@trusty-squire/mcp 0.7.19 → 0.8.0-rc.1

package/dist/tools/list-services.js

@@ -1,55 +0,0 @@
-import { z } from "zod";
-import { assertApi } from "./index.js";
-const inputSchema = z.object({
-    category: z.string().min(1).max(60).optional(),
-    query: z.string().min(1).max(120).optional(),
-});
-const DESCRIPTION = `List SaaS services that Trusty Squire knows how to provision automatically.
-Returns the canonical service id, display name, category, and homepage
-for each adapter, optionally filtered by category and/or text query.
-
-WHEN TO CALL THIS TOOL:
-- Before suggesting that the user "go sign up at example.com" — check if
-  there's a Squire adapter first
-- When the user asks "what email service should we use?" or similar
-- When you need to confirm a service is supported before calling provision()
-
-BEHAVIOR:
-- Returns the most-recently-published version of each non-disabled adapter
-- Filter by category (e.g. "email", "monitoring") if you know it
-- Filter by query (substring match against service id and display_name)
-- Results are not ranked — present them to the user and let them choose`;
-export const listServicesTool = {
-    name: "list_services",
-    description: DESCRIPTION,
-    inputSchema,
-    jsonInputSchema: {
-        type: "object",
-        properties: {
-            category: { type: "string" },
-            query: { type: "string" },
-        },
-    },
-    async handler(args, api) {
-        assertApi(api);
-        const directory = await api.listServices(args.category);
-        let entries = directory.adapters;
-        if (args.query !== undefined) {
-            const q = args.query.toLowerCase();
-            entries = entries.filter((a) => a.service.toLowerCase().includes(q) ||
-                a.display_name.toLowerCase().includes(q) ||
-                (a.description?.toLowerCase().includes(q) ?? false));
-        }
-        return {
-            services: entries.map((a) => ({
-                service: a.service,
-                version: a.latest_version,
-                display_name: a.display_name,
-                category: a.category,
-                homepage: a.homepage,
-                description: a.description,
-            })),
-        };
-    },
-};
-//# sourceMappingURL=list-services.js.map

package/dist/tools/list-services.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-services.js","sourceRoot":"","sources":["../../src/tools/list-services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAa,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG;;;;;;;;;;;;;;wEAcoD,CAAC;AAEzE,MAAM,CAAC,MAAM,gBAAgB,GAAsC;IACjE,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,WAAW;IACxB,WAAW;IACX,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;KACF;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC;QACjC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACnC,OAAO,GAAG,OAAO,CAAC,MAAM,CACtB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACnC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxC,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CACtD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5B,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,cAAc;gBACzB,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/list-subscriptions.d.ts

@@ -1,6 +0,0 @@
-import { z } from "zod";
-import { type Tool } from "./index.js";
-declare const inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
-export declare const listSubscriptionsTool: Tool<z.infer<typeof inputSchema>>;
-export {};
-//# sourceMappingURL=list-subscriptions.d.ts.map

package/dist/tools/list-subscriptions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-subscriptions.d.ts","sourceRoot":"","sources":["../../src/tools/list-subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAElD,QAAA,MAAM,WAAW,gDAAe,CAAC;AAcjC,eAAO,MAAM,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CASnE,CAAC"}

package/dist/tools/list-subscriptions.js

@@ -1,25 +0,0 @@
-import { z } from "zod";
-import { assertApi } from "./index.js";
-const inputSchema = z.object({});
-const DESCRIPTION = `List the user's active subscriptions across all services. Useful
-when the user asks "what am I paying for?" or to find an existing
-subscription before provisioning a duplicate.
-
-BEHAVIOR:
-- Returns subscriptions in any non-cancelled state
-- Includes service, plan, project_name, monthly cost (if any),
-  and the run_id that created the subscription
-- Idempotency means a re-provision of the same service+project_name
-  returns the existing subscription rather than creating a new one;
-  use this tool to check what's already in place first`;
-export const listSubscriptionsTool = {
-    name: "list_subscriptions",
-    description: DESCRIPTION,
-    inputSchema,
-    jsonInputSchema: { type: "object", properties: {} },
-    async handler(_args, api) {
-        assertApi(api);
-        return api.listSubscriptions();
-    },
-};
-//# sourceMappingURL=list-subscriptions.js.map

