@true-and-useful/janee 0.11.3 → 0.13.0

package/dist/cli/index.js

@@ -6,20 +6,27 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 const commander_1 = require("commander");
-const init_1 = require("./commands/init");
+const fs_1 = require("fs");
+const path_1 = require("path");
 const add_1 = require("./commands/add");
-const remove_1 = require("./commands/remove");
-const serve_1 = require("./commands/serve");
+const authority_1 = require("./commands/authority");
+const capability_1 = require("./commands/capability");
+const config_1 = require("./commands/config");
+const diagnose_1 = require("./commands/diagnose");
+const doctor_1 = require("./commands/doctor");
+const doctor_bundle_1 = require("./commands/doctor-bundle");
+const init_1 = require("./commands/init");
 const list_1 = require("./commands/list");
 const logs_1 = require("./commands/logs");
-const sessions_1 = require("./commands/sessions");
+const remove_1 = require("./commands/remove");
 const revoke_1 = require("./commands/revoke");
 const search_1 = require("./commands/search");
+const serve_1 = require("./commands/serve");
+const service_edit_1 = require("./commands/service-edit");
+const sessions_1 = require("./commands/sessions");
 const status_1 = require("./commands/status");
-const authority_1 = require("./commands/authority");
-const capability_1 = require("./commands/capability");
-const fs_1 = require("fs");
-const path_1 = require("path");
+const test_1 = require("./commands/test");
+const whoami_1 = require("./commands/whoami");
 // Read version from package.json
 const packageJsonPath = (0, path_1.join)(__dirname, '../../package.json');
 const packageJson = JSON.parse((0, fs_1.readFileSync)(packageJsonPath, 'utf8'));
@@ -51,6 +58,7 @@ program
     .option('--pem-file <path>', 'Path to private key PEM file (for github-app auth type)')
     .option('--app-id <id>', 'GitHub App ID (for github-app auth type)')
     .option('--installation-id <id>', 'GitHub App installation ID (for github-app auth type)')
+    .option('--test-path <path>', 'Auth-required GET endpoint for testing credentials (e.g. /v1/balance)')
     .option('--exec', 'Add as exec-mode service (CLI tool wrapper, RFC 0001)')
     .option('--allow-commands <cmds...>', 'Allowed executables for exec mode (e.g., bird gh)')
     .option('--env-map <mappings...>', 'Env var mappings (KEY=value or KEY={{credential}})')
@@ -64,6 +72,36 @@ program
     .option('-y, --yes', 'Skip confirmation prompt')
     .option('--json', 'Output as JSON')
     .action(remove_1.removeCommand);
+// Service management subcommands
+const service = program.command('service').description('Manage services');
+service
+    .command('edit <name>')
+    .description('Edit an existing service (update URL, test path, or rotate secrets)')
+    .option('-u, --url <url>', 'Update base URL')
+    .option('--test-path <path>', 'Update test path')
+    .option('-k, --key <key>', 'Rotate bearer key or HMAC apiKey')
+    .option('--api-secret <secret>', 'Rotate HMAC secret')
+    .option('--passphrase <passphrase>', 'Rotate OKX passphrase')
+    .option('--pem-file <path>', 'Rotate GitHub App private key from PEM file')
+    .option('--credentials-file <path>', 'Rotate service account credentials from JSON file')
+    .option('--key-from-env <var>', 'Read key from environment variable')
+    .option('--secret-from-env <var>', 'Read secret from environment variable')
+    .option('--passphrase-from-env <var>', 'Read passphrase from environment variable')
+    .option('--header <pairs...>', 'Update custom auth headers (name=value)')
+    .option('--json', 'Output as JSON')
+    .action(service_edit_1.serviceEditCommand);
+// Config get/set
+const configCmd = program.command('config').description('View or update server settings');
+configCmd
+    .command('get [key]')
+    .description('Show config value(s)')
+    .option('--json', 'Output as JSON')
+    .action(config_1.configGetCommand);
+configCmd
+    .command('set <key> <value>')
+    .description('Set a config value (e.g. server.port 9200)')
+    .option('--json', 'Output as JSON')
+    .action(config_1.configSetCommand);
 program
     .command('serve')
     .description('Start Janee MCP server')
@@ -110,6 +148,44 @@ program
     .description('Show Janee configuration and health status')
     .option('--json', 'Output as JSON')
     .action(status_1.statusCommand);
+program
+    .command('whoami')
+    .description('Show your agent identity and accessible capabilities')
+    .option('--agent <name>', 'Preview access for a specific agent identity')
+    .option('--json', 'Output as JSON')
+    .action(whoami_1.whoamiCommand);
+// Diagnostics
+const diagnose = program.command('diagnose').description('Debug access and configuration issues');
+diagnose
