            search: input.search,
+            limit: input.limit,
+            offset: input.offset,
+            sortBy: input.sort_by,
+            sortOrder: input.sort_order,
+        };
+        const facts = (await sdk.fetchFacts(factsQuery));
+        return {
+            auth_source: auth.source,
+            base_url: target.baseUrl,
+            environment: target.environment,
+            knowledge: facts.map((f) => ({
+                id: f.id,
+                name: f.name,
+                description: f.description,
+                entity_scope: f.entityScope,
+                entity_id: f.entityId,
+                access_type: f.accessType,
+                is_enabled: f.isEnabled,
+                is_approved: f.isApproved,
+                created_by: f.createdBy ?? null,
+                created_at: f.createdAt,
+                updated_at: f.updatedAt,
+            })),
+            total_count: facts.length,
+        };
+    },
+};
+//# sourceMappingURL=list-knowledge.js.map

package/dist/tools/list-knowledge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-knowledge.js","sourceRoot":"","sources":["../../src/tools/list-knowledge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAgBjD,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,IAAI,EAAE,gBAAgB;IACtB,KAAK,EAAE,gBAAgB;IACvB,WAAW,EACT,qOAAqO;IACvO,WAAW,EAAE,OAAO,CAAC,4BAA4B;IACjD,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAGlD,MAAM,UAAU,GAAoB;YAClC,WAAW,EAAE,KAAK,CAAC,YAA8C;YACjE,QAAQ,EAAE,KAAK,CAAC,SAAS;YACzB,UAAU,EAAE,KAAK,CAAC,WAA4C;YAC9D,SAAS,EAAE,KAAK,CAAC,UAAU;YAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,OAAoC;YAClD,SAAS,EAAE,KAAK,CAAC,UAA0C;SAC5D,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAiB,CAAC;QAEjE,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,YAAY,EAAE,CAAC,CAAC,WAAW;gBAC3B,SAAS,EAAE,CAAC,CAAC,QAAQ;gBACrB,WAAW,EAAE,CAAC,CAAC,UAAU;gBACzB,UAAU,EAAE,CAAC,CAAC,SAAS;gBACvB,WAAW,EAAE,CAAC,CAAC,UAAU;gBACzB,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;gBAC/B,UAAU,EAAE,CAAC,CAAC,SAAS;gBACvB,UAAU,EAAE,CAAC,CAAC,SAAS;aACxB,CAAC,CAAC;YACH,WAAW,EAAE,KAAK,CAAC,MAAM;SAC1B,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/list-organization-agents.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./registry.js";
+export declare const listOrganizationAgents: ToolDefinition;
+//# sourceMappingURL=list-organization-agents.d.ts.map

package/dist/tools/list-organization-agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-organization-agents.d.ts","sourceRoot":"","sources":["../../src/tools/list-organization-agents.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAapD,eAAO,MAAM,sBAAsB,EAAE,cAoCpC,CAAC"}

package/dist/tools/list-organization-agents.js

@@ -0,0 +1,49 @@
+import { z } from "zod";
+import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
+import { resolveCurrentOrganizationId } from "../auth/resolve-current-organization.js";
+import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
+import * as schemas from "./schemas.js";
+import { callServerApi } from "./server-api.js";
+import { parseToolInput } from "./validation.js";
+const listOrganizationAgentsInputSchema = z
+    .object({
+    base_url: z.string().url(),
+    organization_id: z.uuid().optional(),
+    start_time: z.string().datetime({ offset: true }).optional(),
+})
+    .strict();
+export const listOrganizationAgents = {
+    name: "list_organization_agents",
+    title: "List Organization Agents",
+    description: "List non-deactivated agents for the authenticated user's current organization. Organization scope matches auth (same as other MCP tools); organization_id is optional and only needed if you must target a specific org UUID for URL compatibility.",
+    inputSchema: schemas.listOrganizationAgentsToolInputSchema,
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+    audience: "customer",
+    async handler(args) {
+        const input = parseToolInput(listOrganizationAgentsInputSchema, args);
+        const baseUrl = normalizeBaseUrl(input.base_url);
+        const auth = await resolveAuthForOrigin(baseUrl);
+        const organizationId = input.organization_id ??
+            (await resolveCurrentOrganizationId(baseUrl, auth.token));
+        const agents = await callServerApi({
+            baseUrl,
+            token: auth.token,
+            method: "GET",
+            path: `/api/v1/organizations/${organizationId}/agents`,
+            query: { startTime: input.start_time },
+        });
+        return {
+            organization_id: organizationId,
+            agents,
+            auth_source: auth.source,
+            base_url: baseUrl,
+            environment: detectEnvironment(baseUrl),
+        };
+    },
+};
+//# sourceMappingURL=list-organization-agents.js.map

