@superblocksteam/mcp-server 2.0.0-SNAPSHOT.06fa243c132fe1fb

package/dist/tools/list-users-by-role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-users-by-role.js","sourceRoot":"","sources":["../../src/tools/list-users-by-role.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,0BAA0B,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACjD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,2PAA2P;IAC7P,WAAW,EAAE,OAAO,CAAC,8BAA8B;IACnD,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,yBAAyB,KAAK,CAAC,eAAe,QAAQ;SAC7D,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,2DAA2D,OAAO,KAAK,EAAE,CAC1E,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,KAAkB,CAAC;QACrC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAEpD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,WAAW,EAAE,IAAI,CACjB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,cAAc,KAAK,MAAM;YAC3B,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,aAAa,CAChD,CACF,CAAC;QAEF,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;YACpB,QAAQ,EACN,CAAC,CAAC,WAAW,EAAE,IAAI,CACjB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,cAAc,KAAK,MAAM;gBAC3B,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,aAAa,CAChD,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI;SACxB,CAAC,CAAC,CAAC;QAEJ,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE;YACpC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,WAAW,EAAE,KAAK,CAAC,SAAS;YAC5B,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;YACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/list-users.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./registry.js";
+export declare const listUsers: ToolDefinition;
+//# sourceMappingURL=list-users.d.ts.map

package/dist/tools/list-users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-users.d.ts","sourceRoot":"","sources":["../../src/tools/list-users.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAcpD,eAAO,MAAM,SAAS,EAAE,cA6DvB,CAAC"}

package/dist/tools/list-users.js

@@ -0,0 +1,69 @@
+import { z } from "zod";
+import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
+import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
+import { applyPagination } from "./pagination.js";
+import * as schemas from "./schemas.js";
+import { callServerApi } from "./server-api.js";
+import { parseToolInput } from "./validation.js";
+const listUsersInputSchema = z
+    .object({
+    base_url: z.string().url(),
+    limit: z.number().int().positive().max(200).optional(),
+    offset: z.number().int().nonnegative().optional(),
+    organization_id: z.string().uuid(),
+})
+    .strict();
+export const listUsers = {
+    name: "list_users",
+    title: "List Users",
+    description: "List all users in a Superblocks organization with their status, type, and org-level role assignments. Useful for access audits, user inventories, and governance workflows.",
+    inputSchema: schemas.listUsersToolInputSchema,
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+    audience: "customer",
+    async handler(args) {
+        const input = parseToolInput(listUsersInputSchema, args);
+        const baseUrl = normalizeBaseUrl(input.base_url);
+        const auth = await resolveAuthForOrigin(baseUrl);
+        const users = await callServerApi({
+            baseUrl,
+            token: auth.token,
+            method: "GET",
+            path: `/api/v1/organizations/${input.organization_id}/users`,
+        });
+        if (!Array.isArray(users)) {
+            throw new Error(`Unexpected response from users API: expected array, got ${typeof users}`);
+        }
+        const usersList = users;
+        const mapped = usersList.map((u) => ({
+            id: u.id,
+            name: u.name,
+            email: u.email,
+            status: u.status,
+            type: u.type ?? null,
+            org_role: u.assignments?.find((a) => a.assignmentType === "role")?.role?.name ??
+                null,
+        }));
+        const paged = applyPagination(mapped, {
+            limit: input.limit,
+            offset: input.offset,
+        });
+        return {
+            users: paged.page,
+            auth_source: auth.source,
+            base_url: baseUrl,
+            environment: detectEnvironment(baseUrl),
+            has_more: paged.has_more,
+            limit: paged.limit,
+            next_offset: paged.next_offset,
+            offset: paged.offset,
+            returned_count: paged.returned_count,
+            total_count: paged.total_count,
+        };
+    },
+};
+//# sourceMappingURL=list-users.js.map