+    .command('access <capability>')
+    .description('Trace why an agent can or cannot access a capability')
+    .option('--agent <name>', 'Agent ID to evaluate (default: admin/CLI)')
+    .option('--method <method>', 'HTTP method for rules evaluation (e.g., GET, POST)')
+    .option('--path <path>', 'Request path for rules evaluation')
+    .option('--json', 'Output as JSON')
+    .action((capability, options) => (0, diagnose_1.diagnoseAccessCommand)(capability, options));
+// Doctor
+const doctor = program.command('doctor').description('System health checks');
+doctor
+    .command('runner <authority-url>')
+    .description('Check runner-to-authority connectivity, auth, and tool forwarding')
+    .option('--runner-key <key>', 'Runner key (or set JANEE_RUNNER_KEY)')
+    .option('--agent <name>', 'Agent identity to test with (default: doctor-probe)')
+    .option('--json', 'Output as JSON')
+    .action((authorityUrl, options) => (0, doctor_1.doctorRunnerCommand)(authorityUrl, options));
+doctor
+    .command('bundle')
+    .description('Export a redacted diagnostics bundle for incident debugging')
+    .option('-o, --output <file>', 'Write bundle to file instead of stdout')
+    .option('--agent <name>', 'Include access summary for this agent')
+    .option('--lines <n>', 'Number of recent denials to include (default: 50)')
+    .action((options) => (0, doctor_bundle_1.doctorBundleCommand)(options));
+program
+    .command('test [service]')
+    .description('Test service connectivity and authentication')
+    .option('--timeout <ms>', 'Request timeout in ms (default: 10000)')
+    .option('--json', 'Output as JSON')
+    .action((service, options) => (0, test_1.testCommand)(service, options));
 program
     .command('search [query]')
     .description('Search the service directory')
@@ -134,6 +210,12 @@ cap
     .option('--no-requires-reason', 'Do not require reason')
     .option('--allow <pattern...>', 'Allow rules (e.g., "GET /v1/*")')
     .option('--deny <pattern...>', 'Deny rules (e.g., "DELETE *")')
+    .option('--allowed-agents <agents...>', 'Restrict to specific agent IDs')
+    .option('--mode <mode>', 'Execution mode: proxy or exec')
+    .option('--allow-commands <cmds...>', 'Allowed executables for exec mode')
+    .option('--env-map <mappings...>', 'Env var mappings (KEY=value or KEY={{credential}})')
+    .option('--work-dir <dir>', 'Working directory for exec mode')
+    .option('--timeout <ms>', 'Execution timeout in ms')
     .option('--json', 'Output as JSON')
     .action(capability_1.capabilityAddCommand);
 cap
@@ -147,6 +229,13 @@ cap
     .option('--allow <pattern...>', 'Replace allow rules')
     .option('--deny <pattern...>', 'Replace deny rules')
     .option('--clear-rules', 'Clear all rules')
+    .option('--allowed-agents <agents...>', 'Restrict to specific agent IDs')
+    .option('--clear-agents', 'Remove all agent restrictions')
+    .option('--mode <mode>', 'Execution mode: proxy or exec')
+    .option('--allow-commands <cmds...>', 'Allowed executables for exec mode')
+    .option('--env-map <mappings...>', 'Env var mappings (KEY=value or KEY={{credential}})')
+    .option('--work-dir <dir>', 'Working directory for exec mode')
+    .option('--timeout <ms>', 'Execution timeout in ms')
     .option('--json', 'Output as JSON')
     .action(capability_1.capabilityEditCommand);
 cap

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;AAEA;;;GAGG;;AAEH,yCAAoC;AACpC,0CAA8C;AAC9C,wCAA4C;AAC5C,8CAAkD;AAClD,4CAAgD;AAChD,0CAA8C;AAC9C,0CAA8C;AAC9C,kDAAsD;AACtD,8CAAkD;AAClD,8CAAkD;AAClD,8CAAkD;AAClD,oDAAwD;AACxD,sDAK+B;AAC/B,2BAAkC;AAClC,+BAA4B;AAE5B,iCAAiC;AACjC,MAAM,eAAe,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;AACtE,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,OAAO,CAAC;AAE/C,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CAAC,kCAAkC,CAAC;KAC/C,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,WAAW;AACX,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,oDAAoD,CAAC;KACjE,MAAM,CAAC,kBAAW,CAAC,CAAC;AAEvB,OAAO;KACJ,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,iDAAiD,CAAC;KAC9D,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;KACpD,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;KACpD,MAAM,CAAC,oBAAoB,EAAE,qIAAqI,CAAC;KACnK,MAAM,CAAC,uBAAuB,EAAE,kCAAkC,CAAC;KACnE,MAAM,CAAC,2BAA2B,EAAE,2BAA2B,CAAC;KAChE,MAAM,CAAC,sBAAsB,EAAE,wCAAwC,CAAC;KACxE,MAAM,CAAC,yBAAyB,EAAE,2CAA2C,CAAC;KAC9E,MAAM,CAAC,6BAA6B,EAAE,2CAA2C,CAAC;KAClF,MAAM,CAAC,2BAA2B,EAAE,mEAAmE,CAAC;KACxG,MAAM,CAAC,oBAAoB,EAAE,8CAA8C,CAAC;KAC5E,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC;KAC7E,MAAM,CAAC,mBAAmB,EAAE,yDAAyD,CAAC;KACtF,MAAM,CAAC,eAAe,EAAE,0CAA0C,CAAC;KACnE,MAAM,CAAC,wBAAwB,EAAE,uDAAuD,CAAC;KACzF,MAAM,CAAC,QAAQ,EAAE,uDAAuD,CAAC;KACzE,MAAM,CAAC,4BAA4B,EAAE