package/dist/tools/list-organization-agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-organization-agents.js","sourceRoot":"","sources":["../../src/tools/list-organization-agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,iCAAiC,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAmB;IACpD,IAAI,EAAE,0BAA0B;IAChC,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACT,qPAAqP;IACvP,WAAW,EAAE,OAAO,CAAC,qCAAqC;IAC1D,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,cAAc,GAClB,KAAK,CAAC,eAAe;YACrB,CAAC,MAAM,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;YACjC,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,yBAAyB,cAAc,SAAS;YACtD,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,EAAE;SACvC,CAAC,CAAC;QAEH,OAAO;YACL,eAAe,EAAE,cAAc;YAC/B,MAAM;YACN,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/list-packages-by-app.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./registry.js";
+export declare const listPackagesByApp: ToolDefinition;
+//# sourceMappingURL=list-packages-by-app.d.ts.map

package/dist/tools/list-packages-by-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-packages-by-app.d.ts","sourceRoot":"","sources":["../../src/tools/list-packages-by-app.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AA+BpD,eAAO,MAAM,iBAAiB,EAAE,cAiG/B,CAAC"}

package/dist/tools/list-packages-by-app.js

@@ -0,0 +1,97 @@
+import { z } from "zod";
+import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
+import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
+import * as schemas from "./schemas.js";
+import { callServerApi } from "./server-api.js";
+import { parseToolInput } from "./validation.js";
+const listPackagesByAppInputSchema = z
+    .object({
+    base_url: z.string().url(),
+    application_id: z.string().uuid(),
+    commit_id: z.string().trim().min(1).optional(),
+    package_name: z.string().trim().min(1).optional(),
+    package_version: z.string().trim().min(1).optional(),
+    package_version_resolved: z.string().trim().min(1).optional(),
+    dependency_source: z
+        .enum(["root", "direct", "transitive"])
+        .describe("Filter by dependency source: 'root' (root package.json), 'direct' (any non-transitive), 'transitive' (lockfile-only)")
+        .optional(),
+    include_transitive: z
+        .boolean()
+        .describe("When false, excludes transitive (lockfile-only) dependencies. Defaults to true.")
+        .optional(),
+    deployed: z.boolean().optional(),
+    limit: z.number().int().min(1).max(200).optional(),
+    offset: z.number().int().min(0).optional(),
+})
+    .strict();
+export const listPackagesByApp = {
+    name: "list_packages_by_app",
+    title: "List Packages by App",
+    description: "List package dependencies indexed for a Superblocks application. Mirrors `find_apps_by_package` against the same usage index but pivots on the app: given an application_id, returns the packages declared in package.json (and optionally resolved from the lockfile) for one or more indexed commits. Supports filtering by deployed/non-deployed commits, specific commit, declared or resolved version, package name, and dependency source (root, direct, transitive).",
+    inputSchema: schemas.listPackagesByAppToolInputSchema,
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+    audience: "customer",
+    async handler(args) {
+        const input = parseToolInput(listPackagesByAppInputSchema, args);
+        const baseUrl = normalizeBaseUrl(input.base_url);
+        const auth = await resolveAuthForOrigin(baseUrl);
+        const limit = input.limit ?? 50;
+        const offset = input.offset ?? 0;
+        const deployed = input.deployed === undefined
+            ? undefined
+            : input.deployed
+                ? "true"
+                : "false";
+        // If include_transitive is explicitly false and no dependency_source filter, default to 'direct'
+        const dependencySource = input.dependency_source ??
+            (input.include_transitive === false ? "direct" : undefined);
+        const data = (await callServerApi({
+            baseUrl,
+            token: auth.token,
+            method: "GET",
+            path: "/api/v2/public/package-usage",
+            query: {
+                application_id: input.application_id,
+                commit_id: input.commit_id,
+                package_name: input.package_name,
+                package_version_declared: input.package_version,
+                package_version_resolved: input.package_version_resolved,
+                dependency_source: dependencySource,
+                deployed,
+                limit,
+                offset,
+            },
+        }));
+        if (!data || typeof data !== "object") {
+            throw new Error("Unexpected response shape from package-usage endpoint");
+        }
+        if (!Array.isArray(data.items) || typeof data.total !== "number") {
+            throw new Error("Unexpected response shape from package-usage endpoint: missing 'items' array or 'total' number");
+        }
+        return {
+            source: data.source,
+            deployed_filter: data.deployed_filter,
+            application_id: data.application_id ?? input.application_id,
+            commit_id: data.commit_id,
+            package_name: data.package_name,
+            package_version_declared: data.package_version_declared,
+            package_version_resolved: data.package_version_resolved,
+            dependency_source: data.dependency_source,
+            limit: data.limit,
+            offset: data.offset,
+            total_matches: data.total,
+            matches: data.items,
+            note: "Each match represents a (commit_id, package_name) pair. To view only the deployed bundle's packages set deployed=true; to scope to one commit use commit_id. Use dependency_source ('root' = declared in package.json, 'transitive' = lockfile-only) or include_transitive=false to exclude lockfile-only transitive deps.",
+            auth_source: auth.source,
+            base_url: baseUrl,
+            environment: detectEnvironment(baseUrl),
+        };
+    },
+};
+//# sourceMappingURL=list-packages-by-app.js.map