package/dist/tools/list-users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-users.js","sourceRoot":"","sources":["../../src/tools/list-users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACjD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,SAAS,GAAmB;IACvC,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,YAAY;IACnB,WAAW,EACT,6KAA6K;IAC/K,WAAW,EAAE,OAAO,CAAC,wBAAwB;IAC7C,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,yBAAyB,KAAK,CAAC,eAAe,QAAQ;SAC7D,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,2DAA2D,OAAO,KAAK,EAAE,CAC1E,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,KAAkB,CAAC;QAErC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;YACpB,QAAQ,EACN,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI;gBACnE,IAAI;SACP,CAAC,CAAC,CAAC;QAEJ,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE;YACpC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;YACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/lookup-package-vulnerabilities.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./registry.js";
+export declare const lookupPackageVulnerabilities: ToolDefinition;
+//# sourceMappingURL=lookup-package-vulnerabilities.d.ts.map

package/dist/tools/lookup-package-vulnerabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup-package-vulnerabilities.d.ts","sourceRoot":"","sources":["../../src/tools/lookup-package-vulnerabilities.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAyBpD,eAAO,MAAM,4BAA4B,EAAE,cAoC1C,CAAC"}

package/dist/tools/lookup-package-vulnerabilities.js

@@ -0,0 +1,57 @@
+import { z } from "zod";
+import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
+import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
+import * as schemas from "./schemas.js";
+import { callServerApi } from "./server-api.js";
+import { parseToolInput } from "./validation.js";
+const MAX_PACKAGES = 5000;
+const FIELD_MAX_LENGTH = 256;
+const lookupPackageVulnerabilitiesInputSchema = z
+    .object({
+    base_url: z.url(),
+    packages: z
+        .array(z
+        .object({
+        name: z.string().min(1).max(FIELD_MAX_LENGTH),
+        version: z.string().min(1).max(FIELD_MAX_LENGTH),
+    })
+        .strict())
+        .min(1)
+        .max(MAX_PACKAGES),
+})
+    .strict();
+export const lookupPackageVulnerabilities = {
+    name: "lookup_package_vulnerabilities",
+    title: "Lookup Package Vulnerabilities",
+    description: "Check a batch of npm {name, version} pairs against the org-agnostic package vulnerability index before an install. Returns per-package severity, covering advisories, whether the package carries known malware, and a non-binding remediation suggestion ('pass', 'remediatable', or 'block').",
+    inputSchema: schemas.lookupPackageVulnerabilitiesToolInputSchema,
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+    audience: "customer",
+    async handler(args) {
+        const input = parseToolInput(lookupPackageVulnerabilitiesInputSchema, args);
+        const baseUrl = normalizeBaseUrl(input.base_url);
+        const auth = await resolveAuthForOrigin(baseUrl);
+        const data = (await callServerApi({
+            baseUrl,
+            token: auth.token,
+            method: "POST",
+            path: "/api/v1/security/package-lookup",
+            body: { packages: input.packages },
+        }));
+        if (!data || !Array.isArray(data.results)) {
+            throw new Error("Unexpected response shape from package-lookup endpoint");
+        }
+        return {
+            results: data.results,
+            auth_source: auth.source,
+            base_url: baseUrl,
+            environment: detectEnvironment(baseUrl),
+        };
+    },
+};
+//# sourceMappingURL=lookup-package-vulnerabilities.js.map

package/dist/tools/lookup-package-vulnerabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup-package-vulnerabilities.js","sourceRoot":"","sources":["../../src/tools/lookup-package-vulnerabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,uCAAuC,GAAG,CAAC;KAC9C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;IACjB,QAAQ,EAAE,CAAC;SACR,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;KACjD,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,YAAY,CAAC;CACrB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,4BAA4B,GAAmB;IAC1D,IAAI,EAAE,gCAAgC;IACtC,KAAK,EAAE,gCAAgC;IACvC,WAAW,EACT,iSAAiS;IACnS,WAAW,EAAE,OAAO,CAAC,2CAA2C;IAChE,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,uCAAuC,EAAE,IAAI,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC;YAChC,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,iCAAiC;YACvC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;SACnC,CAAC,CAAkC,CAAC;QAErC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/map-rbac-assignments.d.ts