,mDAAmD,CAAC;KACzF,MAAM,CAAC,yBAAyB,EAAE,oDAAoD,CAAC;KACvF,MAAM,CAAC,kBAAkB,EAAE,0CAA0C,CAAC;KACtE,MAAM,CAAC,gBAAgB,EAAE,yDAAyD,CAAC;KACnF,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,gBAAU,CAAC,CAAC;AAEtB,OAAO;KACJ,OAAO,CAAC,kBAAkB,CAAC;KAC3B,WAAW,CAAC,6BAA6B,CAAC;KAC1C,MAAM,CAAC,WAAW,EAAE,0BAA0B,CAAC;KAC/C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,sBAAa,CAAC,CAAC;AAEzB,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,wBAAwB,CAAC;KACrC,MAAM,CAAC,wBAAwB,EAAE,6BAA6B,EAAE,OAAO,CAAC;KACxE,MAAM,CAAC,qBAAqB,EAAE,4CAA4C,EAAE,MAAM,CAAC;KACnF,MAAM,CAAC,eAAe,EAAE,sCAAsC,EAAE,WAAW,CAAC;KAC5E,MAAM,CAAC,mBAAmB,EAAE,iEAAiE,CAAC;KAC9F,MAAM,CAAC,oBAAoB,EAAE,4DAA4D,CAAC;KAC1F,MAAM,CAAC,kBAAkB,EAAE,sCAAsC,EAAE,cAAc,CAAC;KAClF,MAAM,CAAC,oBAAoB,EAAE,gDAAgD,EAAE,KAAK,CAAC;KACrF,MAAM,CAAC,6BAA6B,EAAE,0CAA0C,CAAC;KACjF,MAAM,CAAC,oBAAY,CAAC,CAAC;AAGxB,OAAO;KACJ,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,yDAAyD,CAAC;KACtE,MAAM,CAAC,qBAAqB,EAAE,2CAA2C,EAAE,MAAM,CAAC;KAClF,MAAM,CAAC,eAAe,EAAE,sCAAsC,EAAE,WAAW,CAAC;KAC5E,MAAM,CAAC,oBAAoB,EAAE,6CAA6C,CAAC;KAC3E,MAAM,CAAC,4BAAgB,CAAC,CAAC;AAE5B,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,kBAAW,CAAC,CAAC;AAEvB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,iBAAiB,CAAC;KAC9B,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC;KAClD,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,EAAE,IAAI,CAAC;KACpE,MAAM,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;KACnD,MAAM,CAAC,QAAQ,EAAE,8CAA8C,CAAC;KAChE,MAAM,CAAC,kBAAW,CAAC,CAAC;AAEvB,OAAO;KACJ,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,sBAAsB,CAAC;KACnC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,0BAAe,CAAC,CAAC;AAE3B,OAAO;KACJ,OAAO,CAAC,kBAAkB,CAAC;KAC3B,WAAW,CAAC,8BAA8B,CAAC;KAC3C,MAAM,CAAC,sBAAa,CAAC,CAAC;AAEzB,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,4CAA4C,CAAC;KACzD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,sBAAa,CAAC,CAAC;AAEzB,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,8BAA8B,CAAC;KAC3C,MAAM,CAAC,eAAe,EAAE,oCAAoC,CAAC;KAC7D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAA,sBAAa,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAE7D,oCAAoC;AACpC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;AAEtE,GAAG;KACA,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,uBAAuB,CAAC;KACpC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,kCAAqB,CAAC,CAAC;AAEjC,GAAG;KACA,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,sBAAsB,CAAC;KACnC,cAAc,CAAC,yBAAyB,EAAE,gBAAgB,CAAC;KAC3D,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,EAAE,IAAI,CAAC;KAC3D,MAAM,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;KACjD,MAAM,CAAC,mBAAmB,EAAE,yBAAyB,CAAC;KACtD,MAAM,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;KAC1D,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;KACvD,MAAM,CAAC,sBAAsB,EAAE,iCAAiC,CAAC;KACjE,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;KAC9D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,iCAAoB,CAAC,CAAC;AAEhC,GAAG;KACA,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,6BAA6B,CAAC;KAC1C,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;KAC5D,MAAM,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;KAC/C,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;KACnD,MAAM,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;KAC1D,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;KACvD,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;KACrD,MAAM,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;KACnD,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC;KAC1C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,kCAAqB,CAAC,CAAC;AAEjC,GAAG;KACA,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,qBAAqB,CAAC;KAClC,MAAM,CAAC,WAAW,EAAE,0BAA0B,CAAC;KAC/C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,oCAAuB,CAAC,CAAC;AAEnC,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;AAEA;;;GAGG;;AAEH,yCAAoC;AACpC,2BAAkC;AAClC,+BAA4B;AAE5B,wCAA4C;AAC5C,oDAAwD;AACxD,sDAK+B;AAC/B,8CAG2B;AAC3B,kDAA4D;AAC5D,8CAAwD;AACxD,4DAA+D;AAC/D,0CAA8C;AAC9C,0CAA8C;AAC9C,0CAA8C;AAC9C,8CAAkD;AAClD,8CAAkD;AAClD,8CAAkD;AAClD,4CAAgD;AAChD,0DAA6D;AAC7D,kDAAsD;AACtD,8CAAkD;AAClD,0CAA8C;AAC9C,8CAAkD;AAElD,iCAAiC;AACjC,MAAM,eAAe,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;AACtE,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,OAAO,CAAC;AAE/C,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CAAC,kCAAkC,CAAC;KAC/C,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,WAAW;AACX,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,oDAAoD,CAAC;KACjE,MAAM,CAAC,kBAAW,CAAC,CAAC;AAEvB,OAAO;KACJ,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,iDAAiD,CAAC;KAC9D,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;KACpD,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