package/dist/tools/list-subscriptions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-subscriptions.js","sourceRoot":"","sources":["../../src/tools/list-subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAa,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjC,MAAM,WAAW,GAAG;;;;;;;;;;uDAUmC,CAAC;AAExD,MAAM,CAAC,MAAM,qBAAqB,GAAsC;IACtE,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,WAAW;IACxB,WAAW;IACX,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;IACnD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,GAAG,CAAC,iBAAiB,EAAE,CAAC;IACjC,CAAC;CACF,CAAC"}

package/dist/tools/provision.d.ts

@@ -1,30 +0,0 @@
-import { z } from "zod";
-import { type Tool } from "./index.js";
-declare const inputSchema: z.ZodObject<{
-    service: z.ZodString;
-    plan: z.ZodDefault<z.ZodString>;
-    project_name: z.ZodString;
-    category: z.ZodOptional<z.ZodString>;
-    cost_cents: z.ZodDefault<z.ZodNumber>;
-    recurrence: z.ZodDefault<z.ZodEnum<["one_time", "monthly", "yearly", "none"]>>;
-    requirements: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-}, "strip", z.ZodTypeAny, {
-    service: string;
-    plan: string;
-    project_name: string;
-    cost_cents: number;
-    recurrence: "one_time" | "monthly" | "yearly" | "none";
-    category?: string | undefined;
-    requirements?: Record<string, unknown> | undefined;
-}, {
-    service: string;
-    project_name: string;
-    plan?: string | undefined;
-    category?: string | undefined;
-    cost_cents?: number | undefined;
-    recurrence?: "one_time" | "monthly" | "yearly" | "none" | undefined;
-    requirements?: Record<string, unknown> | undefined;
-}>;
-export declare const provisionTool: Tool<z.infer<typeof inputSchema>>;
-export {};
-//# sourceMappingURL=provision.d.ts.map

package/dist/tools/provision.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../src/tools/provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAElD,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;EAaf,CAAC;AAkCH,eAAO,MAAM,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAiE3D,CAAC"}