@@ -0,0 +1,35 @@
+type PermissionLike = {
+    actionType: string;
+    resourceType: string;
+};
+type AssignmentLike = {
+    principalType: string;
+    principalId: string;
+    user?: {
+        name?: string | null;
+        email?: string | null;
+    } | null;
+    group?: {
+        name?: string | null;
+    } | null;
+    assignmentType: string;
+    role?: {
+        name?: string | null;
+        permissions?: PermissionLike[] | null;
+    } | null;
+    permission?: PermissionLike | null;
+};
+export declare function mapRbacAssignments(assignments: AssignmentLike[]): {
+    principal_type: string;
+    principal_id: string;
+    principal_name: string | null;
+    principal_email: string | null;
+    assignment_type: string;
+    role_name: string | null;
+    permissions: {
+        action: string;
+        resource: string;
+    }[];
+}[];
+export {};
+//# sourceMappingURL=map-rbac-assignments.d.ts.map

package/dist/tools/map-rbac-assignments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-rbac-assignments.d.ts","sourceRoot":"","sources":["../../src/tools/map-rbac-assignments.ts"],"names":[],"mappings":"AAAA,KAAK,cAAc,GAAG;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,GAAG,IAAI,CAAC;IACT,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,GAAG,IAAI,CAAC;IACT,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,WAAW,CAAC,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;KACvC,GAAG,IAAI,CAAC;IACT,UAAU,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;CACpC,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,cAAc,EAAE;;;;;;;;;;;IAoB/D"}

package/dist/tools/map-rbac-assignments.js

@@ -0,0 +1,22 @@
+export function mapRbacAssignments(assignments) {
+    return assignments.map((a) => ({
+        principal_type: a.principalType,
+        principal_id: a.principalId,
+        principal_name: a.user?.name ?? a.group?.name ?? null,
+        principal_email: a.user?.email ?? null,
+        assignment_type: a.assignmentType,
+        role_name: a.role?.name ?? null,
+        permissions: a.permission
+            ? [
+                {
+                    action: a.permission.actionType,
+                    resource: a.permission.resourceType,
+                },
+            ]
+            : (a.role?.permissions ?? []).map((p) => ({
+                action: p.actionType,
+                resource: p.resourceType,
+            })),
+    }));
+}
+//# sourceMappingURL=map-rbac-assignments.js.map

package/dist/tools/map-rbac-assignments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-rbac-assignments.js","sourceRoot":"","sources":["../../src/tools/map-rbac-assignments.ts"],"names":[],"mappings":"AAuBA,MAAM,UAAU,kBAAkB,CAAC,WAA6B;IAC9D,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7B,cAAc,EAAE,CAAC,CAAC,aAAa;QAC/B,YAAY,EAAE,CAAC,CAAC,WAAW;QAC3B,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI;QACrD,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI;QACtC,eAAe,EAAE,CAAC,CAAC,cAAc;QACjC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI;QAC/B,WAAW,EAAE,CAAC,CAAC,UAAU;YACvB,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU;oBAC/B,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,YAAY;iBACpC;aACF;YACH,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtC,MAAM,EAAE,CAAC,CAAC,UAAU;gBACpB,QAAQ,EAAE,CAAC,CAAC,YAAY;aACzB,CAAC,CAAC;KACR,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/tools/org-user-types.d.ts