;KACpD,MAAM,CAAC,oBAAoB,EAAE,qIAAqI,CAAC;KACnK,MAAM,CAAC,uBAAuB,EAAE,kCAAkC,CAAC;KACnE,MAAM,CAAC,2BAA2B,EAAE,2BAA2B,CAAC;KAChE,MAAM,CAAC,sBAAsB,EAAE,wCAAwC,CAAC;KACxE,MAAM,CAAC,yBAAyB,EAAE,2CAA2C,CAAC;KAC9E,MAAM,CAAC,6BAA6B,EAAE,2CAA2C,CAAC;KAClF,MAAM,CAAC,2BAA2B,EAAE,mEAAmE,CAAC;KACxG,MAAM,CAAC,oBAAoB,EAAE,8CAA8C,CAAC;KAC5E,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC;KAC7E,MAAM,CAAC,mBAAmB,EAAE,yDAAyD,CAAC;KACtF,MAAM,CAAC,eAAe,EAAE,0CAA0C,CAAC;KACnE,MAAM,CAAC,wBAAwB,EAAE,uDAAuD,CAAC;KACzF,MAAM,CAAC,oBAAoB,EAAE,uEAAuE,CAAC;KACrG,MAAM,CAAC,QAAQ,EAAE,uDAAuD,CAAC;KACzE,MAAM,CAAC,4BAA4B,EAAE,mDAAmD,CAAC;KACzF,MAAM,CAAC,yBAAyB,EAAE,oDAAoD,CAAC;KACvF,MAAM,CAAC,kBAAkB,EAAE,0CAA0C,CAAC;KACtE,MAAM,CAAC,gBAAgB,EAAE,yDAAyD,CAAC;KACnF,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,gBAAU,CAAC,CAAC;AAEtB,OAAO;KACJ,OAAO,CAAC,kBAAkB,CAAC;KAC3B,WAAW,CAAC,6BAA6B,CAAC;KAC1C,MAAM,CAAC,WAAW,EAAE,0BAA0B,CAAC;KAC/C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,sBAAa,CAAC,CAAC;AAEzB,iCAAiC;AACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAE1E,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,qEAAqE,CAAC;KAClF,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;KAC5C,MAAM,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;KAChD,MAAM,CAAC,iBAAiB,EAAE,kCAAkC,CAAC;KAC7D,MAAM,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;KACrD,MAAM,CAAC,2BAA2B,EAAE,uBAAuB,CAAC;KAC5D,MAAM,CAAC,mBAAmB,EAAE,6CAA6C,CAAC;KAC1E,MAAM,CAAC,2BAA2B,EAAE,mDAAmD,CAAC;KACxF,MAAM,CAAC,sBAAsB,EAAE,oCAAoC,CAAC;KACpE,MAAM,CAAC,yBAAyB,EAAE,uCAAuC,CAAC;KAC1E,MAAM,CAAC,6BAA6B,EAAE,2CAA2C,CAAC;KAClF,MAAM,CAAC,qBAAqB,EAAE,yCAAyC,CAAC;KACxE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,iCAAkB,CAAC,CAAC;AAE9B,iBAAiB;AACjB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,gCAAgC,CAAC,CAAC;AAE1F,SAAS;KACN,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,sBAAsB,CAAC;KACnC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,yBAAgB,CAAC,CAAC;AAE5B,SAAS;KACN,OAAO,CAAC,mBAAmB,CAAC;KAC5B,WAAW,CAAC,4CAA4C,CAAC;KACzD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,yBAAgB,CAAC,CAAC;AAE5B,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,wBAAwB,CAAC;KACrC,MAAM,CAAC,wBAAwB,EAAE,6BAA6B,EAAE,OAAO,CAAC;KACxE,MAAM,CAAC,qBAAqB,EAAE,4CAA4C,EAAE,MAAM,CAAC;KACnF,MAAM,CAAC,eAAe,EAAE,sCAAsC,EAAE,WAAW,CAAC;KAC5E,MAAM,CAAC,mBAAmB,EAAE,iEAAiE,CAAC;KAC9F,MAAM,CAAC,oBAAoB,EAAE,4DAA4D,CAAC;KAC1F,MAAM,CAAC,kBAAkB,EAAE,sCAAsC,EAAE,cAAc,CAAC;KAClF,MAAM,CAAC,oBAAoB,EAAE,gDAAgD,EAAE,KAAK,CAAC;KACrF,MAAM,CAAC,6BAA6B,EAAE,0CAA0C,CAAC;KACjF,MAAM,CAAC,oBAAY,CAAC,CAAC;AAGxB,OAAO;KACJ,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,yDAAyD,CAAC;KACtE,MAAM,CAAC,qBAAqB,EAAE,2CAA2C,EAAE,MAAM,CAAC;KAClF,MAAM,CAAC,eAAe,EAAE,sCAAsC,EAAE,WAAW,CAAC;KAC5E,MAAM,CAAC,oBAAoB,EAAE,6CAA6C,CAAC;KAC3E,MAAM,CAAC,4BAAgB,CAAC,CAAC;AAE5B,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,kBAAW,CAAC,CAAC;AAEvB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,iBAAiB,CAAC;KAC9B,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC;KAClD,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,EAAE,IAAI,CAAC;KACpE,MAAM,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;KACnD,MAAM,CAAC,QAAQ,EAAE,8CAA8C,CAAC;KAChE,MAAM,CAAC,kBAAW,CAAC,CAAC;AAEvB,OAAO;KACJ,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,sBAAsB,CAAC;KACnC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,0BAAe,CAAC,CAAC;AAE3B,OAAO;KACJ,OAAO,CAAC,kBAAkB,CAAC;KAC3B,WAAW,CAAC,8BAA8B,CAAC;KAC3C,MAAM,CAAC,sBAAa,CAAC,CAAC;AAEzB,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,4CAA4C,CAAC;KACzD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,sBAAa,CAAC,CAAC;AAEzB,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,sDAAsD,CAAC;KACnE,MAAM,CAAC,gBAAgB,EAAE,8CAA8C,CAAC;KACxE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,sBAAa,CAAC,CAAC;AAEzB,cAAc;AACd,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,uCAAuC,CAAC,CAAC;AAElG,QAAQ;KACL,OAAO,CAAC,qBAAqB,CAAC;KAC9B,WAAW,CAAC,sDAAsD,CAAC;KACnE,MAAM,CAAC,gBAAgB,EAAE,2CAA2C,CAAC;KACrE,MAAM,CAAC,mBAAmB,EAAE,oDAAoD,CAAC;KACjF,MAAM,CAAC,eAAe,EAAE,mCAAmC,CAAC;KAC5D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,CAAC,UAAkB,EAAE,OAAY,EAAE,EAAE,CAAC,IAAA,gCAAqB,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5F,SAAS;AACT,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;AAE7E,MAAM;KACH,OAAO,CAAC,wBAAwB,CAAC;KACjC,WAAW,CAAC,mEAAmE,CAAC;KAChF,MAAM,CAAC,oBAAoB,EAAE,sCAAsC,CAAC;KACpE,MAAM,CAAC,gBAAgB,EAAE,qDAAqD,CAAC;KAC/E,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,CAAC,YAAoB,EAAE,OAAY,EAAE,EAAE,CAAC,IAAA,4BAAmB,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;AAE9F,MAAM;KACH,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,MAAM,CAAC,qBAAqB,EAAE,wCAAwC,CAAC;KACvE,MAAM,CAAC,gBAAgB,EAAE,uCAAuC,CAAC;KACjE,MAAM,CAAC,aAAa,EAAE,mDAAmD,CAAC;KAC1E,MAAM,CAAC,CAAC,OAAY,EAAE,EAAE,CAAC,IAAA,mCAAmB,EAAC,OAAO,CAAC,CAAC,CAAC;AAE1D,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,8CAA8C,CAAC;KAC3D,MAAM,CAAC,gBAAgB,EAAE,wCAAwC,CAAC;KAClE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAA,kBAAW,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE/D,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,8BAA8B,CAAC;KAC3C,MAAM,CAAC,eAAe,EAAE,oCAAoC,CAAC;KAC7D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAA,sBAAa,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAE7D,oCAAoC;AACpC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;AAEtE,GAAG;KACA,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,uBAAuB,CAAC;KACpC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,kCAAqB,CAAC,CAAC;AAEjC,GAAG;KACA,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,sBAAsB,CAAC;KACnC,cAAc,CAAC,yBAAyB,EAAE,gBAAgB,CAAC;KAC3D,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,EAAE,IAAI,CAAC;KAC3D,MAAM,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;KACjD,MAAM,CAAC,mBAAmB,EAAE,yBAAyB,CAAC;KACtD,MAAM,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;KAC1D,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;KACvD,MAAM,CAAC,sBAAsB,EAAE,iCAAiC,CAAC;KACjE,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;KAC9D,MAAM,CAAC,8BAA8B,EAAE,gCAAgC,CAAC;KACxE,MAAM,CAAC,eAAe,EAAE,+BAA+B,CAAC;KACxD,MAAM,CAAC,4BAA4B,EAAE,mCAAmC,CAAC;KACzE,MAAM,CAAC,yBAAyB,EAAE,oDAAoD,CAAC;KACvF,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,CAAC;KAC7D,MAAM,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;KACnD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,iCAAoB,CAAC,CAAC;AAEhC,GAAG;KACA,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,6BAA6B,CAAC;KAC1C,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;KAC5D,MAAM,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;KAC/C,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;KACnD,MAAM,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;KAC1D,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;KACvD,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;KACrD,MAAM,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;KACnD,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC;KAC1C,MAAM,CAAC,8BAA8B,EAAE,gCAAgC,CAAC;KACxE,MAAM,CAAC,gBAAgB,EAAE,+BAA+B,CAAC;KACzD,MAAM,CAAC,eAAe,EAAE,+BAA+B,CAAC;KACxD,MAAM,CAAC,4BAA4B,EAAE,mCAAmC,CAAC;KACzE,MAAM,CAAC,yBAAyB,EAAE,oDAAoD,CAAC;KACvF,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,CAAC;KAC7D,MAAM,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;KACnD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,kCAAqB,CAAC,CAAC;AAEjC,GAAG;KACA,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,qBAAqB,CAAC;KAClC,MAAM,CAAC,WAAW,EAAE,0BAA0B,CAAC;KAC/C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,oCAAuB,CAAC,CAAC;AAEnC,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/core/auth.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Shared auth header injection for all Janee interfaces.
+ * Extracted from serve-mcp.ts so CLI test, MCP tools, and REST endpoints
+ * all build auth headers the same way.
+ */
+import { URL } from 'url';
+import { ServiceConfig } from './mcp-server.js';
+export interface AuthHeadersContext {
+    method: string;
+    targetUrl: URL;
+    body?: string;
+}
+export interface AuthHeadersResult {
+    headers: Record<string, string>;
+    /** HMAC-MEXC appends signature params to the URL */
+    urlParams?: Record<string, string>;
+}
+/**
+ * Build auth headers for a service request.
+ * Handles all auth types: bearer, headers, hmac-*, service-account, github-app.
+ *
+ * Async because service-account and github-app need to fetch tokens.
+ */
+export declare function buildAuthHeaders(serviceName: string, serviceConfig: ServiceConfig, ctx: AuthHeadersContext): Promise<AuthHeadersResult>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/core/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/core/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAE1B,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,GAAG,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,aAAa,EAC5B,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,iBAAiB,CAAC,CAsF5B"}

package/dist/core/auth.js

@@ -0,0 +1,136 @@
+"use strict";
+/**
+ * Shared auth header injection for all Janee interfaces.
+ * Extracted from serve-mcp.ts so CLI test, MCP tools, and REST endpoints
+ * all build auth headers the same way.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildAuthHeaders = buildAuthHeaders;
+/**
+ * Build auth headers for a service request.
+ * Handles all auth types: bearer, headers, hmac-*, service-account, github-app.
+ *
+ * Async because service-account and github-app need to fetch tokens.