package/dist/tools/list-packages-by-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-packages-by-app.js","sourceRoot":"","sources":["../../src/tools/list-packages-by-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,4BAA4B,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7D,iBAAiB,EAAE,CAAC;SACjB,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;SACtC,QAAQ,CACP,sHAAsH,CACvH;SACA,QAAQ,EAAE;IACb,kBAAkB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,QAAQ,CACP,iFAAiF,CAClF;SACA,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iBAAiB,GAAmB;IAC/C,IAAI,EAAE,sBAAsB;IAC5B,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,6cAA6c;IAC/c,WAAW,EAAE,OAAO,CAAC,gCAAgC;IACrD,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACjC,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC1B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,CAAC,QAAQ;gBACd,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,OAAO,CAAC;QAChB,iGAAiG;QACjG,MAAM,gBAAgB,GACpB,KAAK,CAAC,iBAAiB;YACvB,CAAC,KAAK,CAAC,kBAAkB,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC;YAChC,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,8BAA8B;YACpC,KAAK,EAAE;gBACL,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,wBAAwB,EAAE,KAAK,CAAC,eAAe;gBAC/C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;gBACxD,iBAAiB,EAAE,gBAAgB;gBACnC,QAAQ;gBACR,KAAK;gBACL,MAAM;aACP;SACF,CAAC,CAuBD,CAAC;QACF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc;YAC3D,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;YACvD,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;YACvD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,IAAI,CAAC,KAAK;YACzB,OAAO,EAAE,IAAI,CAAC,KAAK;YACnB,IAAI,EAAE,4TAA4T;YAClU,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/list-rbac-assignments.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./registry.js";
+export declare const listRbacAssignments: ToolDefinition;
+//# sourceMappingURL=list-rbac-assignments.d.ts.map

package/dist/tools/list-rbac-assignments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-rbac-assignments.d.ts","sourceRoot":"","sources":["../../src/tools/list-rbac-assignments.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAYpD,eAAO,MAAM,mBAAmB,EAAE,cA+CjC,CAAC"}