@@ -0,0 +1,16 @@
+export type OrgUser = {
+    id: string;
+    name: string;
+    email: string;
+    status: number;
+    type?: string;
+    assignments?: {
+        id: string;
+        assignmentType: string;
+        role?: {
+            id: string;
+            name: string;
+        } | null;
+    }[];
+};
+//# sourceMappingURL=org-user-types.d.ts.map

package/dist/tools/org-user-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-user-types.d.ts","sourceRoot":"","sources":["../../src/tools/org-user-types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;KAC5C,EAAE,CAAC;CACL,CAAC"}

package/dist/tools/org-user-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=org-user-types.js.map

package/dist/tools/org-user-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-user-types.js","sourceRoot":"","sources":["../../src/tools/org-user-types.ts"],"names":[],"mappings":""}

package/dist/tools/pagination.d.ts

@@ -0,0 +1,14 @@
+export type PaginationResult<T> = {
+    page: T[];
+    total_count: number;
+    returned_count: number;
+    has_more: boolean;
+    next_offset: number | null;
+    offset: number;
+    limit: number;
+};
+export declare function applyPagination<T>(items: T[], opts: {
+    limit?: number;
+    offset?: number;
+}): PaginationResult<T>;
+//# sourceMappingURL=pagination.d.ts.map

package/dist/tools/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../src/tools/pagination.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAAI;IAChC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAgB,eAAe,CAAC,CAAC,EAC/B,KAAK,EAAE,CAAC,EAAE,EACV,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxC,gBAAgB,CAAC,CAAC,CAAC,CAkBrB"}

package/dist/tools/pagination.js

@@ -0,0 +1,21 @@
+const DEFAULT_LIMIT = 50;
+export function applyPagination(items, opts) {
+    const limit = opts.limit ?? DEFAULT_LIMIT;
+    const offset = opts.offset ?? 0;
+    if (limit < 1)
+        throw new Error(`applyPagination: limit must be >= 1, got ${limit}`);
+    if (offset < 0)
+        throw new Error(`applyPagination: offset must be >= 0, got ${offset}`);
+    const page = items.slice(offset, offset + limit);
+    const has_more = offset + limit < items.length;
+    return {
+        page,
+        total_count: items.length,
+        returned_count: page.length,
+        has_more,
+        next_offset: has_more ? offset + limit : null,
+        offset,
+        limit,
+    };
+}
+//# sourceMappingURL=pagination.js.map

package/dist/tools/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../src/tools/pagination.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,EAAE,CAAC;AAYzB,MAAM,UAAU,eAAe,CAC7B,KAAU,EACV,IAAyC;IAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,EAAE,CAAC,CAAC;IACvE,IAAI,MAAM,GAAG,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,EAAE,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/C,OAAO;QACL,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,cAAc,EAAE,IAAI,CAAC,MAAM;QAC3B,QAAQ;QACR,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;QAC7C,MAAM;QACN,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/tools/plugin-configuration-schema.d.ts

@@ -0,0 +1,3 @@
+export declare function listPluginIds(): string[];
+export declare function getPluginConfigurationSchema(pluginId: string): Record<string, unknown>;
+//# sourceMappingURL=plugin-configuration-schema.d.ts.map

package/dist/tools/plugin-configuration-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-configuration-schema.d.ts","sourceRoot":"","sources":["../../src/tools/plugin-configuration-schema.ts"],"names":[],"mappings":"AAoGA,wBAAgB,aAAa,IAAI,MAAM,EAAE,CAYxC;AA6DD,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA4CzB"}