+ */
+async function buildAuthHeaders(serviceName, serviceConfig, ctx) {
+    const headers = {};
+    let urlParams;
+    if (serviceConfig.auth.type === 'bearer' && serviceConfig.auth.key) {
+        headers['Authorization'] = `Bearer ${serviceConfig.auth.key}`;
+    }
+    else if (serviceConfig.auth.type === 'headers' && serviceConfig.auth.headers) {
+        Object.assign(headers, serviceConfig.auth.headers);
+    }
+    else if (serviceConfig.auth.type === 'hmac-mexc' && serviceConfig.auth.apiKey && serviceConfig.auth.apiSecret) {
+        const { signMEXC } = await Promise.resolve().then(() => __importStar(require('./signing.js')));
+        const result = signMEXC({
+            apiKey: serviceConfig.auth.apiKey,
+            apiSecret: serviceConfig.auth.apiSecret,
+            queryString: ctx.targetUrl.searchParams.toString()
+        });
+        Object.assign(headers, result.headers);
+        if (result.urlParams)
+            urlParams = result.urlParams;
+    }
+    else if (serviceConfig.auth.type === 'hmac-bybit' && serviceConfig.auth.apiKey && serviceConfig.auth.apiSecret) {
+        const { signBybit } = await Promise.resolve().then(() => __importStar(require('./signing.js')));
+        const result = signBybit({
+            apiKey: serviceConfig.auth.apiKey,
+            apiSecret: serviceConfig.auth.apiSecret,
+            method: ctx.method,
+            queryString: ctx.targetUrl.searchParams.toString(),
+            body: ctx.body
+        });
+        Object.assign(headers, result.headers);
+    }
+    else if (serviceConfig.auth.type === 'hmac-okx' && serviceConfig.auth.apiKey && serviceConfig.auth.apiSecret && serviceConfig.auth.passphrase) {
+        const { signOKX } = await Promise.resolve().then(() => __importStar(require('./signing.js')));
+        const reqPath = ctx.targetUrl.pathname + (ctx.targetUrl.search || '');
+        const result = signOKX({
+            apiKey: serviceConfig.auth.apiKey,
+            apiSecret: serviceConfig.auth.apiSecret,
+            passphrase: serviceConfig.auth.passphrase,
+            method: ctx.method,
+            requestPath: reqPath,
+            body: ctx.body
+        });
+        Object.assign(headers, result.headers);
+    }
+    else if (serviceConfig.auth.type === 'service-account' && serviceConfig.auth.credentials && serviceConfig.auth.scopes) {
+        const { getAccessToken, validateServiceAccountCredentials, clearCachedToken } = await Promise.resolve().then(() => __importStar(require('./service-account.js')));
+        try {
+            const credentials = JSON.parse(serviceConfig.auth.credentials);
+            validateServiceAccountCredentials(credentials);
+            const accessToken = await getAccessToken(serviceName, credentials, serviceConfig.auth.scopes);
+            headers['Authorization'] = `Bearer ${accessToken}`;
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.includes('401')) {
+                clearCachedToken(serviceName, serviceConfig.auth.scopes);
+                const credentials = JSON.parse(serviceConfig.auth.credentials);
+                const accessToken = await getAccessToken(serviceName, credentials, serviceConfig.auth.scopes);
+                headers['Authorization'] = `Bearer ${accessToken}`;
+            }
+            else {
+                throw error;
+            }
+        }
+    }
+    else if (serviceConfig.auth.type === 'github-app' && serviceConfig.auth.appId && serviceConfig.auth.privateKey && serviceConfig.auth.installationId) {
+        const { getInstallationToken, clearCachedInstallationToken } = await Promise.resolve().then(() => __importStar(require('./github-app.js')));
+        const ghCreds = {
+            appId: serviceConfig.auth.appId,
+            privateKey: serviceConfig.auth.privateKey,
+            installationId: serviceConfig.auth.installationId,
+        };
+        try {
+            const installationToken = await getInstallationToken(serviceName, ghCreds);
+            headers['Authorization'] = `Bearer ${installationToken}`;
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.includes('401')) {
+                clearCachedInstallationToken(serviceName);
+                const installationToken = await getInstallationToken(serviceName, ghCreds);
+                headers['Authorization'] = `Bearer ${installationToken}`;
+            }
+            else {
+                throw error;
+            }
+        }
+    }
+    return { headers, urlParams };
+}
+//# sourceMappingURL=auth.js.map

package/dist/core/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/core/auth.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyBH,4CA0FC;AAhGD;;;;;GAKG;AACI,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,aAA4B,EAC5B,GAAuB;IAEvB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,SAA6C,CAAC;IAElD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACnE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAEhE,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAErD,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAChH,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,cAAc,GAAC,CAAC;QAClD,MAAM,MAAM,GAAkB,QAAQ,CAAC;YACrC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM;YACjC,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS;YACvC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE;SACnD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,SAAS;YAAE,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAErD,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjH,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,cAAc,GAAC,CAAC;QACnD,MAAM,MAAM,GAAkB,SAAS,CAAC;YACtC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM;YACjC,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS;YACvC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE;YAClD,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAEzC,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChJ,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,cAAc,GAAC,CAAC;QACjD,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,GAAkB,OAAO,CAAC;YACpC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM;YACjC,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS;YACvC,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,UAAU;YACzC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW,EAAE,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAEzC,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACxH,MAAM,EAAE,cAAc,EAAE,iCAAiC,EAAE,gBAAgB,EAAE,GAAG,wDAAa,sBAAsB,GAAC,CAAC;QAErH,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAQ,CAAC;YACtE,iCAAiC,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,MAAO,CAAC,CAAC;YAC/F,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,WAAW,EAAE,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5D,gBAAgB,CAAC,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,MAAO,CAAC,CAAC;gBAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAQ,CAAC;gBACtE,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,MAAO,CAAC,CAAC;gBAC/F,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,WAAW,EAAE,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IAEH,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtJ,MAAM,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,GAAG,wDAAa,iBAAiB,GAAC,CAAC;QAE/F,MAAM,OAAO,GAAQ;YACnB,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK;YAC/B,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,UAAU;YACzC,cAAc,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc;SAClD,CAAC;QACF,IAAI,CAAC;YACH,MAAM,iBAAiB,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC3E,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,iBAAiB,EAAE,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5D,4BAA4B,CAAC,WAAW,CAAC,CAAC;gBAC1C,MAAM,iBAAiB,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBAC3E,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,iBAAiB,EAAE,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC"}