package/dist/tools/list-rbac-assignments.js

@@ -0,0 +1,57 @@
+import { z } from "zod";
+import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
+import { createSdk } from "../sdk/create-sdk.js";
+import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
+import * as schemas from "./schemas.js";
+import { parseToolInput } from "./validation.js";
+const listRbacAssignmentsInputSchema = z
+    .object({
+    base_url: z.string().url(),
+    resource_type: z.string().trim().min(1),
+    resource_id: z.string().trim().min(1),
+})
+    .strict();
+export const listRbacAssignments = {
+    name: "list_rbac_assignments",
+    title: "List RBAC Assignments",
+    description: "List RBAC assignments for a resource by resource_type and resource_id (for example apps, integrations, workflows, jobs).",
+    inputSchema: schemas.listRbacAssignmentsToolInputSchema,
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+    audience: "customer",
+    async handler(args) {
+        const input = parseToolInput(listRbacAssignmentsInputSchema, args);
+        const baseUrl = normalizeBaseUrl(input.base_url);
+        const auth = await resolveAuthForOrigin(baseUrl);
+        const sdk = createSdk(auth.token, baseUrl);
+        const assignments = await sdk.fetchRbacAssignments(input.resource_type, input.resource_id);
+        return {
+            resource_type: input.resource_type,
+            resource_id: input.resource_id,
+            assignments: assignments.map((a) => ({
+                id: a.id,
+                assignment_type: a.assignmentType,
+                principal_type: a.principalType,
+                principal_id: a.principalId,
+                principal_name: a.user?.name ?? a.group?.name ?? null,
+                principal_email: a.user?.email ?? null,
+                role_name: a.role?.name ?? null,
+                permission: a.permission
+                    ? {
+                        action: a.permission.actionType,
+                        resource: a.permission.resourceType,
+                    }
+                    : null,
+            })),
+            auth_source: auth.source,
+            base_url: baseUrl,
+            environment: detectEnvironment(baseUrl),
+            total_count: assignments.length,
+        };
+    },
+};
+//# sourceMappingURL=list-rbac-assignments.js.map

package/dist/tools/list-rbac-assignments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-rbac-assignments.js","sourceRoot":"","sources":["../../src/tools/list-rbac-assignments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,8BAA8B,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAmB;IACjD,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,0HAA0H;IAC5H,WAAW,EAAE,OAAO,CAAC,kCAAkC;IACvD,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAChD,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,WAAW,CAClB,CAAC;QAEF,OAAO;YACL,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,eAAe,EAAE,CAAC,CAAC,cAAc;gBACjC,cAAc,EAAE,CAAC,CAAC,aAAa;gBAC/B,YAAY,EAAE,CAAC,CAAC,WAAW;gBAC3B,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI;gBACrD,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI;gBACtC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI;gBAC/B,UAAU,EAAE,CAAC,CAAC,UAAU;oBACtB,CAAC,CAAC;wBACE,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU;wBAC/B,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,YAAY;qBACpC;oBACH,CAAC,CAAC,IAAI;aACT,CAAC,CAAC;YACH,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;YACvC,WAAW,EAAE,WAAW,CAAC,MAAM;SAChC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/list-review-policies.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./registry.js";
+export declare const listReviewPolicies: ToolDefinition;
+//# sourceMappingURL=list-review-policies.d.ts.map

package/dist/tools/list-review-policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-review-policies.d.ts","sourceRoot":"","sources":["../../src/tools/list-review-policies.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAWpD,eAAO,MAAM,kBAAkB,EAAE,cA+BhC,CAAC"}

package/dist/tools/list-review-policies.js

@@ -0,0 +1,42 @@
+import { z } from "zod";
+import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
+import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
+import * as schemas from "./schemas.js";
+import { callServerApi } from "./server-api.js";
+import { parseToolInput } from "./validation.js";
+const listReviewPoliciesInputSchema = z
+    .object({
+    base_url: z.url(),
+})
+    .strict();
+export const listReviewPolicies = {
+    name: "list_review_policies",
+    title: "List Review Policies",
+    description: "List every policy agent / review policy configured for the org (Security Center Policies view): name, policy type, status, mode (advisory or blocking), scope, stage, domain, and the last run summary for each.",
+    inputSchema: schemas.listReviewPoliciesToolInputSchema,
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+    audience: "customer",
+    async handler(args) {
+        const input = parseToolInput(listReviewPoliciesInputSchema, args);
+        const baseUrl = normalizeBaseUrl(input.base_url);
+        const auth = await resolveAuthForOrigin(baseUrl);
+        const data = await callServerApi({
+            baseUrl,
+            token: auth.token,
+            method: "GET",
+            path: "/api/v1/review-policies",
+        });
+        return {
+            policies: data,
+            auth_source: auth.source,
+            base_url: baseUrl,
+            environment: detectEnvironment(baseUrl),
+        };
+    },
+};
+//# sourceMappingURL=list-review-policies.js.map