package/dist/tools/plugin-configuration-schema.js

@@ -0,0 +1,171 @@
+import { ErrorCode, McpError } from "@modelcontextprotocol/sdk/types.js";
+import { EXTENDED_INTEGRATION_PLUGIN_IDS, getBasePluginId, RegisteredPlugins, } from "@superblocksteam/shared";
+// Vendored from @superblocksteam/schemas rather than imported: that package is
+// not published to the registry the dev-server image installs from. The test
+// alongside this file fails if the copy drifts from the generator.
+import datasourceConfigurationByTypeSchema from "./datasource-configuration-by-type.schema.json" with { type: "json" };
+const STEP_ONLY_PLUGIN_IDS = new Set([
+    "graphql",
+    "javascript",
+    "python",
+    "restapi",
+    "workflow",
+]);
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function pluginProperties() {
+    const definitions = datasourceConfigurationByTypeSchema.definitions;
+    if (!isRecord(definitions)) {
+        return {};
+    }
+    const byType = definitions.DatasourceConfigurationByType;
+    if (!isRecord(byType) || !isRecord(byType.properties)) {
+        return {};
+    }
+    return byType.properties;
+}
+/** Resolve native OpenAPI templates to a schema-backed base plugin. */
+function schemaKeyFor(pluginId) {
+    const properties = pluginProperties();
+    const describes = (key) => isRecord(properties[key]) && !STEP_ONLY_PLUGIN_IDS.has(key);
+    if (describes(pluginId)) {
+        return pluginId;
+    }
+    if (!EXTENDED_INTEGRATION_PLUGIN_IDS.includes(pluginId)) {
+        return undefined;
+    }
+    const baseId = getBasePluginId(pluginId);
+    return describes(baseId) ? baseId : undefined;
+}
+function templateFormItems(pluginId) {
+    const plugin = RegisteredPlugins("").get(pluginId);
+    const items = [];
+    for (const section of plugin?.datasourceTemplate?.sections ?? []) {
+        for (const sectionItem of section.items) {
+            items.push(...("rowItems" in sectionItem ? sectionItem.rowItems : [sectionItem]));
+        }
+    }
+    return items;
+}
+function templateAuthType(items) {
+    const authType = items.find((item) => item.name === "authType")?.initialValue;
+    return typeof authType === "string" ? authType : undefined;
+}
+function requiredConstSchema(path, value) {
+    const [name, ...rest] = path;
+    if (!name) {
+        return {};
+    }
+    return {
+        properties: {
+            [name]: rest.length > 0 ? requiredConstSchema(rest, value) : { const: value },
+        },
+        required: [name],
+        type: "object",
+    };
+}
+function templateHiddenPresetSchemas(items) {
+    return items
+        .filter((item) => item.hidden && item.initialValue !== undefined)
+        .map((item) => requiredConstSchema(item.name.split("."), item.initialValue));
+}
+export function listPluginIds() {
+    const pluginIds = new Set(Object.keys(pluginProperties()).filter((pluginId) => !STEP_ONLY_PLUGIN_IDS.has(pluginId)));
+    for (const pluginId of EXTENDED_INTEGRATION_PLUGIN_IDS) {
+        if (schemaKeyFor(pluginId)) {
+            pluginIds.add(pluginId);
+        }
+    }
+    return [...pluginIds].sort();
+}
+const DEFINITION_REF_PREFIX = "#/definitions/";
+function collectRefs(value, found) {
+    if (Array.isArray(value)) {
+        for (const item of value) {
+            collectRefs(item, found);
+        }
+        return;
+    }
+    if (!isRecord(value)) {
+        return;
+    }
+    for (const [key, child] of Object.entries(value)) {
+        if (key === "$ref" &&
+            typeof child === "string" &&
+            child.startsWith(DEFINITION_REF_PREFIX)) {
+            found.add(child.slice(DEFINITION_REF_PREFIX.length));
+            continue;
+        }
+        collectRefs(child, found);
+    }
+}
+/**
+ * The shared definitions block describes every plugin, so returning it whole
+ * costs ~124KB per call and overflows the caller's token budget. Keep only the
+ * definitions reachable from this plugin, following nested refs to closure.
+ */
+function reachableDefinitions(pluginSchema, allDefinitions) {
+    const needed = new Set();
+    collectRefs(pluginSchema, needed);
+    const pending = [...needed];
+    while (pending.length > 0) {
+        const name = pending.pop();
+        const nested = new Set();
+        collectRefs(allDefinitions[name], nested);
+        for (const ref of nested) {
+            if (!needed.has(ref)) {
+                needed.add(ref);
+                pending.push(ref);
+            }
+        }
+    }
+    const pruned = {};
+    for (const name of [...needed].sort()) {
+        if (name in allDefinitions) {
+            pruned[name] = allDefinitions[name];
+        }
+    }
+    return pruned;
+}
+export function getPluginConfigurationSchema(pluginId) {
+    const schemaKey = schemaKeyFor(pluginId);
+    const pluginSchema = schemaKey ? pluginProperties()[schemaKey] : undefined;
+    if (!isRecord(pluginSchema)) {
+        throw new McpError(ErrorCode.InvalidParams, `Unknown plugin_id "${pluginId}". Known plugin ids: ${listPluginIds().join(", ")}.`);
+    }
+    const definitions = isRecord(datasourceConfigurationByTypeSchema.definitions)
+        ? datasourceConfigurationByTypeSchema.definitions
+        : {};
+    const isTemplate = schemaKey !== pluginId;
+    const templateItems = isTemplate ? templateFormItems(pluginId) : [];
+    const authType = templateAuthType(templateItems);
+    const hiddenPresets = isTemplate
+        ? templateHiddenPresetSchemas(templateItems)
+        : [];
+    let tailoredSchema = pluginSchema;
+    if (authType && isRecord(tailoredSchema.properties)) {
+        tailoredSchema = {
+            ...tailoredSchema,
+            properties: {
+                ...tailoredSchema.properties,
+                authType: { const: authType },
+            },
+        };
+    }
+    if (hiddenPresets.length > 0) {
+        tailoredSchema = {
+            ...tailoredSchema,
+            allOf: [
+                ...(Array.isArray(tailoredSchema.allOf) ? tailoredSchema.allOf : []),
+                ...hiddenPresets,
+            ],
+        };
+    }
+    return {
+        $schema: "http://json-schema.org/draft-07/schema#",
+        ...tailoredSchema,
+        definitions: reachableDefinitions(tailoredSchema, definitions),
+    };
+}
+//# sourceMappingURL=plugin-configuration-schema.js.map