package/dist/core/authority.d.ts

@@ -1,4 +1,5 @@
-import express from 'express';
+import express from "express";
+import { ServiceTestResult } from "./health.js";
 export interface RunnerIdentity {
     runnerId: string;
     environment?: string;
@@ -40,6 +41,9 @@ export interface ExecCompleteRequest {
 export interface AuthorityExecHooks {
     authorizeExec: (req: ExecAuthorizeRequest) => Promise<ExecAuthorizeResponse>;
     completeExec: (req: ExecCompleteRequest) => Promise<void>;
+    testService?: (serviceName?: string, options?: {
+        timeout?: number;
+    }) => Promise<ServiceTestResult | ServiceTestResult[]>;
 }
 export declare function createAuthorityApp(apiKey: string, hooks: AuthorityExecHooks): express.Express;
 /**

package/dist/core/authority.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../src/core/authority.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAK9B,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE;QACX,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,CAAC,GAAG,EAAE,oBAAoB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7E,YAAY,EAAE,CAAC,GAAG,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAoD7F;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CAAE,EACtO,WAAW,EAAE;IAAE,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACpE,kBAAkB,CAoFpB;AAED,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CAiBhC;AAED,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAcf"}
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../src/core/authority.ts"],"names":[],"mappings":"AACA,OAAO,OAAO,MAAM,SAAS,CAAC;AAQ9B,OAAO,EAAE,iBAAiB,EAAyB,MAAM,aAAa,CAAC;AAEvE,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE;QACX,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,CAAC,GAAG,EAAE,oBAAoB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7E,YAAY,EAAE,CAAC,GAAG,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,CACZ,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAC3B,OAAO,CAAC,iBAAiB,GAAG,iBAAiB,EAAE,CAAC,CAAC;CACvD;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,OAAO,CAsFjB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE;IACN,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,YAAY,EAAE,KAAK,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC,CAAC;CACJ,EACD,WAAW,EAAE;IAAE,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACpE,kBAAkB,CA6IpB;AAED,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CAoBhC;AAED,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAiBf"}

package/dist/core/authority.js

@@ -7,57 +7,87 @@ exports.createAuthorityApp = createAuthorityApp;
 exports.buildAuthorityHooks = buildAuthorityHooks;
 exports.authorityAuthorizeExec = authorityAuthorizeExec;
 exports.authorityCompleteExec = authorityCompleteExec;
-const express_1 = __importDefault(require("express"));
 const crypto_1 = require("crypto");
+const express_1 = __importDefault(require("express"));
 const exec_js_1 = require("./exec.js");
 const github_app_js_1 = require("./github-app.js");
+const health_js_1 = require("./health.js");
 function createAuthorityApp(apiKey, hooks) {
     const app = (0, express_1.default)();
-    app.use(express_1.default.json({ limit: '512kb' }));
+    app.use(express_1.default.json({ limit: "512kb" }));
     app.use((req, res, next) => {
-        if (req.path === '/v1/health') {
+        if (req.path === "/v1/health") {
             next();
             return;
         }
-        const provided = req.header('x-janee-runner-key');
-        if (!provided || provided.length !== apiKey.length ||
+        const provided = req.header("x-janee-runner-key");
+        if (!provided ||
+            provided.length !== apiKey.length ||
             !(0, crypto_1.timingSafeEqual)(Buffer.from(provided), Buffer.from(apiKey))) {
-            res.status(401).json({ error: 'Unauthorized runner request' });
+            res.status(401).json({ error: "Unauthorized runner request" });
             return;
         }
         next();
     });
-    app.get('/v1/health', (_req, res) => {
-        res.status(200).json({ ok: true, mode: 'authority' });
+    app.get("/v1/health", (_req, res) => {
+        res.status(200).json({ ok: true, mode: "authority" });
     });
-    app.post('/v1/exec/authorize', async (req, res) => {
+    app.post("/v1/exec/authorize", async (req, res) => {
         try {
             const body = req.body;
-            if (!body?.runner?.runnerId || !Array.isArray(body?.command) || body.command.length === 0 || !body.capabilityId) {
-                res.status(400).json({ error: 'Invalid authorize request' });
+            if (!body?.runner?.runnerId ||
+                !Array.isArray(body?.command) ||
+                body.command.length === 0 ||
+                !body.capabilityId) {
+                res.status(400).json({ error: "Invalid authorize request" });
                 return;
             }
             const response = await hooks.authorizeExec(body);
             res.status(200).json(response);
         }
         catch (error) {
-            res.status(403).json({ error: error instanceof Error ? error.message : 'Authorization failed' });
+            res
+                .status(403)
+                .json({
+                error: error instanceof Error ? error.message : "Authorization failed",
+            });
         }
     });
-    app.post('/v1/exec/complete', async (req, res) => {
+    app.post("/v1/exec/complete", async (req, res) => {
         try {
             const body = req.body;
             if (!body?.grantId) {
-                res.status(400).json({ error: 'grantId is required' });
+                res.status(400).json({ error: "grantId is required" });
                 return;
             }
             await hooks.completeExec(body);
             res.status(200).json({ ok: true });
         }
         catch (error) {
-            res.status(500).json({ error: error instanceof Error ? error.message : 'completion failed' });
+            res
+                .status(500)
+                .json({
+                error: error instanceof Error ? error.message : "completion failed",
+            });
         }
     });
+    if (hooks.testService) {
+        app.post("/v1/test", async (req, res) => {
+            try {