package/dist/tools/list-review-policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-review-policies.js","sourceRoot":"","sources":["../../src/tools/list-review-policies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,6BAA6B,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;CAClB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAmB;IAChD,IAAI,EAAE,sBAAsB;IAC5B,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,kNAAkN;IACpN,WAAW,EAAE,OAAO,CAAC,iCAAiC;IACtD,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YAC/B,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;QAEH,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/list-review-policy-runs.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./registry.js";
+export declare const listReviewPolicyRuns: ToolDefinition;
+//# sourceMappingURL=list-review-policy-runs.d.ts.map

package/dist/tools/list-review-policy-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-review-policy-runs.d.ts","sourceRoot":"","sources":["../../src/tools/list-review-policy-runs.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AA0CpD,eAAO,MAAM,oBAAoB,EAAE,cA+ClC,CAAC"}

package/dist/tools/list-review-policy-runs.js

@@ -0,0 +1,80 @@
+import { z } from "zod";
+import { MAX_REVIEW_POLICY_RUNS_LIMIT, REVIEW_POLICY_NAME_MAX_LENGTH, REVIEW_POLICY_RUN_SORTS, REVIEW_RUN_STATUSES, REVIEW_RUN_TRIGGERED_BYS, } from "@superblocksteam/shared";
+import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
+import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
+import * as schemas from "./schemas.js";
+import { callServerApi } from "./server-api.js";
+import { parseToolInput } from "./validation.js";
+const listReviewPolicyRunsInputSchema = z
+    .object({
+    base_url: z.url(),
+    policy_id: z
+        .uuid()
+        .describe("When provided, scopes results to runs of this policy. Omit for org-wide runs across every policy.")
+        .optional(),
+    application_id: z.uuid().optional(),
+    status: z.enum(REVIEW_RUN_STATUSES).optional(),
+    search: z.string().trim().max(REVIEW_POLICY_NAME_MAX_LENGTH).optional(),
+    sort: z.enum(REVIEW_POLICY_RUN_SORTS).optional(),
+    order: z.enum(["asc", "desc"]).optional(),
+    time_start: z.iso.datetime().optional(),
+    time_end: z.iso.datetime().optional(),
+    triggered_by: z.array(z.enum(REVIEW_RUN_TRIGGERED_BYS)).min(1).optional(),
+    triggering_user_ids: z.array(z.uuid()).min(1).optional(),
+    limit: z.number().int().min(1).max(MAX_REVIEW_POLICY_RUNS_LIMIT).optional(),
+    offset: z.number().int().min(0).optional(),
+})
+    .strict()
+    .refine((value) => (value.time_start === undefined) === (value.time_end === undefined), {
+    message: "time_start and time_end must both be provided",
+})
+    .refine((value) => value.time_start === undefined ||
+    value.time_end === undefined ||
+    Date.parse(value.time_start) <= Date.parse(value.time_end), { message: "time_end must be after time_start" });
+export const listReviewPolicyRuns = {
+    name: "list_review_policy_runs",
+    title: "List Review Policy Runs",
+    description: "List policy agent run history, either org-wide or scoped to a single policy via policy_id. Each run reports its status, decision, findings count, and the triggering app/commit/user.",
+    inputSchema: schemas.listReviewPolicyRunsToolInputSchema,
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+    audience: "customer",
+    async handler(args) {
+        const input = parseToolInput(listReviewPolicyRunsInputSchema, args);
+        const baseUrl = normalizeBaseUrl(input.base_url);
+        const auth = await resolveAuthForOrigin(baseUrl);
+        const path = input.policy_id
+            ? `/api/v1/review-policies/${input.policy_id}/runs`
+            : "/api/v1/review-policies/runs";
+        const data = await callServerApi({
+            baseUrl,
+            token: auth.token,
+            method: "GET",
+            path,
+            query: {
+                applicationId: input.application_id,
+                status: input.status,
+                search: input.search,
+                sort: input.sort,
+                order: input.order,
+                timeStart: input.time_start,
+                timeEnd: input.time_end,
+                triggeredBy: input.triggered_by,
+                triggeringUserId: input.triggering_user_ids,
+                limit: input.limit,
+                offset: input.offset,
+            },
+        });
+        return {
+            runs: data,
+            auth_source: auth.source,
+            base_url: baseUrl,
+            environment: detectEnvironment(baseUrl),
+        };
+    },
+};
+//# sourceMappingURL=list-review-policy-runs.js.map