package/dist/tools/provision.js

@@ -1,112 +0,0 @@
-import { z } from "zod";
-import { assertApi } from "./index.js";
-const inputSchema = z.object({
-    service: z.string().min(1),
-    plan: z.string().min(1).default("free"),
-    project_name: z.string().min(1).max(120),
-    // The runtime needs category + cost for the mandate evaluator;
-    // the MCP tool's caller may not know these. When omitted, we
-    // request the registry directory for default category.
-    category: z.string().optional(),
-    cost_cents: z.number().int().nonnegative().default(0),
-    recurrence: z
-        .enum(["one_time", "monthly", "yearly", "none"])
-        .default("none"),
-    requirements: z.record(z.string(), z.unknown()).optional(),
-});
-const DESCRIPTION = `Sign up for and configure a SaaS service on the user's behalf, returning
-working credentials. The user has pre-authorized spending within their
-spending policy, so no manual signup, email verification, or card entry
-is needed from them.
-
-WHEN TO CALL THIS TOOL:
-- The user's project needs an API key for any external SaaS
-- You would otherwise instruct the user to "go sign up at example.com"
-- You need a service-specific credential the user does not yet have
-- The user mentions needing hosting, a database, email, monitoring,
-  auth, AI APIs, payments, analytics, error tracking, or similar
-
-FIRST call list_credentials — if the account already has a working key
-for this service, reuse it via get_credential instead of provisioning a
-duplicate.
-
-DO NOT instruct the user to sign up manually if a Squire adapter exists.
-Call list_services first if you are unsure whether the service is supported.
-
-BEHAVIOR:
-- Free tiers are auto-approved within the user's spending policy (silent)
-- Paid tiers above the silent ceiling return status="pending_approval"
-  with a one-click approval link the user can click in their terminal
-- Returns within 3-15 seconds for native adapters, up to 60s for browser-based
-- Stores credentials in the user's vault automatically
-- Idempotent on (user, service, project_name)
-
-AFTER PROVISIONING:
-- Use get_credential() to retrieve the API key for use in code
-- Reference credentials via env vars; do not paste secrets into source files
-- Tell the user what was set up and the cost, even when silent`;
-export const provisionTool = {
-    name: "provision",
-    description: DESCRIPTION,
-    inputSchema,
-    jsonInputSchema: {
-        type: "object",
-        required: ["service", "project_name"],
-        properties: {
-            service: { type: "string" },
-            plan: { type: "string", default: "free" },
-            project_name: { type: "string" },
-            category: { type: "string" },
-            cost_cents: { type: "integer", minimum: 0, default: 0 },
-            recurrence: {
-                type: "string",
-                enum: ["one_time", "monthly", "yearly", "none"],
-                default: "none",
-            },
-            requirements: { type: "object" },
-        },
-    },
-    async handler(args, api) {
-        assertApi(api);
-        // If the caller didn't supply category, look it up in the registry.
-        let category = args.category;
-        if (category === undefined) {
-            const dir = await api.listServices();
-            const match = dir.adapters.find((a) => a.service === args.service);
-            category = match?.category ?? "unknown";
-        }
-        const res = await api.createRun({
-            service: args.service,
-            plan: args.plan,
-            project_name: args.project_name,
-            category,
-            cost_cents: args.cost_cents,
-            recurrence: args.recurrence,
-        });
-        if (res.decision === "silent") {
-            return {
-                status: "active",
-                run_id: res.run.id,
-                run_state: res.run.state,
-                message: "Sign-up enqueued silently within the user's spending policy.",
-            };
-        }
-        if (res.decision === "needs_approval") {
-            return {
-                status: "pending_approval",
-                run_id: res.run.id,
-                run_state: res.run.state,
-                approval_url: res.approval_url,
-                reasons: res.reasons ?? [],
-                required_confidence: res.required_confidence ?? "high",
-                message: "Approval required. Show the user the approval_url so they can confirm.",
-            };
-        }
-        return {
-            status: "rejected",
-            run_id: res.run.id,
-            message: "The mandate rejected this action.",
-        };
-    },
-};
-//# sourceMappingURL=provision.js.map

package/dist/tools/provision.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/tools/provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAa,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,+DAA+D;IAC/D,6DAA6D;IAC7D,uDAAuD;IACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;SAC/C,OAAO,CAAC,MAAM,CAAC;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+DA8B2C,CAAC;AAEhE,MAAM,CAAC,MAAM,aAAa,GAAsC;IAC9D,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,WAAW;IACxB,WAAW;IACX,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC;QACrC,UAAU,EAAE;YACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;YACzC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;YACvD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC;gBAC/C,OAAO,EAAE,MAAM;aAChB;YACD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACjC;KACF;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,oEAAoE;QACpE,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;YACnE,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,SAAS,CAAC;QAC1C,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ;YACR,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE;gBAClB,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK;gBACxB,OAAO,EAAE,8DAA8D;aACxE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACtC,OAAO;gBACL,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE;gBAClB,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK;gBACxB,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;gBAC1B,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,MAAM;gBACtD,OAAO,EAAE,wEAAwE;aAClF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE;YAClB,OAAO,EAAE,mCAAmC;SAC7C,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/rotate-credential.d.ts

@@ -1,12 +0,0 @@
-import { z } from "zod";
-import type { Tool } from "./index.js";
-declare const inputSchema: z.ZodObject<{
-    reference: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    reference: string;
-}, {
-    reference: string;
-}>;
-export declare const rotateCredentialTool: Tool<z.infer<typeof inputSchema>>;
-export {};
-//# sourceMappingURL=rotate-credential.d.ts.map

package/dist/tools/rotate-credential.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rotate-credential.d.ts","sourceRoot":"","sources":["../../src/tools/rotate-credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,QAAA,MAAM,WAAW;;;;;;EAEf,CAAC;AAoBH,eAAO,MAAM,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAqBlE,CAAC"}