+                const result = await hooks.testService(req.body?.service, {
+                    timeout: req.body?.timeout,
+                });
+                res.status(200).json(result);
+            }
+            catch (error) {
+                res
+                    .status(500)
+                    .json({
+                    error: error instanceof Error ? error.message : "Test failed",
+                });
+            }
+        });
+    }
     return app;
 }
 /**
@@ -67,28 +97,44 @@ function createAuthorityApp(apiKey, hooks) {
 function buildAuthorityHooks(config, auditLogger) {
     const grantCache = new Map();
     return {
+        testService: async (serviceName, options) => {
+            if (serviceName) {
+                const svc = config.services[serviceName];
+                if (!svc)
+                    throw new Error(`Unknown service: ${serviceName}`);
+                return (0, health_js_1.testServiceConnection)(serviceName, svc, options || {});
+            }
+            const results = await Promise.all(Object.entries(config.services).map(([name, svc]) => (0, health_js_1.testServiceConnection)(name, svc, options || {})));
+            return results;
+        },
         authorizeExec: async (req) => {
             const cap = config.capabilities.find((c) => c.name === req.capabilityId);
             if (!cap)
                 throw new Error(`Unknown capability: ${req.capabilityId}`);
-            if (cap.mode !== 'exec')
-                throw new Error('Capability is not exec-mode');
-            if (cap.allowedAgents && cap.allowedAgents.length > 0 && req.agentId && !cap.allowedAgents.includes(req.agentId)) {
+            if (cap.mode !== "exec")
+                throw new Error("Capability is not exec-mode");
+            if (cap.allowedAgents &&
+                cap.allowedAgents.length > 0 &&
+                req.agentId &&
+                !cap.allowedAgents.includes(req.agentId)) {
                 throw new Error(`Agent ${req.agentId} is not allowed for capability ${cap.name}`);
             }
             const cmdCheck = (0, exec_js_1.validateCommand)(req.command, cap.allowCommands || []);
             if (!cmdCheck.allowed) {
-                throw new Error(cmdCheck.reason || 'Command denied by policy');
+                throw new Error(cmdCheck.reason || "Command denied by policy");
             }
             const service = config.services[cap.service];
             if (!service)
                 throw new Error(`Service not found: ${cap.service}`);
-            let credential = '';
+            let credential = "";
             let extraCredentials;
-            if (service.auth.type === 'bearer') {
-                credential = service.auth.key || '';
+            if (service.auth.type === "bearer") {
+                credential = service.auth.key || "";
             }
-            else if (service.auth.type === 'github-app' && service.auth.appId && service.auth.privateKey && service.auth.installationId) {
+            else if (service.auth.type === "github-app" &&
+                service.auth.appId &&
+                service.auth.privateKey &&
+                service.auth.installationId) {
                 const ghCreds = {
                     appId: service.auth.appId,
                     privateKey: service.auth.privateKey,
@@ -96,7 +142,9 @@ function buildAuthorityHooks(config, auditLogger) {
                 };
                 credential = await (0, github_app_js_1.getInstallationToken)(cap.service, ghCreds);
             }
-            else if (service.auth.type === 'hmac-mexc' || service.auth.type === 'hmac-bybit' || service.auth.type === 'hmac-okx') {
+            else if (service.auth.type === "hmac-mexc" ||
+                service.auth.type === "hmac-bybit" ||
+                service.auth.type === "hmac-okx") {
                 extraCredentials = {
                     apiKey: service.auth.apiKey,
                     apiSecret: service.auth.apiSecret,
@@ -104,10 +152,17 @@ function buildAuthorityHooks(config, auditLogger) {
                 };
             }
             const envInjections = (0, exec_js_1.buildExecEnv)(cap.env || {}, credential, extraCredentials);
-            const scrubValues = [credential, extraCredentials?.apiKey, extraCredentials?.apiSecret, extraCredentials?.passphrase]
-                .filter((v) => Boolean(v));
+            const scrubValues = [
+                credential,
+                extraCredentials?.apiKey,
+                extraCredentials?.apiSecret,
+                extraCredentials?.passphrase,
+            ].filter((v) => Boolean(v));
             const grantId = (0, crypto_1.randomUUID)();
-            grantCache.set(grantId, { startedAt: Date.now(), capabilityId: cap.name });
+            grantCache.set(grantId, {
+                startedAt: Date.now(),
+                capabilityId: cap.name,
+            });
             const effectiveTimeoutMs = Math.min(req.timeoutMs || cap.timeout || 30000, cap.timeout || 30000);
             return {
                 grantId,
@@ -127,8 +182,8 @@ function buildAuthorityHooks(config, auditLogger) {
             const grant = grantCache.get(req.grantId);
             grantCache.delete(req.grantId);
             auditLogger.log({
-                service: grant?.capabilityId || 'unknown',
-                method: 'EXEC_COMPLETE',
+                service: grant?.capabilityId || "unknown",
+                method: "EXEC_COMPLETE",
                 path: req.grantId,
                 headers: {},
                 body: undefined,
@@ -147,12 +202,12 @@ function buildAuthorityHooks(config, auditLogger) {
     };
 }
 async function authorityAuthorizeExec(authorityUrl, runnerKey, request) {
-    const res = await fetch(`${authorityUrl.replace(/\/$/, '')}/v1/exec/authorize`, {
-        method: 'POST',
+    const res = await fetch(`${authorityUrl.replace(/\/$/, "")}/v1/exec/authorize`, {
+        method: "POST",
         headers: {
-            'content-type': 'application/json',
-            'x-janee-runner-key': runnerKey,
-            'x-janee-request-id': request.requestId || (0, crypto_1.randomUUID)(),
+            "content-type": "application/json",
+            "x-janee-runner-key": runnerKey,
+            "x-janee-request-id": request.requestId || (0, crypto_1.randomUUID)(),
         },
         body: JSON.stringify(request),
     });
@@ -163,11 +218,11 @@ async function authorityAuthorizeExec(authorityUrl, runnerKey, request) {
     return res.json();
 }
 async function authorityCompleteExec(authorityUrl, runnerKey, request) {
-    const res = await fetch(`${authorityUrl.replace(/\/$/, '')}/v1/exec/complete`, {
-        method: 'POST',
+    const res = await fetch(`${authorityUrl.replace(/\/$/, "")}/v1/exec/complete`, {
+        method: "POST",
         headers: {
-            'content-type': 'application/json',
-            'x-janee-runner-key': runnerKey,
+            "content-type": "application/json",
+            "x-janee-runner-key": runnerKey,
         },
         body: JSON.stringify(request),
     });