package/dist/tools/list-review-policy-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-review-policy-runs.js","sourceRoot":"","sources":["../../src/tools/list-review-policy-runs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,uBAAuB,EACvB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,+BAA+B,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;IACjB,SAAS,EAAE,CAAC;SACT,IAAI,EAAE;SACN,QAAQ,CACP,mGAAmG,CACpG;SACA,QAAQ,EAAE;IACb,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,QAAQ,EAAE;IACvE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;IAChD,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzE,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE;IAC3E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,EACrE;IACE,OAAO,EAAE,+CAA+C;CACzD,CACF;KACA,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,UAAU,KAAK,SAAS;IAC9B,KAAK,CAAC,QAAQ,KAAK,SAAS;IAC5B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAC5D,EAAE,OAAO,EAAE,mCAAmC,EAAE,CACjD,CAAC;AAEJ,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,IAAI,EAAE,yBAAyB;IAC/B,KAAK,EAAE,yBAAyB;IAChC,WAAW,EACT,uLAAuL;IACzL,WAAW,EAAE,OAAO,CAAC,mCAAmC;IACxD,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS;YAC1B,CAAC,CAAC,2BAA2B,KAAK,CAAC,SAAS,OAAO;YACnD,CAAC,CAAC,8BAA8B,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YAC/B,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI;YACJ,KAAK,EAAE;gBACL,aAAa,EAAE,KAAK,CAAC,cAAc;gBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,UAAU;gBAC3B,OAAO,EAAE,KAAK,CAAC,QAAQ;gBACvB,WAAW,EAAE,KAAK,CAAC,YAAY;gBAC/B,gBAAgB,EAAE,KAAK,CAAC,mBAAmB;gBAC3C,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB;SACF,CAAC,CAAC;QAEH,OAAO;YACL,IAAI,EAAE,IAAI;YACV,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/list-roles.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./registry.js";
+export declare const listRoles: ToolDefinition;
+//# sourceMappingURL=list-roles.d.ts.map

package/dist/tools/list-roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-roles.d.ts","sourceRoot":"","sources":["../../src/tools/list-roles.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAepD,eAAO,MAAM,SAAS,EAAE,cA0DvB,CAAC"}

package/dist/tools/list-roles.js

@@ -0,0 +1,61 @@
+import { z } from "zod";
+import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
+import { resolveCurrentOrganizationId } from "../auth/resolve-current-organization.js";
+import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
+import * as schemas from "./schemas.js";
+import { callServerApi } from "./server-api.js";
+import { parseToolInput } from "./validation.js";
+const listRolesInputSchema = z
+    .object({
+    base_url: z.string().url(),
+    organization_id: z.uuid().optional(),
+    type: z
+        .enum(["apps", "integrations", "org", "jobs", "workflows"])
+        .optional(),
+})
+    .strict();
+export const listRoles = {
+    name: "list_roles",
+    title: "List Roles",
+    description: "List available RBAC roles for an organization, including their UUIDs. Use these role UUIDs as assignment_id when calling grant_resource_access. Optionally filter by role type (apps, integrations, org, jobs, workflows). Organization scope defaults to the authenticated user's current organization; pass organization_id only when targeting a different org you belong to.",
+    inputSchema: schemas.listRolesToolInputSchema,
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+    audience: "customer",
+    async handler(args) {
+        const input = parseToolInput(listRolesInputSchema, args);
+        const baseUrl = normalizeBaseUrl(input.base_url);
+        const auth = await resolveAuthForOrigin(baseUrl);
+        const organizationId = input.organization_id ??
+            (await resolveCurrentOrganizationId(baseUrl, auth.token));
+        const roles = await callServerApi({
+            baseUrl,
+            token: auth.token,
+            method: "GET",
+            path: `/api/v1/organizations/${organizationId}/roles`,
+            query: input.type ? { type: input.type } : undefined,
+        });
+        if (!Array.isArray(roles)) {
+            throw new Error(`Unexpected response from roles API: expected array, got ${typeof roles}`);
+        }
+        const rolesList = roles;
+        return {
+            roles: rolesList.map((r) => ({
+                id: r.id,
+                name: r.name,
+                description: r.description,
+                type: r.type,
+                organization_id: r.organizationId,
+            })),
+            auth_source: auth.source,
+            base_url: baseUrl,
+            environment: detectEnvironment(baseUrl),
+            total_count: rolesList.length,
+        };
+    },
+};
+//# sourceMappingURL=list-roles.js.map