package/dist/tools/plugin-configuration-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-configuration-schema.js","sourceRoot":"","sources":["../../src/tools/plugin-configuration-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAEzE,OAAO,EACL,+BAA+B,EAC/B,eAAe,EACf,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAGjC,+EAA+E;AAC/E,6EAA6E;AAC7E,mEAAmE;AACnE,OAAO,mCAAmC,MAAM,gDAAgD,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAEvH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,WAAW,GAAG,mCAAmC,CAAC,WAAW,CAAC;IACpE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,6BAA6B,CAAC;IACzD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,UAAU,CAAC;AAC3B,CAAC;AAED,uEAAuE;AACvE,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAW,EAAE,CACzC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE9D,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,kBAAkB,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;QACjE,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiB;IACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,YAAY,CAAC;IAC9E,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAc,EACd,KAAc;IAEd,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO;QACL,UAAU,EAAE;YACV,CAAC,IAAI,CAAC,EACJ,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE;SACxE;QACD,QAAQ,EAAE,CAAC,IAAI,CAAC;QAChB,IAAI,EAAE,QAAQ;KACf,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAiB;IAEjB,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC;SAChE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAC7D,CAAC;AACN,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,MAAM,CACpC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAClD,CACF,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,+BAA+B,EAAE,CAAC;QACvD,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAE/C,SAAS,WAAW,CAAC,KAAc,EAAE,KAAkB;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IACE,GAAG,KAAK,MAAM;YACd,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,EACvC,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,YAAqC,EACrC,cAAuC;IAEvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAC5B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAY,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,IAAI,IAAI,IAAI,cAAc,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAAgB;IAEhB,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAChB,SAAS,CAAC,aAAa,EACvB,sBAAsB,QAAQ,wBAAwB,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,mCAAmC,CAAC,WAAW,CAAC;QAC3E,CAAC,CAAC,mCAAmC,CAAC,WAAW;QACjD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,UAAU,GAAG,SAAS,KAAK,QAAQ,CAAC;IAC1C,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,UAAU;QAC9B,CAAC,CAAC,2BAA2B,CAAC,aAAa,CAAC;QAC5C,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,cAAc,GAAG,YAAY,CAAC;IAClC,IAAI,QAAQ,IAAI,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,cAAc,GAAG;YACf,GAAG,cAAc;YACjB,UAAU,EAAE;gBACV,GAAG,cAAc,CAAC,UAAU;gBAC5B,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;aAC9B;SACF,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,cAAc,GAAG;YACf,GAAG,cAAc;YACjB,KAAK,EAAE;gBACL,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,aAAa;aACjB;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,yCAAyC;QAClD,GAAG,cAAc;QACjB,WAAW,EAAE,oBAAoB,CAAC,cAAc,EAAE,WAAW,CAAC;KAC/D,CAAC;AACJ,CAAC"}