package/dist/tools/rotate-credential.js

@@ -1,43 +0,0 @@
-import { z } from "zod";
-const inputSchema = z.object({
-    reference: z.string().min(1),
-});
-const DESCRIPTION = `Rotate a vault-stored credential (e.g. when the user suspects a leak).
-The adapter's rotate flow generates a fresh credential, stores it in
-the vault under the same reference, and revokes the old value at the
-service.
-
-WHEN TO CALL THIS TOOL:
-- The user explicitly asks "rotate the X key"
-- A credential leak has been confirmed
-- Compliance policy requires periodic rotation and the rotation due
-  date has passed
-
-BEHAVIOR:
-- Default confidence requirement is medium (not high) — rotation is a
-  privileged operation but doesn't authorize new spending
-- In v0 the rotate flow is partially wired; the rotate adapter step
-  exists but the runtime's flow selector doesn't pick the rotate flow
-  yet — see chunk 11+ roadmap. This tool currently returns 202.`;
-export const rotateCredentialTool = {
-    name: "rotate_credential",
-    description: DESCRIPTION,
-    inputSchema,
-    jsonInputSchema: {
-        type: "object",
-        required: ["reference"],
-        properties: { reference: { type: "string" } },
-    },
-    async handler(args, _api) {
-        // v0 stub. The endpoint doesn't exist on apps/api yet — the chunk-11
-        // spec lists rotate as a future improvement. We return a clear
-        // not-implemented body so the coding agent can surface this to
-        // the user rather than acting on a false success.
-        return {
-            status: "not_implemented",
-            reference: args.reference,
-            message: "Credential rotation is a v0 stub. The cancel + rotate flow selectors arrive in a later chunk. Track progress at /v1/usage.",
-        };
-    },
-};
-//# sourceMappingURL=rotate-credential.js.map

package/dist/tools/rotate-credential.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rotate-credential.js","sourceRoot":"","sources":["../../src/tools/rotate-credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;gEAgB4C,CAAC;AAEjE,MAAM,CAAC,MAAM,oBAAoB,GAAsC;IACrE,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,WAAW;IACxB,WAAW;IACX,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,WAAW,CAAC;QACvB,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KAC9C;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI;QACtB,qEAAqE;QACrE,+DAA+D;QAC/D,+DAA+D;QAC/D,kDAAkD;QAClD,OAAO;YACL,MAAM,EAAE,iBAAiB;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EACL,4HAA4H;SAC/H,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/wait-for-approval.d.ts

@@ -1,28 +0,0 @@
-import { z } from "zod";
-import type { ApiClient } from "../api-client.js";
-import { type Tool } from "./index.js";
-declare const inputSchema: z.ZodObject<{
-    run_id: z.ZodString;
-    timeout_seconds: z.ZodDefault<z.ZodNumber>;
-    poll_interval_seconds: z.ZodDefault<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-    timeout_seconds: number;
-    run_id: string;
-    poll_interval_seconds: number;
-}, {
-    run_id: string;
-    timeout_seconds?: number | undefined;
-    poll_interval_seconds?: number | undefined;
-}>;
-export declare const waitForApprovalTool: Tool<z.infer<typeof inputSchema>>;
-export declare function waitForApprovalImpl(args: z.infer<typeof inputSchema>, api: ApiClient, options?: {
-    sleep?: (ms: number) => Promise<void>;
-    now?: () => number;
-}): Promise<{
-    status: string;
-    run_state: string;
-    run_id: string;
-    reason?: string;
-}>;
-export {};
-//# sourceMappingURL=wait-for-approval.d.ts.map

package/dist/tools/wait-for-approval.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"wait-for-approval.d.ts","sourceRoot":"","sources":["../../src/tools/wait-for-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAElD,QAAA,MAAM,WAAW;;;;;;;;;;;;EAIf,CAAC;AAcH,eAAO,MAAM,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAiBjE,CAAC;AAEF,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,EACjC,GAAG,EAAE,SAAS,EACd,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GAC1E,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBjF"}