package/dist/tools/list-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-roles.js","sourceRoot":"","sources":["../../src/tools/list-roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;SAC1D,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,SAAS,GAAmB;IACvC,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,YAAY;IACnB,WAAW,EACT,kXAAkX;IACpX,WAAW,EAAE,OAAO,CAAC,wBAAwB;IAC7C,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,cAAc,GAClB,KAAK,CAAC,eAAe;YACrB,CAAC,MAAM,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,yBAAyB,cAAc,QAAQ;YACrD,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;SACrD,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,2DAA2D,OAAO,KAAK,EAAE,CAC1E,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC;QAExB,OAAO;YACL,KAAK,EAAE,SAAS,CAAC,GAAG,CAClB,CAAC,CAMA,EAAE,EAAE,CAAC,CAAC;gBACL,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,eAAe,EAAE,CAAC,CAAC,cAAc;aAClC,CAAC,CACH;YACD,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;YACvC,WAAW,EAAE,SAAS,CAAC,MAAM;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/list-users-by-role.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./registry.js";
+export declare const listUsersByRole: ToolDefinition;
+//# sourceMappingURL=list-users-by-role.d.ts.map

package/dist/tools/list-users-by-role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-users-by-role.d.ts","sourceRoot":"","sources":["../../src/tools/list-users-by-role.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAepD,eAAO,MAAM,eAAe,EAAE,cA0E7B,CAAC"}

package/dist/tools/list-users-by-role.js

@@ -0,0 +1,74 @@
+import { z } from "zod";
+import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
+import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
+import { applyPagination } from "./pagination.js";
+import * as schemas from "./schemas.js";
+import { callServerApi } from "./server-api.js";
+import { parseToolInput } from "./validation.js";
+const listUsersByRoleInputSchema = z
+    .object({
+    base_url: z.string().url(),
+    limit: z.number().int().positive().max(200).optional(),
+    offset: z.number().int().nonnegative().optional(),
+    organization_id: z.string().uuid(),
+    role_name: z.string().trim().min(1),
+})
+    .strict();
+export const listUsersByRole = {
+    name: "list_users_by_role",
+    title: "List Users by Role",
+    description: "List users in a Superblocks organization filtered by org role name (e.g. Admin, Developer, End-User). Returns only users whose org-level role assignment matches the given role_name (case-insensitive). Useful for access audits and compliance reviews.",
+    inputSchema: schemas.listUsersByRoleToolInputSchema,
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+    audience: "customer",
+    async handler(args) {
+        const input = parseToolInput(listUsersByRoleInputSchema, args);
+        const baseUrl = normalizeBaseUrl(input.base_url);
+        const auth = await resolveAuthForOrigin(baseUrl);
+        const users = await callServerApi({
+            baseUrl,
+            token: auth.token,
+            method: "GET",
+            path: `/api/v1/organizations/${input.organization_id}/users`,
+        });
+        if (!Array.isArray(users)) {
+            throw new Error(`Unexpected response from users API: expected array, got ${typeof users}`);
+        }
+        const usersList = users;
+        const roleNameLower = input.role_name.toLowerCase();
+        const filtered = usersList.filter((u) => u.assignments?.some((a) => a.assignmentType === "role" &&
+            a.role?.name?.toLowerCase() === roleNameLower));
+        const mapped = filtered.map((u) => ({
+            id: u.id,
+            name: u.name,
+            email: u.email,
+            status: u.status,
+            type: u.type ?? null,
+            org_role: u.assignments?.find((a) => a.assignmentType === "role" &&
+                a.role?.name?.toLowerCase() === roleNameLower)?.role?.name ?? null,
+        }));
+        const paged = applyPagination(mapped, {
+            limit: input.limit,
+            offset: input.offset,
+        });
+        return {
+            users: paged.page,
+            role_filter: input.role_name,
+            auth_source: auth.source,
+            base_url: baseUrl,
+            environment: detectEnvironment(baseUrl),
+            has_more: paged.has_more,
+            limit: paged.limit,
+            next_offset: paged.next_offset,
+            offset: paged.offset,
+            returned_count: paged.returned_count,
+            total_count: paged.total_count,
+        };
+    },
+};
+//# sourceMappingURL=list-users-by-role.js.map