package/dist/tools/registry.d.ts

@@ -0,0 +1,36 @@
+import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+type Audience = "customer" | "internal";
+export type Profile = "customer" | "internal";
+type ToolAnnotations = {
+    readOnlyHint?: boolean;
+    destructiveHint?: boolean;
+    idempotentHint?: boolean;
+    openWorldHint?: boolean;
+};
+export type ToolDefinition = {
+    name: string;
+    title: string;
+    description: string;
+    inputSchema: Tool["inputSchema"];
+    annotations: ToolAnnotations;
+    audience: Audience;
+    handler: (args: unknown) => Promise<unknown>;
+};
+export type BuildToolRegistryOptions = {
+    /**
+     * Set to false when the host has already established entitlement out of
+     * band, so the plan lookup would be both redundant and wrong: a self-hosted
+     * control plane need not carry a SaaS billing plan. Audience filtering is
+     * unaffected - internal tools stay out of the customer surface either way.
+     */
+    requireEntitledPlan?: boolean;
+};
+export declare function buildToolRegistry(definitions: ToolDefinition[], profile: Profile, { requireEntitledPlan }?: BuildToolRegistryOptions): ToolRegistry;
+export declare class ToolRegistry {
+    private readonly tools;
+    constructor(definitions: ToolDefinition[]);
+    listTools(): Tool[];
+    getHandler(name: string): ToolDefinition["handler"] | undefined;
+}
+export {};
+//# sourceMappingURL=registry.d.ts.map

package/dist/tools/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAI/D,KAAK,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;AAExC,MAAM,MAAM,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;AAE9C,KAAK,eAAe,GAAG;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACjC,WAAW,EAAE,eAAe,CAAC;IAC7B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B,CAAC;AAEF,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,cAAc,EAAE,EAC7B,OAAO,EAAE,OAAO,EAChB,EAAE,mBAA0B,EAAE,GAAE,wBAA6B,GAC5D,YAAY,CAed;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8B;gBAExC,WAAW,EAAE,cAAc,EAAE;IAIzC,SAAS,IAAI,IAAI,EAAE;IAUnB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS;CAGhE"}