package/dist/tools/wait-for-approval.js

@@ -1,82 +0,0 @@
-import { z } from "zod";
-import { assertApi } from "./index.js";
-const inputSchema = z.object({
-    run_id: z.string().min(1),
-    timeout_seconds: z.number().int().positive().max(600).default(120),
-    poll_interval_seconds: z.number().int().positive().max(30).default(2),
-});
-const DESCRIPTION = `Wait for a run that's in pending_approval to be granted or denied by the user.
-Returns the final status once the run leaves PENDING_APPROVAL or the timeout elapses.
-
-WHEN TO CALL THIS TOOL:
-- After provision() returns status="pending_approval"
-- When you want to block until the user clicks the approval link
-
-BEHAVIOR:
-- Polls the run every poll_interval_seconds (default 2s)
-- Returns once the run leaves PENDING_APPROVAL or timeout_seconds elapses
-- Does NOT auto-grant; only the user can grant via the approval URL`;
-export const waitForApprovalTool = {
-    name: "wait_for_approval",
-    description: DESCRIPTION,
-    inputSchema,
-    jsonInputSchema: {
-        type: "object",
-        required: ["run_id"],
-        properties: {
-            run_id: { type: "string" },
-            timeout_seconds: { type: "integer", minimum: 1, maximum: 600, default: 120 },
-            poll_interval_seconds: { type: "integer", minimum: 1, maximum: 30, default: 2 },
-        },
-    },
-    async handler(args, api) {
-        assertApi(api);
-        return waitForApprovalImpl(args, api);
-    },
-};
-export async function waitForApprovalImpl(args, api, options = {}) {
-    const sleep = options.sleep ?? defaultSleep;
-    const now = options.now ?? (() => Date.now());
-    const deadline = now() + args.timeout_seconds * 1000;
-    while (true) {
-        const run = await api.getRun(args.run_id);
-        if (run.state !== "PENDING_APPROVAL") {
-            return {
-                status: terminalDescription(run.state),
-                run_state: run.state,
-                run_id: run.id,
-                ...(run.failure_reason !== null ? { reason: run.failure_reason } : {}),
-            };
-        }
-        if (now() >= deadline) {
-            return {
-                status: "timeout",
-                run_state: run.state,
-                run_id: run.id,
-                reason: "wait_for_approval_timed_out",
-            };
-        }
-        await sleep(args.poll_interval_seconds * 1000);
-    }
-}
-function defaultSleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
-function terminalDescription(state) {
-    switch (state) {
-        case "PROVISIONING":
-        case "ADAPTER_EXECUTING":
-        case "CRED_EXTRACTED":
-        case "VAULT_WRITTEN":
-            return "granted";
-        case "COMPLETE":
-            return "active";
-        case "REJECTED":
-            return "denied";
-        case "FAILED":
-            return "failed";
-        default:
-            return state.toLowerCase();
-    }
-}
-//# sourceMappingURL=wait-for-approval.js.map

package/dist/tools/wait-for-approval.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"wait-for-approval.js","sourceRoot":"","sources":["../../src/tools/wait-for-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAa,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAClE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CACtE,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG;;;;;;;;;;oEAUgD,CAAC;AAErE,MAAM,CAAC,MAAM,mBAAmB,GAAsC;IACpE,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,WAAW;IACxB,WAAW;IACX,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;YAC5E,qBAAqB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;SAChF;KACF;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAiC,EACjC,GAAc,EACd,UAAyE,EAAE;IAE3E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;IAErD,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;gBACtC,SAAS,EAAE,GAAG,CAAC,KAAK;gBACpB,MAAM,EAAE,GAAG,CAAC,EAAE;gBACd,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,GAAG,CAAC,KAAK;gBACpB,MAAM,EAAE,GAAG,CAAC,EAAE;gBACd,MAAM,EAAE,6BAA6B;aACtC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,cAAc,CAAC;QACpB,KAAK,mBAAmB,CAAC;QACzB,KAAK,gBAAgB,CAAC;QACtB,KAAK,eAAe;YAClB,OAAO,SAAS,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,QAAQ,CAAC;QAClB,KAAK,UAAU;YACb,OAAO,QAAQ,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC"}