package/dist/tools/registry.js

@@ -0,0 +1,32 @@
+import { wrapHandlerWithEntitlement } from "../entitlement-wrapper.js";
+export function buildToolRegistry(definitions, profile, { requireEntitledPlan = true } = {}) {
+    const filtered = profile === "internal"
+        ? definitions
+        : definitions.filter((d) => d.audience === "customer");
+    const ready = profile === "internal" || !requireEntitledPlan
+        ? filtered
+        : filtered.map((d) => ({
+            ...d,
+            handler: wrapHandlerWithEntitlement(d.handler),
+        }));
+    return new ToolRegistry(ready);
+}
+export class ToolRegistry {
+    tools;
+    constructor(definitions) {
+        this.tools = new Map(definitions.map((d) => [d.name, d]));
+    }
+    listTools() {
+        return [...this.tools.values()].map((d) => ({
+            name: d.name,
+            title: d.title,
+            description: d.description,
+            inputSchema: d.inputSchema,
+            annotations: d.annotations,
+        }));
+    }
+    getHandler(name) {
+        return this.tools.get(name)?.handler;
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/tools/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAiCvE,MAAM,UAAU,iBAAiB,CAC/B,WAA6B,EAC7B,OAAgB,EAChB,EAAE,mBAAmB,GAAG,IAAI,KAA+B,EAAE;IAE7D,MAAM,QAAQ,GACZ,OAAO,KAAK,UAAU;QACpB,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IAE3D,MAAM,KAAK,GACT,OAAO,KAAK,UAAU,IAAI,CAAC,mBAAmB;QAC5C,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnB,GAAG,CAAC;YACJ,OAAO,EAAE,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC;SAC/C,CAAC,CAAC,CAAC;IAEV,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,OAAO,YAAY;IACN,KAAK,CAA8B;IAEpD,YAAY,WAA6B;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACvC,CAAC;CACF"}

package/dist/tools/revoke-resource-access.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./registry.js";
+export declare const revokeResourceAccess: ToolDefinition;
+//# sourceMappingURL=revoke-resource-access.d.ts.map

package/dist/tools/revoke-resource-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke-resource-access.d.ts","sourceRoot":"","sources":["../../src/tools/revoke-resource-access.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAWpD,eAAO,MAAM,oBAAoB,EAAE,cA4BlC,CAAC"}

package/dist/tools/revoke-resource-access.js

@@ -0,0 +1,39 @@
+import { z } from "zod";
+import { resolveAuthForOrigin } from "../auth/resolve-auth.js";
+import { createSdk } from "../sdk/create-sdk.js";
+import { detectEnvironment, normalizeBaseUrl } from "../urls.js";
+import * as schemas from "./schemas.js";
+import { parseToolInput } from "./validation.js";
+const revokeResourceAccessInputSchema = z
+    .object({
+    base_url: z.string().url(),
+    assignment_record_id: z.string().uuid(),
+})
+    .strict();
+export const revokeResourceAccess = {
+    name: "revoke_resource_access",
+    title: "Revoke Resource Access",
+    description: "Delete a single RBAC assignment by assignment record ID.",
+    inputSchema: schemas.revokeResourceAccessToolInputSchema,
+    annotations: {
+        readOnlyHint: false,
+        destructiveHint: true,
+        idempotentHint: false,
+        openWorldHint: true,
+    },
+    audience: "customer",
+    async handler(args) {
+        const input = parseToolInput(revokeResourceAccessInputSchema, args);
+        const baseUrl = normalizeBaseUrl(input.base_url);
+        const auth = await resolveAuthForOrigin(baseUrl);
+        const sdk = createSdk(auth.token, baseUrl);
+        const assignment = await sdk.deleteRbacAssignment(input.assignment_record_id);
+        return {
+            assignment,
+            auth_source: auth.source,
+            base_url: baseUrl,
+            environment: detectEnvironment(baseUrl),
+        };
+    },
+};
+//# sourceMappingURL=revoke-resource-access.js.map

package/dist/tools/revoke-resource-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke-resource-access.js","sourceRoot":"","sources":["../../src/tools/revoke-resource-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,+BAA+B,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,IAAI,EAAE,wBAAwB;IAC9B,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,0DAA0D;IACvE,WAAW,EAAE,OAAO,CAAC,mCAAmC;IACxD,WAAW,EAAE;QACX,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,IAAI;KACpB;IACD,QAAQ,EAAE,UAAU;IACpB,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,cAAc,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAC/C,KAAK,CAAC,oBAAoB,CAC3B,CAAC;QAEF,OAAO;YACL,UAAU;YACV,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;CACF,CAAC"}